last executing test programs: 13.13140177s ago: executing program 0 (id=928): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c931, 0xffffffffffffffff, 0x0) 10.699713143s ago: executing program 2 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x3, 0x0, 0xcf}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.575738348s ago: executing program 2 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x4, 0x439, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x69, 0x6d, 0xa0, 0x7ae1ae4c135cd4b2, 0x1b3d, 0x1ee, 0x1d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x427, 0x2, 0x4, 0x0, 0x10, 0x60, [{{0x9, 0x4, 0x16, 0xfa, 0xc, 0xa7, 0x35, 0xd5, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0xff, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x18, 0x0, 0x8, 0xe, 0x4, 0xe}, @mdlm_detail={0x32, 0x24, 0x13, 0x4, "77025f7050e0261928812185b9b4ea601bc4b497ee6a28620c7cb07a39263d5d405fcec62451be8ab4df2696bbab"}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0xfff4}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0x0, 0x30, 0xff, 0x7, 0x7a}]}, @uac_control={{0xa, 0x24, 0x1, 0x10, 0x8}, [@mixer_unit={0x8, 0x24, 0x4, 0x4, 0x9, "9721f6"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x2, 0x0, 0x0, 0xf8, 0xe}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x2, 0xf9, 0x8, 0x1}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x7, 0x1, 0xd, [@generic={0x6a, 0x22, "d16541388576898adae2cf5c6c7a37b42c5c39d0f5f60d755fc24a2e4a054f1b02ece0a99931ae9342769826ab2efb87ecfcb07bd6bb10093605bf3b07d3a780f34876fb74adf91a2ddcb7c1ae6457a751534d329ed9aa7315c38dbd0fea795ee1bcdf518ff915ab"}, @generic={0xfd, 0x9b875a1da19b4a5f, "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"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x59, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x2, 0xe, 0x6, [@generic={0xf7, 0x4, "1493e05bfd26b38124400bfe25cfa9b0267af2d263cb861520eb41d6cf1eb8688aa596dcb34f26371931ce962335016ac203cd1efe835b20285b91af7476b59e37024e21fa9411d6bd1190cab1e0eda48095fd7117eea73839145b5a09aa73eb232e86a0f77961f5d972c2a236e4e5276a51556d7bedd1e831d1cc3fd6dc465e4236355ac337d8a31d1dc5392493d4f5a2b6429a08cc34be15377037e3e8d16ec4b17394e8f4fad7f316cc56b4fc2d91231c113599cdba2535ca23d127fd1d6d39e7fe9db90fde4083de7e3be15e23c1dfe9c864c37b222c45addd73710f5af43918ec5279bab12614131bc86848e24f6895b1056d"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xf}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x19, 0x4, 0x80}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x4, 0x2, 0x1d}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x8, 0xfc, 0x80}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}, @generic={0x7a, 0xa, "905f3d96dafd3a4c3390e9582512cfa67ef0fd0885ff54c42f3a2a23fd26050ddfdf92eadf1c284b71f555ecb465f843ddbf5f5a1eafc0c86311ce29054164ac805988b02cbef7bed71d45d8efd3b65a67762baceeae52533b02dfd61c5f76d0cb39033bd7de6ccc1d37eddd794a434419c8a8b4b64a25b7"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x7, 0x6, 0x3}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x9, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x3, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x1, 0x19, 0x9}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x3, 0x0, 0xa}}]}}, {{0x9, 0x4, 0xeb, 0x1, 0x0, 0xe5, 0x2c, 0xb5, 0x82}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2409}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.240675853s ago: executing program 4 (id=939): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 8.463861837s ago: executing program 2 (id=941): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xb8fbfd3f96618b0d, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 8.40151456s ago: executing program 4 (id=942): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x22, 0x0, &(0x7f0000000140)) 8.393594928s ago: executing program 0 (id=943): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492e4ff000109021b19f1000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)="b2", 0x1}], 0x1, 0x15, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) 8.144387405s ago: executing program 4 (id=945): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/74, 0x4a) 7.985168686s ago: executing program 1 (id=946): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x10}}, 0x24, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000a40)='./file1\x00') r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file1\x00', 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0xc00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x0, 0x8001, 0x32648, 0xffffffffffffffff, 0x1, '\x00', 0x0, r6, 0x0, 0x4, 0x3, 0x0, @void, @value, @value=r6}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.249107179s ago: executing program 1 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x3, 0x0, 0xcf}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.151781756s ago: executing program 2 (id=948): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0), 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000003, 0x11, r1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000980)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) 4.905218524s ago: executing program 1 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4000) 4.747907922s ago: executing program 1 (id=953): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 4.043815849s ago: executing program 0 (id=954): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2000000, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000280)=@userptr={0x1, 0x3, 0x4, 0xe000, 0x8373, {0x77359400}, {0x3, 0x1, 0x74, 0x4, 0x9, 0x9c, "ae5accf0"}, 0x0, 0x2, {0x0}, 0x7}) 4.042939577s ago: executing program 3 (id=955): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), 0x0, 0x0) 4.025995558s ago: executing program 1 (id=956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) open$dir(0x0, 0x142c2, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(r1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) 3.919816218s ago: executing program 0 (id=957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(0xffffffffffffffff, 0x0, 0x0, r2, 0x800) r3 = epoll_create1(0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x8, 0xf8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xff, 0x4}}]}}}]}}]}}, 0x0) 3.300549775s ago: executing program 4 (id=958): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xb8fbfd3f96618b0d, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.137124061s ago: executing program 2 (id=959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r4, r3, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000000)=""/21, 0x15) 2.727793839s ago: executing program 3 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x4, 0x354, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x69, 0x6d, 0xa0, 0x7ae1ae4c135cd4b2, 0x1b3d, 0x1ee, 0x1d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x342, 0x2, 0x4, 0x0, 0x10, 0x60, [{{0x9, 0x4, 0x2a, 0x7, 0x4, 0xe6, 0xb3, 0xa7, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x3, 0x7f, 0x7, [@generic={0x82, 0x5, "b1858823573a348275692ceb7f5c56688f576abeb5bb546373b10c6360bbfbbef0d619b48b45b261ea71c395239cb1c61fcb87ae7327b43cc39e004cddf66fa4f1dd55d1e9ba69621a8b32fe02da9f49ff37463f7500b50db8b649937630adca7a20b2cdc7c36fcd8570db22328a47f4f06be10703cd6e6e3c1e6528f73e6195"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x8, 0xd}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x40, 0x0, 0x5, [@generic={0xf9, 0xf, "8682ec9d3d7771103a2c75c6c258bcf380a4cd32cccf009eb4f5da4214990fa956cccf02dc68addc7b8316b57325e269be5238cb502eef35d5bf8c972812aadb5091145083d3ae69ae247121c0cc7e3c75e0b9dc0c3f3b008ec63845acd22576e56c87f391b3d0005b26ed82759b33570562fd02f6d1c35668cb734571c60eb225458437e6b066659a786edce400f9ba82b4c1f3fa31e866ecd69b339a3299cdc142de3e2e474cfe02bfbc6d8abbbfb665d52082a7b17446b1196d73f8cb20fe87f14f88572894141258ca07413b5b994e8cd1dacfb64cb85e16f3f53b103d969a252ac2b52e8f5386cf1d0044b71cf99c8268f398c437"}]}}]}}, {{0x9, 0x4, 0x16, 0xfa, 0x1, 0xa7, 0x35, 0xd5, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "f35b"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0xff, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x18, 0x0, 0x8, 0xe, 0x4, 0xe}, @mdlm_detail={0x4, 0x24, 0x13, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x7, [0x800, 0x9, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0x0, 0x30, 0xff, 0x7, 0x7a}]}, @uac_control={{0xa, 0x24, 0x1, 0x10, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x2, 0x0, 0x0, 0xf8, 0xe}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x5, 0xb, "ac4c14"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x2, 0xf9, 0x8, 0x1}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x7, 0x1, 0xd, [@generic={0xd7, 0x22, "d16541388576898adae2cf5c6c7a37b42c5c39d0f5f60d755fc24a2e4a054f1b02ece0a99931ae9342769826ab2efb87ecfcb07bd6bb10093605bf3b07d3a780f34876fb74adf91a2ddcb7c1ae6457a751534d329ed9aa7315c38dbd0fea795ee1bcdf518ff915abe91c4e68a1252e31fa25c64f11f4758f602ac5fcc3c440a12453e0adeab9dd8ef79ed8ba9784620e55b5c6ee66f49983cd6475eae4d3fbcefe58bc6e8f3ec4a249a5b8d0f3c1f842c76b1419553716932c7752a96429139a149f41a6e997f200b3e03469363728f6e4352b47c7"}, @generic={0x18, 0x9b875a1da19b4a5f, "a35c773535e8c16faa4f86a480c07551da41ea19d081"}]}}]}}]}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.048352337s ago: executing program 3 (id=961): syz_open_dev$swradio(&(0x7f0000002f40), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 1.954066845s ago: executing program 3 (id=962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x18, 0x4000010}}], 0x1, 0x0) 1.925032951s ago: executing program 0 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0xffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000002ec0)={0x0, 0x0, 0x10100, 0x0, 0x63}, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a8018000580140007800800020000000000080001"], 0x3c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = syz_io_uring_complete(0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0xfffffffffffffca8}}, 0x1006) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x54}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x7, 0x6, 0xb, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x6, 0xc2, &(0x7f00000004c0)=""/194, 0x41100, 0x1, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x3, 0xa, 0x2}, 0x10, 0x2f5d2, r5, 0x4, &(0x7f00000006c0)=[r3, r8, r5, r5, 0x1, r9, r5], &(0x7f0000000700)=[{0x1, 0x2, 0xe, 0x7}, {0x2, 0x5, 0x0, 0x5}, {0x5, 0x4, 0xf, 0xa}, {0x5, 0x5, 0x8, 0x4}], 0x10, 0x7, @void, @value}, 0x94) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r11 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r11, 0x40000001) socket$nl_netfilter(0x10, 0x3, 0xc) 1.795881685s ago: executing program 1 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.775042872s ago: executing program 3 (id=965): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x480, &(0x7f0000000000)={[{}, {@gid}, {@barrier}, {@nodecompose}, {@force}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x6eb, &(0x7f0000000b40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x8f, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000180033060000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x154}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r3, 0x0, 0x40) 1.655115478s ago: executing program 4 (id=966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 751.594771ms ago: executing program 0 (id=967): syz_usb_connect(0x0, 0x42, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x98, 0x33, 0x65, 0x40, 0x18ec, 0x3290, 0xc447, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'X'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6}}]}}]}}]}}, 0x0) 55.132585ms ago: executing program 2 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x4, 0x356, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x69, 0x6d, 0xa0, 0x7ae1ae4c135cd4b2, 0x1b3d, 0x1ee, 0x1d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x344, 0x2, 0x4, 0x0, 0x10, 0x60, [{{0x9, 0x4, 0x2a, 0x7, 0x4, 0xe6, 0xb3, 0xa7, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x3, 0x7f, 0x7, [@generic={0x83, 0x5, "b1858823573a348275692ceb7f5c56688f576abeb5bb546373b10c6360bbfbbef0d619b48b45b261ea71c395239cb1c61fcb87ae7327b43cc39e004cddf66fa4f1dd55d1e9ba69621a8b32fe02da9f49ff37463f7500b50db8b649937630adca7a20b2cdc7c36fcd8570db22328a47f4f06be10703cd6e6e3c1e6528f73e619544"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x8, 0xd}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x40, 0x0, 0x5, [@generic={0xf9, 0xf, "8682ec9d3d7771103a2c75c6c258bcf380a4cd32cccf009eb4f5da4214990fa956cccf02dc68addc7b8316b57325e269be5238cb502eef35d5bf8c972812aadb5091145083d3ae69ae247121c0cc7e3c75e0b9dc0c3f3b008ec63845acd22576e56c87f391b3d0005b26ed82759b33570562fd02f6d1c35668cb734571c60eb225458437e6b066659a786edce400f9ba82b4c1f3fa31e866ecd69b339a3299cdc142de3e2e474cfe02bfbc6d8abbbfb665d52082a7b17446b1196d73f8cb20fe87f14f88572894141258ca07413b5b994e8cd1dacfb64cb85e16f3f53b103d969a252ac2b52e8f5386cf1d0044b71cf99c8268f398c437"}]}}]}}, {{0x9, 0x4, 0x16, 0xfa, 0x3, 0xa7, 0x35, 0xd5, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x10, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x4, 0x9, "9721f685"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x2, 0x0, 0x0, 0xf8, 0xe}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x2, 0xf9, 0x8, 0x1}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x7, 0x1, 0xd, [@generic={0xd6, 0x22, "d16541388576898adae2cf5c6c7a37b42c5c39d0f5f60d755fc24a2e4a054f1b02ece0a99931ae9342769826ab2efb87ecfcb07bd6bb10093605bf3b07d3a780f34876fb74adf91a2ddcb7c1ae6457a751534d329ed9aa7315c38dbd0fea795ee1bcdf518ff915abe91c4e68a1252e31fa25c64f11f4758f602ac5fcc3c440a12453e0adeab9dd8ef79ed8ba9784620e55b5c6ee66f49983cd6475eae4d3fbcefe58bc6e8f3ec4a249a5b8d0f3c1f842c76b1419553716932c7752a96429139a149f41a6e997f200b3e03469363728f6e4352b47"}, @generic={0x56, 0x9b875a1da19b4a5f, "a35c773535e8c16faa4f86a480c07551da41ea19d08138e2097d48d5ebed6000c558782b27b5a433f32d7a5ef80deffbf13e36b490c1c67725e2908329e7990adc0e858cc798d09efcbcd2ebed8ed3eb9087f4c7"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x59, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x2, 0xe, 0x6, [@generic={0x8, 0x4, "1493e05bfd26"}]}}]}}]}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 54.427834ms ago: executing program 4 (id=969): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0), 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000003, 0x11, r1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000980)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) 0s ago: executing program 3 (id=970): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x10}}, 0x24, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000a40)='./file1\x00') r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file1\x00', 0x2) kernel console output (not intermixed with test programs): romiscuous mode [ 286.305052][ T8076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.342129][ T8076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.656621][ T5242] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 286.777797][ T1830] bridge_slave_1: left allmulticast mode [ 286.885584][ T1830] bridge_slave_1: left promiscuous mode [ 286.986812][ T5242] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 287.035087][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.209536][ T1830] bridge_slave_0: left allmulticast mode [ 287.219059][ T1830] bridge_slave_0: left promiscuous mode [ 287.227637][ T1830] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.620354][ T5244] Bluetooth: hci3: command tx timeout [ 288.896527][ T5291] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 289.087880][ T5291] usb 2-1: config 