last executing test programs: 19m55.486934624s ago: executing program 32 (id=104): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYBLOB="010000400000000000eb13000000180001801400"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@dax}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$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") r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000000240)=0x2, 0x2) 19m20.553773868s ago: executing program 33 (id=140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x1, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16m7.168785383s ago: executing program 34 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = getpgid(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/207, &(0x7f0000000740)=0xcf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9], 0x2c}}, 0x4000000) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @tail_call, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x4c, &(0x7f00000004c0)=""/76, 0x0, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r11) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f0000000c40)={{0xffffffffffffffff, &(0x7f0000000780)='\x00', 0x109e40, &(0x7f0000000880)={@align=0x3, {0x8000, 0x6, 0xfffffffb, 0xa1}}, 0x3, 0x0, &(0x7f0000000900)=0x9}, 0x0, &(0x7f0000000bc0)}) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 12m41.713669449s ago: executing program 4 (id=538): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25077c0000080001800400fd800800"], 0x24}}, 0xc010) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55b, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='GPL\x00', 0x4a, 0x43, &(0x7f0000000380)=""/67, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000540)={0x1, 0x200005}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x10001, 0xd1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x4003, 0x6, 0x9}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0x82f4}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) write$nci(r1, &(0x7f0000000180)=ANY=[], 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES64, @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004001) r8 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40880) connect$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, 0x0, 0x0, 0xe0) sendmsg$nl_generic(r9, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000002a0002002dbd7000fddbdf251c0000002792fba0190d3ea0e8db5601d2d96b8e374188a271f6bbb293b0ab915ff152420bb0097566f8175f7161cd952e087bbcda082a3f52a7d298399edbdb523a3573d66ca4b59fa0"], 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x10000000) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x13, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRESOCT=r8], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x6e}, 0x94) 12m39.98998508s ago: executing program 4 (id=542): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 12m32.511737185s ago: executing program 4 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3e8) syslog(0x2, &(0x7f00000010c0)=""/2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) preadv(r3, &(0x7f00000001c0), 0x0, 0x400, 0x20000000) capset(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) syslog(0x2, &(0x7f0000001140)=""/53, 0x35) 12m29.856766288s ago: executing program 35 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x1b) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x181000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) write$eventfd(r5, &(0x7f0000000100)=0x10001, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000005280), &(0x7f00000052c0)=0x4) 12m28.676447915s ago: executing program 4 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa}) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12m24.535105792s ago: executing program 4 (id=555): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) listen(r6, 0x2) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r6, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 12m22.940363149s ago: executing program 4 (id=556): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 12m6.060823395s ago: executing program 36 (id=556): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 7m25.047360553s ago: executing program 8 (id=974): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 7m23.744462503s ago: executing program 8 (id=982): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x0, 0x3, 'syz0\x00', &(0x7f0000000400)}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 7m20.832084711s ago: executing program 8 (id=987): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4078) 7m20.458801491s ago: executing program 8 (id=989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r4, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa}) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 7m19.113984222s ago: executing program 8 (id=994): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) socket$unix(0x1, 0x5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 7m16.762779757s ago: executing program 8 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 6m59.381465674s ago: executing program 37 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 4m8.335132104s ago: executing program 6 (id=1394): rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') capset(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x58}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$inet(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d81201"], 0x0) socket(0x2, 0xa, 0x0) 4m3.194194995s ago: executing program 6 (id=1409): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) socket$unix(0x1, 0x5, 0x0) accept4$unix(r6, 0x0, 0x0, 0x80800) bind$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 4m1.69205763s ago: executing program 6 (id=1411): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002"], 0x48}}, 0x44010) 3m53.217701048s ago: executing program 6 (id=1425): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000440)={[{@gid}]}) 3m52.368905658s ago: executing program 6 (id=1427): unshare(0x22020400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xc]}, 0x8, 0x80800) signalfd4(r0, &(0x7f0000000040)={[0xffffffffffff0150]}, 0x8, 0x80800) 3m51.593178026s ago: executing program 6 (id=1429): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x2, 0xdd9f83, 0x1, 0x2f, 0xf3, 0xc, 0x8, 0x722, 0x6, 0x7, 0x8, 0x8, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3m49.714043411s ago: executing program 38 (id=1429): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x2, 0xdd9f83, 0x1, 0x2f, 0xf3, 0xc, 0x8, 0x722, 0x6, 0x7, 0x8, 0x8, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 2m58.74653331s ago: executing program 0 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/heartbeat/mode\x00', 0x2, 0x0) 2m57.87741363s ago: executing program 0 (id=1541): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000210)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000220)='./dev/infiniband/uverbs0\x00', 0x2, 0x0) 2m57.478072908s ago: executing program 0 (id=1547): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 2m55.464274101s ago: executing program 0 (id=1552): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) r1 = socket$netlink(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x7ffff088) 2m55.369409222s ago: executing program 0 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a010100"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) 2m54.802117125s ago: executing program 0 (id=1555): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x1, 0x9, 0x4, 0x300, 0x0, 0x81, 0x0}) 2m38.376404177s ago: executing program 39 (id=1555): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x1, 0x9, 0x4, 0x300, 0x0, 0x81, 0x0}) 2m13.766302284s ago: executing program 7 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2m13.688904136s ago: executing program 7 (id=1645): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(0x0, 0x12) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 2m12.011422855s ago: executing program 7 (id=1647): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1010894, &(0x7f0000000000), 0x1, 0x96e0, &(0x7f000001c400)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 2m9.203836001s ago: executing program 7 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000000300000000030014000200fc02000000000000000000000000000014000100200100"], 0x44}, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 2m5.955038298s ago: executing program 7 (id=1668): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m59.734266043s ago: executing program 7 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ff}, 0x38) 1m43.412374156s ago: executing program 40 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ff}, 0x38) 18.75827306s ago: executing program 5 (id=1892): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) 18.508889396s ago: executing program 5 (id=1894): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, 0x0, 0x0) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r6, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 16.049683064s ago: executing program 5 (id=1897): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x28f592b4259a2f8d, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) 14.333055844s ago: executing program 9 (id=1901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0xd, 0x0, 0x0, 0xfffffffd, 0x0, 0x20, 0x75c}]}) 13.431546225s ago: executing program 3 (id=1903): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x9, 0x0, 0x83, 0x0, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") 12.293852342s ago: executing program 9 (id=1906): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 11.644738917s ago: executing program 2 (id=1908): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x164, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "302763400d025dcf501a71403112bf3ccd5edd2070afed3792891f371dfbf0bbbb7bc6f8fe096e2b74d2da2b14a9243defb10e748005f79d635d4bff2a5fe5b7ec4e36bc2a3a93d6d9344f016af884d83e6433234836ca1f3c94fcdc6dce706885ea1e71905747bc801e3675abaa5d0a9f60cc8218c6682cf3074aa69f217f5f05b7701784af46d09111e4688ca4b1979bd5c76a963065279f3aa0dcc8a8af3ca0f67ea6a77bbdca408118e087971713566c432b4f042feb7c138ad3dd4bd4cfb7a0f4723174bb0da99a7f440aee405527c3"}]}, 0x164}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 10.402147506s ago: executing program 9 (id=1909): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, 0x0, 0x0) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r6, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 8.93909517s ago: executing program 9 (id=1911): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 8.656756807s ago: executing program 2 (id=1912): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 8.433425942s ago: executing program 1 (id=1913): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b80)={0x2f}) 7.454222615s ago: executing program 2 (id=1914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001280)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast2, @in=@multicast1, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x8000000000000000, 0x1000000000000192, 0x9ba3, 0xffff, 0x8008251c, 0x5, 0xfffffffffffffffc}, {0xfffffffdffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x84, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x14c}}, 0x844) 7.363681917s ago: executing program 5 (id=1915): syz_io_uring_setup(0x233, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 7.198090752s ago: executing program 1 (id=1916): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) readv(r1, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) 7.002794066s ago: executing program 2 (id=1917): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 6.891710849s ago: executing program 1 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 6.022298189s ago: executing program 3 (id=1919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) 5.883715972s ago: executing program 2 (id=1920): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 5.433106233s ago: executing program 1 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x200054}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x0) 5.357487024s ago: executing program 9 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000d0000000c00000008000300", @ANYRES32=r2, @ANYBLOB="34005080050002000600000009000a000000000000000000170001008e0000001d00d183000000000000000008000700010000000a0006"], 0x5c}}, 0x40) 5.015839692s ago: executing program 1 (id=1923): r0 = dup(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, 0x0, 0x0) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r6, 0x0, 0x0, 0x80800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xfffffffffffffe6c) 5.015305892s ago: executing program 9 (id=1924): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) write(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x8, 0x1, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e130600c8"], 0x16) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="674cca217bb4236c83f33ba287e7879c0674862fcf3cc1e67376c6c857085ea5", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) fsopen(&(0x7f0000000200)='cifs\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/94, 0x5e, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) 2.665013278s ago: executing program 3 (id=1925): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 1.665418631s ago: executing program 1 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac06, 0xfac08, 0xfac04, 0xfac0b]}]]}, 0x40}}, 0x0) 1.613602682s ago: executing program 5 (id=1927): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 1.613072142s ago: executing program 3 (id=1928): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 1.580963713s ago: executing program 2 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x16, 0x84, 0x6, 0xffffff7d}]}) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 523.090038ms ago: executing program 3 (id=1930): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 324.991642ms ago: executing program 5 (id=1931): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x17e) 0s ago: executing program 3 (id=1932): r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1151.018833][T12031] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1151.045678][ T7898] usb 10-1: Using ep0 maxpacket: 32 [ 1151.052044][ T7898] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1151.117071][T12031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1151.159569][ T7898] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1151.218587][T12031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1151.249296][ T7898] usb 10-1: can't read configurations, error -61 [ 1151.435889][ T7898] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1151.706888][ T7898] usb 10-1: Using ep0 maxpacket: 32 [ 1152.446541][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1152.459752][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1152.469685][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1152.479815][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1152.497324][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1152.505276][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1152.647843][T12044] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1152.672140][ T7898] usb 10-1: device descriptor read/all, error -71 [ 1152.743144][ T7898] usb usb10-port1: attempt power cycle [ 1154.755423][T12044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1154.770993][T12044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1154.795746][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 1155.100882][T12051] netlink: 'syz.7.1441': attribute type 21 has an invalid length. [ 1155.146853][T12041] lo speed is unknown, defaulting to 1000 [ 1155.154251][T12057] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1157.049877][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 1158.126934][T12077] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1158.169927][T12077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1158.239361][T12077] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1158.491866][T12086] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 1158.788064][T12089] NILFS (nbd9): device size too small [ 1159.304122][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 1159.313629][ T4369] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1160.794475][T12105] netlink: 'syz.0.1455': attribute type 21 has an invalid length. [ 1160.802976][ T4369] usb 10-1: Using ep0 maxpacket: 32 [ 1160.816132][ T4369] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1160.888007][ T4369] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1160.962892][ T4369] usb 10-1: can't read configurations, error -61 [ 1161.107412][ T4433] batman_adv: batadv0: Removing interface: gretap1 [ 1161.165482][T12041] chnl_net:caif_netlink_parms(): no params data found [ 1161.179335][ T4369] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1161.428461][ T4369] usb 10-1: Using ep0 maxpacket: 32 [ 1161.440888][ T4369] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1161.530463][ T4369] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1161.547670][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 1161.601401][ T4369] usb 10-1: can't read configurations, error -61 [ 1161.611215][ T4369] usb usb10-port1: attempt power cycle [ 1161.678447][ T4433] IPVS: stopping backup sync thread 6807 ... [ 1162.362777][T12041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.371676][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.421217][T12041] device bridge_slave_0 entered promiscuous mode [ 1162.470917][ T4369] usb usb10-port1: Cannot enable. Maybe the USB cable is bad? [ 1162.501839][T12041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.540656][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.567281][T12041] device bridge_slave_1 entered promiscuous mode [ 1162.674623][ T4369] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1162.783714][ T4369] usb 10-1: Using ep0 maxpacket: 16 [ 1162.791707][ T4369] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 1162.877436][ T4369] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1162.888558][ T4369] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1162.913073][ T4369] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.008552][ T4369] usb 10-1: config 0 descriptor?? [ 1163.519260][ T4369] hid (null): global environment stack underflow [ 1163.563238][ T4369] corsair-cpro 0003:1B1C:0C10.000F: global environment stack underflow [ 1163.575832][ T4433] device hsr_slave_0 left promiscuous mode [ 1163.582896][ T4369] corsair-cpro 0003:1B1C:0C10.000F: item 0 4 1 11 parsing failed [ 1163.598135][ T4433] device hsr_slave_1 left promiscuous mode [ 1163.607039][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.616321][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.637353][ T4369] corsair-cpro: probe of 0003:1B1C:0C10.000F failed with error -22 [ 1163.672021][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.680709][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.854702][ T4433] device veth1_macvtap left promiscuous mode [ 1163.866935][ T4433] device veth0_macvtap left promiscuous mode [ 1163.873507][ T4433] device veth0_vlan left promiscuous mode [ 1163.875345][ T4369] usb 10-1: USB disconnect, device number 36 [ 1164.067208][ T3600] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1164.279298][ T3600] usb 6-1: Using ep0 maxpacket: 32 [ 1164.291675][ T3600] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1164.364537][ T3600] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1164.437138][ T3600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.527707][ T3600] usb 6-1: config 0 descriptor?? [ 1165.076902][ T3600] logitech 0003:046D:C295.0010: unknown main item tag 0x6 [ 1165.203344][ T3600] logitech 0003:046D:C295.0010: ignoring exceeding usage max [ 1165.758837][ T3600] logitech 0003:046D:C295.0010: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.5-1/input0 [ 1166.000406][ T3600] logitech 0003:046D:C295.0010: no inputs found [ 1166.469700][ T3600] usb 6-1: USB disconnect, device number 38 [ 1166.949889][ T4433] bond1 (unregistering): Released all slaves [ 1167.090835][T12175] fido_id[12175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1167.369250][T12185] NILFS (nbd9): device size too small [ 1167.855040][ T7898] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1168.787141][ T7898] usb 10-1: Using ep0 maxpacket: 32 [ 1168.799312][ T7898] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1168.844701][ T7898] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1168.920187][ T7898] usb 10-1: can't read configurations, error -61 [ 1169.112233][ T7898] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1169.329058][ T7898] usb 10-1: Using ep0 maxpacket: 32 [ 1169.344147][ T7898] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1169.377523][ T7898] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1169.415726][ T7898] usb 10-1: can't read configurations, error -61 [ 1169.459102][ T7898] usb usb10-port1: attempt power cycle [ 1169.946940][ T7898] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1169.990730][ T7898] usb 10-1: Using ep0 maxpacket: 32 [ 1169.996806][ T7898] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1170.025820][T12197] loop5: detected capacity change from 0 to 2048 [ 1170.051569][ T7898] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1170.086384][ T7898] usb 10-1: can't read configurations, error -61 [ 1170.208958][T12197] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1170.326296][ T7898] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1170.355799][ T5666] EXT4-fs (loop5): unmounting filesystem. [ 1170.539474][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 1170.781348][ T6892] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1170.804679][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.996212][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.046057][ T6892] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1171.105915][ T6892] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1171.131295][ T6892] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1171.171532][ T6892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.218705][ T6892] usb 6-1: Product: syz [ 1171.223173][ T6892] usb 6-1: Manufacturer: syz [ 1171.242573][ T6892] usb 6-1: SerialNumber: syz [ 1171.288664][T12202] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1171.319963][T12202] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1171.343378][ T6892] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1172.601399][ T4433] bond0 (unregistering): Released all slaves [ 1172.743685][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.787265][T12166] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 1172.827900][ T5162] lo speed is unknown, defaulting to 1000 [ 1172.835552][T12192] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1172.879680][ T6892] mos7840: probe of ttyUSB0 failed with error -71 [ 1172.891512][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.982511][ T6892] usb 6-1: USB disconnect, device number 39 [ 1172.983322][T12192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1173.063552][ T7898] usb 10-1: device descriptor read/8, error -71 [ 1173.092343][ T6892] mos7840 6-1:1.0: device disconnected [ 1173.125288][T12192] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1173.209647][ T7898] usb usb10-port1: unable to enumerate USB device [ 1173.330794][T12041] team0: Port device team_slave_0 added [ 1173.376080][T12041] team0: Port device team_slave_1 added [ 1173.567263][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.675712][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.753551][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.798228][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.836370][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.081783][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.106677][T12227] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1175.306388][T12041] device hsr_slave_0 entered promiscuous mode [ 1175.314204][T12210] loop9: detected capacity change from 0 to 32768 [ 1175.393373][T12041] device hsr_slave_1 entered promiscuous mode [ 1175.394843][T12210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1477 (12210) [ 1175.566932][T12210] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1175.663972][T12210] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1175.774326][T12210] BTRFS info (device loop9): metadata ratio 127 [ 1175.821462][T12243] netlink: 'syz.5.1485': attribute type 21 has an invalid length. [ 1175.926979][T12210] BTRFS info (device loop9): setting nodatasum [ 1177.381591][T12210] BTRFS info (device loop9): disabling tree log [ 1177.431906][T12210] BTRFS info (device loop9): turning off barriers [ 1177.486668][T12210] BTRFS info (device loop9): max_inline at 33 [ 1177.530418][T12210] BTRFS info (device loop9): using free space tree [ 1177.872435][T12210] BTRFS error (device loop9): open_ctree failed: -12 [ 1178.114283][T12278] NILFS (nbd5): device size too small [ 1178.573851][ T5162] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1178.790381][ T5162] usb 6-1: Using ep0 maxpacket: 32 [ 1178.797171][ T5162] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1178.823902][ T5162] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1178.831786][ T5162] usb 6-1: can't read configurations, error -61 [ 1179.028844][ T5162] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1179.112622][T12292] loop9: detected capacity change from 0 to 32768 [ 1179.160262][T12292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1492 (12292) [ 1179.214368][T12292] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1179.241828][T12292] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1179.251980][T12292] BTRFS info (device loop9): setting nodatasum [ 1179.267381][ T5162] usb 6-1: Using ep0 maxpacket: 32 [ 1179.281244][ T5162] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1179.293025][T12292] BTRFS info (device loop9): force zlib compression, level 3 [ 1179.313861][T12292] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1179.325013][T12292] BTRFS info (device loop9): use lzo compression, level 0 [ 1179.333150][ T5162] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1179.341668][ T5162] usb 6-1: can't read configurations, error -61 [ 1179.356881][T12292] BTRFS info (device loop9): turning on flush-on-commit [ 1179.364001][T12292] BTRFS info (device loop9): enabling auto defrag [ 1179.383560][ T5162] usb usb6-port1: attempt power cycle [ 1179.431752][T12292] BTRFS info (device loop9): max_inline at 4096 [ 1179.438821][T12292] BTRFS info (device loop9): using free space tree [ 1179.684864][T12041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1179.830847][ T5162] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1179.885779][ T5162] usb 6-1: Using ep0 maxpacket: 32 [ 1179.951962][T12041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1179.969255][ T5162] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1180.012059][T12041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1180.021960][ T5162] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1180.032826][T12292] BTRFS info (device loop9): enabling ssd optimizations [ 1180.075667][ T5162] usb 6-1: can't read configurations, error -61 [ 1180.113817][T12041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1180.264531][ T5162] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1180.309708][ T5162] usb 6-1: Using ep0 maxpacket: 32 [ 1180.315871][ T5162] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1180.350813][T12292] BTRFS warning (device loop9): failed to trim 1 device(s), last error -512 [ 1180.363045][ T5162] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1180.398405][ T5162] usb 6-1: can't read configurations, error -61 [ 1180.427100][ T5162] usb usb6-port1: unable to enumerate USB device [ 1180.475012][ T7847] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1180.475961][T12041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.580963][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.610128][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.626591][T12041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.720921][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1180.764488][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.852702][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.860348][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.921236][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.004143][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.015133][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.065722][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.073174][ T7809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.411372][T12343] netlink: 'syz.7.1498': attribute type 21 has an invalid length. [ 1183.533321][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1183.560186][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1183.631771][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1183.708472][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1183.741872][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1183.859467][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1183.900672][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1183.945163][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1183.997380][T12041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.042908][T12368] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1184.054001][T12041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1184.277217][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1184.333059][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1184.377880][T12374] ima: Unable to open file: /e (-2) [ 1184.660426][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1184.876667][T12366] ima: policy update failed [ 1184.881928][ T26] audit: type=1802 audit(1786405216.754:94): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1496" res=0 errno=0 [ 1184.967693][T12368] netlink: 'syz.5.1502': attribute type 21 has an invalid length. [ 1186.074823][T12392] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1186.094341][T12392] netlink: 'syz.9.1507': attribute type 21 has an invalid length. [ 1187.368739][T12398] NILFS (nbd0): device size too small [ 1187.446336][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.464071][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.537720][T12427] NILFS (nbd7): device size too small [ 1189.960087][T12439] ima: Unable to open file: /e (-2) [ 1190.443822][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1190.611565][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.705228][T12435] ima: policy update failed [ 1190.710928][ T26] audit: type=1802 audit(1786405222.124:95): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1517" res=0 errno=0 [ 1190.862215][T12041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.030318][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.040345][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.105955][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.136161][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.161359][T12041] device veth0_vlan entered promiscuous mode [ 1191.191482][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.211029][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.248542][T12041] device veth1_vlan entered promiscuous mode [ 1191.335824][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.354017][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1191.400892][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.418052][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.442859][ T4290] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10 [ 1191.447713][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.476915][T12041] device veth0_macvtap entered promiscuous mode [ 1191.498695][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.505788][ T4369] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1191.533987][T12041] device veth1_macvtap entered promiscuous mode [ 1191.555092][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.595534][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1191.616661][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1191.626089][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.653247][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.679703][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.705376][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.730430][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.736381][ T4369] usb 10-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice= 0.00 [ 1191.742906][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.776232][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.794079][ T4369] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.798484][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.820233][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.827253][ T4369] usb 10-1: Product: syz [ 1191.835064][ T4369] usb 10-1: Manufacturer: syz [ 1191.844579][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.859810][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.879908][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.882395][ T4369] usb 10-1: SerialNumber: syz [ 1191.905434][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.922849][ T4369] smsusb:smsusb_probe: board id=2, interface number 0 [ 1191.926067][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.940307][ T4369] smsusb:siano_media_device_register: media controller created [ 1191.955035][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.971190][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1191.994091][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.002874][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.027155][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.040263][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.064042][T12452] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1192.074950][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.093455][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.107863][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.130459][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.139971][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.169010][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.184964][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.203567][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.230552][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.239011][T12041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.261922][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.272579][T12452] netlink: 