last executing test programs: 12m8.824506266s ago: executing program 32 (id=8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 12m7.2750595s ago: executing program 3 (id=31): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) migrate_pages(0x0, 0x1, &(0x7f0000000100)=0xdf, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12m1.800389939s ago: executing program 3 (id=38): msgctl$IPC_RMID(0x0, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11m58.516446133s ago: executing program 3 (id=42): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 11m54.063740882s ago: executing program 3 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xe2f, 0x70bd08, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}}, 0x40040) 11m51.310457337s ago: executing program 3 (id=50): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x84) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, &(0x7f0000000000)=[0x8, 0x8, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r8, r7, 0x25, 0x8, @val=@netkit={@void, @value=r8}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 11m47.489952894s ago: executing program 3 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) 11m32.280435265s ago: executing program 33 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) 5m13.835028303s ago: executing program 4 (id=858): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r5, &(0x7f0000000200)=ANY=[], 0x1b) vmsplice(r4, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)="73685697ab2c1af93c5e549ee6a524f64317a66eb601e4ac5f22f1f8b749eeb700160c00000000409a7dff259806de995b88317f0188b0c5469f37db90889579f3135d24a7dc0df6d3bc09d8bd67ce775d08fdaf1c26ac8fb15c07f7cfc2c83da633cf248cbfcda8", 0x68}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="d39300d7f6e45ac95cd44bf4b81debe6eb18546761a7349589e9aeca52a601b50120fe4dd27d145a1e12c8391f4a35333ef75a0fe0c9a35135cf53b9ac0623817479", 0x42}, {&(0x7f0000000500)="fcd54329fa8cf7316ede8d9dc280adf05575c474ae4cbc805230180075770f35904fe010bd58ed9232fff99e56adbaf262fe34de58121ffb4e3f8d607d32f3e983f9617aad55c51d6ddae763f1463224ed998e2911957835fb9b1927d818538134edd6cf2f3214e444e01ee279bc3ded26f6eaac17055ccc5b61b14aafed1ce59041623e77e5ca902fbe3844ce3c7c5940518b3a45165988451e24260a209c2fbad06a6301f6b9ed2215359ea5cb6d2a7bfb35f9e638d541e6ba0913bd4c3b0b810f41df4c19d4c47225fd322ff6bfa629bf1cc535f0", 0xd6}, {&(0x7f0000000600)="6f1a9204d72f842a3b9b474732fedb2d0962796abba9e95cb504c01b57c7e23207e69b8d7ca7b0a41c0c2513c4dc843d54d077b5c1536488d2208b21f201d5c7442ddb0ad1b76e20fcda31fbb0c0ad7910d877450ff5a73b6de83b99eed8ee1ae3c5403e8e894a7bf77727f1b537c6d75c35601c87d97e505271be83aa05e2431a6a98bfef3d02e7b6d7355ce1b9047b726dae5d301fa5797d09de7b55fc192658431debbb0aed3d8f0f0176bf8632c2b0c1cac3bb544535d638e99e76aa3394adff6f44f4057798dd645a6e60ac590204eccd6b9b48d482ee15fc763182", 0xde}, {&(0x7f00000002c0)="3bb9b2f5f36e3d5e82efd7fa474f", 0xe}], 0xd, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r6, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r7 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000340)={0x0, 0x5}) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000840)="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", 0x150, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000140)={0x4000000}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) 5m10.315514628s ago: executing program 4 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1c4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79b1, 0x2000, 0x1, 0x368}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x20000000000007, &(0x7f0000000100)={0x77359400}, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000283afffe0400000000000000011c00000000018904907800000000fe800000000000000000000000000008fe80f2ffffff00"/78], 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x800019, 0x80000068, &(0x7f0000000880)="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"}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1c, "a85e4ca05260f19342ce86e3bc732aaf914b0a093cbaf16d63ade711"}, &(0x7f0000000180)=0x24) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x4c880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 5m5.687939043s ago: executing program 4 (id=881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331", 0x8a) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 5m1.360085546s ago: executing program 4 (id=894): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$ntfs3(&(0x7f000001f740), &(0x7f000001f780)='./bus\x00', 0x2000880, &(0x7f0000000200)=ANY=[], 0xff, 0x1f7ab, &(0x7f000003ef80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) setuid(r0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x80000b, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000804b1ebe4d1c82b693f87cd69fb5349d1bd7e46ba22cc3b7a13a62736a67192c9a172fd8c6fc45e19b1ca233953597d42676558c4c4236a3c15694d4d5367d5a1a2aa59d2befe5f5a3274cf10dfc235f8385089e056a61c0608cffbafe3a9a3b3e832e59bbdcf5c8128ec19627dfc49e90d4e07dd99ecb6bf8fc12c43411fd71e38e2a98c50564d06a7cf69a3c132f5a1729fbf31092d92acbc7fef2000000", @ANYRESHEX, @ANYBLOB=',roqtmode=0000000000000id=', @ANYRESDEC, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000000400,default_permissions,allow_other,max_read=0x00000000000001ff,subj_role=\\\',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',context=sysadm_u,pcr=00000000000000000025,hash,appraise,\x00'], 0x0, 0x0, &(0x7f0000000540)="656443703209a1b6c321c5f04da0b0b50693e33c7ecb56f05e445f5bbeaa8548761a67a2fca8a4503dacd64e955016cb854377") fchmodat(r1, &(0x7f0000000580)='./bus/file0\x00', 0x4c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4d68033020000000000000000003e400000"], 0xe8}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x80, 0x0}, 0xe07e872420dfefca) close_range(r2, r4, 0x2) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000240)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008001d800400328008002f"], 0x30}], 0x1}, 0x0) 4m59.613237253s ago: executing program 4 (id=898): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xffffffffffffff24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m58.659294156s ago: executing program 4 (id=902): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioperm(0xd21, 0x800, 0x8000000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) finit_module(r5, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f00000004c0)={0x100000, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 4m57.663044336s ago: executing program 34 (id=902): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioperm(0xd21, 0x800, 0x8000000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) finit_module(r5, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f00000004c0)={0x100000, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 4m55.085152089s ago: executing program 6 (id=912): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r1}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x6102, &(0x7f0000000040)={0x0, 0x20c8a5, 0x1c881, 0x1, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x1000002, 0x37, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) tkill(0x0, 0xb) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m53.71804116s ago: executing program 6 (id=916): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$eJzs3MtvG8UfAPDv2nn28Ut+pTxaWggURMUjadIHPXABceAAAgkORZxCklalaYOaINGqogWkIsQBVeKOOCLxFyAOcEHACYkr3FElhHppgcuitXfTJLVL4qzjgD8fye3Mzq5nvp4dezIjO4CuNZL9k0Rsi4ifI2Konl1+wkj9vxvXLkz9ce3CVBJp+vLvSe2869cuTOVPsXjd1vqBNM3z/Q3qvfxaxOTs7MzZPD+2cPrNsflz5584eXryxMyJmTMTR48eOri378jE4VLizOK6vvuduT27nnv1ygtTx668/v0XWXu35eVFHBHxVSkV1l62kaZlD5dVySaxfUk66elgQ1iTrN+y7uqtjf+hqMbgYtlQ9L/X0cYBbZWmadro8zl3KQX+w5JYTFY72hBggxUf9Nnfv8Vjg6Yem8JvT9f/AMrivpE/6iU9UcnP6Y34a3ub6t8WEccu/flp9ojl6xAAAG3xdTb/ebzR/K8Sdy0573/5HspwRPw/InZExB0RsTMi7oyonXt3RNyzxvpX7pDcOv+pXG0psFXK5n9P5Xtby+d/xewvhqt5bnst/t7k+MnZmQP5a7I/evuz/PiyS5b75tmfPl557KN8mX1kyfwve2T1F3PBvB1Xe1Ys0E1PLkyWEnwW/7sRu3saxZ9EsY2TRMSuiNjdYh0nH/18T7Oyf47/NkrYZ0o/i3ik3v+XYkX8haTp/uT4k0cmDo8NxOzMgbHirrjVDz9efqlZ/euKvwRZ/29peP8nvfkpaTIQMX/u/Knafu382uu4/MsHU0mTsp0t3v99ySu1dF9+7O3JhYWz4xF9yfNZdnDZ8Ymb1xb54vws/v37Go//HREDkff/vRGR3cR7I+K+iLg/77sHIuLBiNh3m/i/e+ahN5qVNe//26zKlyiLf7px/xenDGepm/2/9kT11LdfNqs/XVX/H6ql9udHVvP+t9oGrue1AwAAgH+LSm0POqmMLqYrldHR9/PSLZXZufmFx47PvXVmur5XPRy9lWKla2jJeuh4vjZc5CdW5A/m68afVAdr+dGpudnpDscO3W5rw/FfL/u12unWAW3n+1rQvYx/6F7GP3Qv4x+6l/EPXaqv8eGLG90OoCPW/vk/0JZ2ABvP/B+6l/EP3cv4h67U9LvxlXV95b/kRPFTFG2vq6fUJ7wYEeU94WDZIVcjovXLo9J67cVvW2yCW+tm4sUP643aLO0pEj2r/jGLFhP9DYtueasYG9q4tyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS/B0AAP//KWna6A==") r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) unshare(0x2c020400) lseek(0xffffffffffffffff, 0x10000000002, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x4828000, 0x0, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200a00) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000000)={0x4, 0x8000000000000001, 0x6e11, 0x5, 0x4000000022, 0x10000, 0xb, 0x9}, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r6, 0x0, 0x0) getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a) 4m52.355507052s ago: executing program 6 (id=919): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)={[{@discard}, {@pquota}, {@lazytime}]}, 0x1, 0xb953, &(0x7f000000c300)="$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") r2 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r2, &(0x7f0000000100)='n', 0x1) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 4m47.555531957s ago: executing program 6 (id=926): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000001680)={0x10, 0x400, {0x57, 0x81, 0x7, {0xf}, {0x0, 0x1}, @cond=[{0xffff, 0x10, 0x5, 0x7, 0x8, 0x6}, {0xc6de, 0x5, 0xd, 0xff00, 0x6, 0x8}]}, {0x56, 0x1e, 0x1, {0x4, 0x800}, {0x8, 0x479}, @const={0x2, {0x1, 0x6, 0x1ff, 0x1}}}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x23, 0x0, &(0x7f0000001040)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200003, 0x40200003, 0x0, 0x6, 0x7}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0xd00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x3eeac2c78ddd72ed}) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r7, &(0x7f0000000280)=ANY=[], 0x830200) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d1, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x88000, 0x80) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x2) syz_clone(0xc0080, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bind$inet6(r2, 0x0, 0x0) 4m44.037119487s ago: executing program 6 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 4m42.887326068s ago: executing program 6 (id=933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 4m41.468598512s ago: executing program 35 (id=933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 3m26.16865294s ago: executing program 9 (id=1068): syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200"], 0x0) 3m22.7909737s ago: executing program 9 (id=1073): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000000000025a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r4, &(0x7f0000000600)=[{&(0x7f0000001840)="d2", 0x1}], 0x1) sendmmsg(r3, 0x0, 0x0, 0x10081) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443d, &(0x7f0000001780)="$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") 3m21.611467295s ago: executing program 9 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m20.351453885s ago: executing program 9 (id=1079): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) syz_io_uring_setup(0x7966, &(0x7f0000000300)={0x0, 0x7a3c, 0x8, 0x2, 0x238}, &(0x7f0000000380), &(0x7f00000003c0)) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r1, 0x0, 0x0, 0xfffffffffffffffe}]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x1}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44020000dbb73d85dfb3a1f5457a2237be746be93e00000000090000005e186377d16753d67b02ca76df8e68e28d9305fbcc43988add6406389865673c7ba17a493e5baa32464cfb4f9e9a3c6da4b3e8679174b4fe81bce8e553ed35d00c1a1219dfee0ccc1e35d201e45192e29c36e43d26", @ANYRES16=r7, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0) 3m18.448123461s ago: executing program 9 (id=1086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m12.166904805s ago: executing program 9 (id=1094): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) inotify_init1(0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m56.202370829s ago: executing program 36 (id=1094): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) inotify_init1(0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 21.761010984s ago: executing program 8 (id=1357): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xffffffffffffff24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21.630045301s ago: executing program 2 (id=1359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.858848277s ago: executing program 7 (id=1362): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r5, &(0x7f0000000200)=ANY=[], 0x1b) vmsplice(r4, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)="73685697ab2c1af93c5e549ee6a524f64317a66eb601e4ac5f22f1f8b749eeb700160c00000000409a7dff259806de995b88317f0188b0c5469f37db90889579f3135d24a7dc0df6d3bc09d8bd67ce775d08fdaf1c26ac8fb15c07f7cfc2c83da633cf248cbfcda8", 0x68}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="d39300d7f6e45ac95cd44bf4b81debe6eb18546761a7349589e9aeca52a601b501", 0x21}, {&(0x7f0000000500)="fcd54329fa8cf7316ede8d9dc280adf05575c474ae4cbc805230180075770f35904fe010bd58ed9232fff99e56adbaf262fe34de58121ffb4e3f8d607d32f3e983f9617aad55c51d6ddae763f1463224ed998e2911957835fb9b1927d818538134edd6cf2f3214e444e01ee279bc3ded26f6eaac17055ccc5b61b14aafed1ce59041623e77e5ca902fbe3844ce3c7c5940518b3a45165988451e24260a209c2fbad06a6301f6b9ed2215359ea5cb6d2a7bfb35f9e638d541e6ba0913bd4c3b0b810f41df4c19d4c47225fd322ff6bfa629bf1cc535f0", 0xd6}, {&(0x7f0000000600)="6f1a9204d72f842a3b9b474732fedb2d0962796abba9e95cb504c01b57c7e23207e69b8d7ca7b0a41c0c2513c4dc843d54d077b5c1536488d2208b21f201d5c7442ddb0ad1b76e20fcda31fbb0c0ad7910d877450ff5a73b6de83b99eed8ee1ae3c5403e8e894a7bf77727f1b537c6", 0x6f}, {&(0x7f00000002c0)="3bb9b2f5f36e3d5e82efd7fa474f03", 0xf}], 0xd, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r6, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r7 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000340)={0x0, 0x5}) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000840)="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", 0x150, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000140)={0x4000000}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac"], 0x18) 19.837395951s ago: executing program 1 (id=1363): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0}) 18.615862452s ago: executing program 2 (id=1364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 18.489984569s ago: executing program 8 (id=1365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 16.697197174s ago: executing program 0 (id=1366): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) unshare(0x2c020400) lseek(0xffffffffffffffff, 0x10000000002, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200a00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000000)={0x4, 0x8000000000000001, 0x6e11, 0x5, 0x4000000022, 0x10000, 0xb, 0x9}, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a) 16.505487834s ago: executing program 1 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000a380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x28b4, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2774, 0x3, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "a3cffd95bd2a39897ad665409dacda2545f7ec34aefde5677d58f9e4e2b673a73c89421333f9536075fd1e8d1edf0f394baccb3a9745c65d1d1c99e17ae9fd9017a7d3ef2aa0ab0c265f99b3d0ab38bb86bd28a2084d74c243a788aa021aa38a4ae24e9d6ad33d97813152a99c713c"}, @NFTA_DATA_VALUE={0xa, 0x1, "52e6b79a3602"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "37f603ced0fecf93ff38c26d1bcc243b9abceb023fa27e4dd32ea0fee84b640d7367293290b99c0685343191072767e2843a001510574eb8bf1fd62cb0290b887dfc32d2ef16e4e6b0e5bbf6e41fb5986d5f6bf1e3b55b43a29e9f965f99a60346bf1feadc5215eca73528e81c1717f0855a88ec31e45ca862c002bd892a2a9064a8c8567aadf2d84e0691f97d228826b34b1efd154e79f4674b5a15c3e8496e8f4387e604af736822925623387e26edf22a1da903c2b308aaf98bc36bc5c8d8046b108f8f8b4c7ec124e384158873667135a55c8a3687afd593a04b699af12a4be1c99ddc5a758e7ca63436704e5eb26c605b9ac57e5cfb3a2af2ed823894460e28576d61350a0ffe35596a95c5c3952cd224d4ee0a141b6777f2b2b20f515d9135251e77456b7e0597a011722fbf4091bfdb566c8525e41f4d264b2361ca9e1a0e9930e8c208093aa7d5b9b9b6ea648d45d8e77520ad32d29c2147618efab2834e7835b40f96e856cd148fd66c29972bf0d83c5bb19fe8819dccc9915e3cc6e60dd767f2f71e12e30082753397b22f6e7565d437be7bde0d5115d19cbc9ce5ce723943f291377cbc0b4bc889ab28f957415113cc76ff4d2b9d2c12d6edcac3a8b8dc1adecbe8c50a21c2d1ab52356ba70101ceb9c915c65527648031efadb85d5d69535a6f9d0507cf788301dd412db48ef5fd9730bbea8b9a3453158088aa5f379af3df8bdb7917d40b6cd77fc9aceee118810e0d42316f98e92a15cd80495354752c2262cc58c3f022f4cd559a9b3fe0d290f2b4ddedaf58413c82afb39bc61335e2a8533cc01a22b1fffea0dc76edf2cfe93fa201e3d4f15594d6306f215a9013a8e545b3ad6a95093d1485ca946f6f51b7d8335c6a16f6ccfcdb3b7a9dfe552368f5f8b8241db32ed4f0f941c101e722e7bf41b0dd31ba2c339e3e20302ca14755eb1ca52cc4c847f9f15155094439641df84ed4da1b5ba2ab6230ae6eb8762c2d66e163a68354854829edde501e31a50efe3a744a850ddf4cfcd6e2991470587b7caca163cde720e1a3b91560047c5b7fa2d463055162e53b6b4b4bd1713c74f9ad0a98dd7de2be6cd13c6e7ad57ce19db592948573a3987632a057cd18ff70a70c5a8b0355521cfeb38933f27ef9b1ff63a912a2eb643c8c8ebe80e57d087dafea67435993e48eb18ae0611ffc21adfb60044e77ea0d10333893e7ea9f445f301f4ab100192e5ceb599ac59cf47f6501b2fa611b255d47bb4d65e25cc9948ec8fd44b26201b6083f2c9a7b0b5cdaab90ed1bdcd87243fe5136bb985bd09a170baac84aea850674e6e988a2ad750488bd76984e78c8e510a988eb04d857bd6f192c8f362ba72feb78188cc8da5f90b288de05cae5434f1e17a766b4c45ef59998051c4d574a088212e4ae06510f7a45903af78aafb4e2b8bc9e3f9ee4d33ec04e10d9501f109d2b6fe69444a213c24f4170ac58c47aaaf4955a9c001733b197c0699d589fa7357543c9680cffcf19ce2a712121e12ab9d24dee60429150e84d0c6f01af1a7264e73d69d0ec3574720515dfa652cef4c837a432128ac15796158c873c7e664cf67ae8b30240d5ccb7c56d3e617b2099025971b8dae319f169ac87647f52240b47521411e701213c9c24807ddb3161bb42f38aeee036411f92bc54e32adcf7fa2343fdf21232854d9f8357adacac1fdcdb9b4a1659aafd3e88ad6e032a45b90dd223242e53807448a875474d89f94d22742cc6b49329c72f83f9a880962ae79872230f11e828b5ab80dd59d9b5fa7e11773b215004de32f357d030ace0234e78fbdca90ef348e31d375cb99ce5b46c7bb2498d9f9403fd183fefb523d352db1900f21e8239ed1f48d8c096fbdde7dead8682711aac01216f28954ad61384eec84b9b760704c1460eab67efe0d306007d579f5389b5a25d71e96bb21f7884cfb0b23409e1a08d603e3934ca1f1bc2f109e46dac880ad058d43d5fd1c8ca64d073b5010cfaeccc6212a3690f3176213e8847d4e0d392cd7e2aba4c0fe8c034c54549f47e6b50003263cc8d1d5832a2c6050b567c91dafdd1c9add0a3a15eacc54e38c6f4e4dcf69e7da38a606864456a16548e708911af4909d671738cffecfb042ab359612f9f85a1db14e6c35c6e9c2b96c45acbaa44f850c38c882124a08085855d25a9f3b154367c1546c9fb58ec3488a5659413cca0a18c518848d3105b9c662b611a686e628ecbc7cebbedb8962a37189a8437fd4c15e170c6b3483532e63099662020fe119cb4b8cf4161c239d1800839b5a6e89485cffa78c931f3179da8c686e7cd58b520c02adc5f773dff79a4478fa6e2b7c111d5f99d6877bb69277f283714950a9f71a367d0f2e9ab8e8a4603ef6c3c7d1c4a5fb0d911e09193a26f853eb1bfc741f130cf2bb53b8e288d7dee2791f61157c978591459d799eebd7ff3097ed1afc9888e1b0e041d7f46c8a7aa7fcfc8f5e807292beedfbb8851b268699f578a33ebe62d57ee4ebd60a73ef7b5a1399771be185e2ff811a05469bf6e94b66cfd2f9197d41b3934ce447d5c20d0747e53f1f0dce4ea18700fb565bf57acd3b81488144916d49e12422032cfc92ddff5432f9ee687734765e5d551084e462a83aceda9cdf23a4a7baec747aa2151e96aff52f1696ce565b065af3b34ad2a162dfe8905cce188975d7d9e6ecae636661aeaca71f40f754eafb15256006cc3cac89401ff99d26cf47b4f5668f0a9f042e316b67ac806ed3de476d873da26bc0bf42d838cc8b24f90ac17e10eeb42c20ef4531d382a5ce3eea43a0b3fdac286d0c71e565090fd4379301bc8a3d22b2b7c144e298407e75fe3d868eef2fbc9b4a56b9c2b088b71395d6501f9109987493c3225095ea5323d3fae8283a6f1337620f239cad48aa57b882ab367597516ea25906acef93f6877bd98e19392b62315b55075f16e946644537cb679ccba4dc836e5685e91ebbb8a609dff3d245c83228e0f94c9d07afa6d37a4d48200e8cca911d4c7a53d6d597a5c6f1c2e4ccd0846fbdd1c53896d7eb3ae610852e4c3da13be2af99e2b921d6ad16a6dd93ad5f54851ce894d583dbcde313c68477d8d18074702c6e016e10a981f3db1823c99890f1163e128522e80d62e9ea7b0a9f4e26071b1dcc2095bc32a18c2a02e7eb7b1c8aadc4c083df855394266e13985e422522db27ee068268a9babf1eb85ef22fa6240111fee9a276eb852cd84f77938ffb921e1e8b975673b4a4a3ef6959c801fc6fbfcf967fa8e745ef37a3dab1124e05a07170391934de4b9d55fc4a224d8682068f6403457875a767bda18275c3a61a2e47e465df997bf55230e05072c3523ed20c0195445bf42a9d81efea77c1c11255c268052e12faaf27fd8f93d426f7c83160f03593d118893af2ab39a8b6d9e7cc54fce0c306d589724bd166d113b70aeccd3b20ee84267bb7d138ba0a90303d53d94fd2833e0b004431611b950ccd4438af4ef70ad091c5514ce05f82d5eea737a10b6d391bf14e686944ee2e4571ef98d6f3ae28eeae35a8896600ef864ee17e394a7befd4d6ea3e8f4b93739f1a7ed1ac1b47e7a3a927f17fb47547598133d4657c799b6a115ac9cc9a6f8d19ff40aad4f65758128b7ccf7611f0580de432eba4f193192577263022d857d85d4aab021266d532291905deaf02867744f04e434b71fc53b3fe73e4fe4c80b2326ee060d81a94ee86ad01dba240716a0b47e601f45ca77fa78fc82585ba2a498af92321796f155dd86ab321d333f52b35859a11380defd98a589452b90be4550ae8253cd3a413ca096b2ab14da37e2285e03a693343244faa3ccc8597d51b0fc2c2691e4d15ecea22e4ee8a8179812a11d76e517519a2cdd068478c430fd51c635a5e55096643f411072c2478fe632a6bf6add23870e6675ab55b4c5f66f9ae4eead3fe56de200fbb92b9fdf513c37c552f9efefe1a1cb5f84d3b2bcc87e84eefea824a1287f19c83778434b43794fecb3ff66bb8a116ed04452cf8e978f9ebd31a7ed0a0757562ae790b4c9e4660b61a826d762a006d57aac2c3b4ed67517896fb245f553a5baeca9f83a0cd3dc424322df0fe8f63a1fb524b51a5cb1b9a496c07a7a5c18acc4066ed7effd9606b4c979099a491b2884a2c1408092e1d5642b1b78c29754b43585f21c052044b71b7fb25067d213983ad360ebd5b919e264174b4b2367ad8977033c4da5e75724cdcd0e5183b865233ffd4c21cdc0a255db811da08cf51baad73e669933a377cb88bf64b26b351fa294ad99a797805dfdf76e166d37b1d695f6a8dc67d2c85096189ee7c4ead4e39516e0acbd6eb6f10b8c04999583e4de514ed47bdae780c2c1abe2d872223557fb10d9dc1dffd899265ea60bad8dd5f66ca059b49fdb66eea58803ac498b82b1c555a3998b79a8821ca0fc09964199171f80100c2c4337962aebb09cadf89cbced5c5c01569403b2ccaee1382d8d5f4d6bbb476cf0ac7b7bb63a83daee35c9754a3e1b78d2da1d83138c8873292bc0b66f4a16321f2a71ba484ab43000ad7ab719f0756c306beae94fda416eb85ee87b6181a5a47da6fac12f831895ab6b69312483f0ffbfa50089fcbd7c6040691aaaba01c6a97f3e0000f40833dbbfb30cd318437cc8acc5c362bd1c3642b87fa5765b432b5f44bb71b73f255672bd006be31a8f9a74a5c04f19009345c579a9bc32b138442e9466864f04ada97a7facd57e0b2f5558f49e187d1387e088bec2b899973c214c9e648ebfcccc1d11e9d014e35ce14caf6964d1d5898a77b0ec2ef865b2c00ece386bcae4b9e1f2f6f885223ae27e05e3bfe90cb51a19ea58c04e201bd6b593d545a1d87d01b962e19ee91770bc3c009a3c7f430b1a746b2ac8f83c21cc7426ac2d9cbe848e7435af4b8ccbc78ce9f7426e6d00e7d2d2ba6675f501207206996da73c3fc62b93fd217ea054229a17a55abed957b465c6439210088415f62bf2c7efbc3b073dc53686fa8a84422e5cc207291220d5642024ac9e5708c1099d3598cdcc097b7d3dce87a98a923eb12fa31735fdd5531b5670a29624adf45b1ecce7198c1774e7cda19748320edf72af8465fb5508dc2a86ca4a0674c880554a96ef8b9815e305d2eb92f3f3e15b2e45d5c8e31ec28bb63ae28a489aa7aada04beb38231b468ee28713b9ac0118e7b926ccc3def5dd571bd7b8779dd647489b6fadfcb3fabcd60fdf15c7af6a61b2cb091b0d41e3bfedba8c40f6e74e0841016f0a075a36ee9941d20b4b54baa0176700db125d61eda248b7dcbf0e5a3ea489df52386a5032bd2826e675e11b2ee7cce07f001abee0c740ccb2baeddeec0dee18496073a550eeee8a031c7d97ece5412a4c4a10d404f94c6395fb1bb40f38d458fe1329bcc69201850245a190e21b17e0a6604b7b55856beab86e59206f4bf56d321bd2fbe04d734ec1c0dff56d2774c1e8c8d1a151331632de20063dcc8e0395804a4fc56fde45d628afe1248e0c3d21242b44ffad2ff3c14a312996a3d9e5aa41a8455d601b10dad9f8bb47ec23974796374d24bb5fb34edeae556f3c3c6bfc10132c43e61821b38fa344e5b6fa4de0fef7de3bdbe544085b01f32903d584efc301563dd07caf9b9ade082583c665cc559044678f7730ccd0ce3aeb05dc2853f461defbbd8bc16817650131f86694d81b40d935a1e44bcda2fb67f2d89a40fa44d91da28f0c5d7ee6a15c64eaafcdf7bc0164a466f825913682a04fb4a437abed1605f91cec3c97584ec7c83cddc8587"}, @NFTA_DATA_VALUE={0x3f, 