last executing test programs: 6.941791753s ago: executing program 2 (id=576): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) 6.737964812s ago: executing program 2 (id=578): socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)) 6.457218827s ago: executing program 2 (id=583): io_submit(0x0, 0x1, &(0x7f0000002340)=[0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x1c1500) r2 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) 5.032484706s ago: executing program 0 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab000000000000000032"], 0x24}}, 0x0) 4.88931908s ago: executing program 1 (id=589): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 4.748581114s ago: executing program 0 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) 4.697405206s ago: executing program 2 (id=591): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000040, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6769643d69676e6f72652c696f636861727365743d6370313235312c706172746974696f6e3d30303030303030303030303030303030303030372c616e63686f723d30303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030303030332c696f636861727365743d6370313235352c00f30ef2d4a32024f0d43f3aaf7dd27331350bc927b39752d1449bce0154b0d2e76b111883a15d16990746ded67959c66aa76e7f"], 0xfc, 0xc2d, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, 0x0, r1, &(0x7f0000000640)='./bus\x00', 0x0) 4.401791706s ago: executing program 4 (id=594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r4, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setxattr$incfs_id(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 4.401513355s ago: executing program 2 (id=595): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) 4.386161317s ago: executing program 1 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f86000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf", 0x62}], 0x1}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000d03010328bd7000fce4df250100000485e54c7afacc330b0af5"], 0x20}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000100), 0x4) 4.203995524s ago: executing program 4 (id=598): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x12) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nfs_export_on}, {@metacopy_on}]}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/246, 0x42, 0xf6}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="940100005a000d03"], 0x194}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000001600)=""/60, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000600)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}}, {@remote}, {@multicast1}, {@private}, {@private=0xa010100}, {@broadcast}, {@multicast2, 0x7fffffff}]}, @noop, @noop, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0xff, 0x8, 0x8}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e18050510"], 0xe) r3 = socket$inet6(0xa, 0x3, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x0, r4}) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) socket(0x1f, 0x3, 0x0) 4.017612382s ago: executing program 2 (id=599): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000200)={[{@dioread_lock}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x3, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000700)={[{@quota}, {@errors_remount}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@grpquota, 0x0}, {@noquota}, {@discard_size={'discard', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xbfe}}, {}, {@resize_size={'resize', 0x3d, 0x3}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@usrquota}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'iocharset'}}]}, 0x0, 0x618e, &(0x7f000000a180)="$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") 3.361039036s ago: executing program 4 (id=601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x2, 0x6, @remote}, 0x10) 3.298083217s ago: executing program 1 (id=602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) r1 = getpgrp(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x36, 0x2d, 0xffffffffffffffff, @link_id}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usbip_server_init(0x5) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1}) r7 = syz_pidfd_open(r1, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x14020000) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000001040)=0x7, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 3.045962905s ago: executing program 4 (id=604): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trww'], 0xa) 2.898806033s ago: executing program 4 (id=605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], 0x0}, 0x90) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x408, &(0x7f0000002300)={[{@lazytime}, {@grpquota}, {@uqnoenforce}, {@pqnoenforce}]}, 0x1, 0x97ae, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu8pdD1zv+933xXvPOc+zO9PV1TXV/19X1cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00edoNJh12cdNCwjyMNDAyMNGw5w6aN9dhJJ480MMp70//RWGOMOWicgYHphl2cfdjHmYZ+mOjx4fO9O0Ijruigv18ctP3Qf+813pAvMeSTpW+56NyBgYHx33f7ITeZ5p/uqLQl55h3nn9Y/d1tiNXgYZ+//9+oQ/9N9ODAwET3DfDj4/3zDvoI7tKQrzn+jg+Nvu5H8LX/x7XkHPPON4L/kG1x5GHTZhqyjY+4DRob8XF+yyqz7jFsCN97vA0MDNnF/Ydt5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S//+aY87p5xyyvQ+/PIx9+GN5fHpc7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6926OOaefC47/o3/Y8X+rree4reN/VVXV/9zmm2PO6Yccx0c4/o/9Ycf/H9x00xpDf/c/+0xDb/XOR3snqqqq6r/UPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8i33v+2LDpb75v+sjvm/7G+6YPft9y3j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N+Q2/7ycsV75x/NxJh3lfdNffd/0Ud83/bVh6zRk+mjvm/72++Yf/R/Txx7y3xTDvu7rHzLUVVVV/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvujWt+qqqqqqqqq+q/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yFf33aNA//z5ki496nf7/NsR59COmGBhYa4mPelXqI+h/zN+q1/+V8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv+45aQDqw377Na75lxotY9g3T+C/ree/x9YbdDAwDDf8YdYLjTHootPNTAwsNj9d00248Dfr5t5yHWzTjjye3/MOTAw1Xv/D570A5Y87F0W3ntzh4n/vozj3lv+fO/uP/KgEVbifc127gMHr7rkqzOM+PFLH3w//v7+Eku9sv+Uw/+WZaQRZhr9A248fPnD78uIzsPWfaoh6z71BmuuM/X6G2/y9dXWXH6VlVZZaa3pppt2hulnnGG6b84y9cqrrbHSNEP//4AxG/rWFSP/K2M29ohj9vQc7x+zEe/bBKccjGP2z+/q8R8W8d4Sz5/tkSuGj9ko/+KYDf96I3/4mE2x2rAvNOnA4IHl3huaQQMDk44yeGCjIRemHW1gYNLBw+addMi8355wpIGBHf9xRwcNe7HRofMM2mLIPP9m71syy7AR2XT4fCO+zvqIK/qfvW/JiWPvctcI71vyf6v/o+P/P3nNPOjvAzX8DRCGzTPU6yN+n4l/Wt8pRnnvIPdB6/shr4vzXvT4WnPVx5f473pdHFrfsT9kfT/kdfw+cH2nmvbZPYcu6r9tfUfY1y0w9Mp/ZV838OH7upHp9itdPfmI+7r5P3gV/8N2PHyMRhthpg/a1+04//mbD1n+wIfv6xZYbdiLB/xjXzfSwMCkIw/f1w3Z8Y06eGDHIRemG3JhtMEDhw25MP17F8YYOG/IhW+ssPYaKw5672UGhi13miHLnX3CQUM3oJsPXnW0Xd59d5Rh6/LKWP9xXYc9PqZ4//F8jgmHDeaw2w5f7pBZhy/3tW2GXjfqsOW++l9Y7vDb0vpOevbQ60YbttzXRlju4A9Z7vDb/tP2MNWg//BEVdjffKTva0Tb7+gfsr4f8jrc+Hh7z33KZR/5b3gd7kEftL6jfPj6ftD7hnzg+j5xxZP7/Xe9bjg9zu7bd+hjZfRhj7O3/wuP3+G3HXE/NvSFQIbu9kf/V/ZjU/zTfmzLkUcaYbDf1wd9n7sizD9si/j70lY86NXVho/94BGW+599n/u++zII9mPjj/Dz3KDN9xsYRGP+2BovbvjOzh8+5oMH/uPPFsPHfPhtP2zMR/tXxvxTHz7mI36f/EFjPtXnh14/eIT1f/+YL7Lb7DcPH/NRR1jufzbmo334seOfx3xgYDCN+Y6TDR23D9ufftCYD7/t8DEf8nVmnXCUgbkHBgamHDbmo/4rYz7pf8/jfEyYf+jnK/190nMzLvy14WM+4hj/Z2M+6n9xzDe77++P8ynfu+5zIw2MOurARstvsMF60w79f/jF6Yb+z/ui51YcOs4fdiz9IKPht/2w7WKUf8Vo/H/JaNB/ZjTZKB9k9I9Na+SDF33+/3RfNMp/1eg83hedNu/Qcfuw74s+aMyH35aOgxO/7/Yj/hz6Ia+fhffpvfGZf9vhP+/9O7x+1vCfd/9Hvn7W8N9JrjbiTr7+1fr9v7v83eXvLn93+Yv7gPP/Uww////u2AdOMuyHzsFXz3zb7B/1+n7E/a8+/z/M9z+c/5/9tpmvHvKj1bDrPvT87NB5/i3Pz8409MNEjw+fb8TzgyOu6H92fnbfXTe4+v/R+dn/o4Zvq//Cz8Xt/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iPuD8/zTDnwfw8OIL/XDYidDBm0579KYf9fp+xP2vPv8/zPc/nP/f9OhpNx1p4O/Xfej5/6HzOM7/P7Dg5sv8O5//H76tdv6//pPyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xH3D+f/bhzwM4cra5vzD8+QA3brf/nh/1+n7E/W89/9/7/3tr/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXN+z8/8AIb5O4cI8LDM7//8/uA/wXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/48+0H/QW/9P1uvfNIv/j9v+MYv/kvljFv+l8scs/j/JH7P4/zR/zOK/dP6YxX+Z/DGL/7L5Yxb/n+WPWfyXyx+z+C+fP2bx/3n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/i/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP6/zB+z+P8qf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+v84fs/j/Jn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f5s/ZvHfKn/M4v+7/DGL/9b5Yxb/3+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf8P+WMW/z/mj1n8d8gfs/j/KX/M4v/n/DGL/475Yxb/nfLHLP5/yR+z+O+cP2bx3yV/zOK/a/6Yxf+v+WMW/7/lj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyz+7+aPSfwHDeSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS//c+zf+fs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOL/sfwxi/8k+WMW/4/nj1n8J80fs/h/In/M4j9Z/pjF/5P5Yxb/T+WPWfwnzx+z+H86f8zi/5n8MYv/FPljFv/P5o9Z/D+XP2bx/3z+mMV/yvwxi/8X8scs/l/MH7P4fyl/zOI/Vf6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/2/mj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/W/ljFv9Z88cs/t/OH7P4z5Y/ZvH/Tv6Yxf+7+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bx/17+mMV/7vwxi/88+WMW/3nzxyz+388fs/jPlz9m8f9B/pjFf/78MYv/AvljFv8F88cs/gvlj1n8f5g/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bxH8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9v88cs/lvlj1n8f5c/ZvHfOn/M4v/7/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/yF/zOL/x/wxi/8O+WMW/z/lj1n8/5w/ZvHfMX/M4r9T/pjF/y/5Yxb/nfPHLP675I9Z/HfNH7P4/zV/zOL/t/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzr/fzTqPz61+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TP2bxfzd/TOI/8kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+WPWfwnyR+z+H88f8ziP2n+mMX/E/ljFv/J8scs/p/MH7P4fyp/zOI/ef6Yxf/T+WMW/8/kj1n8p8gfs/h/Nn/M4v+5/DGL/+fzxyz+U+aPWfy/kD9m8f9i/pjF/0v5Yxb/qfLHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8zf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38ofs/jPmj9m8f92/pjFf7b8MYv/d/LHLP7fzR+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL//fyxyz+c+ePWfznyR+z+M+bP2bx/37+mMV/vvwxi/8P8scs/vPnj1n8F8gfs/gvmD9m8V8of8zi/8P8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/6P8MYv/j/PHLP5L5o9Z/JfKH7P4/yR/zOL/0/wxi//S+WMW/2Xyxyz+y+aPWfx/lj9m8V8uf8ziv3z+mMX/5/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/8v8scs/qvnj1n818gfs/iv6fYf7YOusPiv5fb/wCz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/1EG8scs/oPyxyz+I+WPWfxH/lD/J//vr9e/aRb/Udr+MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/2P5Yxb/SfLHLP4fzx+z+E+aP2bx/0T+mMV/svwxi/8n88cs/p/KH7P4T54/ZvH/dP6Yxf8z+WMW/ynyxyz+n80fs/h/Ln/M4v/5/DGL/5T5Yxb/L+SPWfy/mD9m8f9S/pjFf6r8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP7fzB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/7fyxyz+s+aPWfy/nT9m8Z8tf8zi/538MYv/d/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+9/DGL/9z5Yxb/efLHLP7z5o9Z/L+fP2bxny9/zOL/g/wxi//8+WMW/wXyxyz+C+aPWfwXyh+z+P8wf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8of8zi/+P8MYv/kvljFv+l8scs/j/JH7P4/zR/zOK/dP6YxX+Z/DGL/7L5Yxb/n+WPWfyXyx+z+C+fP2bx/3n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/i/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP6/zB+z+P8qf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+v84fs/j/Jn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f5s/ZvHfKn/M4v+7/DGL/9b5Yxb/3+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf8P+WMW/z/mj1n8d8gfs/j/KX/M4v/n/DGL/475Yxb/nfLHLP5/yR+z+O+cP2bx3yV/zOK/a/6Yxf+v+WMW/7/lj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j5r9R/7gqyz+j5n9PySL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5Y9Z/CfJH7P4fzx/zOI/af6Yxf8T+WMW/8nyxyz+n8wfs/h/Kn/M4j95/pjF/9P5Yxb/z+SPWfynyB+z+H82f8zi/7n8MYv/5/PHLP5T5o9Z/L+QP2bx/2L+mMX/S/ljFv+p8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzN/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyh+z+M+aP2bx/3b+mMV/tvwxi/938scs/t/NH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/9/LHLP5z549Z/OfJH7P4z5s/ZvH/fv6YxX++/DGL/w/yxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL/w/wxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/o/wxi/+P88cs/kvmj1n8l8ofs/j/JH/M4v/T/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+WP2bxXy5/zOK/fP6Yxf/n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/y/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zJ/zOL/q/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P86f8zi/5v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f9t/pjFf6v8MYv/7/LHLP5b549Z/H+fP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/P+SPWfz/mD9m8d8hf8zi/6f8MYv/n/PHLP475o9Z/HfKH7P4/yV/zOK/c/6YxX+X/DGL/675Yxb/v+aPWfz/lj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bPybxH3Ugf8ziPyh/zOI/Uv6YxX/k/DGL/yj5Yxb/wfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/ZPljFv9P5o9Z/D+VP2bxnzx/zOL/6fwxi/9n8scs/lPkj1n8P5s/ZvH/XP6Yxf/z+WMW/ynzxyz+X8gfs/h/MX/M4v+l/DGL/1T5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/mT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4j9b/pjF/zv5Yxb/7+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf97+WMW/7nzxyz+8+SPWfznzR+z+H8/f8ziP1/+mMX/B/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8f9h/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9R/pjF/8f5Yxb/JfPHLP5L5Y9Z/H+SP2bx/2n+mMV/6fwxi/8y+WMW/2Xzxyz+P8sfs/gvlz9m8V8+f8zi//P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/F/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/mT9m8f9V/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f50/ZvH/Tf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+v88fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8f8scs/n/MH7P475A/ZvH/U/6Yxf/P+WMW/x3zxyz+O+WPWfz/kj9m8d85f8ziv0v+mMV/1/wxi/9f88cs/n/LH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fk/iPNpA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/Y/ljFv9J8scs/h/PH7P4T5o/ZvH/RP6YxX+y/DGL/yfzxyz+n8ofs/hPnj9m8f90/pjF/zP5Yxb/KfLHLP6fzR+z+H8uf8zi//n8MYv/lPljFv8v5I9Z/L+YP2bx/1L+mMV/qvwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/t/MH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/t/LHLP6z5o9Z/L+dP2bxny1/zOL/nfwxi/9388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/738MYv/3PljFv958scs/vPmj1n8v58/ZvGfL3/M4v+D/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4/zB/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yh/zOL/4/wxi/+S+WMW/6Xyxyz+P8kfs/j/NH/M4r90/pjFf5n8MYv/svljFv+f5Y9Z/JfLH7P4L58/ZvH/ef6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+L/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/r/MH7P4/yp/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zh+z+P8mf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/mz9m8d8qf8zi/7v8MYv/1vljFv/f549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/w/5Yxb/P+aPWfx3yB+z+P8pf8zi/+f8MYv/jvljFv+d8scs/n/JH7P475w/ZvHfJX/M4r9r/pjF/6/5Yxb/v+WPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHLP7v5o9J/EcfyB+z+A/KH7P4j5Q/ZvEfOX/M4j9K/pjFf3D+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4v+x/DGL/yT5Yxb/j+ePWfwnzR+z+H8if8ziP1n+mMX/k/ljFv9P5Y9Z/CfPH7P4fzp/zOL/mfwxi/8U+WMW/8/mj1n8P5c/ZvH/fP6YxX/K/DGL/xfyxyz+X8wfs/h/KX/M4j9V/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/b+aPWfxnzB+z+M+UP2bxnzl/zOI/S/6Yxf9b+WMW/1nzxyz+384fs/jPlj9m8f9O/pjF/7v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/Xv6YxX/u/DGL/zz5Yxb/efPHLP7fzx+z+M+XP2bx/0H+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfx/mD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfx/lD9m8f9x/pjFf8n8MYv/UvljFv+f5I9Z/H+aP2bxXzp/zOK/TP6YxX/Z/DGL/8/yxyz+y+WPWfyXzx+z+P88f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/0X+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/X+aPWfx/lT9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/1/nj1n8f5M/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/r/NH7P4b5U/ZvH/Xf6YxX/r/DGL/+/zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/h/wxi/8f88cs/jvkj1n8/5Q/ZvH/c/6YxX/H/DGL/075Yxb/v+SPWfx3zh+z+O+SP2bx3zV/zOL/1/wxi//f8scs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMW/3fzxyT+Ywzkj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/1j+mMV/kvwxi//H88cs/pPmj1n8P5E/ZvGfLH/M4v/J/DGL/6fyxyz+k+ePWfw/nT9m8f9M/pjFf4r8MYv/Z/PHLP6fyx+z+H8+f8ziP2X+mMX/C/ljFv8v5o9Z/L+UP2bxnyp/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/8388cs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/638MYv/rPljFv9v549Z/GfLH7P4fyd/zOL/3fwxi//s+WMW/znyxyz+c+aPWfznyh+z+H8vf8ziP3f+mMV/nvwxi/+8+WMW/+/nj1n858sfs/j/IH/M4j9//pjFf4H8MYv/gvljFv+F8scs/j/MH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/KH7P4/zh/zOK/ZP6YxX+p/DGL/0/yxyz+P80fs/gvnT9m8V8mf8ziv2z+mMX/Z/ljFv/l8scs/svnj1n8f54/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/In/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/8v88cs/r/KH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/r/PHLP6/yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/3+aPWfy3yh+z+P8uf8ziv3X+mMX/9/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9D/pjF/4/5Yxb/HfLHLP5/yh+z+P85f8ziv2P+mMV/p/wxi/9f8scs/jvnj1n8d8kfs/jvmj9m8f9r/pjF/2/5Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljEv8xB/LHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/LH/M4j9J/pjF/+P5Yxb/SfPHLP6fyB+z+E+WP2bx/2T+mMX/U/ljFv/J88cs/p/OH7P4fyZ/zOI/Rf6Yxf+z+WMW/8/lj1n8P58/ZvGfMn/M4v+F/DGL/xfzxyz+X8ofs/hPlT9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/5v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Vv6YxX/W/DGL/7fzxyz+s+WPWfy/kz9m8f9u/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5c/ZvGfO3/M4j9P/pjFf978MYv/9/PHLP7z5Y9Z/H+QP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/H+aPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+WPWfx/nD9m8V8yf8ziv1T+mMX/J/ljFv+f5o9Z/JfOH7P4L5M/ZvFfNn/M4v+z/DGL/3L5Yxb/5fPHLP4/zx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+RP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/5f5Yxb/X+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/X+WMW/9/kj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9v88cs/lvlj1n8f5c/ZvHfOn/M4v/7/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/yF/zOL/x/wxi/8O+WMW/z/lj1n8/5w/ZvHfMX/M4r9T/pjF/y/5Yxb/nfPHLP675I9Z/HfNH7P4/zV/zOL/t/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGJ/1gD+WMW/0H5Yxb/kfLHLP4j549Z/EfJH7P4D84fs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/D+WP2bxnyR/zOL/8fwxi/+k+WMW/0/kj1n8J8sfs/h/Mn/M4v+p/DGL/+T5Yxb/T+ePWfw/kz9m8Z8if8zi/9n8MYv/5/LHLP6fzx+z+E+ZP2bx/0L+mMX/i/ljFv8v5Y9Z/KfKH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/zfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8rf8ziP2v+mMX/2/ljFv/Z8scs/t/JH7P4fzd/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fyx+z+M+dP2bxnyd/zOI/b/6Yxf/7+WMW//nyxyz+P8gfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi/8P88cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+P8scs/j/OH7P4L5k/ZvFfKn/M4v+T/DGL/0/zxyz+S+ePWfyXyR+z+C+bP2bx/1n+mMV/ufwxi//y+WMW/5/nj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+v8gfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/y/wxi/+v8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/+v8MYv/b/LHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/7du/9VH/4ArLP5buf0/MIv/7/LHLP5b549Z/H+fP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/P+SPWfz/mD9m8d8hf8zi/6f8MYv/n/PHLP475o9Z/HfKH7P4/yV/zOK/c/6YxX+X/DGL/675Yxb/v+aPWfz/lj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bPybxH3sgf8ziPyh/zOI/Uv6YxX/k/DGL/yj5Yxb/wfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/ZPljFv9P5o9Z/D+VP2bxnzx/zOL/6fwxi/9n8scs/lPkj1n8P5s/ZvH/XP6Yxf/z+WMW/ynzxyz+X8gfs/h/MX/M4v+l/DGL/1T5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/mT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4j9b/pjF/zv5Yxb/7+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf97+WMW/7nzxyz+8+SPWfznzR+z+H8/f8ziP1/+mMX/B/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8f9h/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9R/pjF/8f5Yxb/JfPHLP5L5Y9Z/H+SP2bx/2n+mMV/6fwxi/8y+WMW/2Xzxyz+P8sfs/gvlz9m8V8+f8zi//P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/F/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/mT9m8f9V/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f50/ZvH/Tf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+v88fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8f8scs/n/MH7P475A/ZvH/U/6Yxf/P+WMW/x3zxyz+O+WPWfz/kj9m8d85f8ziv0v+mMV/1/wxi/9f88cs/n/LH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fk/iPM5A/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/Y/ljFv9J8scs/h/PH7P4T5o/ZvH/RP6YxX+y/DGL/yfzxyz+n8ofs/hPnj9m8f90/pjF/zP5Yxb/KfLHLP6fzR+z+H8uf8zi//n8MYv/lPljFv8v5I9Z/L+YP2bx/1L+mMV/qvwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/t/MH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/t/LHLP6z5o9Z/L+dP2bxny1/zOL/nfwxi/9388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/738MYv/3PljFv958scs/vPmj1n8v58/ZvGfL3/M4v+D/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4/zB/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yh/zOL/4/wxi/+S+WMW/6Xyxyz+P8kfs/j/NH/M4r90/pjFf5n8MYv/svljFv+f5Y9Z/JfLH7P4L58/ZvH/ef6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+L/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/r/MH7P4/yp/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zh+z+P8mf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/mz9m8d8qf8zi/7v8MYv/1vljFv/f549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/w/5Y+/5DwwMbDHkwv9i/z/mj1m2/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/cQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif94A/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8/z/26ZkJEAMAwmicXFzGtm3btm3btm3btm3btm01KbdP5va9X7Az32zU0n8U/aOW/qPqH7X0H03/qKX/6PpHLf3H0D9q6T+m/lFL/7H0j1r6j61/1NJ/HP2jlv7j6h+19B9P/6il//j6Ry39J9A/auk/of5RS/+J9I9a+k+sf9TSfxL9o5b+k+oftfSfTP+opf/k+kct/afQP2rpP6X+UUv/qfSPWvpPrX/U0n8a/aOW/tPqH7X0n07/qKX/9PpHLf1n0D9q6T+j/lFL/5n0j1r6z6x/1NJ/Fv2jlv6z6h+19J9N/6il/+z6Ry3959A/auk/p/5RS/+59I9a+s+tf9TSfx79o5b+8+oftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6b+k/lFL/6X0j1r6L61/1NJ/Gf2jlv7L6h+19F9O/6il//L6Ry39V9A/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+q+oftfRfTf+opf/q+kct/dfQP2rpv6b+UUv/tfSPWvqvrX/U0n8d/aOW/uvqH7X0X0//qKX/+vpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t/u0/4L/a9T/V0n9r/49a+m+jf9TSf1v9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/731j1r676N/1NJ/X/2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/1D9o5b+h+kftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v9Y/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvrfo3/U0v9e/aOW/vfpH7X0v1//qKX/A/pHLf0f1D9q6f+Q/lFL/4f1j1r6P6J/1NL/Uf2jlv6P6R+19H9c/6il/xP6Ry39n9Q/aun/lP5RS/+n9Y9a+j+jf9TS/1n9o5b+z+kftfR/Xv+opf8L+kct/V/UP2rp/5L+UUv/l/WPWvq/on/U0v9V/aOW/q/pH7X0f13/qKX/G/pHLf3f1D9q6f+W/lFL/7f1j1r6v6N/1NL/Xf2jlv7v6R+19H9f/6il/wf6Ry39P9Q/aun/kf5RS/+P9Y9a+n+if9TS/1P9o5b+n+kftfT/XP+opf8X+kct/b/UP2rp/5X+UUv/r/WPWvp/o3/U0v9b/aOW/t/pH7X0/17/qKX/D/pHLf1/1D9q6f+T/lFL/5/1j1r6/6J/1NL/V/2jlv6/6R+19P9d/6il/x/6Ry39/9Q/aun/l/5RS/+/9Y9K+o88iP5RS/9B9Y9a+g+mf9TSf3D9o5b+Q+gftfQfUv+opf9Q+kct/YfWP2rpP4z+UUv/AfpHLf2H1T9q6T+c/lFL/+H1j1r6j6B/1NJ/RP2jlv4j6R8NdP0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9i729i8ysKP46dru6c/+3dzDq8hg8Gmm7iytSuTweZDfSyYqmMxYALZwsqoFOYeghuo1aDEYAyTkSCiblM3gcSY8WKYgLCSqMSpaJyIhjgEdRFTw0RGNC41d9u7tPfaZr3qde3FPp8X7X1O+Z1uS747p2zNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAlDZvu+WGtR0dbZu88MILLwZenOrfmYDUXov+VP9IAAAAAAAAAAAAAACAkeT4dqJT/XMEAAAAAIDTTUvru7qrq4acqh58MOfnbb3vm1698vo9zz++svy+/8OXD3PJCYMPenp6el5q7prZfzipKIrSZ5vefzy5cly6fmfX5dv7jkLx22ebW7dtbz648ytff3ju1OlzanvP1hZrrmvvaFsyoShCdW2xtXTQUFUUYWJtsb100Fg6mFRb3F86WNp7MKU4UDq48NoNHetKJ0741HDaaWn9bFE9pNhiyO8Gg/vv7Nq0q/x+lEuWr1ZT9Pdf1/zDvRUfKxuh//L1Q1Vl/2P+CQIjGlv/ty8svx/lkifc/x9tr1s13MdG7r98/TBB/5DOMM//Qxrtfd7fs3/GCM//c4e55MD+p39Z2VXq/6ZfvlDff6rmZJ7/S5+v7yhUV/Y/Ycjzf+k5vqb8/D+pKELtOH854LTS0vq57tHu/5XdD+2/5qyKTdXg/o+u2lNd6v/wXQ+8v/9U7Un1P3D9UDPK/b/qMweG/liBsWlp3d1Tcf8fQ//FgmEuOdD//N3Hrir1f8bOI/sGfWws/ddW9r94y42fWLx52y317TeuXd+2vu2mxsaGpqXLmhovWr6495Gg7+04f1Xg9DC++38xtWJTVRRtA/tFH172Uqn/g+f+42/9pyaPsf+Jo97/n3P/h2GdP6GYOLHYunbLlk0NfW/Lh419b/v+s2H6P/Hr/xH7n1f+/4Dlr7tLX5AP7H/zzq9+pNT/vZNWPdB/auIY+580Wv+dr31eIMI47//rKjZD+m9/9TvrSv3/6ZXjh/pPjfXr/8mj9r/L/R/Go6W14i/8/I+V+l/9r8PD/TnBSQhT/PkfpJOj/63TfvHNuHWYqn9IJ0f/Sze3Rf5l2/B/+od0cvT/qx1VR+LW4Qz9Qzo5+v9a94Mb49Zhmv4hnRz975/9yFNx6/D/+od0cvR/fP30q+LWoU7/kE6O/i/70t7VceswXf+QTo7+q16Z9kTcOszQP6STo//6qrM/FbcOr9M/pJOj/+s6H34xbh1m6h/SydH/53f+OvL7dMLr9Q/p5Oj/qT9u3RG3DrP0D+nk6P+FWe31cetwpv4hnRz933/DE4/ErcMb9A/p5Oj/6W998FjcOgT9Qzo5+v/Gs0fWxK3DbP1DOjn637fw2B/i1uEs/UM6Ofr/90ev/kDcOrxR/5BOjv7D/uXfjVuHs/UP6eTo/4on72qIW4c5+od0cvTfueK2O+PW4Rz9Qzo5+m9qXjg7bh3O1T+kk6P/GX/++91x6zBX/5BOjv4/dt97K//d75MUztM/pJOj/5s3rH40bh3O1z+kk6P/lTN6Lohbh3n6h3Ry9H/46H0/iluH+fqHdHL0f/edS66IW4c36R/SydH/D249rztuHd6sf0gnR/8v195xa9w6LNA/pJOj/y//rGZZ3Dos1D+kk6P/Hz/0/V1x6/AW/UM6Ofp/8X2PnRO3DhfoH9LJ0f/ui2d9MW4d3qp/SCdH/+9+ZuP6uHVYpH9IJ0f/k/f+/mjcOtTrH9LJ0f/8VQc/FLcOF+of0snR/4ZFa34Xtw6L9Q/p5Oj/mQNPH4pbhyX6h3Ry9L/jsU83x61Dg/4hnRz9P35Zx3/i1qFR/5BOjv7/2fSTj8etw1L9Qzo5+j/z0Le/ELcOTfqHdHL0f/WDk2fGrcNF+od0cvS/8ZrZ34tbh2X6h3Ry9H/J3IcujVuHt+kf0snR/3v+uuLmuHW4WP+QTo7+6+6557m4dViuf0gnR//zrr39mrh1uET/kE6O/q+fU/9k3Dpcqn9IJ0f/dxxvWRC3Div0D+nk6L/rtuf3xa3DSv1DOjn67/7ky3Vx6/B2/UM6OfrfO+XKe+PW4R36BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ssOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfgoAAP//AHfJPA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x8040587f, &(0x7f0000000000)={0x0, 0x8000000000000001}) 1.992967405s ago: executing program 0 (id=608): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 1.952414387s ago: executing program 3 (id=609): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) 1.844841952s ago: executing program 1 (id=610): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x2e) syz_io_uring_setup(0x4e40, &(0x7f0000000280), 0x0, 0x0) io_uring_setup(0x1de0, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.721956657s ago: executing program 3 (id=611): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000003400000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) 1.721298281s ago: executing program 0 (id=612): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) epoll_create1(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 811.689223ms ago: executing program 3 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab000000000000000032"], 0x24}}, 0x0) 702.552675ms ago: executing program 0 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)='\x00\x00\b\x00', 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000740)="bf5f74cae9654950cc7e5d4a7f3f18391283ab9ec06f361035449a3ab608d702f103f21bc7aad20100dff77165bd0a4468696a4568811f8a0800c9cede7850eb0efe6954df90cd07a94f25572628f073bdfed1ec7cceb1d0df48c9475496074a9eb923c4dd481d5b5986c110744104376ec85845385e558a9b2460b01b2f500c", 0x80}, {&(0x7f0000000500)="9940023967975e99e744c481abb67b7a10903d4190099a809f0df6a3514b903efa0535c46ac077861d235ce1e4b5d60b379b58c19f940e384abea0b661", 0x3d}], 0x2}}], 0x2, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) 641.282249ms ago: executing program 1 (id=615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trww'], 0xa) 522.418193ms ago: executing program 3 (id=616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x0) shutdown(r0, 0x1) 429.948432ms ago: executing program 0 (id=617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc038480a, &(0x7f00000000c0)={0x2, 0x100}) 411.344397ms ago: executing program 1 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) 369.141584ms ago: executing program 3 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 241.682294ms ago: executing program 4 (id=620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) r1 = getpgrp(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x36, 0x2d, 0xffffffffffffffff, @link_id}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x24}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usbip_server_init(0x5) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x20) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1}) r7 = syz_pidfd_open(r1, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x14020000) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000001040)=0x7, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000c00)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x9c, 0x11, 0x0, @remote, @rand_addr=' \x01\x00', {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "3ac32fbd60c4d2092b3022c3578d6e2331ea063e48f5c900d713703d64c7704a", "0a9022694743c3a275866a6f586058f905ac0968093470e37f14284c2e0c0c5e89c29e468dc6c04888603829b1df12e6", "f6506ca47fddee326a8e17faeba7ca35e48f0e743c4d96ed31c8f155", {"36631debe64e8290c7617f95b0e46484", "376458dd9da24da4e6731fbb325c0ad7"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): T5238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 68.450055][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.654256][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 68.681696][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 68.722001][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.751534][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.772787][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.789488][ T5144] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.802660][ T8] usb 1-1: config 0 descriptor?? [ 69.003013][ T5144] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 69.083870][ T5144] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 69.112167][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.273036][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 69.286561][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 69.319543][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 69.504058][ T8] usb 1-1: USB disconnect, device number 2 [ 69.585994][ T5259] usb usb8: usbfs: process 5259 (syz.3.28) did not claim interface 0 before use [ 69.950079][ T5253] loop2: detected capacity change from 0 to 40427 [ 70.040875][ T5253] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.115406][ T5253] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.541099][ T5253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.090686][ T5253] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 71.218044][ T5253] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 71.249827][ T5253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.587979][ T5144] usb 5-1: string descriptor 0 read error: -71 [ 71.600738][ T5144] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 71.609062][ T5144] usb 5-1: No valid video chain found. [ 71.609717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.636108][ T5144] usb 5-1: USB disconnect, device number 2 [ 71.926211][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.936511][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.072917][ T5303] loop0: detected capacity change from 0 to 32768 [ 75.748356][ T5322] mmap: syz.2.46 (5322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.364020][ T5351] syz.3.53[5351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.364133][ T5351] syz.3.53[5351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.414007][ T5353] loop0: detected capacity change from 0 to 512 [ 76.444234][ T5353] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.476219][ T5353] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 77.492907][ T25] cfg80211: failed to load regulatory.db [ 78.566780][ T5370] loop4: detected capacity change from 0 to 32768 [ 81.281000][ T5389] loop3: detected capacity change from 0 to 512 [ 81.440309][ T5389] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.63: corrupted in-inode xattr: invalid ea_ino [ 81.452098][ T5398] loop1: detected capacity change from 0 to 256 [ 81.520069][ T5389] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.63: couldn't read orphan inode 15 (err -117) [ 81.601961][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.617690][ T29] audit: type=1804 audit(1720117165.193:7): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.67" name="/newroot/12/bus/bus" dev="loop1" ino=1048596 res=1 errno=0 [ 81.651545][ T5398] Invalid ELF header magic: != ELF [ 81.702729][ T29] audit: type=1800 audit(1720117165.193:8): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="bus" dev="loop1" ino=1048596 res=0 errno=0 [ 81.797434][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.919625][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.119337][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 82.146559][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.192878][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.212811][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.223656][ T29] audit: type=1107 audit(1720117165.793:9): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 82.239789][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.282377][ T9] hub 5-1:4.0: USB hub found [ 82.564033][ T9] hub 5-1:4.0: 7 ports detected [ 82.575935][ T9] hub 5-1:4.0: insufficient power available to use all downstream ports [ 82.839119][ T9] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 82.846108][ T9] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 83.768200][ T9] usb 5-1: USB disconnect, device number 3 [ 84.883938][ T5438] loop2: detected capacity change from 0 to 256 [ 84.986579][ T29] audit: type=1804 audit(1720117168.563:10): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.79" name="/newroot/14/bus/bus" dev="loop2" ino=1048598 res=1 errno=0 [ 85.013209][ T5438] Invalid ELF header magic: != ELF [ 85.090382][ T5441] xt_hashlimit: overflow, rate too high: 0 [ 85.133488][ T29] audit: type=1800 audit(1720117168.563:11): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.79" name="bus" dev="loop2" ino=1048598 res=0 errno=0 [ 85.773660][ T5447] loop0: detected capacity change from 0 to 32768 [ 86.275577][ T5104] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 86.420891][ T5452] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.609309][ T5146] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.850394][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 86.881695][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 86.908857][ T5146] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.933624][ T5146] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.948257][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.967148][ T5146] usb 2-1: config 0 descriptor?? [ 86.979208][ T5451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.209705][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.451663][ T5146] usbhid 2-1:0.0: can't add hid device: -71 [ 87.457722][ T5146] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.474960][ T5146] usb 2-1: USB disconnect, device number 2 [ 87.609416][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 87.630693][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.646147][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 87.664232][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.673492][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.684165][ T9] usb 1-1: config 0 descriptor?? [ 87.690108][ T5457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 87.699370][ T9] hub 1-1:0.0: USB hub found [ 87.920955][ T9] hub 1-1:0.0: 2 ports detected [ 87.996422][ T5471] loop4: detected capacity change from 0 to 512 [ 88.061703][ T5471] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.116595][ T5471] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 88.136820][ T5471] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.88: Corrupt directory, running e2fsck is recommended [ 88.186549][ T5471] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 88.208611][ T5471] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.88: corrupted in-inode xattr: invalid ea_ino [ 88.249046][ T5471] EXT4-fs (loop4): Remounting filesystem read-only [ 88.262597][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.009327][ T5144] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.129349][ T1798] usb 1-1: USB disconnect, device number 3 [ 92.314926][ T5090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.403835][ T5144] usb 2-1: device not accepting address 3, error -71 [ 92.782297][ T5104] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 94.809158][ C0] sched: RT throttling activated [ 95.357573][ T5506] fuse: Unknown parameter '0x0000000000000006' [ 95.959379][ T927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.217168][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 96.412888][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 96.576796][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.599838][ T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.671605][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.731935][ T927] usb 3-1: config 0 descriptor?? [ 96.763941][ T5510] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.987939][ T5527] loop3: detected capacity change from 0 to 512 [ 97.055866][ T5527] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.069418][ T5146] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.096013][ T5527] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 97.109060][ T5527] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.104: Corrupt directory, running e2fsck is recommended [ 97.203239][ T927] usbhid 3-1:0.0: can't add hid device: -71 [ 97.216120][ T927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.240514][ T5527] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 97.241398][ T927] usb 3-1: USB disconnect, device number 2 [ 97.248687][ T5527] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.104: corrupted in-inode xattr: invalid ea_ino [ 97.269296][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 97.300829][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 97.330166][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 97.353259][ T5527] EXT4-fs (loop3): Remounting filesystem read-only [ 97.362606][ T5146] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 97.376922][ T5527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.383635][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.406523][ T5146] usb 5-1: config 0 descriptor?? [ 97.415280][ T5523] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 97.607512][ T5146] hub 5-1:0.0: USB hub found [ 101.312771][ T5146] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 101.369488][ T5146] usbhid 5-1:0.0: can't add hid device: -71 [ 101.401773][ T5146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.506038][ T5146] usb 5-1: USB disconnect, device number 4 [ 101.529958][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.597679][ T5104] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 105.945476][ T927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.989354][ T5118] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.189342][ T5118] usb 5-1: Using ep0 maxpacket: 32 [ 106.190237][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 106.220073][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 106.237592][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 106.239220][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 106.257041][ T5118] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.279118][ T5118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.323945][ T5118] usb 5-1: config 0 descriptor?? [ 106.339209][ T927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.361766][ T5584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.382655][ T927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.383582][ T5118] hub 5-1:0.0: USB hub found [ 106.398782][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.441502][ T927] usb 1-1: config 0 descriptor?? [ 106.474842][ T5582] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.574565][ T5118] hub 5-1:0.0: 2 ports detected [ 106.591979][ T5118] hub 5-1:0.0: insufficient power available to use all downstream ports [ 106.907234][ T927] usbhid 1-1:0.0: can't add hid device: -71 [ 106.953853][ T927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.997288][ T927] usb 1-1: USB disconnect, device number 4 [ 107.699714][ T5118] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 107.724914][ T5118] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 107.787879][ T5118] usbhid 5-1:0.0: can't add hid device: -32 [ 107.824315][ T5118] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 107.949040][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 108.016420][ T5602] bond0: entered promiscuous mode [ 108.049457][ T5602] bond_slave_0: entered promiscuous mode [ 108.074165][ T5602] bond_slave_1: entered promiscuous mode [ 108.220718][ T5104] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 109.318112][ T5118] usb 5-1: USB disconnect, device number 5 [ 109.779252][ T5118] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.002036][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 110.020369][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 110.049307][ T5118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.097972][ T5118] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.119386][ T5118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.157488][ T5118] usb 1-1: config 0 descriptor?? [ 110.201473][ T5624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.640108][ T5118] usbhid 1-1:0.0: can't add hid device: -71 [ 110.641751][ T5104] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 110.654939][ T5104] Bluetooth: hci1: Injecting HCI hardware error event [ 110.663487][ T5104] Bluetooth: hci1: hardware error 0x00 [ 110.695097][ T5118] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.743564][ T5118] usb 1-1: USB disconnect, device number 5 [ 110.863593][ T5639] loop3: detected capacity change from 0 to 1024 [ 111.110998][ T5639] EXT4-fs: Ignoring removed orlov option [ 111.137131][ T5639] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.170703][ T5639] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 111.178388][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 111.279884][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.286195][ T55] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 111.315389][ T5652] bond0: entered promiscuous mode [ 111.337157][ T5652] bond_slave_0: entered promiscuous mode [ 111.354989][ T5652] bond_slave_1: entered promiscuous mode [ 112.295546][ T5639] fscrypt (loop3): Error allocating 'cts(cbc(aes))' transform: -4 [ 112.314340][ T5118] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.465483][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.568434][ T5118] usb 2-1: Using ep0 maxpacket: 32 [ 112.588693][ T5118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 112.621480][ T5118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 112.684784][ T5118] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 112.719664][ T5104] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.749398][ T5118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.798000][ T5118] usb 2-1: config 0 descriptor?? [ 112.820093][ T5657] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.850688][ T5118] hub 2-1:0.0: USB hub found [ 113.049289][ T5118] hub 2-1:0.0: 2 ports detected [ 113.060178][ T5118] hub 2-1:0.0: insufficient power available to use all downstream ports [ 114.167700][ T5118] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 114.258043][ T5118] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 114.294030][ T5118] usbhid 2-1:0.0: can't add hid device: -32 [ 114.313881][ T5118] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 114.407667][ T5705] loop0: detected capacity change from 0 to 4096 [ 114.497811][ T5705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.973153][ T5089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.277608][ T5711] bond0: entered promiscuous mode [ 115.303300][ T5713] loop3: detected capacity change from 0 to 1024 [ 115.312329][ T5711] bond_slave_0: entered promiscuous mode [ 115.330339][ T5711] bond_slave_1: entered promiscuous mode [ 115.337524][ T5713] EXT4-fs: Ignoring removed orlov option [ 115.380893][ T5713] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.414494][ T5713] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 115.488888][ T5713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.541256][ T5713] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 115.584350][ T5716] loop0: detected capacity change from 0 to 512 [ 115.659336][ T5716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.672394][ T5716] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.699788][ T5716] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 589824 out of range 0-6 [ 115.710393][ T5716] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 115.720355][ T5716] EXT4-fs error (device loop0): ext4_acquire_dquot:6862: comm syz.0.158: Failed to acquire dquot type 1 [ 115.759093][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.787727][ T5089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.969616][ T5104] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 116.356663][ T25] usb 2-1: USB disconnect, device number 5 [ 116.481016][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 117.077411][ T5748] loop2: detected capacity change from 0 to 512 [ 117.108316][ T5748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.121268][ T5748] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.129680][ T5104] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 117.141258][ T5104] Bluetooth: hci4: Injecting HCI hardware error event [ 117.153607][ T5104] Bluetooth: hci4: hardware error 0x00 [ 117.239829][ T5748] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 589824 out of range 0-6 [ 117.250299][ T5748] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.260412][ T5748] EXT4-fs error (device loop2): ext4_acquire_dquot:6862: comm syz.2.170: Failed to acquire dquot type 1 [ 117.354833][ T5722] loop0: detected capacity change from 0 to 40427 [ 117.381214][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.171'. [ 117.392789][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.395241][ T5722] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 117.446786][ T5722] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.702243][ T5758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 117.799469][ T5722] F2FS-fs (loop0): invalid crc value [ 117.816457][ T5760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 117.823377][ T5760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.834520][ T5760] vhci_hcd vhci_hcd.0: Device attached [ 117.985245][ T5762] vhci_hcd: connection closed [ 118.009252][ T4173] vhci_hcd: stop threads [ 118.028840][ T4173] vhci_hcd: release socket [ 118.278134][ T5722] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.455483][ T5118] usb 18-1: SetAddress Request (2) to port 0 [ 118.833392][ T5118] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 118.839518][ T4173] vhci_hcd: disconnect device [ 118.899268][ T5118] usb 18-1: enqueue for inactive port 0 [ 119.340457][ T5118] usb usb18-port1: attempt power cycle [ 119.371021][ T5104] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.658621][ T5759] loop2: detected capacity change from 0 to 32768 [ 119.685042][ T5759] XFS: attr2 mount option is deprecated. [ 119.706730][ T5759] XFS: ikeep mount option is deprecated. [ 119.714046][ T5759] XFS: noikeep mount option is deprecated. [ 119.756893][ T5759] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.759659][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.901538][ T5759] XFS (loop2): Ending clean mount [ 119.938770][ T5759] XFS (loop2): Quotacheck needed: Please wait. [ 119.975002][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 119.987022][ T25] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.009043][ T5118] usb usb18-port1: unable to enumerate USB device [ 120.017471][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.035631][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.045848][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.047147][ T5759] XFS (loop2): Quotacheck: Done. [ 120.098603][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.124957][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.133263][ T5091] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 120.163570][ T25] usbtmc 1-1:16.0: bulk endpoints not found [ 120.375046][ T5809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 120.743615][ T5811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 122.494400][ T25] usb 1-1: USB disconnect, device number 6 [ 122.741438][ T5840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 122.748033][ T5840] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.775694][ T5838] syz.3.191 uses obsolete (PF_INET,SOCK_PACKET) [ 122.788383][ T5840] vhci_hcd vhci_hcd.0: Device attached [ 122.797688][ T5844] vhci_hcd: connection closed [ 122.798992][ T4173] vhci_hcd: stop threads [ 122.845312][ T4173] vhci_hcd: release socket [ 122.897655][ T4173] vhci_hcd: disconnect device [ 124.347041][ T5841] loop2: detected capacity change from 0 to 32768 [ 124.390157][ T5841] XFS: attr2 mount option is deprecated. [ 124.403880][ T5862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.198'. [ 124.487596][ T5841] XFS: ikeep mount option is deprecated. [ 124.504005][ T5841] XFS: noikeep mount option is deprecated. [ 124.692934][ T5871] Zero length message leads to an empty skb [ 124.787754][ T5841] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 125.489784][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 125.548517][ T5841] XFS (loop2): Ending clean mount [ 125.574385][ T5841] XFS (loop2): Quotacheck needed: Please wait. [ 125.720711][ T5841] XFS (loop2): Quotacheck: Done. [ 126.557687][ T5091] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 127.127210][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 127.787767][ T5923] loop2: detected capacity change from 0 to 256 [ 128.609451][ T5923] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 129.205181][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 130.349503][ T5946] delete_channel: no stack [ 131.880584][ T5965] loop4: detected capacity change from 0 to 256 [ 131.924082][ T5965] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 132.515249][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.235'. [ 133.059624][ T5989] loop0: detected capacity change from 0 to 256 [ 133.107644][ T5989] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 133.363035][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.369568][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.107670][ T5104] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 135.246105][ T5987] loop3: detected capacity change from 0 to 32768 [ 135.315700][ T5987] XFS: attr2 mount option is deprecated. [ 135.360265][ T5987] XFS: ikeep mount option is deprecated. [ 135.381989][ T5987] XFS: noikeep mount option is deprecated. [ 135.484084][ T5987] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 135.640139][ T5987] XFS (loop3): Ending clean mount [ 135.673761][ T5987] XFS (loop3): Quotacheck needed: Please wait. [ 135.818385][ T5987] XFS (loop3): Quotacheck: Done. [ 136.009442][ T5095] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 136.919546][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 138.051696][ T6048] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 138.058262][ T6048] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 138.118364][ T6048] vhci_hcd vhci_hcd.0: Device attached [ 138.124209][ T6049] vhci_hcd: connection closed [ 138.145981][ T62] vhci_hcd: stop threads [ 138.149302][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.169432][ T1798] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.177080][ T62] vhci_hcd: release socket [ 138.187276][ T62] vhci_hcd: disconnect device [ 138.349434][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 138.359712][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 138.371033][ T1798] usb 4-1: Using ep0 maxpacket: 32 [ 138.387609][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 138.399711][ T1798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.415189][ T1798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.440161][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.451380][ T1798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 138.469277][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.490012][ T1798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.546910][ T25] usb 5-1: config 0 descriptor?? [ 138.570157][ T6042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.582137][ T1798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 138.613313][ T25] hub 5-1:0.0: USB hub found [ 138.668606][ T1798] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 138.707131][ T1798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.760115][ T1798] usb 4-1: config 0 descriptor?? [ 138.797691][ T25] hub 5-1:0.0: 2 ports detected [ 138.830887][ T25] hub 5-1:0.0: insufficient power available to use all downstream ports [ 138.940240][ T5104] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 139.194921][ T1798] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 139.236793][ T1798] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 139.269759][ T1798] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 139.307577][ T1798] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 139.349747][ T1798] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 139.390386][ T1798] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 139.501607][ T1798] usb 4-1: USB disconnect, device number 3 [ 139.920720][ T25] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 140.006381][ T25] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 140.084842][ T25] usbhid 5-1:0.0: can't add hid device: -32 [ 140.168605][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 141.133921][ T6083] loop3: detected capacity change from 0 to 512 [ 141.580660][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.688733][ T6092] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 141.695301][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.717755][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 141.727099][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 141.737871][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 141.762349][ T6094] vhci_hcd: connection closed [ 141.791725][ T62] vhci_hcd: stop threads [ 141.828269][ T62] vhci_hcd: release socket [ 141.833750][ T62] vhci_hcd: disconnect device [ 141.923508][ T25] usb 5-1: USB disconnect, device number 6 [ 142.360574][ T6078] loop1: detected capacity change from 0 to 40427 [ 142.609835][ T6078] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.678397][ T6078] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.828922][ T6078] F2FS-fs (loop1): invalid crc value [ 142.952988][ T6078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.986546][ T6118] capability: warning: `syz.0.277' uses deprecated v2 capabilities in a way that may be insecure [ 143.243111][ T6078] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.258002][ T6078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.437077][ T6131] loop4: detected capacity change from 0 to 512 [ 144.151241][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 144.191745][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 144.229350][ T5146] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.419365][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 144.448075][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 144.487896][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 144.505643][ T5146] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.523751][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.550238][ T6152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 144.556900][ T6152] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.564952][ T5146] usb 5-1: config 0 descriptor?? [ 144.578658][ T6134] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.594030][ T5146] hub 5-1:0.0: USB hub found [ 144.607112][ T6153] vhci_hcd: connection closed [ 144.616845][ T6152] vhci_hcd vhci_hcd.0: Device attached [ 144.633125][ T12] vhci_hcd: stop threads [ 144.637436][ T12] vhci_hcd: release socket [ 144.653318][ T5104] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 144.679355][ T12] vhci_hcd: disconnect device [ 144.689494][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.826010][ T5146] hub 5-1:0.0: 2 ports detected [ 144.834481][ T5146] hub 5-1:0.0: insufficient power available to use all downstream ports [ 144.873571][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 145.067870][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 145.079821][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.092972][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.102677][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.116733][ T25] usb 2-1: config 0 descriptor?? [ 145.130191][ T6148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.965338][ T5146] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 145.985143][ T5146] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 146.035966][ T5146] usbhid 5-1:0.0: can't add hid device: -32 [ 146.045668][ T5146] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 146.111146][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 146.178273][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 146.268671][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.285694][ T6171] loop0: detected capacity change from 0 to 1024 [ 146.486826][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 146.597260][ T927] usb 2-1: USB disconnect, device number 6 [ 146.659544][ T6171] loop0: detected capacity change from 1024 to 0 [ 147.187212][ T6168] loop2: detected capacity change from 0 to 40427 [ 147.211148][ T6168] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 147.283825][ T6168] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 147.382585][ T6168] F2FS-fs (loop2): invalid crc value [ 147.426873][ T6168] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.480453][ T6168] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 147.487698][ T6168] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.535680][ T6168] syz.2.292: attempt to access beyond end of device [ 147.535680][ T6168] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 147.562917][ T6168] syz.2.292: attempt to access beyond end of device [ 147.562917][ T6168] loop2: rw=0, sector=45104, nr_sectors = 8 limit=40427 [ 147.909789][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 147.936321][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 148.276321][ T6196] loop0: detected capacity change from 0 to 512 [ 148.879705][ T1798] usb 5-1: USB disconnect, device number 7 [ 148.999750][ T5104] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 149.253940][ T6220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 149.260535][ T6220] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.277245][ T6219] loop2: detected capacity change from 0 to 1024 [ 149.278684][ T6220] vhci_hcd vhci_hcd.0: Device attached [ 149.338813][ T6221] vhci_hcd: connection closed [ 149.340647][ T4144] vhci_hcd: stop threads [ 149.343810][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 149.356861][ T4144] vhci_hcd: release socket [ 149.369736][ T4144] vhci_hcd: disconnect device [ 149.439367][ T6219] loop2: detected capacity change from 1024 to 0 [ 150.060277][ T927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.214463][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 150.226029][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 150.285716][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 150.324661][ T6240] loop0: detected capacity change from 0 to 2048 [ 150.327456][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 150.385994][ T6240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.436964][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.457302][ T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.499318][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.535121][ T927] usb 3-1: config 0 descriptor?? [ 150.549911][ T6226] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.681782][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.009325][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 151.018158][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 151.738167][ T927] usbhid 3-1:0.0: can't add hid device: -71 [ 151.749389][ T927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.764635][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 151.765614][ T927] usb 3-1: USB disconnect, device number 3 [ 151.813049][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.866840][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.908646][ T25] usb 5-1: config 0 descriptor?? [ 151.916022][ T6241] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.932186][ T25] hub 5-1:0.0: USB hub found [ 152.159996][ T25] hub 5-1:0.0: 2 ports detected [ 152.178578][ T25] hub 5-1:0.0: insufficient power available to use all downstream ports [ 152.544040][ T5104] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 152.954274][ T6270] loop1: detected capacity change from 0 to 1024 [ 153.017241][ T4144] hfsplus: b-tree write err: -5, ino 4 [ 153.159858][ T6270] loop1: detected capacity change from 1024 to 0 [ 153.291641][ T25] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 153.379270][ T25] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 153.521258][ T25] usbhid 5-1:0.0: can't add hid device: -32 [ 153.532843][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 153.549437][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 153.581959][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 153.743386][ T6275] bond0: entered promiscuous mode [ 153.766958][ T6275] bond_slave_0: entered promiscuous mode [ 153.795844][ T6275] bond_slave_1: entered promiscuous mode [ 153.853313][ T6283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 153.859870][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 153.870709][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 153.963595][ T6284] vhci_hcd: connection closed [ 153.968251][ T1100] vhci_hcd: stop threads [ 154.007250][ T1100] vhci_hcd: release socket [ 154.053267][ T1100] vhci_hcd: disconnect device [ 154.299473][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 154.640978][ T6301] syz.1.327: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 154.641259][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.327 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 154.641276][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 154.641287][ T6301] Call Trace: [ 154.641293][ T6301] [ 154.641299][ T6301] dump_stack_lvl+0x241/0x360 [ 154.641329][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.641344][ T6301] ? __pfx__printk+0x10/0x10 [ 154.641363][ T6301] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 154.641376][ T6301] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 154.641390][ T6301] warn_alloc+0x278/0x410 [ 154.641404][ T6301] ? stack_depot_save_flags+0x6e4/0x830 [ 154.641420][ T6301] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 154.641431][ T6301] ? __pfx_warn_alloc+0x10/0x10 [ 154.641446][ T6301] ? kasan_save_track+0x3f/0x80 [ 154.641456][ T6301] ? __kasan_kmalloc+0x98/0xb0 [ 154.641468][ T6301] ? xsk_setsockopt+0x598/0x950 [ 154.641481][ T6301] ? do_sock_setsockopt+0x3af/0x720 [ 154.641493][ T6301] ? __sys_setsockopt+0x1ae/0x250 [ 154.641503][ T6301] ? __x64_sys_setsockopt+0xb5/0xd0 [ 154.641514][ T6301] ? do_syscall_64+0xf3/0x230 [ 154.641524][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.641541][ T6301] __vmalloc_node_range_noprof+0x130/0x1460 [ 154.641567][ T6301] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.641580][ T6301] ? __kasan_kmalloc+0x98/0xb0 [ 154.641592][ T6301] ? xskq_create+0x54/0x170 [ 154.641608][ T6301] vmalloc_user_noprof+0x74/0x80 [ 154.641619][ T6301] ? xskq_create+0xb6/0x170 [ 154.641632][ T6301] xskq_create+0xb6/0x170 [ 154.641647][ T6301] xsk_init_queue+0xa1/0x100 [ 154.641662][ T6301] xsk_setsockopt+0x598/0x950 [ 154.641677][ T6301] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.641692][ T6301] ? __pfx_lock_acquire+0x10/0x10 [ 154.641705][ T6301] ? aa_sock_opt_perm+0x79/0x120 [ 154.641719][ T6301] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 154.641733][ T6301] ? security_socket_setsockopt+0x87/0xb0 [ 154.641748][ T6301] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.641760][ T6301] do_sock_setsockopt+0x3af/0x720 [ 154.641776][ T6301] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 154.641787][ T6301] ? __fget_files+0x29/0x470 [ 154.641802][ T6301] ? __fget_files+0x3f6/0x470 [ 154.641820][ T6301] __sys_setsockopt+0x1ae/0x250 [ 154.641835][ T6301] __x64_sys_setsockopt+0xb5/0xd0 [ 154.641849][ T6301] do_syscall_64+0xf3/0x230 [ 154.641859][ T6301] ? clear_bhb_loop+0x35/0x90 [ 154.641873][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.641888][ T6301] RIP: 0033:0x7efd11775bd9 [ 154.641903][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.641912][ T6301] RSP: 002b:00007efd12582048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.641924][ T6301] RAX: ffffffffffffffda RBX: 00007efd11904110 RCX: 00007efd11775bd9 [ 154.641933][ T6301] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 154.641940][ T6301] RBP: 00007efd117e4aa1 R08: 0000000000000020 R09: 0000000000000000 [ 154.641954][ T6301] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 154.641961][ T6301] R13: 000000000000006e R14: 00007efd11904110 R15: 00007fff0f34afa8 [ 154.641977][ T6301] [ 154.641983][ T6301] Mem-Info: [ 154.641993][ T6301] active_anon:10287 inactive_anon:0 isolated_anon:0 [ 154.641993][ T6301] active_file:1411 inactive_file:38165 isolated_file:0 [ 154.641993][ T6301] unevictable:768 dirty:100 writeback:11 [ 154.641993][ T6301] slab_reclaimable:8853 slab_unreclaimable:93657 [ 154.641993][ T6301] mapped:19951 shmem:6980 pagetables:805 [ 154.641993][ T6301] sec_pagetables:0 bounce:0 [ 154.641993][ T6301] kernel_misc_reclaimable:0 [ 154.641993][ T6301] free:1404669 free_pcp:281 free_cma:0 [ 154.642024][ T6301] Node 0 active_anon:41148kB inactive_anon:0kB active_file:5644kB inactive_file:152576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79804kB dirty:400kB writeback:44kB shmem:26384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10308kB pagetables:3220kB sec_pagetables:0kB all_unreclaimable? no [ 154.642054][ T6301] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 154.642081][ T6301] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.642113][ T6301] lowmem_reserve[]: 0 2569 2569 0 0 [ 154.642138][ T6301] Node 0 DMA32 free:1653908kB boost:0kB min:35096kB low:43868kB high:52640kB reserved_highatomic:0KB active_anon:41140kB inactive_anon:0kB active_file:5644kB inactive_file:152480kB unevictable:1536kB writepending:444kB present:3129332kB managed:2657772kB mlocked:0kB bounce:0kB free_pcp:1120kB local_pcp:812kB free_cma:0kB [ 154.642170][ T6301] lowmem_reserve[]: 0 0 0 0 0 [ 154.642193][ T6301] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048576kB