'syz.5.1515': attribute type 21 has an invalid length. [ 1192.295399][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.320029][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.344455][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.366969][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.390221][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.417663][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.453285][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.485607][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.535102][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.566975][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.583527][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.610525][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.623152][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.666767][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.705763][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.716917][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.732848][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.743340][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.759216][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.770011][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.795182][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.820205][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.840752][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.841081][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.853077][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.872972][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.888553][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.908074][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.914097][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.952027][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.957912][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1192.978179][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.991443][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.007682][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.013104][T12041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.023674][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.048130][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.049560][T12041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.065379][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.080358][T12041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.091889][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.108275][ T4369] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 1193.117700][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.122312][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.129926][T12459] can0: slcan on ttyS3. [ 1193.151050][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.158113][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.162117][ T4369] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 1193.201839][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.202725][T12041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.228313][ T4369] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 1193.236205][ T4369] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1193.244931][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.252377][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.259713][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.267294][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.274588][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.282098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.289457][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.296821][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.304099][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.311461][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1193.401216][T12041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.410004][T12041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.472092][ T4369] smsusb:smsusb_probe: Device initialized with return code -110 [ 1193.511535][T12041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.628708][ T4290] Bluetooth: hci2: command 0x2021 tx timeout [ 1193.975415][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.983205][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.991060][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1193.998797][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.017382][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.035883][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.043827][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.060696][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.079474][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.088136][T12467] netlink: 'syz.5.1522': attribute type 21 has an invalid length. [ 1194.099646][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.115027][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.133625][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.148417][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.192964][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.200522][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.228955][T12457] can0 (unregistered): slcan off ttyS3. [ 1194.284964][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.324559][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.364200][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.386192][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.492340][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.500192][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.508071][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.515676][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.524085][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.532702][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.643875][ T4369] smsusb: probe of 10-1:1.0 failed with error -110 [ 1194.650733][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.660466][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.674416][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.713961][ T4369] usb 10-1: USB disconnect, device number 41 [ 1194.757047][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.848875][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.856897][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.864696][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1194.872412][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.016540][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.024286][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.045185][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.045420][T12482] NILFS (nbd7): device size too small [ 1195.060114][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.068190][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.076904][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.085032][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.093430][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.103528][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.112232][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.119977][T12354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1195.131255][T12354] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1195.435519][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.474598][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.568958][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1195.592371][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.613321][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.647815][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1195.825172][T12506] ima: Unable to open file: /e (-2) [ 1196.565630][T12501] ima: policy update failed [ 1196.576594][ T26] audit: type=1802 audit(1786405227.550:96): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1528" res=0 errno=0 [ 1197.078334][T12512] loop9: detected capacity change from 0 to 1024 [ 1197.308335][T12523] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1197.318358][T12523] netlink: 'syz.0.1529': attribute type 21 has an invalid length. [ 1197.373173][T12522] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1197.402571][T12507] fido_id[12507]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1199.059744][T12522] netlink: 'syz.5.1530': attribute type 21 has an invalid length. [ 1199.089647][T12533] netlink: 'syz.9.1533': attribute type 21 has an invalid length. [ 1200.411743][ T26] audit: type=1800 audit(1786405231.056:97): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1538" name="mode" dev="configfs" ino=68303 res=0 errno=0 [ 1200.595623][T12554] nbd: must specify an index to disconnect [ 1201.035354][T12574] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1201.045261][T12574] netlink: 'syz.5.1545': attribute type 21 has an invalid length. [ 1201.074828][T12575] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1201.780470][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1201.787231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.264055][T12575] netlink: 'syz.9.1546': attribute type 21 has an invalid length. [ 1202.286686][T12583] netlink: 'syz.0.1547': attribute type 21 has an invalid length. [ 1202.542327][T12591] NILFS (nbd2): device size too small [ 1203.182546][T12604] netlink: 252 bytes leftover after parsing attributes in process `syz.9.1551'. [ 1203.240621][T12350] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1203.466168][T12604] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1551'. [ 1203.496728][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 1203.511663][T12350] usb 3-1: Using ep0 maxpacket: 32 [ 1203.518810][T12350] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1203.541790][T12350] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1203.563511][T12350] usb 3-1: can't read configurations, error -61 [ 1203.713994][T12613] usb 1-1: USB disconnect, device number 3 [ 1203.773074][T12350] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1203.988186][T12350] usb 3-1: Using ep0 maxpacket: 32 [ 1204.003591][T12350] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1204.039581][T12350] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1204.075101][T12350] usb 3-1: can't read configurations, error -61 [ 1204.113505][T12350] usb usb3-port1: attempt power cycle [ 1204.390252][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1554'. [ 1204.562763][T11158] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1204.573657][T12350] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1204.642923][T12350] usb 3-1: Using ep0 maxpacket: 32 [ 1204.663334][T12350] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1204.684747][T12350] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1204.713016][T12350] usb 3-1: can't read configurations, error -61 [ 1204.790130][T11158] usb 6-1: Using ep0 maxpacket: 16 [ 1204.797910][T11158] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1204.834101][T11158] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1204.863086][T11158] usb 6-1: config 0 has no interface number 0 [ 1204.880534][T11158] usb 6-1: config 0 interface 67 altsetting 133 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1204.899579][T12350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1204.907531][T11158] usb 6-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 1204.953746][T12350] usb 3-1: Using ep0 maxpacket: 32 [ 1204.960340][T11158] usb 6-1: config 0 interface 67 altsetting 133 endpoint 0xF has an invalid bInterval 151, changing to 11 [ 1204.960645][T12350] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1204.995884][T11158] usb 6-1: config 0 interface 67 altsetting 133 endpoint 0xF has invalid wMaxPacketSize 0 [ 1205.036001][T11158] usb 6-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0xF, skipping [ 1205.051827][T12350] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1205.068351][T12350] usb 3-1: can't read configurations, error -61 [ 1205.079052][T12350] usb usb3-port1: unable to enumerate USB device [ 1205.085511][T11158] usb 6-1: config 0 interface 67 has no altsetting 0 [ 1205.089997][T11158] usb 6-1: New USB device found, idVendor=067c, idProduct=1001, bcdDevice=e9.13 [ 1205.181355][T11158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.189618][T11158] usb 6-1: Product: syz [ 1205.201991][T11158] usb 6-1: Manufacturer: syz [ 1205.206916][T11158] usb 6-1: SerialNumber: syz [ 1205.239629][T11158] usb 6-1: config 0 descriptor?? [ 1205.501593][T11158] pegasus 6-1:0.67: Missing or invalid endpoints [ 1205.531289][T11158] usb 6-1: USB disconnect, device number 44 [ 1205.931713][T12653] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1205.942777][T12653] netlink: 'syz.2.1559': attribute type 21 has an invalid length. [ 1206.484851][T12662] netlink: 'syz.5.1560': attribute type 21 has an invalid length. [ 1208.423222][T12667] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1208.500560][T12667] netlink: 'syz.2.1561': attribute type 21 has an invalid length. [ 1210.558358][T12700] loop2: detected capacity change from 0 to 1024 [ 1210.772530][T12350] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1211.026513][T12350] usb 10-1: Using ep0 maxpacket: 32 [ 1211.222765][T12681] loop5: detected capacity change from 0 to 32768 [ 1211.379002][T12681] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1564 (12681) [ 1211.681136][T12681] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1211.781362][T12350] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1211.791587][T12681] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1211.792554][T12350] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1211.811006][T12681] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1211.820888][T12350] usb 10-1: can't read configurations, error -61 [ 1211.827994][T12681] BTRFS info (device loop5): use zstd compression, level 3 [ 1211.849958][T12681] BTRFS info (device loop5): use no compression [ 1211.857663][T12681] BTRFS info (device loop5): using free space tree [ 1212.019140][T12350] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1212.214813][T12350] usb 10-1: Using ep0 maxpacket: 32 [ 1212.235908][T12350] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1212.326623][T12734] netlink: 'syz.2.1573': attribute type 21 has an invalid length. [ 1215.107939][T12350] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1215.115796][T12350] usb 10-1: can't read configurations, error -71 [ 1215.620198][T12350] usb usb10-port1: attempt power cycle [ 1215.684357][T12613] ALSA: seq_lock: waiting [96 left] in sound/core/seq/seq_ports.c:250 [ 1215.776504][T12681] BTRFS error (device loop5): open_ctree failed: -12 [ 1215.809086][ T9017] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by udevd (9017) [ 1216.167480][T12757] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1216.177274][T12757] netlink: 'syz.9.1575': attribute type 21 has an invalid length. [ 1216.971981][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1576'. [ 1219.363005][T12799] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1219.372245][T12799] netlink: 'syz.7.1581': attribute type 21 has an invalid length. [ 1220.033874][T12809] NILFS (nbd9): device size too small [ 1220.450802][T12352] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1220.661935][T12352] usb 10-1: Using ep0 maxpacket: 32 [ 1220.669674][T12352] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1220.726052][T12352] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1220.796591][T12352] usb 10-1: can't read configurations, error -61 [ 1221.014313][T12352] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1221.018400][T12817] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.221008][T12798] loop5: detected capacity change from 0 to 32768 [ 1221.243335][T12352] usb 10-1: Using ep0 maxpacket: 32 [ 1221.249667][T12352] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1221.349856][T12352] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1221.381623][T12817] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.393321][T12798] JBD2: Ignoring recovery information on journal [ 1221.448237][T12352] usb 10-1: can't read configurations, error -61 [ 1221.516558][T12352] usb usb10-port1: attempt power cycle [ 1221.598875][T12798] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1221.704710][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.729077][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.751471][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1221.772850][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1221.791663][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1221.799490][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1221.851808][T12817] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.011553][T12352] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1222.070644][T12352] usb 