0x1, "da7ec6195b3980274aebb1a3447ee0eb53e02a263ab5a00b64b192fb15e424ca1ac6fc2491154cfe69130e48c92253d968e9286c84a60a25a34082"}, @NFTA_DATA_VALUE={0xc, 0x1, "0a00e106d3517ef9"}]}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff6}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xab, 0x1, "e75baff2776332c8f7fa9849d26358f6ccdbb7e5798a16d118ec87b6a1fd71a411fcdaf85c0555eec5f37dccc8858315cadb22945556bff673fe50110214c1a52c1fd37693d2eda3e41c738e14ac57dc808e97b418677b55bad7b2d4a69f8269cc513546c053704ecfbb3903b415a5037416e57ae306d5a4fb23d35f45eefb299aec41624e59670a8a390ddbb2d05979e080d9ed504003e2bbdf4c668e8b68568dd14ab9692408"}, @NFTA_DATA_VALUE={0x45, 0x1, "b4fa7694c365128ae929ab6f8b0161f5dd1832c2513211485ea02b6d034e79106008f2486643ec21f6262a4e0f6e88c0e1ddc395ad0da0cf185fde6756e7db3df7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "15f401447f32e72763e6562705f4a4130e2f0d130b09bf7d0aa99696050892bbf4a5ed8fdd9a5833f7dba1b068c00894e67b1805afc3c6acb9ee2864cb87738ba81bbd9bc874539740536949bb7d3bc5bb3664a990a9d8e3eb5e43"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}, {0x12e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "a6ac91dfa85c5d833da0b67ad328cfb742a0e0d8bd5f3d1fbabf2ebb9f8af06a2de6b8b4"}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "c58b5d49326c45"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x90, 0x1, "5bd37f66462e8cd5fa6d8b5b514bd3af1a885498a905a0ee078c1268facfb3fad7711b191bd26edd88fb434fd40e568308deb5720eed28685d0feaf252a8e3204802d5bca70701225c3324161d2e2b4a14f909cc254a8dfb02f6b819df79931def1259f65c494717634fbd1cc77bbfbf3300fa337df82bb8635dcf935e090037dc9fcdd92ab81f7db5821ee9"}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "92d320fc70add47772480ac29110f549ac4353ed6fc2171f90e0d454cfb80f46efc26dbc6511c6f978e2039c913224005264e7d416430ca0fb734b005e408f4a3c5d41f6ed9866eaa6c2a9f41c5b7ddbb113f9a2b023e2dd3b9c4a2ea27cd6e233ee088162dc58c33bed"}]}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x6f, 0x6, 0x1, 0x0, "3ba00ada46d19d690ccbb01ff165dbbe6ab6c3d39cf317f9f1e72fbe723f1669ff3015c8ba3bf8ccd8c38e1394dadb196deec6883f38c0babf7539452f7607d0306965d5190a1c5bd6f495928cdfc43d95b37693ca1c034dfa4c53db36d07c0215d40777580c4d356247f4"}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xd8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "dd89f5fb9ed180b8ee1b48cb0839f430bbcabdee20606777f008de8c3e04cde0f0d3d4c0099bb4e4f216852bed"}, @NFTA_DATA_VALUE={0xa0, 0x1, "b8e6af790a9eff7a9e5c3c66695f1454728ff6bb7262659a4b929d8257fa8b6be2fc94e916fe402bceff3b4b3734515ab8a955772f78b475c23db5ca7c1dc11d2f964572ea3e22f67c2711ac092105ead98f43d9ff0b029b5b582d2b1896e16eb94ba8ba90b38cc6ecbafb83e4a265559b94ec0894b9405669c79534a752176bdf0ea70797af0c3367187611fdab26ee7b75384b8bf56a575b440432"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2994}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.186479961s ago: executing program 1 (id=1368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 15.505469632s ago: executing program 0 (id=1370): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xffffffffffffff24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14.418889504s ago: executing program 7 (id=1371): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r0, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x164, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x150, 0x1, [@m_ct={0x11c, 0x13, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "737ab3abbd26c088bdb0352b750c8e55"}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x3, 0x2, 0x101, 0xe9}}]}, {0xb5, 0x6, "84f2582a4614a605bce2c775f0734805d68ec502f207f8c21b1678ec9729cba2aa5cd5ed5eab86714e2fc594f3165d71b90ba9e893be564ca5e048de4150413e2162492846c7a49b3df10722dddc7c8041946ff992255d95d9a2ced63567fceb90c128f7efad3e5c58c7d3e7fc47671c4970a924f86e6f8a5d0e5b8b453c9fb8c1016d243b50b5eca89d31237739d84c581ac73e3d42341a9d8c7c3a8aa869c19c99df2b7e280b605a3cfa313ad0dcc160"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000400080106006600f788000006006600190000000800490002ac0f003000fe009c5b08d75622fbeddc8e73f61b3816a617c7e592aca07eee6fc21c15a4077f3c0d37e750c01586daffaccaf20400440074001501991aaffc9e07df3eb17903f3a5a264741e0fdbd874d454a9c1e96ca6c35023b2a65d7a6c8c8636dbfaf01f6160bb00be271df55424fbc8e05b7c2778ecda1d5304449be053404a5f50857ca316b5f3a0c54a12087a94bf5a669caaf1252ac6926e0921c61247dc617c89c3c118cad1d50400080104001e0108004a0002ac0f000400cc"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) 14.125838316s ago: executing program 0 (id=1372): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 13.840789325s ago: executing program 8 (id=1373): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000300)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.717960135s ago: executing program 2 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1c4) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79b1, 0x2000, 0x1, 0x368}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x20000000000007, &(0x7f0000000100)={0x77359400}, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000283afffe0400000000000000011c00000000018904907800000000fe800000000000000000000000000008fe80f2ffffff00"/78], 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x800019, 0x80000068, &(0x7f0000000880)="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"}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1c, "a85e4ca05260f19342ce86e3bc732aaf914b0a093cbaf16d63ade711"}, &(0x7f0000000180)=0x24) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x4c880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 12.390595356s ago: executing program 7 (id=1375): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r0, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x164, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x150, 0x1, [@m_ct={0x11c, 0x13, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "737ab3abbd26c088bdb0352b750c8e55"}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x3, 0x2, 0x101, 0xe9}}]}, {0xb5, 0x6, "84f2582a4614a605bce2c775f0734805d68ec502f207f8c21b1678ec9729cba2aa5cd5ed5eab86714e2fc594f3165d71b90ba9e893be564ca5e048de4150413e2162492846c7a49b3df10722dddc7c8041946ff992255d95d9a2ced63567fceb90c128f7efad3e5c58c7d3e7fc47671c4970a924f86e6f8a5d0e5b8b453c9fb8c1016d243b50b5eca89d31237739d84c581ac73e3d42341a9d8c7c3a8aa869c19c99df2b7e280b605a3cfa313ad0dcc160"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x8804, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000400080106006600f788000006006600190000000800490002ac0f003000fe009c5b08d75622fbeddc8e73f61b3816a617c7e592aca07eee6fc21c15a4077f3c0d37e750c01586daffaccaf20400440074001501991aaffc9e07df3eb17903f3a5a264741e0fdbd874d454a9c1e96ca6c35023b2a65d7a6c8c8636dbfaf01f6160bb00be271df55424fbc8e05b7c2778ecda1d5304449be053404a5f50857ca316b5f3a0c54a12087a94bf5a669caaf1252ac6926e0921c61247dc617c89c3c118cad1d50400080104001e0108004a0002ac0f000400cc"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8}, 0x5) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) 9.961508899s ago: executing program 5 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1c4) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79b1, 0x2000, 0x1, 0x368}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000283afffe0400000000000000011c00000000018904907800000000fe800000000000000000000000000008fe80f2ffffff00"/78], 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x800019, 0x80000068, &(0x7f0000000880)="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"}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1c, "a85e4ca05260f19342ce86e3bc732aaf914b0a093cbaf16d63ade711"}, &(0x7f0000000180)=0x24) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x4c880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 9.498190617s ago: executing program 8 (id=1378): syz_usb_connect(0x5, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xf, 0x5200, 0x1, &(0x7f0000000280)="1c"}], 0x1}) 9.430160072s ago: executing program 1 (id=1379): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0}) 9.212841831s ago: executing program 2 (id=1380): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x20, 0xa, 0x2, "df09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.0748679s ago: executing program 0 (id=1381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.161224568s ago: executing program 7 (id=1382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 7.697217874s ago: executing program 5 (id=1383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540), &(0x7f0000000180)=0x8) 7.492871747s ago: executing program 5 (id=1384): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) write$sndseq(r1, &(0x7f0000000640), 0x0) write$sndseq(r1, &(0x7f0000002840), 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x70) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x38) write$sndseq(r0, 0x0, 0x0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x42, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) write$sndseq(r1, &(0x7f0000000d00), 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000001c0)=[{0x6, 0x2, 0x75, 0x0, @tick=0xf, {0x1, 0x9}, {0xb, 0x2}, @raw32={[0x5, 0x4, 0x10]}}, {0x3, 0x10, 0xf, 0xa, @time={0x7ff, 0x4}, {0x9}, {0x4}, @ext={0x0, 0x0}}], 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x2) 7.090579182s ago: executing program 8 (id=1385): quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 6.804652322s ago: executing program 5 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[], 0x24}}, 0x2000c004) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="56bf382dab3488e617b247360c62e514ba8239398badd8acab5eced966a218d2726ad3259f90a7da79f152ad8785190e1350f227e6d02254f6cc", 0x3a}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x800) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0x1, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f000001ad80)=[{{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001080)="b18e7eb58422eed2b064646f79d59e1bdd963011d92e15da63dbfa2b26936d726fd0818dfcb5649264945419883eb6c186caa2fcbd89ee3cf7a683825e00e6d53ac170b51ec4886481ec11d2635081673835d19852a3713093f2ddf0ca37df91ff5420aec82e35daedcb1f043c69fcb9ff2338cf1db6fee03a6979981e0736f2bf263b9ab0b9867f63ff65f62cd7222aab7a64cf39779a253e3a076a4bbdd8f73bfc7d2aa65a33bae78c711a343f238a94fd8d2364e5add42dedafd0706fa8e034d0ccbafe6cd6df2712dda10846e8b58b30b04b006291fbe447b34d87ba954b69bb678b", 0xe4}, {&(0x7f000001afc0)="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", 0x296}, {&(0x7f0000001280)="7bdbf45c046a33cd5f317cd6b129a04d6380782ea244d6189180", 0x1a}, {&(0x7f00000012c0)="92e2c98a2fc7a9f482427c4622c5a724aa6dc856a1c3eb54c987c759c8ce68ceee8923b6122f1951ca1004a58c3f290e94e432865fe2cf272436102cf9edef8934650c722bab15ea74cffa2c6be65ab4add9001e73fe7fe2b24dc0143cab4eca279c102c00a6eadc51a6117c55c7ace13e752da708e11ddb0dbd9cd6e9703ced03a8a88945168de165a8b9a256dfb688a2fbf07af0ccc6fd3eb39a79373a2259f7482b", 0xa3}, {&(0x7f0000001380)="caafd2a20dd62c7e7dd266f74068fcbd770693bf1bf414d3b111327e961e11c231ea2ab446196fa00b61e46caccb3a2a3bb47e324abbe08b9ab097aec94b38694e80e83bd2f2bfb15b62df30de0d3a0130f7b423ba4dc231e2ccde00c3780efbdcfddbbc713dd0ba273bee50bbc0c52c44d39bdd76362eae36c259ea9052ea9e500eb9af349b86b67d383e5d3203ebe3fcd34f37e6e3cd9f1cca17dacde8128f931a2886c80c1041a13d10eefb57dbe613a0d99fb421b1c543dacb80d466815373d9b17a3b995512fcad3fbaf3666aa80e2b52194c67da8342a636e36c8ae0beeeb54ded", 0xe4}, {&(0x7f0000001480)="8bb81af64c4185cafb54a54963154f17d1dffe9f86a11e7a6d3cb020aeac6700c7679cbd55710bc454b8c008bd0883ff54aa7748294e9307224612b498f827cb925d841ba0e6", 0x46}, {&(0x7f0000001500)="4eab8ff2a84ad5cb1c73e4ececa810aa6d39e96405f08a20faa425638be473ea7e679e8270aaeb10b952bc72f3d9148c762b8944b6a0ed010010e195d950d85fd3ecd2c5981f6b41d35b09298b91dbcbe148e87cd036b1da087b8fea22d7689b69d6e2ca347d7e5077a7df59d90df848e866071d961860a351466b653e4d604031d7f14018482ce1e43420d9792b1e85db96e355e6d6e758eaed4793d676296da83c6078d30467bde0ea366270069583fad93c57bed9a70491d78b6969cc6cafe512ec5e194b033614ed7f02be6c31e0e6c874438f803571868dd8a0a5141df950", 0xe1}, {&(0x7f0000001600)="c3e9134f918e38ce8171b2af31096719395e4bac35e9ed75d0577524fe54d0506ee1980880602dc3292b2c09c3b4544994ff2a8c54be6fd567dd75d7a8abec83dd3d2bad79f1ed50f1efc93d995109ac599c2969e21f49fcdaf0978b930aeba538cb739e13338f78b3eb12094afda019df07bf76a3b8c7b5f4c6bc167f5f7b3338b0c24c8b9f2959355a40b71b5211b5bdf42fd9b357d8bd66130e293f9c89c16a584a436f2f472edd4c493c3d0d94627ee903531dd384db993f57635977735a8b14851d1a43d7d8e5c1157a7c61eb95145abae5f51f4869665cea9257491023", 0xe0}], 0x8, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x4001}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000001abc0)=[{&(0x7f0000001980)="fbd81acee4df68d460268de6b75a6b6430e999bc1032ce0962b2f76e6f4cafd9a87999a3c86871c14f4011ae84108785db150bfd8c17116e96f91309421275ebdf889d56008e5e357da919e98ecf75c094d0f88f1ab76df73683b6e7f72d7c91d8dedf7d", 0x64}, {&(0x7f0000001a00)="40e0ae3f", 0x4}, {&(0x7f000001aa40)="69cbeaab896b79bbfee35298f65989209e8f46511a1ac8125d2b718fc99512fe6a7240d7a499eb5d11d3b6ffa5347335a688b764d59cde1980ce72b3217931cf5e454d68ad590eb226a6e2067f6c19fb3d5e9c46767e163a98e3830125a825fb122cec1da8030b32643511e63359f6cea7426fcf48af46d6ad1f2f1542d01124df8e9fa15c7000", 0x87}, {&(0x7f000001ab00)="d543f100932975ccec691ff808", 0xd}, {&(0x7f000001ab40)="34ad280f139469c93e842ba2784d663b6209e730f205f5764c6293e91c99ec6ef0cd8e27b3c70388d5080aba88696aa59b7502001ea7cfef9b7cdf631846a9d1b90d0efe54da77a10220f4", 0x4b}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000010040000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x4}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x3, 0x4002) read$FUSE(r8, &(0x7f0000003440)={0x2020}, 0x2020) add_key(&(0x7f00000009c0)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x390, 0xffffffffffffffff) 5.738138364s ago: executing program 5 (id=1387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 5.554224258s ago: executing program 0 (id=1388): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.419154246s ago: executing program 1 (id=1389): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd, 0xffffffffffffff24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.150936489s ago: executing program 2 (id=1390): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000300)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.988908939s ago: executing program 7 (id=1391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.711776943s ago: executing program 7 (id=1392): r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.563015365s ago: executing program 8 (id=1393): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.117067402s ago: executing program 0 (id=1394): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)={[{@discard}, {@pquota}, {@lazytime}]}, 0x1, 0xb953, &(0x7f000000c300)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8dG0ZG2VQkAlUx2tAGZPBDFsUBpGiMaCETCW+Qoy8RAzEB874AMPUwEACG0EYiAomMsCEt9lQAzWn99yuvesa+t/+/zr6+STruefc/s5u77f/cylZ2+55CzuyrCYr6c0qXb/imGcbb2j/wTen3Xv4kmuqXi8dbZtU3N1QbPcttlOy/pO15berS4dqvrPmF9X5TvXg8+5WX1/1nix7X7HbVmxbS5vLmsrv11ehODy5fH/1wMOo+mrpz4D6/M2X5045d/B58nfMsuzQbT7Qcaq7ff684jnJBnWbUNxdtfW+/m1N6c+cP2bZnHXZdj8/xlT+OCefvvoLT4z1A9kVdLfP76zo31Z0rirWY0PlGhyPKj/PzzmjaXnxFFYNvh7tarrb5x2XjbCO//mXb/T2la6btVmW1WVZNjHLsklj3YOdo72jpSO/5pf3i+zl9T95uM+LO/571c+yLHt38TpxWPm1ANi1tHe0HDXM+q8baf3feeyGG61/2PV1tne05Gu9Yv1PGmn9T7vr6EXFF92tpam3xvaDAAAAAACGteLSVRcsXras52I33HDDjYEbY31lAmLbuujH+pEAqaX4z4mx/hgBAABgvOvsan9xQtWQQxMG7+z9UE//duaW7vNX3TX3+PK2uHvBMKcc8n3+fX19fWtOW3Z2sTux4vtlJ1UO5+dfeu/iS4rdhsrvP6jtP1qbnXXe0mU9h+Z/1dTa7JJ8pyk/77Ta7Gv5TnO+M702uy3faenfqc/W5juHnLN82bn5gQMCn7F3ls6u3mzCkGLZkM+Gwf2X3tv7q/J2hFOWz9b/QyXy/pubbr6z4r6y7fQfOP++/4c/X+AdZXT9r766vB3hlNus/w1LZjUNd9/2+w+cf4r+cQ1z/R/SqPK6X3H9bxjmlAPzvz7168/m/Wf8dP01xaGat3P9H3T+qZX9+08+cP3PT7Vf+fqfv7bsv0NPxjjU2XXliyOt/5H713yoeLfqQbMDZ2vpu/Uzef+7r217rDhUO8r++420/qsatrmeMEqdXTf2Vaz/UfTPpg9zyoEm75rbuSbv/+qbDz8y6L7R9N+/sn/jygs/27ji0lUzll64eEnPkp6LWppntTa3Ns2ePaux/5JQertjT8o4smPrP9utYqYqy/YfmJ99+dEb8/5/vumUW4pDk0bZf9qI6/+soY+VQaZUZ3V12SWLV668uKn0trzbXHpberdh+o/i9X9q+Yuo+mJblWUfHJg/8IrXD87737HxtZuLQ3Wj7D99pP51W/9eAu3g+j+3YmZI/wcf7rkp77/ioA9fUBwa7ev/ASOu/17rf0d1dlX8D5+dLO9/0uYjNgWOH+jrv7hS9K/f1Lo6cPwj+seVov/aF1puCxw/SP+4UvS/577G0wPHD9Y/rhT9P/fAQasCx2foH1eK/jOenL5n4Pgh+seVov8/Hp86M3C8Uf+4UvQ/8ZkLrgocP1T/uFL0/+7Ly28IHG/SP64U/X/fd84DgePN+seVov/uryx5KXC8Rf+4UvRf+fRlewWOz9Q/rhT9f7vhiiMDxz+qf1wp+m9au+LkwPFZ+seVon/j+s9fHDjeqn9cKfq/8PwPfxM4Plv/uFL0b3ju5u8Fjh+mf1wp+l+25Sf/Chw/XP+4UvS/843bHw0cP0L/uFL0f2jjL6cFjh+pf1wp+tc88fPQf6f5Mf3jStH/zPvvOT9w/OP6x5Wi/7fW3XVC4Pic7fev2VkPcVxL0b/vmROeCRxvs/7jStF/1ssLQn8/bLv+caXof2Hf/B8HjnfoH1eK/re8ctRXAseP0j+uFP2fevrMywPH5+ofV4r+792waFHg+NH6x5Wif+faU5sDx+fpH1eK/r3rF74/cHy+/nGl6D/v+S/9NXD8GP3jStF/9XNX/SdwvFP/uFL0/9OWa64LHD9W/7hS9N/7jdVrAscX6B9Xiv5nb7yuPXD8OP3jStH/9ie+fV7g+PH6x5Wi/yv3X79H4HiX/nGl6H/Yuu+H/rD1E/SPK0X/a1/deH3g+In6x5Wi/9y3Hr07cPwT+seVov8+Lz39WOD4SfrHlaL/439/6rXA8YX6x5Wi/48eXjcxcPyT+seVov9Zv/vDcL8n5O04Wf+4UvQ/4pH1nYHjp+gfV4r+r/3twYsCx0/VP64U/Wf+e69bA8e79Y8rRf83N+9zZeD4p/SPK0X/Wzft+Xzg+Kf1jytF/+UvfGB94Pgi/eNK0X/yfbsf3r8zZ9Tjp+kfV4r+Tz6wx96B46frH1eK/l98csLKwPEz9I8rRf8Fj09cGDh+pv4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHcncJeOhf/Hz6yMLaSSorFTdmVJZclaWmwhsmSXLWQvtMjSQlKkxU7aFCpkqUgRWVOplNKiJCSJ+L/GzCPGd6bp90+j+b7fr9c8Z7vnuM71Odf9HM/9nDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC3aZM0NVhsMRk64dMhTbj9xr7XvWPKkVU8/bqErXr7DUcPuG3/tKtNPuHnsoxMZPHZnq4y7bfj4TUYef97pw8ddGP7E+51hzJhhswyGzZFHdeAW/2LYsw6dGX+nYweDwbAjx/953JhxX1a+/fab/8V9Vdtk1bXWHDd54/883m3EhJsnXP/4+ZHj/6y05WCw0uaDST4/pr7177z1/qk9hv8Fm6y61joT9R9M6PxY94nXd6uJn+cX3LDLSlM13H/IJquuue641pNax2duvMrpjz62Xx950mAw8uTBYOQpg8HIU6d2D/4zVl1t2dXG7fOHLo+vfsjQC4K0fx827wabzjAYDEaN/z4x8rSh7wXA/5ZVV1v21WH9jx66Pa3/lW+fZS7rH/73rbPqassOnvA6f/y1hwz9/31c/3eMWO+YqTdiAAAA4N/1yF0XXjLhWN/wwWCewUTHex8z4ecCw8657LrrptpAnxnCcbKn/s7E/5hxnac/e+xgsNtGU3soTAXDpvYAmKr076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9ikzj+P+vQ6arHbviqCZsuuPwcG5838d8fd930//VRTzXT6vH/wU7Dxrcc13ynwWDw+lXX33CRwWBw3sZzLD/f4PHbVhh320qzj5jwAQGLPPZ1wUnc8dgnns7w+H2c89j9r/PoySOGTTSIJ3jd6hcdsOMmD7x04tOFJ/04Hv98ifPWWX2mofeyDJ9oo0k9V4fuf+ixTNx5wtgXGTf2JffedY8l99r/gMV32nXrHbbbYbvdll1mueWXWX7pFVZYbsntd9plu6XGf53EnI2flfmnZM5GTzxnd636xDmb+LFNas7GTn7OHrvHO47Z+IKhORv5b87Z/JOfs7E7DY117KjBVo9Nzbj/5AKjBvuNu7D0dE/Yt8w5bttXzD58MDj6nw903LnpHn8ODjtkp//A55ZMOJ13wul88XNLzp/U55YMhj63ZOgDE1Ycf7L3xUPbTfw+6wlXT/Hnluy72sPzDZ7yvqynxf/p+/9Teq0w7PGJGvrQkAnbjO/1z8+ZGJq2VZ7wORPLp8+S+U96ynjHDn/8eZ3GO+F9ccMmmv/JvS9usMP2By04Iery4//WI//nKHnfse5jXye1nsdOdDq5fceIf57957XbXTP3xPuO1056iE9aF0NzNN1EG01q37Hf1lfs9MR90yT2HevuNOGNxv/cd4z7z84/tO8YN/aFRg2OHndhmXEXFh41OGvchWUfuzBmcNm4C0tss/su2w577PvVU54Hiwx70i88huftmhM9b6fg83FWvmowWPnK9LgmPZ1Zet6Onsx48/u5B5N9P/elW8977mAwmHnC41pxaOz/F2m8Iyc/3vD5E4PJff7E4OTr9jn1Pzzex9fZY8+1CbvpRSbxd560zmZ9yjo7dMQTVsaUvq7ZNmw//vycj9/bKdtde/XQHI2a6H7/1ffooceS+g+95nuiYYcMhk1ubib1OuxJczPL5OdmSl+/LDLhBcaYyczNYvcdvOjQ3Iz+N+dm4UnMzRNfDz/R6MFgzJPnZuRgjXGvaCbMzUJTMjcz/WeeNzOE7cefX/Dxq25Z46AVhuYmzEX8/j90/wv9m3MzbKvHnzcLPHbbfMMHo0cP9tt67733XHr816GLy4z/Ovk1uMCUzOX0/5m5nGvCXmf4Uyfn8at2PuPRZf+va3CBf3cuxw6GD/0/904TL5b/HD//6aZ/N/276d9N/276d9O/m/7FJnH8f+zQzwWPGHbaBhN+GDPq8gdm23tqj3cqm6aP/0/o+6Tj/3vP9sDlwweP3zbZ47Pjt3lGHp9dfvzJgUsPbTfx8cEJV0/x8dn7j7py08F/5/js/8nQWp2Cnxva/3fTv5v+3fTvpn83/bv9u/1XfprGwdRh/XfTv5v+3fTvpn83/bvpX2wSx/+XGvo9gOv3evi0CQdCR+214UoPTe3xTmXT9PH/CX2fdPz/oZU23Gv44PHbJnv8f/w2Hcf/V7rthMMGz+Dj/0Nr1fF//gX9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307/YJI7/rzL0ewCjdpt//qHfB7jx7sNHTO3xTmXT6vF///5/L/v/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mf7EJx/8HE/2zh2/0vIjC8f//bZPov57+UUv/9fWPWvpvoH/U0n9D/aOW/hvpH7X0f5P+UUv/jfWPWvpvon/U0n9T/aOW/m/WP2rpv5n+UUv/zfWPWvq/Rf+opf8W+kct/bfUP2rpv5X+UUv/rfWPWvq/Vf+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/2/SPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf3frn/U0n9P/aOW/nvpH7X031v/qKX/O/SPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/3fqH7X0f5f+UUv/g/WPWvofon/U0v9Q/aOW/u/WP2rp/x79o5b+79U/aun/Pv2jlv6H6R+19H+//lFL/8P1j1r6H6F/1NL/SP2jlv5H6R+19P+A/lFL/w/qH7X0/5D+UUv/D+sftfQ/uqz/6CncrqX/MWX9p1RL/4/oH7X0P1b/qKX/R/WPWvofp3/U0v9j+kct/T+uf9TS/3j9o5b+J+gftfT/hP5RS/8T9Y9a+n9S/6il/6f0j1r6f1r/qKX/Z/SPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/aVPSf9TTN6xnqpb+p1v/UUv/M/SPWvqfqX/U0v8s/aOW/p/VP2rpf7b+UUv/z+kftfT/vP5RS/8v6B+19P+i/lFL/y/pH7X0P0f/qKX/l/WPWvp/Rf+opf+5+kct/c/TP2rpf77+UUv/r+oftfT/mv5RS/+v6x+19L9A/6il/4X6Ry39L9I/aun/Df2jlv4X6x+19L9E/6il/6X6Ry39L9M/aun/Tf2jlv7f0j9q6f9t/aOW/pfrH7X0v0L/qKX/d/SPWvpfqX/U0v+7+kct/b+nf9TS/yr9o5b+V+sftfT/vv5RS/9r9I9a+l+rf9TS/wf6Ry39r9M/aul/vf5RS/8b9I9a+t+of9TS/yb9o5b+N+sftfT/of5RS/9b9I9a+v9I/6il/4/1j1r6/0T/qKX/rfpHLf1/qn/U0v9n+kct/X+uf9TS/zb9o5b+v9A/aun/S/2jlv636x+19P+V/lFL/1/rH7X0v0P/qKX/b/SPWvr/Vv+opf/v9I9a+v9e/6il/536Ry39/6B/1NL/j/pHLf3v0j9q6f8n/aOW/nfrH7X0/7P+UUv/e/SPWvrfq3/U0v8+/aOW/n/RP2rpf7/+UUv/v+oftfR/QP+opf/f9I9a+j+of9TS/+/6RyX9xwz0j0r6Dx7WP2rp/w/9o5b+j+gftfR/VP+opP+wgf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n07/qKX/9PpHLf3H6B+19J9B/6il/4z6Ry39Z9I/auk/s/5RS/9Z9I9a+j9L/6il/6z6Ry39Z9M/auk/u/5RS/9n6x+19J9D/6il/3P0j1r6P1f/qKX/8/SPWvrPqX/U0v/5+kct/efSP2rp/wL9o5b+L9Q/auk/t/5RS/959I9a+r9I/6il/1j9o5b+8+oftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0f7H+UUv/l+gftfRfTP+opf/i+kct/Zdo7//Qo+NNdHVL/yXb+09CS/+l9I9a+i+tf9TSfxn9o5b+y+oftfR/qf5RS/+X6R+19F9O/6il//L6Ry39V9A/aum/ov5RS/+X6x+19F9J/6il/yv0j1r6v1L/qKX/q/SPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/q/WPWvqvrn/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6f8a/aOW/q/VP2rpv67+UUv/1+kftfR/vf5RS/836B+19H+j/lFL//X0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/5v0j1r6b6x/1NJ/E/2jlv6b6h+19H+z/lFL/830j1r6b65/1NL/LfpHLf230D9q6b+l/lFL/630j1r6b61/1NL/rfpHLf230T9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry3936Z/1NJ/F/2jlv676h+19N9N/6il/+76Ry3995h0/zH/lXE9Q7X0f7v1H7X031P/qKX/XvpHLf331j9q6f8O/aOW/vvoH7X031f/qKX/fvpHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/nfpHLf3fpX/U0v9g/aOW/oe09Z/C32po6X9oW/8p1NL/3fpHLf3fo3/U0v+9+kct/d+nf9TS/zD9o5b+79c/aul/uP5RS/8j9I9a+h+pf9TS/yj9o5b+H9A/aun/Qf2jlv4f0j9q6f9h/aOW/kfrH7X0P0b/qKX/R/SPWvofW9t/yxknd2tL/4/W9p+8lv7H6R+19P+Y/lFL/4/rH7X0P17/qKX/CfpHLf0/oX/U0v9E/aOW/p/UP2rp/yn9o5b+n9Y/aun/Gf2jlv4n6R+19D9Z/6il/yn6Ry39T9U/aul/2r/uP/ppHdczVEv/063/qKX/GfpHLf3P1D9q6X+W/lFL/8/qH7X0P1v/qKX/5/SPWvp/Xv+opf8X9I9a+n9R/6il/5f0j1r6n6N/1NL/y/pHLf2/on/U0v9c/aOW/ufpH7X0P1//qKX/V/WPWvp/Tf+opf/X9Y9a+l+gf9TS/0L9o5b+F+kftfT/hv5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfT/pv5RS/9v6R+19P+2/lFL/8v1j1r6X6F/1NL/O/pHLf2v1D9q6f9d/aOW/t/TP2rpf5X+UUv/q/WPWvp/X/+opf81+kct/a/VP2rp/wP9o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvr/UP+opf8t+kct/X/U+g/8/Ast/X9s/Uct/X+if9TS/1b9o5b+P9U/aun/M/2jlv4/1z9q6X+b/lFL/1/oH7X0/6X+UUv/2/WPWvr/Sv+opf+v9Y9a+t+hf9TS/zf6Ry39f6t/1NL/d/pHLf1/r3/U0v9O/aOW/n/QP2rp/0f9o5b+d+kftfT/k/5RS/+79Y9a+v9Z/6il/z36Ry3979U/aul/n/5RS/+/6B+19L9f/6il/1/1j1r6P6B/1NL/b/pHLf0f1D9q6f93/aOW/g/pH7X0f1j/qKX/P/SPWvo/on/U0v9R/aOS/o+d1f+pWvoP0z9q6T9c/6il/wj9o5b+I/WPWvqP0j9q6T9a/+jJ/R89eFrtP53+Ucv6n17/qKX/GP2jlv4z6B+19J9R/6il/0z6Ry39Z9Y/auk/i/5RS/9n6R+19J9V/6il/2z6Ry39Z9c/aun/bP2jlv5z6B+19H+O/lFL/+fqH7X0f57+UUv/OfWPWvo/X/+opf9c+kct/V+gf9TS/4X6Ry3959Y/auk/j/5RS/8X6R+19B+rf9TSf179o5b+8+kftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/i/WP2rp/xL9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/i/VP2rp/zL9o5b+y+kftfRfXv+opf8K+kct/VfUP2rp/3L9o5b+K+kftfR/hf5RS/9X6h+19H+V/lFL/5X1j1r6rzKJ/rMv+d8a2DNTS/9Vrf+opf9q+kct/V+tf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/dfWP2rpv47+UUv/1+gftfR/rf5RS/919Y9a+r9O/6il/+v1j1r6v0H/qKX/G/WPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf3fpH/U0n9j/aOW/pvoH7X031T/qKX/m/WPWvpvpn/U0n9z/aOW/m/RP2rpv4X+UUv/LfWPWvpvpX/U0n9r/aOW/m/VP2rpv43+0TTXf9ghj599Yv9t9Y+muf6TWP/b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+r9N/6il/y76Ry39d9U/aum/m/5RS//d9Y9a+u+hf9TS/+36Ry3999Q/aum/l/5RS/+99Y9a+r9D/6il/z76Ry3999U/aum/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfR/p/5RS/936R+19D9Y/6il/yH6Ry39D9U/aun/bv2jlv7v0T9q6f9e/aOW/u/TP2rpf5j+UUv/9+sftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/D+gftfT/oP5RS/8P6R+19P+w/lFL/6P1j1r6H6N/1NL/I/pHLf2P1T9q6f9R/aOW/sfpH7X0/5j+UUv/j5f1P2QKt2vpf3xZ/ynV0v8E/aOW/p/QP2rpf6L+UUv/T+oftfT/lP5RS/9P6x+19P+M/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+n9W/6il/9n6Ry39P6d/1NL/8/pHLf2/oH/U0v+L+kct/b+kf9TS/xz9o5b+X9Y/aun/Ff2jlv7n6h+19D9P/6il//n6Ry39v6p/1NL/a/pHLf2/rn/U0v8C/aOW/hfqH7X0v0j/qKX/N/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/J5lnwmlL/2/qH7X0/5b+UUv/b+sftfS/XP+opf8V+kct/b+jf9TS/0r9o5b+39U/aun/Pf2jlv5X6R+19L9a/6il//f1j1r6X6N/1NL/Wv2jlv4/0D9q6X+d/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/w/1j1r636J/1NL/R/pHLf1/rH/U0v8n+kct/W/VP2rp/1P9o5b+P9M/aun/c/2jlv636R+19P+F/lFL/1/qH7X0v13/qKX/r/SPWvr/Wv+opf8d+kct/X+jf9TS/7f6Ry39f6d/1NL/9/pHLf3v1D9q6f8H/aOW/n/UP2rpf5f+UUv/P+kftfS/W/+opf+f9Y9a+t+jf9TS/179o5b+9+kftfT/i/5RS//79Y9a+v9V/6il/wP6Ry39/6Z/1NL/Qf2jlv5/1z9q6f+Q/lFL/4f1j1r6/0P/qKX/I/pHLf0f1T8q6T9ioH/U0n+Y/lFL/+H6Ry39R+gftfQfqX/U0n+U/lFL/9H6Ry39p9M/auk/vf5RS/8x+kct/WfQP2rpP6P+UUv/mfSPWvrPrH/U0n8W/aOW/s/SP2rpP6v+UUv/2fSPWvrPrn/U0v/Z+kct/efQP2rp/xz9o5b+z9U/aun/PP2jlv5z6h+19H++/lFL/7n0j1r6v0D/qKX/C/WPWvrPrX/U0n8e/aOW/i/SP2rpP1b/qKX/vPpHLf3n0z9q6T9/U/9Zp3zTlv4LNPX/N7T0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6v1j/qKX/S/SPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/UvpHLf2X1j9q6b+M/lFL/2X1j1r6v1T/qKX/y/SPWvovp3/U0n95/aOW/iv09p9ucje29F+xt/9ktfR/uf5RS/+V9I9a+r9C/6il/yv1j1r6v0r/qKX/yvpHLf1X0T9q6b+q/lFL/9X0j1r6v1r/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv6v0T9q6f9a/aOW/uvqH7X0f53+UUv/1+sftfR/g/5RS/836h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+r9J/6il/8b6Ry39N9E/Gt9/+sG03n9T/aOW9f9m/aOW/pvpH7X031z/qKX/W/SPWvpvoX/U0n9L/aOW/lvpH7X031r/qKX/W/WPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r6v03/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NL/7fpHLf331D9q6b+X/lFL/731j1r6v0P/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19H+n/lFL/3fpH7X0P1j/qKX/IfpHLf0P1T9q6f9u/aOW/u/RP2rp/179o5b+79M/aul/mP5DHn30CRda+r9f/6il/+H6Ry39j9A/aul/pP5RS/+j9I9a+n9A/6il/wf1j1r6f0j/qKX/h/WPWvofrX/U0v8Y/aOW/h/RP2rpf6z+UUv/j+oftfQ/Tv+opf/H9I9a+n9c/6il//H6Ry39T9A/aun/Cf2jlv4n6h+19P+k/lFL/0/pH7X0/7T+UUv/z+gftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/Z/WPWvqfrX/U0v9z+kct/T+vf9TS/wv6Ry39v6h/1NL/S/pHLf3P0T9q6f9l/aOW/l/RP2rpf67+UUv/8/SPWvqfr3/U0v+r+kct/b+mf9TS/+v6Ry39L9A/aul/of5RS/+L9I+m5f6r/PPaEd/QP5qW+z9x/V+sf9TS/xL9o5b+l+oftfS/TP+opf839Y9a+n9L/6il/7f1j1r6X65/1NL/Cv2jlv7f0T/q6H/k4Er9o47+gxHf1T9q6f89/aOW/lfpH7X0v1r/qKX/9/WPWvpfo3/U0v9a/aOW/j/QP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/D/WPWvrfon/U0v9H+kct/X+sf9TS/yf6Ry39b9U/aun/U/2jlv4/0z9q6f9z/aOW/rfpH7X0/4X+UUv/X+oftfS/Xf+opf+v9I9a+v9a/6il/x36Ry39f6N/1NL/t/pHLf1/p3/U0v/3+kct/e/UP2rp/wf9o5b+f9Q/aul/l/5RS/8/6R+19L9b/6il/5/1j1r636N/1NL/Xv2jlv736R+19P+L/lFL//v1j1r6/1X/qKX/A/pHLf3/pn/U0v9B/aOW/n/XP2rp/5D+UUv/h/WPWvr/Q/+opf8j+kct/R/VPyrpP3Kgf9TSf5j+UUv/4f+y/4ind1zPUC39R1j/UUv/kfpHLf1H6R+19B+tf9TSfzr9o5b+0+sftfQfo3/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6f8s/aOW/rPqH7X0n03/qKX/7PpHLf2frX/U0n8O/aOW/s/RP2rp/1z9o5b+z9M/auk/p/5RS//n6x+19J9L/6il/wv0j1r6v1D/qKX/3PpHLf3n0T9q6f8i/aOW/mP1j1r6z6t/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TS/8X6Ry39X6J/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rfzQN9x/zhGtHvlT/aBru/6T1/zL9o5b+y+kftfRfXv+opf8K+kct/VfUP2rp//Ka/tP/W1u39F+ppv+/p6X/K/SPWvq/Uv+opf+r9I9a+q+sf9TSfxX9o5b+q+oftfRfTf+opf+r9Y9a+q+uf9TSfw39o5b+a+oftfRfS/+opf/a+kct/dfRP2rp/xr9o5b+r9U/aum/rv5RS//X6R+19H+9/lFL/zfoH7X0f6P+UUv/9fSPWvqvr3/U0n8D/aOW/hvqH7X030j/qKX/m/SPWvpvrH/U0n8T/aOW/pvqH7X0f7P+UUv/zfSPWvpvrn/U0v8t+kct/bfQP2rpv6X+UUv/rfSPWvpvrX/U0v+t+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf3fpn/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6f92/aOW/nvqH7X030v/qKX/3vpHLf3foX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6v1P/qKX/u/SPWvofrH/U0v8Q/aOW/ofqH7X0f7f+UUv/9+gftfR/r/5RS//36R+19D9M/6il//v1j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/wf0j1r6f1D/qKX/h/SPWvp/WP+opf/R+kct/Y/RP2rp/xH9o5b+x+oftfT/qP5RS//j9I9a+n9M/6il/8f1j1r6H69/1NL/BP2jlv6f0D9q6X+i/lFL/0/qH7X0/5T+UUv/T+sftfT/jP5RS/+T9I9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvp/Vv9oWu4//T+vHXm2/tG03P+J6/9z+kct/T+vf9TS/wv6Ry39v6h/1NL/S/pHLf3P0T9q6f9l/aOW/l/RP2rpf67+UUv/8/SPWvqfr3/U0v+r+kct/b+mf9TS/+v6Ry39L9A/aul/of5RS/+L9I9a+n9D/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+n9T/6il/7f0j1r6f1v/qKX/5fpHLf2v0D9q6f8d/aOW/lfqH7X0/67+UUv/7+kftfS/Sv+opf/V+kct/b+vf9TS/xr9o5b+1+oftfT/gf5RS//r9I9a+l+vf9TS/wb9o5b+N9b1v/nRKdmqpf9Ndf2nTEv/m/WPWvr/UP+opf8t+kct/X+kf9TS/8f6Ry39f6J/1NL/Vv2jlv4/1T9q6f8z/aOW/j/XP2rpf5v+UUv/X+gftfT/pf5RS//b9Y9a+v9K/6il/6/1j1r636F/1NL/N/pHLf1/q3/U0v93+kct/X+vf9TS/079o5b+f9A/aun/R/2jlv536R+19P+T/lFL/7v1j1r6/1n/qKX/PfpHLf3v1T9q6X+f/lFL/7/oH7X0v1//qKX/X/WPWvo/oH/U0v9v+kct/R/UP2rp/3f9o5b+D+kftfR/WP+opf8/9I9a+j+if9TS/1H9o5L+owb6Ry39h+kftfQfrn/U0n+E/lFL/5H6Ry39R+kftfQfrX/U0n86/aOW/tPrH7X0H6N/1NJ/Bv2jlv4z6h+19J9J/+jx/psNGwym4f4z6x+1rP9Z9I9a+j9L/6il/6z6Ry39Z9M/auk/u/5RS/9n6x+19J9D/6il/3P0j1r6P1f/qKX/8/SPWvrPqX/U0v/5+kct/efSP2rp/wL9o5b+L9Q/auk/t/5RS/959I9a+r9I/6il/1j9o5b+8+oftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0f7H+UUv/l+gftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/stOQf8RT+e4nqFa+r/U+o9a+r9M/6il/3L6Ry39l9c/aum/gv5RS/8V9Y9a+r9c/6il/0r6Ry39X6F/1NL/lfpHLf1fpX/U0n9l/aOW/qvoH7X0X1X/qKX/avpHLf1frX/U0n91/aOW/mvoH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/9foH7X0f63+UUv/dfWPWvq/Tv+opf/r9Y9a+r9B/6il/xv1j1r6r6d/NK7/TYPBYFrvv77+Ucv630D/qKX/hvpHLf030j9q6f8m/aOW/hvrH7X030T/qKX/pvpHLf3frH/U0n8z/aOW/pvrH7X0f4v+UUv/LfSPWvpvqX/U0n8r/aOW/lvrH7X0f6v+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/7fpH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r6v13/qKX/nvpHLf330j9q6b+3/lFL/3foH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv7v1D9q6f8u/aOW/gfrH7X0P0T/qKX/ofpHLf3frX/U0v89+kct/d+rf9TS/336Ry39D9M/aun/fv2jlv6H6x+19D9C/6il/5H6Ry39j9I/aun/Af2jlv4f1D9q6f8h/aOW/h/WP2rpf7T+UUv/Y/SPWvp/RP+opf+x+kct/T+qf9TS/zj9o5b+H9M/aun/cf2jlv7H6x+19D9B/6il/yf0j1r6n6h/1NL/k/pHLf0/pX/U0v/T+kct/T+jf9TS/yT9o5b+J+sftfQ/Rf+opf+p+kct/U/TP2rpf7r+UUv/M/SPWvqfqX/U0v8s/aOW/p/VP2rpf3Zz/wcnfVNL/89V9V/7iCndsqX/56v6T7mW/l/QP2rp/0X9o5b+X9I/aul/jv5RS/8v6x+19P+K/lFL/3P1j1r6n6d/1NL/fP2jlv5f1T9q6f81/aOW/l/XP2rpf4H+UUv/C/WPWvpfpH/U0v8b+kct/S/WP2rpf4n+UUv/S/WPWvpfpn/U0v+b+kct/b+lf9TS/9v6Ry39L9c/aul/hf5RS//v6B+19L9S/6il/3f1j1r6f0//qKX/VfpHLf2v1j9q6f99/aOW/tfoH7X0v1b/qKX/D/SPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6f9D/aOW/rfoH7X0/5H+UUv/H+sftfT/if5RS/9b9Y9a+v9U/6il/8/0jzr6Dxv5c/2jjv6DUbfpH7X0/4X+UUv/X+oftfS/Xf+opf+v9I9a+v9a/6il/x36Ry39f6N/1NL/t/pHLf1/p3/U0v/3+kct/e/UP2rp/wf9o5b+f9Q/aul/l/5RS/8/6R+19L9b/6il/5/1j1r636N/1NL/Xv2jlv736R+19P+L/lFL//v1j1r6/1X/qKX/A/pHLf3/pn/U0v9B/aOW/n/XP2rp/9Dk+k//XxjXM1RL/4et/6il/z/0j1r6P6J/1NL/Uf2jkv6jB/pHLf2H6R+19B+uf9TSf4T+UUv/kfpHLf1H6R+19B+tf9TSfzr9o5b+0+sftfQfo3/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6f8s/aOW/rPqH7X0n03/qKX/7PpHLf2frX/U0n8O/aOW/s/RP2rp/1z9o5b+z9M/auk/p/5RS//n6x+19J9L/6il/wv0j1r6v1D/qKX/3PpHLf3n0T9q6f8i/aOW/mP1j1r6z6t/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TS/8X6Ry39X6J/1NJ/Mf2jlv6L6x+19F9C/6il/5K1/aeb7K0t/Zeq7T95Lf2X1j9q6b+M/lFL/2X1j1r6v1T/qKX/y/SPWvovp3/U0n95/aOW/ivoH7X0X1H/qKX/y/WPWvqvpH/U0v8V+kct/V+pf9TS/1X6Ry39V9Y/aum/iv5RS/9V9Y9a+q+mf9TS/9X6Ry39V9c/aum/hv5RS/819Y9a+q+lf9TSf239o5b+6+gftfR/jf5RS//X6h+19F9X/6il/+v0j1r6v17/qKX/G/SPWvq/Uf+opf96+kct/dfXP2rpv4H+UUv/DfWPWvpvpH/U0v9N+kct/TfWP2rpv4n+UUv/TfWPWvq/Wf+opf9mU9R/46dvXM9QLf03t/6jlv5v0T9q6b+F/lFL/y31j1r6b6V/1NJ/a/2jlv5v1T9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/076Ry39d9Y/aun/Nv2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/+36x+19N9T/6il/176Ry3999Y/aun/Dv2jlv776B+19N9X/6il/376Ry3999c/aul/gP5RS/8D9Y9a+h+kf9TS/536Ry3936V/1NL/YP2jlv6H6B+19D9U/6il/7v1j1r6v0f/qKX/e/WPWvq/T/+opf9h+kct/d+vf9TS/3D9o5b+R+gftfQ/Uv+opf9R+kct/T+gf9TS/4P6Ry39P6R/1NL/w/pHLf2P1j9q6X+M/lFL/4/oH7X0P1b/qKX/R/WPWvofp3/U0v9j+kct/T+uf9TS/3j9o5b+J+gftfT/hP5RS/8T9Y9a+n9S/6il/6f0j1r6f1r/qKX/Z/SPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/s/pHLf3P1j9q6f85/aOW/p/XP2rp/wX9o5b+X9Q/aun/Jf2jlv7n6B+19P+y/lFL/6/oH7X0P1f/qKX/efpHLf3P1z9q6f9V/aOW/l/TP2rp/3X9o5b+F+gftfS/UP+opf9F+kct/b+hf9TS/2L9o5b+l+gftfS/VP+opf9l+kct/b+pf9TS/1v6Ry39v61/1NL/cv2jlv5X6B+19P+O/lFL/yv1j1r6f1f/qKX/9/SPWvpfpX/U0v9q/aOW/t/XP2rpf43+UUv/a/WPWvr/QP+opf91+kct/a/XP2rpf4P+UUv/G/WPWvrfpH/U0v9m/aOW/j/UP2rpf4v+UUv/H+kftfT/sf5RS/+f6B+19L9V/6il/0/1j1r6/0z/qKX/z/WPWvrfpn/U0v8X+kct/X+pf9TS/3b9o5b+v9I/aun/a/2jlv536B+19P+N/lFL/9/qH7X0/53+UUv/3+sftfS/U/+opf8f9I9a+v9R/6il/136Ry39/6R/1NL/bv2jlv5/1j9q6X+P/lFL/3v1j1r636d/1NL/L/pHLf3v1z9q6f9X/aOW/g/oH7X0/5v+UUv/B/WPWvr/Xf+opf9D+kct/R/WP2rp/w/9o5b+j+gftfR/VP+opP90A/2jlv7D9I9a+g/XP2rpP0L/qKX/SP2jlv6j9I9a+o/WP2rpP53+UUv/6fWPWvqP0T9q6T+D/lFL/xn1j1r6z6R/1NJ/Zv2jlv6z6B+19H+W/lFL/1n1j1r6z6Z/1NJ/dv2jlv7P1j9q6T+H/lFL/+foH7X0f67+UUv/5+kftfSfU/+opf/z9Y9a+s+lf9TS/wX6Ry39X6h/1NJ/bv2jlv7z6B+19H+R/lFL/7H6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rp/2L9o5b+L9E/aum/mP5RS//F9Y9a+i+hf9TSf8nH+g+fWqN6xmrpv5T1H7X0X1r/qKX/MvpHLf2X1T9q6f9S/aOW/i/TP2rpv5z+UUv/5aeg/z2zPJ0De2Zq6b+C9R+19F9R/6il/8v1j1r6r6R/1NL/FfpHLf1fqX/U0v9V+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0v/V+kct/VfXP2rpv4b+UUv/NfWPWvqvpX/U0n9t/aOW/uvoH7X0f43+UUv/1+oftfRfV/+opf/r9I9a+r9e/6il/xv0j1r6v1H/qKX/evpHLf3X1z9q6b+B/lFL/w31j1r6b6R/1NL/TfpHLf031j9q6b+J/lFL/031j1r6v1n/qKX/ZvpHLf031z9q6f8W/aOW/lvoH7X031L/qKX/VvpHLf231j9q6f9W/aOW/tvoH7X031b/qKX/dvpHLf231z9q6b+D/lFL/x31j1r676R/1NJ/Z/2jlv5v0z9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19H+7/lFL/z31j1r676V/1NJ/b/2jlv7v0D9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19D9Q/6il/0H6Ry3936l/1NL/XfpHLf0P1j9q6X+I/lFL/0P1j1r6v1v/qKX/e/SPWvq/V/+opf/79I9a+h+mf9TS//36Ry39D9c/aul/hP5RS/8j9Y9a+h+lf9TS/wP6Ry39P6h/1NL/Q/pHLf0/rH/U0v9o/aOW/sfoH7X0/4j+UUv/Y/WPWvp/VP+opf9x+kct/T+mf9TS/+P6Ry39j9c/aul/gv5RS/9P6B+19D9R/6il/yf1j1r6f0r/qKX/p/WPWvp/Rv+opf9J+kct/U/WP2rpf4r+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0P1P/qKX/WfpHLf0/q3/U0v9s/aOW/p/TP2rp/3n9o5b+X9A/aun/Rf2jlv5f0j9q6X+O/lFL/y/rH7X0/4r+UUv/c/WPWvqfp3/U0v98/aOW/l/VP2rp/zX9o5b+X9c/aul/gf5RS/8L9Y9a+l+kf9TS/xv6Ry39L9Y/aul/if5RS/9L9Y9a+l+mf9TS/5v6Ry39v6V/1NL/2/pHLf0v1z9q6X+F/lFL/+/oH7X0v1L/qKX/d/WPWvp/T/+opf9V+kct/a/WP2rp/339o5b+1+gftfS/Vv+opf8P9I9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rp/0P9o5b+t+gftfT/kf5RS/8f6x+19P+J/lFL/1v1j1r6/1T/qKX/z/SPWvr/XP+opf9t+kct/X+hf9TS/5f6Ry39b9c/aun/K/2jlv6/1j9q6X+H/lFL/9/oH7X0/63+UUv/3+kftfT/vf5RS/879Y9a+v9B/6il/x/1j1r636V/1NL/T/pHLf3v1j9q6f9n/aOW/vfoH7X0v1f/qKX/ffpHLf3/on/U0v9+/aOW/n/VP2rp/4D+UUv/v+kftfR/UP+opf/f9Y9a+j+kf9TS/2H9o5b+/9A/aun/iP5RS/9H9Y9K+k8/0D9q6T9M/6ca1dN/uP5RS/8R+kct/UfqH7X0H6V/1NJ/tP5RS//p9I9a+k+vf9TSf4z+UUv/GfSPWvrPqH/U0n8m/aOW/jPrH7X0n0X/qKX/s/SPWvrPqn/U0n82/aOW/rPrH7X0f7b+UUv/OfSPWvo/R/+opf9z9Y9a+j9P/6il/5z6Ry39n69/1NJ/Lv2jlv4v0D9q6f9C/aOW/nPrH7X0n0f/qKX/i/SPWvqP1T9q6T+v/lFL//n0j1r6z69/1NJ/Af2jlv4L6h+19F9I/6il/8L6Ry39F9E/aum/qP5RS/8X6x+19H+J/lFL/8X0j1r6L65/1NJ/Cf2jlv5L6h+19F9K/6il/9L6Ry39l9E/aum/rP5RS/+Xxv7/84/2/1tL/5dZ/1FL/+X0j1r6L69/1NJ/Bf2jlv4r6h+19H+5/lFL/5X0jyb0H0zr/V+hf9Sy/l+pf9TS/1X6P8W9Rf1X1j9q6b+K/lFL/1X1j1r6r6Z/1NL/1fpHLf1X1z9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19H+N/lFL/9fqH7X0X1f/qKX/6/SPWvq/Xv+opf8b9I9a+r9R/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TS/036Ry39N9Y/aum/if5RS/9N9Y9a+r9Z/6il/2b6Ry39N9c/aun/Fv2jlv5b6B+19N9S/6il/1b6Ry39t9Y/aun/Vv2jlv7b6B+19N9W/6il/3b6Ry39t9c/aum/g/5RS/8d9Y9a+u+kf9TSf2f9o5b+b9M/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfR/u/5RS/899Y9a+u+lf9TSf2/9o5b+79A/aum/j/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/d+pf9TS/136Ry39D9Y/aul/iP5RS/9D9Y9a+r9b/6il/3v0j1r6v1f/qKX/+/SPWvofpn/U0v/9+kct/Q/XP2rpf4T+UUv/I/WPWvofpX/U0v8D+kct/T+of9TS/0P6Ry39P6x/1NL/aP2jlv7H6B+19P+I/lFL/2P1j1r6f1T/qKX/cfpHLf0/pn/U0v/j+kct/Y/XP2rpf4L+UUv/T+gftfQ/Uf+opf8n9Y9a+n9K/6il/6f1j1r6f0b/qKX/SfpHLf1P1j9q6X+K/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39P6t/1NL/bP2jlv6f0z9q6f95/aOW/l/QP2rp/0X9o5b+X9I/aul/jv5RS/8v6x+19P+K/lFL/3P1j1r6n6d/1NL/fP2jlv5f1T9q6f81/aOW/l//V/2HP83jeoZq6X+B9R+19L9Q/6il/0X6Ry39v6F/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39v6l/1NL/W/pHLf2/rX/U0v9y/aOW/lfoH7X0/47+UUv/K/WPWvp/V/+opf/39I9a+l+lf9TS/2r9o5b+39c/aul/jf5RS/9r9Y9a+v9A/6il/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+P9Q/aul/i/5RS/8f6R+19P+x/lFL/5/oH7X0v1X/qKX/T/WPWvr/TP+opf/P9Y9a+t+mf9TS/xf6Ry39f6l/1NL/dv2jlv6/0j9q6f9r/aOW/nfoH7X0/43+UUv/3+oftfT/nf5RS//f6x+19L9T/6il/x/0j1r6/1H/qKX/XfpHLf3/pH/U0v9u/aOW/n/WP2rpf4/+UUv/e/WPWvrfp3/U0v8v+kct/e/XP2rp/1f9o5b+D+gftfT/m/5RS/8H9Y9a+v9d/6il/0P6Ry39H9Y/aun/D/2jlv6P6B+19H9U/6ik/5iB/lFL/2H6Ry39h+sftfQfoX/U0n/kE/qPmRrjeoZq6T/K+o9a+o/WP2rpP53+UUv/6fWPWvqP0T9q6T+D/lFL/xn1j1r6z6R/1NJ/Zv2jlv6z6B+19H+W/lFL/1n1j1r6z6Z/1NJ/dv2jlv7P1j9q6T+H/lFL/+foH7X0f67+UUv/5+kftfSfU/+opf/z9Y9a+s+lf9TS/wX6Ry39X6h/1NJ/bv2jlv7z6B+19H+R/lFL/7H6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rp/2L9o5b+L9E/aum/mP5RS//F9Y9a+i+hf9TSf0n9o2muPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAAP//A4YBzg==") r2 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r2, &(0x7f0000000100)='n', 0x1) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 1.841138561s ago: executing program 5 (id=1395): quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1.08538272s ago: executing program 1 (id=1396): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1397): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r4, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) shutdown(r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$kcm(0x10, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) kernel console output (not intermixed with test programs): e=1800 audit(1765046939.858:89): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 469.250839][ T5986] usb 6-1: Using ep0 maxpacket: 32 [ 469.274720][ T5986] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 469.278803][ T9061] netlink: 'syz.7.725': attribute type 4 has an invalid length. [ 469.312946][ T5986] usb 6-1: config 0 has no interface number 0 [ 469.335710][ T5986] usb 6-1: config 0 interface 12 has no altsetting 0 [ 469.354851][ T5986] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 469.367530][ T8299] usb 7-1: USB disconnect, device number 15 [ 469.380847][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.438996][ T6097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.459219][ T5986] usb 6-1: Product: syz [ 469.463520][ T5986] usb 6-1: Manufacturer: syz [ 469.471638][ T5986] usb 6-1: SerialNumber: syz [ 469.489061][ T5986] usb 6-1: config 0 descriptor?? [ 470.171797][ T9067] loop6: detected capacity change from 0 to 512 [ 470.216707][ T9067] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.729: iget: bad extended attribute block 1 [ 470.267521][ T9067] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.729: couldn't read orphan inode 15 (err -117) [ 470.572956][ T9067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.967159][ T9075] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 13: comm syz.6.729: lblock 0 mapped to illegal pblock 13 (length 1) [ 471.345466][ T9075] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.6.729: error -117 reading directory block [ 471.482885][ T6097] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 471.555578][ T6097] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 471.609967][ T6097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.734668][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.742077][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.749490][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.756862][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.764224][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.771568][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.778876][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 471.786525][ T5986] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 471.794888][ T5986] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 471.802227][ T5986] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 471.809847][ T5986] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 471.877343][ T5986] usb 6-1: USB disconnect, device number 16 [ 472.157654][ T9070] No control pipe specified [ 473.274993][ T9089] loop1: detected capacity change from 0 to 4096 [ 473.534671][ T5986] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 473.700874][ T5986] usb 8-1: device descriptor read/64, error -71 [ 473.731584][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 473.759748][ T9103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.767304][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 473.951097][ T5986] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 474.009923][ T9089] ntfs3(loop1): ino=9, attr_set_size [ 474.085740][ T9089] fuse: Unknown parameter '0xffffffffffffffff1844674407370955161500000000000000000000' [ 474.120859][ T5986] usb 8-1: device descriptor read/64, error -71 [ 474.241124][ T5986] usb usb8-port1: attempt power cycle [ 474.527212][ T9112] fuse: Bad value for 'fd' [ 474.534666][ T9109] loop4: detected capacity change from 0 to 2048 [ 474.640788][ T5986] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 474.684268][ T5986] usb 8-1: device descriptor read/8, error -71 [ 474.700525][ T9113] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.757010][ T31] audit: type=1800 audit(1765046945.458:90): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.740" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 474.960880][ T5986] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 475.011522][ T5986] usb 8-1: device descriptor read/8, error -71 [ 475.143090][ T5986] usb usb8-port1: unable to enumerate USB device [ 475.687633][ T9120] loop4: detected capacity change from 0 to 128 [ 476.116985][ T9128] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 476.216439][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 476.529269][ T9128] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 476.537818][ T9130] gretap1: entered allmulticast mode [ 476.706575][ T9131] netlink: 'syz.6.747': attribute type 4 has an invalid length. [ 479.586565][ T9159] netlink: 'syz.7.751': attribute type 4 has an invalid length. [ 480.732428][ T9164] fuse: Bad value for 'fd' [ 481.278588][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 481.693133][ T31] audit: type=1326 audit(1765046952.398:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 481.888449][ T31] audit: type=1326 audit(1765046952.438:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 481.954567][ T31] audit: type=1326 audit(1765046952.438:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 482.840214][ T31] audit: type=1326 audit(1765046952.438:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.191105][ T31] audit: type=1326 audit(1765046952.438:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.354864][ T31] audit: type=1326 audit(1765046952.438:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.462676][ T31] audit: type=1326 audit(1765046952.438:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.525634][ T31] audit: type=1326 audit(1765046952.438:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.659677][ T31] audit: type=1326 audit(1765046952.438:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 483.788748][ T31] audit: type=1326 audit(1765046952.438:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84698f749 code=0x7ffc0000 [ 484.195756][ T9198] netlink: 'syz.0.760': attribute type 2 has an invalid length. [ 486.372030][ T9220] netlink: 'syz.7.765': attribute type 2 has an invalid length. [ 486.581217][ T5816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 486.766529][ T9227] fuse: Bad value for 'fd' [ 486.891728][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 486.914526][ T5816] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 487.130496][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.240418][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.403250][ T5816] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.431567][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.532766][ T5816] usb 2-1: Product: syz [ 487.542886][ T5816] usb 2-1: Manufacturer: syz [ 487.547481][ T5816] usb 2-1: SerialNumber: syz [ 488.455687][ T5816] usb 2-1: 0:2 : does not exist [ 488.669173][ T5816] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 489.211221][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.771'. [ 489.220386][ T9246] bridge_slave_1: left allmulticast mode [ 489.226253][ T9246] bridge_slave_1: left promiscuous mode [ 489.232593][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.424244][ T9246] bridge_slave_0: left allmulticast mode [ 489.430793][ T9246] bridge_slave_0: left promiscuous mode [ 489.437620][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.496974][ T5816] usb 2-1: USB disconnect, device number 14 [ 491.324998][ T5816] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 491.745167][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.985540][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.244501][ T5816] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 492.311457][ T9170] udevd[9170]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.444747][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.731612][ T5816] usb 5-1: config 0 descriptor?? [ 493.312904][ T8299] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 493.465346][ T9262] loop4: detected capacity change from 0 to 512 [ 493.510781][ T8299] usb 8-1: Using ep0 maxpacket: 16 [ 493.520138][ T8299] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 493.578120][ T8299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 493.643953][ T9262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.689441][ T8299] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.705254][ T9268] vivid-003: ================= START STATUS ================= [ 493.714138][ T9268] vivid-003: FM Deviation: 75000 [ 493.722038][ T9268] vivid-003: ================== END STATUS ================== [ 493.760249][ T8299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.778431][ T8299] usb 8-1: Product: syz [ 493.782795][ T8299] usb 8-1: Manufacturer: syz [ 493.787387][ T8299] usb 8-1: SerialNumber: syz [ 493.821571][ T8299] usb 8-1: config 0 descriptor?? [ 493.832208][ T8299] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 493.855028][ T8299] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 493.875916][ T5816] hid-retrode 0003:0403:97C1.000F: unknown main item tag 0x0 [ 493.916067][ T5816] hid-retrode 0003:0403:97C1.000F: unknown main item tag 0x0 [ 493.953683][ T5816] hid-retrode 0003:0403:97C1.000F: unknown main item tag 0x0 [ 493.998086][ T5816] hid-retrode 0003:0403:97C1.000F: unknown main item tag 0x0 [ 494.056713][ T5816] hid-retrode 0003:0403:97C1.000F: unknown main item tag 0x0 [ 494.122167][ T5816] hid-retrode 0003:0403:97C1.000F: unbalanced collection at end of report description [ 494.235036][ T5816] hid-retrode 0003:0403:97C1.000F: probe with driver hid-retrode failed with error -22 [ 494.436444][ T8299] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 494.454803][ T8299] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 494.577873][ T8299] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 494.616045][ T8299] em28xx 8-1:0.0: No AC97 audio processor [ 495.988123][ T8299] usb 5-1: USB disconnect, device number 28 [ 496.048023][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.171942][ T5816] usb 8-1: USB disconnect, device number 17 [ 496.229737][ T5816] em28xx 8-1:0.0: Disconnecting em28xx [ 497.473251][ T5816] em28xx 8-1:0.0: Freeing device [ 498.091804][ T5816] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 498.320735][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 498.349757][ T5816] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 498.364580][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.400943][ T8299] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 498.439838][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.640786][ T8299] usb 2-1: Using ep0 maxpacket: 32 [ 498.718841][ T9301] loop6: detected capacity change from 0 to 2048 [ 498.759793][ T5816] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.657381][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.724287][ T8299] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 499.780480][ T5816] usb 8-1: Product: syz [ 499.856396][ T5816] usb 8-1: Manufacturer: syz [ 499.872086][ T9301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.961486][ T5816] usb 8-1: SerialNumber: syz [ 499.999959][ T5847] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 500.314546][ T8299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.356217][ T8299] usb 2-1: config 0 descriptor?? [ 500.505182][ T6097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.641339][ T9310] netlink: 'syz.4.788': attribute type 2 has an invalid length. [ 500.692217][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 500.701124][ T5816] usb 8-1: 0:2 : does not exist [ 500.765564][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.766066][ T5816] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 500.808774][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.810296][ T5816] usb 8-1: USB disconnect, device number 18 [ 501.123130][ T9170] udevd[9170]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.237176][ T8299] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 501.459779][ T8299] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 501.543790][ T8299] dib0700: firmware download failed at 7 with -22 [ 501.581012][ T8299] usb 2-1: USB disconnect, device number 15 [ 502.947356][ T9337] loop6: detected capacity change from 0 to 2048 [ 503.224058][ T9337] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 503.306800][ T9337] NILFS (loop6): mounting unchecked fs [ 503.424256][ T9170] udevd[9170]: incorrect nilfs2 checksum on /dev/loop6 [ 503.559171][ T9337] NILFS (loop6): recovery complete [ 503.620854][ T9344] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.823068][ T9372] fuse: Unknown parameter 'user_id00000000000000000000' [ 509.650757][ T6037] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 509.940731][ T6037] usb 8-1: Using ep0 maxpacket: 16 [ 509.995927][ T6037] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.037399][ T6037] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.087185][ T6037] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.132582][ T6037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.206920][ T6037] usb 8-1: Product: syz [ 511.211397][ T6037] usb 8-1: Manufacturer: syz [ 511.217436][ T6037] usb 8-1: SerialNumber: syz [ 511.225304][ T6037] usb 8-1: config 0 descriptor?? [ 511.235939][ T6037] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.246455][ T6037] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 511.370562][ T5847] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 511.932120][ T6037] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 511.973209][ T6037] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 512.001250][ T6037] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 512.028842][ T9425] loop1: detected capacity change from 0 to 16 [ 512.038455][ T6037] em28xx 8-1:0.0: No AC97 audio processor [ 512.064016][ T9425] erofs (device loop1): mounted with root inode @ nid 36. [ 512.278187][ T9419] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 512.412612][ T9419] syz.1.816: attempt to access beyond end of device [ 512.412612][ T9419] loop1: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 512.490609][ T9419] syz.1.816: attempt to access beyond end of device [ 512.490609][ T9419] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 512.645667][ T5847] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 512.763612][ T9419] syz.1.816: attempt to access beyond end of device [ 512.763612][ T9419] loop1: rw=0, sector=128, nr_sectors = 1 limit=16 [ 512.883018][ T9419] syz.1.816: attempt to access beyond end of device [ 512.883018][ T9419] loop1: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 512.909643][ T9419] erofs (device loop1): read error -5 @ 0 of nid 89 [ 512.919507][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 512.919523][ T31] audit: type=1800 audit(1765046983.628:122): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.816" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 513.107931][ T5986] usb 8-1: USB disconnect, device number 19 [ 513.154294][ T5986] em28xx 8-1:0.0: Disconnecting em28xx [ 513.184174][ T5986] em28xx 8-1:0.0: Freeing device [ 513.404664][ T9440] loop7: detected capacity change from 0 to 32768 [ 513.514318][ T9440] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 513.541080][ T31] audit: type=1800 audit(1765046984.248:123): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.823" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 514.505462][ T6346] ocfs2: Unmounting device (7,7) on (node local) [ 516.860761][ T6037] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 517.224936][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.271071][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.330330][ T6037] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 517.435487][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.527968][ T6037] usb 5-1: config 0 descriptor?? [ 518.066543][ T9461] loop4: detected capacity change from 0 to 512 [ 518.116493][ T9461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.249282][ T6037] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 518.277416][ T6037] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 518.340531][ T6037] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 518.426881][ T6037] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 518.507535][ T6037] hid-retrode 0003:0403:97C1.0010: unknown main item tag 0x0 [ 518.600726][ T6037] hid-retrode 0003:0403:97C1.0010: unbalanced collection at end of report description [ 518.644576][ T6037] hid-retrode 0003:0403:97C1.0010: probe with driver hid-retrode failed with error -22 [ 518.706378][ T6037] usb 5-1: USB disconnect, device number 29 [ 519.000826][ T8299] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 519.138207][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.162202][ T8299] usb 2-1: Using ep0 maxpacket: 16 [ 519.180412][ T8299] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 519.220984][ T8299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 519.283628][ T8299] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 519.350788][ T8299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.492084][ T8299] usb 2-1: Product: syz [ 519.533290][ T8299] usb 2-1: Manufacturer: syz [ 519.545743][ T8299] usb 2-1: SerialNumber: syz [ 519.551777][ T5847] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 519.584060][ T8299] usb 2-1: config 0 descriptor?? [ 519.607041][ T8299] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 519.660651][ T8299] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 519.852433][ T9302] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 520.771108][ T9302] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 520.837564][ T8299] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 520.860739][ T9302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.881102][ T8299] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 520.901897][ T9302] usb 7-1: config 0 descriptor?? [ 520.911042][ T8299] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 520.930567][ T9302] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 520.941008][ T8299] em28xx 2-1:0.0: No AC97 audio processor [ 521.335942][ T9302] gspca_cpia1: usb_control_msg 03, error -32 [ 521.357168][ T9302] cpia1 7-1:0.0: unexpected state after lo power cmd: 01 [ 521.553198][ T9302] gspca_cpia1: usb_control_msg 01, error -71 [ 521.706466][ T9302] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 522.111772][ T9302] usb 7-1: USB disconnect, device number 16 [ 522.241023][ T7930] usb 2-1: USB disconnect, device number 16 [ 522.264706][ T7930] em28xx 2-1:0.0: Disconnecting em28xx [ 522.305874][ T7930] em28xx 2-1:0.0: Freeing device [ 522.922913][ T9513] loop6: detected capacity change from 0 to 2048 [ 523.506072][ T9521] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.544861][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 523.560484][ T31] audit: type=1800 audit(1765046994.268:124): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.843" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 523.844173][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 525.106114][ T9534] loop7: detected capacity change from 0 to 4096 [ 525.350063][ T9534] ntfs3(loop7): ino=9, attr_set_size [ 525.405718][ T9534] fuse: Unknown parameter '0xffffffffffffffff1844674407370955161500000000000000000000' [ 525.431107][ T9302] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 525.476192][ T9548] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 525.735654][ T9302] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 525.777524][ T9302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.870729][ T9302] usb 5-1: Product: syz [ 525.874909][ T9302] usb 5-1: Manufacturer: syz [ 525.879584][ T9302] usb 5-1: SerialNumber: syz [ 526.343205][ T9302] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 526.381719][ T9302] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 527.460805][ T9302] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 527.473108][ T9302] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 527.490236][ T9302] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 529.576099][ T9302] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 530.563005][ T9302] usb 5-1: USB disconnect, device number 30 [ 531.965997][ T9577] vivid-009: ================= START STATUS ================= [ 531.973736][ T9577] vivid-009: FM Deviation: 75000 [ 531.978738][ T9577] vivid-009: ================== END STATUS ================== [ 532.317441][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 533.630028][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.864'. [ 534.647318][ T9609] overlayfs: missing 'lowerdir' [ 534.999099][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 535.008960][ T9610] bridge_slave_1: left allmulticast mode [ 535.015047][ T9610] bridge_slave_1: left promiscuous mode [ 535.021779][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.101398][ T9610] bridge_slave_0: left allmulticast mode [ 535.108161][ T9610] bridge_slave_0: left promiscuous mode [ 535.116290][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.150922][ T30] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 537.470805][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 537.613775][ T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 537.800508][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 538.017148][ T30] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.109873][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.169790][ T30] usb 7-1: Product: syz [ 538.197254][ T30] usb 7-1: Manufacturer: syz [ 538.221245][ T30] usb 7-1: SerialNumber: syz [ 538.281957][ T30] usb 7-1: config 0 descriptor?? [ 538.323886][ T30] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 538.347383][ T30] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 538.951934][ T30] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 538.972209][ T30] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 538.973707][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'. [ 539.000834][ T9134] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 539.196941][ T9134] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 539.207098][ T30] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 539.221006][ T30] em28xx 7-1:0.0: No AC97 audio processor [ 539.236962][ T9134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.314670][ T9134] usb 2-1: Product: syz [ 539.416177][ T9644] netlink: 'syz.4.881': attribute type 2 has an invalid length. [ 539.430858][ T9134] usb 2-1: Manufacturer: syz [ 539.435612][ T9134] usb 2-1: SerialNumber: syz [ 539.549093][ T9134] usb 2-1: config 0 descriptor?? [ 539.598327][ T9134] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 540.223547][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.265369][ T5986] usb 7-1: USB disconnect, device number 17 [ 540.275633][ T5986] em28xx 7-1:0.0: Disconnecting em28xx [ 540.292614][ T5986] em28xx 7-1:0.0: Freeing device [ 540.344026][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.612347][ T9134] gspca_sunplus: reg_r err -110 [ 540.618445][ T9134] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 540.982049][ T31] audit: type=1326 audit(1765047011.698:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.1.879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d7b78f749 code=0x0 [ 542.655645][ T9302] usb 2-1: USB disconnect, device number 17 [ 543.123234][ T9677] netlink: 'syz.0.893': attribute type 4 has an invalid length. [ 543.975506][ T9680] loop4: detected capacity change from 0 to 4096 [ 544.575904][ T9680] ntfs3(loop4): ino=9, attr_set_size [ 545.009846][ T5827] ntfs3(loop4): ino=1f, mi_enum_attr [ 545.031014][ T5827] ntfs3(loop4): ino=1f, mi_enum_attr [ 545.125107][ T5827] ntfs3(loop4): ino=1f, mi_enum_attr [ 545.179463][ T5827] ntfs3(loop4): ino=1f, mi_enum_attr [ 545.189628][ T9691] loop1: detected capacity change from 0 to 2048 [ 545.307878][ T9692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.358826][ T31] audit: type=1800 audit(1765047016.068:126): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.897" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 545.534558][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.899'. [ 546.513935][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.752210][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.834640][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.017993][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.336250][ T9727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.350817][ T9727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.382647][ T9727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.406890][ T9727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.431500][ T9727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.658501][ T9732] loop1: detected capacity change from 0 to 164 [ 549.744545][ T9732] iso9660: Bad value for 'check' [ 550.573053][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 551.197286][ T9748] loop6: detected capacity change from 0 to 