managed:104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.642222][ T6301] lowmem_reserve[]: 0 0 0 0 0 [ 154.642246][ T6301] Node 1 Normal free:3949408kB boost:0kB min:54808kB low:68508kB high:82208kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 154.642277][ T6301] lowmem_reserve[]: 0 0 0 0 0 [ 154.642300][ T6301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.642399][ T6301] Node 0 DMA32: 227*4kB (UME) 301*8kB (UME) 195*16kB (UE) 133*32kB (UME) 88*64kB (UE) 14*128kB (UE) 22*256kB (UM) 20*512kB (ME) 10*1024kB (M) 6*2048kB (UM) 390*4096kB (ME) = 1653956kB [ 154.642510][ T6301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.642577][ T6301] Node 1 Normal: 0*4kB 8*8kB (UM) 8*16kB (UM) 3*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3949408kB [ 154.642682][ T6301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.642692][ T6301] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 154.642702][ T6301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.642711][ T6301] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 154.642720][ T6301] 46552 total pagecache pages [ 154.642725][ T6301] 0 pages in swap cache [ 154.642729][ T6301] Free swap = 124464kB [ 154.642734][ T6301] Total swap = 124996kB [ 154.642739][ T6301] 2097051 pages RAM [ 154.642744][ T6301] 0 pages HighMem/MovableOnly [ 154.642748][ T6301] 401462 pages reserved [ 154.642752][ T6301] 0 pages cma reserved [ 155.623911][ T6309] loop4: detected capacity change from 0 to 128 [ 155.705141][ T6309] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 155.738875][ T25] usb 5-1: USB disconnect, device number 8 [ 155.769535][ T6309] sysv_free_block: trying to free block not in datazone [ 155.795903][ T6309] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 156.448805][ T6309] loop4: detected capacity change from 0 to 1024 [ 156.609764][ T6309] loop4: detected capacity change from 1024 to 0 [ 156.698494][ T1100] kworker/u8:7: attempt to access beyond end of device [ 156.698494][ T1100] loop4: rw=1, sector=206, nr_sectors = 8 limit=0 [ 156.700392][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 156.703781][ T12] kworker/u8:1: attempt to access beyond end of device [ 156.703781][ T12] loop4: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 156.709318][ T5090] syz-executor: attempt to access beyond end of device [ 156.709318][ T5090] loop4: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 156.711156][ T5090] syz-executor: attempt to access beyond end of device [ 156.711156][ T5090] loop4: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 157.879432][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.074628][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.074662][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.074700][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 158.074725][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.119104][ T25] usb 4-1: config 0 descriptor?? [ 158.502338][ T25] usb 4-1: USB disconnect, device number 4 [ 159.033132][ T6342] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 159.039696][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.072946][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 159.080757][ T6348] vhci_hcd: connection closed [ 159.083208][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 159.101106][ T4206] vhci_hcd: stop threads [ 159.105412][ T4206] vhci_hcd: release socket [ 159.114220][ T6352] loop4: detected capacity change from 0 to 128 [ 159.122279][ T4206] vhci_hcd: disconnect device [ 159.169061][ T6352] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 159.169332][ T927] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.194436][ T6352] sysv_free_block: trying to free block not in datazone [ 159.221480][ T6352] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 159.282200][ T6352] loop4: detected capacity change from 0 to 1024 [ 159.349291][ T6352] loop4: detected capacity change from 1024 to 0 [ 159.389207][ T927] usb 1-1: Using ep0 maxpacket: 32 [ 159.421167][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 159.450944][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 159.463103][ T927] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.501949][ T1100] kworker/u8:7: attempt to access beyond end of device [ 159.501949][ T1100] loop4: rw=1, sector=206, nr_sectors = 8 limit=0 [ 159.516469][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.530158][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 159.536480][ T927] usb 1-1: config 0 descriptor?? [ 159.543937][ T1100] kworker/u8:7: attempt to access beyond end of device [ 159.543937][ T1100] loop4: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 159.558210][ T6343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.569850][ T5090] syz-executor: attempt to access beyond end of device [ 159.569850][ T5090] loop4: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 159.592311][ T927] hub 1-1:0.0: USB hub found [ 159.618777][ T5090] syz-executor: attempt to access beyond end of device [ 159.618777][ T5090] loop4: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 159.806085][ T927] hub 1-1:0.0: 2 ports detected [ 159.851205][ T927] hub 1-1:0.0: insufficient power available to use all downstream ports [ 160.880648][ T927] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 160.925032][ T927] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 160.977701][ T927] usbhid 1-1:0.0: can't add hid device: -32 [ 160.998398][ T927] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 161.410526][ T5146] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.051332][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 162.152913][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 162.182724][ T5146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.216611][ T5146] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.227024][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.252915][ T5146] usb 3-1: config 0 descriptor?? [ 162.268955][ T6374] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.450287][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.629333][ T25] usb 2-1: device descriptor read/64, error -71 [ 162.655557][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 162.703259][ T5146] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 162.733900][ T5146] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 162.766597][ T5146] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 162.929919][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.964036][ T1798] usb 1-1: USB disconnect, device number 7 [ 162.997997][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 163.097288][ T1798] usb 3-1: USB disconnect, device number 4 [ 163.103476][ T25] usb 2-1: device descriptor read/64, error -71 [ 163.233799][ T6394] loop3: detected capacity change from 0 to 128 [ 163.235979][ T25] usb usb2-port1: attempt power cycle [ 163.263120][ T6394] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 163.302958][ T6394] sysv_free_block: trying to free block not in datazone [ 163.328150][ T6394] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 163.370916][ T6394] loop3: detected capacity change from 0 to 1024 [ 163.459359][ T6394] loop3: detected capacity change from 1024 to 0 [ 163.466109][ T5111] udevd: attempt to access beyond end of device [ 163.466109][ T5111] loop3: rw=0, sector=10, nr_sectors = 2 limit=0 [ 163.488355][ T5111] Buffer I/O error on dev loop3, logical block 5, async page read [ 163.518438][ T5111] udevd: attempt to access beyond end of device [ 163.518438][ T5111] loop3: rw=0, sector=12, nr_sectors = 2 limit=0 [ 163.539733][ T5111] Buffer I/O error on dev loop3, logical block 6, async page read [ 163.547644][ T5111] udevd: attempt to access beyond end of device [ 163.547644][ T5111] loop3: rw=0, sector=14, nr_sectors = 2 limit=0 [ 163.561593][ T62] kworker/u8:4: attempt to access beyond end of device [ 163.561593][ T62] loop3: rw=1, sector=206, nr_sectors = 8 limit=0 [ 163.583166][ T5111] Buffer I/O error on dev loop3, logical block 7, async page read [ 163.589551][ T5146] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.605931][ T62] hfsplus: b-tree write err: -5, ino 4 [ 163.614088][ T62] kworker/u8:4: attempt to access beyond end of device [ 163.614088][ T62] loop3: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 163.629990][ T5095] syz-executor: attempt to access beyond end of device [ 163.629990][ T5095] loop3: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 163.657753][ T5095] syz-executor: attempt to access beyond end of device [ 163.657753][ T5095] loop3: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 163.709816][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.760058][ T25] usb 2-1: device descriptor read/8, error -71 [ 163.798868][ T5146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.849473][ T5104] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 163.859039][ T5104] Bluetooth: hci0: Injecting HCI hardware error event [ 163.868246][ T55] Bluetooth: hci0: hardware error 0x00 [ 163.870725][ T5146] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.925935][ T5146] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 163.953417][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.971728][ T5146] usb 1-1: config 0 descriptor?? [ 164.034977][ T6411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 164.041519][ T6411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.055915][ T6411] vhci_hcd vhci_hcd.0: Device attached [ 164.081793][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.119322][ T6412] vhci_hcd: connection closed [ 164.119582][ T4173] vhci_hcd: stop threads [ 164.134555][ T4173] vhci_hcd: release socket [ 164.151376][ T4173] vhci_hcd: disconnect device [ 164.170635][ T25] usb 2-1: device descriptor read/8, error -71 [ 164.279898][ T5146] usb 1-1: USB disconnect, device number 8 [ 164.294656][ T25] usb usb2-port1: unable to enumerate USB device [ 165.919454][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 166.100135][ T29] audit: type=1326 audit(1720117249.683:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.108654][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 166.173695][ T5146] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.195818][ T29] audit: type=1326 audit(1720117249.683:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.228395][ T29] audit: type=1326 audit(1720117249.713:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.292906][ T29] audit: type=1326 audit(1720117249.713:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.322177][ T6432] loop0: detected capacity change from 0 to 128 [ 166.342823][ T29] audit: type=1326 audit(1720117249.713:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.369429][ T6432] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 166.382282][ T6432] sysv_free_block: trying to free block not in datazone [ 166.406342][ T6432] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 166.413297][ T29] audit: type=1326 audit(1720117249.713:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.435829][ T5146] usb 4-1: Using ep0 maxpacket: 32 [ 166.441524][ T29] audit: type=1326 audit(1720117249.713:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.469426][ T25] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 166.510679][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 166.536033][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 166.544384][ T6432] loop0: detected capacity change from 0 to 1024 [ 166.554035][ T5146] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.564571][ T29] audit: type=1326 audit(1720117249.713:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.588270][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.615036][ T5146] usb 4-1: config 0 descriptor?? [ 166.623338][ T29] audit: type=1326 audit(1720117249.713:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.655282][ T6424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.665989][ T5146] hub 4-1:0.0: USB hub found [ 166.674860][ T29] audit: type=1326 audit(1720117249.713:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd11775bd9 code=0x7ffc0000 [ 166.707065][ T25] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 166.709374][ T6432] loop0: detected capacity change from 1024 to 0 [ 166.715644][ T25] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 166.741813][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 166.764337][ T25] usb 2-1: config 1 has no interface number 0 [ 166.780424][ T4173] kworker/u8:10: attempt to access beyond end of device [ 166.780424][ T4173] loop0: rw=1, sector=206, nr_sectors = 8 limit=0 [ 166.800482][ T25] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.816398][ T4173] hfsplus: b-tree write err: -5, ino 4 [ 166.822747][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 166.836029][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 166.845230][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.853853][ T4144] kworker/u8:9: attempt to access beyond end of device [ 166.853853][ T4144] loop0: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 166.867535][ T5146] hub 4-1:0.0: 2 ports detected [ 166.873718][ T5089] syz-executor: attempt to access beyond end of device [ 166.873718][ T5089] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 166.902120][ T5146] hub 4-1:0.0: insufficient power available to use all downstream ports [ 166.912249][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 167.220954][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 167.505071][ T6441] warn_alloc: 1 callbacks suppressed [ 167.505351][ T6441] syz.0.371: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 167.505447][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.0.371 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 167.505471][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.505483][ T6441] Call Trace: [ 167.505493][ T6441] [ 167.505503][ T6441] dump_stack_lvl+0x241/0x360 [ 167.505539][ T6441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.505570][ T6441] ? __pfx__printk+0x10/0x10 [ 167.505602][ T6441] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 167.505626][ T6441] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 167.505652][ T6441] warn_alloc+0x278/0x410 [ 167.505687][ T6441] ? stack_depot_save_flags+0x29/0x830 [ 167.505715][ T6441] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 167.505737][ T6441] ? __pfx_warn_alloc+0x10/0x10 [ 167.505763][ T6441] ? kasan_save_track+0x3f/0x80 [ 167.505782][ T6441] ? __kasan_kmalloc+0x98/0xb0 [ 167.505804][ T6441] ? xsk_setsockopt+0x598/0x950 [ 167.505826][ T6441] ? do_sock_setsockopt+0x3af/0x720 [ 167.505847][ T6441] ? __sys_setsockopt+0x1ae/0x250 [ 167.505868][ T6441] ? __x64_sys_setsockopt+0xb5/0xd0 [ 167.505888][ T6441] ? do_syscall_64+0xf3/0x230 [ 167.505904][ T6441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.505935][ T6441] __vmalloc_node_range_noprof+0x130/0x1460 [ 167.505982][ T6441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.506007][ T6441] ? __kasan_kmalloc+0x98/0xb0 [ 167.506027][ T6441] ? xskq_create+0x54/0x170 [ 167.506056][ T6441] vmalloc_user_noprof+0x74/0x80 [ 167.506076][ T6441] ? xskq_create+0xb6/0x170 [ 167.506099][ T6441] xskq_create+0xb6/0x170 [ 167.506127][ T6441] xsk_init_queue+0xa1/0x100 [ 167.506155][ T6441] xsk_setsockopt+0x598/0x950 [ 167.506182][ T6441] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.506209][ T6441] ? __pfx_lock_acquire+0x10/0x10 [ 167.506231][ T6441] ? aa_sock_opt_perm+0x79/0x120 [ 167.506253][ T6441] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 167.506276][ T6441] ? security_socket_setsockopt+0x87/0xb0 [ 167.506301][ T6441] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.506319][ T6441] do_sock_setsockopt+0x3af/0x720 [ 167.506347][ T6441] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 167.506367][ T6441] ? __fget_files+0x29/0x470 [ 167.506391][ T6441] ? __fget_files+0x3f6/0x470 [ 167.506424][ T6441] __sys_setsockopt+0x1ae/0x250 [ 167.506451][ T6441] __x64_sys_setsockopt+0xb5/0xd0 [ 167.506474][ T6441] do_syscall_64+0xf3/0x230 [ 167.506492][ T6441] ? clear_bhb_loop+0x35/0x90 [ 167.506516][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.506537][ T6441] RIP: 0033:0x7f4e5cf75bd9 [ 167.506555][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.506571][ T6441] RSP: 002b:00007f4e5dda8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.506594][ T6441] RAX: ffffffffffffffda RBX: 00007f4e5d103f60 RCX: 00007f4e5cf75bd9 [ 167.506607][ T6441] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 167.506618][ T6441] RBP: 00007f4e5cfe4aa1 R08: 0000000000000020 R09: 0000000000000000 [ 