last executing test programs: 13m42.084225228s ago: executing program 3 (id=462): dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) symlinkat(&(0x7f0000000040)='./file1\x00', r5, &(0x7f00000000c0)='./file1\x00') setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r5) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 13m37.079664751s ago: executing program 3 (id=484): memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901mEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\xc3\x82oAi\xa0\xc9\x06\x0f\x02[E\x19{\xd6V\xda\x1b\xad|\xb5\xd1\x8f$\xe7,[\xca\xcc\xebG$d\xec\xdc\xa9U-r\xf6C\x9e\x80\xa3\x86l/\x0f\x19\xe3K$4H\xd4\xec|\x94sQ\xd3J\xd5\xa90\x1e8\xd2v4,d|\xf1\xa4f\xcc\v\xb9!\xdc\x8c\xf61d\x1dk\xbe{5Y\xad&\x06\xe5\x19\x121\xff\xf6_\xe3+~\xde\xe3\xef\x83\xe8\x1f{t\xafv\xb0,\xd35\xcd&8!;\vz\xa3_\xaf\xe5\xb9\xa4\xcd4<\xc8\xd8\x01!\xac\xb4(\"\xc2\xc2\x13\xb3\" \x1b', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4606ff7fa33d0200000000000003003e00c9000000c6030000000000004000000000000000ea020000000000"], 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa0100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000040) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 13m36.870924861s ago: executing program 3 (id=485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x578386f9}) fcntl$lock(r0, 0x24, &(0x7f0000000340)={0x0, 0x2, 0x201}) 13m36.720603769s ago: executing program 3 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 13m36.584372416s ago: executing program 3 (id=488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @private2, 0xb}, 0x1c) 13m36.130621829s ago: executing program 3 (id=489): syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f0000001300)="$eJzs3EtvG9UXAPDjpGnTx7//CLFg15EqpESqrTpNKtgFaMVDpIoKLFiBYzuWW9sTxY4TsmLBErHgmyCQWLHkM7BgzQ6xALFDAnlmAg0PqSh+0Ob3k8Zn7vX1mXOtqtKZiRzAmbWU/PxjKa7GxYiYj4grEdl5qTgyG3l4LiKuRcTcI0epmP994nxEXIqIq6Pkec5S8danN4bX139446evvrlw7vJnX347u10Ds/Z8RHR38/ODbh7TVh4fFPO1YTuL3bVhEfM3ug+LcZrHg+Z2luGgdryulsVbrXx9urvfH8WdTq0+iq32Tja/28sv2B+2jvNkH3hQ28vGjeZ2Ftv9NIuto7yuw6P8/7aj/iDP0yjyfZClj8HgOObzzcNmvp/dh1ms9wbFfJ43bTQPR3FYxOJyUU87jayO7dN80/9tb7Z7+4fJsLnXb6e9ZL1SfaFSvV2u7qWN5qC5Vq51G7fXkuVWZ7SsPGjWuhutNG11mpV62l1Jllv1erlaTZbvNLfbtV5SrVZuVW6W11eKsxvJq/feSTqNZHkUX2739gftTj/ZSfeS/BMrlyPixZXkejV5a3Mr2bp/9+7m1tvv3Xn33kubr79SLPpLWcny6s3V1XL1Znm1ujLB/S/GxPefrFZuPfb+PyqKHuP+4VRKsy4A4Mmj/wdmYXL9/979iMn3/6H/H4tZ9///qv+ddv9/BvYPp6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4s75b+Py17GQpH18u5v9XTD1TjEsRMRcRv/6N+Th/Iud8kWfhH9Yv/KmGr0uRZRhd40JxXIqIjeL45f+T/hYAAADg6fXFh9c+ybv1/GVp1gUxTflNm7kr748p32JELCx9P6Zsc6OXZ8eULPv3fS4Ox5Qtu4G1OKZk+S23c+PK9ljmT4TFR0IpD3NTLQcAAJiKk53AdLsQAAAApunjWRfAbJTi+FHm8bPg7C/v/3ggePHECAAAAHgClWZdAAAAADBxWf/v9/8AAADg6Zb//h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7FzP7eJA1EcgJ8NXtj/aLX3bWVvUMaWsMc9riggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yQzjGV+PCN8mBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6dFetFzf/f121zdnt28lzNwAAAMAl22q9qN/MUv9zc/5rc+pH0y8iooyIS2P3UXw4yxw1OdXz9den11cvariNqBMO3zFpjk8R8bs5Hr53/SsAAADA+7VZruZptJ5eZkMXRJ/SpE355U+mvCIiqtl9prTykPczU1j9/x7Hv0xp9QTWt0xhacptnCvtVerH/ThrNz1pitSUFz92LHLaeYUAAEB+o7Om31EIAAAAffo7dAEMo4inpczjUuAkNc3y3sezHgAAAPAGFUMXAAAAAHSuHv/3tP/f3v5/AAAAMIy0/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd2lbrxWa5mrfN2e3byXM3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/NykQwkAQRmvG/53k/oeVAj2DCO9B4EuaXgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdJ+cTU6O3Ocm/sfR5JFk7amwdNfYuNI4ujLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH8zs7O1VXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+DzknkEu85bCHCJ6VmZ3JTn6A66+ZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0ensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QXN4Jh/b/X6l3mjMn7o6fR953Q2h1m84IAACA0+yJomXF/q/p+sJHP114v23/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/gwAAP///ls9vA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x52) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 13m35.837432484s ago: executing program 32 (id=489): syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f0000001300)="$eJzs3EtvG9UXAPDjpGnTx7//CLFg15EqpESqrTpNKtgFaMVDpIoKLFiBYzuWW9sTxY4TsmLBErHgmyCQWLHkM7BgzQ6xALFDAnlmAg0PqSh+0Ob3k8Zn7vX1mXOtqtKZiRzAmbWU/PxjKa7GxYiYj4grEdl5qTgyG3l4LiKuRcTcI0epmP994nxEXIqIq6Pkec5S8danN4bX139446evvrlw7vJnX347u10Ds/Z8RHR38/ODbh7TVh4fFPO1YTuL3bVhEfM3ug+LcZrHg+Z2luGgdryulsVbrXx9urvfH8WdTq0+iq32Tja/28sv2B+2jvNkH3hQ28vGjeZ2Ftv9NIuto7yuw6P8/7aj/iDP0yjyfZClj8HgOObzzcNmvp/dh1ms9wbFfJ43bTQPR3FYxOJyUU87jayO7dN80/9tb7Z7+4fJsLnXb6e9ZL1SfaFSvV2u7qWN5qC5Vq51G7fXkuVWZ7SsPGjWuhutNG11mpV62l1Jllv1erlaTZbvNLfbtV5SrVZuVW6W11eKsxvJq/feSTqNZHkUX2739gftTj/ZSfeS/BMrlyPixZXkejV5a3Mr2bp/9+7m1tvv3Xn33kubr79SLPpLWcny6s3V1XL1Znm1ujLB/S/GxPefrFZuPfb+PyqKHuP+4VRKsy4A4Mmj/wdmYXL9/979iMn3/6H/H4tZ9///qv+ddv9/BvYPp6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4s75b+Py17GQpH18u5v9XTD1TjEsRMRcRv/6N+Th/Iud8kWfhH9Yv/KmGr0uRZRhd40JxXIqIjeL45f+T/hYAAADg6fXFh9c+ybv1/GVp1gUxTflNm7kr748p32JELCx9P6Zsc6OXZ8eULPv3fS4Ox5Qtu4G1OKZk+S23c+PK9ljmT4TFR0IpD3NTLQcAAJiKk53AdLsQAAAApunjWRfAbJTi+FHm8bPg7C/v/3ggePHECAAAAHgClWZdAAAAADBxWf/v9/8AAADg6Zb//h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7FzP7eJA1EcgJ8NXtj/aLX3bWVvUMaWsMc9riggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yQzjGV+PCN8mBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6dFetFzf/f121zdnt28lzNwAAAMAl22q9qN/MUv9zc/5rc+pH0y8iooyIS2P3UXw4yxw1OdXz9den11cvariNqBMO3zFpjk8R8bs5Hr53/SsAAADA+7VZruZptJ5eZkMXRJ/SpE355U+mvCIiqtl9prTykPczU1j9/x7Hv0xp9QTWt0xhacptnCvtVerH/ThrNz1pitSUFz92LHLaeYUAAEB+o7Om31EIAAAAffo7dAEMo4inpczjUuAkNc3y3sezHgAAAPAGFUMXAAAAAHSuHv/3tP/f3v5/AAAAMIy0/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd2lbrxWa5mrfN2e3byXM3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/NykQwkAQRmvG/53k/oeVAj2DCO9B4EuaXgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdJ+cTU6O3Ocm/sfR5JFk7amwdNfYuNI4ujLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH8zs7O1VXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+DzknkEu85bCHCJ6VmZ3JTn6A66+ZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0ensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QXN4Jh/b/X6l3mjMn7o6fR953Q2h1m84IAACA0+yJomXF/q/p+sJHP114v23/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/gwAAP///ls9vA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x52) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 12m44.502361666s ago: executing program 5 (id=666): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x4e20, 0x7, @empty}}}, 0x88) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) 12m42.724586176s ago: executing program 5 (id=676): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xc, "5e6424818327b2369deca65e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "4d6bd4"}, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x50, 0x80, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x0, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x64, 0x2, 0x7, 0x1, 0x3, 0x1b, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x80, 0x6, 0x6}}}}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 12m41.430429961s ago: executing program 5 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x100) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010b968cc1e2147000600000000002000000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 12m40.109351458s ago: executing program 5 (id=685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x12, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$eJzs3U2MW0cBAOCxd73JJilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOEAgcRXvjNee2H22s+tnx98njcfz5j3PvOfn5/c7E4CpVW2+Li8vVEK4+PrLR//x4N/nbw451Bqj3nydbUvVQgiVmJ7NPu/dmZX4+nsvnOwWV8JS8zWlwxNXW9NuDiGcC7vDpVAPOy9efunNpcePnz92Yc9brxy8sj5zDwAA0+Xrlw4u7/jrn+/ddu3V+w6HDa3haf+8HtNb4n7/4bjjn/b/q6EzXWkL7eay8WZjqM53jjfTZbz2cmrZeLM9yp/Lyq/1GG9D+ODyZ9qGdZtvmGRpPa6HSnWxI12tLi6uHJOH5nH9XGXx7OkzzzxXUkWBNffv+0MIu9vCkQud6XELh8agDkOGxhjUYSLD4dGVda2xovR5HlFobC17CwSwIr9eeItz+ZmF29P6tNn+yr/6WLX79LAGRr3+D1T+XMnlB+X/5rwtDmvnTl2b0nyl39GWmM6vI+T3L/X+/eVXOjqH5tcjan3Ws9d1hEm5vtCrnjMjrsewetU/Xy/uVF+OcVoOX8ny238/+Xc6Kd8x0N1/8vP/giCMdwgd6drtfFaj5O0PML7y++Ya6fpolN/Xl+dvKMjfWJA/X5C/qSB/c0E+TLPfff+n4cXK6nF+fkw/6PnwdJ7trhh/aMD65OcjBy0/v+93ULdbfn4/MYyzP5x48tQXnn7q8sr9/5XW+n8jru/pcKMef1uX4gjpfGF+Xr1173+9s5xqj/HuzupzV5fxm++3d45X2b76OaFtO3NLPRY6p9vaa7xdnePVs/HmY9iY1TffP9mUTZf2P9J2NS2v2Wx+a9l8zGX1SNuVbTHO6wHDSOtjr/v/0/q5EGqVZ06fOfVoTKf19E8ztQ03h+8bcb2B29fv8z8LofP5ny2t4bVq+3Zh6+rwysp24bX4eZ3Dl1rldA7fH9Ppf+5bM/PN4Ysnv3vm6bWffZhqz/3o+W+fOHPm1Pe8GfrNV8ejGoO8SYct41Ifb8buTckbJmDd7f3xyk7AI6e/c+LZU8+eOrv/wIH9S0sHvrh/eW9zv35v+959u3Ml1BZYS6t/+mXXBAAAAAAAAAAAAOjXD44dvfz2G59/Z+X5/9Xn/9Lz/+nO3/T8/0+y5//z5+TTc/DpOcBtXfKb42QNrM5l49Vi+HBW3+1ZOTuy6T4S41Y/fvH5/1Rc3q5rqs892fBaj2TWnMAt7aXMZW2Q5P0FfjzGF2L86wAlqsx3Hxzjovat07qe2qdoa5eioX3gyZG+t7Q2pHZM0vPfXdt1avuyt42gjqy9UTxOWPY8At39c6ra//7X6oyXXhehd5gdbXk/n951otFzL73fHmwA1kbZ/X+m854pPvvHr228GdJoVx/r3F7m7ZfCIP7ydmd63PufXO/y8377Rl1+2fM/6v4/W/3f9b39y3rMqw9X7n9/ceWdtmLDzn7Lz+c/tQO9fbDyr8Xy09w8FPorv/GrrPz8glCf/peVv6nP8m+Z/13Dlf//WH5abA8/0G/5KzWuVDvrkZ83Ttf/8vPGyfVs/lPbnh9Q/jee7zb/Q3bUeCOWD9NsUvqZHVS2H9HaaR++/9/o3Nr2/9uqbLZZy+/D+FxMpw1xus8h7+9k0Pqn+yvS/8CO7PMrBf9v+v+dbF+KcdHvIfX/m9bHevzLb0s3l2VK17os2zt1WwOT6t2puv43EWHjGNRB6D80ZoaYrtVPXMn1bzQa63tCq0CphVP68i/7OKHs8ste/kXy/n/zffi8/988P+//N8/P+//N8+fjN9QrP+//N1+eef+/ef492efm/QMvFOR/tCB/Z/f81mH7vQXT7yrI/1hB/p5W/qGOMVL+fQXT31+Qf3dB/gMF+Z8oyP9kQf6DBfkPt+W39wGd8j9VMP2dLj2PMq3zD9Msfz7P7x+mR7r+0+v3v70gH5hcP3t135GnfvvN+srz/3Ot8yHpOt7hmK7F46cfxnR+3Tu0pW/mvRHTf8vyx/18B0yTvP2M/P/9oYJ8YHKl+7z8vmEKVTZ2Hxzjonareu3nM1k+HePPxPizMX4kxosx3hvjfTFeGlH9WB9HXvv9wRcrq8f7W7P8fu8nz58H6mgnKoSwv8/65OcHBr2fPW/Hb1C3W/6Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptp8XV5eqIRw8fWXjz55/PTem0MOtcaoN19n21K11nQhPBrjmRj/Mr65/t4LJ9vjGzGuhKVQCZXW8PDE1VZJm0MI58LucCnUw86Ll196c+nx4+ePXdjz1isHr6zfEgAAAIA73/sBAAD//weuDxQ=") 12m39.854466821s ago: executing program 5 (id=686): r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x91) umount2(&(0x7f0000000180)='./file0\x00', 0x4) 12m39.655240381s ago: executing program 5 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 12m24.603335001s ago: executing program 33 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 5.909766402s ago: executing program 0 (id=4146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 5.656973234s ago: executing program 6 (id=4147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) write(r2, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9a3f7dc16", 0x1c) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) 5.275459314s ago: executing program 1 (id=4148): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xd35, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e3455be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xffffffffffffff14, 0x801, 0x0, 0x0) 4.93883535s ago: executing program 0 (id=4149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf0100000001000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 4.874474934s ago: executing program 0 (id=4150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r1, 0x29, 0xcd, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.053797045s ago: executing program 1 (id=4162): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x8, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80a, 0x401, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x2, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x868b, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x3, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdaa, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r5, 0x2}}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.990532748s ago: executing program 6 (id=4163): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 3.990097858s ago: executing program 0 (id=4164): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x80, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) 2.983064659s ago: executing program 0 (id=4166): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket(0x14, 0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2.98254038s ago: executing program 4 (id=4168): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff110000000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20004044) 2.910420423s ago: executing program 6 (id=4169): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'bond_slave_1\x00', 0x40}) 2.896750684s ago: executing program 6 (id=4170): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0, 0x94}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.820815598s ago: executing program 4 (id=4171): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x140b, 0x1, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) 2.778901039s ago: executing program 2 (id=4172): socket(0x10, 0x3, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x300}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 2.77764123s ago: executing program 1 (id=4173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) write(r2, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9a3f7dc16", 0x1c) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) 2.735989892s ago: executing program 2 (id=4174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r1, 0x29, 0xcd, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.708904213s ago: executing program 4 (id=4175): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) 2.425132558s ago: executing program 4 (id=4176): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x80, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) 1.961065821s ago: executing program 6 (id=4177): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x68ec, &(0x7f00000004c0)=@phonet={0x23, 0x6, 0x12, 0xd}, 0x80) 1.813788708s ago: executing program 6 (id=4178): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) socket(0x8, 0x3, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.802180849s ago: executing program 2 (id=4179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r0, 0x0, &(0x7f00000000c0)) 1.510411004s ago: executing program 1 (id=4180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 668.592326ms ago: executing program 2 (id=4181): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="610507080200010342060207"], 0x10) 613.873269ms ago: executing program 1 (id=4182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 438.486428ms ago: executing program 2 (id=4183): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xff}, 0x14) 419.293619ms ago: executing program 2 (id=4184): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x8, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80a, 0x401, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x2, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x868b, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x3, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdaa, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r5, 0x2}}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 141.620112ms ago: executing program 4 (id=4185): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @null, 0xee00}) 124.050744ms ago: executing program 0 (id=4186): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) 38.354468ms ago: executing program 1 (id=4187): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000400)=']\xcd\xd3\xd6@\xc7=\xb6\xd9QL\'\x00\xe7j\xf0\xef\x01)J\x96\x1e^&\xc3B\xdd\xe0y-\x98\x1f5\xf5f\xd7g\xc9\xe8\x18`L+\x13\x1d\xfa\xb9\x1e}\xd5\xdf\xc8\xd1\x9b\xb1\xa1)\xe4\xee\"\x01x\xd2d\x92W9\x89\v\x90M\xbf\xdbTWO|(7\xf3\x94\xb0%\xd2\"\x05\xff\x01\xab\xf0\x13\xa9\x1c\x96\xe2,\xb2`\xa0\xe4\xfe\xb1\x87q\xb2\xc4O\x80\xb4[\xccr\x90\xca$\xfbA\xb2', 0x430102, &(0x7f0000000300)={@align=0x6, {0x60, 0x2, 0x80, 0x6}}, 0x87ed, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffe00}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 0s ago: executing program 4 (id=4188): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f56", 0xe5}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c1", 