last executing test programs: 5.522999496s ago: executing program 1 (id=840): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000240)='./file7\x00', 0xc43, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="acd80c0d60d998833a1cade74acff2316dcd1b77321c8c7923848a29438d7107758ad5b2afaeb99e055ddf01db57db6e50113ba1639931066080a75a3d5b82b8dc4f36671cb8be0e7c3a0b1b5148f8388b5e3eadd2670427b3f90cd3e30f68856df292f6031ac33d8a5b09111dab3b9f871abc2ea3aa10961b853e84e94e460bfd8190c1cb395ffa35900a543a5800cda076438b7a3a3412983abdb1f6e51c764463c5175462e7ccb36c7367e3eaceab1dcc", @ANYRES16=0x0, @ANYBLOB="b940f56b03bb1a415f50f732a91369cb9795c7993f4cfd0c2bff60529bb1572a17f927a60844da24f9d681051c75656585e7d0fa8be5f01fa511ffed2b57eb23df3e4949ea7f2902e5b943a049ed03a1aa1784131cdfa0a4e2af39b8523470a1f7176c446691b303df29ff78c42585de1731975d34ae2441111ac0eafe331526fc325638ccdef6db59154aac6af705481255f279fa4a0b", @ANYRESOCT=0x0, @ANYRES64], 0x84, 0x5f96, &(0x7f000000d1c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]}) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r4 = socket$inet6(0xa, 0x2, 0xfffffffc) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="434759c5614e22462270939f1e7d2604ff00"], 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90010000c000500170308000600090085990000ded9798a6768340c8cfa57a1fcce48e680631537f499fe02c6aab8327b828448f4fc1abf3c8dfad850860f0b8630f1d3e8ab9e06cb984a81e3e8280ebb9eaff1206c01fd6852fea26981a57fb5e5a5b3977f097c36732a60b9060d09dd742aecb6b2c90cec7bd0e7e991b95a4c93510a7a19a1b8f78120a2f34b5be48535c701f6835a6647d43d09fc201427f973ebd2f336d1dadee1f195a15403c494"], 0x15) readahead(r5, 0x0, 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0419"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2726], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.895858491s ago: executing program 0 (id=847): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) pipe2$watch_queue(&(0x7f0000000100), 0x80) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_io_uring_setup(0x5169, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) syz_emit_ethernet(0x31a, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'], 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/49, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x31}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.345018379s ago: executing program 0 (id=851): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b700040000"], 0x4c}}, 0x0) 2.609482949s ago: executing program 0 (id=853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2.604017465s ago: executing program 2 (id=854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000bf"], 0x0, 0x1f}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_MARK={0x8}]}, 0x5c}}, 0x0) 2.505985231s ago: executing program 1 (id=855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) capget(0x0, 0x0) 2.475408506s ago: executing program 3 (id=856): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.347553145s ago: executing program 2 (id=857): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_ext_convert_to_initialized_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0, 0x34}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) 2.318926711s ago: executing program 0 (id=858): epoll_create(0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)=',>\\#\x00Zs\xd4\x00'/25, 0x40, 0x0, &(0x7f0000000140)={0x3c9, 0x1, 0x1}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 2.289962375s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2b6, &(0x7f0000000400)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='syzkaller\x00', 0xffffcb58, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x120c480, &(0x7f0000000340)={[{@noinit_itable}, {@dioread_lock}, {@grpid}, {@auto_da_alloc}, {@oldalloc}, {@nodiscard}, {@i_version}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@discard}, {@init_itable}]}, 0x3, 0x4ea, &(0x7f0000000680)="$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") r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 2.24629101s ago: executing program 4 (id=860): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x0) 2.121769049s ago: executing program 0 (id=861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) rt_sigreturn() writev(r0, 0x0, 0x0) write$9p(r1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000640)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G4\xd7;\xedZ\x98\"\xf2\xe8\xb3\xf75\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\x99\xa8HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xad\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Pu\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x929\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8bY^\xfe\x00\x9f\xd5\xfa\x8b\r\xb8\xf4\xe6\xfd\xcbO_\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xc8\xf6\xcaAvT\x1b\xe6\xb9\xe7\xff\xc5HUlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x01\x00\x00\x00{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00RXN9L\xc0\xcc=+\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x1b\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7Rl\xfc.\x93\xe74\xab>\x9e\xd4%\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x1b\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2D\x9be&\xb5g\xc1\xf2o\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd4\x94\x00\x15\xd1@\xf2\x0f}\x94)\xc5qc\xef\x87\x89c\xa4\"\xab3\xae\xbbqc\xf4m\x9dY\xb0\x11\x1e\x87B\xea\xf2\xe3RM2\xb4\b\xe5g\x02\xd3U\xf9\xc8\xaeW\x13r<\xca\xc6\x81}~O\x90\x0f\xb5\xa7\xf5\xaea)Mi}!^a\xd4\x82\xcc\xa6\xb5\xe9\xf8\x8b\x86\xdd~\x9aE\xd7\'z\x10\x93\xd2\x9e\xb8\x05(J\x06\x04\xaa\xecH\xa87\x00\x00\x00\x00\x00\x00D\xaef,\x00\x83\xec\xd5a\v\x86\xa5\x15\x19\x8a\x10\\TI\xd9z\xcc\x96\x81T\x86\xd0\xe0\x85\x1f\xbe\x00\xa4$\xed\x18RU \xaa\r\x19\xb1\xb5\xec\x16GTW\xa2\xc0\xcf\xf7;=\\s\xe5Y\xfdJ\x01\x9e\b\xf2\fKT\\.\xdc\xd1\x17oC9\x04h\xa4\x8f\xd309\a_\x96\xaff1@MW\xd1?\a\x8bg\xb7\xfc\"\x97\xe0\x88\xb5\xfb\x9e)\x13L\\>F>T\xfb\x1e\x13\xd3\x17`\xc1l\xaa\x9d\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x800000b) pipe2$9p(&(0x7f0000020140)={0xffffffffffffffff}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) rt_sigreturn() ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x5421, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x0, @local}}) 2.056941527s ago: executing program 4 (id=862): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="7f", 0x1}]) 1.77061323s ago: executing program 1 (id=863): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b700040000"], 0x4c}}, 0x0) 1.769417923s ago: executing program 2 (id=864): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() prlimit64(0x0, 0x1, &(0x7f00000000c0), 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) 1.719795651s ago: executing program 0 (id=865): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000001640), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x19, &(0x7f0000000480)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0x1, 0x631, &(0x7f0000001940)="$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") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r5 = dup(r1) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) read$FUSE(r5, &(0x7f0000004400)={0x2020}, 0x2035) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) sendfile(r5, r6, 0x0, 0x80001d00c0d1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = dup3(r4, r6, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x1aee57}) 1.612435574s ago: executing program 3 (id=866): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x88f7}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x36) 1.556265973s ago: executing program 1 (id=867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 1.534731869s ago: executing program 4 (id=868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000bf"], 0x0, 0x1f}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_MARK={0x8}]}, 0x5c}}, 0x0) 1.475861619s ago: executing program 2 (id=869): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 1.280031239s ago: executing program 4 (id=870): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 1.256543783s ago: executing program 3 (id=871): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") syz_open_procfs(0x0, &(0x7f0000003080)='cmdline\x00') r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x5450, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x7840) open(0x0, 0x0, 0x0) 1.11881723s ago: executing program 2 (id=872): mlockall(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = dup3(r1, r0, 0x0) rt_sigreturn() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000100)=""/31, 0x1f, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r7, 0x0, 0x0) poll(0x0, 0x0, 0x100) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) rt_sigreturn() connect$inet(r2, &(0x7f0000002d80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 604.142058ms ago: executing program 4 (id=873): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) capget(0x0, 0x0) 544.155896ms ago: executing program 1 (id=874): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 496.277553ms ago: executing program 3 (id=875): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_ext_convert_to_initialized_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0, 0x34}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) 367.644822ms ago: executing program 4 (id=876): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009b605b08edbf21ee2584eb7d1f453716ae995ecea556026925c58a5e500e0c7791246ad8811d9d89d560fda150ec88b52b8609"], 0xfd, 0x124ab, &(0x7f0000012580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46800) ftruncate(r0, 0x7fff) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="90", 0x1}]) 358.04269ms ago: executing program 1 (id=877): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$inet(0x2, 0x6, 0x0) shutdown(r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30006c6600080041007369770014003300697036746e6c30000000000000005fe9709760c200"], 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='ext4\x00', 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setreuid(0xffffffffffffffff, 0xee00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ac1414aa0300907803000000450000000000000000000000000000ff07141400"], 0x0) 60.072702ms ago: executing program 2 (id=878): syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100)=0x30, 0x0) 0s ago: executing program 3 (id=879): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000280)={[{@nospace_cache}, {@noautodefrag}, {@nobarrier}, {@noautodefrag}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): d to keep mac addresses unique to avoid problems! [ 234.557399][ T5147] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 234.586997][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.594637][ T6894] loop4: detected capacity change from 0 to 32768 [ 234.654132][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.699427][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.733909][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.766781][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.809529][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.848921][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.879211][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.890345][ T6901] syz.4.379: attempt to access beyond end of device [ 234.890345][ T6901] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 234.920172][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.986992][ T6901] lbmIODone: I/O error in JFS log [ 234.994554][ T6901] *** Log Format Error ! *** [ 235.008185][ T6901] lmLogInit: exit(-22) [ 235.017042][ T6901] lmLogOpen: exit(-22) [ 235.022742][ T6795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.058840][ T6795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.067647][ T6795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.078763][ T6795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.079029][ T4490] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 235.249332][ T5147] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 235.339972][ T5228] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.449889][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.470698][ T5147] usb 4-1: Using ep0 maxpacket: 16 [ 235.475063][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.492934][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 235.511334][ T5147] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 235.532500][ T46] usb 1-1: USB disconnect, device number 10 [ 235.538908][ T5228] usb 2-1: Using ep0 maxpacket: 16 [ 235.549254][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.580340][ T5147] usb 4-1: config 0 descriptor?? [ 235.587048][ T5228] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 235.604957][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.614667][ T5228] usb 2-1: Product: syz [ 235.619667][ T5228] usb 2-1: Manufacturer: syz [ 235.624512][ T5228] usb 2-1: SerialNumber: syz [ 235.648663][ T5228] usb 2-1: config 0 descriptor?? [ 235.666507][ T5228] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 235.712286][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.723845][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.792890][ T6902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.840704][ T5104] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.039008][ T5104] usb 5-1: Using ep0 maxpacket: 32 [ 236.050955][ T5104] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.072548][ T5104] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.101841][ T5104] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.139482][ T5104] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 236.139951][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.158094][ T5104] usb 5-1: Product: syz [ 236.172334][ T5104] usb 5-1: Manufacturer: syz [ 236.202029][ T5104] hub 5-1:4.0: USB hub found [ 236.236238][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.276346][ T5147] hid (null): bogus close delimiter [ 236.294403][ T5147] hid (null): unknown global tag 0x83 [ 236.307589][ T5147] hid (null): unknown global tag 0xc [ 236.340288][ T5147] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 236.364493][ T5147] hid-generic 0003:0158:0100.0015: unexpected long global item [ 236.394263][ T5147] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 236.486037][ T5228] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 236.583032][ T6914] syz.4.383 uses old SIOCAX25GETINFO [ 236.702367][ T5228] gp8psk: FPGA Version = 136 [ 236.729563][ T5104] hub 5-1:4.0: 2 ports detected [ 236.903323][ T6904] capability: warning: `syz.1.382' uses 32-bit capabilities (legacy support in use) [ 237.148650][ T5104] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 237.171264][ T5104] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 237.200043][ T5228] gp8psk: usb out operation failed. [ 237.205763][ T5228] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 237.266762][ T5228] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 237.295038][ T5104] usb 5-1: USB disconnect, device number 10 [ 237.321877][ T5228] usb 2-1: USB disconnect, device number 13 [ 237.491302][ T5148] usb 4-1: USB disconnect, device number 16 [ 237.899718][ T5104] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 238.066284][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 238.066305][ T29] audit: type=1326 audit(1719555214.408:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.1.