last executing test programs: 11.037320682s ago: executing program 3 (id=59): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.440643959s ago: executing program 4 (id=62): r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@uquota}, {@dax_always}]}, 0x0, 0x96a7, &(0x7f0000012e40)="$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") r1 = openat(r0, &(0x7f0000000200)='testfile\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000300)="aa", 0x1, 0x18000) pwrite64(r1, &(0x7f0000000300)="aa", 0x1, 0x1a000) pwrite64(r1, &(0x7f00000000c0)="aa", 0x1, 0x22000) pwrite64(r1, &(0x7f0000000300)="aa", 0xffe4, 0x24000) 9.784913536s ago: executing program 3 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[], 0x0) 9.496602204s ago: executing program 1 (id=70): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r0, 0x7) 9.435373918s ago: executing program 3 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f00000001c0)=""/169, 0xa9) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0x80f6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x4000000000000000, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) 9.405664083s ago: executing program 2 (id=73): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0xf, 0x6, "3914d77f99dd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x12, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.065984318s ago: executing program 3 (id=75): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x10000) creat(&(0x7f0000000140)='./bus\x00', 0x0) 9.009906406s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b0196401010264010101"], 0xfdef) 8.774598856s ago: executing program 0 (id=77): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 8.529736472s ago: executing program 5 (id=78): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f3", 0x1, 0x8084, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) 8.431402656s ago: executing program 1 (id=79): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x490000, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x29, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="409e59", @ANYRES32=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.385430318s ago: executing program 0 (id=80): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xe) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x5, 0x12) 8.146749399s ago: executing program 5 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/udc/dummy_udc.0/uevent\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/100, 0x64) 8.008073107s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.988503098s ago: executing program 4 (id=83): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x30, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.823953446s ago: executing program 5 (id=84): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.457111964s ago: executing program 5 (id=85): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, &(0x7f0000000080)=0x901040e) 7.158937952s ago: executing program 5 (id=86): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 5.034297776s ago: executing program 5 (id=87): r0 = syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000072414060005001524120004a317a88b045e4f01a607c0ffcb7e392a08241c0200bed49f090581030002f800000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x8, 0x851c, 0x279, 0x8, 0x2, 0x200, 0x46e, 0x1, 0x40, 0xd1, 0x805, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.586493576s ago: executing program 2 (id=88): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f00000026c0)}, 0x10) 4.504156176s ago: executing program 1 (id=89): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4.501520862s ago: executing program 3 (id=90): read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 4.229865486s ago: executing program 1 (id=91): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") symlink(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3e0881, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) 4.222091558s ago: executing program 2 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.052317884s ago: executing program 0 (id=93): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 4.027962463s ago: executing program 4 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xb0, 0x8000, 0x8, 0x3}, 0x3, 0x0, 0x4f756a96, 0x3, 0xa911, 0xf, 0x6, 0xa, 0x3, 0x6, {0xe, 0xba4a, 0x5, 0x7, 0xb, 0x800}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 3.850625207s ago: executing program 2 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 3.500387999s ago: executing program 4 (id=96): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x1c) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file3\x00', 0xe08802, &(0x7f0000000180)=ANY=[], 0x1, 0x69f, &(0x7f00000004c0)="$eJzs3c1rHOcdB/DvrFay1gVHSWwnLYGKGNJSU1uycFqVQtweig+hBBcaCr2IWI6F106QlKKE0qrv1x7yB6QHHQq9tNC7IYWe2h4KoTfRQwkUekkvuqnM7Ky0sl68K0tau/l8xOw8M8/r/HbmmX1BbIBPresX07yfItcvvrpSbq+vzbTX12ZO1dntJGW6kTQ7qxT3kuLD5Fo6Sz5b7qzLF/v18/7C7I2PPln/uLPVrJeqfOOgev1ZrZdMJhmp17uNDtheY2vH3u3t7ev1em5rT7F1hGXALnQDB8O2ucvqINUf8boFHgdF5765y0RyOsl4/TqgujOWs8SJD/CIDTTLAQAAwBPqqY1sZCVnhj0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJIUaY1Uq87S6KYnU3R//3+s3pc6faMx5DE/ivvDHgAAAAAAAAAAHIHPb2QjKzmT5O/l9mbnm/0Xq8ez1eNn8k6WMp/FXMpK5rKc5SxmOslET0NjK3PLy4vTfdS8smfNK4cb/+8PVw0AAAAAAAAA/t/8NNer7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCxUSQjnVW1nO2mJ9JoJhlPMlaWW03+1k0nzSGPui/FXjvvn/w4AAAA4JGMH6LOUxvZyErOdLc3i+o9//nq/fJ43sm9LGchy2lnPjfr99Dlu/7G+tpMe31t5u762kzV8fc3OzrtfOM/Aw2jajGdzx727vn5qkQrt7JQ7bmUN6rB3Eyjqll6vh7P1rKzk5+UY2q9UutzZDfrddnZr/f7FOEoNAatMFFVGt2KyFQ9trKhpw+OxEOfneaBPU2n0f3kJ2cP6Kl7SMWAMT/drZfklw/E/JV//fZ7fTZzDLYi0UgViSs9Z9/59bWZkewb8+QLf/zd67fb9+7cvrV08dhOo5Py4Dkx0xOJ5w4++x7zSAz6YeZUFYlzW9vX8618JxczmdeymIX8IHNZHt0uP1efz+XjRE+Ukl2RurZj67WHjWSsfl46s+hDx5T5TOZUlZrLi1XdM1lIkbdyM/N5ufq7kul8JVdzNbM9z/C5fZ/h6tiqmbYx2FV/4YvZvtR/Vc7U/dVL/txvwcF1bqllXJ/uiWvvnDtR5fXu2Y7SM33cjwacG5ufqxNlHz87zG3j2DwYiemeSDx7cCR+U71qWGrfu7N4e+7tfdpffWD7pZ5r6hfHeWceWHm+PJPxeibZeXaUec9uzTI74zVWf+PSyWvsyjtX5RVF90r99h5Xahnx2ar0+T1bulLlPbc7b6Qe+T/+2ZO34/VW3vrLcOIJwIBOf+n0WOvfrb+2Pmj9vHW79er4N0999dQLYxn90+jXmlMjLzVeKP6QD/Kj7ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4S29+96duXZ7fnHvRGP/rKNNFPUP+exXpplWTmAYJ5koktX25sjRtpzhH1cfie6PCD5qO69feywO54lOjCSp9/w42T5/6qeo80to3/3v0GYo4LhcXr779uWld9/78sLduTfn35y/N3r16uzU7NWXZy7fWmjPT3Uehz1K4Dhsvx4Y9kgAAAAAAAAAAACAfh30HwJjOZr/NOjpbnKIhwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8oa5fTHM0RaanLk2V2+trM+1y6aa3SzaTNBpJ8cOk+DC5ls6SiZ7miv36eX9h9sZHn6x/vN1Ws1u+cVC9/qzWSyaTjNTrXcYO194b+7XXt2LrCMuAXegGDobtfwEAAP//dx8JQQ==") 3.416743759s ago: executing program 2 (id=97): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e07240100000000090582"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x12, "ee153459ca529beb5d240bd5156f13854a91"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 