last executing test programs: 4m33.863451833s ago: executing program 0 (id=1938): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_ep_read(r0, 0x1, 0xde, &(0x7f0000007680)=""/222) syz_usb_connect(0x2, 0x4a, &(0x7f0000000480)=ANY=[], 0x0) 4m29.300847084s ago: executing program 0 (id=1962): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) syz_emit_ethernet(0x8e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0x0, 0x1}) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x700, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m28.018881167s ago: executing program 0 (id=1969): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffff, 0xe7, 0xfffffffe, 0x2, 0xb, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000024c0)=0x2) 4m27.889290077s ago: executing program 0 (id=1970): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x88) 4m26.7490694s ago: executing program 3 (id=1974): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0x90001}}, {{0xa, 0x4e24, 0x80422, @rand_addr=' \x01\x00', 0x8}}}, 0x108) 4m26.65361249s ago: executing program 0 (id=1975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 4m25.960873031s ago: executing program 3 (id=1979): chdir(&(0x7f0000000500)='./file0\x00') 4m25.771636172s ago: executing program 3 (id=1981): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x34, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 4m25.741146982s ago: executing program 0 (id=1982): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002400000000209"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0xc000200d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000) 4m25.449900843s ago: executing program 32 (id=1982): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002400000000209"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0xc000200d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000) 4m25.348619063s ago: executing program 3 (id=1986): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdZiK9miO5M0tg1etBXFu4JS79eQTELIJBMyk3YTiqT4AQQRXfDKK28EP4Ag+xFkYcG9FxVFdFcvvFCPnDMn2ex4ZpPQ+bMkvx+8M+9555zzPG+yOfOeP3tOAJfWyxHxbkRMRMRrETFTtFeKEofdks338MFHK1nJPnn/b0kkRVtEXj12rVhsqvtWqr1/sLncbDZ2i+l6Z2un3t4/uLGxtbzeWG9sLy4uvLn01tIbS/MD6WfWr7e/+aef/PAX33r7N1/58Pc3/3L9+1nS3yg+L/oxcPfz12r2szg2GRG7wwg2BhNFf6rjTgQAgDPJxvifiYgv5uP/mZjIR3O53iHd1OizAwAAAAYhfWc6/p1EpAAAAMCF9U5ETEdSqRXXAkxHpVKrda/h/Vw8U2m22p0vr7X2tlezzyJmo1pZ22g25otramejmmTTC3n90fTrPdOLEfFcRPx45mo+XVtpNVfHffADAAAALolrPfv//5zp7v8DAAAAF8zsuBMAAAAAhq7f/n8y4jwAAACA4XH+HwAAAC60b7/3XlbSo+dfr36wv7fZ+uDGaqO9WdvaW6mttHZ3auut1np+z76t09bXbLV2vhrbe7fqnUa7U2/vH9zcau1td25ueH4gAAAAjMtzX7hzP4mIw69dzUvmSvYy0WcB1wrAhVE5z8x/HF4ewOj1+5oHLr7JcScAjM/huBMAxu2xW32UDApOXrzz2DGD3w4vJwAAYLDmPl9+/j/bBaiOOzlgqM51/h+4UJz/h8vrnOf/7w4rD2D0qkYAcOmd9qiPvjfvKDv/f6VsxjQ9dV0AAMBQTeclqdSKc4HTUanUahHP5v/Vv5qsbTQb8xHx6Yj43Uz1U9n0Qr5k4vGAAAAAAAAAAAAAAAAAAAAAAAAAAHBGaZpECgAAAFxoEZU/J8Xzv+ZmXp3uPT5wJfnXTBSP9PrwZ+//9NZyp7O7kLX//bi9c7tof30cRzAAAACAXkf76Uf78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSA8ffLRyVEYZ969fj4jZsviTMZW/T0U1Ip75RxKTJ5ZLImJiAPEPP46I58viJ1laMVtk0Ru/EhFXRxP/xTRNS+NfG0B8uMzuZNufd8v+/irxcv5e/vc/WZRPqv/2r3K8/Zvos/179owxXrj3q3rf+B9HvDBZvv05ip/0if9K2QpLfijf++7Bwf81dlce6c8j5kq/f5LHYtU7Wzv19v7BjY2t5fXGemN7cXHhzaW3lt5Ymq+vbTQbxWtpH3/04q//29P0n7Qr73/0iT97Sv9fzSrVE41pb5gi2L1bDz7brVZ7VpHHv/5K+e//+SfEz/5NfKn4Hsg+nzuqH3brJ730y7svlSZWxF/t0//Tfv/X+620x2vf+cEfzjgrADAC7f2DzeVms7E79MrtNE1HFUvl/JWj0d3QQkw9LT1VOa0yiCNbAADA0+bRoH/cmQAAAAAAAAAAAAAAAAAAAMDl1d6PyrBvJ9Yb83A8XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKL/BQAA//9PHd4N") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x88) 4m24.611712315s ago: executing program 3 (id=1991): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="2c6d6f64653d3078303030303030303038303030303030312c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f434845434b2c0020e70c853946a2904771793dc06c06611e03f5e2c7602f64a957c88cc3d8ee83589beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e56cce2a69c86db67514e59f271f5f87b7b075aabe717344a6eaeb832436386d4424b4a3d25832eb577d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7e56043e63b8dd704ed4ede91e42537942c5e62bf46bf7b8542c03f6240d54f161466db4e9134915ca2839bbf4d798c1de7af1366d9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa91274ac0114c707f4e3bf295693abd959f52b9564cd00500cfc"], 0x1, 0x59d, &(0x7f00000009c0)="$eJzs3E9v2+YZAPCXjl0bLhYMKNakaYCyaQ/ZIa4kLw6M7hCNpmy2kiiQdOGchmJxOmN2NywbsOaWS7cCG3baeeh1n2Bfqp/BA/Unkewkyr9W2/D7AfH7UnzI93kZgg9EiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIiSnUajGYVu1t8/iJ8u2Sny3jPWT/b375lmxsrU3xCFENX/wtpauDz66PJbj2N/Uv+5Fi6Nli6FtbpZCw/efPvHH7+1vFRvuBJF4RkJ/SDuf/XgN58fHx/+ftGJvAan0Ytvs5v2szLPeu3dNM7KPN7e2mp8tNcp407WTcs7ZZX24qRI21VexNeT2yGE7c043biT7/d3d9rdNL6e/DRubm/futFqNLbiTzYGabso8/5Hn2yUyV7W7Wb93WFMvfpG671wqz4RP82quErbvTi+d3R8uDkvyTqo+TxBrXlBrUar1Wy2Ws2tm9s3bzUaa+Oz9dEHy40zwtlNlhd/0vKDe2N8ogwXJte4N17fVRxezmny90WnAAAAAHzPouE99mh4X/7ysNfJumljJuY0Wlh6AAAAwGsw/Gp/aXwDIITLITr//R8AAAD43/aXZz5jF6IolIPVaPKoyuDgw+ikXffaJxdGH104u8eqcyW6ON7JsNlaHi8l6dXonVHQO5Po78bNvXl5REWxEj18tQTCX8OVUcyVu6P27mTNaJT1TtZNN5K8+3EztNsXl6r0oPrjl0d/CqEoTi980+9djMK9o+PDjV/99vjuMJeH9V4enox/IXHuhxKzuayGqVz+8Oi5x/GMb8/OeGV4I6ae9Tf93vpo3Mb0/JdGmy+9wPy/Du+OYt5dH7Xrs/Nfq8dsbjxh9tNZNAcHH66OB3vOmZ/J4uoo5ur1D+rmg+vjNStTWbTmZdGaPv4vdSyeksX0sdh8Rhan4ej4cPMVswBYlHtnq9Co7obH9f9c3X2Jq9yc6l6X8LnV/ddzR/k6vD+Kef/K8uOKdOaK3phXVxrPWddDeHIW/wrX/vmPEPbDtUnw02psPe7fZqpqdPJtvcG358adPGledltRvXBh9eR34e37Xz24cXTy+ReHXxx+2WptbjV+1mjcbIWV4TTGjdoDwBOkxXfRevXnqCiywS+b29vNdrWXxkWefBoX2c5uGmf9Ki2SvXZ/N40HRV7lSd6tO59lO2kZl/uDQV5UcScv4kFeZgfDN7/E41e/lGmv3a+ypBx003aZxkner9pJFe9kZRIP9n/Rzcq9tBhuXA7SJOtkSbvK8n5c5vtFkm7EcZmmU4HZTtqvsk5Wd/vxoMh67eJO/Fne3e+l8U5aJkU2qPLRDidjZf1OXvSGu91Y9MEGgP8S98P4DXaPXmX3wp2wNidm0XMEAGadrdKri04IAAAAAAAAAAAAAAA4Z/pxvZ+PX+nzyk8ELrZz+80nrXpv8YlNd0IIy9/rEJMXJy18pv8fnbW6sxQWncbK+H/1ZfcThRDmB/+ojlnUFQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu4/AQAA//9huY+A") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8e5}, 0x240048c4) chdir(&(0x7f0000000500)='./file0\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4m24.136179826s ago: executing program 3 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffff, 0xe7, 0xfffffffe, 0x2, 0xb, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000024c0)=0x2) 4m23.970409306s ago: executing program 33 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffff, 0xe7, 0xfffffffe, 0x2, 0xb, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000024c0)=0x2) 4m2.633650576s ago: executing program 5 (id=2040): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x59d, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8e5}, 0x240048c4) chdir(&(0x7f0000000500)='./file0\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m1.285086s ago: executing program 5 (id=2042): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m57.109501139s ago: executing program 5 (id=2053): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES8], 0x2, 0xc36, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) syz_open_dev$sndctrl(0x0, 0x400001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000400)={0x4, 0x4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4f0ff1fe7b029a96fda3eda4d5adadddb023cf7000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000280)='.