1 interface 0 has no altsetting 0 [ 289.099794][ T5291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.120517][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.142521][ T5291] usb 2-1: Product: syz [ 289.164384][ T5291] usb 2-1: Manufacturer: syz [ 289.169106][ T5291] usb 2-1: SerialNumber: syz [ 289.258039][ T8156] fuse: Bad value for 'fd' [ 289.468287][ T1830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.492019][ T1830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.507423][ T1830] bond0 (unregistering): Released all slaves [ 289.542233][ T8142] pimreg: entered allmulticast mode [ 289.548495][ T8144] pimreg: left allmulticast mode [ 289.614711][ T8119] chnl_net:caif_netlink_parms(): no params data found [ 289.684024][ T5244] Bluetooth: hci3: command tx timeout [ 289.828698][ T7700] veth0_macvtap: entered promiscuous mode [ 289.941517][ T7700] veth1_macvtap: entered promiscuous mode [ 290.012378][ T8158] loop0: detected capacity change from 0 to 32768 [ 290.081464][ T8158] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.138470][ T1830] hsr_slave_0: left promiscuous mode [ 290.203110][ T1830] hsr_slave_1: left promiscuous mode [ 290.223680][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.232162][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.247803][ T1830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.262186][ T8180] loop2: detected capacity change from 0 to 256 [ 290.263065][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.295819][ T8158] XFS (loop0): Ending clean mount [ 290.301553][ T8180] vfat: Bad value for 'utf8' [ 290.352114][ T8158] xfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá' [ 290.401702][ T1830] veth1_macvtap: left promiscuous mode [ 290.431448][ T1830] veth0_macvtap: left promiscuous mode [ 290.442161][ T1830] veth1_vlan: left promiscuous mode [ 290.449425][ T1830] veth0_vlan: left promiscuous mode [ 290.459083][ T7487] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.520115][ T5291] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 291.542152][ T5291] usb 2-1: USB disconnect, device number 24 [ 291.563484][ T5291] usblp0: removed [ 291.758561][ T5244] Bluetooth: hci3: command tx timeout [ 291.788954][ T8199] 9pnet_fd: Insufficient options for proto=fd [ 291.827952][ T5244] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 291.839072][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: kworker/u9:2 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 291.849465][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.859658][ T5244] Workqueue: hci5 hci_rx_work [ 291.864436][ T5244] Call Trace: [ 291.867728][ T5244] [ 291.870663][ T5244] dump_stack_lvl+0x241/0x360 [ 291.875360][ T5244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.880582][ T5244] ? __pfx__printk+0x10/0x10 [ 291.885197][ T5244] ? __kmalloc_cache_noprof+0x243/0x390 [ 291.890764][ T5244] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 291.896064][ T5244] sysfs_create_dir_ns+0x2ce/0x3a0 [ 291.901185][ T5244] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 291.906833][ T5244] kobject_add_internal+0x435/0x8d0 [ 291.912049][ T5244] kobject_add+0x152/0x220 [ 291.916576][ T5244] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.921788][ T5244] ? device_add+0x3e7/0xbf0 [ 291.926300][ T5244] ? __pfx_kobject_add+0x10/0x10 [ 291.931245][ T5244] ? _raw_spin_unlock+0x28/0x50 [ 291.936117][ T5244] ? get_device_parent+0x165/0x410 [ 291.941243][ T5244] device_add+0x4e5/0xbf0 [ 291.945589][ T5244] hci_conn_add_sysfs+0xe8/0x200 [ 291.950544][ T5244] le_conn_complete_evt+0xc9f/0x12e0 [ 291.955945][ T5244] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 291.961680][ T5244] ? __mutex_unlock_slowpath+0x21d/0x750 [ 291.967327][ T5244] ? __copy_skb_header+0x437/0x5b0 [ 291.972457][ T5244] ? skb_pull_data+0x112/0x230 [ 291.977247][ T5244] hci_le_conn_complete_evt+0x18c/0x420 [ 291.982813][ T5244] hci_event_packet+0xa55/0x1540 [ 291.987767][ T5244] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 291.993095][ T5244] ? __pfx_hci_event_packet+0x10/0x10 [ 291.998480][ T5244] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.003728][ T5244] ? hci_send_to_monitor+0xd8/0x7f0 [ 292.008947][ T5244] ? kcov_remote_start+0x97/0x7d0 [ 292.013994][ T5244] hci_rx_work+0x3df/0xdd0 [ 292.018422][ T5244] ? process_scheduled_works+0x976/0x1850 [ 292.024160][ T5244] process_scheduled_works+0xa63/0x1850 [ 292.029765][ T5244] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.035794][ T5244] ? assign_work+0x364/0x3d0 [ 292.040410][ T5244] worker_thread+0x870/0xd30 [ 292.045024][ T5244] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 292.050934][ T5244] ? __kthread_parkme+0x169/0x1d0 [ 292.055986][ T5244] ? __pfx_worker_thread+0x10/0x10 [ 292.061112][ T5244] kthread+0x2f0/0x390 [ 292.065193][ T5244] ? __pfx_worker_thread+0x10/0x10 [ 292.070329][ T5244] ? __pfx_kthread+0x10/0x10 [ 292.074928][ T5244] ret_from_fork+0x4b/0x80 [ 292.079352][ T5244] ? __pfx_kthread+0x10/0x10 [ 292.083950][ T5244] ret_from_fork_asm+0x1a/0x30 [ 292.088743][ T5244] [ 292.093149][ T5244] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 292.112339][ T5244] Bluetooth: hci5: failed to register connection device [ 292.270366][ T8208] fuse: Bad value for 'fd' [ 292.372476][ T8212] loop1: detected capacity change from 0 to 512 [ 292.379863][ T8212] EXT4-fs: Ignoring removed bh option [ 292.403425][ T8212] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.483: invalid block [ 292.425424][ T8212] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.483: couldn't read orphan inode 15 (err -117) [ 292.564948][ T8212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.878275][ T1830] team0 (unregistering): Port device team_slave_1 removed [ 293.127943][ T1830] team0 (unregistering): Port device team_slave_0 removed [ 293.416131][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.462269][ T8220] loop0: detected capacity change from 0 to 512 [ 293.543252][ T8220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.557253][ T8220] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.839580][ T5244] Bluetooth: hci3: command tx timeout [ 294.045533][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.052723][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.064828][ T8119] bridge_slave_0: entered allmulticast mode [ 294.071700][ T8119] bridge_slave_0: entered promiscuous mode [ 294.114977][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 294.162676][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.198491][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.232957][ T8119] bridge_slave_1: entered allmulticast mode [ 294.253481][ T8119] bridge_slave_1: entered promiscuous mode [ 294.307385][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.327111][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.342413][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.356949][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.372579][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.430725][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.459959][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.488969][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.507619][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.593677][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.646111][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 294.767989][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.985708][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 296.219911][ T8119] team0: Port device team_slave_0 added [ 296.245627][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.276298][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.296961][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.317864][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.346565][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.388137][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.416585][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.437489][ T8254] loop2: detected capacity change from 0 to 512 [ 296.443886][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.454678][ T8254] EXT4-fs: Ignoring removed bh option [ 296.463289][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.474883][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.476728][ T7700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.492707][ T7700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.501733][ T7700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.510788][ T8254] EXT4-fs error (device loop2): __ext4_iget:4952: inode #15: block 1803188595: comm syz.2.493: invalid block [ 296.511363][ T8254] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.493: couldn't read orphan inode 15 (err -117) [ 296.526790][ T7700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.583090][ T8119] team0: Port device team_slave_1 added [ 296.605290][ T8254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.244536][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.251545][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.279330][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.334706][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.366367][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.383677][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.493981][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.521809][ T8263] loop2: detected capacity change from 0 to 128 [ 297.696587][ T274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.799727][ T274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.900391][ T8119] hsr_slave_0: entered promiscuous mode [ 297.960088][ T8119] hsr_slave_1: entered promiscuous mode [ 297.972722][ T8119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.986844][ T8119] Cannot create hsr debugfs directory [ 298.396624][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 298.470130][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.509876][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.844073][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 299.943872][ T5291] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 300.036599][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 300.048091][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.051021][ T8306] loop1: detected capacity change from 0 to 1024 [ 300.059847][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.088737][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 300.112254][ T5291] usb 3-1: Using ep0 maxpacket: 32 [ 300.121097][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 300.133131][ T46] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 300.152694][ T46] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 300.167051][ T8306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.171746][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 300.190712][ T46] usb 4-1: Manufacturer: syz [ 300.198744][ T46] usb 4-1: config 0 descriptor?? [ 300.206525][ T5291] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.216684][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.237155][ T5291] usb 3-1: config 0 descriptor?? [ 300.238871][ T8306] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.247287][ T8296] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 300.265635][ T5291] hub 3-1:0.0: USB hub found [ 300.378088][ T8313] loop0: detected capacity change from 0 to 128 [ 300.480948][ T8296] loop2: detected capacity change from 0 to 1024 [ 300.695031][ T46] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 300.744189][ T46] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 300.985376][ T46] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 301.316553][ T8296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.417264][ T8119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.433568][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.438690][ T8119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.507143][ T8119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.610373][ T8119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.831273][ T5294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 301.878534][ T8335] loop1: detected capacity change from 0 to 256 [ 301.895109][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.955073][ T8335] vfat: Bad value for 'utf8' [ 301.997871][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.014323][ T5294] usb 1-1: Using ep0 maxpacket: 32 [ 302.024509][ T5294] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.034855][ T5294] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 302.044806][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.066107][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.073288][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.119994][ T5294] usb 1-1: Product: syz [ 302.126516][ T5294] usb 1-1: Manufacturer: syz [ 302.145872][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.153054][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.176595][ T5294] usb 1-1: SerialNumber: syz [ 302.204013][ T5294] usb 1-1: config 0 descriptor?? [ 302.228290][ T5294] usb 1-1: Direct firmware load for BCM2033-MD.hex failed with error -2 [ 302.282357][ T5294] usb 1-1: Falling back to sysfs fallback for: BCM2033-MD.hex [ 302.772627][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.880955][ T8357] loop3: detected capacity change from 0 to 128 [ 302.949561][ T8357] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.060584][ T8357] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.127788][ T8] usb 4-1: USB disconnect, device number 9 [ 303.445296][ T5291] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 303.479448][ T5291] usbhid 3-1:0.0: can't add hid device: -71 [ 303.495187][ T7700] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.506896][ T5291] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 303.556836][ T5291] usb 3-1: USB disconnect, device number 12 [ 303.767622][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.269696][ T8119] veth0_vlan: entered promiscuous mode [ 304.422571][ T8119] veth1_vlan: entered promiscuous mode [ 304.456238][ T8384] loop2: detected capacity change from 0 to 128 [ 304.511405][ T8119] veth0_macvtap: entered promiscuous mode [ 304.546492][ T8119] veth1_macvtap: entered promiscuous mode [ 304.688880][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.789212][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.870816][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.958241][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.163027][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.191194][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.225994][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.253788][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.265869][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.276427][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.287933][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.297803][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.308441][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.318490][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.329081][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.339137][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.350231][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.360391][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.370960][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.381114][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.391628][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.402826][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.413215][ T8119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.422147][ T8119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.431100][ T8119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.439908][ T8119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.457146][ T8387] loop3: detected capacity change from 0 to 32768 [ 305.509370][ T8387] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.517 (8387) [ 305.546233][ T8387] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.562968][ T8387] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 305.585977][ T8399] loop1: detected capacity change from 0 to 256 [ 305.604224][ T8399] vfat: Bad value for 'utf8' [ 305.612371][ T8387] BTRFS info (device loop3): using free-space-tree [ 305.930063][ T8418] loop1: detected capacity change from 0 to 256 [ 306.085997][ T29] audit: type=1800 audit(1729432400.198:54): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.517" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 306.114283][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.122391][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.134940][ T938] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 306.316393][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.332714][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.523953][ T8387] syz.3.517 (8387) used greatest stack depth: 16944 bytes left [ 306.575443][ T938] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.586595][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.597598][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.607454][ T938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.626204][ T938] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.654346][ T938] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.671477][ T8441] input: syz0 as /devices/virtual/input/input10 [ 306.684197][ T938] usb 3-1: Manufacturer: syz [ 306.737167][ T938] usb 3-1: config 0 descriptor?? [ 306.791397][ T7700] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 307.437761][ T938] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 307.447064][ T938] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 307.463121][ T938] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 307.980064][ T8463] loop3: detected capacity change from 0 to 512 [ 307.987783][ T8463] EXT4-fs: Ignoring removed oldalloc option [ 308.130850][ T8463] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.529: Parent and EA inode have the same ino 15 [ 308.210185][ T8463] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.529: Parent and EA inode have the same ino 15 [ 308.222542][ T8473] loop0: detected capacity change from 0 to 128 [ 308.230586][ T8463] EXT4-fs (loop3): 1 orphan inode deleted [ 308.241527][ T8463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.521194][ T5291] usb 3-1: USB disconnect, device number 13 [ 309.649439][ T7700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.711196][ T8487] loop0: detected capacity change from 0 to 256 [ 310.849103][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 311.210964][ T8498] loop0: detected capacity change from 0 to 32768 [ 311.274929][ T8498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.536 (8498) [ 311.358312][ T8498] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.373270][ T8498] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 311.417658][ T8498] BTRFS info (device loop0): using free-space-tree [ 311.441526][ T8524] loop4: detected capacity change from 0 to 128 [ 312.454073][ T29] audit: type=1800 audit(1729432406.518:55): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.536" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 313.220261][ T7487] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.408253][ T8560] loop3: detected capacity change from 0 to 256 [ 315.397782][ T8593] loop0: detected capacity change from 0 to 512 [ 315.469687][ T8597] loop1: detected capacity change from 0 to 1024 [ 315.622157][ T8593] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 315.634732][ T8593] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.547: invalid indirect mapped block 2683928664 (level 1) [ 315.662021][ T8593] EXT4-fs (loop0): Remounting filesystem read-only [ 315.803784][ T8593] EXT4-fs (loop0): 1 truncate cleaned up [ 316.231427][ T8593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.834496][ T8611] loop4: detected capacity change from 0 to 128 [ 317.189664][ T5291] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 317.382405][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.390208][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.963820][ T5291] usb 3-1: Using ep0 maxpacket: 16 [ 317.970706][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.971206][ T5291] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 317.992915][ T5291] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.003672][ T5291] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.019995][ T5291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.029409][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.037570][ T5291] usb 3-1: Product: syz [ 318.042518][ T5291] usb 3-1: Manufacturer: syz [ 318.047663][ T5291] usb 3-1: SerialNumber: syz [ 318.207357][ T8622] loop0: detected capacity change from 0 to 512 [ 318.300661][ T8626] loop1: detected capacity change from 0 to 256 [ 318.475826][ T5291] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 323.187751][ T8637] loop0: detected capacity change from 0 to 512 [ 323.195105][ T8637] EXT4-fs: Ignoring removed bh option [ 323.612496][ T5291] usb 3-1: 2:1: cannot set freq 9338379 to ep 0x82 [ 324.274040][ T8637] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.562: invalid block [ 324.304107][ T5291] usb 3-1: USB disconnect, device number 14 [ 324.397735][ T8637] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.562: couldn't read orphan inode 15 (err -117) [ 324.457656][ T7053] udevd[7053]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.616280][ T8637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.365373][ T8639] loop1: detected capacity change from 0 to 40427 [ 325.494511][ T8639] F2FS-fs (loop1): invalid crc value [ 325.520845][ T5248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.536720][ T5248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.545561][ T5248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.568097][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.587085][ T8639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 325.639015][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.649267][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.679421][ T8639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.693934][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.933896][ T29] audit: type=1800 audit(1729432420.038:56): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.564" name="file0" dev="loop1" ino=10 res=0 errno=0 [ 326.571334][ T8639] syz.1.564: attempt to access beyond end of device [ 326.571334][ T8639] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 326.585364][ T8639] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 326.592384][ T8639] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 326.599517][ T8639] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 327.417839][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 327.498702][ T8683] loop4: detected capacity change from 0 to 512 [ 327.650133][ T8683] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 327.674505][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 327.823721][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.846849][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.875681][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.891947][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.919651][ T8658] bridge_slave_0: entered allmulticast mode [ 327.928880][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.938595][ T8690] loop0: detected capacity change from 0 to 1024 [ 327.944072][ T8658] bridge_slave_0: entered promiscuous mode [ 327.954319][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.966761][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.043429][ T5248] Bluetooth: hci4: command tx timeout [ 328.270476][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.519708][ T8690] loop0: detected capacity change from 0 to 1024 [ 328.530095][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.561705][ T8658] bridge_slave_1: entered allmulticast mode [ 328.591946][ T8658] bridge_slave_1: entered promiscuous mode [ 328.698825][ T8] usb 3-1: config 0 descriptor?? [ 328.863058][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.912730][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.007859][ T8658] team0: Port device team_slave_0 added [ 329.022186][ T8658] team0: Port device team_slave_1 added [ 329.151936][ T2559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.230012][ T938] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 329.252001][ T8] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 329.271980][ T8] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 330.152877][ T5248] Bluetooth: hci5: command 0x0406 tx timeout [ 330.159532][ T54] Bluetooth: hci4: command tx timeout [ 330.165784][ T46] usb 3-1: USB disconnect, device number 15 [ 330.220730][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 330.229001][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.255281][ T938] usb 5-1: config 0 has no interfaces? [ 330.261024][ T938] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 330.273783][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.314771][ T938] usb 5-1: config 0 descriptor?? [ 330.325272][ T2559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.505474][ T2559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.537183][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.546902][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.555286][ T5287] usb 5-1: USB disconnect, device number 6 [ 330.580489][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.628873][ T8709] loop1: detected capacity change from 0 to 1024 [ 330.631736][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.652256][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.680963][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.720507][ T8709] hfsplus: request for non-existent node 3 in B*Tree [ 330.743518][ T2559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.765919][ T8709] hfsplus: request for non-existent node 3 in B*Tree [ 330.823017][ T8711] loop2: detected capacity change from 0 to 512 [ 330.834963][ T8711] EXT4-fs: Ignoring removed bh option [ 330.922094][ T8711] EXT4-fs error (device loop2): __ext4_iget:4952: inode #15: block 1803188595: comm syz.2.580: invalid block [ 330.939997][ T8711] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.580: couldn't read orphan inode 15 (err -117) [ 330.969866][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.985773][ T8658] hsr_slave_0: entered promiscuous mode [ 331.035236][ T8658] hsr_slave_1: entered promiscuous mode [ 331.076467][ T8658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.084316][ T8658] Cannot create hsr debugfs directory [ 331.107683][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.957666][ T2559] bridge_slave_1: left allmulticast mode [ 331.963459][ T2559] bridge_slave_1: left promiscuous mode [ 331.970428][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.998144][ T2559] bridge_slave_0: left allmulticast mode [ 332.011043][ T2559] bridge_slave_0: left promiscuous mode [ 332.029680][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.223785][ T5244] Bluetooth: hci4: command tx timeout [ 332.734989][ T8716] loop4: detected capacity change from 0 to 40427 [ 332.776285][ T8716] F2FS-fs (loop4): invalid crc value [ 332.792122][ T8716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.893670][ T8716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 332.956797][ T29] audit: type=1800 audit(1729432427.068:57): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 333.005585][ T8716] syz.4.583: attempt to access beyond end of device [ 333.005585][ T8716] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 333.047472][ T8716] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 333.055590][ T8716] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 333.083916][ T8716] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 333.190323][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.252975][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.277534][ T2559] bond0 (unregistering): Released all slaves [ 333.424363][ T62] hfsplus: b-tree write err: -5, ino 4 [ 333.804057][ T5287] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 333.965142][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 333.972020][ T5287] usb 3-1: config 9 has no interfaces? [ 333.978473][ T5287] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 334.014681][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.037462][ T2559] hsr_slave_0: left promiscuous mode [ 334.067712][ T2559] hsr_slave_1: left promiscuous mode [ 334.105133][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.123056][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.161173][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.189174][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.278295][ T2559] veth1_macvtap: left promiscuous mode [ 334.298525][ T2559] veth0_macvtap: left promiscuous mode [ 334.308763][ T5244] Bluetooth: hci4: command tx timeout [ 334.374186][ T2559] veth1_vlan: left promiscuous mode [ 334.379685][ T2559] veth0_vlan: left promiscuous mode [ 334.405475][ T8761] loop1: detected capacity change from 0 to 512 [ 334.412788][ T8761] EXT4-fs: Ignoring removed bh option [ 334.433399][ T8762] loop4: detected capacity change from 0 to 1024 [ 334.463236][ T8761] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.591: invalid block [ 334.468065][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.580167][ T8761] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.591: couldn't read orphan inode 15 (err -117) [ 334.613650][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.677039][ T8761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.094358][ T8772] hfsplus: extend alloc file! (8192,512,16777719) [ 335.110987][ T8772] Invalid option length (2306) for dns_resolver key [ 335.670995][ T62] hfsplus: b-tree write err: -5, ino 8 [ 335.689548][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.871842][ T8780] usb usb8: usbfs: process 8780 (syz.0.597) did not claim interface 0 before use [ 336.812790][ T8782] loop4: detected capacity change from 0 to 40427 [ 336.886454][ T8782] F2FS-fs (loop4): invalid crc value [ 336.921138][ T8782] F2FS-fs (loop4): Found nat_bits in checkpoint [ 337.031217][ T8782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 337.061431][ T8782] syz.4.594: attempt to access beyond end of device [ 337.061431][ T8782] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 337.067123][ T29] audit: type=1800 audit(1729432431.168:58): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.594" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 337.093907][ T8782] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 337.115513][ T8782] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 337.156648][ T8782] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 337.331747][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 337.555925][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 339.251093][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 339.265965][ T5287] usb 3-1: string descriptor 0 read