951.612545ms ago: executing program 3 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) 925.132582ms ago: executing program 1 (id=99): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25030000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 640.0384ms ago: executing program 0 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x20}]}}}}}}}, 0x0) 639.664317ms ago: executing program 4 (id=101): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x3) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 330.700295ms ago: executing program 0 (id=102): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) dup3(r1, r0, 0x80000) 145.473327ms ago: executing program 2 (id=103): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 0s ago: executing program 4 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 84.009031][ T5596] cgroup: Unknown subsys name 'net' [ 84.127256][ T5596] cgroup: Unknown subsys name 'cpuset' [ 84.136789][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.771767][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.323385][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.333436][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.343920][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.351616][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.368572][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.384128][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.384280][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.399013][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.399809][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.414853][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.418307][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.423342][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.431043][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.437522][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.445745][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.458170][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.459829][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.466085][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.481198][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.482782][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.488896][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.499863][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.510129][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.517393][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.524815][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.525802][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.535507][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.546500][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.560328][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.575790][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.185257][ T1208] cfg80211: failed to load regulatory.db [ 92.603564][ T5631] Bluetooth: hci0: command tx timeout [ 92.604376][ T5616] Bluetooth: hci5: command tx timeout [ 92.609604][ T5622] Bluetooth: hci2: command tx timeout [ 92.615147][ T5617] Bluetooth: hci4: command tx timeout [ 92.621270][ T5622] Bluetooth: hci3: command tx timeout [ 92.691565][ T5622] Bluetooth: hci1: command tx timeout [ 93.276708][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.283998][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.291220][ T5608] bridge_slave_0: entered allmulticast mode [ 93.299038][ T5608] bridge_slave_0: entered promiscuous mode [ 93.365469][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.372801][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.380004][ T5608] bridge_slave_1: entered allmulticast mode [ 93.387829][ T5608] bridge_slave_1: entered promiscuous mode [ 93.395152][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.402346][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.409649][ T5612] bridge_slave_0: entered allmulticast mode [ 93.417334][ T5612] bridge_slave_0: entered promiscuous mode [ 93.444958][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.452200][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.459426][ T5609] bridge_slave_0: entered allmulticast mode [ 93.467426][ T5609] bridge_slave_0: entered promiscuous mode [ 93.499656][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.507686][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.515168][ T5612] bridge_slave_1: entered allmulticast mode [ 93.522752][ T5612] bridge_slave_1: entered promiscuous mode [ 93.544456][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.551567][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.558790][ T5609] bridge_slave_1: entered allmulticast mode [ 93.566640][ T5609] bridge_slave_1: entered promiscuous mode [ 93.655677][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.725686][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.738301][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.747842][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.755098][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.762488][ T5611] bridge_slave_0: entered allmulticast mode [ 93.770047][ T5611] bridge_slave_0: entered promiscuous mode [ 93.794253][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.831527][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.841018][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.848278][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.855846][ T5611] bridge_slave_1: entered allmulticast mode [ 93.863457][ T5611] bridge_slave_1: entered promiscuous mode [ 93.870739][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.878004][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.885262][ T5610] bridge_slave_0: entered allmulticast mode [ 93.892941][ T5610] bridge_slave_0: entered promiscuous mode [ 93.903103][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.988040][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.995376][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.002611][ T5610] bridge_slave_1: entered allmulticast mode [ 94.010143][ T5610] bridge_slave_1: entered promiscuous mode [ 94.030060][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.037275][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.044630][ T5607] bridge_slave_0: entered allmulticast mode [ 94.052442][ T5607] bridge_slave_0: entered promiscuous mode [ 94.062624][ T5608] team0: Port device team_slave_0 added [ 94.071153][ T5612] team0: Port device team_slave_0 added [ 94.105465][ T5609] team0: Port device team_slave_0 added [ 94.111295][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.118621][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.126881][ T5607] bridge_slave_1: entered allmulticast mode [ 94.134673][ T5607] bridge_slave_1: entered promiscuous mode [ 94.144872][ T5608] team0: Port device team_slave_1 added [ 94.153236][ T5612] team0: Port device team_slave_1 added [ 94.161575][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.185499][ T5609] team0: Port device team_slave_1 added [ 94.231498][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.244310][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.318846][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.344247][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.355074][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.362147][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.388249][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.400511][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.407618][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.433536][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.470952][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.478181][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.504292][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.517925][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.527967][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.535173][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.561347][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.583474][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.590417][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.617203][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.630601][ T5611] team0: Port device team_slave_0 added [ 94.649454][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.656492][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.682348][ T5622] Bluetooth: hci4: command tx timeout [ 94.682388][ T5622] Bluetooth: hci5: command tx timeout [ 94.682423][ T5622] Bluetooth: hci2: command tx timeout [ 94.682789][ T5622] Bluetooth: hci3: command tx timeout [ 94.682824][ T5622] Bluetooth: hci0: command tx timeout [ 94.688664][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.744890][ T5611] team0: Port device team_slave_1 added [ 94.752842][ T5610] team0: Port device team_slave_0 added [ 94.762307][ T5622] Bluetooth: hci1: command tx timeout [ 94.795657][ T5607] team0: Port device team_slave_0 added [ 94.806548][ T5607] team0: Port device team_slave_1 added [ 94.827488][ T5610] team0: Port device team_slave_1 added [ 94.898125][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.905144][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.931172][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.975290][ T5608] hsr_slave_0: entered promiscuous mode [ 94.981811][ T5608] hsr_slave_1: entered promiscuous mode [ 95.014503][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.021465][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.047683][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.059602][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.066867][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.093029][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.124287][ T5612] hsr_slave_0: entered promiscuous mode [ 95.130749][ T5612] hsr_slave_1: entered promiscuous mode [ 95.137340][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 95.143150][ T5612] Cannot create hsr debugfs directory [ 95.149380][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.156675][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.182831][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.217338][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.224329][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.250663][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.274511][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.281513][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.307452][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.325776][ T5609] hsr_slave_0: entered promiscuous mode [ 95.332387][ T5609] hsr_slave_1: entered promiscuous mode [ 95.338549][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 95.344415][ T5609] Cannot create hsr debugfs directory [ 95.573823][ T5610] hsr_slave_0: entered promiscuous mode [ 95.580285][ T5610] hsr_slave_1: entered promiscuous mode [ 95.586668][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 95.592416][ T5610] Cannot create hsr debugfs directory [ 95.625859][ T5611] hsr_slave_0: entered promiscuous mode [ 95.632666][ T5611] hsr_slave_1: entered promiscuous mode [ 95.638817][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 95.645457][ T5611] Cannot create hsr debugfs directory [ 95.680743][ T5607] hsr_slave_0: entered promiscuous mode [ 95.687203][ T5607] hsr_slave_1: entered promiscuous mode [ 95.693811][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 95.699527][ T5607] Cannot create hsr debugfs directory [ 96.314389][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.328197][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.336410][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.347277][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.363154][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.373879][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.382253][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.393125][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.463530][ T5609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.476307][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.484820][ T5609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.494681][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.510085][ T5609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.520181][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.528503][ T5609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.539380][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.649665][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.660456][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.668676][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.679819][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.688617][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.699399][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.707468][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.717530][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.762260][ T5622] Bluetooth: hci3: command tx timeout [ 96.762571][ T5631] Bluetooth: hci0: command tx timeout [ 96.767698][ T5617] Bluetooth: hci2: command tx timeout [ 96.773066][ T5631] Bluetooth: hci5: command tx timeout [ 96.773102][ T5631] Bluetooth: hci4: command tx timeout [ 96.843797][ T5617] Bluetooth: hci1: command tx timeout [ 