\x02\x00', 0x0) 3m55.745532553s ago: executing program 5 (id=2058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x80000000, @remote, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x251, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname(0xffffffffffffffff, 0x0, 0x0) ftruncate(r6, 0x2007ffb) socket$inet6(0xa, 0x80002, 0x0) sendfile(r5, r6, 0x0, 0x1000000211005) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304, 0x36}, '\x00\x007\x00', "9e8e00e4ff1f00000000e8ffffff00", "dc5d3f00", "46168c72b7b1d30e"}, 0x38) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x3, 0x4) 3m54.091377647s ago: executing program 5 (id=2061): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 3m53.613519308s ago: executing program 5 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m37.189762407s ago: executing program 34 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m44.135773982s ago: executing program 2 (id=2288): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@noswap}]}) 2m43.801747893s ago: executing program 2 (id=2292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0}) eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000240)={0xff02, 0x0, 0x0, 0x710, 0xf, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(0x0, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x5, 0x100) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000002c0)=0x8001100) 2m42.090303947s ago: executing program 2 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m40.415159571s ago: executing program 2 (id=2301): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setgroups(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x100018}}, 0x50) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0) 2m40.198682151s ago: executing program 2 (id=2303): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 2m39.003265124s ago: executing program 2 (id=2306): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m23.133735661s ago: executing program 35 (id=2306): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.495906207s ago: executing program 4 (id=2710): r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x54000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) 19.467121534s ago: executing program 4 (id=2729): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0xc5c8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@sysvgroups}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {}]}, 0x11, 0x5d8, &(0x7f0000000c00)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x6) 19.325763584s ago: executing program 4 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304"], 0x68}}, 0x0) 19.310935824s ago: executing program 4 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x1d, 0x2, 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) 17.550056728s ago: executing program 4 (id=2735): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0005, &(0x7f0000000000)={[{@norecovery}]}, 0xf1, 0x465, &(0x7f00000004c0)="$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") 17.405644989s ago: executing program 4 (id=2736): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x5800) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) close(r4) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 15.447158313s ago: executing program 1 (id=2740): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) r2 = syz_io_uring_setup(0x269e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 14.840331354s ago: executing program 1 (id=2743): setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) 11.304591223s ago: executing program 1 (id=2760): bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) 10.233775365s ago: executing program 7 (id=2762): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f0000000080)={0x1, 0x2, 0xb, 0x0, 0x7}) socket(0x10, 0x803, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@my=0x1}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7a5, &(0x7f0000000140)={{@my=0x1}, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 8.998431899s ago: executing program 7 (id=2763): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000000400)=ANY=[@ANYBLOB="75737271756f74612c696f636861727365743d64656661756c742c6e6f646973636172642c696e746567726974792c71756f74612c6e6f71756f74612c71756f746100696f636861727365743d63703933362c756d61736b3d3078303030303030303030303030303038312c75737271756f74612c726573697a653d3078303030303030303130303030303030302c756d61736b3d307c3030303030303030303030727071756f74612c75737271756f74612c657500103e000000000000002eb97b1ad4dc47ae8a34ee26ad7e2a3da51c479cf90622dd0875", @ANYRESHEX=0x0, @ANYBLOB="2c646566636f5f752c5b736e616d653dd3e0ba98bfcd74786bef993dee08e8055a14d3b3"], 0x1, 0x612b, &(0x7f0000006540)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 8.141464851s ago: executing program 1 (id=2765): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000004c0)='./file2\x00', 0x0, &(0x7f0000009780), 0x1, 0x971a, &(0x7f0000012ec0)="$eJzs/QWcbXWhuP/PgUN3qLSUgklJGUiXiEhICNIlKSClCIgFiKLS3d3d3d3d3d35fx04oHIfuPr939/l3vs8z8sze/bea9Z89ue91nL2rGHvpeZdbM6BgTEH3u+Dy7+320pjHb7FwMLnHrzxg/es/MZXzx568/DvX4w1+9DLOYZezjkwMDBo6HoGvX/b4NlOOnmYgcEDQ/7390YdaeRhRh0YGHno1aHrGZj5/YtRDvlguXc/Eg900iHfbrv3/73XaENW8t5AV5hjvIGBgRH/4euHjGva//BApS01x3zz/t3qQ7dhht496O/3vXc5+P1/oxwwMDDKfgMfv30MWXa4f/ja/86GfM8x79pkpcc+he/9v66l5phvgY/4D9kXhx1628xD9vGP7oPGPrqdr3bZXSsMncJBQydu8D/sL5/Gdv//1FJzzLvQwMfvxwNHPTjT2e++d9wcPPfAwOB5BgYGzzswMHi+T9uj/mv6VDe+qqqq+lSaY84ZhjxnH+YjPw+M+MHPtfRz4aXPvXjHwMDghd9/njh4hQ+eC1ZVVVVVVVXV/8zmmHOGueD5/5if9Px/mlPnnabn/1VVVVVVVVX/e1pgjjlnGPJc/yPP/8f7pOf/7z6y3p7v/+3/7DO//1XvfLoPoqqqqqqqqqo+sXkXwOf/k37S8/+LT3vguZ7/V1VVVVVVVf3vadEZ5p1r4B9eZ2/ozVN/cD89/z/hyYlW/rTGW1VVVVVVVVX/fu88fcY5f3/N90kGPvJ67+819PcCg44777rrPrWB/s9o0H/8fchWn/aY/v9tiPOIR0w6MLDuEp/2UOpT6H/Na9XX/yfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iPub8/4ev/z/+6mM+OnTRqU7b8dl1/v6V7733/+CFF3h6609p6J9G/1fP/w+sOWhgYKjvmGsODAwsPMeii089MDCwzrM7njblwIf3zTLkvm+NPex7bxD/wX8mMs9YvOKtJn//csiGMjDuh+s47r31L/Du/sMO+sgg/qGxTjn44DWWevUbH72c6uMfxzAffLLk+Tvs+8F/yzLMRxYa8WO++IP1f/BYPuo8dOxTDxn7NButs/40G262+dfWXGfF1VddfdV1Z5h+xummnWm6WaedcZrV1lx71Wnf//gxczbpex/n+lfmbNSPztnTc/zjnH30sX3cnE36yXP23hqHvfTUsT6Ys8H/5pzN9clzNumaQ7/RWLMPN7DCe1MzaGBgrLmHG9h0yJXpRhgYGGueocuON2TZb489zMDAjn9/oEM+G+HDbXDQVkOWWWrexeZ8/zA1MPD3y7/3Me9nP/zQkc8+9HKOoZdzvv9txhz4+6Y4eLaTTh5myFz803SMOtLIw4w6MDDy0KtD1zMw6/sXI5/5wXIf8z7rHxnoey+zst37/95rtIGBgVGGfDL3ioNeHDL1/w3v0/7/9P///8FrlkEfbo+Dhv4busz7XnPMt8Dfv9d70zBk7oYdetvMQ0z+i9/a/p/6D+OddMSBST9hvJ/wujjvRdvXyqfcetZ/1evi0HjH+4TxfsLr+H7seJd+bJlb31/Vf9l4P3KsW+i9j7P/K8e6gU8+1g1LK1j16ok/eqz73scP8Z8Olx/M0QgfWejjjnWLzHzNVkPWP/snH+sWGjL24f7pWDfMwMBYc31wrBty4Jt3uIEdh1yZfsiV+YYbOGzIlRneuzLSwHlDrnx95fXWXmXIDfP/x+1g6kH/9AeasJ/N+5H9bNA/PPZBH/n7zsHvX45ywAfv4fQxx81BQx/Wf3qsoO12zE8Y7ye8/xTO85Db1jr7iq/8V73/FI13xE8e78e9X/bHjnebN7a85794vB/uZ8P9w3TN/6/sZ5P+83425CEO+w97xr/6c9gqsPz7n4/34dp2H+O4D3+mGO4j6/3PfqaY/5P3szHX/MjXbbvfwKBPmpv5/pW5meg/HIO2/se5+Vd/3pp6ivfvH/YT5ua6geW2/GBuhv8352a+f3duZh8Y9p/nZvDAPAMDA1MOPT7M+6/MzXifPDf/6nYzMiz//uerfnjT3BNdNdkHc/PRufjP5mbef3duJv1wu5nyvfsmH2Zg+OEHNl1xo402mO79jx9cnf79j5+8D879r8zlmP81cznB4I+by79vqjvPv9y2/8k++B+O6R+sf+5/dy4HPpzLgTU/urPU/9T6/Z+7/N3l7y5/d/m7y99d/uI+5vz/h6//v8ju58009Jcbw01477XjfNrj/ZT7P33+f6jvP53/H+faeyccZuDD+z7x/Oz7y/yPPD878/sXoxzywXIfPT/IA/3487NvzLr9C/9N52f/n/pgX/0Xfg/X8d9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7mPO/0/7wd8BXHrVCcsOPRE63Lu3X7ngpz3eT7n/0+f/h/r+0/n/Ba+8/d1hBj687xPP/7+/jOP8/2lvvvHG/+Tz/x/sq53/r/+k/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Mec/5/9g78DmPXiS5f/4O8BLr/nyYk+7fF+yv1fPf/f+/976/jvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzf0/P/AR97ecpG2CwzO///v7mP8f5g/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/8f5Yxb/ZfPHLP7L5Y9Z/H+SP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/T/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/z/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/ef6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yJ/zOL/y/wxi/8W+WMW/1/lj1n8t8wfs/hvlT9m8d86f8zi/+v8MYv/NvljFv/f5I9Z/H+bP2bx/13+mMX/9/ljFv8/5I9Z/LfNH7P4b5c/ZvHfPn/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8zi/5f8MYv/X/PHLP5/yx+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/12j/6CBga3+s0Uc/oMGjP7/Qhb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8P5M/ZvH/bP6Yxf9z+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/+fzxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf8L+WMW/y/mj1n8p8ofs/hPnT9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/Zv6Yxf9b+WMW/2/nj1n8v5M/ZvGfLX/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5c/ZvFfKH/M4v/9/DGL/8L5Yxb/H+SPWfwXyR+z+P8wf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+P88cs/svmj1n8l8sfs/j/JH/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/5/mj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/5/lj1n8N8gfs/hvmD9m8d8of8zi//P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8f9F/pjF/5f5Yxb/LfLHLP6/yh+z+G+ZP2bx3yp/zOK/df6Yxf/X+WMW/23yxyz+v8kfs/j/Nn/M4v+7/DGL/+/zxyz+f8gfs/hvmz9m8d8uf8ziv33+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6Yxf8v+WMW/7/mj1n8/5Y/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS//c+zf8/ZvEflD9m8R8mf8ziP2z+mMV/cP6YxX+4/DGL//D5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMX/M/ljFv/P5o9Z/D+XP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fz5/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/L+QP2bx/2L+mMV/qvwxi//U+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/t/IH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv9v5o9Z/L+VP2bx/3b+mMX/O/ljFv/Z8scs/t/NH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/e/ljFv+F8scs/t/PH7P4L5w/ZvH/Qf6YxX+R/DGL/w/zxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/o/wxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+P84f8ziv2z+mMV/ufwxi/9P8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bx/2n+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi/+G+WMW/43yxyz+P88fs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/1/kj1n8f5k/ZvHfIn/M4v+r/DGL/5b5Yxb/rfLHLP5b549Z/H+dP2bx3yZ/zOL/m/wxi/9v88cs/r/LH7P4/z5/zOL/h/wxi/+2+WMW/+3yxyz+2+ePWfz/mD9m8d8hf8zi/6f8MYv/n/PHLP475o9Z/P+SP2bx/2v+mMX/b/ljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bPybxH3Ygf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/2fyxyz+n80fs/h/Ln/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8f98/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/h/IX/M4v/F/DGL/1T5Yxb/qfPHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/kT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+38wfs/h/K3/M4v/t/DGL/3fyxyz+s+WPWfy/mz9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL//fyxyz+C+WPWfy/nz9m8V84f8zi/4P8MYv/IvljFv8f5o9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/0f5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvH/cf6YxX/Z/DGL/3L5Yxb/n+SPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/T/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+z/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+eP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP6/yB+z+P8yf8ziv0X+mMX/V/ljFv8t88cs/lvlj1n8t84fs/j/On/M4r9N/pjF/zf5Yxb/3+aPWfx/lz9m8f99/pjF/w/5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zF/zOK/Q/6Yxf9P+WMW/z/nj1n8d8wfs/j/JX/M4v/X/DGL/9/yxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T/X6H/BCP/pIhb/84z+/0IW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/4IH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+n8kfs/h/Nn/M4v+5/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF//P5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+F/DGL/xfzxyz+U+WPWfynzh+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9G/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/M3/M4v+t/DGL/7fzxyz+38kfs/jPlj9m8f9u/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+38sfs/gvlD9m8f9+/pjFf+H8MYv/D/LHLP6L5I9Z/H+YP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+WPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf/H+WMW/2Xzxyz+y+WPWfx/kj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/0/zxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/8/yxyz+G+SPWfw3zB+z+G+UP2bx/3n+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8if8zi/8v8MYv/FvljFv9f5Y9Z/LfMH7P4b5U/ZvHfOn/M4v/r/DGL/zb5Yxb/3+SPWfx/mz9m8f9d/pjF//f5Yxb/P+SPWfy3zR+z+G+XP2bx3z5/zOL/x/wxi/8O+WMW/z/lj1n8/5w/ZvHfMX/M4v+X/DGL/1/zxyz+f8sfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGJ/3AD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/D+TP2bx/2z+mMX/c/ljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi//n88cs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/C/ljFv8v5o9Z/KfKH7P4T50/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyH/gUnhNov/N/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/5v5Yxb/b+WPWfy/nT9m8f9O/pjFf7b8MYv/d/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9e/pjFf6H8MYv/9/PHLP4L549Z/H+QP2bxXyR/zOL/w/wxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8of8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+P84fs/gvmz9m8V8uf8zi/5P8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfx/mj9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8d8gf8ziv2H+mMV/o/wxi//P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/F/ljFv9f5o9Z/LfIH7P4/yp/zOK/Zf6YxX+r/DGL/9b5Yxb/X+ePWfy3yR+z+P8mf8zi/9v8MYv/7/LHLP6/zx+z+P8hf8ziv23+mMV/u/wxi//2+WMW/z/mj1n8d8gfs/j/KX/M4v/n/DGL/475Yxb/v+SPWfz/mj9m8f9b/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyz+7+aPSfyHH8gfs/gPyh+z+A+TP2bxHzZ/zOI/OH/M4j9c/pjFf/j8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHRv+R/vvG9T80i/847f+YxX/c/DGL/2fyxyz+n80fs/h/Ln/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8f98/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/h/IX/M4v/F/DGL/1T5Yxb/qfPHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/kT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+38wfs/h/K3/M4v/t/DGL/3fyxyz+s+WPWfy/mz9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL//fyxyz+C+WPWfy/nz9m8V84f8zi/4P8MYv/IvljFv8f5o9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/0f5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvH/cf6YxX/Z/DGL/3L5Yxb/n+SPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/T/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+z/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+eP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP6/yB+z+P8yf8ziv0X+mMX/V/ljFv8t88cs/lvlj1n8t84fs/j/On/M4r9N/pjF/zf5Yxb/3+aPWfx/lz9m8f99/pjF/w/5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zF/zOK/Q/6Yxf9P+WMW/z/nj1n8d8wfs/j/JX/M4v/X/DGL/9/yxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/ZvF/N39M4j/CQP6YxX9Q/pjFf5j8MYv/sPljFv/B+WMW/+Hyxyz+w+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/P5I9Z/D+bP2bx/1z+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOL/+fwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/0L+mMX/i/ljFv+p8scs/lPnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fyN/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+ZP2bx/1b+mMX/2/ljFv/v5I9Z/GfLH7P4fzd/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv/v5Y9Z/BfKH7P4fz9/zOK/cP6Yxf8H+WMW/0Xyxyz+P8wfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+P8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi/+P8MYv/svljFv/l8scs/j/JH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/p/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMX/Z/ljFv8N8scs/hvmj1n8N8ofs/j/PH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8f5E/ZvH/Zf6YxX+L/DGL/6/yxyz+W+aPWfy3yh+z+G+dP2bx/3X+mMV/m/wxi/9v8scs/r/NH7P4/y5/zOL/+/wxi/8f8scs/tvmj1n8t8sfs/hvnz9m8f9j/pjFf4f8MYv/n/LHLP5/zh+z+O+YP2bx/0v+mMX/r/ljFv+/5Y9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf8zi/27+mMR/xIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+n8kfs/h/Nn/M4v+5/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF//P5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+F/DGL/xfzxyz+U+WPWfynzh+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9G/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/M3/M4v+t/DGL/7fzxyz+38kfs/jPlj9m8f9u/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+38sfs/gvlD9m8f9+/pjFf+H8MYv/D/LHLP6L5I9Z/H+YP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+WPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf/H+WMW/2Xzxyz+y+WPWfx/kj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/0/zxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/8/yxyz+G+SPWfw3zB+z+G+UP2bx/3n+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8if8zi/8v8MYv/FvljFv9f5Y9Z/LfMH7P4b5U/ZvHfOn/M4v/r/DGL/zb5Yxb/3+SPWfx/mz9m8f9d/pjF//f5Yxb/P+SPWfy3zR+z+G+XP2bx3z5/zOL/x/wxi/8O+WMW/z/lj1n8/5w/ZvHfMX/M4v+X/DGL/1/zxyz+f8sfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jfpfUf8RPvtfjfrfX/5Cz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9Z/N/NH5P4jzSQP2bxH5Q/ZvEfJn/M4j9s/pjFf3D+mMV/uPwxi//w+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjF/zP5Yxb/z+aPWfw/lz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+H8+f8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfy/kD9m8f9i/pjFf6r8MYv/1PljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP7fyB+z+M+YP2bxnyl/zOI/c/6YxX+W/If2/Ej/eM3iP2v+mMX/m/ljFv9v5Y9Z/L+dP2bx/07+mMV/tvwxi/9388cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/17+mMV/ofwxi//388cs/gvnj1n8f5A/ZvFfJH/M4v/D/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yh/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP4/zh+z+C+bP2bxXy5/zOL/k/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/H+aP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+WP2bx3yB/zOK/Yf6YxX+j/DGL/8/zxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6Yxf8X+WMW/1/mj1n8t8gfs/j/Kn/M4r9l/pjFf6v8MYv/1vljFv9f549Z/LfJH7P4/yZ/zOL/2/wxi//v8scs/r/PH7P4/yF/zOK/bf6YxX+7/DGL//b5Yxb/P+aPWfx3yB+z+P8pf8zi/+f8MYv/jvljFv+/5I9Z/P+aP2bx/1v+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHLP7v5o9J/EceyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+Z/DGL/2fzxyz+n8sfs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/nz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+X8gfs/h/MX/M4j9V/pjFf+r8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/b+