10-1: Using ep0 maxpacket: 32 [ 1222.084028][T12352] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1222.112298][T12817] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.124106][T12352] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1222.166083][T12352] usb 10-1: can't read configurations, error -61 [ 1222.379796][T12352] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1222.435950][T12352] usb 10-1: Using ep0 maxpacket: 32 [ 1222.442028][T12352] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1222.523896][T12352] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1222.622515][T12352] usb 10-1: can't read configurations, error -61 [ 1222.655266][ T5666] ocfs2: Unmounting device (7,5) on (node local) [ 1222.705178][T12352] usb usb10-port1: unable to enumerate USB device [ 1222.817210][T12817] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.921063][T12817] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.028166][T12817] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.128802][T12817] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.362981][T12834] chnl_net:caif_netlink_parms(): no params data found [ 1224.901384][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 1225.225397][T12834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.339666][T12834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.381061][T12834] device bridge_slave_0 entered promiscuous mode [ 1225.436204][T12834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.469065][T12834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.536794][T12834] device bridge_slave_1 entered promiscuous mode [ 1225.708860][T12834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.740332][T12878] loop9: detected capacity change from 0 to 256 [ 1225.779953][T12878] exfat: Deprecated parameter 'utf8' [ 1225.804119][T12834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.874832][T12878] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x58d80169, utbl_chksum : 0xe619d30d) [ 1226.041802][T12834] team0: Port device team_slave_0 added [ 1226.232727][T12834] team0: Port device team_slave_1 added [ 1226.365807][T12834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.465578][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.748906][T12834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.818109][T12834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.828639][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.078057][T12834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.094385][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 1227.239822][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1604'. [ 1227.339078][T12834] device hsr_slave_0 entered promiscuous mode [ 1227.402355][T12834] device hsr_slave_1 entered promiscuous mode [ 1227.436602][T12834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.482555][T12834] Cannot create hsr debugfs directory [ 1227.610742][T12904] NILFS (nbd7): device size too small [ 1229.918118][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 1230.999582][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1611'. [ 1231.051328][T12928] block nbd0: not configured, cannot reconfigure [ 1232.123633][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 1232.459395][T12925] loop5: detected capacity change from 0 to 40427 [ 1232.529418][T12925] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1232.567840][T12925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1232.695923][T12925] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1233.033868][T12952] NILFS (nbd9): device size too small [ 1233.244046][T12925] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1233.307510][T12925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1233.308596][T12964] loop7: detected capacity change from 0 to 1024 [ 1233.473366][T12964] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1233.525833][T12742] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1233.595338][ T7160] EXT4-fs (loop7): unmounting filesystem. [ 1233.759396][T12742] usb 10-1: Using ep0 maxpacket: 32 [ 1233.770684][T12742] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1233.820825][T12742] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1233.870636][T12742] usb 10-1: can't read configurations, error -61 [ 1234.014635][T12974] loop2: detected capacity change from 0 to 1024 [ 1234.058097][T12834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1234.077039][T12742] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1234.164596][T12834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1234.247751][T12834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1234.290224][T12834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1234.312395][T12742] usb 10-1: Using ep0 maxpacket: 32 [ 1234.318859][T12742] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1234.336949][T12742] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1234.343022][T12976] loop7: detected capacity change from 0 to 4096 [ 1234.355476][T12742] usb 10-1: can't read configurations, error -61 [ 1234.406495][T12742] usb usb10-port1: attempt power cycle [ 1234.439977][T12976] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1234.536479][T12976] NILFS (loop7): mounting unchecked fs [ 1234.704098][T12976] NILFS (loop7): recovery required for readonly filesystem [ 1234.896456][T12976] NILFS (loop7): write access will be enabled during recovery [ 1234.908662][T12742] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1235.020035][T12742] usb 10-1: Using ep0 maxpacket: 32 [ 1235.143539][T12742] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1235.375373][T12742] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1235.443745][T12834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.464344][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1235.482735][T12742] usb 10-1: can't read configurations, error -61 [ 1235.491261][T12976] NILFS (loop7): norecovery option specified, skipping roll-forward recovery [ 1235.526984][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1235.640737][T12834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.678737][ T9017] udevd[9017]: incorrect nilfs2 checksum on /dev/loop7 [ 1235.732081][T12742] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1235.745237][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1235.785677][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1235.795567][T12742] usb 10-1: Using ep0 maxpacket: 32 [ 1235.806774][T12742] usb 10-1: too many configurations: 32, using maximum allowed: 8 [ 1235.864695][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.872425][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.047944][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1236.124146][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1236.137582][T12742] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1236.159573][T12742] usb 10-1: can't read configurations, error -71 [ 1236.209821][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1236.218653][T12742] usb usb10-port1: unable to enumerate USB device [ 1236.274213][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.281746][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.321071][ T9017] udevd[9017]: incorrect nilfs2 checksum on /dev/loop7 [ 1236.344876][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1236.417482][T13007] IPVS: Error connecting to the multicast addr [ 1236.432217][T13006] loop7: detected capacity change from 0 to 256 [ 1236.460275][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1236.511640][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1236.555050][T13006] FAT-fs (loop7): Directory bread(block 64) failed [ 1236.613413][T13006] FAT-fs (loop7): Directory bread(block 65) failed [ 1236.620309][T13006] FAT-fs (loop7): Directory bread(block 66) failed [ 1236.663021][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1236.715231][T13006] FAT-fs (loop7): Directory bread(block 67) failed [ 1236.748913][T13006] FAT-fs (loop7): Directory bread(block 68) failed [ 1236.756230][ T4410] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1236.756403][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1236.800691][T13006] FAT-fs (loop7): Directory bread(block 69) failed [ 1236.842837][T13006] FAT-fs (loop7): Directory bread(block 70) failed [ 1236.845720][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1236.870574][T13006] FAT-fs (loop7): Directory bread(block 71) failed [ 1236.893931][T13006] FAT-fs (loop7): Directory bread(block 72) failed [ 1236.903740][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1236.919040][T13006] FAT-fs (loop7): Directory bread(block 73) failed [ 1236.925651][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1236.947171][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1236.981044][ T4410] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.005060][ T4410] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1237.010495][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1237.045431][ T4410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.053111][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1237.082979][T12834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1237.101789][ T4410] usb 6-1: Product: syz [ 1237.149895][ T4410] usb 6-1: Manufacturer: syz [ 1237.160835][ T4410] usb 6-1: SerialNumber: syz [ 1237.449360][ T4410] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1238.383662][ T4410] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1238.411252][ T4410] ttusb_dec_send_command: command bulk message failed: error -71 [ 1238.423181][ T4410] usb 6-1: USB disconnect, device number 45 [ 1238.851419][T13037] netlink: 'syz.5.1632': attribute type 21 has an invalid length. [ 1239.729355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.748740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.861877][T12834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.853935][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1241.353930][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1241.388511][T13052] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1242.842383][T13052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1242.852877][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1242.886331][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1242.902585][T13052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1242.952307][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1242.998502][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1243.053047][T12834] device veth0_vlan entered promiscuous mode [ 1243.148112][T12834] device veth1_vlan entered promiscuous mode [ 1243.456319][T13064] ima: Unable to open file: /e (-2) [ 1244.111904][T13060] ima: policy update failed [ 1244.123604][ T26] audit: type=1802 audit(1786405271.415:98): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1640" res=0 errno=0 [ 1244.204907][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1244.353588][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1244.411539][T12834] device veth0_macvtap entered promiscuous mode [ 1244.628533][T12834] device veth1_macvtap entered promiscuous mode [ 1244.640128][T13069] NILFS (nbd2): device size too small [ 1244.794686][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.900885][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.910417][T13079] nftables ruleset with unbound chain [ 1244.910951][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.910973][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.910992][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.972377][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.984998][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.005967][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.022460][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.035224][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.061314][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.172173][ T7898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1245.424061][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.439104][ T7898] usb 3-1: Using ep0 maxpacket: 32 [ 1245.730949][ T7898] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1245.749995][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.915365][ T7898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1245.969452][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.046989][ T7898] usb 3-1: can't read configurations, error -61 [ 1246.185567][T12834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.249573][T13082] netlink: 'syz.7.1645': attribute type 21 has an invalid length. [ 1246.284047][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1246.310229][ T7898] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1246.341584][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1246.396984][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1246.462942][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1246.510159][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.558396][ T7898] usb 3-1: Using ep0 maxpacket: 32 [ 1246.565051][ T7898] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1246.588208][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.615638][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.636025][ T7898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1246.644019][ T7898] usb 3-1: can't read configurations, error -61 [ 1246.667728][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.689536][ T7898] usb usb3-port1: attempt power cycle [ 1246.698256][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.724481][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.748562][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.774620][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.797933][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.822289][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.847746][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.873675][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.899120][T12834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.928564][T12834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.971292][T12834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.981170][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1246.998026][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1247.013763][T12834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.032354][T12834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.061710][T12834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.079888][T12834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.155882][ T7898] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1247.199405][ T7898] usb 3-1: Using ep0 maxpacket: 32 [ 1247.213937][ T7898] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1247.363408][ T7898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1247.528856][ T7898] usb 3-1: can't read configurations, error -61 [ 1247.957503][ T7898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1248.151343][T13088] loop7: detected capacity change from 0 to 32768 [ 1248.283582][ T7898] usb 3-1: device descriptor read/8, error -71 [ 1248.341955][T13088] XFS (loop7): Mounting V5 Filesystem [ 1248.414688][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.422747][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.431502][ T7898] usb usb3-port1: unable to enumerate USB device [ 1248.559879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1248.579402][T13088] XFS (loop7): Ending clean mount [ 1248.603264][T13114] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 1248.723401][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.793227][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.801242][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1249.198564][T13122] loop3: detected capacity change from 0 to 512 [ 1249.204356][T13120] netlink: 'syz.9.1655': attribute type 29 has an invalid length. [ 1249.280222][ T7160] XFS (loop7): Unmounting Filesystem [ 1249.293458][T13122] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1587: invalid block [ 1249.293818][T13120] netlink: 'syz.9.1655': attribute type 29 has an invalid length. [ 1249.334380][T13122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1587: invalid indirect mapped block 10 (level 1) [ 1249.370200][T13125] netlink: 'syz.9.1655': attribute type 29 has an invalid length. [ 1249.471489][T13122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1587: invalid indirect mapped block 8 (level 1) [ 1249.611392][T13133] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1249.629772][T13133] netlink: 'syz.5.1656': attribute type 21 has an invalid length. [ 1249.996684][T13122] EXT4-fs (loop3): 1 truncate cleaned up [ 1250.340557][T13122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1250.454418][T13137] loop9: detected capacity change from 0 to 512 [ 1250.496238][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1252.001151][T13146] NILFS (nbd3): device size too small [ 1252.530919][T12746] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1252.758214][T12746] usb 