error: -32 [ 339.316923][ T5287] usb 3-1: USB disconnect, device number 16 [ 340.045315][ T8658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.161368][ T8658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.432214][ T8658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.865275][ T8658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.024166][ T8866] Device name cannot be null; rc = [-22] [ 341.104785][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.283271][ T8873] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 342.212215][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.374340][ T8658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.385328][ T8658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.417454][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.424615][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.436578][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.443759][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.583959][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 344.776891][ T8886] loop2: detected capacity change from 0 to 1024 [ 344.784975][ T8886] hfsplus: Unknown parameter 'nodecomp' [ 346.022883][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.152077][ T8907] loop1: detected capacity change from 0 to 512 [ 346.356218][ T8913] loop2: detected capacity change from 0 to 1024 [ 346.431751][ T8913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.449033][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.461766][ T8907] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.487187][ T8907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.636643][ T8076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.671347][ T8904] loop1: detected capacity change from 0 to 512 [ 346.701326][ T8904] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 346.735038][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.748128][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.757526][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.774463][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 346.794951][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.807280][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.815215][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.850780][ T8658] veth0_vlan: entered promiscuous mode [ 346.870541][ T8658] veth1_vlan: entered promiscuous mode [ 346.946765][ T8076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.187115][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.203222][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 347.208122][ T8076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.250459][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.250663][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 347.323196][ T46] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 347.481716][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.488371][ T8658] veth0_macvtap: entered promiscuous mode [ 347.532646][ T46] usb 3-1: Product: syz [ 347.633887][ T46] usb 3-1: Manufacturer: syz [ 347.690532][ T46] usb 3-1: SerialNumber: syz [ 347.845863][ T46] usb 3-1: config 0 descriptor?? [ 347.869140][ T8913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.892897][ T46] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 347.961177][ T8076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.031400][ T8658] veth1_macvtap: entered promiscuous mode [ 348.125482][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.136390][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.147321][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.171436][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.216520][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.265631][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.311812][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.348737][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.375631][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.393875][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.425252][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.435764][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.435787][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.435798][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.435812][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.435824][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.435838][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.435850][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.435862][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.435874][ T8658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.435887][ T8658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.438135][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.584308][ T8658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.593242][ T8658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.611743][ T8658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.620765][ T8658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.852806][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 348.954735][ T54] Bluetooth: hci1: command tx timeout [ 349.372051][ T8076] bridge_slave_1: left allmulticast mode [ 349.379014][ T8076] bridge_slave_1: left promiscuous mode [ 349.385829][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.442569][ T8957] loop0: detected capacity change from 0 to 1024 [ 349.451319][ T8957] hfsplus: Unknown parameter 'nodecomp' [ 349.475303][ T8076] bridge_slave_0: left allmulticast mode [ 349.481477][ T8076] bridge_slave_0: left promiscuous mode [ 349.487744][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.782254][ T8962] Invalid ELF header magic: != ELF [ 350.677834][ T8] usb 3-1: USB disconnect, device number 17 [ 350.796275][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.975687][ T8965] loop1: detected capacity change from 0 to 1024 [ 351.101908][ T8965] loop1: detected capacity change from 0 to 1024 [ 351.266104][ T54] Bluetooth: hci1: command tx timeout [ 353.423111][ T54] Bluetooth: hci1: command tx timeout [ 353.665156][ T62] hfsplus: b-tree write err: -5, ino 4 [ 355.361796][ T8992] loop0: detected capacity change from 0 to 1024 [ 355.672355][ T54] Bluetooth: hci1: command tx timeout [ 355.677969][ T5244] Bluetooth: hci0: command 0x0406 tx timeout [ 355.704666][ T8992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.752716][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.008713][ T9000] loop0: detected capacity change from 0 to 1024 [ 356.074714][ T9000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.758216][ T7487] UDF-fs: warning (device loop0): udf_evict_inode: Inode 862 (mode 120777) has inode size 14 different from extent length 512. Filesystem need not be standards compliant. [ 356.817228][ T9003] loop0: detected capacity change from 0 to 1024 [ 356.824502][ T9003] hfsplus: Unknown parameter 'nodecomp' [ 357.675647][ T8076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.696233][ T8076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.715582][ T8076] bond0 (unregistering): Released all slaves [ 357.743647][ T8921] chnl_net:caif_netlink_parms(): no params data found [ 358.043149][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 358.236369][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.247175][ T9018] 9pnet_fd: Insufficient options for proto=fd [ 358.284119][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.393529][ T8921] bridge_slave_0: entered allmulticast mode [ 358.555079][ T8921] bridge_slave_0: entered promiscuous mode [ 358.855277][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 358.884882][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.892039][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.910006][ T8921] bridge_slave_1: entered allmulticast mode [ 358.936392][ T8921] bridge_slave_1: entered promiscuous mode [ 359.020451][ T9028] loop1: detected capacity change from 0 to 256 [ 359.028422][ T9028] vfat: Unknown parameter 'rinnt' [ 359.142459][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.158483][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.290387][ T9034] loop1: detected capacity change from 0 to 16 [ 359.347702][ T9034] erofs: (device loop1): mounted with root inode @ nid 36. [ 359.895940][ T9035] loop2: detected capacity change from 0 to 512 [ 359.924245][ T9035] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 359.937016][ T9035] UDF-fs: Scanning with blocksize 512 failed [ 359.959008][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.977144][ T9035] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 359.987218][ T9035] UDF-fs: Scanning with blocksize 1024 failed [ 360.011021][ T9035] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 360.025932][ T9035] UDF-fs: Scanning with blocksize 2048 failed [ 360.043932][ T9035] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 360.057894][ T9035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.084464][ T8076] hsr_slave_0: left promiscuous mode [ 360.097277][ T8076] hsr_slave_1: left promiscuous mode [ 360.406714][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 360.962783][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.016740][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.077517][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.085393][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.160076][ T9047] loop2: detected capacity change from 0 to 1024 [ 361.167058][ T9047] EXT4-fs: Ignoring removed orlov option [ 361.173371][ T9047] EXT4-fs (loop2): Test dummy encryption mode enabled [ 361.186665][ T9047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.231131][ T9046] loop1: detected capacity change from 0 to 1024 [ 361.238257][ T9046] hfsplus: Unknown parameter 'nodecomp' [ 361.437950][ T8076] veth1_macvtap: left promiscuous mode [ 361.450472][ T8076] veth0_macvtap: left promiscuous mode [ 361.456338][ T8076] veth1_vlan: left promiscuous mode [ 361.467091][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.524832][ T8076] veth0_vlan: left promiscuous mode [ 362.842193][ T9057] loop2: detected capacity change from 0 to 512 [ 362.937548][ T9057] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 363.536875][ T5294] Bluetooth: Mini driver request failed [ 363.542531][ T5294] bcm203x 1-1:0.0: probe with driver bcm203x failed with error -5 [ 363.920315][ T5294] usb 1-1: USB disconnect, device number 12 [ 364.003583][ T9065] loop0: detected capacity change from 0 to 512 [ 364.244905][ T9065] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 365.292935][ T9078] loop0: detected capacity change from 0 to 1024 [ 365.366271][ T8076] team0 (unregistering): Port device team_slave_1 removed [ 365.389763][ T9078] loop0: detected capacity change from 0 to 1024 [ 365.650245][ T8076] team0 (unregistering): Port device team_slave_0 removed [ 366.064408][ T1830] hfsplus: b-tree write err: -5, ino 4 [ 366.455285][ T9084] loop0: detected capacity change from 0 to 1024 [ 366.462250][ T9084] EXT4-fs: Ignoring removed orlov option [ 366.472129][ T9084] EXT4-fs (loop0): Test dummy encryption mode enabled [ 366.517180][ T9084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.563996][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.738515][ T9088] loop0: detected capacity change from 0 to 1024 [ 366.745810][ T9088] hfsplus: Unknown parameter 'nodecomp' [ 367.646060][ T9096] loop0: detected capacity change from 0 to 512 [ 367.843038][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.900169][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 367.949815][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.990056][ T9096] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 368.004760][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.918537][ T8921] team0: Port device team_slave_0 added [ 368.969472][ T8921] team0: Port device team_slave_1 added [ 369.179861][ T9113] loop2: detected capacity change from 0 to 512 [ 369.232415][ T9118] loop0: detected capacity change from 0 to 512 [ 369.332153][ T9113] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 369.546784][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.558828][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.205977][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.527104][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.626504][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.665595][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.779549][ T9118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.792315][ T9118] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.883952][ T9139] Bluetooth: MGMT ver 1.23 [ 371.062080][ T9142] loop2: detected capacity change from 0 to 256 [ 371.070005][ T9142] vfat: Bad value for 'fmask' [ 371.439902][ T8921] hsr_slave_0: entered promiscuous mode [ 371.520797][ T8921] hsr_slave_1: entered promiscuous mode [ 371.559168][ T8921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.628808][ T8921] Cannot create hsr debugfs directory [ 371.742526][ T9150] loop3: detected capacity change from 0 to 1024 [ 371.750540][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.994818][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 372.782825][ T2559] hfsplus: b-tree write err: -5, ino 8 [ 372.887679][ T9172] loop2: detected capacity change from 0 to 512 [ 373.036749][ T9177] loop3: detected capacity change from 0 to 512 [ 373.067358][ T9172] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 373.104252][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 373.111611][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 373.776244][ T9177] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 374.096517][ T9201] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 374.263385][ T9207] loop2: detected capacity change from 0 to 256 [ 374.300337][ T9207] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 374.311541][ T9207] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 374.321499][ T9207] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 374.333810][ T9207] UDF-fs: Scanning with blocksize 512 failed [ 374.344158][ T9207] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 374.581620][ T9207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.985509][ T9219] loop1: detected capacity change from 0 to 1024 [ 374.996124][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 375.278649][ T8921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.318608][ T8921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.336542][ T8921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.968437][ T8921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.192325][ T9234] hfsplus: xattr search failed [ 376.348835][ T9238] loop0: detected capacity change from 0 to 256 [ 376.540801][ T9240] loop1: detected capacity change from 0 to 512 [ 376.671131][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.737444][ T9240] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 376.757404][ T8921] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.802607][ T8921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.813377][ T8921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.840325][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.847590][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.857766][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.864917][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.953388][ T9253] loop3: detected capacity change from 0 to 512 [ 377.669463][ T9253] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 377.796635][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 