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/zfzxyz+38ofs/h/O3/M4v+d/DGL/2z5Yxb/7+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+9/DGL/0L5Yxb/7+ePWfwXzh+z+P8gf8ziv0j+mMX/h/ljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9R/pjFf8n8MYv/UvljFv+lNf4j/VtLW/yX0fj/e1n8f5w/ZvFfNn/M4r9c/pjF/yf5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/j/NH/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/LH/M4r9B/pjFf8P8MYv/RvljFv+f549Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/L/LHLP6/zB+z+G+RP2bx/1X+mMV/y/wxi/9W+WMW/63zxyz+v84fs/hvkz9m8f9N/pjF/7f5Yxb/3+WPWfx/nz9m8f9D/pjFf9v8MYv/dvljFv/t88cs/n/MH7P475A/ZvH/U/6Yxf/P+WMW/x3zxyz+f8kfs/j/NX/M4v+3/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fk/iPMpA/ZvEflD9m8R8mf8ziP2z+mMV/cP6YxX+4/DGL//D5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMX/M/ljFv/P5o9Z/D+XP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fz5/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/L+QP2bx/2L+mMV/qvwxi//U+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/t/IH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv9v5o9Z/L+VP2bx/3b+mMX/O/ljFv/Z8scs/t/NH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/e/ljFv+F8scs/t/PH7P4L5w/ZvH/Qf6YxX+R/DGL/w/zxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/o/wxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+P84f8ziv2z+mMV/ufwxi/9P8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bx/2n+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi/+G+WMW/43yxyz+P88fs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/1/kj1n8f5k/ZvHfIn/M4v+r/DGL/5b5Yxb/rfLHLP5b549Z/H+dP2bx3yZ/zOL/m/wxi/9v88cs/r/LH7P4/z5/zOL/h/wxi/+2+WMW/+3yxyz+2+ePWfz/mD9m8d8hf8zi/6f8MYv/n/PHLP475o9Z/P+SP2bx/2v+mMX/b/ljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WPv+W899Mr/Yf+r8scs+//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyz+7+aPSfxHHcgfs/gPyh+z+A+TP2bxHzZ/zOI/OH/M4j9c/pjFf/j8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOL/mfwxi/9n88cs/p/LH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P58/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/l/IH7P4fzF/zOI/Vf6YxX/q/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/2/kj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8388cs/t/KH7P4fzt/zOL/nfwxi/9s+WMW/+/mj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/vfwxi/9C+WMW/+/nj1n8F84fs/j/IH/M4r9I/pjF/4f5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/Uf6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/H+cP2bxXzZ/zOK/XP6Yxf8n+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4/zR/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4/yx/zOK/Qf6YxX/D/DGL/0b5Yxb/n+ePWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/y/yxyz+v8wfs/hvkT9m8f9V/pjFf8v8MYv/VvljFv+t88cs/r/OH7P4b5M/ZvH/Tf6Yxf+3+WMW/9/lj1n8f58/ZvH/Q/6YxX/b/DGL/3b5Yxb/7fPHLP5/zB+z+O+QP2bx/1P+mMX/z/ljFv8d88cs/n/JH7P4/zV/zOL/t/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f2yI/2pj/N/3PyJ/zLL/H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/9EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8mf8zi/9n8MYv/5/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv/P549Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/F/LHLP5fzB+z+E+VP2bxnzp/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/G/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/838MYv/t/LHLP7fzh+z+H8nf8ziP1v+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8vf8ziv1D+mMX/+/ljFv+F88cs/j/IH7P4L5I/ZvH/Yf6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+ePWfyXzR+z+C+XP2bx/0n+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/zR+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yx+z+G+QP2bx3zB/zOK/Uf6Yxf/n+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/i/wxi/8v88cs/lvkj1n8f5U/ZvHfMn/M4r9V/pjFf+v8MYv/r/PHLP7b5I9Z/H+TP2bx/23+mMX/d/ljFv/f549Z/P+QP2bx3zZ/zOK/Xf6YxX/7/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/X/LHLP5/zR+z+P8tf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y8J/N99d2BgtP3zxwT+QxrtgPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfs/i/mz8m8R99IH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/9n8scs/p/NH7P4fy5/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/fP6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4fyF/zOL/xfwxi/9U+WMW/6nzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5E/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/t/MH7P4fyt/zOL/7fwxi/938scs/rPlj1n8v5s/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi//38scs/gvlj1n8v58/ZvFfOH/M4v+D/DGL/yL5Yxb/H+aPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9H+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bx/3H+mMV/2fwxi/9y+WMW/5/kj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/0/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi/8G+WMW/w3zxyz+G+WPWfx/nj9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+v8gfs/j/Mn/M4r9F/pjF/1f5Yxb/LfPHLP5b5Y9Z/LfOH7P4/zp/zOK/Tf6Yxf83+WMW/9/mj1n8f5c/ZvH/ff6Yxf8P+WMW/23zxyz+2+WPWfy3zx+z+P8xf8ziv0P+mMX/T/ljFv8/549Z/HfMH7P4/yV/zOL/1/wxi//f8scs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TP2bxfzd/TOI/xkD+mMV/UP6YxX+Y/DGL/7D5Yxb/wfljFv/h8scs/sPnj1n8R8gfs/iPmD9m8R8pf8ziP3L+mMV/lPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/z+SPWfw/mz9m8f9c/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8zi//n8MYv/pPljFv/J8scs/pPnj1n8p8gfs/hPmT9m8f9C/pjF/4v5Yxb/qfL//7Fz51F21vUdx28Shp3qr0d7ukib2nqEFskCqLQWA4RsyBhEEhKSSJbJYhISs0AWQ6K2TVMKYqkgahtNmwpi0VaJFQ1EwWLZBErtQkpFCohtxLUpKknPTWZiMv0yp/Okz0Pl+3r9kZl7h+8V8j4f7uXkHENZ+h+nfyhL/+P1D2Xp/2v6h7L0/3X9Q1n6n6B/KEv/V+kfytL/RP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6n6R/KEv/k/UPZel/iv6hLP1frX8oS//X6B/K0v+1+oey9D9V/1CW/r+hfyhL/9/UP5Sl/+v0D2Xp/1v6h7L0P03/UJb+r9c/lKX/CP1DWfqfrn8oS/8z9A9l6X+m/qEs/UfqH8rS/yz9Q1n6j9I/lKX/aP1DWfqP0T+Upf9Y/UNZ+o/TP5Sl/9n6h7L0f4P+oSz9z9E/lKV/p/6hLP3fqH8oS//x+oey9D9X/1CW/m/SP5Sl/3n6h7L0f7P+oSz9z9c/lKX/BP1DWfpP1D+Upf8F+oey9J+kfyhL/8n6h7L0v1D/UJb+U/QPZek/Vf9Qlv7T9A9l6f8W/UNZ+l+kfyhL/+n6h7L0n6F/KEv/mfqHsvSfpX8oS/8u/UNZ+s/WP5Sl/xz9Q1n6z9U/lKX/PP1DWfq/Vf9Qlv7z9Q9l6b9A/1CW/gv1D2Xpf7H+oSz9F+kfytJ/sf6hLP3fpn8oS/8l+oey9F+qfyhL/2X6h7L0X65/KEv/S/QPZel/qf6hLP1X6B/K0n+l/qEs/VfpH8rSf7X+oSz9365/KEv/NfqHsvS/TP9Qlv5r9Q9l6b9O/1CW/u/QP5Sl/zv1D2Xp/y79Q1n6/7b+oSz9f0f/UJb+v6t/KEv/9fqHsvT/Pf1DWfpv0D+Upf/v6x/K0v9y/UNZ+v+B/qEs/a/QP5Sl/5X6h7L0f7f+oSz9r9I/lKX/e/QPZen/h/qHsvS/Wv9Qlv5/pH8oS//36h/K0v8a/UNZ+l+rfyhL//fpH8rS/zr9Q1n6v1//UJb+H9A/lKX/B/UPZen/x/qHsvT/E/1DWfpv1D+Upf+H9A9l6f9h/UNZ+m/SP5Sl/5/qH8rS/8/0D2Xpv1n/UJb+f65/KEv/j+gfytL/ev1DWfrfoH8oS/+P6h/K0v9G/UNZ+n9M/1CW/n+hfyhL/5v0D2Xp/3H9Q1n6f0L/UJb+f6l/KEv/v9I/lKX/J/UPZen/Kf1DWfrfrH8oS/8t+oey9P+0/qEs/f9a/1CW/p/RP5Sl/y36h7L0/6z+oSz9P6d/KEv/rfqHsvS/Vf9Qlv636R/K0n+b/qEs/T+vfyhL/y/oH8rS/3b9Q1n636F/KEv/L+ofytL/b/QPZel/p/6hLP2/pH8oS/+/1T+Upf9d+oey9L9b/1CW/vfoH8rS/179Q1n636d/KEv/L+sfytL/fv1DWfo/oH8oS/8H9Q9l6f93+oey9H9I/1CW/n+vfyhL/6/oH8rS/x/0D2Xp/4/6h7L0/yf9Q1n6/7P+oSz9H9Y/lKX/dv1DWfr/i/6hLP0f0T+Upf+/6h/K0v+r+oey9H9U/1CW/l/TP5Sl/2P6h7L0/zf9Q1n6P65/KEv/J/QPZen/pP6hLP2/rn8oS/+n9A9l6f8N/UNZ+v+7/qEs/f9D/1CW/jv0D2Xp/039Q1n6P61/KEv/b+kfytL/2/qHsvT/jv6hLP2/q38oS//v6R/K0v/7+oey9P9P/UNZ+u/UP5Sl/3/pH8rS/xn9Q1n6/0D/UJb+P9Q/lKX/j/QPZen/rP6hLP136R/K0n+3/qEk/V/c0j+Upf8A/UNZ+g/UP5Sl/yD9Q1n6H6J/KEv/Dv1DWfofqn8oS//D9A9l6X+4/qEs/Y/QP5Sl/5H6h7L0P0r/UJb+R+sfytL/GP1DWfr/lP6hLP1fpH/oBdcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/5ulK1fNn75gQdcS3/jGN77Z983z/W8mAADg/9qPP/Q/338nAAAAAAAAAAAAAAAAAAAAkFcT/3diz/c/IwAAAAAAAAAAAAAA/KQb23n6jkEDDnhq0P4Pjr23a8/Xk3deMHfz5i2l52v3j88OXnLg/g927969+7ylW8/qfnhYq9Vq/6+9uPvx4b2P26+/7r7XjN/7qIx434xyw5pW522bL3nskZk/OGFrx55nO1oXzZ63oGvowFarnNnRWtF+MGxAq1VGdbSuaj8Y3n4wuqN1ffvBSXseHNHa1n5w4sxFC2a1nxhT+fcMXijGdq5rDTpgsa0D/m2w//7X3Td5Rc/XPl6y59UOaXXvf+Oz4x/q9bMez7H/ntcvp/fef7//AYHn1L/9zx7a87WPl/wf7/+jfjRsa/Sz595/z+uXM+wf6hN8/j9go70/9/f6/D84eMl99+XTdw5q73/4kd+d3f3UIf+bz/8/fv1yZu/9Dzzg83/7c/zIns//h7Va5ayD/O2AVMZ2vmNHX+//fe//kJ/vdTNg//1vmDrmve39/9Ltj76k+6mOfu5/ZF/v/xt6/b0C/TO288O7e73/92P/rVcGL7lv/xuv+PzE9v7XjL75hv1+1p/9n9V7/0OWLVw8ZOnKVa+at3D6nK45XRefNPyUYUNfPezUoacM2fORYO+vB/m7Ajkc3Pt/68heNwNara599798z8tGtvd/x6YnxnU/dXg/9z+qz/f/wd7/IfTyga1DD22tmL5s2ZJhe3/teTh87697/7Jg//347/9fOa77L+v5M8MBrdbP7rtfO7V1f3v/v/jkA6/vfurQfu5/dJ/7H3Hgn1UC/XOQ7/+zet0csP/yiRdd197/6KOG3939VH//+39Mn/v/kPd/OBhjO1u1vom29z/w8WuuqXZdxvrzP6hPE/s/saw/rtp1GWf/UJ8m9t+16IRbq12Xs+0f6tPE/te/e8y51a7LG+wf6tPE/u/59mN3Vrsu59g/1KeJ/X+14zsrq12XTvuH+jSx/xtXT3q62nV5o/1DfZrY/8uuffpr1a7LePuH+jSx/4lPjVxW7bqca/9Qnyb2v/rY8++qdl3eZP9Qnyb2P3TmrinVrst59g/1aWL/D77r/Z+sdl3ebP9Qnyb2f92zw15R7bqcb/9Qnyb2f/MRgz9Q7bpMsH+oTxP733Xp5cdUuy4T7R/q08T+193aMaLadbnA/qE+Tez/7m03faXadZlk/1CfJvb/5Mm3za12XSbbP9Snif1/bNxLdlW7LhfaP9Snif13fnRxqXZdptg/1KeJ/Xc89PD6atdlqv1DfZrY//GD7zq12nWZZv9Qnyb2P2Pa9I9Xuy5vsX+oTxP7H/3MR15e7bpcZP9Qnyb2f/T6oz9V7bpMt3+oTxP7H7z02COrXZcZ9g/1aWL/84/Z8sFq12Wm/UN9mtj/hh0PLq12XWbZP9Snif1/4eqVj1e7Ll32D/VpYv/fnDP3wmrXZbb9Q32a2P/mn7v93mrXZY79Q32a2P/D95+zrtp1mWv/UJ8m9n/VTU/8TLXrMs/+oT5N7P9zk3deX+26vNX+oT5N7H/nr045rdp1mW//UJ8m9v/SO177QLXrssD+oT5N7H/aLVePrnZdFto/1KeJ/S/pfOcz1a7LxfYP9Wli/6cOPX5RteuyyP6hPk3s/8rtG2dUuy6L7R/q08T+v7jp5O9Vuy5vs3+oTxP7f2rCK8ZVuy5L7B/q08T+Nx135fZq12Wp/UN9mtj/iC9946Rq12WZ/UN9mtj/UVtO31ztuiy3f6hPE/t/5Rnjf6HadbnE/qE+Tex/wet+eEW163Kp/UN9mtj/T39/+bZq12WF/UN9mtj/pMsfmVDtuqy0f6hPE/tfvvbLX692XVbZP9Snif2fNmDWZdWuy2r7h/o0sf/tj7beU+26vN3+oT5N7P/ajTceVu26rLF/qE8T+//s/Fs+U+26XGb/UJ8m9v+tl5Yh1a7LWvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6bHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA///N/Iiv") socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 