4-1: Using ep0 maxpacket: 32 [ 1252.764579][T12746] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 1252.829739][T12746] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1252.856242][T12746] usb 4-1: can't read configurations, error -61 [ 1252.959015][T13177] loop9: detected capacity change from 0 to 1024 [ 1252.970002][T13142] loop5: detected capacity change from 0 to 32768 [ 1253.063180][T12746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1253.289822][T12746] usb 4-1: Using ep0 maxpacket: 32 [ 1253.298009][T12746] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 1253.342550][T12746] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1253.399065][T12746] usb 4-1: can't read configurations, error -61 [ 1253.472695][T13184] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1253.488405][T13184] netlink: 'syz.9.1672': attribute type 21 has an invalid length. [ 1253.622159][T12746] usb usb4-port1: attempt power cycle [ 1255.163972][T12746] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1255.295813][T13191] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1255.311845][T13191] netlink: 'syz.2.1673': attribute type 21 has an invalid length. [ 1255.424259][T12746] usb 4-1: device not accepting address 4, error -71 [ 1260.025909][T13217] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1260.042524][T13217] netlink: 'syz.9.1681': attribute type 21 has an invalid length. [ 1260.825614][T13235] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1260.851518][T13235] netlink: 'syz.5.1685': attribute type 21 has an invalid length. [ 1263.448019][T13255] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1263.466243][T13255] netlink: 'syz.2.1689': attribute type 21 has an invalid length. [ 1265.318766][T13259] loop3: detected capacity change from 0 to 1024 [ 1265.370073][T13259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1265.440976][T13259] EXT4-fs: inline encryption not supported [ 1265.502636][T13259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1265.859455][T13259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1266.503404][T13259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1266.533937][ T26] audit: type=1800 audit(1786405292.102:99): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1696" name="b_vendor_code" dev="configfs" ino=70638 res=0 errno=0 [ 1266.600942][T13259] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.721777][T13259] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1690: lblock 3 mapped to illegal pblock 3 (length 2) [ 1266.797305][T13259] EXT4-fs (loop3): Remounting filesystem read-only [ 1267.136467][T13284] loop5: detected capacity change from 0 to 4096 [ 1267.843762][T13282] loop2: detected capacity change from 0 to 131072 [ 1267.853605][T13290] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1267.870379][T13282] F2FS-fs (loop2): Invalid log sectorsize (16253193) [ 1267.877315][T13282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1267.888015][T13290] netlink: 'syz.9.1699': attribute type 21 has an invalid length. [ 1268.000564][T13282] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (9260416800254978389, 9223825053282593109) [ 1268.102064][T13293] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1268.148991][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1268.367821][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.374471][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.471933][T13316] wireguard: wg2: Could not create IPv4 socket [ 1269.665385][ T7898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1269.912108][ T7898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.117126][ T7898] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1270.339076][ T7898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.552379][ T7898] usb 4-1: Product: syz [ 1270.719893][ T7898] usb 4-1: Manufacturer: syz [ 1270.724619][ T7898] usb 4-1: SerialNumber: syz [ 1271.003975][ T4287] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10 [ 1271.011662][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1271.011697][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1271.011720][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1271.065415][T13336] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1271.090582][T13336] netlink: 'syz.5.1712': attribute type 21 has an invalid length. [ 1271.651343][ T7898] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1271.749659][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1272.010207][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1272.124087][ T7898] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1272.220065][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1272.427415][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1272.653309][ T7898] ttusb_dec_send_command: command bulk message failed: error -71 [ 1272.676704][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1272.872001][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1273.062199][ T7898] usb 4-1: USB disconnect, device number 6 [ 1273.147304][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1273.221162][ T4290] Bluetooth: hci3: command 0x2021 tx timeout [ 1273.393430][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1273.608525][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1273.820767][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.031130][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.207952][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.217432][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.271797][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.279359][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.338612][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.382398][T13350] NILFS (nbd3): device size too small [ 1274.413691][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.445499][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.497685][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.510467][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.526373][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.536922][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.545542][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.554662][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.562836][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.571086][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.579180][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.587754][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.595808][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.604005][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.614344][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.622627][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.630928][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.638663][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.646751][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.655218][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.663258][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.672599][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.680369][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.688339][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.696700][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.704278][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.712804][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.722182][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.730860][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.739434][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.746946][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.755556][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.764012][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.772465][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.791206][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.798950][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.807783][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.816223][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.824752][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.832211][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.840566][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.849148][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.857713][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.865764][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.874768][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.883540][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.892901][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.901425][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.909209][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.917901][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.926273][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.934777][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.942382][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.951195][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.960819][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.970051][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.979098][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.987864][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1274.996786][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.012367][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.022204][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.031673][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.039708][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.073392][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.080864][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.105935][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.113864][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.137995][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.145776][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.153868][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.162195][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.170147][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.178104][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.186041][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.194193][ T4319] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1275.204152][ T4319] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1275.780610][T12354] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1276.059647][T12354] usb 4-1: Using ep0 maxpacket: 32 [ 1276.067056][T12354] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 1276.133187][T12354] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1276.176686][T12354] usb 4-1: can't read configurations, error -61 [ 1276.373944][T12354] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1276.542956][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 1276.579978][T12354] usb 4-1: Using ep0 maxpacket: 32 [ 1276.589317][T12354] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 1276.628465][T13384] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1278.315400][T13382] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1721'. [ 1278.395160][T12354] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1278.445043][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1278.457144][ T4287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1278.467106][ T4287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1278.479383][ T4288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1278.488282][T12354] usb 4-1: can't read configurations, error -71 [ 1278.495214][ T4288] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1278.495315][T12354] usb usb4-port1: attempt power cycle [ 1278.510546][ T4287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1278.568410][T13374] fido_id[13374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1279.636607][T13384] netlink: 'syz.5.1720': attribute type 21 has an invalid length. [ 1280.763065][ T4290] Bluetooth: hci6: command 0x0409 tx timeout [ 1281.159985][ T4290] Bluetooth: hci4: unexpected subevent 0x06 length: 18 > 10 [ 1281.193119][T13413] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1281.518445][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.526544][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.536404][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.606029][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.653865][T13413] netlink: 'syz.5.1727': attribute type 21 has an invalid length. [ 1281.698183][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.922564][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1281.930996][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.030891][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.040894][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.100093][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.135204][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.316512][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.456622][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.486116][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.504888][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.536252][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.551555][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.559645][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.567447][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.575355][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.583052][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.593210][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.714643][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.722542][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.743305][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.752237][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.980604][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1282.989317][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.011073][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.028217][ T4290] Bluetooth: hci6: command 0x041b tx timeout [ 1283.033005][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.054974][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.082105][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.101239][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.123232][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.138315][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.167856][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.241860][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.275910][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.340188][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.354339][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.364042][ T4287] Bluetooth: hci4: command 0x2021 tx timeout [ 1283.382740][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.401459][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.414328][T13431] NILFS (nbd2): device size too small [ 1283.416958][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.427761][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.435425][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.444064][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.451823][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.459395][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.467213][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.493695][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.512682][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.534717][T13386] chnl_net:caif_netlink_parms(): no params data found [ 1283.546813][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.617260][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.641105][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.659137][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.674663][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.682460][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.703139][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.724025][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.743164][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.752670][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.760217][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.761370][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.770669][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.785367][T13386] device bridge_slave_0 entered promiscuous mode [ 1283.797855][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.807951][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.816363][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.823075][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.835109][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.844969][T13386] device bridge_slave_1 entered promiscuous mode [ 