377.948912][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.266295][ T9271] bridge0: entered promiscuous mode [ 378.304402][ T9271] bridge0: entered allmulticast mode [ 378.712142][ T9292] loop3: detected capacity change from 0 to 256 [ 378.719570][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726039][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.096821][ T8921] veth0_vlan: entered promiscuous mode [ 379.120160][ T8921] veth1_vlan: entered promiscuous mode [ 379.386387][ T9308] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 379.822965][ T8921] veth0_macvtap: entered promiscuous mode [ 379.869639][ T8921] veth1_macvtap: entered promiscuous mode [ 380.029843][ T9311] loop2: detected capacity change from 0 to 512 [ 380.142102][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.152893][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.163141][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.178461][ T9318] loop3: detected capacity change from 0 to 512 [ 380.185031][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.194909][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.205538][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.215613][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.226099][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.236010][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.246580][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.258492][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.268267][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.277679][ T9311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.278894][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.301207][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.306824][ T9311] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.312068][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.331967][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.342451][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.352372][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.362883][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.372826][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.383387][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.394565][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.404787][ T8921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.413527][ T8921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.422317][ T8921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.431474][ T8921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.441789][ T9311] netlink: 'syz.2.718': attribute type 12 has an invalid length. [ 380.480828][ T9318] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 380.698954][ T9316] netlink: 296 bytes leftover after parsing attributes in process `syz.1.719'. [ 380.724100][ T9316] unsupported nlmsg_type 40 [ 380.751375][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.324104][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.331985][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.392037][ T8991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.411506][ T8991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.563122][ T9349] loop0: detected capacity change from 0 to 256 [ 381.592534][ T9347] loop4: detected capacity change from 0 to 512 [ 381.632339][ T9347] EXT4-fs: Ignoring removed oldalloc option [ 381.711673][ T9347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.635: Parent and EA inode have the same ino 15 [ 381.789972][ T9347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.635: Parent and EA inode have the same ino 15 [ 381.823810][ T9347] EXT4-fs (loop4): 1 orphan inode deleted [ 381.957059][ T9347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.810398][ T5294] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 382.915585][ T9363] xt_hashlimit: size too large, truncated to 1048576 [ 385.475428][ T8921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.749996][ T9372] loop4: detected capacity change from 0 to 1024 [ 385.910975][ T9372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.948195][ T9372] mmap: syz.4.730 (9372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 386.096473][ T9383] netlink: 124 bytes leftover after parsing attributes in process `syz.2.731'. [ 386.551872][ T8921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.656572][ T9377] tty tty24: ldisc open failed (-12), clearing slot 23 [ 386.866394][ T9388] loop4: detected capacity change from 0 to 512 [ 387.283883][ T9388] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 388.478459][ T9408] loop2: detected capacity change from 0 to 256 [ 388.630235][ T9408] fuse: Bad value for 'group_id' [ 389.571424][ T9408] fuse: Bad value for 'group_id' [ 389.962558][ T9414] loop1: detected capacity change from 0 to 512 [ 390.510107][ T9433] loop3: detected capacity change from 0 to 1024 [ 390.536657][ T9414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.606891][ T9414] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.627417][ T9414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.740: bg 0: block 344: padding at end of block bitmap is not set [ 390.897347][ T9443] loop0: detected capacity change from 0 to 160 [ 391.634385][ T9414] Quota error (device loop1): write_blk: dquota write failed [ 392.887659][ T5287] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 393.191933][ T9414] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 393.540190][ T9414] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 393.584118][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 393.603925][ T9414] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.740: Failed to acquire dquot type 1 [ 393.611728][ T5287] usb 3-1: device descriptor read/all, error -71 [ 393.751820][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.786208][ T9452] fuse: Unknown parameter 'fd0x0000000000000009' [ 395.082864][ T9466] loop1: detected capacity change from 0 to 512 [ 395.209339][ T9466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.228196][ T9466] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.153894][ T29] audit: type=1800 audit(1729432490.498:59): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.749" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 397.279616][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.622720][ T9495] loop1: detected capacity change from 0 to 256 [ 397.753308][ T9495] fuse: Bad value for 'group_id' [ 397.762382][ T9495] fuse: Bad value for 'group_id' [ 397.845382][ T9498] loop4: detected capacity change from 0 to 1024 [ 397.979720][ T9498] loop4: detected capacity change from 0 to 1024 [ 398.801585][ T12] hfsplus: b-tree write err: -5, ino 4 [ 398.943201][ T9500] loop1: detected capacity change from 0 to 8192 [ 399.116920][ T29] audit: type=1800 audit(1729432493.198:60): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.755" name="bus" dev="loop1" ino=1048671 res=0 errno=0 [ 399.202139][ T29] audit: type=1326 audit(1729432493.308:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.225020][ T29] audit: type=1326 audit(1729432493.308:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.248150][ T29] audit: type=1326 audit(1729432493.348:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.270577][ T29] audit: type=1326 audit(1729432493.348:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.294507][ T29] audit: type=1326 audit(1729432493.348:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.316688][ T29] audit: type=1326 audit(1729432493.348:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.339067][ T29] audit: type=1326 audit(1729432493.348:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 399.363305][ T29] audit: type=1326 audit(1729432493.348:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0fb7dff9 code=0x7ffc0000 [ 400.003894][ T5292] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 400.068276][ T9516] xt_hashlimit: size too large, truncated to 1048576 [ 400.307681][ T5292] usb 1-1: Using ep0 maxpacket: 8 [ 403.527217][ T5292] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 403.537279][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.563548][ T5292] usb 1-1: Product: syz [ 403.634691][ T5292] usb 1-1: config 0 descriptor?? [ 403.646643][ T5292] usb 1-1: can't set config #0, error -71 [ 403.863813][ T5292] usb 1-1: USB disconnect, device number 13 [ 403.906525][ T9532] loop4: detected capacity change from 0 to 256 [ 404.023201][ T9532] fuse: Bad value for 'group_id' [ 404.064419][ T9532] fuse: Bad value for 'group_id' [ 404.108359][ T9535] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 404.302676][ T9538] loop1: detected capacity change from 0 to 1024 [ 404.414391][ T9540] loop2: detected capacity change from 0 to 1024 [ 404.421533][ T9540] EXT4-fs: Ignoring removed orlov option [ 404.433996][ T9540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.495905][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.514712][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.522851][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.552488][ T9538] loop1: detected capacity change from 0 to 1024 [ 404.653156][ T9540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.682600][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.716079][ T9530] loop0: detected capacity change from 0 to 32768 [ 404.741676][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.749241][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.763793][ T9530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.763 (9530) [ 404.782293][ T9530] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.815556][ T9530] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 404.908307][ T9530] BTRFS info (device loop0): using free-space-tree [ 405.591018][ T9560] loop4: detected capacity change from 0 to 1024 [ 405.602958][ T6203] hfsplus: b-tree write err: -5, ino 4 [ 405.646609][ T9560] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 405.663053][ T9560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 405.726749][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.801643][ T9560] EXT4-fs (loop4): invalid journal inode [ 405.825528][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 405.825546][ T29] audit: type=1800 audit(1729432499.938:81): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.763" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 406.066655][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x16600000080 [ 406.175966][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x36600000080 [ 406.250598][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x56600000080 [ 406.264451][ T7487] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 406.292452][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x76600000080 [ 406.296576][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.397424][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x96600000080 [ 406.427343][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xb6600000080 [ 406.449521][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xd6600000080 [ 406.472772][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xf6600000080 [ 406.493535][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x116600000080 [ 406.508310][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.535936][ T9572] kvm: kvm [9571]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x136600000080 [ 406.593382][ T9581] loop4: detected capacity change from 0 to 512 [ 406.613933][ T9581] EXT4-fs: Mount option(s) incompatible with ext2 [ 406.871252][ T5244] Bluetooth: hci3: command tx timeout [ 407.820945][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.347315][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 408.877766][ T12] bridge_slave_1: left allmulticast mode [ 408.883476][ T12] bridge_slave_1: left promiscuous mode [ 408.883876][ T1863] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 408.903990][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.944307][ T5244] Bluetooth: hci3: command tx timeout [ 408.964613][ T12] bridge_slave_0: left allmulticast mode [ 408.971218][ T12] bridge_slave_0: left promiscuous mode [ 408.978317][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.113924][ T1863] usb 1-1: Using ep0 maxpacket: 8 [ 409.132544][ T1863] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 409.151834][ T1863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.177956][ T1863] usb 1-1: Product: syz [ 409.193377][ T1863] usb 1-1: Manufacturer: syz [ 409.208480][ T1863] usb 1-1: SerialNumber: syz [ 409.253828][ T1863] usb 1-1: config 0 descriptor?? [ 409.286026][ T1863] option 1-1:0.0: GSM modem (1-port) converter detected [ 409.493821][ T46] usb 1-1: USB disconnect, device number 14 [ 409.510206][ T46] option 1-1:0.0: device disconnected [ 409.643309][ T9614] loop4: detected capacity change from 0 to 256 [ 410.156512][ T9620] loop4: detected capacity change from 0 to 1024 [ 410.167871][ T9622] netlink: 124 bytes leftover after parsing attributes in process `syz.0.781'. [ 410.650234][ T9626] Invalid option length (375) for dns_resolver key [ 411.024664][ T5244] Bluetooth: hci3: command tx timeout [ 411.240014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.240088][ T62] hfsplus: b-tree write err: -5, ino 8 [ 411.264441][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.306229][ T12] bond0 (unregistering): Released all slaves [ 411.795185][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.855420][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.862543][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.884035][ T9543] bridge_slave_0: entered allmulticast mode [ 411.891338][ T9543] bridge_slave_0: entered promiscuous mode [ 412.057960][ T9624] loop0: detected capacity change from 0 to 32768 [ 412.097566][ T9624] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.782 (9624) [ 412.386380][ T9624] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 412.485752][ T9624] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 412.513902][ T9624] BTRFS info (device loop0): using free-space-tree [ 412.606192][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.613749][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.621215][ T9543] bridge_slave_1: entered allmulticast mode [ 412.629410][ T9543] bridge_slave_1: entered promiscuous mode [ 412.780213][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.820072][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.875040][ T9666] loop2: detected capacity change from 0 to 256 [ 412.956342][ T29] audit: type=1800 audit(1729432507.068:82): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.782" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 413.111373][ T5244] Bluetooth: hci3: command tx timeout [ 413.209223][ T7487] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.292533][ T9543] team0: Port device team_slave_0 added [ 413.379935][ T9543] team0: Port device team_slave_1 added [ 413.601281][ T9679] loop1: detected capacity change from 0 to 16 [ 413.688832][ T9679] erofs: (device loop1): erofs_read_inode: negative i_size @ nid 36 [ 414.762520][ T5294] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 416.103554][ T12] hsr_slave_0: left promiscuous mode [ 416.306901][ T12] hsr_slave_1: left promiscuous mode [ 416.390755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.418578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.571651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.601374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.722210][ T12] veth1_macvtap: left promiscuous mode [ 416.734293][ T9709] loop1: detected capacity change from 0 to 512 [ 416.790580][ T9710] loop0: detected capacity