7.252950632s ago: executing program 6 (id=2766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 7.021793613s ago: executing program 7 (id=2767): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 6.635753264s ago: executing program 8 (id=2768): sched_setscheduler(0x0, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.625149924s ago: executing program 7 (id=2769): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b000000060050000000030400"], 0x68}}, 0x0) 6.377684175s ago: executing program 7 (id=2770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.223356385s ago: executing program 6 (id=2771): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) 6.057614935s ago: executing program 6 (id=2772): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000cc0)="$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") open(0x0, 0x2040, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x5dc, 0x0, 0x414d6714bf78e135}, 0x9c) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x1001, 0x0) 5.820520536s ago: executing program 1 (id=2773): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x2080c2, &(0x7f0000001340)=ANY=[@ANYRES16=0x0], 0x1, 0xaaa, &(0x7f0000001480)="$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") truncate(&(0x7f00000000c0)='./file2\x00', 0x2) 5.580339807s ago: executing program 6 (id=2774): socket$xdp(0x2c, 0x3, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x10) syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x2018008, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 5.446096697s ago: executing program 8 (id=2775): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x59d, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8e5}, 0x240048c4) chdir(&(0x7f0000000500)='./file0\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) dup(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.803163513s ago: executing program 6 (id=2776): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x2, 0x444c, &(0x7f00000088c0)="$eJzs3b9PHFceAPA3Az6Dz/aBz4VPOulWOkt3ujshcHV3WArG+AfYxJETW1Ga9QJrm2RhLViiFC5IZylVpBRRCiuR0lFZFGmdPyFNSqe2lBRpIkWyQrS7s8AMu2FDdiG2P5+Cx7zf3u/M2zeWhokTlbvzy7n55VxhMVeevb18JvduubSyUAzxPmk6/qH9G5/2dOM8Oehz72V27fzF12+eCeHLua+fbmxsbISq3tDUyLbff/j+/uz2tCHOtKn2W00PN++yA94KIZzcMa+qnhDCm1+EEIUQziV540naH0I4FuplN+9/cCvXodk8elI8m382/WB99PTU2sP1py0rRiF8UvrLf+4sfPv3ntFv/tWh4QEAAAAAAAAAAAAAAAAAeM5dun7txmvDI+FxFHrXoq3ndTfLk7TV87EbHfO37v9jAQAAAAAAAAAAAAAAAAAA4Hdq6/n/XHSiyfP/E0k61qL9xivdnyPdM/nqtYkLwyPJ+9+jHeX/TbK+O9cTBpu89z37/vdzmfbZ86lu5zh71ZhfY9yBEMVDqeM4HhoK4bPkxe+noiNxqbxc+fft8sriXMem8dyqxb+/Ef/62/tT0Ule6N9u/Mcz/TePfyf9ecfZVD2+1blT7IWWvv57Wtb7/P2orfifz7Tbj/izd+n499by+rdXGKsvANX4f9i7e/wnMv13K/7HQwi5qDrXXGoFqO5hqvmZ/cofuzGHF0E6/odqeamlM/kgW13/P2bifyHT/0Gt/6vZLyKaSsf/D7W8vlSNret/MN79+r+Y6f8g4l+d/6rv/7ak43+4ntmbqlL7JNtd/y9l+v+N8b/dquBGnMzzeJQ6A9aien6rv1dHWjr+fTvKt+7/4lb7v9RX7eVM+/26/2uM27j/ayz//4zq9380l45/f8t67V7/k5l23V7/x2r7P/YqHf8jtbz03nmg9rPd+E9l+u9W/Gu7kr5G/LfWk58O1/M//cX938517mWVjn9ymxRvr7Fa+1nb/0W77/+vZPo/iP1fdf6rcXdHfVGk43+0Zb1q/L9q4/9/rmbadT/+IQzb6+9ZOv7HWtarXf99u8d/OtOu2/H/Rzc7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgOjCfpQIjiodRxHA8NhXA+OT4VjkQzhbn8TKk8+85yCBNJfi6ciO6UyjOFUn5+sTxXzBdKpfJsCBeS8pOhL1oulSv5hcK9i5t99Ud3i4WlykyxUAkhXEry/xqONfqama8sFO6FEC5vlv0pLi/du1tYzM/NL/1/eHh4OExuzmEwKr5XKS5W6qPXS0OY2mw7EG2bXK34yuZcjkZvl1eWFgulWv7VbW1K5dlCaVub6aTsozAYVZZWFmcLlWK+VL7TGO8gjSXpxOT1N65fHdlRfiuqp+P7Oy0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfqXHo//7OITQWz+KQwhjjV+iZvUfPSmezT+bfrA+enpq7eH601b1WujpzKwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZ3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDURBGIDnrcVq5zGsZLezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJL3Qlh2IU1ShO9rBmbYnYH3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPl4eu8/3po2IsXlqo74+/qf7c9fcv25H//+4gQ3cjzPr/3DY9Pmd0+7fpXrXW7Nu2ozXS6+P2OkFr+DnAzztFX2XE3eNZW3oXJf2XsdqbqNiC7Pb1J92I8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmb51F1wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwKAAA///2/B7y") syz_io_uring_setup(0x279, 0x0, 0x0, 0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000180)) 2.802789794s ago: executing program 8 (id=2777): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.494937144s ago: executing program 6 (id=2778): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001480)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {0xff}, 0x95}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = syz_open_dev$cec(0x0, 0x0, 0x9c780) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x30}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000240)={"72e34d1f", 0x6, 0xfb, 0xf7, 0x4, 0x6, "c1ff275d889f3aeec1efc5444bb6b2", "a5e82123", "4cb20acc", "fb41ddd9", ["1ff6bce1883cf37fb0e24f7c", "4de9bd2365e4b673d89d2435", "b9424ae7d8f85d56ed5a5529", "6194fd104d8fc46b82de8a77"]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4081, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20008800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4429, &(0x7f0000008940)="$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") 2.149710995s ago: executing program 8 (id=2779): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) syz_emit_ethernet(0x8e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0x0, 0x1}) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.774754676s ago: executing program 1 (id=2780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0}) eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000240)={0xff02, 0x0, 0x0, 0x710, 0xf, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(0x0, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x5, 0x100) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000002c0)=0x8001100) 1.102440787s ago: executing program 8 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 1.029822997s ago: executing program 7 (id=2782): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 0s ago: executing program 8 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fff9) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) kernel console output (not intermixed with test programs): ering): Port device team_slave_0 removed [ 787.324629][ T21] m920x_read = error: -19 [ 787.329033][ T21] dvb-usb: error while querying for an remote control event. [ 787.341395][T12678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.379079][T12678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.452192][ T21] m920x_read = error: -19 [ 787.456573][ T21] dvb-usb: error while querying for an remote control event. [ 787.520585][T12678] bond0 (unregistering): Released all slaves [ 787.582381][ T21] m920x_read = error: -19 [ 787.622222][ T21] dvb-usb: error while querying for an remote control event. [ 787.764876][ T21] m920x_read = error: -19 [ 787.769262][ T21] dvb-usb: error while querying for an remote control event. [ 787.902383][ T4428] m920x_read = error: -19 [ 787.906759][ T4428] dvb-usb: error while querying for an remote control event. [ 787.962222][ T4428] Bluetooth: hci1: command 0x2016 tx timeout [ 787.990260][T12945] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 788.008347][T12945] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 788.023612][T12945] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 788.053331][T11276] m920x_read = error: -19 [ 788.060050][T12945] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.072987][T11276] dvb-usb: error