1283.853640][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.877004][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.885655][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.893377][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.905081][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.905974][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.938637][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.944325][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.972249][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.992700][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1283.999670][T13386] team0: Port device team_slave_0 added [ 1284.011169][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.020508][T13386] team0: Port device team_slave_1 added [ 1284.033580][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.052715][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.069655][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.077376][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.088059][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.092468][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.106757][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.115296][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.154551][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.171407][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.171525][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.195777][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.197313][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.236713][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.262635][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.271706][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.284397][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.309918][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.330213][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.349625][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.370359][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.415232][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.422793][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.447557][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.455090][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.477884][ T4319] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1284.506607][ T4319] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1284.695732][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 1284.892329][T12354] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1284.940786][T13386] device hsr_slave_0 entered promiscuous mode [ 1284.991839][T13386] device hsr_slave_1 entered promiscuous mode [ 1285.012335][T13457] fido_id[13457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1285.196167][T13386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1285.223855][T13386] Cannot create hsr debugfs directory [ 1285.271440][ T4290] Bluetooth: hci6: command 0x040f tx timeout [ 1285.299784][T12354] usb 3-1: Using ep0 maxpacket: 32 [ 1285.316406][T12354] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1285.327944][T12354] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1285.336082][T12354] usb 3-1: can't read configurations, error -61 [ 1286.095320][T12354] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1286.125235][T13475] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1286.377329][T12354] usb 3-1: Using ep0 maxpacket: 32 [ 1286.384405][T12354] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 1286.422424][T13475] netlink: 'syz.3.1736': attribute type 21 has an invalid length. [ 1286.587130][T12354] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1287.265470][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.536548][ T4287] Bluetooth: hci6: command 0x0419 tx timeout [ 1287.588601][T12354] usb 3-1: can't read configurations, error -61 [ 1288.327279][T12354] usb usb3-port1: attempt power cycle [ 1289.200171][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 1289.623041][T13494] NILFS (nbd5): device size too small [ 1290.170645][T12345] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1290.348885][T13520] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1290.392575][T12345] usb 6-1: Using ep0 maxpacket: 32 [ 1290.435332][T12345] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1292.054765][T12345] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1292.247939][T12345] usb 6-1: can't read configurations, error -61 [ 1292.578064][T12345] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1292.792885][T12345] usb 6-1: Using ep0 maxpacket: 32 [ 1295.691349][T12345] usb 6-1: device descriptor read/all, error -71 [ 1295.723479][T12345] usb usb6-port1: attempt power cycle [ 1295.777837][T13520] netlink: 'syz.9.1745': attribute type 21 has an invalid length. [ 1295.939933][T13530] netlink: 'syz.2.1747': attribute type 21 has an invalid length. [ 1297.399794][T13563] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1299.970782][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1749'. [ 1300.055297][T12345] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1300.064585][T13552] netlink: 'syz.3.1751': attribute type 21 has an invalid length. [ 1300.281652][T12345] usb 6-1: Using ep0 maxpacket: 32 [ 1300.291292][T12345] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1301.384531][T12345] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1301.403492][T12345] usb 6-1: can't read configurations, error -71 [ 1301.504639][T13592] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1305.226802][T13601] loop3: detected capacity change from 0 to 1024 [ 1305.242200][T13601] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1305.258806][T13601] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #32: comm syz.3.1760: iget: special inode unallocated [ 1305.272942][T13601] EXT4-fs (loop3): no journal found [ 1305.279108][T13601] EXT4-fs (loop3): can't get journal size [ 1305.304021][T13592] netlink: 'syz.2.1758': attribute type 21 has an invalid length. [ 1305.313018][T13580] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1305.340027][T13599] netlink: 'syz.5.1759': attribute type 21 has an invalid length. [ 1305.387265][T13601] EXT4-fs (loop3): filesystem is read-only [ 1305.397312][T13601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1305.529128][T13580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1305.629938][T13580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1305.775124][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1305.992231][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1762'. [ 1306.064245][T13610] device veth1_to_team entered promiscuous mode [ 1306.101734][T13612] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1306.119592][T13612] syzkaller1: linktype set to 768 [ 1306.572754][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1764'. [ 1307.441319][T13634] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1307.455736][T13634] netlink: 'syz.5.1765': attribute type 21 has an invalid length. [ 1309.340311][T13639] loop3: detected capacity change from 0 to 1024 [ 1309.358983][T13386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1309.424784][T13639] EXT4-fs: Ignoring removed orlov option [ 1309.453754][T13386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1309.550833][T13639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1309.578284][T13386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1309.724426][T13386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1310.048714][T13664] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1310.103964][T13664] netlink: 'syz.2.1770': attribute type 21 has an invalid length. [ 1310.333789][T12344] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1310.956876][T12344] usb 10-1: Using ep0 maxpacket: 8 [ 1310.965238][T12344] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1310.989305][T12344] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1311.004878][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1311.023271][T12344] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1311.097662][T12344] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1311.108220][T12344] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1311.112028][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.173703][T12344] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1311.217113][T12344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.228114][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1311.258592][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1311.305569][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.338997][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1311.380905][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1311.422900][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.430123][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.493162][T12344] usb 10-1: GET_CAPABILITIES returned 0 [ 1311.499312][T12344] usbtmc 10-1:16.0: can't read capabilities [ 1311.532311][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1311.542618][T13679] loop3: detected capacity change from 0 to 256 [ 1311.554212][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1311.620916][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1311.695738][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.703188][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.771351][T11158] usb 10-1: USB disconnect, device number 53 [ 1311.802674][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1312.021614][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1312.059417][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1312.147551][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1312.206471][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1312.271015][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1312.325321][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1312.408139][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1312.453516][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1312.514531][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1312.589435][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1312.613546][T13699] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1312.807603][T13699] netlink: 'syz.2.1778': attribute type 21 has an invalid length. [ 1313.929355][T13386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1314.047545][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1780'. [ 1314.928021][T13720] ima: Unable to open file: /e (-2) [ 1314.997706][T13731] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1315.024715][T13731] netlink: 'syz.2.1783': attribute type 21 has an invalid length. [ 1315.348385][T13718] ima: policy update failed [ 1316.499460][ T26] audit: type=1802 audit(1786405338.200:100): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1782" res=0 errno=0 [ 1318.106448][T13738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1318.113113][T13738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1318.186271][T13738] vhci_hcd vhci_hcd.0: Device attached [ 1318.436165][ T4410] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1318.489069][T12756] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1318.636230][T13754] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1318.700763][T13756] ima: Unable to open file: /e (-2) [ 1319.041746][ T4410] usb 4-1: Using ep0 maxpacket: 16 [ 1319.370254][T13748] ima: policy update failed [ 1319.375774][ T26] audit: type=1802 audit(1786405340.848:101): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1788" res=0 errno=0 [ 1320.032496][T13760] loop5: detected capacity change from 0 to 512 [ 1320.671405][T13760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1321.760961][ T4410] usb 4-1: device descriptor read/all, error -71 [ 1321.768204][T13739] vhci_hcd: connection reset by peer [ 1321.774641][ T4567] vhci_hcd: stop threads [ 1321.779641][ T4567] vhci_hcd: release socket [ 1321.792089][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1321.902141][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1321.935552][ T4567] vhci_hcd: disconnect device [ 1321.963265][T13386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.169807][T13386] device veth0_vlan entered promiscuous mode [ 1322.182993][ T5666] EXT4-fs (loop5): unmounting filesystem. [ 1322.305697][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1322.358092][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1322.959243][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1323.172825][T13776] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1323.369187][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1323.382080][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 1323.664940][T13779] team0: Port device team_slave_0 removed [ 1323.677724][T13773] netlink: 'syz.2.1792': attribute type 21 has an invalid length. [ 1323.760721][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1323.794483][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1323.865994][T13386] device veth1_vlan entered promiscuous mode [ 1324.001941][T13799] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1324.021811][T13799] netlink: 'syz.9.1794': attribute type 21 has an invalid length. [ 1324.222239][T12756] vhci_hcd: vhci_device speed not set [ 1325.757102][T13798] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1325.777472][T13798] netlink: 'syz.5.1795': attribute type 21 has an invalid length. [ 1327.169700][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.446146][T13810] loop2: detected capacity change from 0 to 32768 [ 1327.509636][T13810] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1327.522093][T13810] JBD2: Ignoring recovery information on journal [ 1327.555156][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1327.568073][T13386] device veth0_macvtap entered promiscuous mode [ 1327.668657][T13810] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1327.716822][T13810] ocfs2: Unmounting device (7,2) on (node local) [ 1327.834502][T13386] device veth1_macvtap entered promiscuous mode [ 1328.004342][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.035779][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.046630][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.133507][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.143940][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.155430][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.177928][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.199765][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.224010][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.250174][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.285410][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.351484][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.361503][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.405269][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.435837][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.454084][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.544934][T13386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.690906][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1328.799251][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.870646][T13829] ima: Unable to open file: /e (-2) [ 1328.894751][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1329.022098][T13828] ima: policy update failed [ 1329.036976][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.049014][ T26] audit: type=1802 audit(1786405349.780:102): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1802" res=0 errno=0 [ 1329.074805][T13839] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1329.115590][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.134558][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.153769][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.249441][T13846] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1329.250856][T12742] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1329.257414][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.529154][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.692720][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.870478][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.037267][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.212109][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.340802][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.466744][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.581101][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.722997][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.847207][T13386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.980581][T13386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.138037][T13386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.173539][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1331.184330][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1331.201953][T13846] netlink: 'syz.2.1805': attribute type 21 has an invalid length. [ 1331.248590][T13386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.267096][T13386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.276254][T13386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.314464][T12742] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1331.353621][T12742] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.365623][T12742] usb 