0xcd}, {&(0x7f0000000800)="b56380b7487ff3b0cd", 0x9}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de5464", 0x55}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be4", 0xcc}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x1909c000, 0x4, 0x3, 0xf1, 0x5, 0x60, 0xd4, 0x20, 0x0, 0x4, 0x7, 0x4f}, {0x58000, 0x2, 0x9, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x9c, 0x4, 0x4, 0x81, 0x52, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf4, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0xb, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x49}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x80, 0x90, 0x1, 0xfe}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x9a87}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): mber 0 [ 920.448087][T14959] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 920.451364][T13286] usb 5-1: config 0 descriptor?? [ 920.459620][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 920.472913][T14820] usb 7-1: config 0 interface 41 has no altsetting 0 [ 920.473361][ T23] pwc: Registered as video103. [ 920.484806][T14959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.493303][T13482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.505826][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 920.516427][T13482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 920.527693][T14959] usb 1-1: config 0 descriptor?? [ 920.533384][T13482] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 920.567189][ T23] usb 3-1: USB disconnect, device number 13 [ 920.575592][T13482] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.669630][T13482] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 920.679116][T13482] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 920.679680][T14820] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 920.687760][T13482] usb 2-1: Manufacturer: syz [ 920.705427][T13482] usb 2-1: config 0 descriptor?? [ 920.709989][T14820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.718859][T14820] usb 7-1: Product: syz [ 920.730377][T14820] usb 7-1: Manufacturer: syz [ 920.735481][T14820] usb 7-1: SerialNumber: syz [ 920.745144][T13286] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 920.758758][T14820] usb 7-1: config 0 descriptor?? [ 920.767749][T13286] usb 5-1: USB disconnect, device number 29 [ 920.778901][T13286] usblp0: removed [ 920.796508][ T1325] usb 1-1: USB disconnect, device number 24 [ 920.952096][T16198] udc-core: couldn't find an available UDC or it's busy [ 920.959551][T16198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 920.968170][T16198] udc-core: couldn't find an available UDC or it's busy [ 920.976240][T16198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 920.996390][T16198] udc-core: couldn't find an available UDC or it's busy [ 921.018115][T16198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 921.034557][T16198] udc-core: couldn't find an available UDC or it's busy [ 921.042319][T16198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 921.140272][T13482] rc_core: IR keymap rc-hauppauge not found [ 921.146270][T13482] Registered IR keymap rc-empty [ 921.156255][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.193664][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.230029][T13482] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 921.244482][T13482] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 921.262653][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.299617][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.339493][ T4229] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 921.339600][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.359601][T13286] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 921.389728][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.421004][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.450379][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.480402][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.509553][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.540061][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.569540][T13482] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.599694][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 921.600585][T13482] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 921.619665][T13286] usb 5-1: Using ep0 maxpacket: 32 [ 921.623789][T13482] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 921.657005][T13482] usb 2-1: USB disconnect, device number 20 [ 921.674493][T14820] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 921.687892][ T1325] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 921.729864][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.741462][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.753145][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 921.766825][ T4229] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 921.777038][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.785973][T13286] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 921.794666][T13286] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 921.812715][ T4229] usb 3-1: config 0 descriptor?? [ 921.817885][T13286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 921.828468][T13286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.839094][T13286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 921.849955][T13286] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 921.864616][T13286] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 921.876563][T13286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.887784][T13286] usb 5-1: config 0 descriptor?? [ 921.975696][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3546'. [ 921.984877][T16212] netlink: set zone limit has 8 unknown bytes [ 922.439995][ T1325] usb 1-1: Using ep0 maxpacket: 8 [ 922.462978][ T4229] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 922.471442][T13286] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 922.483137][ T4229] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 922.490820][T14820] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 922.511215][T14820] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 922.521727][ T4229] microsoft 0003:045E:07DA.000C: item 0 4 0 8 parsing failed [ 922.529915][ T4229] microsoft 0003:045E:07DA.000C: parse failed [ 922.536154][ T4229] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 922.551700][T14820] CoreChips: probe of 7-1:0.41 failed with error -71 [ 922.559730][ T1325] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 922.569553][ T1325] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.583655][T14820] usb 7-1: USB disconnect, device number 3 [ 922.603291][ T1325] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.642032][ T1325] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 922.660502][ T1325] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.673783][ T1325] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 922.675727][ T23] usb 3-1: USB disconnect, device number 14 [ 922.683068][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.840146][T16221] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 922.910014][T16191] udc-core: couldn't find an available UDC or it's busy [ 922.917236][T16191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 922.936677][T16191] udc-core: couldn't find an available UDC or it's busy [ 922.944159][ T1325] usb 1-1: usb_control_msg returned -32 [ 922.950196][ T1325] usbtmc 1-1:16.0: can't read capabilities [ 922.971210][T16191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 923.023193][T13482] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 923.269814][T13482] usb 2-1: Using ep0 maxpacket: 8 [ 923.390339][T13482] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 923.412214][T13482] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 923.463042][T13482] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 923.520671][T13482] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.576371][T13482] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.806295][T13482] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 923.819485][T13482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.017301][T16215] udc-core: couldn't find an available UDC or it's busy [ 924.035713][T16215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 924.179628][T13482] usb 2-1: GET_CAPABILITIES returned 0 [ 924.186168][T13482] usbtmc 2-1:16.0: can't read capabilities [ 924.394865][T13482] usb 2-1: USB disconnect, device number 21 [ 924.429488][T14820] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 924.638643][T13482] usb 5-1: USB disconnect, device number 30 [ 924.654740][T13482] usblp0: removed [ 924.687208][T16242] netlink: 'syz.4.3556': attribute type 10 has an invalid length. [ 924.721383][T16242] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 924.829998][T14820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.841713][T14820] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 924.851866][T14820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.866863][T14820] usb 7-1: config 0 descriptor?? [ 924.913573][ T4229] usb 1-1: USB disconnect, device number 25 [ 924.928692][T14820] pwc: Askey VC010 type 2 USB webcam detected. [ 925.325360][T13482] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 926.019840][T13482] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 926.033380][T13482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.052649][T14820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 926.076615][T13482] usb 5-1: Product: syz [ 926.089175][T13482] usb 5-1: Manufacturer: syz [ 926.096559][T13482] usb 5-1: SerialNumber: syz [ 926.109563][T14820] pwc: recv_control_msg error -32 req 02 val 2700 [ 926.139793][T13482] usb 5-1: config 0 descriptor?? [ 926.162679][T14820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 926.207590][T16265] kvm: pic: non byte write [ 926.219730][T14820] pwc: recv_control_msg error -32 req 04 val 1000 [ 926.239798][ T1325] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 926.268145][T14820] pwc: recv_control_msg error -32 req 04 val 1300 [ 926.320436][T14820] pwc: recv_control_msg error -32 req 04 val 1400 [ 926.369925][T14820] pwc: recv_control_msg error -32 req 02 val 2000 [ 926.399638][T13482] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 926.410422][T14820] pwc: recv_control_msg error -32 req 02 val 2100 [ 926.439572][T14959] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 926.459634][T14820] pwc: recv_control_msg error -32 req 04 val 1500 [ 926.501140][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 926.506989][T14820] pwc: recv_control_msg error -32 req 02 val 2500 [ 926.554361][T14820] pwc: recv_control_msg error -32 req 02 val 2400 [ 926.599797][T14820] pwc: recv_control_msg error -32 req 02 val 2600 [ 926.620639][ T1325] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 926.633986][ T1325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 926.644210][T14820] pwc: recv_control_msg error -32 req 02 val 2900 [ 926.652071][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 926.662386][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 926.672561][ T1325] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.685806][ T1325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 926.695000][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.699743][T14959] usb 1-1: Using ep0 maxpacket: 8 [ 926.703411][T14820] pwc: recv_control_msg error -32 req 02 val 2800 [ 926.754732][T14820] pwc: recv_control_msg error -32 req 04 val 1100 [ 926.800711][T14820] pwc: Registered as video103. [ 926.806742][T14820] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 926.839714][T14959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.850975][T14959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 926.869631][T14959] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 926.907050][T14959] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 926.921065][T14959] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 926.936565][T14959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.979527][ T1325] usb 2-1: usb_control_msg returned -32 [ 926.985227][ T1325] usbtmc 2-1:16.0: can't read capabilities [ 927.001643][T14959] hub 1-1:1.0: bad descriptor, ignoring hub [ 927.025348][T14959] hub: probe of 1-1:1.0 failed with error -5 [ 927.032327][T14959] cdc_wdm 1-1:1.0: skipping garbage [ 927.037655][T14959] cdc_wdm 1-1:1.0: skipping garbage [ 927.042809][ T1325] usb 7-1: USB disconnect, device number 4 [ 927.068284][T14959] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 927.086492][T14959] cdc_wdm 1-1:1.0: Unknown control protocol [ 927.187064][T16278] autofs4:pid:16278:autofs_fill_super: called with bogus options [ 927.349628][T16284] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 927.360042][T14820] usb 2-1: USB disconnect, device number 22 [ 927.365466][T13482] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 927.377524][ T1325] usb 1-1: USB disconnect, device number 26 [ 927.384736][T13482] usb 5-1: USB disconnect, device number 31 [ 927.699467][ T1325] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 927.879478][T14820] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 927.939491][ T1325] usb 1-1: Using ep0 maxpacket: 8 [ 928.063362][ T1325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.098673][ T1325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 928.119676][ T1325] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.138132][ T1325] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 928.157184][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.221015][ T1325] hub 1-1:1.0: bad descriptor, ignoring hub [ 928.229962][ T1325] hub: probe of 1-1:1.0 failed with error -5 [ 928.244094][ T1325] cdc_wdm 1-1:1.0: skipping garbage [ 928.253289][ T1325] cdc_wdm 1-1:1.0: skipping garbage [ 928.258721][ T1325] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 928.309695][T14820] usb 7-1: unable to get BOS descriptor or descriptor too short [ 928.339592][ T4229] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 928.359723][T14820] usb 7-1: not running at top speed; connect to a high speed hub [ 928.439735][T14820] usb 7-1: config 12 has an invalid interface number: 126 but max is 0 [ 928.469433][T14820] usb 7-1: config 12 has no interface number 0 [ 928.476547][T14820] usb 7-1: config 12 interface 126 has no altsetting 0 [ 928.572533][T14959] usb 1-1: USB disconnect, device number 27 [ 928.699602][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.711018][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.724493][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 928.734225][T14820] usb 7-1: string descriptor 0 read error: -22 [ 928.740954][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.749529][T14820] usb 7-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 928.759162][T14820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.824435][ T1325] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 928.834419][ T4229] usb 2-1: config 0 descriptor?? [ 929.079650][ T1325] usb 3-1: Using ep0 maxpacket: 8 [ 929.099891][T14820] dvb-usb: found a 'PCTV 2002e' in warm state. [ 929.140896][T14820] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 929.170419][T14820] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 929.178267][T14820] usb 7-1: media controller created [ 929.186848][T14820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.200155][ T1325] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 929.259891][T14820] DVB: Unable to find symbol dib7000p_attach() [ 929.266567][T14820] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 929.273902][T14820] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 929.290063][ T1325] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 929.301679][T14820] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 