96.858605][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.870027][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.878494][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.888581][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.896994][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.908143][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.922495][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.933847][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.944475][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.050777][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.098095][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.109159][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.117824][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.129564][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.148129][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.160655][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.172221][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.179439][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.211145][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.221554][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.254129][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.261297][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.311113][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.369684][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.380050][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.404586][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.417636][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.426701][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.438256][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.457903][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.468173][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.477802][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.525043][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.532185][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.557225][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.564467][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.628625][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.677884][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.787962][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.837062][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.891310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.899415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.950987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.958211][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.990297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.997444][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.007230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.014346][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.129242][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.260849][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.279673][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.362641][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.369904][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.447399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.454660][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.526622][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.690026][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.760579][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.767804][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.850621][ T5617] Bluetooth: hci4: command tx timeout [ 98.856402][ T5617] Bluetooth: hci5: command tx timeout [ 98.862038][ T5622] Bluetooth: hci2: command tx timeout [ 98.862075][ T5622] Bluetooth: hci0: command tx timeout [ 98.862105][ T5622] Bluetooth: hci3: command tx timeout [ 98.883731][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.890891][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.923520][ T5617] Bluetooth: hci1: command tx timeout [ 98.969034][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.155298][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.470840][ T5608] veth0_vlan: entered promiscuous mode [ 99.550548][ T5608] veth1_vlan: entered promiscuous mode [ 99.766809][ T5608] veth0_macvtap: entered promiscuous mode [ 99.817233][ T5608] veth1_macvtap: entered promiscuous mode [ 99.918422][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.994214][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.059604][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.136782][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.252188][ T3337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.323895][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.462318][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.488859][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.512131][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.610467][ T5610] veth0_vlan: entered promiscuous mode [ 100.644203][ T5609] veth0_vlan: entered promiscuous mode [ 100.687195][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.705052][ T3337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.715306][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.729421][ T5610] veth1_vlan: entered promiscuous mode [ 100.733011][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.754418][ T5609] veth1_vlan: entered promiscuous mode [ 100.921243][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.969575][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.990115][ T5610] veth0_macvtap: entered promiscuous mode [ 101.014723][ T5609] veth0_macvtap: entered promiscuous mode [ 101.058633][ T5611] veth0_vlan: entered promiscuous mode [ 101.075364][ T5610] veth1_macvtap: entered promiscuous mode [ 101.095303][ T5609] veth1_macvtap: entered promiscuous mode [ 101.138680][ T5848] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 101.146791][ T5612] veth0_vlan: entered promiscuous mode [ 101.156008][ T5611] veth1_vlan: entered promiscuous mode [ 101.218561][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.229731][ T5612] veth1_vlan: entered promiscuous mode [ 101.244590][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.273203][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.319754][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.419814][ T5607] veth0_vlan: entered promiscuous mode [ 101.431647][ T5611] veth0_macvtap: entered promiscuous mode [ 101.466276][ T5612] veth0_macvtap: entered promiscuous mode [ 101.484951][ T114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.496193][ T5612] veth1_macvtap: entered promiscuous mode [ 101.518467][ T5611] veth1_macvtap: entered promiscuous mode [ 101.572976][ T5607] veth1_vlan: entered promiscuous mode [ 101.593063][ T4994] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.620574][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.628500][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.652435][ T3337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.690919][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.702778][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.715962][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.747938][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.753982][ T4994] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 101.765012][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.773837][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.785658][ T4994] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 101.797129][ T4994] usb 2-1: config 0 has no interface number 0 [ 101.808409][ T4994] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 101.810661][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.820087][ T4994] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.823643][ T4994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.838821][ T3337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.857342][ T4994] usb 2-1: Product: syz [ 101.861787][ T4994] usb 2-1: Manufacturer: syz [ 101.866603][ T4994] usb 2-1: SerialNumber: syz [ 101.879417][ T4994] usb 2-1: config 0 descriptor?? [ 101.886741][ T5850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.909033][ T4994] usb-storage 2-1:0.20: USB Mass Storage device detected [ 101.920809][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.930529][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.950744][ T4994] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 101.960189][ T3373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.988663][ T3337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.996669][ T3337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.018946][ T5607] veth0_macvtap: entered promiscuous mode [ 102.050596][ T5607] veth1_macvtap: entered promiscuous mode [ 102.073226][ T3337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.223014][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.276265][ T5759] usb 2-1: USB disconnect, device number 2 [ 102.299901][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.322061][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.337500][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.396856][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.468161][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.482376][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.509178][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.520431][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.577797][ T3272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.595934][ T3272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.607010][ T5775] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.650471][ T3337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783562][ T5775] usb 4-1: Using ep0 maxpacket: 8 [ 102.801717][ T5775] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.821619][ T5775] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.850304][ T5775] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.862934][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884537][ T5775] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 102.897564][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.901459][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.912664][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.940580][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.963142][ T5775] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 102.985972][ T3272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.021494][ T5775] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 103.035411][ T5775] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.056216][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.115059][ T29] usb 6-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 103.137816][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.153734][ T114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.155227][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.175166][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.186393][ T114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.209040][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.218627][ T114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.262343][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.302394][ T29] usb 6-1: Product: syz [ 103.309496][ T5775] usb 4-1: GET_CAPABILITIES returned 0 [ 103.332196][ T114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.335469][ T29] usb 6-1: Manufacturer: syz [ 103.351864][ T5775] usbtmc 4-1:16.0: can't read capabilities [ 103.384012][ T29] usb 6-1: SerialNumber: syz [ 103.386424][ T114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.443273][ T5860] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 103.462510][ T5860] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 103.477687][ T3373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.596959][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.632777][ T3373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.634712][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.650670][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.660290][ T3373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.673892][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.682989][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.692071][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.702935][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.712038][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.721215][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.730306][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.740652][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.749749][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.758822][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.767919][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.796334][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.805439][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.815108][ T3272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.911045][ T5739] usb 4-1: USB disconnect, device number 2 [ 104.625868][ T5891] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd32 [ 104.756391][ T5895] input: syz1 as /devices/virtual/input/input5 [ 104.901150][ T29] zaurus 6-1:1.0: probe with driver zaurus failed with error -71 [ 105.024343][ T29] usb 6-1: USB disconnect, device number 2 [ 105.147139][ T5898] ip6erspan0: entered allmulticast mode [ 106.554035][ T1208] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.746251][ T1208] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 106.773076][ T1208] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.792629][ T1208] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.815532][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.152690][ T5781] usb 6-1: USB disconnect, device number 3 [ 107.224287][ T5942] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 107.232249][ T5624] syzkaller1: tun_net_xmit 90 [ 107.254786][ T5942] syzkaller1: Linktype set failed because interface is up [ 107.602824][ T5624] kernel write not supported for file /gssd/clntXX/gssd (pid: 5624 comm: kworker/0:3) [ 108.182075][ T186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.303337][ T5624] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 108.362957][ T186] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.389292][ T186] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.431480][ T186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.451595][ T186] usb 1-1: Product: syz [ 108.460133][ T186] usb 1-1: Manufacturer: syz [ 108.472017][ T5781] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.489149][ T5624] usb 6-1: unable to get BOS descriptor or descriptor too short [ 108.505825][ T186] usb 1-1: SerialNumber: syz [ 108.514164][ T5624] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 108.543437][ T5624] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 108.552129][ T5613] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.569058][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.591618][ T5624] usb 6-1: Product: syz [ 108.618586][ T5624] usb 6-1: Manufacturer: syz [ 108.632004][ T5624] usb 6-1: SerialNumber: syz [ 108.643568][ T5781] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 108.668151][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.697944][ T5781] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 108.718526][ T5781] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 108.739141][ T5781] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.768557][ T5613] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.778793][ T5613] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 108.791446][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.815500][ T5613] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.833304][ T5967] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 108.852243][ T5967] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 108.867936][ T5613] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.892652][ T5781] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 108.916398][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.928298][ T5613] usb 2-1: Product: syz [ 108.933698][ T5613] usb 2-1: Manufacturer: syz [ 108.938335][ T5613] usb 2-1: SerialNumber: syz [ 108.973802][ T5624] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.974228][ T5781] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 109.013471][ T5613] usb 2-1: selecting invalid altsetting 1 [ 109.037381][ T5781] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 109.070434][ T5781] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 109.108677][ T5624] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 109.128324][ T5781] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 109.147587][ T5624] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 109.186336][ T5781] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 109.221506][ T5781] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 109.369973][ T5772] usb 4-1: USB disconnect, device number 3 [ 109.395349][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.415279][ T5772] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 109.449097][ T5772] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 109.486490][ T5772] keyspan 4-1:1.0: device disconnected [ 109.517999][ T5624] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 109.562352][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 109.573275][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 109.595044][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 109.612076][ T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 109.634662][ T186] cdc_ncm 1-1:1.0: bind() failure [ 109.649570][ T9] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.650376][ T5613] usb 2-1: unit 6 not found! [ 109.689078][ T5624] usb 6-1: USB disconnect, device number 4 [ 109.697638][ T186] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 109.707859][ T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 109.745239][ T186] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 109.764795][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.787896][ T186] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 109.797015][ T9] usb 3-1: Product: syz [ 109.809684][ T9] usb 3-1: Manufacturer: syz [ 109.818204][ T9] usb 3-1: SerialNumber: syz [ 109.827842][ T186] usb 1-1: USB disconnect, device number 2 [ 109.861541][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 109.942980][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input6 [ 110.082229][ T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 110.111118][ T9] (id 0x00) [ 110.115818][ T5613] usb 2-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 110.142189][ T5613] usb 2-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 110.237705][ T5983] syzkaller1: entered promiscuous mode [ 110.268646][ T5983] syzkaller1: entered allmulticast mode [ 110.302347][ T9] rc_core: IR keymap rc-imon-pad not found [ 110.322763][ T9] Registered IR keymap rc-empty [ 110.336182][ T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 110.368844][ T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 110.417598][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 110.481364][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input7 [ 110.501590][ T5613] usb 2-1: USB disconnect, device number 3 [ 110.567539][ T9] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:2> initialized [ 110.647018][ T5990] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 110.647958][ T9] usb 3-1: USB disconnect, device number 2 [ 110.796385][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.806174][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.815219][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.824257][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.833274][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.842334][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.851340][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.860359][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.868808][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 110.869372][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.894096][ T5995] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 