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5bb375b29 code=0x0 [ 238.151954][ T5104] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.197359][ T5104] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.720194][ T5104] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.184975][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.230913][ T5104] usb 3-1: SerialNumber: syz [ 239.512003][ T5104] usb 3-1: 0:2 : does not exist [ 239.573862][ T5104] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 239.598849][ T5228] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 239.744426][ T5104] usb 3-1: USB disconnect, device number 15 [ 239.772625][ T6947] overlayfs: failed to resolve './file0': -2 [ 239.818603][ T5228] usb 1-1: not running at top speed; connect to a high speed hub [ 239.853047][ T5228] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.885903][ T5228] usb 1-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.932850][ T5228] usb 1-1: config 1 interface 0 has no altsetting 0 [ 239.964133][ T5228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.985340][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.995998][ T5526] udevd[5526]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.003678][ T5228] usb 1-1: Product: ࠬ [ 240.033095][ T5228] usb 1-1: Manufacturer: 倊 [ 240.037770][ T5228] usb 1-1: SerialNumber: п [ 240.050448][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.082062][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.211885][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.307549][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.338675][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.381821][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.401646][ T5152] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 240.416539][ T6944] loop4: detected capacity change from 0 to 32768 [ 240.430233][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.506231][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.543548][ T4490] Bluetooth: Wrong link type (-71) [ 240.549067][ T4490] Bluetooth: Unknown BR/EDR signaling command 0xfb [ 240.555627][ T4490] Bluetooth: Wrong link type (-22) [ 240.561550][ T4490] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 240.568093][ T4490] Bluetooth: Wrong link type (-22) [ 240.583580][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.616216][ T5152] usb 4-1: Using ep0 maxpacket: 16 [ 240.625844][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 240.658144][ T5152] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 240.663139][ T6962] syz.4.392: attempt to access beyond end of device [ 240.663139][ T6962] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 240.667628][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.701582][ T5228] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 240.709892][ T5152] usb 4-1: config 0 descriptor?? [ 240.717907][ T6962] lbmIODone: I/O error in JFS log [ 240.723346][ T6961] overlayfs: statfs failed on './file0' [ 240.736551][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 240.737578][ T5228] usb 1-1: USB disconnect, device number 11 [ 240.760469][ T6962] *** Log Format Error ! *** [ 240.766979][ T6962] lmLogInit: exit(-22) [ 240.776079][ T6962] lmLogOpen: exit(-22) [ 240.940779][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 241.470906][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.520767][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.584568][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.647015][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.673300][ T5152] hid (null): unknown global tag 0xc [ 241.702970][ T5152] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 241.713856][ T5152] hid-generic 0003:0158:0100.0016: unexpected long global item [ 241.748830][ T5151] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.501322][ T5152] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 242.585880][ T5152] usb 4-1: USB disconnect, device number 17 [ 242.600693][ T4490] Bluetooth: hci5: command tx timeout [ 242.739185][ T5151] usb 1-1: Using ep0 maxpacket: 16 [ 242.757750][ T5151] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 242.783295][ T5151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.819928][ T5151] usb 1-1: Product: syz [ 242.824148][ T5151] usb 1-1: Manufacturer: syz [ 242.843923][ T5151] usb 1-1: SerialNumber: syz [ 242.858070][ T5151] usb 1-1: config 0 descriptor?? [ 242.878824][ T5151] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 242.979060][ T5228] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.190217][ T5228] usb 3-1: Using ep0 maxpacket: 32 [ 243.196773][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.403'. [ 243.201288][ T5228] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.236609][ T5228] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.259635][ T5228] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 243.273149][ T5228] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 243.288114][ T5228] usb 3-1: Product: syz [ 243.294832][ T5228] usb 3-1: Manufacturer: syz [ 243.318507][ T5228] hub 3-1:4.0: USB hub found [ 243.338073][ T6989] netlink: 'syz.3.405': attribute type 41 has an invalid length. [ 243.529374][ T6996] loop4: detected capacity change from 0 to 128 [ 243.550930][ T6996] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 243.703411][ T5151] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 243.904948][ T5151] gp8psk: FPGA Version = 136 [ 243.908533][ T5228] hub 3-1:4.0: 2 ports detected [ 244.250558][ T5228] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 244.276803][ T5228] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 244.314078][ T5151] gp8psk: usb out operation failed. [ 244.338894][ T5151] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 244.348569][ T5151] dvb_usb_gp8psk 1-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 244.361148][ T5228] usb 3-1: USB disconnect, device number 16 [ 244.404479][ T5151] usb 1-1: USB disconnect, device number 12 [ 244.433295][ T5148] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 244.601812][ T7001] loop1: detected capacity change from 0 to 32768 [ 244.678730][ T5148] usb 4-1: not running at top speed; connect to a high speed hub [ 244.689912][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 244.707012][ T5148] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.727315][ T5148] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.781618][ T5148] usb 4-1: config 1 interface 0 has no altsetting 0 [ 244.804707][ T5148] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.827800][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.863935][ T7014] syz.1.408: attempt to access beyond end of device [ 244.863935][ T7014] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 244.878650][ T5148] usb 4-1: Product: ࠬ [ 244.890412][ T5148] usb 4-1: Manufacturer: 倊 [ 244.895137][ T5148] usb 4-1: SerialNumber: п [ 244.899982][ T7014] lbmIODone: I/O error in JFS log [ 244.905062][ T7014] *** Log Format Error ! *** [ 244.910524][ T7014] lmLogInit: exit(-22) [ 244.918881][ T7014] lmLogOpen: exit(-22) [ 244.948154][ T7006] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.128961][ T5111] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 245.172049][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.229725][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.297384][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.339473][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.357707][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.381917][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.463260][ T5148] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 245.502543][ T5148] usb 4-1: USB disconnect, device number 18 [ 246.056092][ T29] audit: type=1804 audit(1719555222.068:194): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.416" name="/root/syzkaller.RJEzgl/75/file0" dev="sda1" ino=1974 res=1 errno=0 [ 246.759443][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.417'. [ 247.054122][ T7038] loop3: detected capacity change from 0 to 128 [ 247.116051][ T7038] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 247.163631][ T5111] Bluetooth: hci5: command tx timeout [ 247.331256][ T5526] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 247.363069][ T7043] netlink: 'syz.4.420': attribute type 41 has an invalid length. [ 247.728916][ T5228] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 247.959967][ T5228] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.989231][ T5228] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.025357][ T5228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.98 [ 248.058158][ T5228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.129421][ T5228] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 248.235542][ T5526] udevd[5526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.369358][ T5228] usb 4-1: USB disconnect, device number 19 [ 248.731264][ T5148] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 248.839918][ T5111] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 248.850004][ T5111] Bluetooth: hci0: Injecting HCI hardware error event [ 248.858636][ T5111] Bluetooth: hci0: hardware error 0x00 [ 248.923619][ T7055] loop1: detected capacity change from 0 to 32768 [ 248.939205][ T5148] usb 5-1: Using ep0 maxpacket: 32 [ 248.949229][ T5148] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 248.975570][ T5148] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.985168][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.995682][ T5148] usb 5-1: Product: syz [ 249.004416][ T5148] usb 5-1: Manufacturer: syz [ 249.009412][ T5148] usb 5-1: SerialNumber: syz [ 249.021298][ T5148] usb 5-1: config 0 descriptor?? [ 249.029918][ T7060] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 249.130038][ T4490] Bluetooth: hci0: unexpected event for opcode 0x080f [ 249.186959][ T4490] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 249.220265][ T7066] syz.1.424: attempt to access beyond end of device [ 249.220265][ T7066] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 249.233628][ T7066] lbmIODone: I/O error in JFS log [ 249.243472][ T7066] *** Log Format Error ! *** [ 249.255895][ T7066] lmLogInit: exit(-22) [ 249.270490][ T7066] lmLogOpen: exit(-22) [ 249.989325][ T5148] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.281988][ T5148] usb 4-1: Using ep0 maxpacket: 32 [ 250.294907][ T5148] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 250.332199][ T5148] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 250.416990][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 250.480227][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.507903][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 250.536530][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 250.548873][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 250.579638][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.590828][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.611986][ T5148] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 250.628791][ T29] audit: type=1326 audit(1719555226.968:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.651654][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.674523][ T5148] usb 4-1: Product: В [ 250.692245][ T5148] usb 4-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 250.712422][ T29] audit: type=1326 audit(1719555226.968:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.714119][ T5148] usb 4-1: SerialNumber: syz [ 250.749021][ T5152] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 250.779356][ T29] audit: type=1326 audit(1719555227.008:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.782826][ T5148] usb 4-1: config 0 descriptor?? [ 250.810028][ T29] audit: type=1326 audit(1719555227.008:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.833389][ T29] audit: type=1326 audit(1719555227.008:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.854455][ T5148] pvrusb2: Hardware description: Terratec Grabster AV400 [ 250.858024][ T29] audit: type=1326 audit(1719555227.028:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.873581][ T5148] pvrusb2: ********** [ 250.918785][ T5148] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 250.932566][ T5111] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.935229][ T29] audit: type=1326 audit(1719555227.028:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 250.971617][ T5148] pvrusb2: Important functionality might not be entirely working. [ 250.988038][ T5148] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 251.016095][ T5148] pvrusb2: ********** [ 251.020275][ T5152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.033279][ T5152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.033598][ T29] audit: type=1326 audit(1719555227.038:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.048838][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.072916][ T29] audit: type=1326 audit(1719555227.038:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.072972][ T29] audit: type=1326 audit(1719555227.038:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.164067][ T1977] pvrusb2: Invalid write control endpoint [ 251.213027][ T29] audit: type=1326 audit(1719555227.038:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.245686][ T29] audit: type=1326 audit(1719555227.048:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.331864][ T29] audit: type=1326 audit(1719555227.048:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.400287][ T5152] usb 1-1: Product: syz [ 251.406759][ T5152] usb 1-1: Manufacturer: syz [ 251.413307][ T5152] usb 1-1: SerialNumber: syz [ 251.436885][ T29] audit: type=1326 audit(1719555227.048:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.471088][ T1977] pvrusb2: Invalid write control endpoint [ 251.496144][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 251.512116][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 251.516178][ T29] audit: type=1326 audit(1719555227.088:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.528807][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 251.585019][ T29] audit: type=1326 audit(1719555227.088:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.597692][ T1977] pvrusb2: Device being rendered inoperable [ 251.626406][ T29] audit: type=1326 audit(1719555227.088:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.647608][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 251.657537][ T29] audit: type=1326 audit(1719555227.108:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f241bd75b29 code=0x7ffc0000 [ 251.679875][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 251.682300][ T1977] pvrusb2: Attached sub-driver cx25840 [ 251.728286][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 251.749973][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 252.562690][ T46] usb 4-1: USB disconnect, device number 20 [ 252.572398][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.611241][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.774227][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.799249][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.170486][ T5104] usb 5-1: USB disconnect, device number 11 [ 253.224394][ T5152] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 253.282749][ T5152] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 253.309283][ T5152] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 253.571374][ T5152] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 253.664429][ T5152] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 253.703313][ T5152] usb 1-1: USB disconnect, device number 13 [ 253.726357][ T7089] loop3: detected capacity change from 0 to 128 [ 253.734636][ T5152] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 253.774919][ T7089] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 254.149670][ T7098] loop3: detected capacity change from 0 to 128 [ 254.213276][ T7098] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 254.315334][ T7098] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 254.359894][ T7103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.438'. [ 255.216489][ T7108] Zero length message leads to an empty skb [ 255.894473][ T5104] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 256.803119][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.809661][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.940745][ T7120] loop4: detected capacity change from 0 to 64 [ 256.957199][ T7120] hfs: can't find a HFS filesystem on dev loop4 [ 257.048549][ T5104] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.136877][ T1169] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 257.287649][ T5104] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.595292][ T5104] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.619844][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.627917][ T5104] usb 4-1: SerialNumber: syz [ 257.717721][ T7122] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 257.758818][ T1169] usb 2-1: Using ep0 maxpacket: 32 [ 257.781758][ T1169] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 257.817869][ T7122] team0: Port device netdevsim0 added [ 257.818269][ T1169] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 257.848265][ T1169] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 257.877815][ T1169] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.914054][ T5104] usb 4-1: 0:2 : does not exist [ 257.929166][ T1169] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 257.954163][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 257.970124][ T5104] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 257.990051][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 258.003669][ T1169] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.023241][ T1169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.077909][ T1169] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 258.107339][ T5104] usb 4-1: USB disconnect, device number 21 [ 258.119028][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.127083][ T1169] usb 2-1: Product: В [ 258.217059][ T1169] usb 2-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 258.261342][ T1169] usb 2-1: SerialNumber: syz [ 258.282762][ T1169] usb 2-1: config 0 descriptor?? [ 258.306806][ T1169] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.347261][ T1169] pvrusb2: ********** [ 258.376235][ T1169] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.406187][ T1169] pvrusb2: Important functionality might not be entirely working. [ 258.430429][ T5526] udevd[5526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.454164][ T1169] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 258.487600][ T1169] pvrusb2: ********** [ 258.507115][ T1977] pvrusb2: Invalid write control endpoint [ 258.568849][ T1169] usb 2-1: USB disconnect, device number 14 [ 258.699229][ T46] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 258.717337][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.447'. [ 258.799511][ T1977] pvrusb2: Invalid write control endpoint [ 258.823388][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 258.860970][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 258.889024][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 258.929326][ T1977] pvrusb2: Device being rendered inoperable [ 258.950700][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 258.955798][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 258.974822][ T46] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.012946][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 259.014769][ T46] usb 1-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.090046][ T1977] pvrusb2: Attached sub-driver cx25840 [ 259.094996][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 259.095546][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.117757][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.138920][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.161332][ T46] usb 1-1: Product: ࠬ [ 259.165568][ T46] usb 1-1: Manufacturer: 倊 [ 259.191025][ T46] usb 1-1: SerialNumber: п [ 259.201325][ T7139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 259.207994][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.216215][ T7131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.220153][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.233448][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 259.441381][ T5228] vhci_hcd: vhci_device speed not set [ 259.486632][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.499174][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.528954][ T5228] usb 15-1: new full-speed USB device number 4 using vhci_hcd [ 259.592837][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.617979][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.625998][ T7141] vhci_hcd: connection reset by peer [ 259.642049][ T31] vhci_hcd: stop threads [ 259.646354][ T31] vhci_hcd: release socket [ 259.666073][ T31] vhci_hcd: disconnect device [ 259.677922][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.688940][ T1169] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 259.729255][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.796968][ T46] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 259.825716][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.848506][ T46] usb 1-1: USB disconnect, device number 14 [ 259.854820][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.866493][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.875776][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.891895][ T4490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 259.900316][ T1169] usb 2-1: Using ep0 maxpacket: 16 [ 259.906783][ T4490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.947406][ T1169] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 259.966917][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.989098][ T1169] usb 2-1: Product: syz [ 259.993325][ T1169] usb 2-1: Manufacturer: syz [ 260.005727][ T1169] usb 2-1: SerialNumber: syz [ 260.014208][ T1169] usb 2-1: config 0 descriptor?? [ 260.025391][ T1169] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 260.453743][ T7145] chnl_net:caif_netlink_parms(): no params data found [ 260.835034][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.849414][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.865155][ T7145] bridge_slave_0: entered allmulticast mode [ 260.881086][ T7145] bridge_slave_0: entered promiscuous mode [ 260.927349][ T1169] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 260.952845][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 260.998277][ T7164] loop4: detected capacity change from 0 to 128 [ 261.019123][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.038300][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.062798][ T7164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 261.089168][ T7145] bridge_slave_1: entered allmulticast mode [ 261.097274][ T7145] bridge_slave_1: entered promiscuous mode [ 261.134817][ T1169] gp8psk: FPGA Version = 136 [ 261.321334][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.372521][ T1169] gp8psk: usb in 138 operation failed. [ 261.404467][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.428204][ T1169] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 261.464206][ T1169] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 261.487045][ T1169] usb 2-1: USB disconnect, device number 15 [ 261.643125][ T7145] team0: Port device team_slave_0 added [ 261.667442][ T7145] team0: Port device team_slave_1 added [ 261.996573][ T5111] Bluetooth: hci6: command tx timeout [ 262.882376][ T5152] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.949103][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.977690][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.003680][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.052195][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.089754][ T5152] usb 1-1: Using ep0 maxpacket: 32 [ 263.106380][ T5152] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 263.138457][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.145704][ T5152] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 263.158857][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.197763][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 263.238378][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.261669][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 263.272935][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.295330][ T5152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 263.307555][ T5152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 263.324795][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.385446][ T5152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.801987][ T5152] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 263.823010][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.840300][ T5152] usb 1-1: Product: В [ 263.844611][ T5152] usb 1-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 263.859789][ T5152] usb 1-1: SerialNumber: syz [ 263.875662][ T5152] usb 1-1: config 0 descriptor?? [ 263.900574][ T5152] pvrusb2: Hardware description: Terratec Grabster AV400 [ 263.907675][ T5152] pvrusb2: ********** [ 263.912540][ T5152] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 263.923343][ T5152] pvrusb2: Important functionality might not be entirely working. [ 263.931563][ T5152] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 263.945988][ T5152] pvrusb2: ********** [ 264.048822][ T5111] Bluetooth: hci6: command tx timeout [ 264.115351][ T1977] pvrusb2: Invalid write control endpoint [ 264.170520][ T7145] hsr_slave_0: entered promiscuous mode [ 264.189092][ T7145] hsr_slave_1: entered promiscuous mode [ 264.230107][ T7145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.243344][ T7145] Cannot create hsr debugfs directory [ 264.333122][ T1977] pvrusb2: Invalid write control endpoint [ 264.348119][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 264.370589][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 264.387906][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 264.414446][ T1977] pvrusb2: Device being rendered inoperable [ 264.432676][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 264.465117][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 264.478501][ T1977] pvrusb2: Attached sub-driver cx25840 [ 264.496909][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 264.570418][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 264.678508][ T7193] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 264.685183][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.703658][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 264.711250][ T5228] vhci_hcd: vhci_device speed not set [ 264.922875][ T5148] vhci_hcd: vhci_device speed not set [ 265.036989][ T5148] usb 11-1: new full-speed USB device number 5 using vhci_hcd [ 265.171350][ T7145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.275536][ T7145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.389211][ T7194] vhci_hcd: connection closed [ 265.390705][ T61] vhci_hcd: stop threads [ 265.483876][ T5104] usb 1-1: USB disconnect, device number 15 [ 265.587211][ T61] vhci_hcd: release socket [ 265.600694][ T7145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.628107][ T61] vhci_hcd: disconnect device [ 265.770919][ T7145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.927847][ T5147] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 266.093466][ T7145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.118879][ T5111] Bluetooth: hci6: command tx timeout [ 266.154138][ T7145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.269538][ T5147] usb 5-1: not running at top speed; connect to a high speed hub [ 266.309791][ T7145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.349728][ T5147] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.397104][ T5147] usb 5-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.442738][ T7145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.529254][ T5147] usb 5-1: config 1 interface 0 has no altsetting 0 [ 266.586483][ T5147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.654854][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.725402][ T5147] usb 5-1: Product: ࠬ [ 266.751337][ T5147] usb 5-1: Manufacturer: 倊 [ 266.757095][ T5147] usb 5-1: SerialNumber: п [ 266.844818][ T7197] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.120751][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.169595][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.231243][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.258177][ T7199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 267.298078][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.408619][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.448499][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.487590][ T5147] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 267.532114][ T5147] usb 5-1: USB disconnect, device number 12 [ 267.579852][ T5153] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 268.199481][ T5111] Bluetooth: hci6: command tx timeout [ 268.738030][ T5153] usb 1-1: Using ep0 maxpacket: 16 [ 269.319153][ T5153] usb 1-1: device descriptor read/all, error -71 [ 269.526819][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.676432][ T7228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.170989][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.204223][ T5148] vhci_hcd: vhci_device speed not set [ 270.392842][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.400124][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.486754][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.494130][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.658960][ T1169] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 270.861200][ T1169] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.884567][ T1169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.905467][ T1169] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.934397][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.958851][ T1169] usb 5-1: SerialNumber: syz [ 270.964469][ T7223] loop1: detected capacity change from 0 to 40427 [ 271.027393][ T7223] F2FS-fs (loop1): invalid crc value [ 271.075950][ T7223] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.202907][ T1169] usb 5-1: 0:2 : does not exist [ 271.221746][ T1169] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 271.302977][ T1169] usb 5-1: USB disconnect, device number 13 [ 271.322031][ T7223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 271.462893][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.606095][ T5526] udevd[5526]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.807956][ T7246] syz.1.469: attempt to access beyond end of device [ 271.807956][ T7246] loop1: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 271.876194][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 271.876218][ T29] audit: type=1800 audit(1719555248.068:225): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.469" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 272.323206][ T6339] syz-executor: attempt to access beyond end of device [ 272.323206][ T6339] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.395039][ T6339] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 272.530495][ T7249] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 272.537096][ T7249] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.555095][ T7145] veth0_vlan: entered promiscuous mode [ 272.571015][ T7249] vhci_hcd vhci_hcd.0: Device attached [ 272.676064][ T7145] veth1_vlan: entered promiscuous mode [ 272.809862][ T5148] vhci_hcd: vhci_device speed not set [ 272.908018][ T7145] veth0_macvtap: entered promiscuous mode [ 272.919057][ T5148] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 273.030759][ T7145] veth1_macvtap: entered promiscuous mode [ 273.224948][ T7250] vhci_hcd: connection closed [ 273.225433][ T2423] vhci_hcd: stop threads [ 273.272253][ T2423] vhci_hcd: release socket [ 273.290508][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.313007][ T2423] vhci_hcd: disconnect device [ 273.347585][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.434267][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.548774][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.627238][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.709592][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.740842][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.782298][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.832537][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.044023][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.683374][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.862005][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.874367][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.063734][ T29] audit: type=1326 audit(1719555251.408:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.4.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x0 [ 275.118900][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.136805][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.159605][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.176298][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.203761][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.267644][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.302223][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.340199][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.378762][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.409007][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.535917][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.690065][ T7145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.720570][ T7145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.748853][ T7145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.757705][ T7145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.037903][ T7264] loop0: detected capacity change from 0 to 32768 [ 276.293251][ T7277] syz.0.476: attempt to access beyond end of device [ 276.293251][ T7277] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 276.319953][ T7277] lbmIODone: I/O error in JFS log [ 276.326121][ T7277] *** Log Format Error ! *** [ 276.332341][ T7277] lmLogInit: exit(-22) [ 276.336613][ T7277] lmLogOpen: exit(-22) [ 276.703389][ T2448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.762574][ T2448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.260083][ T7285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.612347][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.852856][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.049063][ T5148] vhci_hcd: vhci_device speed not set [ 278.398927][ T5147] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 278.599126][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 278.647093][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 278.671122][ T5147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 279.429284][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.446348][ T5147] usb 1-1: config 0 descriptor?? [ 279.700502][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. [ 279.749111][ T7308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 279.755691][ T7308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 279.800396][ T7308] vhci_hcd vhci_hcd.0: Device attached [ 279.998939][ T5104] vhci_hcd: vhci_device speed not set [ 280.081744][ T5104] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 280.138551][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.178290][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.223934][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.266445][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.346737][ T5147] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 280.387078][ T5147] hid-generic 0003:0158:0100.0017: unexpected long global item [ 280.391494][ T7309] vhci_hcd: connection closed [ 280.396221][ T61] vhci_hcd: stop threads [ 280.415748][ T61] vhci_hcd: release socket [ 280.427167][ T5147] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 280.428971][ T61] vhci_hcd: disconnect device [ 280.561319][ T5151] usb 1-1: USB disconnect, device number 18 [ 280.961529][ T7307] loop3: detected capacity change from 0 to 32768 [ 281.050279][ T7307] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.308299][ T7307] XFS (loop3): Ending clean mount [ 281.318908][ T1169] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 281.349773][ T7307] XFS (loop3): Quotacheck needed: Please wait. [ 281.376331][ T7315] loop4: detected capacity change from 0 to 32768 [ 281.514420][ T7307] XFS (loop3): Quotacheck: Done. [ 281.518793][ T1169] usb 3-1: Using ep0 maxpacket: 16 [ 281.557517][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 281.593777][ T7332] syz.4.488: attempt to access beyond end of device [ 281.593777][ T7332] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 281.618838][ T1169] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 281.655434][ T7332] lbmIODone: I/O error in JFS log [ 281.660634][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.681247][ T1169] usb 3-1: config 0 descriptor?? [ 281.693049][ T7332] *** Log Format Error ! *** [ 281.704357][ T7332] lmLogInit: exit(-22) [ 281.724953][ T7332] lmLogOpen: exit(-22) [ 281.825163][ T5106] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.003907][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 282.158913][ T7337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.990868][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.004390][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 283.015385][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.060586][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.101586][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.339376][ T1169] usbhid 3-1:0.0: can't add hid device: -71 [ 283.388080][ T1169] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.416932][ T1169] usb 3-1: USB disconnect, device number 17 [ 283.588898][ T29] audit: type=1326 audit(1719555259.928:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6abaf75b29 code=0x0 [ 284.888240][ T29] audit: type=1326 audit(1719555261.228:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.0.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd235775b29 code=0x0 [ 284.910211][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.347331][ T29] audit: type=1326 audit(1719555262.308:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abaf75b29 code=0x7fc00000 [ 286.670450][ T7379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 286.677016][ T7379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 286.685221][ T7379] vhci_hcd vhci_hcd.0: Device attached [ 286.709508][ T5104] vhci_hcd: vhci_device speed not set [ 286.716811][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.496'. [ 286.959249][ T5104] vhci_hcd: vhci_device speed not set [ 287.041529][ T7386] vhci_hcd: connection closed [ 287.042362][ T1104] vhci_hcd: stop threads [ 287.059150][ T5104] usb 13-1: device descriptor read/64, error -110 [ 287.074132][ T1104] vhci_hcd: release socket [ 287.108830][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 288.258298][ T7400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.785372][ T5104] vhci_hcd: vhci_device speed not set [ 288.846956][ T1104] vhci_hcd: disconnect device [ 289.571369][ T7411] loop2: detected capacity change from 0 to 128 [ 290.238912][ T7411] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 290.639282][ T5153] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 291.079240][ T5153] usb 2-1: Using ep0 maxpacket: 16 [ 291.307805][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 291.394860][ T5148] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 291.447895][ T5148] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 291.526342][ T5153] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 291.655044][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.669631][ T5148] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 291.680585][ T5153] usb 2-1: config 0 descriptor?? [ 291.698896][ T29] audit: type=1326 audit(1719555267.988:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 291.847034][ T29] audit: type=1326 audit(1719555267.988:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 291.927463][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 291.945316][ T29] audit: type=1326 audit(1719555267.988:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 291.969293][ T29] audit: type=1326 audit(1719555267.988:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 291.992544][ T29] audit: type=1326 audit(1719555267.988:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.043226][ T29] audit: type=1326 audit(1719555267.988:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.078076][ T29] audit: type=1326 audit(1719555267.988:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.135396][ T29] audit: type=1326 audit(1719555267.988:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.198866][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.217610][ T29] audit: type=1326 audit(1719555267.988:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.242960][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.272941][ T29] audit: type=1326 audit(1719555267.988:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x7fc00000 [ 292.287693][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.461979][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.924896][ T5228] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 