929.310824][T14820] usb 7-1: media controller created [ 929.318281][T14820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.322319][T14959] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 929.381176][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 929.387741][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 929.394875][ T1325] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 929.417031][ T1325] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 929.440431][ T4229] usb 2-1: USB disconnect, device number 23 [ 929.447991][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.465411][T14820] DVB: Unable to find symbol dib7000p_attach() [ 929.491428][T14820] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 929.551737][ T1325] hub 3-1:32.0: Invalid hub with more than one config or interface [ 929.578809][ T1325] hub: probe of 3-1:32.0 failed with error -22 [ 929.589519][T14959] usb 1-1: Using ep0 maxpacket: 32 [ 929.622498][T14820] rc_core: IR keymap rc-dib0700-rc5 not found [ 929.628792][T14820] Registered IR keymap rc-empty [ 929.657822][T14820] dvb-usb: could not initialize remote control. [ 929.695399][T14820] dvb-usb: PCTV 2002e successfully initialized and connected. [ 929.729753][T14959] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.741112][T14820] usb 7-1: USB disconnect, device number 5 [ 929.758802][T14959] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.808663][ T4229] usb 3-1: USB disconnect, device number 15 [ 929.857478][T14820] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 929.970917][T14959] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 929.996544][T14959] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 930.031535][T14959] usb 1-1: Product: syz [ 930.044305][T14959] usb 1-1: Manufacturer: syz [ 930.119826][T14959] hub 1-1:4.0: USB hub found [ 930.420178][T14959] hub 1-1:4.0: 3 ports detected [ 930.680109][T14959] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 930.711308][T14959] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 931.140770][T14959] usb 1-1: USB disconnect, device number 28 [ 931.221353][T16366] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3589'. [ 932.219556][ T4231] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 932.239745][T13379] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 932.540966][T14959] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 932.579607][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 932.709850][T13379] usb 5-1: Using ep0 maxpacket: 8 [ 932.829736][T14959] usb 1-1: Using ep0 maxpacket: 32 [ 932.860511][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.860555][T13379] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 932.882998][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 933.030712][T14959] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 933.072611][T14959] usb 1-1: config 0 has no interface number 0 [ 933.199760][ T4231] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 933.209148][T13379] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 933.219629][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.227649][ T4231] usb 3-1: Product: syz [ 933.232503][T13379] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.243073][ T4231] usb 3-1: Manufacturer: syz [ 933.247879][T13379] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 933.258347][ T4231] usb 3-1: SerialNumber: syz [ 933.273164][ T4231] usb 3-1: config 0 descriptor?? [ 933.278578][T13379] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.302728][T13379] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 933.314432][ T4231] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 933.335792][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 933.345747][T13379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.370047][ T4231] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 933.390013][ T4231] usb 3-1: media controller created [ 933.409754][T14959] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 933.427805][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.471159][T14959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.499458][T14959] usb 1-1: Product: syz [ 933.504534][T14959] usb 1-1: Manufacturer: syz [ 933.520878][T14959] usb 1-1: SerialNumber: syz [ 933.545607][T14959] usb 1-1: config 0 descriptor?? [ 933.590462][T14959] smsc95xx v2.0.0 [ 933.608821][ T4231] DVB: Unable to find symbol tda10046_attach() [ 933.619271][ T4231] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 933.630018][T13379] usb 5-1: usb_control_msg returned -32 [ 933.635624][T13379] usbtmc 5-1:16.0: can't read capabilities [ 933.649522][ T4231] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 934.009583][ T4229] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 934.056074][T16425] usbtmc 5-1:16.0: control status returned 0 [ 934.100238][T16426] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3602'. [ 934.329937][ T4231] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 934.417554][ T4231] usb 3-1: USB disconnect, device number 16 [ 934.709081][T13379] usb 5-1: USB disconnect, device number 32 [ 934.715440][T14959] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 934.767996][T14959] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 934.810384][T14959] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 934.840460][T14959] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 934.873626][T14959] usb 1-1: USB disconnect, device number 29 [ 934.929444][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 935.209686][ T4229] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 935.939027][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.947801][ T4229] usb 2-1: Product: syz [ 935.952149][ T4229] usb 2-1: Manufacturer: syz [ 935.957045][ T4229] usb 2-1: SerialNumber: syz [ 935.975658][ T4229] usb 2-1: config 0 descriptor?? [ 936.041789][ T4229] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 936.209505][ T4259] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 936.540727][ T4231] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 936.599741][ T4259] usb 3-1: Using ep0 maxpacket: 32 [ 936.789640][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 936.821063][ T4259] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 936.849321][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.910070][ T4231] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 936.972321][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.047633][ T4259] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 937.106406][T13286] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 937.114215][ T4229] gspca_topro: reg_w err -71 [ 937.119850][ T4231] usb 1-1: config 0 has no interface number 0 [ 937.126220][ T4231] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.158210][ T4229] gspca_topro: Sensor soi763a [ 937.172265][ T4229] usb 2-1: USB disconnect, device number 24 [ 937.376694][ T4231] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 937.386444][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.389598][T13286] usb 5-1: Using ep0 maxpacket: 16 [ 937.395058][ T4231] usb 1-1: Product: syz [ 937.405325][ T4231] usb 1-1: Manufacturer: syz [ 937.410143][ T4231] usb 1-1: SerialNumber: syz [ 937.417296][ T4231] usb 1-1: config 0 descriptor?? [ 937.461523][ T4231] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 937.474493][ T4231] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 937.529736][T13286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.541259][T13286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.553253][T13286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.564918][T13286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.575569][T13286] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.579585][T13379] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 937.659636][T13286] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.669040][T13286] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.677364][T13286] usb 5-1: Manufacturer: syz [ 937.679672][ T4231] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 937.685378][T13286] usb 5-1: config 0 descriptor?? [ 937.695664][ T4231] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 937.703871][ T4259] gspca_nw80x: reg_w err -71 [ 937.709197][ T4259] nw80x: probe of 3-1:3.0 failed with error -71 [ 937.729726][ T4259] usb 3-1: USB disconnect, device number 17 [ 937.779595][ T4229] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 937.829574][T13379] usb 7-1: Using ep0 maxpacket: 32 [ 937.899754][T14148] usb 1-1: USB disconnect, device number 30 [ 937.932230][T16445] udc-core: couldn't find an available UDC or it's busy [ 937.939354][T16445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 937.948931][T16445] udc-core: couldn't find an available UDC or it's busy [ 937.956124][T13379] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 937.956264][T16445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 937.975416][T13379] usb 7-1: config 0 has no interface number 0 [ 937.976671][T16445] udc-core: couldn't find an available UDC or it's busy [ 937.982210][T13379] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.993303][T16445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 938.000593][T13379] usb 7-1: config 0 interface 85 has no altsetting 0 [ 938.023214][T16445] udc-core: couldn't find an available UDC or it's busy [ 938.030688][T16445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 938.129727][T13286] rc_core: IR keymap rc-hauppauge not found [ 938.136333][T13286] Registered IR keymap rc-empty [ 938.141708][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.170553][T13379] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 938.180008][T13379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.188015][T13379] usb 7-1: Product: syz [ 938.189484][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.192794][T13379] usb 7-1: Manufacturer: syz [ 938.199820][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.204698][T13379] usb 7-1: SerialNumber: syz [ 938.230441][ T4229] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 938.241543][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.307184][T13379] usb 7-1: config 0 descriptor?? [ 938.386200][T13286] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 938.408009][ T4229] usb 2-1: config 0 descriptor?? [ 938.414406][T13286] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 938.439879][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.471646][ T4229] pwc: Askey VC010 type 2 USB webcam detected. [ 938.479564][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.519746][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.549605][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.591446][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.619544][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.659977][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.702154][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.729476][ T4259] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 938.750743][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.789555][T13286] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.889667][ T4229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 938.969565][ T4259] usb 1-1: Using ep0 maxpacket: 32 [ 939.089877][ T4259] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 939.126611][ T4259] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 939.169734][T13379] appletouch 7-1:0.85: Geyser mode initialized. [ 939.184308][T13379] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input22 [ 939.216820][ T4259] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 939.280287][ C1] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 939.321740][ T4259] usb 1-1: config 1 has no interface number 0 [ 939.390329][ T4259] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.517488][ T4259] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 939.653363][ T4259] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 939.670989][T13286] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 939.689555][T13286] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 939.699589][ T4229] pwc: recv_control_msg error -32 req 02 val 2700 [ 939.723839][T13286] usb 5-1: USB disconnect, device number 33 [ 939.749587][ T4229] pwc: recv_control_msg error -32 req 02 val 2c00 [ 939.759560][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.809586][ T4229] pwc: recv_control_msg error -32 req 04 val 1000 [ 939.851603][ T4229] pwc: recv_control_msg error -32 req 04 val 1300 [ 939.854117][ T4259] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 939.899550][ T4229] pwc: recv_control_msg error -32 req 04 val 1400 [ 939.939534][ T4229] pwc: recv_control_msg error -32 req 02 val 2000 [ 939.970391][ T23] usb 7-1: USB disconnect, device number 6 [ 940.012349][ T4229] pwc: recv_control_msg error -32 req 02 val 2100 [ 940.016033][ T23] appletouch 7-1:0.85: input: appletouch disconnected [ 940.049719][ T4229] pwc: recv_control_msg error -32 req 04 val 1500 [ 940.109730][ T4229] pwc: recv_control_msg error -32 req 02 val 2500 [ 940.149588][ T4229] pwc: recv_control_msg error -32 req 02 val 2400 [ 940.159746][ T4259] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 940.209694][ T4229] pwc: recv_control_msg error -32 req 02 val 2600 [ 940.229826][T14148] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 940.250382][ T4229] pwc: recv_control_msg error -32 req 02 val 2900 [ 940.750091][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 940.756648][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.839442][ T4229] pwc: recv_control_msg error -32 req 02 val 2800 [ 940.879640][ T4229] pwc: recv_control_msg error -71 req 04 val 1100 [ 940.899549][ T4229] pwc: recv_control_msg error -71 req 04 val 1200 [ 940.948207][ T4229] pwc: Registered as video103. [ 940.977985][ T4229] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 941.033702][ T4229] usb 2-1: USB disconnect, device number 25 [ 941.159754][T14148] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 941.159805][T14148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.213133][ T23] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 941.217990][T14148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.247457][T14148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 941.339780][T14148] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 941.355638][T14148] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 941.375269][T14148] usb 3-1: Manufacturer: syz [ 941.403115][T14148] usb 3-1: config 0 descriptor?? [ 941.479535][ T4259] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 941.510825][ T4231] hid-generic 0005:16C0:05DF.000D: item fetching failed at offset 0/1 [ 941.538621][ T4231] hid-generic: probe of 0005:16C0:05DF.000D failed with error -22 [ 941.652944][T13379] usb 1-1: USB disconnect, device number 31 [ 941.755610][T13379] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 941.789698][ T4259] usb 5-1: Using ep0 maxpacket: 16 [ 941.911250][T14148] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 941.949882][ T4259] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.974976][ T4259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 942.024522][ T4259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 942.060815][ T4259] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 942.097868][ T4259] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.239916][T13379] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 942.240112][ T4259] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 942.266656][ T4259] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 942.297549][ T4259] usb 5-1: Manufacturer: syz [ 942.373125][ T4259] usb 5-1: config 0 descriptor?? [ 942.577440][T14148] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 