512 [ 551.269392][ T9748] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.916: iget: bad extended attribute block 1 [ 551.291268][ T9748] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.916: couldn't read orphan inode 15 (err -117) [ 551.306280][ T9748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.410782][ T5986] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 551.480888][ T9727] Bluetooth: hci2: command tx timeout [ 551.547437][ T5986] usb 2-1: device descriptor read/64, error -71 [ 551.661802][ T9754] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 13: comm syz.6.916: lblock 0 mapped to illegal pblock 13 (length 1) [ 552.007541][ T9754] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.6.916: error -117 reading directory block [ 552.288106][ T6097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.330809][ T5986] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 552.520935][ T5986] usb 2-1: device descriptor read/64, error -71 [ 552.605052][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.633547][ T5986] usb usb2-port1: attempt power cycle [ 552.693673][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.729970][ T12] bond0 (unregistering): Released all slaves [ 552.894453][ T9765] loop7: detected capacity change from 0 to 2048 [ 553.001653][ T5986] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 553.082607][ T9766] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.103047][ T5986] usb 2-1: device descriptor read/8, error -71 [ 553.109975][ T12] bond1 (unregistering): Released all slaves [ 553.128423][ T31] audit: type=1800 audit(1765047023.808:127): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.920" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 553.286008][ T12] : left promiscuous mode [ 553.361346][ T5986] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 553.508059][ T5986] usb 2-1: device descriptor read/8, error -71 [ 553.561828][ T9727] Bluetooth: hci2: command tx timeout [ 553.633815][ T9771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.664105][ T5986] usb usb2-port1: unable to enumerate USB device [ 554.220840][ T12] hsr_slave_0: left promiscuous mode [ 554.330992][ T12] hsr_slave_1: left promiscuous mode [ 554.375544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.415886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.433581][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 554.486220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.503401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.152441][ T12] veth1_macvtap: left promiscuous mode [ 555.224841][ T12] veth0_macvtap: left promiscuous mode [ 555.308201][ T12] veth1_vlan: left promiscuous mode [ 555.384556][ T12] veth0_vlan: left promiscuous mode [ 555.640783][ T9727] Bluetooth: hci2: command tx timeout [ 557.278920][ T9806] loop6: detected capacity change from 0 to 16 [ 557.337465][ T9806] erofs (device loop6): mounted with root inode @ nid 36. [ 557.424681][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 557.616772][ T9806] syz.6.926: attempt to access beyond end of device [ 557.616772][ T9806] loop6: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 557.721145][ T9727] Bluetooth: hci2: command tx timeout [ 558.122183][ T9806] syz.6.926: attempt to access beyond end of device [ 558.122183][ T9806] loop6: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 558.580473][ T9806] syz.6.926: attempt to access beyond end of device [ 558.580473][ T9806] loop6: rw=0, sector=128, nr_sectors = 1 limit=16 [ 559.122514][ T9806] syz.6.926: attempt to access beyond end of device [ 559.122514][ T9806] loop6: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 559.387157][ T9806] erofs (device loop6): read error -5 @ 0 of nid 89 [ 559.729065][ T31] audit: type=1800 audit(1765047030.398:128): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.926" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 560.565496][ T6097] erofs (device loop6): bogus i_mode (4355) @ nid 46 [ 560.585104][ T6097] erofs (device loop6): bogus i_mode (4355) @ nid 46 [ 560.805515][ T12] team0 (unregistering): Port device team_slave_1 removed [ 560.841491][ T12] team0 (unregistering): Port device team_slave_0 removed [ 560.940743][ T9302] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 561.091348][ T9302] usb 8-1: Using ep0 maxpacket: 16 [ 561.108420][ T9302] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 561.122546][ T9302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.138085][ T9302] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 561.151073][ T9302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.159059][ T9302] usb 8-1: Product: syz [ 561.163618][ T9302] usb 8-1: Manufacturer: syz [ 561.168295][ T9302] usb 8-1: SerialNumber: syz [ 561.190222][ T9302] usb 8-1: config 0 descriptor?? [ 561.203868][ T9302] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 561.219528][ T9302] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 561.777786][ T9724] chnl_net:caif_netlink_parms(): no params data found [ 561.862021][ T9302] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 561.901051][ T9302] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 562.214179][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.220455][ T9826] autofs: Bad value for 'fd' [ 562.220967][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.416124][ T9302] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 562.670897][ T9302] em28xx 8-1:0.0: No AC97 audio processor [ 562.787797][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.798146][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.829127][ T9724] bridge_slave_0: entered allmulticast mode [ 562.881180][ T9724] bridge_slave_0: entered promiscuous mode [ 562.922674][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.970895][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.988318][ T9724] bridge_slave_1: entered allmulticast mode [ 563.008364][ T9724] bridge_slave_1: entered promiscuous mode [ 563.290227][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.332911][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.396276][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.405049][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.413065][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.422150][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.429826][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.470293][ T9302] usb 8-1: USB disconnect, device number 20 [ 564.501877][ T9302] em28xx 8-1:0.0: Disconnecting em28xx [ 564.562616][ T9302] em28xx 8-1:0.0: Freeing device [ 564.697080][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.601349][ T9727] Bluetooth: hci5: command tx timeout [ 567.265480][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.342874][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 567.366293][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.612409][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.690004][ T9727] Bluetooth: hci5: command tx timeout [ 568.782791][ T9724] team0: Port device team_slave_0 added [ 568.889123][ T9724] team0: Port device team_slave_1 added [ 569.088647][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.535447][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.542492][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.635512][ T5816] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 569.727740][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.801898][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 569.808838][ T5816] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 569.898164][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.929535][ T5816] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 569.940716][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.959155][ T5816] usb 8-1: Product: syz [ 569.974470][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.994530][ T5816] usb 8-1: Manufacturer: syz [ 569.999124][ T5816] usb 8-1: SerialNumber: syz [ 570.004373][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.032510][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.044092][ T5816] usb 8-1: config 0 descriptor?? [ 570.055348][ T5816] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 570.064616][ T5816] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 570.081934][ T9907] autofs: Bad value for 'fd' [ 570.262011][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.655665][ T5816] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 570.662352][ T5816] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 570.739482][ T9724] hsr_slave_0: entered promiscuous mode [ 570.756365][ T9724] hsr_slave_1: entered promiscuous mode [ 570.762141][ T9727] Bluetooth: hci5: command tx timeout [ 571.073576][ T5816] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 571.080698][ T5816] em28xx 8-1:0.0: No AC97 audio processor [ 571.279260][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.890985][ T9856] chnl_net:caif_netlink_parms(): no params data found [ 572.321793][ T5986] usb 8-1: USB disconnect, device number 21 [ 572.406765][ T5986] em28xx 8-1:0.0: Disconnecting em28xx [ 572.514618][ T5986] em28xx 8-1:0.0: Freeing device [ 572.745477][ T9947] loop7: detected capacity change from 0 to 2048 [ 572.913436][ T9727] Bluetooth: hci5: command tx timeout [ 573.112588][ T9947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.286193][ T9727] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 574.023388][ T6346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.579207][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 574.864224][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.956'. [ 576.717419][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.294482][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.641552][ T12] bond0 (unregistering): Released all slaves [ 578.493408][ T9960] bridge_slave_1: left allmulticast mode [ 578.499207][ T9960] bridge_slave_1: left promiscuous mode [ 578.506526][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.552871][ T9960] bridge_slave_0: left allmulticast mode [ 578.575182][ T9960] bridge_slave_0: left promiscuous mode [ 578.599213][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.160692][ T12] : left promiscuous mode [ 579.750750][ T9302] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 579.998620][ T9302] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.008899][ T9302] usb 8-1: config 0 has no interfaces? [ 580.014553][ T9302] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.029088][ T9302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.210103][ T9302] usb 8-1: config 0 descriptor?? [ 581.036165][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.050193][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.076893][ T9856] bridge_slave_0: entered allmulticast mode [ 581.099416][ T9856] bridge_slave_0: entered promiscuous mode [ 581.642011][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'. [ 582.491722][ T5816] usb 8-1: USB disconnect, device number 22 [ 582.539298][T10005] loop7: detected capacity change from 0 to 128 [ 582.924664][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.965'. [ 583.691109][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.698224][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.742396][ T9856] bridge_slave_1: entered allmulticast mode [ 583.757474][ T9856] bridge_slave_1: entered promiscuous mode [ 583.779855][T10002] gretap2: entered allmulticast mode [ 584.771781][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.879809][ T12] hsr_slave_0: left promiscuous mode [ 584.985192][ T12] hsr_slave_1: left promiscuous mode [ 585.007219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.066756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.149407][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.216229][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 586.376867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.012534][ T12] veth1_macvtap: left promiscuous mode [ 587.081720][ T12] veth0_macvtap: left promiscuous mode [ 587.198631][ T12] veth1_vlan: left promiscuous mode [ 587.273793][ T12] veth0_vlan: left promiscuous mode [ 590.311357][ T12] team0 (unregistering): Port device team_slave_1 removed [ 590.415424][T10057] loop1: detected capacity change from 0 to 16 [ 590.485861][T10057] erofs (device loop1): mounted with root inode @ nid 36. [ 591.728118][ T12] team0 (unregistering): Port device team_slave_0 removed [ 593.021696][T10057] syz.1.974: attempt to access beyond end of device [ 593.021696][T10057] loop1: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 593.047247][T10057] syz.1.974: attempt to access beyond end of device [ 593.047247][T10057] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 593.111112][T10057] syz.1.974: attempt to access beyond end of device [ 593.111112][T10057] loop1: rw=0, sector=128, nr_sectors = 1 limit=16 [ 593.166410][T10057] syz.1.974: attempt to access beyond end of device [ 593.166410][T10057] loop1: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 593.242563][T10057] erofs (device loop1): read error -5 @ 0 of nid 89 [ 593.295984][ T31] audit: type=1800 audit(1765047064.008:129): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.974" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 594.563850][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.705818][ T9724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 594.752364][ T9724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 594.788486][ T9856] team0: Port device team_slave_0 added [ 594.800250][ T9724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 594.850324][ T9724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 594.933257][ T9856] team0: Port device team_slave_1 added [ 595.381715][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.408660][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.510778][ T9856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.620025][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.648879][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.773663][ T9856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.113134][ T9856] hsr_slave_0: entered promiscuous mode [ 596.146915][ T9856] hsr_slave_1: entered promiscuous mode [ 596.177985][ T9856] debugfs: 'hsr0' already exists in 'hsr' [ 596.200473][ T9856] Cannot create hsr debugfs directory [ 596.997355][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.257947][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 597.273421][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 597.337074][T10105] ceph: No mds server is up or the cluster is laggy [ 597.513978][ T9724] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.604220][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.611388][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.654406][T10110] loop1: detected capacity change from 0 to 2048 [ 597.708450][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.715687][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.784400][T10117] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.808004][ T31] audit: type=1800 audit(1765047068.518:130): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.983" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 598.111536][T10121] overlayfs: missing 'lowerdir' [ 598.139246][ T9856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 598.295768][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.985'. [ 598.457814][ T9856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 599.075313][ T9856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 599.126438][ T9856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 599.596304][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.668150][ T9856] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.772924][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.780110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.832665][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.7.989'. [ 599.882536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.889736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.479430][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.918076][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.149531][ T9724] veth0_vlan: entered promiscuous mode [ 603.232536][ T9724] veth1_vlan: entered promiscuous mode [ 603.353623][ T9724] veth0_macvtap: entered promiscuous mode [ 603.402080][ T9724] veth1_macvtap: entered promiscuous mode [ 603.523752][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.587306][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.656912][ T6031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.706732][ T6031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.749658][ T6031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.795935][ T6031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.094462][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.153385][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.340551][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.490783][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.619802][ T9856] veth0_vlan: entered promiscuous mode [ 604.679656][ T9856] veth1_vlan: entered promiscuous mode [ 604.879200][ T9856] veth0_macvtap: entered promiscuous mode [ 605.210112][ T9856] veth1_macvtap: entered promiscuous mode [ 607.281666][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.365313][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.667546][T10212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.733869][ T6031] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.817551][T10212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.123826][T10212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.520773][ T5918] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 608.841475][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 608.895453][ T5918] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 608.944143][ T5918] usb 8-1: config 179 has no interface number 0 [ 608.956845][ T5918] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 608.988928][ T5918] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 609.011154][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.054473][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.083659][ T5918] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.146427][ T5918] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 609.176880][ T5918] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 609.217849][ T5918] usb 8-1: config 179 interface 65 has no altsetting 0 [ 609.245866][ T5918] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 609.270552][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.412836][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.441825][ T5918] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input28 [ 609.450669][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.659174][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1001'. [ 609.868176][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.957635][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.085776][ T5918] usb 8-1: USB disconnect, device number 23 [ 611.067859][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1000'. [ 613.789408][T10285] netlink: 'syz.1.1009': attribute type 4 has an invalid length. [ 613.827510][T10285] netlink: 'syz.1.1009': attribute type 4 has an invalid length. [ 615.280985][ T8870] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 615.500706][ T8870] usb 8-1: Using ep0 maxpacket: 16 [ 615.608432][ T8870] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 615.664946][ T8870] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.708399][ T8870] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.846132][ T8870] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.059252][ T8870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.074125][ T8870] usb 8-1: Product: syz [ 616.090241][ T8870] usb 8-1: Manufacturer: syz [ 616.101790][ T8870] usb 8-1: SerialNumber: syz [ 616.661981][ T8870] usb 8-1: 0:2 : does not exist [ 616.902227][T10310] loop9: detected capacity change from 0 to 65536 [ 617.145563][T10310] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 617.183491][T10310] XFS (loop9): Ending clean mount [ 617.202053][T10310] XFS (loop9): Quotacheck needed: Please wait. [ 617.239610][T10310] XFS (loop9): Quotacheck: Done. [ 617.956935][ T5988] usb 8-1: USB disconnect, device number 24 [ 618.175703][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1019'. [ 618.264962][ T9856] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 618.672988][ T6272] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 619.211281][ T6272] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 619.236649][ T6272] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.304727][ T6272] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.364721][ T9727] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 619.387650][ T6272] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 619.413601][ T6272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.523289][ T6272] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.604376][ T6272] usb 2-1: invalid MIDI out EP 0 [ 619.928084][T10118] udevd[10118]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.984663][ T6272] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 620.536150][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1025'. [ 622.196689][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 