167.506630][ T6441] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 167.506642][ T6441] R13: 000000000000000b R14: 00007f4e5d103f60 R15: 00007fff2643e048 [ 167.506681][ T6441] [ 167.520110][ T6441] Mem-Info: [ 167.520128][ T6441] active_anon:7430 inactive_anon:0 isolated_anon:0 [ 167.520128][ T6441] active_file:1462 inactive_file:38172 isolated_file:0 [ 167.520128][ T6441] unevictable:768 dirty:255 writeback:0 [ 167.520128][ T6441] slab_reclaimable:8867 slab_unreclaimable:93956 [ 167.520128][ T6441] mapped:16657 shmem:4140 pagetables:857 [ 167.520128][ T6441] sec_pagetables:0 bounce:0 [ 167.520128][ T6441] kernel_misc_reclaimable:0 [ 167.520128][ T6441] free:1407092 free_pcp:428 free_cma:0 [ 167.520168][ T6441] Node 0 active_anon:29720kB inactive_anon:0kB active_file:5848kB inactive_file:152604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:66628kB dirty:1016kB writeback:0kB shmem:15024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10408kB pagetables:3428kB sec_pagetables:0kB all_unreclaimable? no [ 167.520223][ T6441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 167.520273][ T6441] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.520317][ T6441] lowmem_reserve[]: 0 2569 2569 0 0 [ 167.520365][ T6441] Node 0 DMA32 free:1663596kB boost:0kB min:35096kB low:43868kB high:52640kB reserved_highatomic:0KB active_anon:29712kB inactive_anon:0kB active_file:5848kB inactive_file:152508kB unevictable:1536kB writepending:1016kB present:3129332kB managed:2657772kB mlocked:0kB bounce:0kB free_pcp:1712kB local_pcp:808kB free_cma:0kB [ 167.520422][ T6441] lowmem_reserve[]: 0 0 0 0 0 [ 167.520457][ T6441] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048576kB managed:104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.520513][ T6441] lowmem_reserve[]: 0 0 0 0 0 [ 167.520556][ T6441] Node 1 Normal free:3949412kB boost:0kB min:54808kB low:68508kB high:82208kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.520608][ T6441] lowmem_reserve[]: 0 0 0 0 0 [ 167.520649][ T6441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.520784][ T6441] Node 0 DMA32: 13*4kB (UME) 544*8kB (UME) 466*16kB (UME) 163*32kB (UME) 140*64kB (UME) 19*128kB (UME) 21*256kB (UM) 19*512kB (UME) 12*1024kB (UM) 5*2048kB (UM) 390*4096kB (ME) = 1663540kB [ 167.520959][ T6441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.521076][ T6441] Node 1 Normal: 1*4kB (U) 8*8kB (UM) 8*16kB (UM) 3*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3949412kB [ 167.521236][ T6441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.521253][ T6441] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 167.521270][ T6441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.521287][ T6441] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 167.521326][ T6441] 43770 total pagecache pages [ 167.521334][ T6441] 0 pages in swap cache [ 167.521338][ T6441] Free swap = 124208kB [ 167.521343][ T6441] Total swap = 124996kB [ 167.521348][ T6441] 2097051 pages RAM [ 167.521352][ T6441] 0 pages HighMem/MovableOnly [ 167.521357][ T6441] 401462 pages reserved [ 167.521361][ T6441] 0 pages cma reserved [ 167.538734][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 168.002501][ T5146] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 168.002549][ T5146] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 168.019885][ T5146] usbhid 4-1:0.0: can't add hid device: -32 [ 168.020002][ T5146] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 168.566603][ T1798] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 168.655725][ T927] usb 2-1: USB disconnect, device number 11 [ 168.675676][ T927] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 169.295443][ T6445] tty tty3: ldisc open failed (-12), clearing slot 2 [ 170.329809][ T6464] pim6reg1: entered promiscuous mode [ 170.341881][ T6464] pim6reg1: entered allmulticast mode [ 170.399353][ T5146] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.481809][ T6465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 170.488391][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.512484][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 170.533245][ T6467] vhci_hcd: connection closed [ 170.533445][ T53] vhci_hcd: stop threads [ 170.569566][ T5146] usb 5-1: device descriptor read/64, error -71 [ 170.579532][ T53] vhci_hcd: release socket [ 170.619202][ T53] vhci_hcd: disconnect device [ 170.677665][ T6470] loop1: detected capacity change from 0 to 1024 [ 170.693234][ T6470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.749825][ T25] usb 4-1: USB disconnect, device number 5 [ 170.752787][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.853921][ T5146] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.889404][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 170.898089][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 170.898101][ T6470] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.377: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 170.907210][ T55] Bluetooth: hci3: hardware error 0x00 [ 170.979717][ T6470] EXT4-fs (loop1): Remounting filesystem read-only [ 171.019720][ T5146] usb 5-1: device descriptor read/64, error -71 [ 171.054776][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.164696][ T5146] usb usb5-port1: attempt power cycle [ 171.236164][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 171.311005][ T6480] loop0: detected capacity change from 0 to 128 [ 171.344841][ T6480] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 171.370912][ T6480] sysv_free_block: trying to free block not in datazone [ 171.411958][ T6480] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 171.475906][ T6485] loop1: detected capacity change from 0 to 512 [ 171.540147][ T6480] loop0: detected capacity change from 0 to 1024 [ 171.609319][ T5146] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.651491][ T5146] usb 5-1: device descriptor read/8, error -71 [ 171.669225][ T6480] loop0: detected capacity change from 1024 to 0 [ 171.763910][ T12] bio_check_eod: 1 callbacks suppressed [ 171.763928][ T12] kworker/u8:1: attempt to access beyond end of device [ 171.763928][ T12] loop0: rw=1, sector=206, nr_sectors = 8 limit=0 [ 171.826398][ T12] hfsplus: b-tree write err: -5, ino 4 [ 171.836134][ T12] kworker/u8:1: attempt to access beyond end of device [ 171.836134][ T12] loop0: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 171.864430][ T5089] syz-executor: attempt to access beyond end of device [ 171.864430][ T5089] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 171.899984][ T5089] syz-executor: attempt to access beyond end of device [ 171.899984][ T5089] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 171.949393][ T5146] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.990903][ T5146] usb 5-1: device descriptor read/8, error -71 [ 172.144873][ T5146] usb usb5-port1: unable to enumerate USB device [ 172.959393][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 173.047716][ T6504] pim6reg1: entered promiscuous mode [ 173.069388][ T6504] pim6reg1: entered allmulticast mode [ 174.444976][ T6511] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 174.451523][ T6511] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.482259][ T6511] vhci_hcd vhci_hcd.0: Device attached [ 174.489642][ T6518] vhci_hcd: connection closed [ 174.501783][ T62] vhci_hcd: stop threads [ 174.533430][ T62] vhci_hcd: release socket [ 174.562108][ T62] vhci_hcd: disconnect device [ 174.723801][ T6523] loop1: detected capacity change from 0 to 128 [ 174.758691][ T6523] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 174.772417][ T6523] sysv_free_block: trying to free block not in datazone [ 174.805868][ T6523] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 174.903381][ T6523] loop1: detected capacity change from 0 to 1024 [ 175.009414][ T6523] loop1: detected capacity change from 1024 to 0 [ 175.085540][ T62] kworker/u8:4: attempt to access beyond end of device [ 175.085540][ T62] loop1: rw=1, sector=206, nr_sectors = 8 limit=0 [ 175.111267][ T62] hfsplus: b-tree write err: -5, ino 4 [ 175.118859][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 175.118875][ T29] audit: type=1326 audit(1720117258.693:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.3.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x0 [ 175.128993][ T62] kworker/u8:4: attempt to access beyond end of device [ 175.128993][ T62] loop1: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 175.176996][ T5101] syz-executor: attempt to access beyond end of device [ 175.176996][ T5101] loop1: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 175.248462][ T5101] syz-executor: attempt to access beyond end of device [ 175.248462][ T5101] loop1: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 176.115312][ T6547] pim6reg1: entered promiscuous mode [ 176.121084][ T6547] pim6reg1: entered allmulticast mode [ 176.408661][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 176.486177][ T6536] loop0: detected capacity change from 0 to 40427 [ 176.528611][ T6536] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 176.578673][ T6536] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.619736][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 176.665354][ T6536] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.796518][ T6536] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.796552][ T6536] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.348418][ T6572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 177.355006][ T6572] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 177.559499][ T6573] vhci_hcd: connection closed [ 177.559921][ T6572] vhci_hcd vhci_hcd.0: Device attached [ 177.572179][ T11] vhci_hcd: stop threads [ 177.576577][ T11] vhci_hcd: release socket [ 177.584534][ T11] vhci_hcd: disconnect device [ 178.106793][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 178.252750][ T29] audit: type=1326 audit(1720117261.833:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.4.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x0 [ 178.311889][ T6587] loop0: detected capacity change from 0 to 128 [ 178.332569][ T6587] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 178.528283][ T6587] syz.0.407: attempt to access beyond end of device [ 178.528283][ T6587] loop0: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 178.622010][ T5089] sysv_free_block: trying to free block not in datazone [ 178.642614][ T5089] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 178.979450][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 179.025791][ T6599] bond0: entered promiscuous mode [ 179.053728][ T6599] bond_slave_0: entered promiscuous mode [ 179.091640][ T6599] bond_slave_1: entered promiscuous mode [ 179.480323][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 179.619692][ T6609] warn_alloc: 1 callbacks suppressed [ 179.619715][ T6609] syz.2.419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 179.726344][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.2.419 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 179.736492][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.746592][ T6609] Call Trace: [ 179.749899][ T6609] [ 179.752859][ T6609] dump_stack_lvl+0x241/0x360 [ 179.757589][ T6609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.762832][ T6609] ? __pfx__printk+0x10/0x10 [ 179.767472][ T6609] ? __rcu_read_unlock+0xa1/0x110 [ 179.772541][ T6609] warn_alloc+0x278/0x410 [ 179.776915][ T6609] ? stack_depot_save_flags+0x29/0x830 [ 179.782437][ T6609] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 179.788554][ T6609] ? __pfx_warn_alloc+0x10/0x10 [ 179.793452][ T6609] ? kasan_save_track+0x3f/0x80 [ 179.798343][ T6609] ? __kasan_kmalloc+0x98/0xb0 [ 179.803148][ T6609] ? xsk_setsockopt+0x598/0x950 [ 179.808032][ T6609] ? do_sock_setsockopt+0x3af/0x720 [ 179.813265][ T6609] ? __sys_setsockopt+0x1ae/0x250 [ 179.818329][ T6609] ? __x64_sys_setsockopt+0xb5/0xd0 [ 179.823563][ T6609] ? do_syscall_64+0xf3/0x230 [ 179.828275][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.834398][ T6609] __vmalloc_node_range_noprof+0x130/0x1460 [ 179.840370][ T6609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.846749][ T6609] ? __kasan_kmalloc+0x98/0xb0 [ 179.851568][ T6609] ? xskq_create+0x54/0x170 [ 179.856120][ T6609] vmalloc_user_noprof+0x74/0x80 [ 179.861104][ T6609] ? xskq_create+0xb6/0x170 [ 179.865668][ T6609] xskq_create+0xb6/0x170 [ 179.870056][ T6609] xsk_init_queue+0xa1/0x100 [ 179.874711][ T6609] xsk_setsockopt+0x598/0x950 [ 179.879447][ T6609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.884704][ T6609] ? __pfx_lock_acquire+0x10/0x10 [ 179.889859][ T6609] ? aa_sock_opt_perm+0x79/0x120 [ 179.894925][ T6609] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 179.900515][ T6609] ? security_socket_setsockopt+0x87/0xb0 [ 179.906284][ T6609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.911533][ T6609] do_sock_setsockopt+0x3af/0x720 [ 179.916609][ T6609] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 179.922189][ T6609] ? __fget_files+0x29/0x470 [ 179.926822][ T6609] ? __fget_files+0x3f6/0x470 [ 179.931555][ T6609] __sys_setsockopt+0x1ae/0x250 [ 179.936461][ T6609] __x64_sys_setsockopt+0xb5/0xd0 [ 179.941531][ T6609] do_syscall_64+0xf3/0x230 [ 179.946072][ T6609] ? clear_bhb_loop+0x35/0x90 [ 179.950804][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.956740][ T6609] RIP: 0033:0x7f1140d75bd9 [ 179.961188][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.980914][ T6609] RSP: 002b:00007f1141b04048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.989372][ T6609] RAX: ffffffffffffffda RBX: 00007f1140f03f60 RCX: 00007f1140d75bd9 [ 179.997403][ T6609] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 180.005414][ T6609] RBP: 00007f1140de4aa1 R08: 0000000000000020 R09: 0000000000000000 [ 180.013418][ T6609] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 180.021420][ T6609] R13: 000000000000000b R14: 00007f1140f03f60 R15: 00007ffc065fdfe8 [ 180.029440][ T6609] [ 180.054717][ T6609] Mem-Info: [ 180.057900][ T6609] active_anon:9626 inactive_anon:0 isolated_anon:0 [ 180.057900][ T6609] active_file:5046 inactive_file:38176 isolated_file:0 [ 180.057900][ T6609] unevictable:768 dirty:311 writeback:0 [ 180.057900][ T6609] slab_reclaimable:8798 slab_unreclaimable:94505 [ 180.057900][ T6609] mapped:19000 shmem:6467 pagetables:755 [ 180.057900][ T6609] sec_pagetables:0 bounce:0 [ 180.057900][ T6609] kernel_misc_reclaimable:0 [ 180.057900][ T6609] free:1397565 free_pcp:3919 free_cma:0 [ 180.119689][ T6609] Node 0 active_anon:39204kB inactive_anon:0kB active_file:20184kB inactive_file:152620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76800kB dirty:1240kB writeback:0kB shmem:25032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10148kB pagetables:3120kB sec_pagetables:0kB all_unreclaimable? no [ 180.194121][ T6609] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 180.248031][ T6609] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.289109][ T6609] lowmem_reserve[]: 0 2569 2569 0 0 [ 180.294864][ T6609] Node 0 DMA32 free:1636564kB boost:0kB min:35096kB low:43868kB high:52640kB reserved_highatomic:0KB active_anon:40696kB inactive_anon:0kB active_file:20184kB inactive_file:152524kB unevictable:1536kB writepending:1240kB present:3129332kB managed:2657772kB mlocked:0kB bounce:0kB free_pcp:2216kB local_pcp:996kB free_cma:0kB [ 180.374802][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 180.391126][ T6609] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048576kB managed:104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.512221][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 180.539395][ T6609] Node 1 Normal free:3949412kB boost:0kB min:54808kB low:68508kB high:82208kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.603536][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 180.609514][ T6609] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.618622][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 180.624561][ T6609] Node 0 DMA32: 81*4kB (UME) 467*8kB (UME) 561*16kB (UME) 270*32kB (UME) 147*64kB (UME) 35*128kB (UME) 19*256kB (UM) 19*512kB (UME) 4*1024kB (M) 3*2048kB (UM) 387*4096kB (ME) = 1645548kB [ 180.682369][ T6609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.711421][ T6609] Node 1 Normal: 1*4kB (U) 8*8kB (UM) 8*16kB (UM) 3*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3949412kB [ 180.742178][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.760369][ T6609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.777457][ T29] audit: type=1326 audit(1720117264.353:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x0 [ 