10-1: Product: syz [ 1331.370020][T12742] usb 10-1: Manufacturer: syz [ 1331.402924][T13386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.424979][T12742] usb 10-1: SerialNumber: syz [ 1331.528882][T12742] usb 10-1: config 0 descriptor?? [ 1331.745898][T13858] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1331.768743][T13858] netlink: 'syz.2.1808': attribute type 21 has an invalid length. [ 1331.797824][T12342] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1332.310862][T12742] usb 10-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1332.389103][T12742] usb 10-1: Firmware version (0.0) predates our first public release. [ 1332.415737][ T4410] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1332.582825][T12742] usb 10-1: Please update to version 0.2 or newer [ 1332.686660][ T4410] usb 4-1: Using ep0 maxpacket: 16 [ 1332.747833][ T4410] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1332.869789][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.964491][ T4410] usb 4-1: Product: syz [ 1333.018486][ T4410] usb 4-1: Manufacturer: syz [ 1333.073694][ T4410] usb 4-1: SerialNumber: syz [ 1333.215150][ T4410] r8152-cfgselector 4-1: config 0 descriptor?? [ 1333.586171][T12342] usb 6-1: Using ep0 maxpacket: 8 [ 1333.594290][T12342] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1333.599906][ T4410] r8152-cfgselector 4-1: Needed 2 retries to read version [ 1333.613821][T12342] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1333.649949][T12342] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1333.677225][T12342] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1333.691026][T12742] usb 10-1: USB disconnect, device number 54 [ 1333.748576][T12342] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.791997][T12342] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1333.801159][T12342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.818057][ T4410] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1333.851581][ T4410] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 1333.880510][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.923316][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.071357][T12342] usb 6-1: GET_CAPABILITIES returned 0 [ 1334.077308][T12342] usbtmc 6-1:16.0: can't read capabilities [ 1334.211141][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1334.332874][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.360983][T12342] usb 6-1: USB disconnect, device number 51 [ 1334.377137][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.449103][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1335.208972][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.216280][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.555887][T13892] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1338.130409][T13913] netlink: 'syz.9.1823': attribute type 6 has an invalid length. [ 1341.194753][ T4287] Bluetooth: hci4: command 0x0401 tx timeout [ 1341.986254][T13984] NILFS (nbd5): device size too small [ 1343.341298][T14001] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1343.356985][T14001] netlink: 'syz.3.1847': attribute type 21 has an invalid length. [ 1343.600159][T12344] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1343.600177][ T4374] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1343.881972][T12344] usb 6-1: Using ep0 maxpacket: 32 [ 1343.882053][ T4287] Bluetooth: hci4: command 0x0401 tx timeout [ 1344.009007][T12344] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 1344.019295][T12344] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1344.034253][T12344] usb 6-1: can't read configurations, error -61 [ 1344.196169][T12344] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1344.282962][ T4374] usb 2-1: Using ep0 maxpacket: 32 [ 1344.290028][ T4374] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.376196][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 1345.066229][ T4374] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.079316][ T4374] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1345.093577][ T4374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1345.101315][ T4374] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 1345.121763][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.249164][T12344] usb 6-1: Using ep0 maxpacket: 32 [ 1345.381898][ T4374] usb 2-1: config 0 descriptor?? [ 1346.480651][ T4374] ntrig 0003:1B96:0012.0014: hidraw0: USB HID v0.01 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 1346.505100][ T4374] ntrig 0003:1B96:0012.0014: Firmware version: 1.15.25.63.3 (ff43 fb27) [ 1346.848354][T12344] usb 6-1: device descriptor read/all, error -71 [ 1346.851308][ T4374] usb 2-1: USB disconnect, device number 3 [ 1346.872074][T12344] usb usb6-port1: attempt power cycle [ 1347.288312][T14011] team0: Port device team_slave_0 removed [ 1347.303231][T14032] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1347.359382][T14032] netlink: 'syz.9.1852': attribute type 21 has an invalid length. [ 1348.036229][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1854'. [ 1348.266809][T14024] fido_id[14024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1349.096851][T14073] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1349.117462][T14073] netlink: 'syz.5.1863': attribute type 21 has an invalid length. [ 1351.602595][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1865'. [ 1353.832347][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1874'. [ 1353.895100][T14125] ima: Unable to open file: /e (-2) [ 1353.904643][T14123] ima: policy update failed [ 1353.916330][ T26] audit: type=1802 audit(1786405372.718:103): pid=14123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1876" res=0 errno=0 [ 1354.403191][T14106] loop2: detected capacity change from 0 to 32768 [ 1354.521142][T14106] XFS (loop2): Mounting V5 Filesystem [ 1354.589556][T12344] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1354.719086][T14106] XFS (loop2): Ending clean mount [ 1354.809437][T12344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.823167][T14106] XFS (loop2): Quotacheck needed: Please wait. [ 1354.842400][T12344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.883565][T12344] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1354.970618][T12344] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.962251][T12344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.074023][T12344] usb 10-1: config 0 descriptor?? [ 1356.151483][T14106] XFS (loop2): Quotacheck: Done. [ 1356.387227][T12041] XFS (loop2): Unmounting Filesystem [ 1356.608674][T12344] plantronics 0003:047F:FFFF.0015: unbalanced delimiter at end of report description [ 1356.659313][ T4368] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.691462][T12344] plantronics 0003:047F:FFFF.0015: parse failed [ 1356.708031][T12344] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22 [ 1356.871264][T12756] usb 10-1: USB disconnect, device number 55 [ 1356.967946][ T4368] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.089500][ T4368] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.214239][ T4368] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.683686][T14177] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1357.700119][T14177] netlink: 'syz.1.1888': attribute type 21 has an invalid length. [ 1359.412319][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 1362.682661][T14216] ima: Unable to open file: /e (-2) [ 1362.888485][T14208] ima: policy update failed [ 1362.899953][ T26] audit: type=1802 audit(1786405381.013:104): pid=14208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1896" res=0 errno=0 [ 1363.013585][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 1365.020290][T14222] team0: Port device team_slave_0 removed [ 1365.832941][T14249] loop3: detected capacity change from 0 to 512 [ 1366.238144][T14249] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.484796][T14249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1366.501364][T14249] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1366.529843][T14249] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.1903: Allocating blocks 41-42 which overlap fs metadata [ 1366.762859][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1366.819317][T14249] Quota error (device loop3): write_blk: dquota write failed [ 1366.861314][T14249] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1366.899801][T14249] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1903: Failed to acquire dquot type 0 [ 1367.884668][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1367.922600][T14249] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1368.036602][T14264] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1368.072661][T14264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1368.115023][T14264] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1368.136813][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1369.498564][T14249] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1903: corrupted inode contents [ 1369.522018][T14273] loop5: detected capacity change from 0 to 512 [ 1369.569577][T14273] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1369.607319][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1369.641323][T14273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1369.690239][T14249] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.1903: mark_inode_dirty error [ 1369.702277][T14273] System zones: 1-12 [ 1369.717881][T14273] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1369.815800][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1369.824397][T14273] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1897: invalid indirect mapped block 12 (level 1) [ 1369.886023][T14249] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1903: corrupted inode contents [ 1369.954284][T14273] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1897: invalid indirect mapped block 2 (level 2) [ 1369.968560][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1369.975138][T14249] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.1903: mark_inode_dirty error [ 1370.043087][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1370.224888][T14273] EXT4-fs (loop5): 1 truncate cleaned up [ 1370.236711][T14249] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1903: corrupted inode contents [ 1370.351789][T14273] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1370.592392][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1370.741256][T14249] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1370.949217][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1370.970963][T14249] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.1903: corrupted inode contents [ 1371.063060][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1371.109243][ T5666] EXT4-fs (loop5): unmounting filesystem. [ 1371.126248][T14249] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.1903: mark_inode_dirty error [ 1371.193791][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1371.200443][T14249] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1371.302393][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1371.332535][T14249] EXT4-fs (loop3): 1 truncate cleaned up [ 1371.355244][T14249] EXT4-fs (loop3): pa ffff888074f00380: logic 1, phys. 41, len 23 [ 1371.363464][T14249] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 1371.459401][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 1371.494271][T14249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1371.649418][ T4374] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1371.927364][ T4374] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1371.995617][ T4374] usb 6-1: config 0 has no interface number 0 [ 1372.090223][ T4374] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1372.307588][ T4374] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1372.461638][ T4374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.469895][ T4374] usb 6-1: Product: syz [ 1372.511069][ T4374] usb 6-1: Manufacturer: syz [ 1372.552428][ T4374] usb 6-1: SerialNumber: syz [ 1372.602816][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1372.657021][ T4374] usb 6-1: config 0 descriptor?? [ 1372.737293][ T4374] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1372.895575][ T4368] IPVS: stopping backup sync thread 9526 ... [ 1373.965854][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1374.039721][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1374.124653][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1374.207870][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1374.292156][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1374.426443][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1375.756393][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 1376.731108][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1376.849076][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1377.824525][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1377.845834][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1377.938509][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1377.977629][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1377.990618][T14348] loop3: detected capacity change from 0 to 128 [ 1378.018538][T14348] EXT4-fs: Ignoring removed orlov option [ 1378.030676][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.084020][T14348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1378.094688][T14348] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.097254][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.113535][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.122140][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.129790][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.137245][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.145814][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.155097][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.165309][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.174599][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.177380][T14348] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz.3.1930: No space for directory leaf checksum. Please run e2fsck -D. [ 1378.182205][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.182235][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.182258][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.182279][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.182298][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.182317][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.259137][T14348] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #11: comm syz.3.1930: checksumming directory block 0 [ 1378.320623][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.356592][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.365220][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.412324][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.432904][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.441282][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.465152][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.473057][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.497590][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.505206][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.530325][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.538426][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.562634][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.570129][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.595222][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.603238][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.635643][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.649624][ T28] INFO: task syz.0.1555:12616 blocked for more than 143 seconds. [ 1378.659947][ T28] Not tainted syzkaller #0 [ 1378.666305][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.672815][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.690562][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.696462][ T28] task:syz.0.1555 state:D stack:28624 pid:12616 ppid:10202 flags:0x00004004 [ 1378.720815][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.723074][ T28] Call Trace: [ 1378.741501][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.742691][ T28] [ 1378.764403][ T28] __schedule+0x107f/0x4030 [ 1378.773671][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.780674][ T28] ? __sched_text_start+0x8/0x8 [ 1378.794823][ T28] ? __mutex_trylock_common+0x86/0x260 [ 1378.808896][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1378.811088][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.824943][ T28] schedule+0xb9/0x180 [ 1378.835356][ T28] schedule_preempt_disabled+0xf/0x20 [ 1378.843370][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.848461][ T28] __mutex_lock+0x548/0xae0 [ 1378.869963][ T28] ? __mutex_lock+0x3ba/0xae0 [ 1378.876987][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.884651][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.887438][ T28] ? usbdev_ioctl+0x143/0x1f20 [ 1378.911608][ T28] ? mutex_lock_nested+0x10/0x10 [ 1378.920247][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.924115][ T28] usbdev_ioctl+0x143/0x1f20 [ 1378.931188][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.943321][ T28] ? usbdev_poll+0x1f0/0x1f0 [ 1378.955548][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1378.961815][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1378.968326][ T28] ? security_file_ioctl+0x7c/0xa0 [ 1378.984718][ T28] ? usbdev_poll+0x1f0/0x1f0 [ 1378.996407][ T28] __se_sys_ioctl+0xfa/0x170 [ 1379.007166][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.009092][ T28] do_syscall_64+0x4c/0xa0 [ 1379.032913][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1379.035380][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.045036][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1379.057965][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.068680][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.072979][ T28] RIP: 0033:0x7f8463b9e0d9 [ 1379.080476][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.085488][ T28] RSP: 002b:00007f8464a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.114784][ T28] RAX: ffffffffffffffda RBX: 00007f8463e26090 RCX: 00007f8463b9e0d9 [ 1379.115324][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.140867][ T28] RDX: 00002000000006c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1379.158925][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.159988][ T28] RBP: 00007f8463c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1379.166461][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.166489][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.166510][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.182842][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.210818][ T28] R13: 00007f8463e26128 R14: 00007f8463e26090 R15: 00007ffc8badec78 [ 1379.219768][T14355] loop5: detected capacity change from 0 to 40427 [ 1379.220651][ T28] [ 1379.226674][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.230255][ T28] [ 1379.230255][ T28] Showing all locks held in the system: [ 1379.245733][ T28] 2 locks held by kworker/u4:0/9: [ 1379.251037][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1379.265248][T14355] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1379.278679][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.290837][T14355] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1379.294338][ T28] #1: [ 1379.299251][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.303382][ T28] ffffc900000e7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1379.317709][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.321929][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1379.337781][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.338609][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1379.354441][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.361216][ T28] 1 lock held by rcu_tasks_trace/13: [ 1379.373177][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1379.376929][T14355] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1379.386645][ T28] 1 lock held by khungtaskd/28: [ 1379.399399][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.400648][ T28] #0: [ 1379.408239][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.410230][ T28] ffffffff8cb2db60 [ 1379.411137][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.419501][ T28] ( [ 1379.451335][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.459630][ T28] rcu_read_lock [ 1379.461500][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.461538][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.469125][ T28] ){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1379.501267][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.501732][ T28] 1 lock held by dhcpcd/3935: [ 1379.520784][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.534116][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 1379.544019][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544050][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544072][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544093][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544114][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544135][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544157][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544178][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544199][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544221][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544243][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544265][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544287][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.544309][T12756] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1379.554687][T12742] usb 6-1: USB disconnect, device number 55 [ 1379.659705][T12756] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1379.679363][T14355] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1379.689180][T14355] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1379.689513][ T28] 2 locks held by getty/4030: [ 1379.771948][ T28] #0: ffff88814cb05098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1379.836522][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1379.863562][T12742] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1379.913850][ T28] 5 locks held by kworker/u4:10/4368: [ 1379.935094][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1379.952338][ T28] #1: ffffc900046f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1379.974226][ T28] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1379.992463][ T28] #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x51/0x290 [ 1380.014301][ T28] #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1380.036536][ T28] 3 locks held by kworker/1:8/4374: [ 1380.042198][ T28] #0: ffff88802f673d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.070026][ T28] #1: ffffc90004727d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.077962][T14362] fido_id[14362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1380.093298][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1380.118431][ T28] 2 locks held by kworker/1:9/4410: [ 1380.124354][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.135051][ T28] #1: ffffc900047a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.146756][ T28] 3 locks held by kworker/0:12/12342: [ 1380.152278][ T28] #0: ffff88802f673d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.164021][ T28] #1: ffffc9000583fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.181003][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1380.193008][ T28] 7 locks held by syz.0.1555/12613: [ 1380.198733][ T28] #0: ffff888027d54190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x143/0x1f20 [ 1380.209390][ T28] #1: ffff888027d55118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 1380.221131][ T28] #2: ffff888023658190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xf8/0x8a0 [ 1380.230529][ T28] #3: ffff88802b3bf118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 1380.241506][ T28] #4: ffffffff8dd00708 (register_mutex#7){+.+.}-{3:3}, at: usb_audio_disconnect+0xd0/0x6f0 [ 1380.252304][ T28] #5: ffff88802b3b8170 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 1380.263215][ T28] #6: ffffffff8dcc62c8 (register_mutex#6){+.+.}-{3:3}, at: snd_seq_midisynth_remove+0x68/0x4f0 [ 1380.274457][ T28] 1 lock held by syz.0.1555/12616: [ 1380.280539][ T28] #0: ffff888027d54190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x143/0x1f20 [ 1380.290165][ T28] 2 locks held by kworker/1:17/12745: [ 1380.295643][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.306853][ T28] #1: ffffc90003f57d00 (binder_deferred_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.317939][ T28] 3 locks held by kworker/0:19/13522: [ 1380.323723][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.334903][ T28] #1: ffffc9000fc9fd00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.345559][ T28] #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1380.356637][ T28] 2 locks held by kworker/u4:5/13641: [ 1380.362320][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.373858][ T28] #1: ffffc9001100fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1380.385812][ T28] 1 lock held by syz.2.1929/14347: [ 1380.390970][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1380.401178][ T28] 1 lock held by syz.2.1929/14349: [ 1380.406737][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1380.417480][ T28] 1 lock held by syz.2.1929/14352: [ 1380.422765][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 1380.432659][ T28] 2 locks held by syz.1.1926/14357: [ 1380.438299][ T28] #0: ffffffff8ddbc170 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1380.446720][ T28] #1: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5a/0x890 [ 1380.456511][ T28] [ 1380.461620][ T28] ============================================= [ 1380.461620][ T28] [ 1380.469966][T12834] EXT4-fs (loop3): unmounting filesystem. [ 1380.491615][ T28] NMI backtrace for cpu 1 [ 1380.496126][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1380.503542][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.513891][ T28] Call Trace: [ 1380.517380][ T28] [ 1380.520339][ T28] dump_stack_lvl+0x188/0x24e [ 1380.525042][ T28] ? irq_work_queue+0xb8/0x140 [ 1380.530075][ T28] ? show_regs_print_info+0x12/0x12 [ 1380.535289][ T28] ? load_image+0x410/0x410 [ 1380.539802][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1380.544566][ T28] ? printk_sprint+0x460/0x460 [ 1380.549433][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1380.554530][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1380.561010][ T28] ? _printk+0xda/0x130 [ 1380.565190][ T28] ? load_image+0x410/0x410 [ 1380.569710][ T28] ? load_image+0x410/0x410 [ 1380.574754][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1380.580864][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1380.587008][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1380.593008][ T28] watchdog+0xf0e/0xf50 [ 1380.597183][ T28] ? watchdog+0x1ed/0xf50 [ 1380.601535][ T28] kthread+0x29d/0x330 [ 1380.605614][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1380.610765][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1380.615694][ T28] ret_from_fork+0x1f/0x30 [ 1380.620200][ T28] [ 1380.623794][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1380.629170][ C0] NMI backtrace for cpu 0 [ 1380.629184][ C0] CPU: 0 PID: 4368 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1380.629200][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.629209][ C0] Workqueue: netns cleanup_net [ 1380.629235][ C0] RIP: 0010:unwind_next_frame+0x15f7/0x1fd0 [ 1380.629284][ C0] Code: 04 28 84 c0 0f 85 f8 08 00 00 4c 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 11 09 00 00 49 0f bf 07 48 01 c6 48 89 df 4c 89 f2 d4 09 00 00 84 c0 0f 84 36 01 00 00 49 bd 00 00 00 00 00 fc ff [ 1380.629338][ C0] RSP: 0018:ffffc900046f6fe0 EFLAGS: 00000287 [ 1380.629351][ C0] RAX: fffffffffffffff0 RBX: ffffc900046f7088 RCX: 0000000000000000 [ 1380.629362][ C0] RDX: ffffc900046f70c8 RSI: ffffc900046f7b50 RDI: ffffc900046f7088 [ 1380.629373][ C0] RBP: dffffc0000000000 R08: ffffc900046f70e7 R09: ffffc900046f70d8 [ 1380.629384][ C0] R10: dffffc0000000000 R11: fffff520008dee1d R12: ffffffff8ef23875 [ 1380.629394][ C0] R13: ffffffff8ef23876 R14: ffffc900046f70c0 R15: ffffffff8ef23874 [ 1380.629405][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1380.629418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.629429][ C0] CR2: 0000555c52ee1a18 CR3: 00000000274d2000 CR4: 00000000003506f0 [ 1380.629444][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1380.629453][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1380.629462][ C0] Call Trace: [ 1380.629468][ C0] [ 1380.629477][ C0] ? hwsim_exit_net+0x589/0x650 [ 1380.629497][ C0] ? stack_trace_save+0xf0/0xf0 [ 1380.629538][ C0] arch_stack_walk+0x10c/0x140 [ 1380.629564][ C0] ? cleanup_net+0x703/0xba0 [ 1380.629583][ C0] stack_trace_save+0xa6/0xf0 [ 1380.629600][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1380.629618][ C0] ? __lock_acquire+0x1465/0x7c40 [ 1380.629640][ C0] ? memset+0x1e/0x40 [ 1380.629673][ C0] kasan_set_track+0x4b/0x70 [ 1380.629697][ C0] ? kasan_set_track+0x4b/0x70 [ 1380.629714][ C0] ? kasan_save_free_info+0x27/0x40 [ 1380.629727][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 1380.629745][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 1380.629761][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 1380.629776][ C0] ? kernfs_put+0x311/0x480 [ 1380.629795][ C0] ? kernfs_remove_by_name_ns+0xe0/0x150 [ 1380.629811][ C0] ? sysfs_remove_group+0xfd/0x290 [ 1380.629829][ C0] ? sysfs_remove_groups+0x50/0xa0 [ 1380.629846][ C0] ? __kobject_del+0x83/0x2e0 [ 1380.629859][ C0] ? kobject_put+0x22f/0x450 [ 1380.629873][ C0] ? netdev_queue_update_kobjects+0x3e5/0x480 [ 1380.629931][ C0] ? netdev_unregister_kobject+0x104/0x250 [ 1380.629948][ C0] ? unregister_netdevice_many_notify+0x14b6/0x1990 [ 1380.629968][ C0] ? ieee80211_remove_interfaces+0x44b/0x700 [ 1380.630028][ C0] ? ieee80211_unregister_hw+0x59/0x290 [ 1380.630047][ C0] ? mac80211_hwsim_del_radio+0x285/0x480 [ 1380.630066][ C0] ? hwsim_exit_net+0x589/0x650 [ 1380.630096][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 1380.630110][ C0] kasan_save_free_info+0x27/0x40 [ 1380.630124][ C0] ____kasan_slab_free+0x126/0x1f0 [ 1380.630144][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 1380.630163][ C0] ? kernfs_put+0x311/0x480 [ 1380.630177][ C0] kmem_cache_free+0xf7/0x2a0 [ 1380.630193][ C0] kernfs_put+0x311/0x480 [ 1380.630212][ C0] kernfs_remove_by_name_ns+0xe0/0x150 [ 1380.630229][ C0] sysfs_remove_group+0xfd/0x290 [ 1380.630249][ C0] sysfs_remove_groups+0x50/0xa0 [ 1380.630268][ C0] __kobject_del+0x83/0x2e0 [ 1380.630283][ C0] kobject_put+0x22f/0x450 [ 1380.630299][ C0] netdev_queue_update_kobjects+0x3e5/0x480 [ 1380.630321][ C0] netdev_unregister_kobject+0x104/0x250 [ 1380.630341][ C0] unregister_netdevice_many_notify+0x14b6/0x1990 [ 1380.630366][ C0] ? unregister_netdevice_many+0x20/0x20 [ 1380.630386][ C0] ? mutex_unlock+0x10/0x10 [ 1380.630405][ C0] ? unregister_netdevice_queue+0x17c/0x330 [ 1380.630423][ C0] ? rcu_is_watching+0x11/0xa0 [ 1380.630443][ C0] ? list_netdevice+0x640/0x640 [ 1380.630463][ C0] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1380.630500][ C0] ? cfg80211_shutdown_all_interfaces+0x173/0x1c0 [ 1380.630541][ C0] ieee80211_remove_interfaces+0x44b/0x700 [ 1380.630561][ C0] ? ieee80211_unregister_hw+0x51/0x290 [ 1380.630581][ C0] ? ieee80211_do_stop+0x1e10/0x1e10 [ 1380.630605][ C0] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1380.630623][ C0] ieee80211_unregister_hw+0x59/0x290 [ 1380.630643][ C0] mac80211_hwsim_del_radio+0x285/0x480 [ 1380.630664][ C0] ? rhashtable_remove_fast+0xc50/0xc50 [ 1380.630688][ C0] hwsim_exit_net+0x589/0x650 [ 1380.630711][ C0] ? hwsim_init_net+0x80/0x80 [ 1380.630727][ C0] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1380.630762][ C0] cleanup_net+0x703/0xba0 [ 1380.630780][ C0] ? ops_free_list+0x3b0/0x3b0 [ 1380.630797][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1380.630813][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1380.630830][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1380.630845][ C0] ? process_one_work+0x7b4/0x1160 [ 1380.630863][ C0] process_one_work+0x8ab/0x1160 [ 1380.630885][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1380.630903][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1380.630941][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1380.630958][ C0] ? wq_worker_running+0x97/0x190 [ 1380.630981][ C0] worker_thread+0xaf5/0x12a0 [ 1380.631009][ C0] kthread+0x29d/0x330 [ 1380.631073][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1380.631088][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1380.631102][ C0] ret_from_fork+0x1f/0x30 [ 1380.631127][ C0] [ 1380.661409][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1380.661425][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1380.661443][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.661453][ T28] Call Trace: [ 1380.661460][ T28] [ 1380.661468][ T28] dump_stack_lvl+0x188/0x24e [ 1380.661505][ T28] ? memcpy+0x3c/0x60 [ 1380.661523][ T28] ? show_regs_print_info+0x12/0x12 [ 1380.661546][ T28] ? load_image+0x410/0x410 [ 1380.661574][ T28] panic+0x2d3/0x710 [ 1380.661591][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1380.661618][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1380.661635][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1380.661663][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1380.661688][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1380.661717][ T28] watchdog+0xf4d/0xf50 [ 1380.661739][ T28] ? watchdog+0x1ed/0xf50 [ 1380.661763][ T28] kthread+0x29d/0x330 [ 1380.661778][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1380.661797][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1380.661814][ T28] ret_from_fork+0x1f/0x30 [ 1380.661848][ T28] [ 1380.664845][ T28] Kernel Offset: disabled [ 1381.283980][ T28] Rebooting in 86400 seconds..