change from 0 to 2048 [ 416.803417][ T12] veth0_macvtap: left promiscuous mode [ 416.833602][ T12] veth1_vlan: left promiscuous mode [ 416.873854][ T9710] loop0: p3 < > p4 < > [ 416.878340][ T9710] loop0: partition table partially beyond EOD, truncated [ 416.888174][ T12] veth0_vlan: left promiscuous mode [ 416.959159][ T9710] loop0: p3 start 4284289 is beyond EOD, truncated [ 416.981190][ T9723] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 416.993855][ T9709] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 417.285255][ T9715] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed [ 417.285275][ T9715] kvm: kvm [9712]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x16600000080 [ 417.376417][ T9715] kvm: kvm [9712]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x36600000080 [ 417.466475][ T9715] kvm: kvm [9712]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x56600000080 [ 417.641611][ T9730] loop1: detected capacity change from 0 to 256 [ 417.653574][ T8655] udevd[8655]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 417.829466][ T9732] loop2: detected capacity change from 0 to 164 [ 418.301362][ T9742] loop2: detected capacity change from 0 to 1024 [ 418.362390][ T9742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.054420][ T7551] UDF-fs: warning (device loop2): udf_evict_inode: Inode 862 (mode 120777) has inode size 14 different from extent length 512. Filesystem need not be standards compliant. [ 419.442555][ T12] team0 (unregistering): Port device team_slave_1 removed [ 419.519563][ T12] team0 (unregistering): Port device team_slave_0 removed [ 419.734732][ T5294] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 419.893827][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 419.903934][ T5294] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 419.913565][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.934859][ T5294] usb 3-1: Product: syz [ 419.939192][ T5294] usb 3-1: Manufacturer: syz [ 419.944047][ T5294] usb 3-1: SerialNumber: syz [ 419.967181][ T5294] usb 3-1: config 0 descriptor?? [ 419.977673][ T5294] option 3-1:0.0: GSM modem (1-port) converter detected [ 420.301636][ T9735] dvmrp8: entered allmulticast mode [ 420.308943][ T9739] dvmrp8: left allmulticast mode [ 420.401500][ T46] usb 3-1: USB disconnect, device number 21 [ 420.414490][ T46] option 3-1:0.0: device disconnected [ 420.475402][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.482391][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.591536][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.623112][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.861106][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.128628][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.481279][ T9751] loop1: detected capacity change from 0 to 128 [ 421.517320][ T9543] hsr_slave_0: entered promiscuous mode [ 421.554622][ T9543] hsr_slave_1: entered promiscuous mode [ 421.564256][ T9755] loop0: detected capacity change from 0 to 512 [ 421.590732][ T9543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.609421][ T9543] Cannot create hsr debugfs directory [ 421.659053][ T9751] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.701010][ T9751] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.088496][ T9763] syz.1.807 (pid 9763) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 423.230103][ T9755] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 423.444988][ T7048] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.076113][ T9784] loop0: detected capacity change from 0 to 1024 [ 424.130782][ T9784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.629687][ T7487] UDF-fs: warning (device loop0): udf_evict_inode: Inode 862 (mode 120777) has inode size 14 different from extent length 512. Filesystem need not be standards compliant. [ 425.095997][ T9797] loop1: detected capacity change from 0 to 256 [ 425.236551][ T9801] loop0: detected capacity change from 0 to 256 [ 426.309381][ T9812] loop4: detected capacity change from 0 to 1024 [ 426.382031][ T9812] EXT4-fs: Ignoring removed orlov option [ 426.493433][ T9812] EXT4-fs (loop4): Test dummy encryption mode enabled [ 426.894706][ T9812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.929388][ T9816] loop0: detected capacity change from 0 to 1024 [ 427.128726][ T9819] netlink: 92 bytes leftover after parsing attributes in process `syz.0.822'. [ 427.281497][ T9819] hfsplus: xattr searching failed [ 427.298521][ T5242] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 427.722259][ T8921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.853885][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 427.935146][ T5242] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 427.964904][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.972947][ T5242] usb 2-1: Product: syz [ 428.095021][ T5242] usb 2-1: Manufacturer: syz [ 428.099663][ T5242] usb 2-1: SerialNumber: syz [ 428.133612][ T5242] usb 2-1: config 0 descriptor?? [ 428.179560][ T5242] option 2-1:0.0: GSM modem (1-port) converter detected [ 428.199615][ T9543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.286850][ T9834] loop2: detected capacity change from 0 to 256 [ 428.307656][ T9543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.339854][ T35] hfsplus: b-tree write err: -5, ino 4 [ 428.364705][ T9543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.382429][ T5294] usb 2-1: USB disconnect, device number 25 [ 428.390357][ T5294] option 2-1:0.0: device disconnected [ 428.441793][ T9543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.624719][ T9843] loop2: detected capacity change from 0 to 512 [ 428.643209][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.699635][ T9843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.732524][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.977912][ T9852] loop0: detected capacity change from 0 to 512 [ 429.001564][ T29] audit: type=1800 audit(1729432522.898:83): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 430.787087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.794326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.810363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.817571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.838716][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.276419][ T9852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.497008][ T9543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.514653][ T9852] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.747087][ T9852] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:335: inode #15: comm syz.0.831: verity file corrupted; can't find descriptor [ 431.810531][ T9852] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 431.948035][ T9881] loop2: detected capacity change from 0 to 1024 [ 431.975977][ T9882] loop1: detected capacity change from 0 to 256 [ 431.983602][ T9881] EXT4-fs: Ignoring removed orlov option [ 432.023901][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.171731][ T9881] EXT4-fs (loop2): Test dummy encryption mode enabled [ 432.313270][ T9882] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 432.479655][ T9881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.757809][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.793899][ T9894] loop4: detected capacity change from 0 to 256 [ 433.205078][ T5294] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 433.423978][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 433.440595][ T9898] loop0: detected capacity change from 0 to 1024 [ 433.459137][ T5294] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 433.472180][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.476806][ T5294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.538585][ T5294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 433.701444][ T9905] netlink: 92 bytes leftover after parsing attributes in process `syz.0.837'. [ 433.878325][ T5294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 433.915982][ T5294] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.936385][ T5294] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 434.152505][ T9543] veth0_vlan: entered promiscuous mode [ 434.164572][ T9543] veth1_vlan: entered promiscuous mode [ 434.189176][ T9543] veth0_macvtap: entered promiscuous mode [ 434.198122][ T9543] veth1_macvtap: entered promiscuous mode [ 434.214244][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.224850][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.234830][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.245354][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.255276][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.266270][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.276419][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.286905][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.297126][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.307841][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.319502][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.329986][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.340759][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.351191][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.362460][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.373067][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.384022][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.394777][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.405690][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.415852][ T9543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.426576][ T9543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.438261][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.451167][ T9543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.460018][ T9543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.469572][ T9543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.478774][ T9543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.494494][ T5294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.507541][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 434.539277][ T9912] loop4: detected capacity change from 0 to 512 [ 434.546038][ T5287] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 434.558998][ T5294] usb 2-1: SerialNumber: syz [ 434.575523][ T9891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.597749][ T5294] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 434.664325][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.673379][ T8076] hfsplus: b-tree write err: -5, ino 4 [ 434.697994][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.722808][ T5287] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 434.746474][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.751163][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.783047][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.784410][ T5287] usb 3-1: config 0 descriptor?? [ 434.972245][ T5242] usb 2-1: USB disconnect, device number 26 [ 436.162038][ T9912] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 437.791774][ T9920] loop0: detected capacity change from 0 to 2048 [ 437.792713][ T5287] cp210x 3-1:0.0: cp210x converter detected [ 437.999499][ T5287] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 438.007646][ T5287] cp210x 3-1:0.0: querying part number failed [ 438.372757][ T5287] usb 3-1: cp210x converter now attached to ttyUSB0 [ 438.381329][ T5287] usb 3-1: USB disconnect, device number 22 [ 438.398379][ T5287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 438.416284][ T5287] cp210x 3-1:0.0: device disconnected [ 439.494234][ T9949] loop0: detected capacity change from 0 to 1024 [ 439.501565][ T9949] EXT4-fs: Ignoring removed orlov option [ 439.534406][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 439.554433][ T9949] EXT4-fs (loop0): Test dummy encryption mode enabled [ 439.595427][ T9954] loop4: detected capacity change from 0 to 256 [ 439.630374][ T9954] fuse: Unknown parameter 'grou00000000000000000000' [ 439.803349][ T9958] loop4: detected capacity change from 0 to 512 [ 439.842516][ T9949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.273232][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.281485][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.645226][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.877399][ T9962] loop3: detected capacity change from 0 to 32768 [ 440.929621][ T9962] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.851 (9962) [ 440.975448][ T9962] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 440.993899][ T9968] loop4: detected capacity change from 0 to 512 [ 441.016894][ T9962] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 441.038196][ T9962] BTRFS info (device loop3): using free-space-tree [ 441.379631][ T9968] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 442.603822][ T29] audit: type=1800 audit(1729432536.698:84): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.851" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 443.795384][ T9543] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 443.873559][T10019] loop2: detected capacity change from 0 to 256 [ 443.886288][T10017] loop0: detected capacity change from 0 to 1024 [ 443.951106][T10019] fuse: Unknown parameter 'grou00000000000000000000' [ 443.954092][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.087932][T10017] Â: renamed from pim6reg1 [ 446.391252][T10034] loop4: detected capacity change from 0 to 512 [ 446.399288][T10034] EXT4-fs: Ignoring removed bh option [ 446.490110][T10041] Bluetooth: MGMT ver 1.23 [ 447.495564][T10034] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.863: invalid block [ 447.507766][T10034] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.863: couldn't read orphan inode 15 (err -117) [ 447.702652][T10034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.640814][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.808372][ T8921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.991336][T10074] loop3: detected capacity change from 0 to 256 [ 449.055212][T10074] fuse: Unknown parameter 'grou00000000000000000000' [ 449.534306][T10082] loop4: detected capacity change from 0 to 128 [ 449.780884][T10082] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.906054][T10082] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 449.985848][T10087] syz.3.874 uses obsolete (PF_INET,SOCK_PACKET) [ 450.035471][T10087] syzkaller1: entered promiscuous mode [ 450.041143][T10087] syzkaller1: entered allmulticast mode [ 450.392784][ T8921] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.679767][T10071] loop0: detected capacity change from 0 to 32768 [ 450.738637][T10071] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.869 (10071) [ 450.834614][T10071] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 450.868602][T10071] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 450.893005][T10071] BTRFS info (device loop0): using free-space-tree [ 451.087924][ T29] audit: type=1800 audit(1729432545.198:85): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.869" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 451.164036][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 451.327681][ T7487] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 451.350886][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.363771][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.395387][ T938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.408479][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.442373][ T938] usb 4-1: Product: syz [ 451.448062][ T938] usb 4-1: Manufacturer: syz [ 451.452745][ T938] usb 4-1: SerialNumber: syz [ 451.672536][ T938] usb 4-1: invalid UAC_HEADER (v1) [ 451.738491][ T938] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.808269][ T938] usb 4-1: USB disconnect, device number 10 [ 451.840846][ T8655] udevd[8655]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.904435][T10118] loop0: detected capacity change from 0 to 512 [ 451.938732][T10118] EXT4-fs: Ignoring removed bh option [ 452.040558][T10118] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.880: invalid block [ 452.063136][T10118] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.880: couldn't read orphan inode 15 (err -117) [ 452.082725][T10118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.163829][ T5294] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 452.322434][ T5294] usb 2-1: Using ep0 maxpacket: 32 [ 452.381119][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 452.437878][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 452.483468][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 452.653817][ T5294] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 452.717215][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.759399][ T5294] usb 2-1: Product: syz [ 452.767782][ T5294] usb 2-1: Manufacturer: syz [ 452.772434][ T5294] usb 2-1: SerialNumber: syz [ 452.788007][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.801163][ T5294] usb 2-1: config 0 descriptor?? [ 452.812592][ T5294] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 452.818467][T10128] loop2: detected capacity change from 0 to 512 [ 452.911646][ T5294] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 452.941865][T10128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.957168][T10128] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.183917][ T5242] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 454.432127][ T29] audit: type=1800 audit(1729432548.538:86): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.883" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 454.516810][ T29] audit: type=1804 audit(1729432548.618:87): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.883" name="/newroot/91/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 454.645010][ T5242] usb 4-1: Using ep0 maxpacket: 8 [ 454.651742][ T5294] usb 2-1: USB disconnect, device number 27 [ 454.668836][ T5242] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.701999][ T5242] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.712518][ T5242] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.722758][ T5242] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.735896][ T5242] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.745365][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.977185][ T5242] usb 4-1: usb_control_msg returned -32 [ 454.982906][ T5242] usbtmc 4-1:16.0: can't read capabilities [ 455.008548][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.027499][ T5242] usb 4-1: USB disconnect, device number 11 [ 455.387670][T10143] loop1: detected capacity change from 0 to 2048 [ 455.430610][T10143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.355702][T10153] loop4: detected capacity change from 0 to 1024 [ 456.362218][T10145] loop2: detected capacity change from 0 to 32768 [ 456.377731][T10153] loop4: detected capacity change from 0 to 1024 [ 456.384305][T10145] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.890 (10145) [ 456.388444][T10145] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 456.400906][T10156] loop3: detected capacity change from 0 to 1024 [ 456.407830][T10145] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 456.422826][T10145] BTRFS info (device loop2): using free-space-tree [ 456.558761][T10167] netlink: 92 bytes leftover after parsing attributes in process `syz.3.892'. [ 456.629979][T10174] hfsplus: xattr searching failed [ 457.140882][T10179] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 457.162274][ T8991] hfsplus: b-tree write err: -5, ino 4 [ 457.171096][ T29] audit: type=1800 audit(1729432551.268:88): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.890" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 457.366381][ T7551] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.403582][T10186] loop4: detected capacity change from 0 to 512 [ 457.412176][T10186] EXT4-fs: Ignoring removed bh option [ 457.463751][T10185] loop1: detected capacity change from 0 to 1024 [ 457.473510][T10186] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.895: invalid block [ 457.499561][T10191] loop0: detected capacity change from 0 to 128 [ 457.511184][T10185] loop1: detected capacity change from 0 to 1024 [ 457.667477][T10186] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.895: couldn't read orphan inode 15 (err -117) [ 457.701921][T10186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.210849][ T8991] hfsplus: b-tree write err: -5, ino 4 [ 458.594236][ T938] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 458.857289][ T35] hfsplus: b-tree write err: -5, ino 4 [ 458.928516][ T8921] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.958884][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 458.970802][ T938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 459.022852][ T938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 459.054253][ T938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.088417][ T938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.169108][T10205] loop3: detected capacity change from 0 to 1024 [ 459.180758][ T938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.203815][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.284263][T10205] loop3: detected capacity change from 0 to 1024 [ 459.422645][ T5294] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 459.452644][ T938] usb 1-1: usb_control_msg returned -32 [ 459.481148][ T938] usbtmc 1-1:16.0: can't read capabilities [ 459.505607][ T938] usb 1-1: USB disconnect, device number 15 [ 459.525656][ T62] hfsplus: b-tree write err: -5, ino 4 [ 459.626250][ T5294] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 459.635377][ T5294] usb 3-1: config 0 has no interface number 0 [ 459.641510][ T5294] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 459.669185][T10216] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 459.680554][ T5294] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 459.698985][ T5294] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 459.713797][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.728753][ T5294] usb 3-1: Product: syz [ 459.732989][ T5294] usb 3-1: Manufacturer: syz [ 459.768000][ T5294] usb 3-1: SerialNumber: syz [ 459.815239][ T5294] usb 3-1: config 0 descriptor?? [ 459.834730][ T5294] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input14 [ 459.861687][T10222] loop3: detected capacity change from 0 to 128 [ 460.769520][T10210] loop1: detected capacity change from 0 to 32768 [ 460.800190][T10210] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.907 (10210) [ 460.984183][T10210] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 461.031161][T10210] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 461.091474][T10210] BTRFS info (device loop1): using free-space-tree [ 461.592419][T10241] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 461.721687][ T29] audit: type=1800 audit(1729432555.828:89): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.907" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 461.804765][T10210] loop1: detected capacity change from 32768 to 0 [ 461.989862][ T6203] kworker/u8:10: attempt to access beyond end of device [ 461.989862][ T6203] loop1: rw=67112961, sector=10440, nr_sectors = 8 limit=0 [ 462.103768][ T5341] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 462.108212][T10266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 462.111876][ T6203] kworker/u8:10: attempt to access beyond end of device [ 462.111876][ T6203] loop1: rw=67112961, sector=10448, nr_sectors = 8 limit=0 [ 462.149499][ T6203] kworker/u8:10: attempt to access beyond end of device [ 462.149499][ T6203] loop1: rw=67112961, sector=13448, nr_sectors = 8 limit=0 [ 462.171829][T10264] loop3: detected capacity change from 0 to 1024 [ 462.214725][ T7048] BTRFS error (device loop1 state A): Transaction aborted (error -5) [ 462.233087][T10264] loop3: detected capacity change from 0 to 1024 [ 462.243903][ T7048] BTRFS: error (device loop1 state A) in __btrfs_free_extent:3226: errno=-5 IO failure [ 462.260899][ T7048] BTRFS info (device loop1 state EA): forced readonly [ 462.270665][ T7048] BTRFS error (device loop1 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 462.306175][ T5341] usb 5-1: Using ep0 maxpacket: 32 [ 462.315027][ T5341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.327181][ T5341] usb 5-1: config 0 has no interfaces? [ 462.395215][ T5341] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.404945][ T7048] BTRFS: error (device loop1 state EA) in btrfs_run_delayed_refs:2215: errno=-5 IO failure [ 462.418760][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.427377][ T7048] BTRFS info (device loop1 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 462.439472][ T5341] usb 5-1: config 0 descriptor?? [ 462.448214][ T8991] hfsplus: b-tree write err: -5, ino 4 [ 463.063881][ T5341] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 463.079233][T10275] loop1: detected capacity change from 0 to 1024 [ 463.478925][T10280] hfsplus: extend alloc file! (8192,512,16777719) [ 463.601560][ T5341] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 464.142547][ T5341] usb 4-1: config 128 has no interfaces? [ 464.150596][ T5341] usb 4-1: config 128 has no interfaces? [ 464.154452][T10279] loop0: detected capacity change from 0 to 128 [ 464.165821][ T62] hfsplus: b-tree write err: -5, ino 8 [ 464.181080][ T5341] usb 4-1: config 128 has no interfaces? [ 464.215438][ T5341] usb 4-1: config 128 has no interfaces? [ 464.222004][ T938] usb 3-1: USB disconnect, device number 23 [ 464.309875][ T5341] usb 4-1: config 128 has no interfaces? [ 464.344955][ T5341] usb 4-1: config 128 has no interfaces? [ 464.352046][ T5341] usb 4-1: config 128 has no interfaces? [ 464.366783][ T5341] usb 4-1: config 128 has no interfaces? [ 464.384647][ T5341] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 464.422253][ T5341] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 464.442661][ T5341] usb 4-1: Product: syz [ 464.451106][ T5341] usb 4-1: Manufacturer: syz [ 464.464185][ T5341] usb 4-1: SerialNumber: syz [ 464.783165][ T938] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 465.153718][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 465.256673][ T938] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 465.268500][ T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 465.284916][ T938] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.295451][ T938] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.308920][ T938] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.318140][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.423925][ T1863] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 465.628428][ T1863] usb 1-1: config 0 has no interfaces? [ 465.661390][ T938] usb 3-1: usb_control_msg returned -32 [ 465.667842][ T1863] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.677278][ T938] usbtmc 3-1:16.0: can't read capabilities [ 465.729413][ T1863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.770938][ T1863] usb 1-1: Product: syz [ 465.808728][ T1863] usb 1-1: Manufacturer: syz [ 465.813416][ T1863] usb 1-1: SerialNumber: syz [ 465.865815][ T1863] usb 1-1: config 0 descriptor?? [ 465.944014][ T5287] usb 3-1: USB disconnect, device number 24 [ 466.584877][T10304] loop1: detected capacity change from 0 to 32768 [ 466.595201][T10304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.930 (10304) [ 466.636438][T10304] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 466.816650][T10304] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 466.887477][T10304] BTRFS info (device loop1): using free-space-tree [ 467.036585][ T1863] usb 5-1: USB disconnect, device number 8 [ 467.088886][T10314] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 467.096333][ T5341] usb 4-1: USB disconnect, device number 12 [ 467.420516][T10331] loop3: detected capacity change from 0 to 1024 [ 467.471033][ T29] audit: type=1800 audit(1729432561.578:90): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.930" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 467.565738][T10333] netlink: 92 bytes leftover after parsing attributes in process `syz.3.934'. [ 467.980367][T10333] hfsplus: xattr searching failed [ 468.139953][T10304] loop1: detected capacity change from 32768 to 0 [ 468.294829][ T35] kworker/u8:2: attempt to access beyond end of device [ 468.294829][ T35] loop1: rw=67112961, sector=10440, nr_sectors = 8 limit=0 [ 468.330104][ T35] kworker/u8:2: attempt to access beyond end of device [ 468.330104][ T35] loop1: rw=67112961, sector=10448, nr_sectors = 8 limit=0 [ 468.373838][ T35] kworker/u8:2: attempt to access beyond end of device [ 468.373838][ T35] loop1: rw=67112961, sector=13448, nr_sectors = 8 limit=0 [ 468.411683][ T7048] BTRFS error (device loop1 state A): Transaction aborted (error -5) [ 468.439758][ T7048] BTRFS: error (device loop1 state A) in __btrfs_free_extent:3226: errno=-5 IO failure [ 468.457900][ T7048] BTRFS info (device loop1 state EA): forced readonly [ 468.473341][ T7048] BTRFS error (device loop1 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 468.510090][ T7048] BTRFS: error (device loop1 state EA) in btrfs_run_delayed_refs:2215: errno=-5 IO failure [ 468.893739][ T7048] BTRFS info (device loop1 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 469.084247][ T35] hfsplus: b-tree write err: -5, ino 4 [ 469.224366][ T5341] usb 1-1: USB disconnect, device number 16 [ 469.527668][T10359] loop3: detected capacity change from 0 to 1024 [ 469.573796][ T5294] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 469.726678][ T5341] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.785436][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 469.823195][T10364] netlink: 92 bytes leftover after parsing attributes in process `syz.3.944'. [ 470.163899][ T5341] usb 1-1: Using ep0 maxpacket: 8 [ 470.219608][T10364] hfsplus: xattr searching failed [ 470.219984][ T5341] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 470.235676][ T5341] usb 1-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 470.246685][ T5294] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 470.260906][ T5294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 470.271786][ T5341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 470.281487][ T5294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.292776][ T5341] usb 1-1: config 0 has no interface number 0 [ 470.299663][ T5341] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.300866][T10367] loop1: detected capacity change from 0 to 2048 [ 470.312086][ T5294] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.331634][ T5341] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.342935][ T5294] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 470.352428][ T5287] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 470.360201][ T5341] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.372366][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.382658][ T5341] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 470.397027][ T5341] usb 1-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 470.420212][ T5341] usb 1-1: Product: syz [ 470.421199][T10367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.424551][ T5341] usb 1-1: Manufacturer: syz [ 470.427075][ T5341] usb 1-1: config 0 descriptor?? [ 470.654029][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 470.659719][ T5294] usb 3-1: usb_control_msg returned -32 [ 470.666230][ T5294] usbtmc 3-1:16.0: can't read capabilities [ 470.673092][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.673194][T10355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 470.683370][ T5287] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.407255][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.410012][ T5294] usb 3-1: USB disconnect, device number 25 [ 471.426555][ T5287] usb 5-1: config 0 descriptor?? [ 471.440003][ T5287] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 471.456224][ T7048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.544235][ T6203] hfsplus: b-tree write err: -5, ino 4 [ 471.697790][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.723990][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.746106][ T5341] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input15 [ 471.883534][T10385] loop3: detected capacity change from 0 to 1024 [ 472.161650][T10387] netlink: 92 bytes leftover after parsing attributes in process `syz.3.951'. [ 472.518332][ T5291] usb 1-1: USB disconnect, device number 17 [ 472.520579][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 472.773360][T10376] loop2: detected capacity change from 0 to 32768 [ 472.803192][T10376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.948 (10376) [ 472.844427][T10376] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 472.864660][T10376] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 472.904026][T10376] BTRFS info (device loop2): using free-space-tree [ 472.951610][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 473.639949][ T11] hfsplus: b-tree write err: -5, ino 4 [ 474.368361][ T9] usb 5-1: USB disconnect, device number 9 [ 474.384548][ T29] audit: type=1800 audit(1729432568.498:91): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.948" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 474.464009][ T5294] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 474.554280][ T7551] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 474.564800][ T5341] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 474.676944][ T5294] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.718100][ T5294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 474.739342][ T5341] usb 2-1: config 0 has no interfaces? [ 474.770296][ T5341] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 474.779809][ T5294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.804970][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.812986][ T5341] usb 2-1: Product: syz [ 474.817900][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.826343][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 474.843748][ T5294] usb 1-1: Product: syz [ 474.847994][ T5294] usb 1-1: Manufacturer: syz [ 474.852614][ T5294] usb 1-1: SerialNumber: syz [ 474.857527][ T5341] usb 2-1: Manufacturer: syz [ 474.874279][ T5341] usb 2-1: SerialNumber: syz [ 474.886020][T10418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.896740][ T5341] usb 2-1: config 0 descriptor?? [ 475.024186][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 475.043985][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 475.064881][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 475.087490][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.120391][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.160055][ T5294] usb 1-1: USB disconnect, device number 18 [ 475.170300][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.191018][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.255268][ T1863] usb 2-1: USB disconnect, device number 28 [ 475.409093][ T9] usb 5-1: usb_control_msg returned -32 [ 475.419866][ T9] usbtmc 5-1:16.0: can't read capabilities [ 475.442216][ T9] usb 5-1: USB disconnect, device number 10 [ 475.621162][T10437] vivid-006: disconnect [ 475.628573][T10436] vivid-006: reconnect [ 476.001700][T10446] loop3: detected capacity change from 0 to 1024 [ 476.221240][T10452] netlink: 92 bytes leftover after parsing attributes in process `syz.3.965'. [ 476.283968][ T5292] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 477.594015][ T5292] usb 2-1: config 0 has no interfaces? [ 477.669488][ T8991] hfsplus: b-tree write err: -5, ino 4 [ 477.803803][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 477.876555][T10461] loop3: detected capacity change from 0 to 2048 [ 477.903019][ T5292] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.912156][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.953716][ T5292] usb 2-1: Product: syz [ 477.957945][ T5292] usb 2-1: Manufacturer: syz [ 477.962572][ T5292] usb 2-1: SerialNumber: syz [ 477.981366][T10461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.996672][ T9] usb 1-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice=c4.47 [ 478.006419][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.023408][ T5292] usb 2-1: config 0 descriptor?? [ 478.198965][ T9] usb 1-1: config 0 descriptor?? [ 478.231095][ T9] ------------[ cut here ]------------ [ 478.236987][ T9] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 478.668175][ T9] WARNING: CPU: 0 PID: 9 at kernel/locking/mutex.c:587 __mutex_lock+0xc41/0xd70 [ 478.683119][ T9] Modules linked in: [ 478.687098][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 478.697140][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 478.707764][ T9] Workqueue: usb_hub_wq hub_event [ 478.712811][ T9] RIP: 0010:__mutex_lock+0xc41/0xd70 [ 478.718532][ T9] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b [ 478.738389][ T9] RSP: 0018:ffffc900000e6980 EFLAGS: 00010246 [ 478.744697][ T9] RAX: 8b017bdcaf5cff00 RBX: 0000000000000000 RCX: 0000000000100000 [ 478.752702][ T9] RDX: ffffc90014a60000 RSI: 0000000000019efc RDI: 0000000000019efd [ 478.760805][ T9] RBP: ffffc900000e6ad0 R08: ffffffff8155d7b2 R09: fffffbfff1cfa3e0 [ 478.768841][ T9] R10: dffffc0000000000 R11: fffffbfff1cfa3e0 R12: dffffc0000000000 [ 478.776891][ T9] R13: ffff88805ea8c518 R14: 0000000000000000 R15: ffff88805ea8c4e8 [ 478.784983][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 478.794104][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.800794][ T9] CR2: 00007f2d577026d6 CR3: 0000000067f54000 CR4: 00000000003526f0 [ 478.809233][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.817500][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.825532][ T9] Call Trace: [ 478.828823][ T9] [ 478.831758][ T9] ? __warn+0x168/0x4e0 [ 478.835962][ T9] ? __mutex_lock+0xc41/0xd70 [ 478.840641][ T9] ? report_bug+0x2b3/0x500 [ 478.845216][ T9] ? __mutex_lock+0xc41/0xd70 [ 478.849924][ T9] ? handle_bug+0x60/0x90 [ 478.854304][ T9] ? exc_invalid_op+0x1a/0x50 [ 478.858987][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 478.864062][ T9] ? __warn_printk+0x292/0x360 [ 478.868839][ T9] ? __mutex_lock+0xc41/0xd70 [ 478.873532][ T9] ? __asan_memset+0x23/0x50 [ 478.878189][ T9] ? __asan_memset+0x23/0x50 [ 478.882785][ T9] ? uvc_status_unregister+0x2f/0xe0 [ 478.888116][ T9] ? lockdep_init_map_type+0xa1/0x910 [ 478.893498][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 478.898620][ T9] uvc_status_unregister+0x2f/0xe0 [ 478.903806][ T9] uvc_unregister_video+0xeb/0x1c0 [ 478.908928][ T9] uvc_probe+0x9135/0x98c0 [ 478.913700][ T9] ? mark_lock+0x9a/0x360 [ 478.918074][ T9] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 478.924206][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 478.930118][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 478.936498][ T9] usb_probe_interface+0x645/0xbb0 [ 478.941623][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 478.947302][ T9] really_probe+0x2b8/0xad0 [ 478.951821][ T9] __driver_probe_device+0x1a2/0x390 [ 478.957156][ T9] driver_probe_device+0x50/0x430 [ 478.962218][ T9] __device_attach_driver+0x2d6/0x530 [ 478.967649][ T9] bus_for_each_drv+0x24e/0x2e0 [ 478.972532][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 478.978504][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 478.983988][ T9] __device_attach+0x333/0x520 [ 478.988760][ T9] ? __pfx_lock_release+0x10/0x10 [ 478.993832][ T9] ? __pfx___device_attach+0x10/0x10 [ 478.999133][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 479.004385][ T9] bus_probe_device+0x189/0x260 [ 479.009253][ T9] device_add+0x856/0xbf0 [ 479.013935][ T9] usb_set_configuration+0x1976/0x1fb0 [ 479.019417][ T9] usb_generic_driver_probe+0x88/0x140 [ 479.025158][ T9] usb_probe_device+0x1b8/0x380 [ 479.030045][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 479.035468][ T9] really_probe+0x2b8/0xad0 [ 479.040007][ T9] __driver_probe_device+0x1a2/0x390 [ 479.045361][ T9] driver_probe_device+0x50/0x430 [ 479.050431][ T9] __device_attach_driver+0x2d6/0x530 [ 479.055848][ T9] bus_for_each_drv+0x24e/0x2e0 [ 479.060712][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 479.066649][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 479.072037][ T9] __device_attach+0x333/0x520 [ 479.076859][ T9] ? __pfx___device_attach+0x10/0x10 [ 479.082185][ T9] bus_probe_device+0x189/0x260 [ 479.087111][ T9] device_add+0x856/0xbf0 [ 479.091446][ T9] usb_new_device+0x104a/0x19a0 [ 479.096362][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 479.101573][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.106844][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 479.112056][ T9] hub_event+0x2d6d/0x5150 [ 479.116826][ T9] ? __pfx_hub_event+0x10/0x10 [ 479.121611][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 479.126906][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.132908][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.139291][ T9] ? process_scheduled_works+0x976/0x1850 [ 479.145102][ T9] process_scheduled_works+0xa63/0x1850 [ 479.150693][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.156715][ T9] ? assign_work+0x364/0x3d0 [ 479.161337][ T9] worker_thread+0x870/0xd30 [ 479.165996][ T9] ? __kthread_parkme+0x169/0x1d0 [ 479.171046][ T9] ? __pfx_worker_thread+0x10/0x10 [ 479.176199][ T9] kthread+0x2f0/0x390 [ 479.180384][ T9] ? __pfx_worker_thread+0x10/0x10 [ 479.185737][ T9] ? __pfx_kthread+0x10/0x10 [ 479.190343][ T9] ret_from_fork+0x4b/0x80 [ 479.194930][ T9] ? __pfx_kthread+0x10/0x10 [ 479.199526][ T9] ret_from_fork_asm+0x1a/0x30 [ 479.204360][ T9] [ 479.207406][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.214691][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 479.224671][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 479.234726][ T9] Workqueue: usb_hub_wq hub_event [ 479.239765][ T9] Call Trace: [ 479.243043][ T9] [ 479.245970][ T9] dump_stack_lvl+0x241/0x360 [ 479.250661][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.255860][ T9] ? __pfx__printk+0x10/0x10 [ 479.260458][ T9] ? vscnprintf+0x5d/0x90 [ 479.264791][ T9] panic+0x349/0x880 [ 479.268705][ T9] ? __warn+0x177/0x4e0 [ 479.272869][ T9] ? __pfx_panic+0x10/0x10 [ 479.277295][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 479.282239][ T9] __warn+0x34b/0x4e0 [ 479.286222][ T9] ? __mutex_lock+0xc41/0xd70 [ 479.290904][ T9] report_bug+0x2b3/0x500 [ 479.295238][ T9] ? __mutex_lock+0xc41/0xd70 [ 479.299919][ T9] handle_bug+0x60/0x90 [ 479.304076][ T9] exc_invalid_op+0x1a/0x50 [ 479.308582][ T9] asm_exc_invalid_op+0x1a/0x20 [ 479.313450][ T9] RIP: 0010:__mutex_lock+0xc41/0xd70 [ 479.318739][ T9] Code: 0f b6 04 20 84 c0 0f 85 18 01 00 00 83 3d 36 20 49 04 00 75 19 90 48 c7 c7 20 b9 0a 8c 48 c7 c6 c0 b9 0a 8c e8 00 0f 81 f5 90 <0f> 0b 90 90 90 e9 bd f4 ff ff 90 0f 0b 90 e9 cf f8 ff ff 90 0f 0b [ 479.338363][ T9] RSP: 0018:ffffc900000e6980 EFLAGS: 00010246 [ 479.344440][ T9] RAX: 8b017bdcaf5cff00 RBX: 0000000000000000 RCX: 0000000000100000 [ 479.352410][ T9] RDX: ffffc90014a60000 RSI: 0000000000019efc RDI: 0000000000019efd [ 479.360390][ T9] RBP: ffffc900000e6ad0 R08: ffffffff8155d7b2 R09: fffffbfff1cfa3e0 [ 479.368362][ T9] R10: dffffc0000000000 R11: fffffbfff1cfa3e0 R12: dffffc0000000000 [ 479.376336][ T9] R13: ffff88805ea8c518 R14: 0000000000000000 R15: ffff88805ea8c4e8 [ 479.384315][ T9] ? __warn_printk+0x292/0x360 [ 479.389092][ T9] ? __asan_memset+0x23/0x50 [ 479.393696][ T9] ? __asan_memset+0x23/0x50 [ 479.398289][ T9] ? uvc_status_unregister+0x2f/0xe0 [ 479.403580][ T9] ? lockdep_init_map_type+0xa1/0x910 [ 479.408972][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 479.414015][ T9] uvc_status_unregister+0x2f/0xe0 [ 479.419168][ T9] uvc_unregister_video+0xeb/0x1c0 [ 479.424299][ T9] uvc_probe+0x9135/0x98c0 [ 479.428738][ T9] ? mark_lock+0x9a/0x360 [ 479.433123][ T9] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 479.439033][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 479.444943][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 479.451284][ T9] usb_probe_interface+0x645/0xbb0 [ 479.456405][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 479.462039][ T9] really_probe+0x2b8/0xad0 [ 479.466561][ T9] __driver_probe_device+0x1a2/0x390 [ 479.471858][ T9] driver_probe_device+0x50/0x430 [ 479.476894][ T9] __device_attach_driver+0x2d6/0x530 [ 479.482296][ T9] bus_for_each_drv+0x24e/0x2e0 [ 479.487158][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 479.493059][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 479.498443][ T9] __device_attach+0x333/0x520 [ 479.503247][ T9] ? __pfx_lock_release+0x10/0x10 [ 479.508273][ T9] ? __pfx___device_attach+0x10/0x10 [ 479.513565][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 479.518778][ T9] bus_probe_device+0x189/0x260 [ 479.523666][ T9] device_add+0x856/0xbf0 [ 479.528005][ T9] usb_set_configuration+0x1976/0x1fb0 [ 479.533488][ T9] usb_generic_driver_probe+0x88/0x140 [ 479.538974][ T9] usb_probe_device+0x1b8/0x380 [ 479.543837][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 479.549217][ T9] really_probe+0x2b8/0xad0 [ 479.553743][ T9] __driver_probe_device+0x1a2/0x390 [ 479.559043][ T9] driver_probe_device+0x50/0x430 [ 479.564084][ T9] __device_attach_driver+0x2d6/0x530 [ 479.569464][ T9] bus_for_each_drv+0x24e/0x2e0 [ 479.574333][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 479.580230][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 479.585621][ T9] __device_attach+0x333/0x520 [ 479.590395][ T9] ? __pfx___device_attach+0x10/0x10 [ 479.595695][ T9] bus_probe_device+0x189/0x260 [ 479.600563][ T9] device_add+0x856/0xbf0 [ 479.604900][ T9] usb_new_device+0x104a/0x19a0 [ 479.609790][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 479.615007][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.620213][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 479.625426][ T9] hub_event+0x2d6d/0x5150 [ 479.629900][ T9] ? __pfx_hub_event+0x10/0x10 [ 479.634676][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 479.639717][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.645742][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.652112][ T9] ? process_scheduled_works+0x976/0x1850 [ 479.657855][ T9] process_scheduled_works+0xa63/0x1850 [ 479.663421][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.669455][ T9] ? assign_work+0x364/0x3d0 [ 479.674070][ T9] worker_thread+0x870/0xd30 [ 479.678736][ T9] ? __kthread_parkme+0x169/0x1d0 [ 479.683779][ T9] ? __pfx_worker_thread+0x10/0x10 [ 479.688903][ T9] kthread+0x2f0/0x390 [ 479.692995][ T9] ? __pfx_worker_thread+0x10/0x10 [ 479.698139][ T9] ? __pfx_kthread+0x10/0x10 [ 479.702781][ T9] ret_from_fork+0x4b/0x80 [ 479.707204][ T9] ? __pfx_kthread+0x10/0x10 [ 479.711799][ T9] ret_from_fork_asm+0x1a/0x30 [ 479.716579][ T9] [ 479.719950][ T9] Kernel Offset: disabled [ 479.724282][ T9] Rebooting in 86400 seconds..