180.803694][ T6609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.830267][ T6609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.853102][ T6609] 47334 total pagecache pages [ 180.859059][ T6609] 0 pages in swap cache [ 180.870411][ T6609] Free swap = 124208kB [ 180.883181][ T6609] Total swap = 124996kB [ 180.892070][ T6609] 2097051 pages RAM [ 180.902007][ T6609] 0 pages HighMem/MovableOnly [ 180.913736][ T6609] 401462 pages reserved [ 180.925446][ T6609] 0 pages cma reserved [ 181.044265][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 181.519595][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 181.667196][ T6627] loop4: detected capacity change from 0 to 32768 [ 182.190021][ T5118] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.254082][ T6669] loop3: detected capacity change from 0 to 2048 [ 182.309930][ T6669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.418042][ T5118] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.449377][ T5118] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.467164][ T5118] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 182.502951][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.535111][ T5118] usb 3-1: config 0 descriptor?? [ 182.562241][ T29] audit: type=1326 audit(1720117266.143:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.615441][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 182.624692][ T29] audit: type=1326 audit(1720117266.163:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.625318][ T6676] macsec0: entered promiscuous mode [ 182.680403][ T6675] macsec0: left promiscuous mode [ 182.686811][ T29] audit: type=1326 audit(1720117266.163:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.761571][ T29] audit: type=1326 audit(1720117266.163:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.823180][ T5098] usb 3-1: USB disconnect, device number 5 [ 182.827437][ T29] audit: type=1326 audit(1720117266.173:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.890887][ T29] audit: type=1326 audit(1720117266.173:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.921801][ T29] audit: type=1326 audit(1720117266.173:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.948486][ T5118] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 182.964244][ T29] audit: type=1326 audit(1720117266.173:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 182.969758][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 183.001793][ T29] audit: type=1326 audit(1720117266.173:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x7ffc0000 [ 183.188010][ T5118] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 183.205960][ T5118] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 183.225090][ T5118] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 183.251292][ T5118] usb 4-1: config 1 has no interface number 0 [ 183.267522][ T5118] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 183.287261][ T5118] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.304991][ T5118] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.315729][ T5118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.345792][ T5118] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 183.899121][ T6704] macsec0: entered promiscuous mode [ 183.915646][ T5118] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 183.964765][ T6703] macsec0: left promiscuous mode [ 185.137723][ T5118] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 185.732695][ T5146] usb 4-1: USB disconnect, device number 6 [ 185.783160][ T5146] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 186.032175][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 186.440518][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 186.440558][ T29] audit: type=1326 audit(1720117269.993:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785e775bd9 code=0x0 [ 186.940607][ T6759] macsec0: entered promiscuous mode [ 186.954523][ T6756] macsec0: left promiscuous mode [ 187.000391][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 187.372948][ T6769] syz.1.472[6769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.373101][ T6769] syz.1.472[6769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.407408][ T29] audit: type=1326 audit(1720117270.983:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.468578][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.474'. [ 187.512595][ T29] audit: type=1326 audit(1720117270.983:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.557542][ T29] audit: type=1326 audit(1720117271.023:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.586629][ T29] audit: type=1326 audit(1720117271.023:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.619483][ T29] audit: type=1326 audit(1720117271.023:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.648603][ T29] audit: type=1326 audit(1720117271.023:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 187.825814][ T29] audit: type=1326 audit(1720117271.023:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 188.294801][ T29] audit: type=1326 audit(1720117271.033:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 188.344193][ T6781] loop3: detected capacity change from 0 to 1024 [ 188.398509][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.428543][ T29] audit: type=1326 audit(1720117271.033:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 188.451268][ T927] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 189.300240][ T927] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.452264][ T927] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.500779][ T927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.538240][ T927] usb 5-1: config 1 has no interface number 0 [ 189.618608][ T6795] loop1: detected capacity change from 0 to 256 [ 189.627498][ T927] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.743078][ T927] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.854324][ T927] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.930928][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.303517][ T927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 190.387097][ T6795] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 190.423497][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 190.423949][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.489524][ T927] snd_usb_pod 5-1:1.1: set_interface failed [ 190.510619][ T927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 190.568051][ T927] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 190.712684][ T927] usb 5-1: USB disconnect, device number 13 [ 190.827071][ T6807] macsec0: entered promiscuous mode [ 190.871315][ T6804] macsec0: left promiscuous mode [ 191.840085][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 192.400484][ T6837] loop1: detected capacity change from 0 to 512 [ 192.413917][ T6837] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 192.425783][ T6837] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 192.436350][ T6837] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.491: Corrupt directory, running e2fsck is recommended [ 192.464959][ T6837] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 192.476196][ T6837] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.491: corrupted in-inode xattr: invalid ea_ino [ 192.490910][ T6837] EXT4-fs (loop1): Remounting filesystem read-only [ 192.498241][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.566145][ T5098] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.799708][ T5098] usb 4-1: Using ep0 maxpacket: 16 [ 192.817377][ T6843] loop2: detected capacity change from 0 to 128 [ 192.828733][ T5098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.875157][ T5098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.897828][ T5098] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 193.013652][ T5098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.571150][ T5098] usb 4-1: config 0 descriptor?? [ 193.643295][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 193.767331][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 193.767349][ T29] audit: type=1326 audit(1720117277.343:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x0 [ 194.126265][ T5098] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 194.143135][ T5098] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 194.169300][ T5098] cp2112 0003:10C4:EA90.0006: unexpected long global item [ 194.812812][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.851614][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.869934][ T5098] cp2112 0003:10C4:EA90.0006: parse failed [ 194.884012][ T5098] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 194.896448][ T5098] usb 4-1: USB disconnect, device number 7 [ 195.154078][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 195.228024][ T6867] macsec0: entered promiscuous mode [ 195.247560][ T6865] macsec0: left promiscuous mode [ 196.161626][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.539090][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 196.723559][ T29] audit: type=1326 audit(1720117280.293:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x0 [ 196.745284][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.686152][ T6906] loop3: detected capacity change from 0 to 512 [ 197.731159][ T6906] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 197.799337][ T6906] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 197.810166][ T6906] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.514: Corrupt directory, running e2fsck is recommended [ 197.874027][ T6906] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 197.908999][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 197.918330][ T6906] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.514: corrupted in-inode xattr: invalid ea_ino [ 197.948217][ T6906] EXT4-fs (loop3): Remounting filesystem read-only [ 197.970498][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.326409][ T29] audit: type=1326 audit(1720117281.903:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.371504][ T6926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'. [ 198.406211][ T29] audit: type=1326 audit(1720117281.903:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.466109][ T6924] syzkaller0: entered promiscuous mode [ 198.473443][ T29] audit: type=1326 audit(1720117281.933:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.498233][ T6924] syzkaller0: entered allmulticast mode [ 198.513512][ T29] audit: type=1326 audit(1720117281.943:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.601218][ T29] audit: type=1326 audit(1720117281.943:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.668339][ T29] audit: type=1326 audit(1720117281.943:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.711060][ T5118] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 198.737150][ T29] audit: type=1326 audit(1720117281.943:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.759516][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.827083][ T29] audit: type=1326 audit(1720117281.943:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.866139][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 198.937232][ T5118] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 198.949478][ T5118] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 198.964822][ T29] audit: type=1326 audit(1720117281.943:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 198.998025][ T5118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.065302][ T5118] usb 3-1: config 1 has no interface number 0 [ 199.067607][ T29] audit: type=1326 audit(1720117281.943:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.093662][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.099612][ T5118] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 199.100081][ T29] audit: type=1326 audit(1720117281.943:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.142121][ T5118] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 199.165959][ T5118] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.169011][ T29] audit: type=1326 audit(1720117281.943:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.176373][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.207398][ T29] audit: type=1326 audit(1720117281.943:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.243892][ T5118] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 199.250884][ T29] audit: type=1326 audit(1720117281.943:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.325855][ T29] audit: type=1326 audit(1720117281.943:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.404239][ T29] audit: type=1326 audit(1720117281.943:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.513946][ T29] audit: type=1326 audit(1720117281.943:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1140d75bd9 code=0x7ffc0000 [ 199.820707][ T5118] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 200.009289][ T1798] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.050989][ T5095] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.506995][ T1798] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 200.529306][ T1798] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.538463][ T1798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.950296][ T927] usb 3-1: USB disconnect, device number 6 [ 201.090910][ T927] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 201.412196][ T1798] usb 5-1: config 0 descriptor?? [ 201.420710][ T1798] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 202.491835][ T6966] loop1: detected capacity change from 0 to 2048 [ 202.528234][ T6966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.717875][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 203.689651][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 203.867301][ T6975] loop0: detected capacity change from 0 to 512 [ 203.931059][ T6975] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 203.954901][ T6975] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 203.959369][ T927] usb 5-1: USB disconnect, device number 14 [ 203.968057][ T6975] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.535: Corrupt directory, running e2fsck is recommended [ 204.213560][ T6975] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 204.255551][ T6975] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.535: corrupted in-inode xattr: invalid ea_ino [ 204.325312][ T6975] EXT4-fs (loop0): Remounting filesystem read-only [ 204.378245][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.779293][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 204.789372][ T29] audit: type=1800 audit(1720117288.273:331): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.538" name="bus" dev="overlay" ino=525 res=0 errno=0 [ 205.265686][ T29] audit: type=1326 audit(1720117288.833:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.327437][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.539'. [ 205.353768][ T29] audit: type=1326 audit(1720117288.833:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.419218][ T29] audit: type=1326 audit(1720117288.883:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.469220][ T29] audit: type=1326 audit(1720117288.883:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.629330][ T29] audit: type=1326 audit(1720117288.883:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.714023][ T29] audit: type=1326 audit(1720117288.883:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.737060][ T29] audit: type=1326 audit(1720117288.893:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.759295][ T29] audit: type=1326 audit(1720117288.893:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 205.782312][ T29] audit: type=1326 audit(1720117288.893:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 206.510176][ T927] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 206.534068][ T6973] loop1: detected capacity change from 0 to 40427 [ 206.565005][ T7002] loop3: detected capacity change from 0 to 2048 [ 206.570892][ T6973] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 206.606763][ T7002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.617818][ T6973] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.667099][ T6973] F2FS-fs (loop1): invalid crc value [ 206.705147][ T6973] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.748467][ T927] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 206.777861][ T927] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 206.799322][ T927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 206.841199][ T927] usb 5-1: config 1 has no interface number 0 [ 206.860978][ T6973] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 206.864269][ T927] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.896043][ T927] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.900353][ T6973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.942019][ T927] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 206.980279][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 206.987505][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.044828][ T927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 207.559543][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.544'. [ 207.600266][ T927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 207.981874][ T927] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.765217][ T1798] usb 5-1: USB disconnect, device number 15 [ 208.801385][ T1798] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 208.962301][ T927] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 208.983014][ T927] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.992174][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.003460][ T927] usb 2-1: config 0 descriptor?? [ 209.017393][ T927] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 209.491784][ T5089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.768696][ T7039] loop0: detected capacity change from 0 to 40427 [ 210.820334][ T7039] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 210.828131][ T7039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 210.844512][ T7052] loop4: detected capacity change from 0 to 1024 [ 210.865515][ T7039] F2FS-fs (loop0): invalid crc value [ 210.871916][ T7052] EXT4-fs: Ignoring removed orlov option [ 210.894592][ T7052] EXT4-fs (loop4): Test dummy encryption mode enabled [ 210.894766][ T7039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.943044][ T7052] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 210.971071][ T7052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.029669][ T7039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 211.036802][ T7039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.084928][ T7039] syz.0.554: attempt to access beyond end of device [ 211.084928][ T7039] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 211.107829][ T7039] syz.0.554: attempt to access beyond end of device [ 211.107829][ T7039] loop0: rw=0, sector=45104, nr_sectors = 8 limit=40427 [ 211.604806][ T5090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.708457][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 211.708476][ T29] audit: type=1326 audit(1720117295.283:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.718611][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.558'. [ 211.759601][ T29] audit: type=1326 audit(1720117295.323:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.781900][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.785202][ T7069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.562'. [ 211.789092][ T29] audit: type=1326 audit(1720117295.333:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.819414][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.831747][ T29] audit: type=1326 audit(1720117295.333:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.865381][ T29] audit: type=1326 audit(1720117295.333:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.875834][ T5146] usb 2-1: USB disconnect, device number 12 [ 211.964342][ T7074] loop1: detected capacity change from 0 to 512 [ 211.973674][ T29] audit: type=1326 audit(1720117295.333:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 211.980438][ T927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.003247][ T29] audit: type=1326 audit(1720117295.333:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 212.029799][ T29] audit: type=1326 audit(1720117295.333:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 212.046479][ T7074] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.051998][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.052544][ T29] audit: type=1326 audit(1720117295.333:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 212.093970][ T29] audit: type=1326 audit(1720117295.333:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x7ffc0000 [ 212.116323][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.123584][ T7074] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 212.123600][ T8] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 212.135915][ T7074] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.564: Corrupt directory, running e2fsck is recommended [ 212.176557][ T7074] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 212.184949][ T7074] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.564: corrupted in-inode xattr: invalid ea_ino [ 212.198933][ T7074] EXT4-fs (loop1): Remounting filesystem read-only [ 212.208977][ T7074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.290874][ T927] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 212.304490][ T927] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 212.333539][ T927] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 212.359422][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.370901][ T8] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 212.395222][ T8] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 212.411876][ T7065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.437535][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 212.446937][ T8] usb 5-1: config 1 has no interface number 0 [ 212.485999][ T8] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.505118][ T8] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.519611][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 212.529821][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.565408][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 212.913081][ T927] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 212.952164][ T927] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 213.082089][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 213.144253][ T927] usb 3-1: USB disconnect, device number 7 [ 213.144636][ T7078] loop0: detected capacity change from 0 to 32768 [ 213.182828][ T7078] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.565 (7078) [ 213.251427][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 213.424024][ T7078] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 213.458311][ T7078] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.566669][ T7078] BTRFS info (device loop0): disk space caching is enabled [ 213.724600][ T7078] BTRFS info (device loop0): rebuilding free space tree [ 213.907119][ T7078] BTRFS info (device loop0): disabling free space tree [ 213.918546][ T7078] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.930194][ T7078] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.061844][ T5089] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.149065][ T5118] usb 5-1: USB disconnect, device number 16 [ 214.203073][ T5118] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 215.562671][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.573'. [ 215.704992][ T7124] binder: BINDER_SET_CONTEXT_MGR already set [ 215.756234][ T7124] binder: 7122:7124 ioctl 4018620d 20000040 returned -16 [ 215.885159][ T7129] loop0: detected capacity change from 0 to 2048 [ 215.949033][ T7129] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.408506][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 217.700261][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 217.700279][ T29] audit: type=1326 audit(1720117301.283:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6890175bd9 code=0x0 [ 217.736719][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.780117][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'. [ 218.066090][ T7174] loop2: detected capacity change from 0 to 2048 [ 218.103147][ T7174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.512158][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 219.272264][ T7199] loop2: detected capacity change from 0 to 512 [ 219.310360][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 219.349609][ T7199] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 219.361689][ T7199] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 219.372227][ T7199] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.599: Corrupt directory, running e2fsck is recommended [ 219.449882][ T7207] macsec0: entered promiscuous mode [ 219.457486][ T7204] macsec0: left promiscuous mode [ 219.567379][ T7199] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 219.611403][ T7199] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.599: corrupted in-inode xattr: invalid ea_ino [ 219.655741][ T7216] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 219.662301][ T7216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 219.692613][ T7216] vhci_hcd vhci_hcd.0: Device attached [ 219.709490][ T7199] EXT4-fs (loop2): Remounting filesystem read-only [ 219.744348][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.795584][ T7217] vhci_hcd: connection closed [ 219.831168][ T4173] vhci_hcd: stop threads [ 219.873157][ T4173] vhci_hcd: release socket [ 219.882571][ T4173] vhci_hcd: disconnect device [ 219.986633][ T7223] loop3: detected capacity change from 0 to 2048 [ 220.096278][ T7223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.868255][ T7221] loop4: detected capacity change from 0 to 32768 [ 220.953122][ T7221] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.958517][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 221.787195][ T7221] XFS (loop4): Ending clean mount [ 221.981964][ T7221] XFS (loop4): Quotacheck needed: Please wait. [ 222.024683][ T7255] syz.0.614[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.024837][ T7255] syz.0.614[7255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.118419][ T7221] XFS (loop4): Quotacheck: Done. [ 222.353526][ T5090] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.509865][ T5118] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 222.759737][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 222.771973][ T7273] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 222.772000][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.3.621 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 222.772022][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 222.772034][ T7273] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 222.772063][ T7273] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 222.772078][ T7273] RSP: 0018:ffffc9000303f098 EFLAGS: 00010202 [ 222.772094][ T7273] RAX: 1ffff11004fad6c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 222.772107][ T7273] RDX: ffffc90009bea000 RSI: 00000000000004ba RDI: 00000000000004bb [ 222.772119][ T7273] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff11005c2915c [ 222.772132][ T7273] R10: dffffc0000000000 R11: ffffed1005c2915d R12: 0000000000000038 [ 222.772145][ T7273] R13: dffffc0000000000 R14: 1ffff92000607e55 R15: 0000000000000000 [ 222.772159][ T7273] FS: 00007f785f6006c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 222.772177][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.772191][ T7273] CR2: 000000110c3c9294 CR3: 000000002b618000 CR4: 00000000003506f0 [ 222.772208][ T7273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.772220][ T7273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.772233][ T7273] Call Trace: [ 222.772241][ T7273] [ 222.772248][ T7273] ? __die_body+0x88/0xe0 [ 222.772275][ T7273] ? die+0xcf/0x110 [ 222.772306][ T7273] ? do_trap+0x15a/0x3a0 [ 222.772332][ T7273] ? do_error_trap+0x1dc/0x2c0 [ 222.772356][ T7273] ? __pfx_do_error_trap+0x10/0x10 [ 222.772381][ T7273] ? rcu_is_watching+0x15/0xb0 [ 222.772407][ T7273] ? exc_stack_segment+0x38/0x50 [ 222.772427][ T7273] ? asm_exc_stack_segment+0x26/0x30 [ 222.772450][ T7273] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 222.772475][ T7273] ? bpf_xdp_redirect+0x59/0x1a0 [ 222.772499][ T7273] ? bpf_xdp_redirect+0x25/0x1a0 [ 222.772525][ T7273] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 222.772541][ T7273] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 222.772578][ T7273] do_xdp_generic+0x673/0xb90 [ 222.772599][ T7273] ? __pfx_validate_chain+0x10/0x10 [ 222.772627][ T7273] ? __pfx_do_xdp_generic+0x10/0x10 [ 222.772657][ T7273] __netif_receive_skb_core+0x1be6/0x4570 [ 222.772682][ T7273] ? mark_lock+0x9a/0x360 [ 222.772715][ T7273] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 222.772741][ T7273] ? mark_lock+0x9a/0x360 [ 222.772765][ T7273] ? __lock_acquire+0x1359/0x2000 [ 222.772798][ T7273] __netif_receive_skb+0x12f/0x650 [ 222.772822][ T7273] ? __pfx_lock_acquire+0x10/0x10 [ 222.772842][ T7273] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 222.772865][ T7273] ? __pfx___netif_receive_skb+0x10/0x10 [ 222.772887][ T7273] ? __kasan_slab_alloc+0x66/0x80 [ 222.772909][ T7273] ? read_tsc+0x9/0x20 [ 222.772929][ T7273] ? timekeeping_get_ns+0x2c0/0x420 [ 222.772954][ T7273] ? netif_receive_skb+0x131/0x890 [ 222.772976][ T7273] ? netif_receive_skb+0x131/0x890 [ 222.773019][ T7273] netif_receive_skb+0x1e8/0x890 [ 222.773044][ T7273] ? tun_rx_batched+0x160/0x8f0 [ 222.773063][ T7273] ? __pfx_netif_receive_skb+0x10/0x10 [ 222.773093][ T7273] ? tun_rx_batched+0x160/0x8f0 [ 222.773111][ T7273] tun_rx_batched+0x1b7/0x8f0 [ 222.773130][ T7273] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.773154][ T7273] ? __pfx_lock_acquire+0x10/0x10 [ 222.773173][ T7273] ? __pfx_tun_rx_batched+0x10/0x10 [ 222.773197][ T7273] tun_get_user+0x2f3b/0x4560 [ 222.773216][ T7273] ? tun_get_user+0x2a35/0x4560 [ 222.773241][ T7273] ? __pfx_tun_get_user+0x10/0x10 [ 222.773262][ T7273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 222.773281][ T7273] ? tun_get+0x1e/0x2f0 [ 222.773312][ T7273] ? tun_get+0x1e/0x2f0 [ 222.773330][ T7273] ? tun_get+0x27d/0x2f0 [ 222.773348][ T7273] tun_chr_write_iter+0x113/0x1f0 [ 222.773369][ T7273] vfs_write+0xa72/0xc90 [ 222.773388][ T7273] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 222.773408][ T7273] ? __pfx_vfs_write+0x10/0x10 [ 222.773423][ T7273] ? do_futex+0x33b/0x560 [ 222.773455][ T7273] ksys_write+0x1a0/0x2c0 [ 222.773475][ T7273] ? __pfx_ksys_write+0x10/0x10 [ 222.773492][ T7273] ? do_syscall_64+0x100/0x230 [ 222.773511][ T7273] ? do_syscall_64+0xb6/0x230 [ 222.773529][ T7273] do_syscall_64+0xf3/0x230 [ 222.773546][ T7273] ? clear_bhb_loop+0x35/0x90 [ 222.773569][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.773589][ T7273] RIP: 0033:0x7f785e77475f [ 222.773606][ T7273] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 222.773622][ T7273] RSP: 002b:00007f785f600010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 222.773641][ T7273] RAX: ffffffffffffffda RBX: 00007f785e903f60 RCX: 00007f785e77475f [ 222.773655][ T7273] RDX: 00000000000000d2 RSI: 0000000020000c00 RDI: 00000000000000c8 [ 222.773668][ T7273] RBP: 00007f785e7e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 222.773680][ T7273] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000000 [ 222.773692][ T7273] R13: 000000000000000b R14: 00007f785e903f60 R15: 00007ffd70f734a8 [ 222.773713][ T7273] [ 222.773720][ T7273] Modules linked in: [ 222.773733][ T7273] ---[ end trace 0000000000000000 ]--- [ 223.189346][ T7277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 223.191967][ T7273] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 223.196569][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.202493][ T7273] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 223.280930][ T7280] vhci_hcd: connection closed [ 223.281831][ T7273] RSP: 0018:ffffc9000303f098 EFLAGS: 00010202 [ 223.287450][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 223.293749][ T7273] [ 223.293758][ T7273] RAX: 1ffff11004fad6c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 223.293774][ T7273] RDX: ffffc90009bea000 RSI: 00000000000004ba RDI: 00000000000004bb [ 223.293787][ T7273] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff11005c2915c [ 223.293802][ T7273] R10: dffffc0000000000 R11: ffffed1005c2915d R12: 0000000000000038 [ 223.293816][ T7273] R13: dffffc0000000000 R14: 1ffff92000607e55 R15: 0000000000000000 [ 223.293831][ T7273] FS: 00007f785f6006c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 223.293849][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.293861][ T7273] CR2: 000000110c3c9294 CR3: 000000002b618000 CR4: 00000000003506f0 [ 223.293877][ T7273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.293887][ T7273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.293902][ T7273] Kernel panic - not syncing: Fatal exception in interrupt [ 223.294151][ T7273] Kernel Offset: disabled