292.997640][ T7449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.682460][ T5228] usb 3-1: Using ep0 maxpacket: 16 [ 293.713054][ T5153] usbhid 2-1:0.0: can't add hid device: -71 [ 293.745054][ T5228] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 293.765161][ T5153] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 293.807381][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.849912][ T5153] usb 2-1: USB disconnect, device number 16 [ 293.868225][ T5228] usb 3-1: Product: syz [ 293.897375][ T5228] usb 3-1: Manufacturer: syz [ 294.037446][ T5228] usb 3-1: SerialNumber: syz [ 294.064931][ T5228] usb 3-1: config 0 descriptor?? [ 294.092282][ T5228] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 294.203224][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.519'. [ 295.569979][ T5228] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 295.855844][ T5228] gp8psk: FPGA Version = 136 [ 296.138348][ T5228] gp8psk: usb in 138 operation failed. [ 296.145717][ T5228] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 296.635624][ T5228] dvb_usb_gp8psk 3-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 296.652977][ T5151] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 296.714010][ T5151] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 296.714531][ T5228] usb 3-1: USB disconnect, device number 18 [ 296.729895][ T5151] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 298.007327][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.014553][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.021568][ T7482] loop1: detected capacity change from 0 to 128 [ 298.169768][ T7482] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 298.257902][ T7482] sysv_free_block: trying to free block not in datazone [ 298.428871][ T5150] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 299.067911][ T6339] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 299.144924][ T7497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.531'. [ 299.495378][ T7505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.521420][ T5111] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 299.529487][ T5111] Bluetooth: Wrong link type (-22) [ 300.061428][ T5150] usb 4-1: not running at top speed; connect to a high speed hub [ 300.070914][ T5150] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.081271][ T5150] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.170590][ T5150] usb 4-1: config 1 interface 0 has no altsetting 0 [ 301.194580][ T5150] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.259441][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.386708][ T5150] usb 4-1: can't set config #1, error -71 [ 301.444926][ T7508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.532'. [ 301.623664][ T5150] usb 4-1: USB disconnect, device number 22 [ 304.025829][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.543'. [ 304.620366][ T1169] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 304.858832][ T5228] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 304.884097][ T1169] usb 4-1: Using ep0 maxpacket: 16 [ 304.895592][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 304.923798][ T1169] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 304.945624][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.986106][ T1169] usb 4-1: config 0 descriptor?? [ 305.051564][ T5228] usb 3-1: not running at top speed; connect to a high speed hub [ 305.080247][ T5228] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.108298][ T5228] usb 3-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.142096][ T5228] usb 3-1: config 1 interface 0 has no altsetting 0 [ 305.162038][ T5228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.178853][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.198826][ T5228] usb 3-1: Product: ࠬ [ 305.203049][ T5228] usb 3-1: Manufacturer: 倊 [ 305.221407][ T5228] usb 3-1: SerialNumber: п [ 305.235876][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.545'. [ 305.266041][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.274273][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 305.331828][ T7561] team0: entered promiscuous mode [ 305.340857][ T7561] team_slave_0: entered promiscuous mode [ 305.346894][ T7561] team_slave_1: entered promiscuous mode [ 305.382248][ T7561] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 305.410452][ T7560] team0: left promiscuous mode [ 305.430268][ T7560] team_slave_0: left promiscuous mode [ 305.435954][ T7560] team_slave_1: left promiscuous mode [ 305.459026][ T7560] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 305.493977][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.537388][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.633738][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.662064][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.706225][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.749426][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.870860][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.899264][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.936503][ T5228] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 305.954653][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.016423][ T5228] usb 3-1: USB disconnect, device number 19 [ 306.033276][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.066798][ T1169] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 306.100218][ T1169] hid-generic 0003:0158:0100.001A: unexpected long global item [ 306.160560][ T1169] hid-generic 0003:0158:0100.001A: probe with driver hid-generic failed with error -22 [ 306.881036][ T1169] usb 4-1: USB disconnect, device number 23 [ 307.414794][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.555'. [ 307.447414][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.554'. [ 307.654608][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.552'. [ 307.869426][ T1169] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.936617][ T7598] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 307.944284][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 307.944304][ T29] audit: type=1326 audit(1719555284.288:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.0.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd235775b29 code=0x0 [ 308.088860][ T1169] usb 4-1: Using ep0 maxpacket: 16 [ 308.146282][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 308.326658][ T7598] team0: Port device netdevsim0 added [ 308.950900][ T1169] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 308.976860][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.997149][ T1169] usb 4-1: config 0 descriptor?? [ 309.157205][ T29] audit: type=1804 audit(1719555285.488:297): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.560" name="/root/syzkaller.EqA2Vv/16/file0" dev="sda1" ino=1981 res=1 errno=0 [ 309.289026][ T29] audit: type=1804 audit(1719555285.528:298): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.560" name="/root/syzkaller.EqA2Vv/16/file0" dev="sda1" ino=1981 res=1 errno=0 [ 309.677578][ T1169] usbhid 4-1:0.0: can't add hid device: -71 [ 309.869585][ T1169] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.894381][ T7611] kvm: emulating exchange as write [ 309.909518][ T1169] usb 4-1: USB disconnect, device number 24 [ 310.151491][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.563'. [ 310.208539][ T29] audit: type=1326 audit(1719555286.548:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.1.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5bb375b29 code=0x0 [ 310.230317][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.287894][ T29] audit: type=1326 audit(1719555286.618:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 310.424295][ T29] audit: type=1326 audit(1719555286.618:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 310.452393][ T29] audit: type=1326 audit(1719555286.618:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 310.531157][ T29] audit: type=1326 audit(1719555286.618:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 310.596800][ T29] audit: type=1326 audit(1719555286.618:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 310.648332][ T29] audit: type=1326 audit(1719555286.618:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80aa575b29 code=0x7fc00000 [ 311.538866][ T7633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 311.545436][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 311.587195][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 311.662977][ T7642] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 311.676677][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.569'. [ 311.778854][ T5153] vhci_hcd: vhci_device speed not set [ 311.778892][ T1169] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 311.908135][ T5153] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 312.403911][ T7637] vhci_hcd: connection closed [ 312.421686][ T2888] vhci_hcd: stop threads [ 312.468468][ T2888] vhci_hcd: release socket [ 312.494347][ T2888] vhci_hcd: disconnect device [ 312.507732][ T1169] usb 3-1: Using ep0 maxpacket: 16 [ 312.542497][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 312.574970][ T1169] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 312.601748][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.635456][ T1169] usb 3-1: config 0 descriptor?? [ 312.861318][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 313.049043][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 313.049064][ T29] audit: type=1326 audit(1719555289.388:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.1.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5bb375b29 code=0x0 [ 313.291032][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.350794][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.467906][ T1169] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 313.488958][ T1169] hid-generic 0003:0158:0100.001B: unexpected long global item [ 313.497393][ T1169] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 313.818200][ T1169] usb 3-1: USB disconnect, device number 20 [ 314.520507][ T7691] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 314.527097][ T7691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.583356][ T7691] vhci_hcd vhci_hcd.0: Device attached [ 314.779002][ T46] vhci_hcd: vhci_device speed not set [ 314.859025][ T46] usb 11-1: new full-speed USB device number 6 using vhci_hcd [ 315.261846][ T7719] geneve2: entered promiscuous mode [ 315.273838][ T7719] geneve2: entered allmulticast mode [ 315.309375][ T7693] vhci_hcd: connection reset by peer [ 315.323959][ T1104] vhci_hcd: stop threads [ 315.328294][ T1104] vhci_hcd: release socket [ 315.333458][ T1104] vhci_hcd: disconnect device [ 315.454933][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'. [ 315.529002][ T7728] loop0: detected capacity change from 0 to 512 [ 315.628301][ T7728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.659453][ T7728] ext4 filesystem being mounted at /root/syzkaller.QBLqzk/48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.888945][ T6347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.966615][ T7744] loop1: detected capacity change from 0 to 1024 [ 315.991527][ T7742] loop3: detected capacity change from 0 to 2048 [ 316.051315][ T7742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.422442][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 316.447824][ T7750] team0: entered promiscuous mode [ 316.461467][ T7750] team_slave_0: entered promiscuous mode [ 316.469939][ T7750] team_slave_1: entered promiscuous mode [ 316.479990][ T7750] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 316.596051][ T7748] team0: left promiscuous mode [ 316.629388][ T7748] team_slave_0: left promiscuous mode [ 316.643239][ T5526] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 316.649800][ T7748] team_slave_1: left promiscuous mode [ 316.658410][ T7748] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 316.759948][ T7757] geneve2: entered promiscuous mode [ 316.772911][ T7757] geneve2: entered allmulticast mode [ 317.175203][ T7767] loop3: detected capacity change from 0 to 2048 [ 317.228285][ T7767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.492802][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.500683][ T7771] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 8192 lbcount: 12288 extent 65+8192 [ 317.516446][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552234][ T7773] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 317.558894][ T7773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.566680][ T5153] vhci_hcd: vhci_device speed not set [ 317.590854][ T7773] vhci_hcd vhci_hcd.0: Device attached [ 317.788823][ T5228] vhci_hcd: vhci_device speed not set [ 318.044667][ T5228] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 318.747123][ T7775] vhci_hcd: connection closed [ 318.747556][ T31] vhci_hcd: stop threads [ 318.800182][ T31] vhci_hcd: release socket [ 318.810318][ T31] vhci_hcd: disconnect device [ 318.976458][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 319.040934][ T7791] team0: entered promiscuous mode [ 319.090603][ T7791] team_slave_0: entered promiscuous mode [ 319.124955][ T7791] team_slave_1: entered promiscuous mode [ 319.168223][ T7790] team0: left promiscuous mode [ 319.212789][ T7790] team_slave_0: left promiscuous mode [ 319.246990][ T7790] team_slave_1: left promiscuous mode [ 319.383340][ T7794] geneve2: entered promiscuous mode [ 319.571916][ T7794] geneve2: entered allmulticast mode [ 320.021459][ T7811] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 320.037487][ T7811] netlink: 'syz.1.627': attribute type 8 has an invalid length. [ 320.053102][ T46] vhci_hcd: vhci_device speed not set [ 320.066644][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 320.510800][ T7828] loop4: detected capacity change from 0 to 512 [ 320.524525][ T7828] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.168023][ T7832] syzkaller1: entered promiscuous mode [ 321.274358][ T7832] syzkaller1: entered allmulticast mode [ 321.298478][ T7828] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.629: corrupted in-inode xattr: invalid ea_ino [ 321.317670][ T7828] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.629: couldn't read orphan inode 12 (err -117) [ 321.340055][ T7828] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.489079][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 321.603401][ T5335] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 321.671675][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 321.730258][ T7843] team0: entered promiscuous mode [ 321.735379][ T7843] team_slave_0: entered promiscuous mode [ 321.768197][ T7843] team_slave_1: entered promiscuous mode [ 321.825310][ T7841] team0: left promiscuous mode [ 321.856498][ T7841] team_slave_0: left promiscuous mode [ 321.875617][ T7841] team_slave_1: left promiscuous mode [ 321.993381][ T7808] loop2: detected capacity change from 0 to 32768 [ 322.651279][ T7808] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 322.663654][ T7808] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 322.673769][ T7808] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 322.673769][ T7808] running recovery passes: check_allocations [ 322.806491][ T7808] bcachefs (loop2): accounting_read... done [ 322.814931][ T7808] bcachefs (loop2): alloc_read... done [ 322.822981][ T7808] bcachefs (loop2): stripes_read... done [ 322.832926][ T7808] bcachefs (loop2): snapshots_read... done [ 322.843913][ T7808] bcachefs (loop2): check_allocations... [ 323.160905][ T5228] vhci_hcd: vhci_device speed not set [ 323.564548][ T7808] btree ptr not marked in member info btree allocated bitmap [ 323.564623][ T7808] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 323.646691][ T7808] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 7 [ 323.672061][ T7808] bcachefs (loop2): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 323.708321][ T7808] bcachefs (loop2): bch2_gc_btree(): error fsck_errors_not_fixed [ 323.735248][ T7808] bcachefs (loop2): bch2_gc_btrees(): error fsck_errors_not_fixed [ 323.784366][ T7808] bcachefs (loop2): bch2_check_allocations(): error fsck_errors_not_fixed [ 323.819023][ T7808] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed [ 323.852675][ T7808] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 323.884060][ T7893] team0: Port device team_slave_0 removed [ 323.892921][ T7808] bcachefs (loop2): shutting down [ 323.896561][ T7893] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 323.945901][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 323.972535][ T7808] bcachefs (loop2): shutdown complete [ 324.074847][ T7898] syzkaller1: entered promiscuous mode [ 324.088958][ T7898] syzkaller1: entered allmulticast mode [ 324.136770][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 324.196009][ T7891] loop0: detected capacity change from 0 to 32768 [ 324.411497][ T7908] syz.0.644: attempt to access beyond end of device [ 324.411497][ T7908] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 324.424892][ T7908] lbmIODone: I/O error in JFS log [ 324.441113][ T7908] *** Log Format Error ! *** [ 324.477062][ T7908] lmLogInit: exit(-22) [ 324.511053][ T7908] lmLogOpen: exit(-22) [ 324.869839][ T29] audit: type=1804 audit(1719555301.218:367): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.652" name="/root/syzkaller.BMy5Bt/160/file0" dev="sda1" ino=1998 res=1 errno=0 [ 325.134304][ T7915] loop3: detected capacity change from 0 to 512 [ 325.343279][ T7915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.399273][ T7915] ext4 filesystem being mounted at /root/syzkaller.BMy5Bt/161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.655267][ T5106] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.819061][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 327.157717][ T7946] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 327.265587][ T7946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 327.676905][ T7961] loop2: detected capacity change from 0 to 512 [ 327.715805][ T7961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.796647][ T7961] ext4 filesystem being mounted at /root/syzkaller.EqA2Vv/33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.129330][ T7145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.233519][ T7944] loop3: detected capacity change from 0 to 40427 [ 328.269030][ T7944] F2FS-fs (loop3): invalid crc value [ 328.330852][ T7944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.411071][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 328.643592][ T7944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 329.159651][ T7987] syz.3.663: attempt to access beyond end of device [ 329.159651][ T7987] loop3: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 329.204344][ T29] audit: type=1800 audit(1719555305.418:368): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.663" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 329.713407][ T5106] syz-executor: attempt to access beyond end of device [ 329.713407][ T5106] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.769460][ T5106] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 330.012191][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.029034][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.040078][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.052516][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.071566][ T4490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 330.097595][ T4490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.204561][ T7997] syzkaller1: entered promiscuous mode [ 330.238445][ T7997] syzkaller1: entered allmulticast mode [ 330.294390][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.678'. [ 330.384741][ T8004] loop4: detected capacity change from 0 to 1764 [ 331.007113][ T8018] loop3: detected capacity change from 0 to 1024 [ 331.055781][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.080755][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 331.283162][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 331.299153][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 331.313047][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.325770][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.336867][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.349924][ T8] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 331.359054][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.386660][ T8] usb 5-1: config 0 descriptor?? [ 331.564683][ T5106] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.914960][ T8] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 331.932278][ T8] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 331.947595][ T8] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 331.979058][ T8] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 331.997856][ T8] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 332.077059][ T8] ntrig 0003:1B96:000A.001C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 332.199980][ T5111] Bluetooth: hci6: command tx timeout [ 332.217614][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.319985][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.327917][ T8] usb 5-1: USB disconnect, device number 15 [ 332.341998][ T7994] bridge_slave_0: entered allmulticast mode [ 332.350330][ T7994] bridge_slave_0: entered promiscuous mode [ 332.376314][ T8047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 332.382885][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 332.393031][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.408112][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.420911][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 332.431057][ T7994] bridge_slave_1: entered allmulticast mode [ 332.456028][ T7994] bridge_slave_1: entered promiscuous mode [ 332.618882][ T46] vhci_hcd: vhci_device speed not set [ 332.654085][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.696348][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.722977][ T46] usb 15-1: new full-speed USB device number 5 using vhci_hcd [ 332.941921][ T7994] team0: Port device team_slave_0 added [ 333.015753][ T7994] team0: Port device team_slave_1 added [ 333.330707][ T8048] vhci_hcd: connection closed [ 333.334719][ T52] vhci_hcd: stop threads [ 333.369378][ T52] vhci_hcd: release socket [ 333.374035][ T52] vhci_hcd: disconnect device [ 333.503291][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.565715][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.654759][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 333.719307][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.787866][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.813059][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.931712][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.080770][ T8068] team0: Port device team_slave_0 removed [ 334.103226][ T8068] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 334.279250][ T5111] Bluetooth: hci6: command tx timeout [ 334.485325][ T7994] hsr_slave_0: entered promiscuous mode [ 334.519728][ T7994] hsr_slave_1: entered promiscuous mode [ 334.532109][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.552261][ T7994] Cannot create hsr debugfs directory [ 334.629362][ T1169] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 334.839136][ T1169] usb 1-1: Using ep0 maxpacket: 32 [ 334.846831][ T1169] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.867862][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.895319][ T1169] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 334.936649][ T1169] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 334.976779][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.995987][ T1169] usb 1-1: config 0 descriptor?? [ 335.179273][ T7994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.229159][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 335.449163][ T7994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.469820][ T1169] ntrig 0003:1B96:000A.001D: unknown main item tag 0x0 [ 335.494665][ T1169] ntrig 0003:1B96:000A.001D: unknown main item tag 0x0 [ 335.519315][ T1169] ntrig 0003:1B96:000A.001D: unknown main item tag 0x0 [ 335.526409][ T1169] ntrig 0003:1B96:000A.001D: unknown main item tag 0x0 [ 335.545254][ T1169] ntrig 0003:1B96:000A.001D: unknown main item tag 0x0 [ 335.629166][ T1169] ntrig 0003:1B96:000A.001D: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 335.652391][ T7994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.741901][ T1169] usb 1-1: USB disconnect, device number 19 [ 335.880028][ T7994] team0: Port device netdevsim0 removed [ 335.915591][ T7994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.057000][ T29] audit: type=1326 audit(1719555312.398:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.3.720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6abaf75b29 code=0x0 [ 336.251820][ T7994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.327099][ T7994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.369098][ T5111] Bluetooth: hci6: command tx timeout [ 336.440022][ T7994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.647515][ T7994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.806399][ T8161] loop1: detected capacity change from 0 to 8 [ 337.881383][ T46] vhci_hcd: vhci_device speed not set [ 338.184619][ T8161] SQUASHFS error: lzo decompression failed, data probably corrupt [ 338.203789][ T8161] SQUASHFS error: Failed to read block 0x91: -5 [ 338.226197][ T8161] SQUASHFS error: Unable to read metadata cache entry [8f] [ 338.259252][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 338.285615][ T8161] SQUASHFS error: Unable to read inode 0x11f [ 338.350063][ T8174] loop0: detected capacity change from 0 to 64 [ 338.392645][ T8154] loop1: detected capacity change from 0 to 1024 [ 338.399659][ T8154] hfsplus: unable to parse mount options [ 338.438872][ T5111] Bluetooth: hci6: command tx timeout [ 338.442579][ T8173] loop3: detected capacity change from 0 to 1024 [ 338.500776][ T5441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 338.577232][ T8173] hfsplus: invalid catalog entry type in lookup [ 338.613136][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.834373][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.897087][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.904359][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.938847][ T5150] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 338.997811][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.005079][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.038345][ T29] audit: type=1326 audit(1719555315.378:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.0.