while querying for an remote control event. [ 788.192609][T11276] m920x_read = error: -19 [ 788.196977][T11276] dvb-usb: error while querying for an remote control event. [ 788.227417][T11276] Bluetooth: hci2: command 0x0419 tx timeout [ 788.368746][ T4428] m920x_read = error: -19 [ 788.408538][T12945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.436090][ T4428] dvb-usb: error while querying for an remote control event. [ 788.471993][T13109] Invalid ELF header magic: != ELF [ 789.126282][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 789.173648][T11276] m920x_read = error: -19 [ 789.178038][T11276] dvb-usb: error while querying for an remote control event. [ 789.202979][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 789.224393][T12945] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.273907][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 789.298904][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 789.319582][T13116] loop7: detected capacity change from 0 to 736 [ 789.327119][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.334260][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.354338][T11276] m920x_read = error: -19 [ 789.358703][T11276] dvb-usb: error while querying for an remote control event. [ 789.363824][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 789.465863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 789.479685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 789.513539][T11276] m920x_read = error: -19 [ 789.517924][T11276] dvb-usb: error while querying for an remote control event. [ 789.648984][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.656127][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.672271][ T4241] m920x_read = error: -19 [ 789.682209][ T4241] dvb-usb: error while querying for an remote control event. [ 789.724790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 790.052364][T12945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.145461][T12945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.360720][T11276] m920x_read = error: -19 [ 790.365314][T11276] dvb-usb: error while querying for an remote control event. [ 790.368179][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 790.383566][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 790.436313][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 790.481418][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 790.493229][T11276] m920x_read = error: -19 [ 790.497610][T11276] dvb-usb: error while querying for an remote control event. [ 790.523084][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 790.730973][T11276] m920x_read = error: -19 [ 790.743133][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 790.751673][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 790.759860][T11276] dvb-usb: error while querying for an remote control event. [ 790.768694][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 790.777519][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 790.824318][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 790.844432][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 790.872714][T11276] m920x_read = error: -19 [ 790.877094][T11276] dvb-usb: error while querying for an remote control event. [ 791.010749][T11276] m920x_read = error: -19 [ 791.017769][T11276] dvb-usb: error while querying for an remote control event. [ 791.038911][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.078135][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 791.088749][ T1503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 791.166164][T11276] m920x_read = error: -19 [ 791.176956][T11276] dvb-usb: error while querying for an remote control event. [ 791.478232][ T4211] m920x_read = error: -19 [ 791.483046][ T4211] dvb-usb: error while querying for an remote control event. [ 791.589723][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2402'. [ 792.030601][ T4428] m920x_read = error: -19 [ 792.035044][ T4428] dvb-usb: error while querying for an remote control event. [ 792.212877][ T4241] m920x_read = error: -19 [ 792.217255][ T4241] dvb-usb: error while querying for an remote control event. [ 792.257296][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 792.277424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 792.416222][T11276] m920x_read = error: -19 [ 792.420595][T11276] dvb-usb: error while querying for an remote control event. [ 792.500799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 792.510315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 792.521104][T12945] device veth0_vlan entered promiscuous mode [ 793.327624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 793.336248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 793.359341][T12945] device veth1_vlan entered promiscuous mode [ 793.390424][T12945] device veth0_macvtap entered promiscuous mode [ 793.414617][ T4241] m920x_read = error: -19 [ 793.418960][ T4241] dvb-usb: error while querying for an remote control event. [ 793.433301][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 793.463247][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 793.730916][ T21] m920x_read = error: -19 [ 793.742416][ T21] dvb-usb: error while querying for an remote control event. [ 794.407611][ T21] m920x_read = error: -19 [ 794.432559][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 794.442325][ T21] dvb-usb: error while querying for an remote control event. [ 794.515590][T12945] device veth1_macvtap entered promiscuous mode [ 794.552487][ T4241] m920x_read = error: -19 [ 794.556862][ T4241] dvb-usb: error while querying for an remote control event. [ 794.597158][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.637366][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.678236][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.702260][ T4211] m920x_read = error: -19 [ 794.706674][ T4211] dvb-usb: error while querying for an remote control event. [ 794.712195][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.737867][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.768667][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.798925][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.830050][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.843837][ T4211] m920x_read = error: -19 [ 794.848374][ T4211] dvb-usb: error while querying for an remote control event. [ 794.873856][T12945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.892398][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 794.941463][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 794.984216][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.997045][ T4211] m920x_read = error: -19 [ 795.001411][ T4211] dvb-usb: error while querying for an remote control event. [ 795.025687][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.068855][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.242456][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.281481][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.292502][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.302510][T12945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.313110][T12945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.322482][T11276] m920x_read = error: -19 [ 795.328863][T13210] loop1: detected capacity change from 0 to 512 [ 795.330648][T11276] dvb-usb: error while querying for an remote control event. [ 795.339561][T12945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.363234][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 795.390377][T13210] EXT4-fs (loop1): Test dummy encryption mode enabled [ 795.397324][T13210] EXT4-fs (loop1): Test dummy encryption mode enabled [ 795.404176][T13210] EXT4-fs (loop1): quotafile must be on filesystem root [ 795.421715][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 795.433765][T12945] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.452510][T12945] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.475227][T12945] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.485410][T11276] m920x_read = error: -19 [ 795.489936][T11276] dvb-usb: error while querying for an remote control event. [ 795.512147][T12945] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.622209][ T4241] m920x_read = error: -19 [ 795.626798][ T4241] dvb-usb: error while querying for an remote control event. [ 795.724800][ T4241] Bluetooth: hci3: command 