622.382649][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.593954][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.660806][ T30] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 622.773192][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1017'. [ 622.862706][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.882024][ T30] usb 9-1: config 0 descriptor?? [ 623.637779][T10393] loop8: detected capacity change from 0 to 512 [ 623.658265][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.665878][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.178444][T10393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.292843][ T30] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 624.300235][ T30] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 624.320298][ T30] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 624.331223][ T30] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 624.339143][ T30] hid-retrode 0003:0403:97C1.0011: unknown main item tag 0x0 [ 624.465309][ T24] usb 2-1: USB disconnect, device number 22 [ 624.571333][ T30] hid-retrode 0003:0403:97C1.0011: unbalanced collection at end of report description [ 624.584810][ T30] hid-retrode 0003:0403:97C1.0011: probe with driver hid-retrode failed with error -22 [ 625.639060][ T24] usb 9-1: USB disconnect, device number 2 [ 625.726360][ T9724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.174512][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1033'. [ 626.238759][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1032'. [ 627.347916][T10432] netlink: 'syz.7.1037': attribute type 4 has an invalid length. [ 627.791284][ T9302] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 628.080767][ T9302] usb 10-1: Using ep0 maxpacket: 32 [ 628.090377][ T9302] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 628.099226][ T9302] usb 10-1: config 0 has no interface number 0 [ 628.164851][ T9302] usb 10-1: config 0 interface 12 has no altsetting 0 [ 628.209999][ T9302] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 628.230853][ T9302] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.257070][ T9302] usb 10-1: Product: syz [ 628.284159][ T9302] usb 10-1: Manufacturer: syz [ 628.311184][ T9302] usb 10-1: SerialNumber: syz [ 628.349172][ T9302] usb 10-1: config 0 descriptor?? [ 630.435541][ T9302] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 630.495482][ T9302] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 630.590969][ T9302] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 630.615568][ T9302] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 630.770095][ T9302] usb 10-1: USB disconnect, device number 2 [ 631.129957][T10463] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 631.708584][T10463] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 632.060704][ T30] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 632.350006][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 632.368633][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 632.511096][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 632.556224][ T30] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.600123][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.790293][ T30] usb 8-1: Product: syz [ 633.130688][ T30] usb 8-1: Manufacturer: syz [ 633.135332][ T30] usb 8-1: SerialNumber: syz [ 633.168898][ T30] usb 8-1: config 0 descriptor?? [ 633.265100][ T30] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 633.269187][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 633.317182][ T30] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 634.043358][ T30] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 634.071708][ T30] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 634.722056][ T30] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 634.758405][ T30] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 634.780520][ T30] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 634.811169][ T30] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 634.820131][ T30] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 634.837268][ T30] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 634.877417][ T30] usb 8-1: USB disconnect, device number 25 [ 635.759692][ T9727] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 636.082708][ T31] audit: type=1326 audit(1765047106.798:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 636.282361][ T31] audit: type=1326 audit(1765047106.798:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 636.395712][ T31] audit: type=1326 audit(1765047106.798:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 637.087881][ T31] audit: type=1326 audit(1765047106.798:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 637.221044][ T31] audit: type=1326 audit(1765047106.798:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 637.767439][T10533] loop9: detected capacity change from 0 to 32768 [ 637.870203][ T31] audit: type=1326 audit(1765047106.798:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 637.872203][T10533] JBD2: Ignoring recovery information on journal [ 637.932500][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1062'. [ 638.000851][T10533] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 638.077763][ T31] audit: type=1326 audit(1765047106.798:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 638.223357][ T31] audit: type=1326 audit(1765047106.798:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 638.334314][ T31] audit: type=1326 audit(1765047106.798:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 638.487229][ T31] audit: type=1326 audit(1765047106.798:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10517 comm="syz.7.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2b38f749 code=0x7ffc0000 [ 638.573765][ T9856] ocfs2: Unmounting device (7,9) on (node local) [ 639.310724][ T5918] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 639.421140][ T8870] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 639.788666][ T8870] usb 10-1: Using ep0 maxpacket: 32 [ 639.801513][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.822473][ T8870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.838058][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.853009][ T8870] usb 10-1: config 0 has no interfaces? [ 639.859787][ T5918] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 640.663215][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.676281][ T8870] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 640.686924][ T8870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.695361][ T8870] usb 10-1: Product: syz [ 640.699621][ T8870] usb 10-1: Manufacturer: syz [ 640.704789][ T8870] usb 10-1: SerialNumber: syz [ 640.736778][ T5918] usb 8-1: config 0 descriptor?? [ 640.781762][ T8870] usb 10-1: config 0 descriptor?? [ 641.106517][ T8870] usb 10-1: USB disconnect, device number 3 [ 641.315919][T10577] loop7: detected capacity change from 0 to 512 [ 641.405873][T10577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.587104][ T5918] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 641.616729][ T5918] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 641.641685][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'. [ 641.680759][ T5918] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 641.730069][ T5918] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 641.750341][ T5918] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 641.776785][ T5918] hid-retrode 0003:0403:97C1.0012: unbalanced collection at end of report description [ 641.787345][T10585] bridge0: port 1(veth0_to_bond) entered blocking state [ 641.861412][ T5918] hid-retrode 0003:0403:97C1.0012: probe with driver hid-retrode failed with error -22 [ 641.887328][T10585] bridge0: port 1(veth0_to_bond) entered disabled state [ 641.993507][T10585] veth0_to_bond: entered allmulticast mode [ 642.527923][T10589] loop9: detected capacity change from 0 to 32768 [ 642.589995][T10585] veth0_to_bond: entered promiscuous mode [ 642.618989][T10589] JBD2: Ignoring recovery information on journal [ 642.686681][T10589] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 642.851381][ T10] usb 8-1: USB disconnect, device number 26 [ 643.132180][ T6346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.259721][ T9856] ocfs2: Unmounting device (7,9) on (node local) [ 644.798364][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1079'. [ 644.820826][T10620] loop8: detected capacity change from 0 to 4096 [ 646.292563][T10640] netlink: 'syz.5.1083': attribute type 2 has an invalid length. [ 647.331635][T10645] loop1: detected capacity change from 0 to 32768 [ 647.416553][T10645] JBD2: Ignoring recovery information on journal [ 647.467881][T10645] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 648.367843][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 651.424158][T10693] netlink: 'syz.5.1092': attribute type 4 has an invalid length. [ 651.506315][T10692] netlink: 'syz.5.1092': attribute type 4 has an invalid length. [ 651.580762][ T9302] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 651.772892][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1093'. [ 653.989756][ T9302] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 654.736954][ T9302] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.748043][ T9302] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.761042][ T9302] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.770320][ T9302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.086414][T10697] bridge_slave_1: left allmulticast mode [ 655.870754][T10697] bridge_slave_1: left promiscuous mode [ 655.876542][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.119377][T10697] bridge_slave_0: left allmulticast mode [ 656.193839][T10697] bridge_slave_0: left promiscuous mode [ 656.211260][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.697357][ T9302] usb 2-1: can't set config #27, error -110 [ 661.021503][ T30] usb 2-1: USB disconnect, device number 23 [ 661.196191][T10752] overlayfs: missing 'lowerdir' [ 661.318766][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 665.154749][T10771] overlayfs: missing 'lowerdir' [ 665.264098][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1108'. [ 667.782918][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 668.283950][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 668.322000][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 668.401485][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 668.484490][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 668.552028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.560401][ T10] usb 2-1: Product: syz [ 668.576474][ T10] usb 2-1: Manufacturer: syz [ 668.591437][ T10] usb 2-1: SerialNumber: syz [ 668.619574][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 668.793247][ T10] usb 2-1: config 0 descriptor?? [ 668.818466][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 668.832855][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 669.772905][T10796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.782248][T10796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.798734][T10796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.808249][T10796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.830890][T10796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.557383][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 671.663741][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 671.850761][ T9727] Bluetooth: hci2: command 0x0406 tx timeout [ 672.012053][T10807] netlink: 'syz.5.1114': attribute type 1 has an invalid length. [ 672.556389][ T9727] Bluetooth: hci6: command tx timeout [ 672.730837][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 672.743953][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 672.797123][ T10] usb 2-1: USB disconnect, device number 24 [ 672.825455][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 672.871370][ T10] em28xx 2-1:0.0: Freeing device [ 672.968946][T10807] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 673.337313][T10823] netlink: 'syz.1.1117': attribute type 2 has an invalid length. [ 674.600729][ T5847] Bluetooth: hci6: command tx timeout [ 674.637466][ T1335] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.532917][ T5816] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 676.700711][ T5847] Bluetooth: hci6: command tx timeout [ 677.480669][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 677.487486][ T5816] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 677.509967][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.542897][ T1335] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.577568][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.741084][ T5816] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.776001][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.800684][ T5816] usb 8-1: Product: syz [ 677.811981][ T5816] usb 8-1: Manufacturer: syz [ 677.842386][ T5816] usb 8-1: SerialNumber: syz [ 678.064021][ T1335] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.276982][ T5816] usb 8-1: 0:2 : does not exist [ 678.416111][ T1335] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.471195][T10795] chnl_net:caif_netlink_parms(): no params data found [ 678.761483][ T5847] Bluetooth: hci6: command tx timeout [ 679.424209][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.461513][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.494626][T10795] bridge_slave_0: entered allmulticast mode [ 679.497085][T10875] loop1: detected capacity change from 0 to 4096 [ 679.528327][T10795] bridge_slave_0: entered promiscuous mode [ 679.545188][ T1335] bridge_slave_1: left allmulticast mode [ 679.551437][ T1335] bridge_slave_1: left promiscuous mode [ 679.558362][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.574215][ T1335] bridge_slave_0: left allmulticast mode [ 679.580056][ T1335] bridge_slave_0: left promiscuous mode [ 679.586498][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.725174][T10881] netlink: 'syz.8.1128': attribute type 4 has an invalid length. [ 681.133885][T10884] netlink: 'syz.8.1128': attribute type 4 has an invalid length. [ 681.145359][ T5816] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 681.193599][T10875] ntfs3(loop1): ino=9, attr_set_size [ 681.287120][ T5816] usb 8-1: USB disconnect, device number 27 [ 681.587206][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1130'. [ 685.073087][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.090546][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.098794][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.145329][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.237447][ T1335] bond0 (unregistering): Released all slaves [ 685.293829][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.413455][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.448107][T10795] bridge_slave_1: entered allmulticast mode [ 685.482246][T10795] bridge_slave_1: entered promiscuous mode [ 685.954071][ T5847] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 685.962986][ T9302] libceph: connect (1)[c::]:6789 error -101 [ 685.995724][T10900] ceph: No mds server is up or the cluster is laggy [ 686.004313][ T9302] libceph: mon0 (1)[c::]:6789 connect error [ 686.221103][T10906] loop8: detected capacity change from 0 to 4096 [ 686.658309][T10913] loop1: detected capacity change from 0 to 65536 [ 686.693466][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.709528][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.752492][T10913] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 686.828318][T10906] ntfs3(loop8): ino=9, attr_set_size [ 686.849766][T10913] XFS (loop1): Ending clean mount [ 686.870798][T10913] XFS (loop1): Quotacheck needed: Please wait. [ 686.908866][T10913] XFS (loop1): Quotacheck: Done. [ 687.938172][T10926] netlink: 'syz.7.1137': attribute type 4 has an invalid length. [ 688.554853][T10795] team0: Port device team_slave_0 added [ 688.771031][T10795] team0: Port device team_slave_1 added [ 688.809247][ T1335] hsr_slave_0: left promiscuous mode [ 688.871905][ T1335] hsr_slave_1: left promiscuous mode [ 688.890747][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.909673][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.931582][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.934709][T10938] overlayfs: missing 'lowerdir' [ 688.970943][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.067296][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 689.077480][ T1335] veth1_macvtap: left promiscuous mode [ 689.090862][ T1335] veth0_macvtap: left promiscuous mode [ 689.105823][ T1335] veth1_vlan: left promiscuous mode [ 689.111849][ T1335] veth0_vlan: left promiscuous mode [ 691.541668][ T5826] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 691.923325][T10950] netlink: 'syz.7.1143': attribute type 2 has an invalid length. [ 692.311000][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 692.626440][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 692.961809][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 692.961833][ T31] audit: type=1326 audit(1765047163.678:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.038744][ T31] audit: type=1326 audit(1765047163.708:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.139790][ T31] audit: type=1326 audit(1765047163.728:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.339144][ T31] audit: type=1326 audit(1765047163.728:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.369926][ T31] audit: type=1326 audit(1765047163.728:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.951371][ T31] audit: type=1326 audit(1765047163.728:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.975287][ T31] audit: type=1326 audit(1765047163.728:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 693.997756][ T31] audit: type=1326 audit(1765047163.728:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 694.125878][ T31] audit: type=1326 audit(1765047163.728:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 694.183917][ T31] audit: type=1326 audit(1765047163.728:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.1.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b78f749 code=0x7ffc0000 [ 694.521474][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1145'. [ 694.735406][T10970] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 698.296368][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.324118][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.104654][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.144836][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.160787][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.418679][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.839522][T10795] hsr_slave_0: entered promiscuous mode [ 700.870552][T10795] hsr_slave_1: entered promiscuous mode [ 700.892636][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 700.909940][T10795] Cannot create hsr debugfs directory [ 702.029346][T11003] loop7: detected capacity change from 0 to 65536 [ 702.117665][T11003] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 702.192823][T11003] XFS (loop7): Ending clean mount [ 702.205650][T11003] XFS (loop7): Quotacheck needed: Please wait. [ 702.288270][T11003] XFS (loop7): Quotacheck: Done. [ 703.982572][T11022] overlayfs: missing 'lowerdir' [ 704.216800][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1150'. [ 707.735739][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'. [ 707.744721][T11038] veth0_to_bond: left allmulticast mode [ 707.750268][T11038] veth0_to_bond: left promiscuous mode [ 707.756105][T11038] bridge0: port 1(veth0_to_bond) entered disabled state [ 709.365043][ T6346] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 709.771288][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1160'. [ 711.489816][T11072] netlink: 'syz.8.1163': attribute type 4 has an invalid length. [ 711.571193][T11073] netlink: 'syz.8.1163': attribute type 4 has an invalid length. [ 712.390693][ T5988] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 712.568085][ T5988] usb 8-1: config 150 has an invalid interface number: 204 but max is 2 [ 712.601556][ T5988] usb 8-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 712.627759][ T5988] usb 8-1: config 150 has no interface number 0 [ 712.640667][ T5988] usb 8-1: config 150 interface 204 has no altsetting 0 [ 712.660395][ T5988] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 712.722049][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.813256][ T5988] usb 8-1: Product: syz [ 712.817442][ T5988] usb 8-1: Manufacturer: syz [ 712.855242][ T5988] usb 8-1: SerialNumber: syz [ 713.123047][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 713.130510][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 713.144347][ T5988] xr_serial 8-1:150.204: skipping garbage [ 713.152295][ T5988] xr_serial 8-1:150.204: xr_serial converter detected [ 713.190724][ T5988] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 713.205031][ T5988] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 713.262220][ T5988] usb 8-1: USB disconnect, device number 28 [ 713.277947][ T5988] xr_serial 8-1:150.204: device disconnected [ 713.828388][T10795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 713.884347][T10795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.010207][T10795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.121961][ T6014] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 714.261216][T10795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 714.338771][ T6014] usb 8-1: Using ep0 maxpacket: 32 [ 714.372778][ T6014] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 714.399939][ T6014] usb 8-1: config 0 has no interface number 0 [ 714.432670][ T6014] usb 8-1: config 0 interface 12 has no altsetting 0 [ 714.481115][ T6014] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 714.528166][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.557728][ T6014] usb 8-1: Product: syz [ 714.570018][ T6014] usb 8-1: Manufacturer: syz [ 714.584144][ T6014] usb 8-1: SerialNumber: syz [ 714.623669][ T6014] usb 8-1: config 0 descriptor?? [ 715.594295][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.628505][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.851687][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.858860][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.058336][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.065708][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.328305][T10795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.602104][ T6014] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 716.618279][ T6014] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 716.638525][ T6014] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 716.669633][ T6014] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 716.819037][ T6014] usb 8-1: USB disconnect, device number 29 [ 718.329199][T11136] netlink: 'syz.0.1170': attribute type 4 has an invalid length. [ 718.442658][T11137] netlink: 'syz.0.1170': attribute type 4 has an invalid length. [ 719.265812][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.572405][ T6014] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 719.743516][ T6014] usb 2-1: unable to get BOS descriptor or descriptor too short [ 719.767188][ T6014] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 719.836159][ T6014] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 719.882541][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 719.934374][ T6014] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 719.978257][ T6014] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 720.015758][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.046348][ T6014] usb 2-1: Product: syz [ 720.056623][ T6014] usb 2-1: Manufacturer: syz [ 720.076732][ T6014] usb 2-1: SerialNumber: syz [ 720.110262][ T6014] usb 2-1: config 0 descriptor?? [ 720.177832][T11148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.229202][T11148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.312515][ C0] usb 2-1: NFC: Urb failure (status -71) [ 720.329399][ C0] usb 2-1: NFC: Urb failure (status -71) [ 720.338194][ T6014] usb 2-1: NFC: Unable to get FW version [ 720.361761][ T6014] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71 [ 720.433624][T10795] veth0_vlan: entered promiscuous mode [ 720.503323][ T8357] usb 2-1: USB disconnect, device number 25 [ 720.517564][T10795] veth1_vlan: entered promiscuous mode [ 720.736671][T10795] veth0_macvtap: entered promiscuous mode [ 720.756999][T10795] veth1_macvtap: entered promiscuous mode [ 721.067283][T10795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.139870][T10795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.357951][ T6016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.404418][ T6016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.535144][ T6016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.672701][ T6016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.900737][ T6014] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 722.123320][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.137940][ T6014] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 722.209961][ T6014] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.218807][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.306958][ T6014] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.416267][T10212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.444164][ T6014] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 722.482064][T10212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.527203][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.638761][ T6014] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 722.678334][T11174] loop8: detected capacity change from 0 to 2048 [ 722.694067][ T6014] usb 2-1: invalid MIDI out EP 0 [ 723.047068][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1180'. [ 723.154353][T11188] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 724.155043][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 724.155077][ T31] audit: type=1800 audit(1765047194.808:196): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1179" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 725.658157][ T6014] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 726.732015][T11204] netlink: 'syz.5.1181': attribute type 1 has an invalid length. [ 727.338945][T11204] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 727.441764][ T8357] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 727.516209][T11031] udevd[11031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.666791][ T8357] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 727.748610][ T8357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.807824][ T8357] usb 3-1: Product: syz [ 727.813202][ T8357] usb 3-1: Manufacturer: syz [ 727.817827][ T8357] usb 3-1: SerialNumber: syz [ 728.579531][T11220] loop8: detected capacity change from 0 to 65536 [ 728.670724][ T5931] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 728.671043][ T8357] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 728.727697][T11220] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 728.783948][ T8357] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 728.811208][T11220] XFS (loop8): Ending clean mount [ 728.833531][ T8357] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 728.839672][T11220] XFS (loop8): Quotacheck needed: Please wait. [ 728.880016][ T5931] usb 8-1: Using ep0 maxpacket: 16 [ 728.891590][T11220] XFS (loop8): Quotacheck: Done. [ 728.903942][ T8357] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 728.962242][ T5931] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 728.994650][ T5931] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.069316][ T5931] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 729.110429][ T5931] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.167049][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.210774][ T5931] usb 8-1: Product: syz [ 729.219842][ T5931] usb 8-1: Manufacturer: syz [ 729.237647][ T6014] usb 2-1: USB disconnect, device number 26 [ 729.258196][ T5931] usb 8-1: SerialNumber: syz [ 729.468223][ T9724] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 729.599820][T11239] loop1: detected capacity change from 0 to 2048 [ 729.792301][ T5931] usb 8-1: 0:2 : does not exist [ 729.864777][T11246] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.879775][ T31] audit: type=1800 audit(1765047200.588:197): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1188" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 729.887291][ T24] usb 3-1: USB disconnect, device number 2 [ 731.017987][ T5931] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 731.677177][ T5931] usb 8-1: USB disconnect, device number 30 [ 731.766005][T11203] udevd[11203]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.384061][ T5931] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 732.621361][ T5931] usb 8-1: Using ep0 maxpacket: 16 [ 732.629663][ T5931] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 732.680976][ T8870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 732.700711][ T6014] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 732.861991][ T8870] usb 2-1: Using ep0 maxpacket: 16 [ 732.925212][ T5931] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.959970][ T6014] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 732.968985][ T8870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.988029][ T5931] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.017487][ T6014] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 733.030485][ T8870] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 733.049837][ T6014] usb 9-1: config 150 has no interface number 0 [ 733.059783][ T8870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.078972][ T5931] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.094188][ T6014] usb 9-1: config 150 interface 204 has no altsetting 0 [ 733.103997][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.114585][ T8870] usb 2-1: config 0 descriptor?? [ 733.162685][ T5931] usb 8-1: Product: syz [ 733.171954][ T6014] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 733.191201][ T5931] usb 8-1: Manufacturer: syz [ 733.195931][ T5931] usb 8-1: SerialNumber: syz [ 733.215786][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.245507][ T6014] usb 9-1: Product: syz [ 733.266570][ T6014] usb 9-1: Manufacturer: syz [ 733.280739][ T6014] usb 9-1: SerialNumber: syz [ 733.518870][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 733.528106][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 733.978286][T11280] loop2: detected capacity change from 0 to 65536 [ 733.991232][ T5931] usb 8-1: 0:2 : does not exist [ 733.997129][ T8870] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 734.055679][ T6014] xr_serial 9-1:150.204: skipping garbage [ 734.096970][T11280] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 734.135882][T11280] XFS (loop2): Ending clean mount [ 734.144283][T11280] XFS (loop2): Quotacheck needed: Please wait. [ 734.166295][ T6014] xr_serial 9-1:150.204: xr_serial converter detected [ 734.222253][ T6014] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 734.228697][ T6014] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 734.299252][T11280] XFS (loop2): Quotacheck: Done. [ 734.351803][ T6014] usb 9-1: USB disconnect, device number 3 [ 734.393217][ T6014] xr_serial 9-1:150.204: device disconnected [ 735.346901][ T5931] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 735.411382][ T6014] usb 2-1: USB disconnect, device number 27 [ 735.541041][ T5931] usb 8-1: USB disconnect, device number 31 [ 735.675100][T11203] udevd[11203]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.680861][T10795] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 736.354439][T11314] vivid-007: ================= START STATUS ================= [ 736.362557][T11314] vivid-007: FM Deviation: 75000 [ 736.388959][T11314] vivid-007: ================== END STATUS ================== [ 736.580777][ T5931] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 736.822941][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 736.850689][ T5931] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 736.972299][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 737.013669][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 737.025493][ T6014] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 737.060657][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 737.105315][ T5931] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 737.170664][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.200995][ T5931] usb 2-1: Product: syz [ 737.211891][ T5931] usb 2-1: Manufacturer: syz [ 737.222745][ T6014] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 737.250773][ T5931] usb 2-1: SerialNumber: syz [ 737.255620][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.283977][ T6014] usb 8-1: Product: syz [ 737.292606][ T5931] usb 2-1: config 0 descriptor?? [ 737.297772][ T6014] usb 8-1: Manufacturer: syz [ 737.311131][ T6014] usb 8-1: SerialNumber: syz [ 737.317014][T11312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 737.336453][T11312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 737.405188][ C0] usb 2-1: NFC: Urb failure (status -71) [ 737.413630][ C0] usb 2-1: NFC: Urb failure (status -71) [ 737.424228][ T5931] usb 2-1: NFC: Unable to get FW version [ 737.464817][ T5931] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71 [ 737.582414][ T6014] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 737.616961][ T24] usb 2-1: USB disconnect, device number 28 [ 737.664418][ T6014] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 737.715312][ T6014] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 737.795257][ T6014] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 739.952933][ T5988] usb 8-1: USB disconnect, device number 32 [ 742.972974][T11384] vivid-003: ================= START STATUS ================= [ 742.980858][T11384] vivid-003: FM Deviation: 75000 [ 742.985851][T11384] vivid-003: ================== END STATUS ================== [ 745.819358][T11408] loop7: detected capacity change from 0 to 2048 [ 746.000864][T11418] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 746.025099][ T31] audit: type=1800 audit(1765047216.738:198): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1218" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 746.525049][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.549084][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.971181][ T6007] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 754.260668][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 754.268399][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.669244][ T6007] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 754.791011][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.829840][ T6007] usb 3-1: config 0 descriptor?? [ 754.882083][T11494] loop8: detected capacity change from 0 to 2048 [ 755.050698][T11499] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.213782][ T31] audit: type=1800 audit(1765047225.878:199): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1226" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 755.379498][ T6007] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 756.653886][ T6272] usb 3-1: USB disconnect, device number 3 [ 757.375526][T11517] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 757.658816][T11518] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 764.825902][T11570] loop8: detected capacity change from 0 to 32768 [ 764.855637][T11570] JBD2: Ignoring recovery information on journal [ 764.905742][T11570] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 765.100676][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 766.552644][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.646272][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.825246][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 766.854666][ T9724] ocfs2: Unmounting device (7,8) on (node local) [ 767.023346][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.073662][ T24] usb 2-1: config 0 descriptor?? [ 767.722312][T11600] loop1: detected capacity change from 0 to 512 [ 767.978716][T11600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.354326][ T24] hid-retrode 0003:0403:97C1.0015: unknown main item tag 0x0 [ 768.402267][ T24] hid-retrode 0003:0403:97C1.0015: unknown main item tag 0x0 [ 768.450241][ T24] hid-retrode 0003:0403:97C1.0015: unknown main item tag 0x0 [ 768.503390][ T24] hid-retrode 0003:0403:97C1.0015: unknown main item tag 0x0 [ 768.711055][ T24] hid-retrode 0003:0403:97C1.0015: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 769.702094][ T8870] usb 2-1: USB disconnect, device number 29 [ 770.048497][T11612] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1249'. [ 770.057565][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1249'. [ 770.313395][T11609] fido_id[11609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 770.950097][T11621] loop7: detected capacity change from 0 to 32768 [ 770.988704][T11621] JBD2: Ignoring recovery information on journal [ 771.051044][T11621] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 771.159660][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.463561][ T6346] ocfs2: Unmounting device (7,7) on (node local) [ 776.352618][T11669] loop8: detected capacity change from 0 to 2048 [ 776.506088][T11676] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 776.574579][ T31] audit: type=1800 audit(1765047247.288:200): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1260" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 777.241631][ T5951] kworker/1:5 (5951) used greatest stack depth: 15224 bytes left [ 777.365245][T11684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'. [ 777.620467][T11682] loop8: detected capacity change from 0 to 4096 [ 778.175624][T11682] ntfs3(loop8): ino=9, attr_set_size [ 780.980695][ T5816] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 781.211760][ T5816] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 781.278003][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.368364][ T5816] usb 8-1: Product: syz [ 781.422440][ T5816] usb 8-1: Manufacturer: syz [ 781.512075][ T5816] usb 8-1: SerialNumber: syz [ 782.002671][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 782.100748][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 783.460041][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 783.921780][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 784.010968][T11739] loop1: detected capacity change from 0 to 2048 [ 784.068805][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 784.332578][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 784.635930][ T5816] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 784.862960][ T5816] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 785.127606][T11747] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 785.181864][ T5816] usb 8-1: USB disconnect, device number 33 [ 785.272428][ T31] audit: type=1800 audit(1765047255.988:201): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1274" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 785.661182][T11750] loop7: detected capacity change from 0 to 4096 [ 786.967767][T11750] ntfs3(loop7): ino=9, attr_set_size [ 787.261780][T11750] fuse: Unknown parameter '0xffffffffffffffff184467440737095516150000000000000000000000000000000000000000' [ 788.932633][T11756] loop2: detected capacity change from 0 to 32768 [ 788.990178][T11756] JBD2: Ignoring recovery information on journal [ 789.041393][T11756] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 789.636133][T10795] ocfs2: Unmounting device (7,2) on (node local) [ 789.844779][ T8357] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 790.063802][ T8357] usb 2-1: Using ep0 maxpacket: 16 [ 790.084821][ T8357] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 790.116154][ T8357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.137660][ T8357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.335815][ T8357] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.377080][ T8357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.398986][ T8357] usb 2-1: Product: syz [ 790.403468][ T8357] usb 2-1: Manufacturer: syz [ 790.413421][ T8357] usb 2-1: SerialNumber: syz [ 791.070920][ T8357] usb 2-1: 0:2 : does not exist [ 792.839201][ T24] usb 2-1: USB disconnect, device number 30 [ 793.195023][T11815] loop1: detected capacity change from 0 to 2048 [ 793.315130][T11816] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 793.420683][ T31] audit: type=1800 audit(1765047264.108:202): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1290" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 794.775247][ T9727] Bluetooth: hci6: command 0x0406 tx timeout [ 795.043557][T11832] loop1: detected capacity change from 0 to 128 [ 795.459646][T11836] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 796.044933][T11836] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 805.465805][ T8357] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 805.680702][ T6460] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 805.690138][ T8357] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 805.719499][ T8357] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 805.745819][ T8357] usb 3-1: config 150 has no interface number 0 [ 805.833398][ T8357] usb 3-1: config 150 interface 204 has no altsetting 0 [ 805.874905][ T6460] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 805.887380][ T8357] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 805.924248][ T6460] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 805.941201][ T8357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.974606][ T6460] usb 2-1: config 150 has no interface number 0 [ 805.982431][ T8357] usb 3-1: Product: syz [ 805.986600][ T8357] usb 3-1: Manufacturer: syz [ 806.018181][ T6460] usb 2-1: config 150 interface 204 has no altsetting 0 [ 806.031825][ T8357] usb 3-1: SerialNumber: syz [ 806.046353][ T6460] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 806.069183][ T6460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.160051][ T6460] usb 2-1: Product: syz [ 806.173704][ T6460] usb 2-1: Manufacturer: syz [ 806.200671][ T6460] usb 2-1: SerialNumber: syz [ 806.271019][ T8357] xr_serial 3-1:150.204: skipping garbage [ 806.582893][ T8357] xr_serial 3-1:150.204: xr_serial converter detected [ 806.601299][ T6460] xr_serial 2-1:150.204: skipping garbage [ 806.615358][ T6460] xr_serial 2-1:150.204: xr_serial converter detected [ 806.851969][ T8357] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 806.880840][ T8357] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 806.900753][ T8357] usb 3-1: USB disconnect, device number 4 [ 806.908651][ T8357] xr_serial 3-1:150.204: device disconnected [ 807.205661][ T6460] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 807.221417][ T6460] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 807.252112][ T6460] usb 2-1: USB disconnect, device number 31 [ 807.271927][ T6460] xr_serial 2-1:150.204: device disconnected [ 807.611762][T11968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1321'. [ 807.966262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.973687][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.180778][ T8357] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 810.430953][ T8357] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 810.549558][ T8357] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 810.595029][ T8357] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 811.359869][ T8357] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.456632][ T8357] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.493775][ T8357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.495994][T12012] loop8: detected capacity change from 0 to 256 [ 811.636688][ T8357] usb 8-1: config 0 descriptor?? [ 811.678480][T12012] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 812.182187][ T8357] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 813.277457][T12030] loop2: detected capacity change from 0 to 32768 [ 813.354322][T12030] JBD2: Ignoring recovery information on journal [ 813.477145][T12030] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 813.509561][T12027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.577849][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.708297][T12037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.726109][T12035] loop1: detected capacity change from 0 to 2048 [ 813.745699][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.950802][T12040] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.023489][ T31] audit: type=1800 audit(1765047284.738:203): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1335" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 814.191795][ T5986] usb 8-1: USB disconnect, device number 34 [ 814.216348][T10795] ocfs2: Unmounting device (7,2) on (node local) [ 815.260805][ T5986] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 815.687380][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 815.947922][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.120639][ T5986] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.195842][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.326805][ T5986] usb 2-1: config 0 descriptor?? [ 817.323885][T12067] loop7: detected capacity change from 0 to 32768 [ 817.344794][ T5986] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 817.385570][T12067] JBD2: Ignoring recovery information on journal [ 817.626732][T12067] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 817.731159][ T5986] usb 2-1: USB disconnect, device number 32 [ 817.942800][T12076] loop2: detected capacity change from 0 to 512 [ 818.053352][T12076] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1344: iget: bad extended attribute block 1 [ 818.085943][T12076] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1344: couldn't read orphan inode 15 (err -117) [ 818.175246][T12076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.311943][ T6346] ocfs2: Unmounting device (7,7) on (node local) [ 819.037094][T12087] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 13: comm syz.2.1344: lblock 0 mapped to illegal pblock 13 (length 1) [ 819.125756][T12087] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.2.1344: error -117 reading directory block [ 820.315794][T10795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.670976][ T5816] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 821.821201][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 821.853160][ T5816] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 821.879242][ T5816] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.905011][ T5816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.947106][ T5816] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 821.979413][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.998425][ T5816] usb 8-1: Product: syz [ 822.016372][ T5816] usb 8-1: Manufacturer: syz [ 822.035301][ T5816] usb 8-1: SerialNumber: syz [ 822.917234][ T5816] usb 8-1: 0:2 : does not exist [ 823.261484][ T6014] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 823.358156][ T5986] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 823.941274][T12127] loop1: detected capacity change from 0 to 32768 [ 823.973105][ T5816] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 824.032387][ T6014] usb 9-1: Using ep0 maxpacket: 16 [ 824.064313][ T6014] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.064907][ T5816] usb 8-1: USB disconnect, device number 35 [ 824.085268][T12127] JBD2: Ignoring recovery information on journal [ 824.108902][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 824.114309][ T6014] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.130650][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.152129][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.172376][ T5986] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 824.183420][T12127] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 824.208166][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.217259][ T6014] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 824.303243][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.314170][ T5986] usb 3-1: config 0 descriptor?? [ 824.400660][ T6014] usb 9-1: Product: syz [ 824.470834][ T6014] usb 9-1: Manufacturer: syz [ 824.475519][ T6014] usb 9-1: SerialNumber: syz [ 824.654303][ T6014] usb 9-1: config 0 descriptor?? [ 824.951163][ T5986] ft260 0003:0403:6030.0018: unknown main item tag 0x7 [ 824.973804][T12135] netlink: 'syz.5.1361': attribute type 4 has an invalid length. [ 824.983103][T12135] netlink: 'syz.5.1361': attribute type 4 has an invalid length. [ 825.041596][ T5986] ft260 0003:0403:6030.0018: chip code: 6424 8183 [ 825.150080][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 825.249026][ T5986] ft260 0003:0403:6030.0018: failed to retrieve system status [ 825.282053][ T5986] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -32 [ 825.358988][ T5986] usb 3-1: USB disconnect, device number 5 [ 825.903904][T12141] vivid-005: ================= START STATUS ================= [ 825.963154][T12141] vivid-005: FM Deviation: 75000 [ 825.968165][T12141] vivid-005: ================== END STATUS ================== [ 826.125152][ T8870] usb 9-1: USB disconnect, device number 4 [ 830.610414][T12173] loop7: detected capacity change from 0 to 2048 [ 830.745538][T12178] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.821423][ T31] audit: type=1800 audit(1765047301.538:204): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1371" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 831.366920][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 831.376425][T12184] bridge_slave_1: left allmulticast mode [ 831.382486][T12184] bridge_slave_1: left promiscuous mode [ 831.389129][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.477430][ T8357] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 831.687943][T12184] bridge_slave_0: left allmulticast mode [ 831.693857][T12184] bridge_slave_0: left promiscuous mode [ 831.700196][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.029291][ T8357] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 832.147975][ T8357] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.284304][ T8357] usb 9-1: Product: syz [ 832.339236][ T8357] usb 9-1: Manufacturer: syz [ 832.422654][ T8357] usb 9-1: SerialNumber: syz [ 833.342396][ T8357] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 833.463558][ T8357] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 833.974595][ T8357] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 834.202770][ T8357] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 834.443098][ T8357] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 834.674261][ T8357] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 835.088796][ T8357] usb 9-1: USB disconnect, device number 5 [ 835.173184][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 835.300466][T12192] loop7: detected capacity change from 0 to 2048 [ 835.361624][T12199] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.418405][ T31] audit: type=1800 audit(1765047306.128:205): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1375" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 835.600840][ T8357] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 836.377725][ T8357] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 836.401123][ T8357] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.409372][ T8357] usb 9-1: Product: syz [ 836.420208][ T8357] usb 9-1: Manufacturer: syz [ 836.425351][ T8357] usb 9-1: SerialNumber: syz [ 836.458695][ T8357] usb 9-1: config 0 descriptor?? [ 836.474776][ T8357] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 836.560847][ T6460] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 836.572635][ T8357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 836.585246][ T8357] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 836.606201][ T8357] usb 9-1: media controller created [ 836.705654][ T8357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.728297][T12198] dvb-usb: bulk message failed: -22 (7/0) [ 836.735583][ T6460] usb 3-1: Using ep0 maxpacket: 16 [ 836.748656][ T6460] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 836.831857][ T6460] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.885020][ T6460] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.942311][ T6460] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 836.975448][ T6460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.994741][ T6460] usb 3-1: Product: syz [ 836.999022][ T6460] usb 3-1: Manufacturer: syz [ 837.004874][ T6460] usb 3-1: SerialNumber: syz [ 837.095505][ T8357] DVB: Unable to find symbol mt352_attach() [ 837.349058][ T8357] DVB: Unable to find symbol nxt6000_attach() [ 837.367123][ T8357] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 837.433580][ T8357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 837.448585][ T6460] usb 3-1: 0:2 : does not exist [ 837.536804][ T8357] dvb-usb: schedule remote query interval to 1000 msecs. [ 837.559988][ T8357] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 837.588215][ T8357] dvb-usb: bulk message failed: -22 (7/0) [ 837.625970][ T8357] dvb-usb: bulk message failed: -22 (7/0) [ 837.694395][ T8357] usb 9-1: USB disconnect, device number 6 [ 837.986548][ T8357] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 838.305698][ T6460] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 838.407498][ T6460] usb 3-1: USB disconnect, device number 6 [ 839.790873][ T8357] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 840.121105][ T6006] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 840.135616][ T8357] usb 2-1: Using ep0 maxpacket: 16 [ 840.144207][ T8357] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 840.170605][ T8357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 840.303546][ T8357] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.335530][ T8357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.362735][ T8357] usb 2-1: Product: syz [ 840.396423][ T8357] usb 2-1: Manufacturer: syz [ 840.414226][ T6006] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 840.426907][ T8357] usb 2-1: SerialNumber: syz [ 840.440700][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.476516][ T8357] usb 2-1: config 0 descriptor?? [ 840.495725][ T6006] usb 3-1: Product: syz [ 840.524279][ T6006] usb 3-1: Manufacturer: syz [ 840.573184][ T8357] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 840.589030][ T6006] usb 3-1: SerialNumber: syz [ 840.642527][ T8357] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 841.047544][ T6006] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 841.100137][ T6006] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 841.172247][ T8357] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 841.349494][ T8357] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 841.788189][ T6006] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 841.910277][ T6006] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 842.009366][ T8357] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 842.069542][ T6006] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 842.082463][ T8357] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 842.092234][ T6006] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 842.103206][ T8357] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 842.116157][ T8357] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 842.171107][ T8357] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 842.212380][ T8357] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 842.289290][ T8357] usb 2-1: USB disconnect, device number 33 [ 843.581319][ T5986] usb 3-1: USB disconnect, device number 7 [ 869.407830][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.415337][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 952.130502][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 952.137483][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11780/1:b..l [ 952.146087][ C0] rcu: (detected by 0, t=10502 jiffies, g=67137, q=2205 ncpus=2) [ 952.153884][ C0] task:udevd state:R running task stack:25688 pid:11780 tgid:11780 ppid:5195 task_flags:0x400140 flags:0x00080000 [ 952.168941][ C0] Call Trace: [ 952.172217][ C0] [ 952.175140][ C0] __schedule+0x14bc/0x5000 [ 952.179672][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.185310][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 952.190609][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 952.195813][ C0] ? __pfx___schedule+0x10/0x10 [ 952.200663][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 952.205601][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 952.210881][ C0] preempt_schedule_irq+0xb5/0x150 [ 952.215984][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 952.221694][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.227316][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 952.232248][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.237876][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 952.243684][ C0] irqentry_exit+0x5d8/0x660 [ 952.248276][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 952.254244][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 952.259522][ C0] Code: c7 c7 60 6d f4 8d e8 6f b8 1d 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 60 72 d2 10 e8 db 9f a7 09 89 [ 952.279121][ C0] RSP: 0018:ffffc9000e61f7f0 EFLAGS: 00000202 [ 952.285184][ C0] RAX: 0000000000000001 RBX: ffffffff9024af01 RCX: ffff88807d67bd00 [ 952.293147][ C0] RDX: ffffc9000e61f901 RSI: dffffc0000000000 RDI: ffffc9000e61f8d0 [ 952.301105][ C0] RBP: dffffc0000000000 R08: ffffc9000e61fdf0 R09: ffffc9000e61f918 [ 952.309084][ C0] R10: dffffc0000000000 R11: fffff52001cc3f25 R12: ffffc9000e61fe00 [ 952.317043][ C0] R13: ffffc9000e618000 R14: ffffc9000e61f8c8 R15: ffffffff8173ff45 [ 952.325000][ C0] ? unwind_next_frame+0xa5/0x2390 [ 952.330117][ C0] unwind_next_frame+0x1965/0x2390 [ 952.335223][ C0] ? unwind_next_frame+0xa5/0x2390 [ 952.340325][ C0] ? do_utimes+0x131/0x2a0 [ 952.344738][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.350887][ C0] arch_stack_walk+0x11c/0x150 [ 952.355652][ C0] ? __x64_sys_utimensat+0x14f/0x230 [ 952.360963][ C0] stack_trace_save+0x9c/0xe0 [ 952.365643][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 952.371008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.376640][ C0] kasan_save_track+0x3e/0x80 [ 952.381306][ C0] ? kasan_save_track+0x3e/0x80 [ 952.386141][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 952.391155][ C0] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 952.396779][ C0] ? getname_flags+0xb8/0x540 [ 952.401440][ C0] ? user_path_at+0x24/0x60 [ 952.405935][ C0] ? do_utimes+0x131/0x2a0 [ 952.410379][ C0] ? getname_flags+0xb8/0x540 [ 952.415051][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.420677][ C0] __kasan_slab_alloc+0x6c/0x80 [ 952.425522][ C0] kmem_cache_alloc_noprof+0x37d/0x710 [ 952.430979][ C0] ? getname_flags+0xb8/0x540 [ 952.435662][ C0] getname_flags+0xb8/0x540 [ 952.440158][ C0] user_path_at+0x24/0x60 [ 952.444483][ C0] do_utimes+0x131/0x2a0 [ 952.448727][ C0] ? __pfx_do_utimes+0x10/0x10 [ 952.453498][ C0] __x64_sys_utimensat+0x14f/0x230 [ 952.458653][ C0] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 952.464294][ C0] ? do_syscall_64+0xbe/0xf80 [ 952.468993][ C0] do_syscall_64+0xfa/0xf80 [ 952.473503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.479229][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.485307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.491195][ C0] RIP: 0033:0x7f8131b15a1a [ 952.495595][ C0] RSP: 002b:00007ffc89be7758 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 952.503994][ C0] RAX: ffffffffffffffda RBX: 0000000000006180 RCX: 00007f8131b15a1a [ 952.511949][ C0] RDX: 0000000000000000 RSI: 000055d969372430 RDI: 00000000ffffff9c [ 952.519904][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055d96937f1d0 [ 952.527868][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.535834][ C0] R13: 0000000000000000 R14: 000055d969372430 R15: 000055d969389e00 [ 952.543808][ C0] [ 952.546814][ C0] rcu: rcu_preempt kthread starved for 10294 jiffies! g67137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 952.557995][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 952.567957][ C0] rcu: RCU grace-period kthread stack dump: [ 952.573834][ C0] task:rcu_preempt state:R running task stack:26288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 952.587322][ C0] Call Trace: [ 952.590587][ C0] [ 952.593509][ C0] __schedule+0x14bc/0x5000 [ 952.598031][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.603650][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 952.609534][ C0] ? __pfx___schedule+0x10/0x10 [ 952.614382][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.620008][ C0] ? schedule+0x91/0x360 [ 952.624241][ C0] schedule+0x165/0x360 [ 952.628389][ C0] schedule_timeout+0x12b/0x270 [ 952.633237][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 952.638595][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 952.644478][ C0] ? __pfx_process_timeout+0x10/0x10 [ 952.649763][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.655384][ C0] ? prepare_to_swait_event+0x341/0x380 [ 952.660935][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 952.665790][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 952.671937][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 952.677206][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 952.682405][ C0] ? finish_swait+0xcd/0x1f0 [ 952.686997][ C0] rcu_gp_kthread+0x99/0x390 [ 952.691585][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 952.696781][ C0] ? __kthread_parkme+0x7b/0x200 [ 952.701706][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.707324][ C0] ? __kthread_parkme+0x1a1/0x200 [ 952.712341][ C0] kthread+0x711/0x8a0 [ 952.716404][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 952.721591][ C0] ? __pfx_kthread+0x10/0x10 [ 952.726191][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.731816][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.737008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.742633][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 952.747824][ C0] ? __pfx_kthread+0x10/0x10 [ 952.752415][ C0] ret_from_fork+0x599/0xb30 [ 952.757000][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 952.762104][ C0] ? __switch_to_asm+0x39/0x70 [ 952.766884][ C0] ? __switch_to_asm+0x33/0x70 [ 952.771642][ C0] ? __pfx_kthread+0x10/0x10 [ 952.776232][ C0] ret_from_fork_asm+0x1a/0x30 [ 952.781016][ C0] [ 952.784029][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 952.790328][ C0] Sending NMI from CPU 0 to CPUs 1: [ 952.795527][ C1] NMI backtrace for cpu 1 [ 952.795544][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 952.795567][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 952.795581][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 952.795616][ C1] Code: ce 73 c1 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 19 00 f3 0f 1e fa fb f4 a3 73 c1 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 952.795635][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 952.795654][ C1] RAX: 7058c95b621ad400 RBX: ffffffff81974b6a RCX: 7058c95b621ad400 [ 952.795681][ C1] RDX: 0000000000000001 RSI: ffffffff8d7831da RDI: ffffffff8bc00c60 [ 952.795697][ C1] RBP: ffffc90000197f10 R08: ffff8880b89336db R09: 1ffff110171266db [ 952.795713][ C1] R10: dffffc0000000000 R11: ffffed10171266dc R12: ffffffff8f815070 [ 952.795730][ C1] R13: 1ffff1100395cb70 R14: 0000000000000001 R15: 0000000000000001 [ 952.795746][ C1] FS: 0000000000000000(0000) GS:ffff888126184000(0000) knlGS:0000000000000000 [ 952.795764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.795779][ C1] CR2: 000055556e07e588 CR3: 000000001f340000 CR4: 0000000000350ef0 [ 952.795797][ C1] Call Trace: [ 952.795805][ C1] [ 952.795813][ C1] default_idle+0x13/0x20 [ 952.795845][ C1] default_idle_call+0x73/0xb0 [ 952.795879][ C1] do_idle+0x1ea/0x520 [ 952.795902][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 952.795928][ C1] ? irqentry_exit+0x5ba/0x660 [ 952.795960][ C1] ? __pfx_do_idle+0x10/0x10 [ 952.795995][ C1] cpu_startup_entry+0x44/0x60 [ 952.796020][ C1] start_secondary+0x101/0x110 [ 952.796054][ C1] common_startup_64+0x13e/0x147 [ 952.796092][ C1]