942.629345][T14148] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 942.629647][T13379] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.650478][T14148] usb 3-1: USB disconnect, device number 18 [ 942.656939][T16500] udc-core: couldn't find an available UDC or it's busy [ 942.689482][T16500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 942.732926][T16500] udc-core: couldn't find an available UDC or it's busy [ 942.749493][T13379] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 942.758834][T13379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.767293][T16500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 942.795711][T16500] udc-core: couldn't find an available UDC or it's busy [ 942.817045][T16521] fido_id[16521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.818687][T16500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 942.850119][T13379] usb 1-1: config 0 descriptor?? [ 943.009545][T13379] pwc: Askey VC010 type 2 USB webcam detected. [ 943.025971][T16500] udc-core: couldn't find an available UDC or it's busy [ 943.156847][T16500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 943.389927][T13379] pwc: recv_control_msg error -32 req 02 val 2b00 [ 943.449960][T13379] pwc: recv_control_msg error -32 req 02 val 2700 [ 943.500073][T13379] pwc: recv_control_msg error -32 req 02 val 2c00 [ 943.549934][T13379] pwc: recv_control_msg error -32 req 04 val 1000 [ 943.599955][T13379] pwc: recv_control_msg error -32 req 04 val 1300 [ 943.726547][T13379] pwc: recv_control_msg error -32 req 04 val 1400 [ 943.787912][T13379] pwc: recv_control_msg error -32 req 02 val 2000 [ 944.049609][T13379] pwc: recv_control_msg error -32 req 04 val 1500 [ 944.059674][ T4259] rc_core: IR keymap rc-hauppauge not found [ 944.066045][ T4259] Registered IR keymap rc-empty [ 944.078306][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.089567][T13379] pwc: recv_control_msg error -32 req 02 val 2500 [ 944.129588][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.139507][T13379] pwc: recv_control_msg error -32 req 02 val 2400 [ 944.160157][ T4259] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 944.179534][T13379] pwc: recv_control_msg error -32 req 02 val 2600 [ 944.200298][ T4231] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 944.209772][ T4259] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 944.228717][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.259620][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.289599][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.319601][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.349625][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.389491][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.429764][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.439752][T13379] pwc: recv_control_msg error -71 req 02 val 2800 [ 944.460366][T13379] pwc: recv_control_msg error -71 req 04 val 1100 [ 944.467233][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.477839][T16550] tipc: Enabled bearer , priority 0 [ 944.489799][T13379] pwc: recv_control_msg error -71 req 04 val 1200 [ 944.499956][T13379] pwc: Registered as video103. [ 944.509503][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.522909][T13379] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 944.539741][ T4259] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.561359][ T4231] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 944.574579][T13379] usb 1-1: USB disconnect, device number 32 [ 944.582224][ T4259] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 944.591826][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.604052][T16550] device syzkaller0 entered promiscuous mode [ 944.611351][ T4259] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.623743][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.644205][ T4259] usb 5-1: USB disconnect, device number 34 [ 944.662058][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.709222][ T4231] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.739238][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.942007][ T4231] usb 7-1: config 0 descriptor?? [ 944.951783][T16549] tipc: Resetting bearer [ 945.751768][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 945.770971][T16549] tipc: Disabling bearer [ 945.806032][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 945.846211][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 945.940088][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.046039][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.112907][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.181565][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.252217][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.320083][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.367937][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.415224][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.472366][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.543395][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.647478][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.743867][ T4231] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 946.799984][ T4231] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 946.849188][ T4231] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 946.909980][ T4231] usb 7-1: USB disconnect, device number 7 [ 947.088653][T16582] fido_id[16582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 948.300442][T16595] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 949.009617][ T4231] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 949.279600][ T4231] usb 7-1: Using ep0 maxpacket: 32 [ 949.333566][T16615] kvm: pic: single mode not supported [ 949.333679][T16615] kvm: pic: single mode not supported [ 949.348696][T16615] kvm: pic: level sensitive irq not supported [ 949.360033][T16615] kvm: pic: level sensitive irq not supported [ 949.367060][T16615] kvm: pic: single mode not supported [ 949.374230][T16615] kvm: pic: level sensitive irq not supported [ 949.397357][T16615] kvm: pic: single mode not supported [ 949.404449][T16615] kvm: pic: level sensitive irq not supported [ 949.439730][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 949.470659][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3665'. [ 949.539729][ T4231] usb 7-1: config 1 has an invalid interface number: 224 but max is 0 [ 949.548563][T14959] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 949.569483][ T4231] usb 7-1: config 1 has no interface number 0 [ 949.588405][ T4231] usb 7-1: config 1 interface 224 has no altsetting 0 [ 949.749732][ T4231] usb 7-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=4e.f0 [ 949.789952][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.798001][ T4231] usb 7-1: Product: syz [ 949.809473][T14959] usb 2-1: Using ep0 maxpacket: 8 [ 949.821570][T16633] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 949.826544][ T4231] usb 7-1: Manufacturer: syz [ 949.835006][ T4231] usb 7-1: SerialNumber: syz [ 949.839520][T16633] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 949.929783][T14959] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 949.959662][T14959] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.991913][T14959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 950.019759][T14959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 950.035553][T14959] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.049931][T14959] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 950.059893][T14959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.105236][T16627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 950.152066][ T4231] gspca_main: benq-2.14.0 probing 04a5:3035 [ 950.312276][T13482] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 950.327565][ T4231] usb 7-1: USB disconnect, device number 8 [ 950.554369][T14820] usb 2-1: USB disconnect, device number 26 [ 951.711550][T13482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.904617][T13482] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 951.964131][T13482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.969157][ T4229] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 952.010335][T13482] usb 5-1: config 0 descriptor?? [ 952.055313][T13482] pwc: Askey VC010 type 2 USB webcam detected. [ 952.269690][ T4231] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 952.309461][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 952.499664][T13482] pwc: recv_control_msg error -32 req 02 val 2b00 [ 952.509571][ T4231] usb 7-1: Using ep0 maxpacket: 32 [ 952.549804][T13482] pwc: recv_control_msg error -32 req 02 val 2700 [ 952.589838][T13482] pwc: recv_control_msg error -32 req 02 val 2c00 [ 952.629736][ T4231] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 952.634879][ T4229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 952.638120][ T4231] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 952.638145][ T4231] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 952.638190][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.638210][ T4231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 952.651342][T16679] block device autoloading is deprecated and will be removed. [ 952.679702][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 952.694647][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.724408][ T4229] usb 2-1: Product: syz [ 952.729047][ T4229] usb 2-1: Manufacturer: syz [ 952.736706][ T4231] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 952.745327][ T4229] usb 2-1: SerialNumber: syz [ 952.763686][ T4229] usb 2-1: config 0 descriptor?? [ 952.786854][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.821242][ T4231] usb 7-1: config 0 descriptor?? [ 952.869621][T13482] pwc: recv_control_msg error -71 req 04 val 1300 [ 952.895736][T13482] pwc: recv_control_msg error -71 req 04 val 1400 [ 952.929581][T13482] pwc: recv_control_msg error -71 req 02 val 2000 [ 952.959593][T13482] pwc: recv_control_msg error -71 req 02 val 2100 [ 952.969791][T14959] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 952.980235][T13482] pwc: recv_control_msg error -71 req 04 val 1500 [ 952.999592][T13482] pwc: recv_control_msg error -71 req 02 val 2500 [ 953.029677][ T4229] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 953.039529][T13482] pwc: recv_control_msg error -71 req 02 val 2400 [ 953.059535][T13482] pwc: recv_control_msg error -71 req 02 val 2600 [ 953.091941][ T4231] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 953.129612][T13482] pwc: recv_control_msg error -71 req 02 val 2900 [ 953.144852][ T4231] usb 7-1: USB disconnect, device number 9 [ 953.160793][T13482] pwc: recv_control_msg error -71 req 02 val 2800 [ 953.176961][ T4231] usblp0: removed [ 953.189520][T13482] pwc: recv_control_msg error -71 req 04 val 1100 [ 953.219559][T13482] pwc: recv_control_msg error -71 req 04 val 1200 [ 953.234614][T13482] pwc: Registered as video103. [ 953.251505][T13482] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 953.307338][T13482] usb 5-1: USB disconnect, device number 35 [ 953.331590][T14959] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 953.348279][T14959] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 953.379794][T14959] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 953.388919][T14959] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 953.549690][T14959] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 953.581916][T14959] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 953.600926][T14959] usb 1-1: Product: syz [ 953.605274][T14959] usb 1-1: Manufacturer: syz [ 953.639843][T16680] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 953.661123][T14959] cdc_wdm 1-1:1.0: skipping garbage [ 953.666467][T14959] cdc_wdm 1-1:1.0: skipping garbage [ 953.681830][T14959] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 953.709550][ T4231] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 953.867055][T14959] usb 1-1: USB disconnect, device number 33 [ 953.959675][ T4231] usb 7-1: Using ep0 maxpacket: 32 [ 953.978258][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 953.978273][ T26] audit: type=1800 audit(1774643297.677:172): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3686" name="/" dev="fuse" ino=4 res=0 errno=0 [ 954.079587][ T4231] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 954.088605][ T4231] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 954.098144][ T4231] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 954.113639][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 954.124629][ T4231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 954.142744][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 954.178853][ T4231] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 954.193963][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.205776][ T4231] usb 7-1: config 0 descriptor?? [ 954.219641][ T4229] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 954.237467][ T4229] usb 2-1: USB disconnect, device number 27 [ 954.549061][ T4231] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 954.908072][T16668] udc-core: couldn't find an available UDC or it's busy [ 954.915452][T16668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 954.924793][T16668] udc-core: couldn't find an available UDC or it's busy [ 954.932004][T16668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 955.110661][ T4231] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 955.118903][T13482] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 955.501890][T16707] udc-core: couldn't find an available UDC or it's busy [ 955.509223][T16707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 955.526514][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.537737][T13482] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.548644][ T4259] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 955.562243][ T4231] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 955.574277][T13482] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 955.590786][T13482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.605594][ T4231] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 955.627940][T13482] usb 2-1: config 0 descriptor?? [ 955.671722][T13482] pwc: Askey VC010 type 2 USB webcam detected. [ 955.799643][ T4231] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 955.813715][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 955.822431][ T4231] usb 5-1: Product: syz [ 955.827007][ T4231] usb 5-1: Manufacturer: syz [ 955.832223][ T4231] usb 5-1: SerialNumber: syz [ 955.844747][ T4231] usb 5-1: config 0 descriptor?? [ 955.891857][ T4231] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 955.899595][ T4231] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 955.906700][ T4231] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 956.049582][ T4259] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 956.059057][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 956.072246][ T4259] usb 3-1: Product: syz [ 956.076591][ T4259] usb 3-1: SerialNumber: syz [ 956.086432][ T4259] usb 3-1: config 0 descriptor?? [ 956.099543][T13482] pwc: recv_control_msg error -32 req 02 val 2b00 [ 956.139627][T13482] pwc: recv_control_msg error -32 req 02 val 2700 [ 956.189601][T13482] pwc: recv_control_msg error -32 req 02 val 2c00 [ 956.229564][T13482] pwc: recv_control_msg error -32 req 04 val 1000 [ 956.351789][ T4259] hso 3-1:0.0: Failed to find BULK IN ep [ 956.499555][T13482] pwc: recv_control_msg error -32 req 04 val 1400 [ 956.539775][T13482] pwc: recv_control_msg error -32 req 02 val 2000 [ 956.550633][ T4231] usb 7-1: USB disconnect, device number 10 [ 956.558456][ T4259] usb 3-1: USB disconnect, device number 19 [ 956.577578][ T4231] usblp0: removed [ 956.581815][T13482] pwc: recv_control_msg error -32 req 02 val 2100 [ 956.639642][T13482] pwc: recv_control_msg error -32 req 04 val 1500 [ 956.679581][T13482] pwc: recv_control_msg error -32 req 02 val 2500 [ 956.719562][T13482] pwc: recv_control_msg error -32 req 02 val 2400 [ 956.759542][T13482] pwc: recv_control_msg error -32 req 02 val 2600 [ 956.799669][T13482] pwc: recv_control_msg error -32 req 02 val 2900 [ 956.889664][T13379] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 957.049496][ T4231] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 957.059883][T13482] pwc: recv_control_msg error -71 req 04 val 1100 [ 957.083013][T13482] pwc: recv_control_msg error -71 req 04 val 1200 [ 957.096580][T13482] pwc: Registered as video103. [ 957.105684][T13482] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 957.119558][T13482] usb 2-1: USB disconnect, device number 28 [ 957.129472][T13379] usb 1-1: Using ep0 maxpacket: 16 [ 957.253352][T13379] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 957.419756][T13379] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 957.433187][T13379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.442130][T13379] usb 1-1: Product: syz [ 957.446641][T13379] usb 1-1: Manufacturer: syz [ 957.455654][T13379] usb 1-1: SerialNumber: syz [ 957.464398][T13379] usb 1-1: config 0 descriptor?? [ 957.569850][ T4231] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 957.578984][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.592230][ T4231] usb 7-1: Product: syz [ 957.596485][ T4231] usb 7-1: Manufacturer: syz [ 957.733475][ T4231] usb 7-1: SerialNumber: syz [ 957.783591][ T4231] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 957.853836][T13286] usb 5-1: USB disconnect, device number 36 [ 958.329664][T13286] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 958.390153][ T4231] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 958.609519][T13286] usb 5-1: Using ep0 maxpacket: 32 [ 958.779616][T13286] usb 5-1: unable to get BOS descriptor or descriptor too short [ 958.815954][T13482] usb 1-1: USB disconnect, device number 34 [ 958.859655][T13286] usb 5-1: config 158 has an invalid interface number: 46 but max is 0 [ 958.899558][T13286] usb 5-1: config 158 has no interface number 0 [ 958.923663][T13286] usb 5-1: config 158 interface 46 has no altsetting 0 [ 959.002819][ T4229] usb 7-1: USB disconnect, device number 11 [ 959.089745][T13286] usb 5-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=f8.11 [ 959.100990][T13286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.114421][T13286] usb 5-1: Product: syz [ 959.118863][T13286] usb 5-1: Manufacturer: syz [ 959.124482][T13286] usb 5-1: SerialNumber: syz [ 959.370119][T13482] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 959.449615][ T4231] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 959.457665][ T4231] ath9k_htc: Failed to initialize the device [ 959.459506][T14148] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 959.471924][ T4229] usb 7-1: ath9k_htc: USB layer deinitialized [ 959.483518][T13286] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:158.46/input/input28 [ 959.509745][ T3547] bcm5974 5-1:158.46: could not read from device [ 959.540026][T13286] usb 5-1: USB disconnect, device number 37 [ 959.549959][ T3547] bcm5974 5-1:158.46: could not read from device [ 959.572151][ T3547] bcm5974 5-1:158.46: could not read from device [ 959.620573][T13482] usb 2-1: Using ep0 maxpacket: 32 [ 959.759783][T13482] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 959.768442][T13482] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 959.777438][T13482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 959.787497][T13482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 959.798272][T13482] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 959.808040][T13482] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 959.821883][T13482] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 959.831732][T13482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.845264][T13482] usb 2-1: config 0 descriptor?? [ 959.849769][T14148] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.861470][T14148] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 959.871683][T14148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.884018][T14148] usb 1-1: config 0 descriptor?? [ 959.932099][T14148] pwc: Askey VC010 type 2 USB webcam detected. [ 960.266840][T16755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.369798][T14148] pwc: recv_control_msg error -32 req 02 val 2b00 [ 960.459843][T14148] pwc: recv_control_msg error -32 req 02 val 2700 [ 960.553671][T13482] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 960.567436][T14148] pwc: recv_control_msg error -32 req 02 val 2c00 [ 960.640057][T14148] pwc: recv_control_msg error -32 req 04 val 1000 [ 960.696743][T14148] pwc: recv_control_msg error -32 req 04 val 1300 [ 960.750246][T14148] pwc: recv_control_msg error -32 req 04 val 1400 [ 960.791989][T13482] usb 2-1: USB disconnect, device number 29 [ 960.803823][T13482] usblp0: removed [ 960.973546][T14148] pwc: recv_control_msg error -32 req 02 val 2000 [ 961.179498][T13482] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 961.239675][T14148] pwc: recv_control_msg error -32 req 04 val 1500 [ 961.279596][T14148] pwc: recv_control_msg error -32 req 02 val 2500 [ 961.329621][T14148] pwc: recv_control_msg error -32 req 02 val 2400 [ 961.370229][T14148] pwc: recv_control_msg error -71 req 02 val 2600 [ 961.389592][T14148] pwc: recv_control_msg error -71 req 02 val 2900 [ 961.409628][T14148] pwc: recv_control_msg error -71 req 02 val 2800 [ 961.429453][T13482] usb 2-1: Using ep0 maxpacket: 32 [ 961.429620][T14148] pwc: recv_control_msg error -71 req 04 val 1100 [ 961.469541][T14148] pwc: recv_control_msg error -71 req 04 val 1200 [ 961.478386][T14148] pwc: Registered as video103. [ 961.485885][T14148] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 961.502933][T14148] usb 1-1: USB disconnect, device number 35 [ 961.573891][T13482] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 961.603699][T13482] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 961.629626][T13482] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 961.638673][T13482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 961.659644][T13482] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 961.693270][T13482] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.708197][T13482] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 961.717934][T13482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.737036][T13482] usb 2-1: config 0 descriptor?? [ 961.743294][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 961.756296][T12733] Bluetooth: hci5: sending frame failed (-49) [ 961.862673][T16805] netlink: 'syz.2.3725': attribute type 21 has an invalid length. [ 961.881735][T16805] netlink: 'syz.2.3725': attribute type 6 has an invalid length. [ 961.890608][T16805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3725'. [ 962.012765][T13482] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 962.089597][ T4231] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 962.150712][T16817] netlink: 'syz.0.3730': attribute type 29 has an invalid length. [ 962.180074][T16817] netlink: 'syz.0.3730': attribute type 29 has an invalid length. [ 962.193384][T16817] netlink: 'syz.0.3730': attribute type 29 has an invalid length. [ 962.203934][T16817] netlink: 'syz.0.3730': attribute type 29 has an invalid length. [ 962.359477][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 962.456014][T16782] udc-core: couldn't find an available UDC or it's busy [ 962.472718][T16782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 962.501352][ T4231] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 962.521674][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.563879][T16782] udc-core: couldn't find an available UDC or it's busy [ 962.603901][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.624915][T16782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 962.689607][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 962.760641][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.851830][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 962.940895][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.237865][T16820] udc-core: couldn't find an available UDC or it's busy [ 963.249057][T16820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 963.299892][ T4231] usb 5-1: GET_CAPABILITIES returned 0 [ 963.311778][ T4231] usbtmc 5-1:16.0: can't read capabilities [ 963.509628][ T4231] usb 5-1: USB disconnect, device number 38 [ 963.559549][ T4259] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 963.769708][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 963.776291][T12733] Bluetooth: hci5: sending frame failed (-49) [ 963.919654][ T4259] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.930147][ T4259] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.943315][ T4259] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 963.952438][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.107546][ T4231] usb 2-1: USB disconnect, device number 30 [ 964.147428][ T4231] usblp0: removed [ 964.183689][T16837] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 964.192955][T16837] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 964.206165][T16837] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 964.214943][T16837] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 964.222902][ T4259] usb 1-1: usb_control_msg returned -32 [ 964.222949][ T4259] usbtmc 1-1:16.0: can't read capabilities [ 964.860013][T16847] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 965.265218][T16849] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 965.273078][T16849] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 965.839682][T14820] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 966.029585][T14148] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 966.078360][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 966.090039][T14820] usb 3-1: Using ep0 maxpacket: 16 [ 966.210087][T14820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 966.266898][T13286] usb 1-1: USB disconnect, device number 36 [ 966.409917][T14148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.429740][T14820] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 966.439433][T14820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.456092][T14148] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 966.466936][T14820] usb 3-1: Product: syz [ 966.479699][T14148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.488614][T14820] usb 3-1: Manufacturer: syz [ 966.500675][T14820] usb 3-1: SerialNumber: syz [ 966.509733][T14820] usb 3-1: config 0 descriptor?? [ 966.516477][T14148] usb 5-1: config 0 descriptor?? [ 966.552664][T14820] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 966.566185][T14148] pwc: Askey VC010 type 2 USB webcam detected. [ 966.573046][T14820] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 966.580600][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3747'. [ 966.589841][T16865] netlink: set zone limit has 8 unknown bytes [ 966.729582][T13286] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 966.969791][T13286] usb 1-1: Using ep0 maxpacket: 32 [ 966.999603][T14148] pwc: recv_control_msg error -32 req 02 val 2b00 [ 967.039579][T14148] pwc: recv_control_msg error -32 req 02 val 2700 [ 967.079566][T14148] pwc: recv_control_msg error -32 req 02 val 2c00 [ 967.089718][T13286] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 967.098336][T13286] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 967.107357][T13286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 967.117135][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 967.127361][T14148] pwc: recv_control_msg error -32 req 04 val 1000 [ 967.134000][T13286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 967.144319][T13286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 967.158536][T13286] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 967.168441][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.180026][T14148] pwc: recv_control_msg error -32 req 04 val 1300 [ 967.244645][T14820] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 967.253705][T13286] usb 1-1: config 0 descriptor?? [ 967.406399][T14148] pwc: recv_control_msg error -32 req 04 val 1400 [ 967.449725][T14148] pwc: recv_control_msg error -32 req 02 val 2000 [ 967.561113][T14148] pwc: recv_control_msg error -32 req 02 val 2100 [ 967.720858][T14148] pwc: recv_control_msg error -32 req 04 val 1500 [ 967.761793][T13286] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 967.779588][T14148] pwc: recv_control_msg error -32 req 02 val 2500 [ 967.829043][T13286] usb 1-1: USB disconnect, device number 37 [ 967.835577][T14148] pwc: recv_control_msg error -32 req 02 val 2400 [ 967.863926][T13286] usblp0: removed [ 967.879551][T14148] pwc: recv_control_msg error -32 req 02 val 2600 [ 967.929636][T14148] pwc: recv_control_msg error -32 req 02 val 2900 [ 967.949856][T14820] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 967.968854][T14820] em28xx 3-1:0.0: board has no eeprom [ 967.979668][T14148] pwc: recv_control_msg error -32 req 02 val 2800 [ 968.269580][T14148] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.277042][T14148] pwc: Registered as video103. [ 968.282954][T14148] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 968.293008][T13286] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 968.306580][T14148] usb 5-1: USB disconnect, device number 39 [ 968.330780][ T4232] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 968.539712][T13286] usb 1-1: Using ep0 maxpacket: 32 [ 968.659666][T13286] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 968.668157][T13286] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 968.681564][T13286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 968.693040][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 968.705521][T13286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 968.717859][T13286] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 968.732593][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 968.740841][T13286] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 968.750956][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.764408][T13286] usb 1-1: config 0 descriptor?? [ 968.830394][ T4232] usb 2-1: config 1 has an invalid interface number: 48 but max is 1 [ 968.845968][ T4232] usb 2-1: config 1 has no interface number 1 [ 968.853082][ T4232] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 968.867565][ T4232] usb 2-1: too many endpoints for config 1 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 968.889067][ T4232] usb 2-1: config 1 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 968.912875][ T4232] usb 2-1: config 1 interface 0 has no altsetting 0 [ 968.926546][ T4232] usb 2-1: config 1 interface 48 has no altsetting 0 [ 969.023447][T13286] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 969.079773][T16858] em28xx 3-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 969.093145][ T4232] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 969.107396][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.119773][ T4232] usb 2-1: Product: syz [ 969.124325][ T4232] usb 2-1: Manufacturer: syz [ 969.129476][T14820] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 969.138705][ T4232] usb 2-1: SerialNumber: syz [ 969.144048][T14820] em28xx 3-1:0.0: dvb set to bulk mode. [ 969.156398][T13286] em28xx 3-1:0.0: Binding DVB extension [ 969.176357][T14820] usb 3-1: USB disconnect, device number 20 [ 969.184325][T14820] em28xx 3-1:0.0: Disconnecting em28xx [ 969.280400][T13286] em28xx 3-1:0.0: Registering input extension [ 969.289756][T14820] em28xx 3-1:0.0: Closing input extension [ 969.365116][T14820] em28xx 3-1:0.0: Freeing device [ 969.435650][ T4232] smsusb:smsusb_probe: board id=8, interface number 0 [ 969.489270][T16862] udc-core: couldn't find an available