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd235775b29 code=0x0 [ 339.069721][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 339.417995][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.442556][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.452716][ T5150] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 339.463305][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.474322][ T5150] usb 4-1: config 0 descriptor?? [ 339.601991][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 339.702173][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.897820][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.948565][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.995680][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 340.020746][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.061672][ T9] usb 2-1: config 0 descriptor?? [ 340.096203][ T5150] usbhid 4-1:0.0: can't add hid device: -71 [ 340.130573][ T5150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.194988][ T5150] usb 4-1: USB disconnect, device number 25 [ 340.217793][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.388955][ T7994] veth0_vlan: entered promiscuous mode [ 340.427515][ T7994] veth1_vlan: entered promiscuous mode [ 340.525648][ T7994] veth0_macvtap: entered promiscuous mode [ 340.543336][ T7994] veth1_macvtap: entered promiscuous mode [ 340.561565][ T9] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 340.578609][ T9] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 340.616860][ T9] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 340.633898][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.638490][ T9] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 340.669626][ T9] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 340.676755][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.702194][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.713118][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.723419][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.734130][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.748236][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.751833][ T9] ntrig 0003:1B96:000A.001E: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 340.770568][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.781329][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.793506][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.813214][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.824069][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.834266][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.845147][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.872366][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.877364][ T9] usb 2-1: USB disconnect, device number 17 [ 340.931952][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.018570][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.088778][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.128957][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.168811][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.190097][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.199254][ T29] audit: type=1800 audit(1719555317.538:371): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.741" name="file0" dev="sda1" ino=1993 res=0 errno=0 [ 341.211756][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.233229][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.246322][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.261791][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.271888][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.283095][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.295271][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.385822][ T7994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.422496][ T8210] loop3: detected capacity change from 0 to 256 [ 341.441841][ T8210] FAT-fs (loop3): Unrecognized mount option "shortname=moi8-ru" or missing value [ 341.453322][ T7994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.472153][ T7994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.491538][ T7994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.738034][ T8211] block nbd0: shutting down sockets [ 341.949622][ T29] audit: type=1326 audit(1719555318.288:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241bd75b29 code=0x0 [ 342.078292][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.201321][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.929972][ T2448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.999543][ T2448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.144332][ T8238] loop1: detected capacity change from 0 to 1024 [ 343.153211][ T8238] hfsplus: unable to parse mount options [ 343.399128][ T5526] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 343.598913][ T29] audit: type=1800 audit(1719555319.858:373): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.751" name="bus" dev="sda1" ino=1992 res=0 errno=0 [ 343.983999][ T8245] loop4: detected capacity change from 0 to 512 [ 344.080763][ T8245] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.287842][ T8245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 344.376990][ T8245] EXT4-fs (loop4): 1 orphan inode deleted [ 344.383979][ T8245] EXT4-fs (loop4): 1 truncate cleaned up [ 344.392676][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.454194][ T8245] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 344.523795][ T8245] EXT4-fs (loop4): Remounting filesystem read-only [ 344.607692][ T5335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.310279][ T8266] loop4: detected capacity change from 0 to 512 [ 345.353920][ T8266] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.758: casefold flag without casefold feature [ 345.384563][ T8266] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.758: couldn't read orphan inode 15 (err -117) [ 345.411951][ T8266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.517791][ T8271] loop1: detected capacity change from 0 to 1024 [ 345.624135][ T5335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.635152][ T8271] EXT4-fs: Ignoring removed nobh option [ 345.732328][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.847509][ T8279] loop3: detected capacity change from 0 to 256 [ 346.157455][ T8279] FAT-fs (loop3): Directory bread(block 64) failed [ 346.209287][ T8279] FAT-fs (loop3): Directory bread(block 65) failed [ 346.216053][ T8279] FAT-fs (loop3): Directory bread(block 66) failed [ 346.888890][ T8279] FAT-fs (loop3): Directory bread(block 67) failed [ 346.953235][ T8279] FAT-fs (loop3): Directory bread(block 68) failed [ 347.002297][ T8279] FAT-fs (loop3): Directory bread(block 69) failed [ 347.043723][ T8279] FAT-fs (loop3): Directory bread(block 70) failed [ 347.083165][ T8279] FAT-fs (loop3): Directory bread(block 71) failed [ 347.118500][ T8279] FAT-fs (loop3): Directory bread(block 72) failed [ 347.125256][ T8279] FAT-fs (loop3): Directory bread(block 73) failed [ 347.295011][ T6339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.317834][ T29] audit: type=1326 audit(1719555323.658:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.366883][ T8279] syz.3.763: attempt to access beyond end of device [ 347.366883][ T8279] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 347.405476][ T29] audit: type=1326 audit(1719555323.658:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.499295][ T29] audit: type=1326 audit(1719555323.698:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.592716][ T8299] loop2: detected capacity change from 0 to 8192 [ 347.601280][ T29] audit: type=1326 audit(1719555323.698:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.660278][ T29] audit: type=1326 audit(1719555323.708:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.688152][ T29] audit: type=1326 audit(1719555323.728:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.738426][ T29] audit: type=1326 audit(1719555323.728:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.764365][ T8299] loop2: p1 < > p2 p3 p4 < p5 > [ 347.809737][ T29] audit: type=1326 audit(1719555323.748:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.832932][ T29] audit: type=1326 audit(1719555323.748:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 347.859911][ T8299] loop2: p3 size 16744448 extends beyond EOD, truncated [ 347.870410][ T8314] loop3: detected capacity change from 0 to 128 [ 348.545486][ T29] audit: type=1326 audit(1719555323.748:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318fb75b29 code=0x7ffc0000 [ 349.246415][ T5526] udevd[5526]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 349.258402][ T5145] udevd[5145]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 349.274630][ T5146] udevd[5146]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 349.295443][ T5441] udevd[5441]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 349.316403][ T5336] udevd[5336]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 349.346365][ T1152] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 349.765479][ T1152] usb 1-1: Using ep0 maxpacket: 8 [ 349.775812][ T1152] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 349.798892][ T1152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.076729][ T1152] usb 1-1: config 0 descriptor?? [ 350.519760][ T5111] Bluetooth: hci5: command 0x0406 tx timeout [ 350.526557][ T1152] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 350.715110][ T1152] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 350.726923][ T1152] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 350.738924][ T1152] asix 1-1:0.0: probe with driver asix failed with error -32 [ 352.261972][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 352.885855][ T8370] loop2: detected capacity change from 0 to 2048 [ 352.971806][ T8370] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 353.035215][ T8370] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 353.077411][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 353.089621][ T8370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.118565][ T8377] team0: entered promiscuous mode [ 353.144076][ T8377] team_slave_1: entered promiscuous mode [ 353.307809][ T8377] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 353.340325][ T8375] team0: left promiscuous mode [ 353.345168][ T8375] team_slave_1: left promiscuous mode [ 353.379743][ T8375] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 353.528847][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 353.528921][ T29] audit: type=1800 audit(1719555329.828:409): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.787" name="bus" dev="loop2" ino=1368 res=0 errno=0 [ 354.277426][ T8380] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 354.318974][ T5147] usb 1-1: USB disconnect, device number 20 [ 355.584222][ T8402] loop3: detected capacity change from 0 to 128 [ 359.333303][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 359.361135][ T8452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 359.367704][ T8452] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 359.402425][ T8451] team0: entered promiscuous mode [ 359.407813][ T8451] team_slave_0: entered promiscuous mode [ 359.415295][ T8451] team_slave_1: entered promiscuous mode [ 359.438050][ T8452] vhci_hcd vhci_hcd.0: Device attached [ 359.486222][ T8449] team0: left promiscuous mode [ 359.497143][ T8449] team_slave_0: left promiscuous mode [ 359.521140][ T8449] team_slave_1: left promiscuous mode [ 359.628937][ T5147] vhci_hcd: vhci_device speed not set [ 359.728988][ T5147] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 359.972606][ T8463] loop2: detected capacity change from 0 to 2048 [ 360.024644][ T8463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.079022][ T8453] vhci_hcd: connection reset by peer [ 360.086864][ T8469] loop1: detected capacity change from 0 to 1024 [ 360.094018][ T2829] vhci_hcd: stop threads [ 360.099121][ T2829] vhci_hcd: release socket [ 360.119228][ T2829] vhci_hcd: disconnect device [ 360.147458][ T8469] ext4: Unknown parameter 'func' [ 360.239163][ T5526] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 360.401127][ T29] audit: type=1800 audit(1719555336.748:410): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.820" name="file1" dev="sda1" ino=1994 res=0 errno=0 [ 361.494665][ T8479] loop4: detected capacity change from 0 to 4096 [ 361.523893][ T8479] ntfs3: Unknown parameter 'dask' [ 362.038005][ T8481] loop3: detected capacity change from 0 to 32768 [ 362.320651][ T8496] syz.3.823: attempt to access beyond end of device [ 362.320651][ T8496] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 362.351322][ T8496] lbmIODone: I/O error in JFS log [ 362.395767][ T8496] *** Log Format Error ! *** [ 362.430030][ T8496] lmLogInit: exit(-22) [ 362.493260][ T8496] lmLogOpen: exit(-22) [ 363.824589][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 363.899301][ T8507] team0: entered promiscuous mode [ 363.918771][ T8507] team_slave_1: entered promiscuous mode [ 363.958105][ T8506] team0: left promiscuous mode [ 363.969068][ T8506] team_slave_1: left promiscuous mode [ 364.038932][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 364.698837][ T29] audit: type=1800 audit(1719555341.018:411): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.831" name="bus" dev="sda1" ino=2000 res=0 errno=0 [ 364.979263][ T5147] vhci_hcd: vhci_device speed not set [ 365.164056][ T8498] loop4: detected capacity change from 0 to 32768 [ 365.520374][ T8498] syz.4.826: vmalloc error: size 5242880, failed to allocated page array size 10240, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 365.584658][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.4.826 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 365.594820][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 365.604931][ T8498] Call Trace: [ 365.608241][ T8498] [ 365.611208][ T8498] dump_stack_lvl+0x241/0x360 [ 365.615942][ T8498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.621182][ T8498] ? __pfx__printk+0x10/0x10 [ 365.625833][ T8498] ? __rcu_read_unlock+0xa1/0x110 [ 365.630900][ T8498] warn_alloc+0x278/0x410 [ 365.635283][ T8498] ? __pfx_warn_alloc+0x10/0x10 [ 365.640187][ T8498] ? __bch2_darray_resize+0xb5/0x1d0 [ 365.645513][ T8498] ? __get_vm_area_node+0x23d/0x270 [ 365.650770][ T8498] __vmalloc_node_range_noprof+0x69f/0x1460 [ 365.656700][ T8498] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 365.662498][ T8498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.668865][ T8498] ? rcu_is_watching+0x15/0xb0 [ 365.673679][ T8498] ? trace_kmalloc+0x1f/0xd0 [ 365.678314][ T8498] ? __kmalloc_node_noprof+0x247/0x440 [ 365.683822][ T8498] ? kvmalloc_node_noprof+0x72/0x190 [ 365.689163][ T8498] kvmalloc_node_noprof+0x142/0x190 [ 365.694411][ T8498] ? __bch2_darray_resize+0xb5/0x1d0 [ 365.699738][ T8498] __bch2_darray_resize+0xb5/0x1d0 [ 365.704896][ T8498] bch2_fs_btree_write_buffer_init+0x264/0x2e0 [ 365.711102][ T8498] bch2_fs_alloc+0x1cfb/0x20a0 [ 365.715928][ T8498] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 365.721107][ T8498] ? __bch2_darray_resize+0x12f/0x1d0 [ 365.726517][ T8498] ? rcu_is_watching+0x15/0xb0 [ 365.731337][ T8498] ? bch2_fs_open+0x330/0xdf0 [ 365.736052][ T8498] bch2_fs_open+0x8cc/0xdf0 [ 365.740621][ T8498] ? __pfx_bch2_fs_open+0x10/0x10 [ 365.745697][ T8498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.752105][ T8498] ? __pfx_bch2_test_super+0x10/0x10 [ 365.757441][ T8498] ? sget+0x2b8/0x620 [ 365.761479][ T8498] ? __pfx_bch2_noset_super+0x10/0x10 [ 365.766902][ T8498] bch2_fs_get_tree+0x750/0x16c0 [ 365.771916][ T8498] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 365.777351][ T8498] ? generic_parse_monolithic+0x387/0x400 [ 365.783129][ T8498] ? apparmor_capable+0x138/0x1b0 [ 365.788199][ T8498] ? bpf_lsm_capable+0x9/0x10 [ 365.792918][ T8498] vfs_get_tree+0x90/0x2a0 [ 365.797381][ T8498] do_new_mount+0x2be/0xb40 [ 365.798386][ T8529] loop3: detected capacity change from 0 to 32768 [ 365.801911][ T8498] ? __pfx_do_new_mount+0x10/0x10 [ 365.801951][ T8498] __se_sys_mount+0x2d6/0x3c0 [ 365.801984][ T8498] ? __pfx___se_sys_mount+0x10/0x10 [ 365.802009][ T8498] ? exc_page_fault+0x590/0x8c0 [ 365.802049][ T8498] ? __x64_sys_mount+0x20/0xc0 [ 365.802082][ T8498] do_syscall_64+0xf3/0x230 [ 365.802106][ T8498] ? clear_bhb_loop+0x35/0x90 [ 365.802141][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.802183][ T8498] RIP: 0033:0x7f241bd7722a [ 365.802212][ T8498] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.802233][ T8498] RSP: 002b:00007f241b7fee78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 365.802263][ T8498] RAX: ffffffffffffffda RBX: 00007f241b7fef00 RCX: 00007f241bd7722a [ 365.802282][ T8498] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f241b7feec0 [ 365.802301][ T8498] RBP: 0000000020011a00 R08: 00007f241b7fef00 R09: 0000000001200014 [ 365.802319][ T8498] R10: 0000000001200014 R11: 0000000000000206 R12: 0000000020011a40 [ 365.802337][ T8498] R13: 00007f241b7feec0 R14: 00000000000119fc R15: 0000000020000100 [ 365.802373][ T8498] [ 365.933586][ T8498] Mem-Info: [ 365.937476][ T8498] active_anon:13059 inactive_anon:0 isolated_anon:0 [ 365.937476][ T8498] active_file:1932 inactive_file:41889 isolated_file:0 [ 365.937476][ T8498] unevictable:768 dirty:26 writeback:0 [ 365.937476][ T8498] slab_reclaimable:9679 slab_unreclaimable:104785 [ 365.937476][ T8498] mapped:18814 shmem:9436 pagetables:868 [ 365.937476][ T8498] sec_pagetables:0 bounce:0 [ 365.937476][ T8498] kernel_misc_reclaimable:0 [ 365.937476][ T8498] free:1372207 free_pcp:814 free_cma:0 [ 366.008887][ T8498] Node 0 active_anon:52336kB inactive_anon:0kB active_file:7728kB inactive_file:167488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75256kB dirty:100kB writeback:0kB shmem:36208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:3472kB sec_pagetables:0kB all_unreclaimable? no [ 366.010356][ T8544] loop1: detected capacity change from 0 to 256 [ 366.067017][ T8498] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 366.143085][ T8544] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 366.156956][ T8498] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.210512][ T8498] lowmem_reserve[]: 0 2571 2571 0 0 [ 366.217165][ T8498] Node 0 DMA32 free:1506424kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:52708kB inactive_anon:0kB active_file:7728kB inactive_file:167256kB unevictable:1536kB writepending:64kB present:3129332kB managed:2659840kB mlocked:0kB bounce:0kB free_pcp:5636kB local_pcp:1684kB free_cma:0kB [ 366.223483][ T8556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 366.247656][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 366.267300][ T8498] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 366.341402][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 366.352117][ T8498] Node 1 Normal free:3946084kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1500kB local_pcp:1500kB free_cma:0kB [ 366.385933][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 366.396869][ T8498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.412424][ T8498] Node 0 DMA32: 36*4kB (UME) 313*8kB (UME) 230*16kB (UME) 70*32kB (UM) 89*64kB (UME) 177*128kB (UME) 100*256kB (UME) 47*512kB (ME) 14*1024kB (ME) 9*2048kB (ME) 336*4096kB (UM) = 1495608kB [ 366.446810][ T8529] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 366.484635][ T8529] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 366.508309][ T8498] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 366.514430][ T8529] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 366.514430][ T8529] running recovery passes: check_allocations [ 366.543327][ T8498] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 2*512kB (U) 1*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3946084kB [ 366.563247][ T8560] loop2: detected capacity change from 0 to 1024 [ 366.611442][ T8498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.620610][ T8560] ext4: Unknown parameter 'func' [ 366.641669][ T8498] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.668873][ T8498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.670174][ T8529] bcachefs (loop3): accounting_read... done [ 366.693009][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 366.716264][ T8498] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.726922][ T8498] 53372 total pagecache pages [ 366.735098][ T8564] team0: entered promiscuous mode [ 366.746159][ T8529] bcachefs (loop3): alloc_read... done [ 366.765766][ T8529] bcachefs (loop3): stripes_read... done [ 366.771291][ T8498] 0 pages in swap cache [ 366.776310][ T8564] team_slave_1: entered promiscuous mode [ 366.785900][ T8529] bcachefs (loop3): snapshots_read... [ 366.789580][ T8498] Free swap = 124472kB [ 366.798324][ T8529] done [ 366.811005][ T8529] bcachefs (loop3): check_allocations... [ 366.826311][ T8529] btree ptr not marked in member info btree allocated bitmap [ 366.826337][ T8529] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 366.827190][ T8498] Total swap = 124996kB [ 366.838803][ T8529] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 10 [ 366.850864][ T8498] 2097051 pages RAM [ 366.855875][ T8562] team0: left promiscuous mode [ 366.872166][ T8498] 0 pages HighMem/MovableOnly [ 366.900436][ T8498] 400881 pages reserved [ 366.908914][ T29] audit: type=1800 audit(1719555343.238:412): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.839" name="file1" dev="sda1" ino=1997 res=0 errno=0 [ 366.913309][ T8498] 0 pages cma reserved [ 366.944207][ T8529] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 366.946217][ T8498] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 366.960983][ T8562] team_slave_1: left promiscuous mode [ 366.966917][ T8529] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed [ 367.002570][ T8529] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 367.039497][ T8529] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 367.058470][ T8529] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 367.086679][ T8529] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 367.123280][ T8529] bcachefs (loop3): shutting down [ 367.231713][ T8529] bcachefs (loop3): shutdown complete [ 367.246841][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.842'. [ 368.324883][ T8565] loop1: detected capacity change from 0 to 32768 [ 368.665766][ T8595] loop4: detected capacity change from 0 to 256 [ 368.690894][ T8592] syz.1.840: attempt to access beyond end of device [ 368.690894][ T8592] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 368.814019][ T8595] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 368.896306][ T8592] lbmIODone: I/O error in JFS log [ 368.903054][ T8592] *** Log Format Error ! *** [ 368.927069][ T8592] lmLogInit: exit(-22) [ 368.947708][ T8592] lmLogOpen: exit(-22) [ 368.991634][ T29] audit: type=1800 audit(1719555345.318:413): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.850" name="bus" dev="loop4" ino=1048617 res=0 errno=0 [ 369.040401][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.851'. [ 369.451412][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 369.553438][ T8608] team0: entered promiscuous mode [ 369.568074][ T8608] team_slave_1: entered promiscuous mode [ 369.584752][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 369.599346][ T8608] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 369.615806][ T8607] team0: left promiscuous mode [ 369.626007][ T8607] team_slave_1: left promiscuous mode [ 369.639102][ T8607] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 369.855853][ T8621] loop3: detected capacity change from 0 to 512 [ 369.920200][ T8621] EXT4-fs: Ignoring removed oldalloc option [ 369.926187][ T8621] EXT4-fs: Ignoring removed i_version option [ 370.046201][ T8627] loop4: detected capacity change from 0 to 256 [ 370.065680][ T8621] EXT4-fs (loop3): too many log groups per flexible block group [ 370.089585][ T8621] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 370.125259][ T8621] EXT4-fs (loop3): mount failed [ 370.158262][ T8627] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 370.254276][ T29] audit: type=1800 audit(1719555346.578:414): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.862" name="bus" dev="loop4" ino=1048618 res=0 errno=0 [ 370.326629][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.863'. [ 370.336834][ T8621] program syz.3.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.502561][ T8640] loop0: detected capacity change from 0 to 1024 [ 370.554244][ T8640] ext4: Unknown parameter 'func' [ 370.623100][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'. [ 370.852076][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.049232][ T8658] vivid-007: disconnect [ 371.289202][ T8654] vivid-007: reconnect [ 371.334035][ T29] audit: type=1800 audit(1719555347.678:415): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.865" name="file1" dev="sda1" ino=1986 res=0 errno=0 [ 371.957621][ T8682] loop1: detected capacity change from 0 to 512 [ 372.111536][ T8682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.288001][ T8682] ext4 filesystem being mounted at /root/syzkaller.Q2Y8mK/110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.563521][ T8680] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 372.563568][ T8680] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 372.563587][ T8680] CPU: 0 UID: 60928 PID: 8680 Comm: syz.1.877 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 372.563606][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 372.563616][ T8680] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 372.563637][ T8680] Code: c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ec 04 91 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 372.563651][ T8680] RSP: 0018:ffffc9001600f828 EFLAGS: 00010202 [ 372.563666][ T8680] RAX: 1ffff110033f1301 RBX: 0000000000000007 RCX: 0000000000040000 [ 372.563677][ T8680] RDX: ffffc9000ac74000 RSI: 0000000000000204 RDI: 0000000000000205 [ 372.563688][ T8680] RBP: ffffc9001600f9b0 R08: 0000000000000005 R09: ffffffff866b25e9 [ 372.563700][ T8680] R10: 0000000000000005 R11: ffff888019f88000 R12: 0000000000000000 [ 372.563710][ T8680] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc9001600faf0 [ 372.563722][ T8680] FS: 00007fe5bc2366c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 372.563736][ T8680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.563747][ T8680] CR2: 00007f2411f23000 CR3: 000000005d692000 CR4: 00000000003506f0 [ 372.563761][ T8680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.563771][ T8680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.563781][ T8680] Call Trace: [ 372.563788][ T8680] [ 372.563794][ T8680] ? __die_body+0x88/0xe0 [ 372.563819][ T8680] ? die_addr+0x108/0x140 [ 372.563844][ T8680] ? exc_general_protection+0x3dd/0x5d0 [ 372.563872][ T8680] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.563895][ T8680] ? asm_exc_general_protection+0x26/0x30 [ 372.563918][ T8680] ? tun_xdp_act+0x89/0xb70 [ 372.563940][ T8680] ? xdp_do_redirect+0x63/0xb40 [ 372.563956][ T8680] ? xdp_do_redirect+0x2e/0xb40 [ 372.563973][ T8680] ? tun_xdp_act+0x89/0xb70 [ 372.563996][ T8680] tun_xdp_act+0xe9/0xb70 [ 372.564019][ T8680] ? tun_get_user+0x84c/0x4560 [ 372.564040][ T8680] ? __pfx___cant_migrate+0x10/0x10 [ 372.564059][ T8680] ? __pfx_tun_xdp_act+0x10/0x10 [ 372.564084][ T8680] tun_get_user+0x346d/0x4560 [ 372.564107][ T8680] ? tun_get_user+0x84c/0x4560 [ 372.564134][ T8680] ? __pfx_tun_get_user+0x10/0x10 [ 372.564153][ T8680] ? rcu_is_watching+0x15/0xb0 [ 372.564180][ T8680] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 372.564207][ T8680] ? __rcu_read_unlock+0xa1/0x110 [ 372.564225][ T8680] ? tun_get+0x1e/0x2f0 [ 372.564244][ T8680] ? tun_get+0x27d/0x2f0 [ 372.564264][ T8680] tun_chr_write_iter+0x113/0x1f0 [ 372.564288][ T8680] vfs_write+0xa72/0xc90 [ 372.564314][ T8680] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 372.564335][ T8680] ? __pfx_vfs_write+0x10/0x10 [ 372.564357][ T8680] ? do_futex+0x33b/0x560 [ 372.564387][ T8680] ksys_write+0x1a0/0x2c0 [ 372.564414][ T8680] ? __pfx_ksys_write+0x10/0x10 [ 372.564438][ T8680] ? do_syscall_64+0x100/0x230 [ 372.564455][ T8680] ? do_syscall_64+0xb6/0x230 [ 372.564471][ T8680] do_syscall_64+0xf3/0x230 [ 372.564486][ T8680] ? clear_bhb_loop+0x35/0x90 [ 372.564507][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.564532][ T8680] RIP: 0033:0x7fe5bb3746df [ 372.564546][ T8680] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8b 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8c 02 00 48 [ 372.564559][ T8680] RSP: 002b:00007fe5bc236010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 372.564575][ T8680] RAX: ffffffffffffffda RBX: 00007fe5bb503fa0 RCX: 00007fe5bb3746df [ 372.564586][ T8680] RDX: 000000000000003e RSI: 0000000020000280 RDI: 00000000000000c8 [ 372.564597][ T8680] RBP: 00007fe5bb3f6756 R08: 0000000000000000 R09: 0000000000000000 [ 372.564608][ T8680] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000000 [ 372.564618][ T8680] R13: 000000000000000b R14: 00007fe5bb503fa0 R15: 00007ffe2c314948 [ 372.564636][ T8680] [ 372.564641][ T8680] Modules linked in: [ 372.564684][ T8680] ---[ end trace 0000000000000000 ]--- [ 372.968244][ T8680] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 372.973744][ T8680] Code: c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ec 04 91 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 372.993409][ T8680] RSP: 0018:ffffc9001600f828 EFLAGS: 00010202 [ 372.999501][ T8680] RAX: 1ffff110033f1301 RBX: 0000000000000007 RCX: 0000000000040000 [ 373.007478][ T8680] RDX: ffffc9000ac74000 RSI: 0000000000000204 RDI: 0000000000000205 [ 373.015496][ T8680] RBP: ffffc9001600f9b0 R08: 0000000000000005 R09: ffffffff866b25e9 [ 373.023535][ T8680] R10: 0000000000000005 R11: ffff888019f88000 R12: 0000000000000000 [ 373.031530][ T8680] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc9001600faf0 [ 373.039529][ T8680] FS: 00007fe5bc2366c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 373.048469][ T8680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.055080][ T8680] CR2: 00007f2411f23000 CR3: 000000005d692000 CR4: 00000000003506f0 [ 373.063079][ T8680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.071072][ T8680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.079068][ T8680] Kernel panic - not syncing: Fatal exception in interrupt [ 373.086562][ T8680] Kernel Offset: disabled [ 373.090908][ T8680] Rebooting in 86400 seconds..