0x2016 tx timeout [ 795.770889][ T8266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.782175][ T4241] m920x_read = error: -19 [ 795.786655][ T4241] dvb-usb: error while querying for an remote control event. [ 795.807952][ T8266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.856776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 795.901638][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.940405][ T4241] m920x_read = error: -19 [ 795.962173][ T4241] dvb-usb: error while querying for an remote control event. [ 796.020342][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.042753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 796.094138][ T4211] m920x_read = error: -19 [ 796.098679][ T4211] dvb-usb: error while querying for an remote control event. [ 796.252956][ T4211] m920x_read = error: -19 [ 796.257338][ T4211] dvb-usb: error while querying for an remote control event. [ 796.447055][T11276] m920x_read = error: -19 [ 797.812058][T11276] dvb-usb: error while querying for an remote control event. [ 798.177133][ T4241] m920x_read = error: -19 [ 798.181553][ T4241] dvb-usb: error while querying for an remote control event. [ 798.211478][T13244] loop8: detected capacity change from 0 to 736 [ 798.332301][ T4211] m920x_read = error: -19 [ 798.338969][ T4211] dvb-usb: error while querying for an remote control event. [ 798.637279][ T4211] m920x_read = error: -19 [ 798.697422][ T4211] dvb-usb: error while querying for an remote control event. [ 798.816171][ T4241] m920x_read = error: -19 [ 798.820553][ T4241] dvb-usb: error while querying for an remote control event. [ 799.184032][ T4241] m920x_read = error: -19 [ 799.188416][ T4241] dvb-usb: error while querying for an remote control event. [ 799.204274][T13259] xt_hashlimit: max too large, truncated to 1048576 [ 799.520068][ T4241] m920x_read = error: -19 [ 799.902360][ T4241] dvb-usb: error while querying for an remote control event. [ 800.097014][ T4241] m920x_read = error: -19 [ 800.101395][ T4241] dvb-usb: error while querying for an remote control event. [ 800.341562][T13267] loop8: detected capacity change from 0 to 256 [ 800.376113][ T21] m920x_read = error: -19 [ 800.380524][ T21] dvb-usb: error while querying for an remote control event. [ 800.457384][T13267] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 800.566014][ T21] m920x_read = error: -19 [ 800.570426][ T21] dvb-usb: error while querying for an remote control event. [ 800.847097][ T4211] m920x_read = error: -19 [ 800.852800][ T4211] dvb-usb: error while querying for an remote control event. [ 801.107824][ T21] m920x_read = error: -19 [ 801.112399][ T21] dvb-usb: error while querying for an remote control event. [ 801.222921][ T21] m920x_read = error: -19 [ 801.227500][ T21] dvb-usb: error while querying for an remote control event. [ 801.850275][ T4211] m920x_read = error: -19 [ 801.878023][ T4211] dvb-usb: error while querying for an remote control event. [ 802.162734][ T4241] m920x_read = error: -19 [ 802.167129][ T4241] dvb-usb: error while querying for an remote control event. [ 802.249356][T13300] loop6: detected capacity change from 0 to 736 [ 802.302631][ T4211] m920x_read = error: -19 [ 802.307651][ T4211] dvb-usb: error while querying for an remote control event. [ 802.432187][ T4241] m920x_read = error: -19 [ 802.436838][ T4241] dvb-usb: error while querying for an remote control event. [ 802.583621][ T4241] m920x_read = error: -19 [ 802.614627][ T4241] dvb-usb: error while querying for an remote control event. [ 802.786955][ T4241] m920x_read = error: -19 [ 802.797322][ T4241] dvb-usb: error while querying for an remote control event. [ 803.444236][ T4241] m920x_read = error: -19 [ 803.448616][ T4241] dvb-usb: error while querying for an remote control event. [ 803.495546][T13320] loop6: detected capacity change from 0 to 512 [ 804.784119][T11276] m920x_read = error: -19 [ 804.788500][T11276] dvb-usb: error while querying for an remote control event. [ 804.828084][T13320] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.843384][T13320] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.887213][T13320] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 804.902195][ T4241] m920x_read = error: -19 [ 804.906570][ T4241] dvb-usb: error while querying for an remote control event. [ 804.933100][T13306] loop1: detected capacity change from 0 to 32768 [ 804.946344][T13320] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 804.967124][T13320] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.2434: Failed to acquire dquot type 0 [ 805.086151][ T4241] m920x_read = error: -19 [ 805.090872][ T4241] dvb-usb: error while querying for an remote control event. [ 805.158813][T13334] loop7: detected capacity change from 0 to 4096 [ 805.261002][T13306] XFS (loop1): Mounting V5 Filesystem [ 805.423807][ T4241] m920x_read = error: -19 [ 805.428601][ T4241] dvb-usb: error while querying for an remote control event. [ 805.572535][ T4241] m920x_read = error: -19 [ 805.681563][ T4241] dvb-usb: error while querying for an remote control event. [ 806.198037][T11276] m920x_read = error: -19 [ 806.249911][T11276] dvb-usb: error while querying for an remote control event. [ 806.255281][T13334] ntfs3: loop7: ino=21, "file1" fallocate(0x20) is not supported [ 806.664099][T13306] XFS (loop1): Ending clean mount [ 806.944973][ T4179] XFS (loop1): Unmounting Filesystem [ 807.023082][T11276] m920x_read = error: -19 [ 807.027563][T11276] dvb-usb: error while querying for an remote control event. [ 807.143917][T11276] m920x_read = error: -19 [ 807.148494][T11276] dvb-usb: error while querying for an remote control event. [ 807.304095][ T4211] m920x_read = error: -19 [ 807.308510][ T4211] dvb-usb: error while querying for an remote control event. [ 807.482417][ T4211] m920x_read = error: -19 [ 807.489150][ T4211] dvb-usb: error while querying for an remote control event. [ 807.612251][ T4211] m920x_read = error: -19 [ 807.616815][ T4211] dvb-usb: error while querying for an remote control event. [ 807.737498][ T4211] m920x_read = error: -19 [ 807.741897][ T4211] dvb-usb: error while querying for an remote control event. [ 807.893245][ T4211] m920x_read = error: -19 [ 808.154790][ T4211] dvb-usb: error while querying for an remote control event. [ 808.491170][T13384] loop8: detected capacity change from 0 to 736 [ 808.542343][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.548654][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.819141][ T21] m920x_read = error: -19 [ 808.832217][ T21] dvb-usb: error while querying for an remote control event. [ 809.756667][T13400] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2442'. [ 809.913819][ T4241] m920x_read = error: -19 [ 809.918207][ T4241] dvb-usb: error while querying for an remote control event. [ 810.404286][T11276] m920x_read = error: -19 [ 810.408660][T11276] dvb-usb: error while querying for an remote control event. [ 811.186113][ T4241] m920x_read = error: -19 [ 811.229899][ T4241] dvb-usb: error while querying for an remote control event. [ 811.415872][T13405] binder: 13404:13405 ioctl c0306201 20000680 returned -14 [ 811.593594][ T4241] m920x_read = error: -19 [ 811.598177][ T4241] dvb-usb: error while querying for an remote control event. [ 812.422829][ T4241] m920x_read = error: -19 [ 812.427217][ T4241] dvb-usb: error while querying for an remote control event. [ 812.585386][ T4211] m920x_read = error: -19 [ 812.589887][ T4211] dvb-usb: error while querying for an remote control event. [ 814.109442][ T4211] m920x_read = error: -19 [ 814.132192][ T4211] dvb-usb: error while querying for an remote control event. [ 814.418452][T13434] loop8: detected capacity change from 0 to 4096 [ 814.429732][ T4241] m920x_read = error: -19 [ 814.434174][ T4241] dvb-usb: error while querying for an remote control event. [ 814.548639][ T4241] m920x_read = error: -19 [ 814.568799][ T4241] dvb-usb: error while querying for an remote control event. [ 814.609829][T13434] NILFS (loop8): invalid segment: Checksum error in segment payload [ 814.690828][T13434] NILFS (loop8): trying rollback from an earlier position [ 814.788398][T13446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2460'. [ 814.803305][ T4211] m920x_read = error: -19 [ 814.807683][ T4211] dvb-usb: error while querying for an remote control event. [ 814.835198][T13434] NILFS (loop8): recovery complete [ 