UDC or it's busy [ 969.491498][ T4232] smsusb:smsusb_probe: board id=8, interface number 48 [ 969.499264][T16862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 969.523730][T16862] udc-core: couldn't find an available UDC or it's busy [ 969.527321][ T4232] usb 2-1: USB disconnect, device number 31 [ 969.556239][T16862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 969.730887][T16890] netlink: 'syz.2.3754': attribute type 10 has an invalid length. [ 969.752573][T16890] batman_adv: batadv0: Adding interface: netdevsim0 [ 969.760282][T16890] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.788031][T16890] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 970.123201][T16888] udc-core: couldn't find an available UDC or it's busy [ 970.130852][T16888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 970.144605][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 970.154090][T16902] netlink: set zone limit has 8 unknown bytes [ 970.953826][T16919] netlink: 'syz.1.3765': attribute type 25 has an invalid length. [ 970.971385][T16919] netlink: 'syz.1.3765': attribute type 29 has an invalid length. [ 971.022323][T16922] netlink: 'syz.6.3766': attribute type 10 has an invalid length. [ 971.039396][T16922] team0: Device wlan1 is up. Set it down before adding it as a team port [ 971.127134][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3768'. [ 971.138458][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3768'. [ 971.149798][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3768'. [ 971.159932][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3768'. [ 971.198384][T13379] usb 1-1: USB disconnect, device number 38 [ 971.216725][T13379] usblp0: removed [ 972.148531][T16959] netlink: 'syz.4.3778': attribute type 2 has an invalid length. [ 972.181315][T16959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3778'. [ 972.398830][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3784'. [ 972.481861][T16975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3774'. [ 972.491051][T16975] netlink: set zone limit has 8 unknown bytes [ 972.571283][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3784'. [ 972.583168][T16976] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3784'. [ 972.693044][T16983] tipc: Started in network mode [ 972.698132][T16983] tipc: Node identity 84e, cluster identity 4711 [ 972.704734][T16983] tipc: Node number set to 2126 [ 974.727864][T17034] netlink: set zone limit has 8 unknown bytes [ 975.075243][ T4231] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 975.986703][ T4231] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 976.016842][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.041011][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.059824][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 976.334762][ T4231] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 976.359515][ T4231] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 976.381535][ T4231] usb 3-1: Manufacturer: syz [ 976.395905][ T4231] usb 3-1: config 0 descriptor?? [ 976.675447][T17076] __nla_validate_parse: 2 callbacks suppressed [ 976.675464][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3821'. [ 976.691783][T17076] netlink: set zone limit has 8 unknown bytes [ 976.871438][ T4231] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 976.879172][ T4231] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 976.895756][ T4231] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 977.186922][ T4232] usb 3-1: USB disconnect, device number 21 [ 978.020037][T13379] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 978.441652][T13379] usb 7-1: Using ep0 maxpacket: 32 [ 978.562661][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3838'. [ 978.572632][T17128] netlink: set zone limit has 8 unknown bytes [ 979.219578][T13379] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 979.228064][T13379] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 979.256616][T13379] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 979.266094][T13379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 979.304043][T13379] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 979.337435][T13379] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.395296][T13379] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 979.442758][T13379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.491950][T13379] usb 7-1: config 0 descriptor?? [ 979.619288][ T26] audit: type=1326 audit(1774643323.317:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34744e9799 code=0x7ffc0000 [ 979.676114][ T26] audit: type=1326 audit(1774643323.327:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 979.750693][ T26] audit: type=1326 audit(1774643323.327:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 979.782785][T13379] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 979.807776][ T26] audit: type=1326 audit(1774643323.327:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 979.824743][T13379] usb 7-1: USB disconnect, device number 12 [ 979.872472][T13379] usblp0: removed [ 979.879137][ T26] audit: type=1326 audit(1774643323.327:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 979.953388][ T26] audit: type=1326 audit(1774643323.327:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 980.007753][ T26] audit: type=1326 audit(1774643323.327:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 980.039572][T14959] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 980.070092][ T26] audit: type=1326 audit(1774643323.327:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 980.168983][ T26] audit: type=1326 audit(1774643323.327:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 980.384440][ T26] audit: type=1326 audit(1774643323.327:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.0.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f347448ab19 code=0x7ffc0000 [ 980.508737][T13379] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 980.910390][T13379] usb 7-1: Using ep0 maxpacket: 32 [ 980.999702][T14959] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 981.051071][T14959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.091126][T13379] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 981.098895][T13379] usb 7-1: can't read configurations, error -71 [ 981.134096][T14959] usb 2-1: Product: syz [ 981.159458][T14959] usb 2-1: Manufacturer: syz [ 981.164108][T14959] usb 2-1: SerialNumber: syz [ 981.210915][T14959] usb 2-1: config 0 descriptor?? [ 981.479605][T14959] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 983.819552][T14959] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 983.870300][T14959] usb 2-1: USB disconnect, device number 32 [ 984.119581][T13379] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 984.389503][T13379] usb 1-1: Using ep0 maxpacket: 32 [ 984.529744][T13379] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 984.558118][T13379] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 984.627534][T13379] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 984.677972][T13379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 984.742242][T13379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 984.894366][T13379] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 985.090737][T13379] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 985.230619][T13379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.431957][T13379] usb 1-1: config 0 descriptor?? [ 985.607829][T17220] loop4: detected capacity change from 0 to 512 [ 985.681726][T17220] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 985.840918][T13379] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 985.923226][T13379] usb 1-1: USB disconnect, device number 39 [ 985.962728][T13379] usblp0: removed [ 986.033812][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3878'.  E  PC   /dev/fusefd=0x0000000000000008,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)HL@ , P <,  "./file0/file0[ 986.599556][T13379] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 986.998295][T17247] tipc: Started in network mode [ 987.003442][T17247] tipc: Node identity 84e, cluster identity 4711 [ 987.010114][T17247] tipc: Node number set to 2126 [ 987.045662][T13379] usb 1-1: Using ep0 maxpacket: 32 [ 987.369614][T13379] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 987.377689][T13379] usb 1-1: can't read configurations, error -71 [ 989.504998][T14820] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 989.770304][T14820] usb 3-1: Using ep0 maxpacket: 32 [ 989.892598][T14820] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 989.902240][T14820] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 989.922481][T14820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 989.960509][T14820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 989.984229][T14820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 990.024742][T14820] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 990.092467][T14820] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 990.129403][T14820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.180219][T14820] usb 3-1: config 0 descriptor?? [ 990.357362][T17327] netlink: 'syz.6.3907': attribute type 1 has an invalid length. [ 990.460803][T14820] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 990.513384][T14820] usb 3-1: USB disconnect, device number 22 [ 990.590006][T14820] usblp0: removed [ 990.629714][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.721217][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.017597][T14820] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 991.280739][T14820] usb 3-1: Using ep0 maxpacket: 32 [ 991.399763][T14820] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 991.418556][T14820] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 991.455969][T14820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 991.507829][T14820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 991.538732][T14820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 991.569624][T13379] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 991.577552][T14820] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 991.615948][T14820] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 991.651488][T14820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.706190][T14820] usb 3-1: config 0 descriptor?? [ 991.749549][T14820] usb 3-1: can't set config #0, error -71 [ 991.779880][T14820] usb 3-1: USB disconnect, device number 23 [ 992.009729][T13379] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.040817][T13379] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 992.099412][T13379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.150189][T13379] usb 5-1: config 0 descriptor?? [ 992.212821][T13379] pwc: Askey VC010 type 2 USB webcam detected. [ 992.525455][T17382] block device autoloading is deprecated and will be removed. [ 992.629488][T13379] pwc: recv_control_msg error -32 req 02 val 2b00 [ 992.690091][T13379] pwc: recv_control_msg error -32 req 02 val 2700 [ 992.730107][T13379] pwc: recv_control_msg error -32 req 02 val 2c00 [ 992.739687][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 992.782542][T13379] pwc: recv_control_msg error -32 req 04 val 1000 [ 992.821671][T13379] pwc: recv_control_msg error -32 req 04 val 1300 [ 992.861434][T13379] pwc: recv_control_msg error -32 req 04 val 1400 [ 992.931368][T13379] pwc: recv_control_msg error -32 req 02 val 2000 [ 992.970070][T13379] pwc: recv_control_msg error -32 req 02 val 2100 [ 992.999599][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 993.048481][T13379] pwc: recv_control_msg error -32 req 04 val 1500 [ 993.119817][T13379] pwc: recv_control_msg error -32 req 02 val 2500 [ 993.138040][T17392] loop1: detected capacity change from 0 to 764 [ 993.145320][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 993.159534][T13379] pwc: recv_control_msg error -32 req 02 val 2400 [ 993.174492][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 993.204144][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 993.229607][T13379] pwc: recv_control_msg error -32 req 02 val 2600 [ 993.275858][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 993.289522][T13379] pwc: recv_control_msg error -32 req 02 val 2900 [ 993.347745][T13379] pwc: recv_control_msg error -32 req 02 val 2800 [ 993.371788][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 993.422672][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 993.507434][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 993.567052][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.611870][ T23] usb 1-1: config 0 descriptor?? [ 993.650890][T13379] pwc: recv_control_msg error -71 req 04 val 1200 [ 993.699700][T13379] pwc: Registered as video103. [ 993.712964][T13379] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 993.836842][T13379] usb 5-1: USB disconnect, device number 40 [ 993.891135][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 993.987463][T17400] device macvlan2 entered promiscuous mode [ 993.998604][ T23] usb 1-1: USB disconnect, device number 42 [ 994.032054][T17400] device bond1 entered promiscuous mode [ 994.038575][T17400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 994.049209][ T23] usblp0: removed [ 994.159656][T17400] device bond1 left promiscuous mode [ 994.489517][ T23] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 995.197867][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 995.203141][ T4231] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 995.339726][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 995.365911][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 995.379570][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 995.399023][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 995.419569][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 995.429444][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 995.447059][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 995.466072][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.496677][ T23] usb 1-1: config 0 descriptor?? [ 995.529719][ T23] usb 1-1: can't set config #0, error -71 [ 995.550480][ T23] usb 1-1: USB disconnect, device number 43 [ 995.757746][ T4231] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 995.795160][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.823982][ T4231] usb 5-1: Product: syz [ 995.834106][ T4231] usb 5-1: Manufacturer: syz [ 995.838755][ T4231] usb 5-1: SerialNumber: syz [ 996.023580][ T4231] usb 5-1: config 0 descriptor?? [ 996.479617][ T4231] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 996.659541][ T23] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 996.949491][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 997.105916][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 997.119097][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 997.147689][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 997.177405][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.207948][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.240298][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.290077][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 997.349434][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.430344][ T23] usb 1-1: config 0 descriptor?? [ 997.701654][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 997.758947][ T23] usb 1-1: USB disconnect, device number 44 [ 997.793015][ T23] usblp0: removed [ 998.085369][T17496] loop1: detected capacity change from 0 to 128 [ 998.251757][T17496] attempt to access beyond end of device [ 998.251757][T17496] loop1: rw=2049, want=250, limit=128 [ 998.314916][T17496] attempt to access beyond end of device [ 998.314916][T17496] loop1: rw=2049, want=154, limit=128 [ 998.609571][ T4231] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 998.633030][ T4231] usb 5-1: USB disconnect, device number 41 [ 998.681148][T15074] udevd[15074]: setting mode of /dev/bus/usb/005/041 to 020664 failed: No such file or directory [ 998.709430][ T23] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 998.715008][T15074] udevd[15074]: setting owner of /dev/bus/usb/005/041 to uid=0, gid=0 failed: No such file or directory [ 998.949448][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 999.319497][ T23] usb 1-1: unable to read config index 0 descriptor/all [ 999.327235][ T23] usb 1-1: can't read configurations, error -71 [ 999.620330][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3989'. [ 999.629653][T17539] netlink: set zone limit has 8 unknown bytes [ 1000.349423][T14820] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1000.709644][T14820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.739488][T14820] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1000.778969][T14820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.799458][T13286] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1000.830961][T14820] usb 5-1: config 0 descriptor?? [ 1000.901684][T14820] pwc: Askey VC010 type 2 USB webcam detected. [ 1001.049552][T13286] usb 2-1: Using ep0 maxpacket: 32 [ 1001.075615][T17586] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1001.168460][T17587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1001.177768][T13286] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1001.208168][T13286] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1001.316526][T13286] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1001.329480][T14820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1001.380008][T14820] pwc: recv_control_msg error -32 req 02 val 2700 [ 1001.418016][T13286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1001.449982][T14820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1001.519914][T14820] pwc: recv_control_msg error -32 req 04 val 1000 [ 1001.528717][T13286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1001.589705][T14820] pwc: recv_control_msg error -32 req 04 val 1300 [ 1001.632131][T13286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1001.669743][T14820] pwc: recv_control_msg error -32 req 04 val 1400 [ 1001.729598][T14820] pwc: recv_control_msg error -32 req 02 val 2000 [ 1001.780040][T13286] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1001.792055][T14820] pwc: recv_control_msg error -32 req 02 val 2100 [ 1001.884946][T13286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.901796][T14820] pwc: recv_control_msg error -32 req 04 val 1500 [ 1001.978388][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1002.027173][T14820] pwc: recv_control_msg error -32 req 02 val 2500 [ 1002.044758][T13286] usb 2-1: config 0 descriptor?? [ 1002.129934][T14820] pwc: recv_control_msg error -32 req 02 val 2400 [ 1002.170951][T14820] pwc: recv_control_msg error -32 req 02 val 2600 [ 1002.172398][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.190794][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.289849][T14820] pwc: recv_control_msg error -32 req 02 val 2900 [ 1002.390260][T13286] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1002.402342][T14820] pwc: recv_control_msg error -32 req 02 val 2800 [ 1002.656953][T13286] usb 2-1: USB disconnect, device number 33 [ 1002.759803][T14820] pwc: recv_control_msg error -71 req 04 val 1200 [ 1002.850357][T14820] pwc: Registered as video103. [ 1002.917804][T13286] usblp0: removed [ 1002.976655][T14820] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 1003.136843][T14820] usb 5-1: USB disconnect, device number 42 [ 1003.389487][T13286] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1003.849653][T13286] usb 2-1: device not accepting address 34, error -71 [ 1004.515412][T17633] device syzkaller0 entered promiscuous mode [ 1005.083490][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1005.132708][T17640] device bond0 entered promiscuous mode [ 1005.153666][T17640] device bond_slave_0 entered promiscuous mode [ 1005.161723][T17640] device bond_slave_1 entered promiscuous mode [ 1005.168244][T17640] device wlan1 entered promiscuous mode [ 1005.183166][T17640] device gretap0 entered promiscuous mode [ 1005.196702][T17640] device hsr1 entered promiscuous mode [ 1005.339553][T14820] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1005.531355][T13286] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1005.699748][T14820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.715920][T14820] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1005.735889][T14820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.767929][T14820] usb 7-1: config 0 descriptor?? [ 1005.779457][T13286] usb 2-1: Using ep0 maxpacket: 32 [ 1005.822048][T14820] pwc: Askey VC010 type 2 USB webcam detected. [ 1005.899781][T13286] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1005.913354][T13286] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1005.932527][T13286] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1005.952252][T13286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1005.973467][T13286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1005.996245][T13286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1006.022777][T13286] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1006.033592][T13286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.061941][T13286] usb 2-1: config 0 descriptor?? [ 1006.308825][T14820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1006.330840][T13286] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1006.359541][T14820] pwc: recv_control_msg error -32 req 02 val 2700 [ 1006.371923][T13286] usb 2-1: USB disconnect, device number 36 [ 1006.396874][T13286] usblp0: removed [ 1006.401411][T14820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1006.449581][T14820] pwc: recv_control_msg error -32 req 04 val 1000 [ 1006.489504][T14820] pwc: recv_control_msg error -32 req 04 val 1300 [ 1006.529597][T14820] pwc: recv_control_msg error -32 req 04 val 1400 [ 1006.569572][T14820] pwc: recv_control_msg error -32 req 02 val 2000 [ 1006.609540][T14820] pwc: recv_control_msg error -32 req 02 val 2100 [ 1006.659519][T14820] pwc: recv_control_msg error -32 req 04 val 1500 [ 1006.699624][T14820] pwc: recv_control_msg error -32 req 02 val 2500 [ 1006.739554][T14820] pwc: recv_control_msg error -32 req 02 val 2400 [ 1006.789166][T14820] pwc: recv_control_msg error -32 req 02 val 2600 [ 1006.839641][T14820] pwc: recv_control_msg error -32 req 02 val 2900 [ 1006.879481][T13286] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1006.894224][T14820] pwc: recv_control_msg error -32 req 02 val 2800 [ 1007.159600][T14820] pwc: recv_control_msg error -71 req 04 val 1200 [ 1007.168493][T14820] pwc: Registered as video103. [ 1007.188225][T14820] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input34 [ 1007.198315][T13286] usb 2-1: Using ep0 maxpacket: 32 [ 1007.215069][T17702] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1007.248202][T14820] usb 7-1: USB disconnect, device number 15 [ 1007.319759][T13286] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1007.332571][T13286] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1007.359425][T13286] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1007.374012][T13286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1007.384691][T13286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1007.395449][T13286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1007.409491][T13286] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1007.419041][T13286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.447476][T13286] usb 2-1: config 0 descriptor?? [ 1007.563312][T17708] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 1007.722439][T13286] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1007.860877][T17715] device syzkaller0 entered promiscuous mode [ 1007.951620][T17719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.966079][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1007.989200][T17722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.073422][T17726] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1008.162625][T17719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.175021][T17644] udc-core: couldn't find an available UDC or it's busy [ 1008.188406][T17644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1008.226052][ T6945] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1008.235415][T17644] udc-core: couldn't find an available UDC or it's busy [ 1008.246837][T17644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1008.305467][T17719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.366142][T17719] batman_adv: batadv0: Removing interface: netdevsim0 [ 1008.381176][T17719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.491554][T17719] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.507517][T17719] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.535284][T17719] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.574135][T17719] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.864406][T17723] udc-core: couldn't find an available UDC or it's busy [ 1008.874232][T17723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1009.119532][T13286] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1009.483349][T13286] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.504538][T13286] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1009.518587][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.550639][T13286] usb 1-1: config 0 descriptor?? [ 1009.602249][T13286] pwc: Askey VC010 type 2 USB webcam detected. [ 1009.631203][T17781] device syzkaller1 entered promiscuous mode [ 1009.851475][T17796] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 1009.904681][T13482] usb 2-1: USB disconnect, device number 37 [ 1009.932405][T13482] usblp0: removed [ 1009.937531][T17796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1009.965872][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4074'. [ 1010.029662][T13286] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1010.036471][T17799] bond1: (slave geneve2): making interface the new active one [ 1010.063319][T17799] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1010.073640][ T6945] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1010.082929][T13286] pwc: recv_control_msg error -32 req 02 val 2700 [ 1010.169811][T13286] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1010.209594][T13286] pwc: recv_control_msg error -32 req 04 val 1000 [ 1010.249526][T13286] pwc: recv_control_msg error -32 req 04 val 1300 [ 1010.299515][T13286] pwc: recv_control_msg error -32 req 04 val 1400 [ 1010.458087][T13286] pwc: recv_control_msg error -32 req 02 val 2000 [ 1010.467805][T17805] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1010.509631][T13286] pwc: recv_control_msg error -32 req 02 val 2100 [ 1010.549594][T13286] pwc: recv_control_msg error -32 req 04 val 1500 [ 1010.589579][T13286] pwc: recv_control_msg error -32 req 02 val 2500 [ 1010.629637][T13286] pwc: recv_control_msg error -32 req 02 val 2400 [ 1010.669554][T13286] pwc: recv_control_msg error -32 req 02 val 2600 [ 1010.719780][T13286] pwc: recv_control_msg error -32 req 02 val 2900 [ 1010.759674][T13286] pwc: recv_control_msg error -32 req 02 val 2800 [ 1011.069787][T13286] pwc: recv_control_msg error -71 req 04 val 1200 [ 1011.099247][T13286] pwc: Registered as video103. [ 1011.107394][T13286] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 1011.138658][T13286] usb 1-1: USB disconnect, device number 47 [ 1011.709624][ T4229] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1011.949540][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 1012.069745][ T4229] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1012.081216][ T4229] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1012.133878][ T4229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1012.159622][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.184396][ T4229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1012.219545][ T4229] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1012.237208][ T4229] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1012.271938][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.308032][ T4229] usb 7-1: config 0 descriptor?? [ 1012.549497][ T23] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1012.576398][ T4229] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1012.614410][ T4229] usb 7-1: USB disconnect, device number 16 [ 1012.630935][ T4229] usblp0: removed [ 1012.809613][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1012.929788][ T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1012.940739][ T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1012.953041][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1012.964705][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.974599][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1012.984605][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1012.997860][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1013.007199][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.017707][ T23] usb 5-1: config 0 descriptor?? [ 1013.149716][ T4229] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1013.429485][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 1013.490451][ T23] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1013.550206][ T4229] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1013.559481][ T4229] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1013.568845][ T4229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1013.579586][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1013.589692][ T4229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1013.602664][ T4229] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1013.781348][ T4229] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1013.813828][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.858572][ T4229] usb 7-1: config 0 descriptor?? [ 1014.027242][ T23] usb 5-1: USB disconnect, device number 43 [ 1014.053424][ T23] usblp0: removed [ 1014.131874][ T4229] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1014.444690][ T23] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1014.514939][T17889] device bond0 entered promiscuous mode [ 1014.521177][T17889] device bond_slave_0 entered promiscuous mode [ 1014.527519][T17889] device bond_slave_1 entered promiscuous mode [ 1014.578807][T17837] udc-core: couldn't find an available UDC or it's busy [ 1014.604049][T17837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1014.638569][T17837] udc-core: couldn't find an available UDC or it's busy [ 1014.657506][T17837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1014.723511][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1014.748845][T17888] device bond0 left promiscuous mode [ 1014.762632][T17888] device bond_slave_0 left promiscuous mode [ 1014.774187][T17888] device bond_slave_1 left promiscuous mode [ 1014.999166][ T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1015.008304][ T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1015.017453][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1015.026632][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1015.037063][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1015.046809][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1015.061038][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1015.070303][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.091553][ T23] usb 5-1: config 0 descriptor?? [ 1015.261781][T17884] udc-core: couldn't find an available UDC or it's busy [ 1015.270736][ T23] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1015.285187][T17884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1015.310220][ T23] usb 5-1: USB disconnect, device number 44 [ 1015.336074][ T23] usblp1: removed [ 1015.660132][T17907] netlink: 