110.904930][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.332056][ T5624] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.555853][ T5624] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 111.593142][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.606966][ T5624] usb 6-1: Product: syz [ 111.653457][ T5624] usb 6-1: Manufacturer: syz [ 111.667989][ T5624] usb 6-1: SerialNumber: syz [ 111.695492][ T5624] usb 6-1: config 0 descriptor?? [ 112.135047][ T6023] Illegal XDP return value 32768 on prog (id 9) dev syz_tun, expect packet loss! [ 112.164419][ T5624] usb 6-1: Firmware version (0.0) predates our first public release. [ 112.200146][ T5624] usb 6-1: Please update to version 0.2 or newer [ 112.226052][ T5624] usb 6-1: Firmware: build [ 112.444756][ T5624] usb 6-1: USB disconnect, device number 5 [ 112.732583][ T5781] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.818028][ T6011] loop4: detected capacity change from 0 to 32768 [ 112.889629][ T6011] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 112.903163][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 112.915579][ T6011] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 112.933044][ T5781] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 112.946488][ T5781] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 112.955364][ T5781] usb 3-1: config 0 has no interface number 0 [ 112.962060][ T5781] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 112.992199][ T5781] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 113.017049][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.035843][ T5781] usb 3-1: Product: syz [ 113.042219][ T5781] usb 3-1: Manufacturer: syz [ 113.051822][ T5781] usb 3-1: SerialNumber: syz [ 113.071234][ T5781] usb 3-1: config 0 descriptor?? [ 113.090987][ T6035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.103766][ T6035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.155105][ T6011] XFS (loop4): Ending clean mount [ 113.225413][ T6011] XFS (loop4): Quotacheck needed: Please wait. [ 113.375861][ T6011] XFS (loop4): Quotacheck: Done. [ 113.381741][ T6035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.430270][ T6035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.649186][ T5781] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 113.714231][ T5772] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.768489][ T5612] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 113.896698][ T5772] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 113.931220][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.966604][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.019208][ T5772] usb 2-1: config 0 descriptor?? [ 114.062131][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.084859][ T6043] loop3: detected capacity change from 0 to 40427 [ 114.120021][ T6043] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 114.137755][ T6043] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.244671][ T9] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 114.279121][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 114.313643][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 114.349349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.376848][ T9] usb 1-1: Product: syz [ 114.391523][ T9] usb 1-1: Manufacturer: syz [ 114.406631][ T9] usb 1-1: SerialNumber: syz [ 114.445090][ T6065] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.457975][ T5781] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.465970][ T6065] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.500368][ T5781] asix 3-1:0.34: probe with driver asix failed with error -71 [ 114.516603][ T9] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 114.545141][ T5772] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 114.556280][ T5781] usb 3-1: USB disconnect, device number 3 [ 114.572963][ T9] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 114.592764][ T5772] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x3 [ 114.637303][ T5772] hid-multitouch 0003:1FD2:6007.0001: item fetching failed at offset 6/8 [ 114.645994][ T9] usbserial_generic 1-1:1.0: generic converter detected [ 114.680577][ T5772] hid-multitouch 0003:1FD2:6007.0001: probe with driver hid-multitouch failed with error -22 [ 114.693894][ T6043] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 114.705612][ T9] usb 1-1: generic converter now attached to ttyUSB0 [ 114.741000][ T6043] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.764989][ T6043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.042574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.452201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.721681][ T5772] usb 2-1: USB disconnect, device number 4 [ 116.862513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.015782][ T9] usb 1-1: USB disconnect, device number 3 [ 117.016540][ T1208] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.055837][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 117.117118][ T9] usbserial_generic 1-1:1.0: device disconnected [ 117.235883][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 117.261317][ T1208] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 117.316311][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.364001][ T1208] usb 5-1: config 0 descriptor?? [ 117.649436][ T1208] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 117.741047][ T1208] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 117.742939][ T6088] loop1: detected capacity change from 0 to 512 [ 117.773944][ T6088] EXT4-fs: Ignoring removed oldalloc option [ 117.794608][ T1208] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 117.847934][ T6088] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.015552][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.064855][ T5781] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.135391][ T6088] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 118.242350][ T5781] usb 1-1: Using ep0 maxpacket: 8 [ 118.262984][ T5781] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.287785][ T6100] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 118.303529][ T5781] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.336075][ T5781] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.381169][ T5781] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.416178][ T5781] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.448932][ T6102] loop4: detected capacity change from 0 to 1024 [ 118.450201][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.961963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.981964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.001954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.601980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.611967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.832212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 119.851965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.810200][ T6102] hfsplus: invalid extent btree flag [ 120.816498][ T6102] hfsplus: failed to load extents file [ 120.902088][ T5775] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.011499][ T5781] usb 1-1: usb_control_msg returned -71 [ 121.034484][ T5781] usbtmc 1-1:16.0: can't read capabilities [ 121.073389][ T5775] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 121.086250][ T5781] usb 1-1: USB disconnect, device number 4 [ 121.096568][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 121.140991][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.189815][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.215691][ T5775] usb 3-1: config 0 descriptor?? [ 121.228602][ T6114] loop4: detected capacity change from 0 to 64 [ 121.228940][ T6106] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.415643][ T6114] hfs: hfs: Invalid key length: 94 [ 121.562601][ T5775] usbhid 3-1:0.0: can't add hid device: -71 [ 121.597356][ T5775] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.649572][ T5775] usb 3-1: USB disconnect, device number 4 [ 121.700702][ T3337] ------------[ cut here ]------------ [ 121.707664][ T3337] kernel BUG at fs/hfs/inode.c:476! [ 121.747269][ T5624] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.788148][ T3337] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 121.794608][ T3337] CPU: 1 UID: 0 PID: 3337 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 121.804171][ T3337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.814233][ T3337] Workqueue: writeback wb_workfn (flush-7:4) [ 121.820272][ T3337] RIP: 0010:hfs_write_inode+0x428/0xb30 [ 121.825845][ T3337] Code: 12 8c 4c 89 f7 e8 b8 01 09 ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 00 fd ff ff e8 c9 06 09 ff 90 <0f> 0b e8 c1 06 09 ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 121.845477][ T3337] RSP: 0018:ffffc9000facf498 EFLAGS: 00010293 [ 121.851563][ T3337] RAX: 0000000000000000 RBX: 1ffff92001f59e95 RCX: ffffffff83015d58 [ 121.859537][ T3337] RDX: ffff888034bc9f40 RSI: ffffffff83015d77 RDI: ffff888034bc9f40 [ 121.867509][ T3337] RBP: ffff8880792534c0 R08: 0000000000000007 R09: 0000000000000004 [ 121.875480][ T3337] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 121.883456][ T3337] R13: ffffc9000facf4d8 R14: 0000000000000000 R15: ffffc9000facf538 [ 121.891436][ T3337] FS: 0000000000000000(0000) GS:ffff888123cdc000(0000) knlGS:0000000000000000 [ 121.900374][ T3337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.906964][ T3337] CR2: 00005606b1edb660 CR3: 0000000029a9c000 CR4: 0000000000350ef0 [ 121.914939][ T3337] Call Trace: [ 121.918213][ T3337] [ 121.921142][ T3337] ? __pfx_hfs_write_inode+0x10/0x10 [ 121.926442][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.932092][ T3337] ? __lock_acquire+0x49f/0x1a40 [ 121.937057][ T3337] ? __writeback_single_inode+0x45a/0x1560 [ 121.942913][ T3337] ? __writeback_single_inode+0x45a/0x1560 [ 121.948745][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.954422][ T3337] __writeback_single_inode+0xe82/0x1560 [ 121.960087][ T3337] ? __pfx___writeback_single_inode+0x10/0x10 [ 121.966183][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.971830][ T3337] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.977050][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.982703][ T3337] writeback_sb_inodes+0x766/0x1c50 [ 121.987937][ T3337] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 121.993623][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.999268][ T3337] ? rcu_is_watching+0x12/0xc0 [ 122.004054][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.009701][ T3337] ? queue_io+0x287/0x530 [ 122.014046][ T3337] wb_writeback+0x1c0/0xb50 [ 122.018572][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.024224][ T3337] ? __pfx_wb_writeback+0x10/0x10 [ 122.029277][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.034924][ T3337] ? mark_held_locks+0x40/0x70 [ 122.039700][ T3337] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.044912][ T3337] wb_workfn+0x143/0xc80 [ 122.049184][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.054829][ T3337] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 122.060652][ T3337] ? __pfx_wb_workfn+0x10/0x10 [ 122.065443][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.071095][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.076744][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.082400][ T3337] ? rcu_is_watching+0x12/0xc0 [ 122.087195][ T3337] process_one_work+0xa23/0x1940 [ 122.092156][ T3337] ? __pfx_process_one_work+0x10/0x10 [ 122.097546][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.103201][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.108850][ T3337] worker_thread+0x5ef/0xe50 [ 122.113459][ T3337] ? kthread+0x13a/0x450 [ 122.117701][ T3337] ? __pfx_worker_thread+0x10/0x10 [ 122.122818][ T3337] kthread+0x370/0x450 [ 122.126890][ T3337] ? __pfx_kthread+0x10/0x10 [ 122.131487][ T3337] ret_from_fork+0x72b/0xd50 [ 122.136103][ T3337] ? __pfx_ret_from_fork+0x10/0x10 [ 122.141236][ T3337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.146885][ T3337] ? __switch_to+0x800/0x10f0 [ 122.151567][ T3337] ? __switch_to_asm+0x39/0x70 [ 122.156352][ T3337] ? __pfx_kthread+0x10/0x10 [ 122.160953][ T3337] ret_from_fork_asm+0x1a/0x30 [ 122.165753][ T3337] [ 122.168766][ T3337] Modules linked in: [ 122.174689][ T3337] ---[ end trace 0000000000000000 ]--- [ 122.182310][ T5624] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.473490][ T3337] RIP: 0010:hfs_write_inode+0x428/0xb30 [ 122.485338][ T3337] Code: 12 8c 4c 89 f7 e8 b8 01 09 ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 00 fd ff ff e8 c9 06 09 ff 90 <0f> 0b e8 c1 06 09 ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 122.535327][ T3337] RSP: 0018:ffffc9000facf498 EFLAGS: 00010293 [ 122.541536][ T3337] RAX: 0000000000000000 RBX: 1ffff92001f59e95 RCX: ffffffff83015d58 [ 122.552212][ T3337] RDX: ffff888034bc9f40 RSI: ffffffff83015d77 RDI: ffff888034bc9f40 [ 122.560231][ T3337] RBP: ffff8880792534c0 R08: 0000000000000007 R09: 0000000000000004 [ 122.570525][ T3337] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 122.579163][ T3337] R13: ffffc9000facf4d8 R14: 0000000000000000 R15: ffffc9000facf538 [ 122.587411][ T3337] FS: 0000000000000000(0000) GS:ffff888123cdc000(0000) knlGS:0000000000000000 [ 122.599241][ T3337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.608095][ T3337] CR2: 00007f24ed3ed158 CR3: 0000000027911000 CR4: 0000000000350ef0 [ 122.609250][ T5772] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 122.616541][ T3337] Kernel panic - not syncing: Fatal exception [ 122.623777][ T3337] Kernel Offset: disabled