'syz.0.4110': attribute type 4 has an invalid length. [ 1015.688378][T17907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1016.275942][T17917] netlink: 'syz.4.4113': attribute type 4 has an invalid length. [ 1016.299427][T17917] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1016.362961][ T4229] usb 7-1: USB disconnect, device number 17 [ 1016.401143][ T4229] usblp0: removed [ 1016.998840][T17945] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1017.017890][ T4229] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1017.274692][T17953] device syzkaller0 entered promiscuous mode [ 1017.395193][T17956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1017.423195][T17957] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1017.448687][T17957] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1017.469386][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 1017.495573][T17961] device syzkaller0 entered promiscuous mode [ 1017.600476][ T4229] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1017.618734][ T4229] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1017.628436][ T4229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1017.645229][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1017.693368][ T4229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1017.703947][ T4229] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1017.717877][ T4229] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1017.728839][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.871441][ T4229] usb 7-1: config 0 descriptor?? [ 1018.150937][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 1018.310584][T17980] device syzkaller0 entered promiscuous mode [ 1018.321451][ T4229] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1018.335635][ T4229] usb 7-1: USB disconnect, device number 18 [ 1018.384266][ T4229] usblp0: removed [ 1018.498814][T17985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.709906][T17996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1018.817753][T17998] device syzkaller0 entered promiscuous mode [ 1018.839551][ T4229] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1019.109656][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 1019.253991][ T4229] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1019.272932][ T4229] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1019.305424][ T4229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1019.351220][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1019.392051][ T4229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1019.592669][ T4229] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1019.622060][ T4229] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1019.632063][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.712014][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4146'. [ 1019.721307][T18010] netlink: set zone limit has 8 unknown bytes [ 1019.860874][ T4229] usb 7-1: config 0 descriptor?? [ 1019.890149][ T4229] usb 7-1: can't set config #0, error -71 [ 1019.953457][ T4229] usb 7-1: USB disconnect, device number 19 [ 1020.811073][T18027] netlink: 'syz.2.4153': attribute type 4 has an invalid length. [ 1021.466797][T18052] netlink: 'syz.6.4163': attribute type 5 has an invalid length. [ 1021.734024][T18056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1022.340944][T18064] @: renamed from bond_slave_1 [ 1022.347830][T18062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1022.356267][T18062] IPv6: NLM_F_CREATE should be set when creating new route [ 1023.360337][T18068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.404473][T18068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.003354][T18099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1024.012917][T18099] netlink: set zone limit has 8 unknown bytes [ 1024.898475][T18068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.918156][T18068] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.928771][T18068] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.938257][T18068] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.298172][T18117] ================================================================== [ 1025.307692][T18117] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 1025.314882][T18117] Read of size 8 at addr ffff888058561308 by task syz.1.4187/18117 [ 1025.322866][T18117] [ 1025.325309][T18117] CPU: 1 PID: 18117 Comm: syz.1.4187 Not tainted syzkaller #0 [ 1025.332781][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.342946][T18117] Call Trace: [ 1025.346645][T18117] [ 1025.349605][T18117] dump_stack_lvl+0x188/0x250 [ 1025.354532][T18117] ? show_regs_print_info+0x20/0x20 [ 1025.359951][T18117] ? _printk+0xda/0x130 [ 1025.364237][T18117] ? ax25_release+0x5ca/0x870 [ 1025.369627][T18117] ? load_image+0x400/0x400 [ 1025.374181][T18117] ? __timer_delete_sync+0x1f5/0x290 [ 1025.379529][T18117] print_address_description+0x60/0x2d0 [ 1025.385193][T18117] ? ax25_release+0x5ca/0x870 [ 1025.390080][T18117] kasan_report+0xdf/0x130 [ 1025.394555][T18117] ? ax25_release+0x5ca/0x870 [ 1025.399515][T18117] ax25_release+0x5ca/0x870 [ 1025.404547][T18117] sock_close+0xd5/0x240 [ 1025.409040][T18117] ? sock_mmap+0x90/0x90 [ 1025.413312][T18117] __fput+0x234/0x930 [ 1025.417433][T18117] task_work_run+0x125/0x1a0 [ 1025.422054][T18117] exit_to_user_mode_loop+0x10f/0x130 [ 1025.427714][T18117] exit_to_user_mode_prepare+0xee/0x180 [ 1025.433405][T18117] syscall_exit_to_user_mode+0x16/0x40 [ 1025.438900][T18117] do_syscall_64+0x58/0xa0 [ 1025.443356][T18117] ? clear_bhb_loop+0x30/0x80 [ 1025.448339][T18117] ? clear_bhb_loop+0x30/0x80 [ 1025.453124][T18117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1025.459075][T18117] RIP: 0033:0x7f7c44e6a799 [ 1025.463611][T18117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.483793][T18117] RSP: 002b:00007fff812c06e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1025.492996][T18117] RAX: 0000000000000000 RBX: 00007fff812c07d0 RCX: 00007f7c44e6a799 [ 1025.501639][T18117] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1025.509628][T18117] RBP: 00000000000fa4ab R08: 0000000000000001 R09: 0000000000000000 [ 1025.517627][T18117] R10: 0000001b2f820000 R11: 0000000000000246 R12: 00007fff812c0810 [ 1025.526229][T18117] R13: 00007f7c450e3fac R14: 00000000000fa503 R15: 00007f7c450e3fa0 [ 1025.534239][T18117] [ 1025.538377][T18117] [ 1025.540719][T18117] Allocated by task 14785: [ 1025.545146][T18117] __kasan_kmalloc+0xb5/0xf0 [ 1025.549774][T18117] ax25_dev_device_up+0x50/0x580 [ 1025.554745][T18117] ax25_device_event+0x483/0x4f0 [ 1025.559695][T18117] raw_notifier_call_chain+0xcb/0x160 [ 1025.565138][T18117] __dev_notify_flags+0x194/0x300 [ 1025.570194][T18117] dev_change_flags+0xe3/0x1a0 [ 1025.574989][T18117] dev_ifsioc+0x130/0xd50 [ 1025.579345][T18117] dev_ioctl+0x545/0xe30 [ 1025.583609][T18117] sock_do_ioctl+0x245/0x320 [ 1025.588225][T18117] sock_ioctl+0x4d2/0x710 [ 1025.593036][T18117] __se_sys_ioctl+0xfa/0x170 [ 1025.597739][T18117] do_syscall_64+0x4c/0xa0 [ 1025.602270][T18117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1025.608276][T18117] [ 1025.610635][T18117] Freed by task 18119: [ 1025.614711][T18117] kasan_set_track+0x4b/0x70 [ 1025.619323][T18117] kasan_set_free_info+0x1f/0x40 [ 1025.624746][T18117] ____kasan_slab_free+0xd5/0x110 [ 1025.630598][T18117] slab_free_freelist_hook+0xea/0x170 [ 1025.636088][T18117] kfree+0xef/0x2a0 [ 1025.640043][T18117] ax25_device_event+0x4b4/0x4f0 [ 1025.645091][T18117] raw_notifier_call_chain+0xcb/0x160 [ 1025.650569][T18117] __dev_notify_flags+0x158/0x300 [ 1025.655616][T18117] dev_change_flags+0xe3/0x1a0 [ 1025.660388][T18117] dev_ifsioc+0x130/0xd50 [ 1025.664736][T18117] dev_ioctl+0x545/0xe30 [ 1025.668998][T18117] sock_do_ioctl+0x245/0x320 [ 1025.673607][T18117] sock_ioctl+0x4d2/0x710 [ 1025.677961][T18117] __se_sys_ioctl+0xfa/0x170 [ 1025.682561][T18117] do_syscall_64+0x4c/0xa0 [ 1025.687156][T18117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1025.693068][T18117] [ 1025.695415][T18117] Last potentially related work creation: [ 1025.701215][T18117] kasan_save_stack+0x35/0x60 [ 1025.705910][T18117] kasan_record_aux_stack+0xb8/0x100 [ 1025.711206][T18117] insert_work+0x54/0x3d0 [ 1025.715553][T18117] __queue_work+0x9c5/0xd50 [ 1025.720077][T18117] queue_work_on+0x124/0x1f0 [ 1025.724860][T18117] inetaddr_event+0xec/0x150 [ 1025.729512][T18117] blocking_notifier_call_chain+0x103/0x1b0 [ 1025.735603][T18117] __inet_insert_ifa+0x9f7/0xbe0 [ 1025.740596][T18117] inet_rtm_newaddr+0x99a/0x1890 [ 1025.745866][T18117] rtnetlink_rcv_msg+0x844/0xf30 [ 1025.750831][T18117] netlink_rcv_skb+0x1f5/0x440 [ 1025.755629][T18117] netlink_unicast+0x774/0x920 [ 1025.760409][T18117] netlink_sendmsg+0x8ba/0xbe0 [ 1025.765206][T18117] __sys_sendto+0x46d/0x620 [ 1025.770040][T18117] __x64_sys_sendto+0xda/0xf0 [ 1025.774957][T18117] do_syscall_64+0x4c/0xa0 [ 1025.779395][T18117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1025.785331][T18117] [ 1025.787672][T18117] Second to last potentially related work creation: [ 1025.794348][T18117] kasan_save_stack+0x35/0x60 [ 1025.799133][T18117] kasan_record_aux_stack+0xb8/0x100 [ 1025.804441][T18117] insert_work+0x54/0x3d0 [ 1025.808781][T18117] __queue_work+0x9c5/0xd50 [ 1025.813301][T18117] queue_work_on+0x124/0x1f0 [ 1025.817930][T18117] inet6addr_event+0x9c/0xc0 [ 1025.822528][T18117] atomic_notifier_call_chain+0x15d/0x280 [ 1025.828261][T18117] ipv6_add_addr+0xb57/0xe10 [ 1025.832894][T18117] addrconf_add_linklocal+0x26a/0x6c0 [ 1025.838277][T18117] addrconf_addr_gen+0x559/0x6b0 [ 1025.843314][T18117] addrconf_init_auto_addrs+0x747/0xb00 [ 1025.848854][T18117] addrconf_notify+0xa6b/0xf00 [ 1025.853713][T18117] raw_notifier_call_chain+0xcb/0x160 [ 1025.859107][T18117] netdev_state_change+0xe0/0x160 [ 1025.864295][T18117] linkwatch_do_dev+0x10d/0x160 [ 1025.869155][T18117] __linkwatch_run_queue+0x4b1/0x7c0 [ 1025.874535][T18117] linkwatch_event+0x48/0x50 [ 1025.879217][T18117] process_one_work+0x85f/0x1010 [ 1025.884277][T18117] worker_thread+0xaa6/0x1290 [ 1025.888965][T18117] kthread+0x436/0x520 [ 1025.893139][T18117] ret_from_fork+0x1f/0x30 [ 1025.897672][T18117] [ 1025.900189][T18117] The buggy address belongs to the object at ffff888058561300 [ 1025.900189][T18117] which belongs to the cache kmalloc-192 of size 192 [ 1025.914368][T18117] The buggy address is located 8 bytes inside of [ 1025.914368][T18117] 192-byte region [ffff888058561300, ffff8880585613c0) [ 1025.927631][T18117] The buggy address belongs to the page: [ 1025.933446][T18117] page:ffffea0001615840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58561 [ 1025.943750][T18117] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1025.951403][T18117] raw: 00fff00000000200 ffffea00018bd340 0000000700000002 ffff888016c41a00 [ 1025.959987][T18117] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1025.968564][T18117] page dumped because: kasan: bad access detected [ 1025.975055][T18117] page_owner tracks the page as allocated [ 1025.980753][T18117] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 6697, ts 269374273561, free_ts 268276646625 [ 1025.999060][T18117] get_page_from_freelist+0x1bbd/0x1ca0 [ 1026.004693][T18117] __alloc_pages+0x1ee/0x480 [ 1026.009273][T18117] new_slab+0xc0/0x4b0 [ 1026.013420][T18117] ___slab_alloc+0x80a/0xdd0 [ 1026.017997][T18117] __kmalloc+0x1cd/0x330 [ 1026.022225][T18117] hash_netnet4_add+0x2713/0x32a0 [ 1026.027312][T18117] hash_netnet4_uadt+0xb79/0xe70 [ 1026.032258][T18117] call_ad+0x359/0xa00 [ 1026.036323][T18117] ip_set_ad+0x816/0x9c0 [ 1026.040749][T18117] nfnetlink_rcv_msg+0xbb0/0x11f0 [ 1026.045780][T18117] netlink_rcv_skb+0x1f5/0x440 [ 1026.050542][T18117] nfnetlink_rcv+0x2b4/0x2460 [ 1026.055380][T18117] netlink_unicast+0x774/0x920 [ 1026.060224][T18117] netlink_sendmsg+0x8ba/0xbe0 [ 1026.065077][T18117] ____sys_sendmsg+0x5b7/0x8f0 [ 1026.069905][T18117] ___sys_sendmsg+0x236/0x2e0 [ 1026.074600][T18117] page last free stack trace: [ 1026.079258][T18117] free_unref_page_prepare+0x637/0x6c0 [ 1026.084711][T18117] free_unref_page+0x8f/0x2a0 [ 1026.089460][T18117] __unfreeze_partials+0x1a5/0x200 [ 1026.094647][T18117] put_cpu_partial+0x12d/0x190 [ 1026.099520][T18117] qlist_free_all+0x35/0x90 [ 1026.104042][T18117] kasan_quarantine_reduce+0x150/0x160 [ 1026.109604][T18117] __kasan_slab_alloc+0x2f/0xd0 [ 1026.114463][T18117] slab_post_alloc_hook+0x4c/0x380 [ 1026.119586][T18117] kmem_cache_alloc+0x100/0x290 [ 1026.124531][T18117] ext4_init_io_end+0x25/0x120 [ 1026.129499][T18117] ext4_writepages+0xa79/0x2df0 [ 1026.134350][T18117] do_writepages+0x476/0x6e0 [ 1026.138925][T18117] __writeback_single_inode+0x153/0xda0 [ 1026.144463][T18117] writeback_sb_inodes+0xa4e/0x1680 [ 1026.149671][T18117] __writeback_inodes_wb+0x12a/0x3f0 [ 1026.154941][T18117] wb_writeback+0x46f/0xbe0 [ 1026.159432][T18117] [ 1026.161743][T18117] Memory state around the buggy address: [ 1026.167380][T18117] ffff888058561200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.175529][T18117] ffff888058561280: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1026.183574][T18117] >ffff888058561300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1026.191622][T18117] ^ [ 1026.195949][T18117] ffff888058561380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1026.204221][T18117] ffff888058561400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.212266][T18117] ================================================================== [ 1026.220315][T18117] Disabling lock debugging due to kernel taint [ 1026.232008][T18117] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1026.239231][T18117] CPU: 0 PID: 18117 Comm: syz.1.4187 Tainted: G B syzkaller #0 [ 1026.248060][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1026.258109][T18117] Call Trace: [ 1026.261380][T18117] [ 1026.264299][T18117] dump_stack_lvl+0x188/0x250 [ 1026.268989][T18117] ? show_regs_print_info+0x20/0x20 [ 1026.274355][T18117] ? load_image+0x400/0x400 [ 1026.278872][T18117] panic+0x2e5/0x810 [ 1026.282845][T18117] ? bpf_jit_dump+0xd0/0xd0 [ 1026.287421][T18117] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1026.293479][T18117] ? _raw_spin_unlock+0x40/0x40 [ 1026.298321][T18117] ? print_memory_metadata+0x314/0x400 [ 1026.304032][T18117] ? ax25_release+0x5ca/0x870 [ 1026.308698][T18117] check_panic_on_warn+0x80/0xa0 [ 1026.313896][T18117] ? ax25_release+0x5ca/0x870 [ 1026.318564][T18117] end_report+0x6d/0xf0 [ 1026.323139][T18117] kasan_report+0x102/0x130 [ 1026.327805][T18117] ? ax25_release+0x5ca/0x870 [ 1026.332467][T18117] ax25_release+0x5ca/0x870 [ 1026.337083][T18117] sock_close+0xd5/0x240 [ 1026.341329][T18117] ? sock_mmap+0x90/0x90 [ 1026.345652][T18117] __fput+0x234/0x930 [ 1026.349628][T18117] task_work_run+0x125/0x1a0 [ 1026.354211][T18117] exit_to_user_mode_loop+0x10f/0x130 [ 1026.359566][T18117] exit_to_user_mode_prepare+0xee/0x180 [ 1026.365099][T18117] syscall_exit_to_user_mode+0x16/0x40 [ 1026.370641][T18117] do_syscall_64+0x58/0xa0 [ 1026.375041][T18117] ? clear_bhb_loop+0x30/0x80 [ 1026.379715][T18117] ? clear_bhb_loop+0x30/0x80 [ 1026.384384][T18117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1026.390265][T18117] RIP: 0033:0x7f7c44e6a799 [ 1026.394754][T18117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.414519][T18117] RSP: 002b:00007fff812c06e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1026.422926][T18117] RAX: 0000000000000000 RBX: 00007fff812c07d0 RCX: 00007f7c44e6a799 [ 1026.431141][T18117] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1026.439182][T18117] RBP: 00000000000fa4ab R08: 0000000000000001 R09: 0000000000000000 [ 1026.447136][T18117] R10: 0000001b2f820000 R11: 0000000000000246 R12: 00007fff812c0810 [ 1026.455098][T18117] R13: 00007f7c450e3fac R14: 00000000000fa503 R15: 00007f7c450e3fa0 [ 1026.463149][T18117] [ 1026.466802][T18117] Kernel Offset: disabled [ 1026.471218][T18117] Rebooting in 86400 seconds..