814.877229][T13449] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.943386][ T4241] m920x_read = error: -19 [ 814.947771][ T4241] dvb-usb: error while querying for an remote control event. [ 815.165257][ T4241] m920x_read = error: -19 [ 815.169643][ T4241] dvb-usb: error while querying for an remote control event. [ 815.181994][T13459] loop7: detected capacity change from 0 to 736 [ 815.286059][ T4241] m920x_read = error: -19 [ 815.290940][ T4241] dvb-usb: error while querying for an remote control event. [ 815.959938][ T4241] m920x_read = error: -19 [ 815.982529][ T4241] dvb-usb: error while querying for an remote control event. [ 816.126124][ T4211] m920x_read = error: -19 [ 816.699494][ T4211] dvb-usb: error while querying for an remote control event. [ 816.815846][ T4241] m920x_read = error: -19 [ 816.820257][ T4241] dvb-usb: error while querying for an remote control event. [ 816.992469][ T4241] m920x_read = error: -19 [ 816.996858][ T4241] dvb-usb: error while querying for an remote control event. [ 817.085931][ T4211] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 817.175768][T11276] m920x_read = error: -19 [ 817.190400][T11276] dvb-usb: error while querying for an remote control event. [ 817.366367][ T21] m920x_read = error: -19 [ 817.370790][ T21] dvb-usb: error while querying for an remote control event. [ 817.478604][ T4211] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.506176][ T4211] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 817.540447][ T4211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.613646][ T4211] usb 9-1: config 0 descriptor?? [ 817.619453][ T21] m920x_read = error: -19 [ 817.624067][ T21] dvb-usb: error while querying for an remote control event. [ 817.672246][ T4211] pwc: Askey VC010 type 2 USB webcam detected. [ 817.732331][ T21] m920x_read = error: -19 [ 817.736704][ T21] dvb-usb: error while querying for an remote control event. [ 817.914666][ T21] m920x_read = error: -19 [ 817.931893][ T21] dvb-usb: error while querying for an remote control event. [ 818.092436][ T4211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 818.133022][ T4211] pwc: recv_control_msg error -32 req 02 val 2700 [ 818.162994][T11276] m920x_read = error: -19 [ 818.167375][T11276] dvb-usb: error while querying for an remote control event. [ 818.182291][ T4211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 818.252440][ T4211] pwc: recv_control_msg error -32 req 04 val 1000 [ 818.292332][ T4211] pwc: recv_control_msg error -32 req 04 val 1300 [ 818.329583][T11276] m920x_read = error: -19 [ 818.334926][ T4211] pwc: recv_control_msg error -32 req 04 val 1400 [ 818.371381][T11276] dvb-usb: error while querying for an remote control event. [ 818.672785][ T4211] pwc: recv_control_msg error -32 req 02 val 2000 [ 818.712414][ T4211] pwc: recv_control_msg error -32 req 02 val 2100 [ 818.772587][ T4211] pwc: recv_control_msg error -32 req 04 val 1500 [ 818.781630][T11276] m920x_read = error: -19 [ 818.786537][T11276] dvb-usb: error while querying for an remote control event. [ 818.812349][ T4211] pwc: recv_control_msg error -32 req 02 val 2500 [ 818.936860][ T7752] Bluetooth: hci5: command 0x2016 tx timeout [ 818.947175][T11276] m920x_read = error: -19 [ 818.992202][T11276] dvb-usb: error while querying for an remote control event. [ 819.024152][T13499] loop7: detected capacity change from 0 to 32768 [ 819.051260][T13516] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2471'. [ 819.082344][ T4211] pwc: recv_control_msg error -71 req 02 val 2600 [ 819.112657][ T4211] pwc: recv_control_msg error -71 req 02 val 2900 [ 819.142297][T11276] m920x_read = error: -19 [ 819.146716][T11276] dvb-usb: error while querying for an remote control event. [ 819.155003][ T4211] pwc: recv_control_msg error -71 req 02 val 2800 [ 819.179144][T13499] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2469 (13499) [ 819.206465][ T4211] pwc: recv_control_msg error -71 req 04 val 1100 [ 819.236989][T13499] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 819.263538][ T4211] pwc: recv_control_msg error -71 req 04 val 1200 [ 819.269555][T13499] BTRFS info (device loop7): setting nodatacow, compression disabled [ 819.299818][ T4211] pwc: Registered as video103. [ 819.322613][T13499] BTRFS info (device loop7): force clearing of disk cache [ 819.329788][T13499] BTRFS info (device loop7): enabling ssd optimizations [ 819.351251][ T4211] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17 [ 819.382233][T13499] BTRFS info (device loop7): using spread ssd allocation scheme [ 819.389925][T13499] BTRFS info (device loop7): doing ref verification [ 819.422722][ T4211] usb 9-1: USB disconnect, device number 2 [ 819.465298][T11276] m920x_read = error: -19 [ 819.469703][T11276] dvb-usb: error while querying for an remote control event. [ 819.482543][T13499] BTRFS info (device loop7): disabling free space tree [ 819.489621][T13499] BTRFS info (device loop7): not using ssd optimizations [ 819.586808][T13499] BTRFS info (device loop7): not using spread ssd allocation scheme [ 819.641195][ T21] m920x_read = error: -19 [ 819.642430][T13499] BTRFS info (device loop7): has skinny extents [ 819.646243][ T21] dvb-usb: error while querying for an remote control event. [ 819.773852][T13535] loop8: detected capacity change from 0 to 64 [ 819.855842][ T21] m920x_read = error: -19 [ 819.860308][ T21] dvb-usb: error while querying for an remote control event. [ 819.982255][ T21] m920x_read = error: -19 [ 819.986715][ T21] dvb-usb: error while querying for an remote control event. [ 820.125224][T13499] BTRFS info (device loop7): clearing free space tree [ 820.185461][T13499] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 820.195232][T13499] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 820.226046][ T4241] m920x_read = error: -19 [ 820.230430][ T4241] dvb-usb: error while querying for an remote control event. [ 820.433248][ T26] audit: type=1804 audit(1733575440.833:184): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2469" name="/newroot/56/bus/file1" dev="loop7" ino=260 res=1 errno=0 [ 820.572705][ T4241] m920x_read = error: -19 [ 820.580836][ T4241] dvb-usb: error while querying for an remote control event. [ 820.693081][ T21] m920x_read = error: -19 [ 820.710349][ T21] dvb-usb: error while querying for an remote control event. [ 821.032379][ T21] m920x_read = error: -19 [ 821.084732][ T21] dvb-usb: error while querying for an remote control event. [ 821.446610][ T21] m920x_read = error: -19 [ 821.450988][ T21] dvb-usb: error while querying for an remote control event. [ 821.561932][T13566] loop8: detected capacity change from 0 to 128 [ 821.791689][ T21] m920x_read = error: -19 [ 821.796129][ T21] dvb-usb: error while querying for an remote control event. [ 823.125709][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 823.135736][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.173-syzkaller #0 [ 823.144009][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 823.154087][ T146] Workqueue: hci3 hci_rx_work [ 823.158809][ T146] Call Trace: [ 823.162107][ T146] [ 823.165082][ T146] dump_stack_lvl+0x1e3/0x2d0 [ 823.169800][ T146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 823.175453][ T146] ? panic+0x860/0x860 [ 823.179554][ T146] ? sysfs_create_dir_ns+0x282/0x390 [ 823.184873][ T146] sysfs_create_dir_ns+0x2c6/0x390 [ 823.190012][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 823.194713][ T146] ? do_raw_spin_unlock+0x137/0x8b0 [ 823.199947][ T146] kobject_add_internal+0x6e0/0xe00 [ 823.205183][ T146] kobject_add+0x14e/0x210 [ 823.209650][ T146] ? device_add+0x3c2/0xfd0 [ 823.214177][ T146] ? kobject_init+0x1d0/0x1d0 [ 823.218889][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 823.224218][ T146] ? get_device_parent+0x128/0x400 [ 823.229377][ T146] device_add+0x476/0xfd0 [ 823.233211][T13566] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 823.233743][ T146] hci_conn_add_sysfs+0xe4/0x1f0 [ 823.249190][ T146] le_conn_complete_evt+0xc15/0x1500 [ 823.254533][ T146] ? cs_le_create_conn+0x5f0/0x5f0 [ 823.259695][ T146] hci_le_meta_evt+0xd86/0x3f50 [ 823.264575][ T146] ? __lock_acquire+0x1ff0/0x1ff0 [ 823.269629][ T146] ? __mutex_lock_common+0x444/0x25a0 [ 823.275038][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 823.276056][ T4241] m920x_read = error: -19 [ 823.281120][ T146] ? __mutex_unlock_slowpath+0x218/0x750 [ 823.281146][ T146] ? hci_event_packet+0x3b4/0x1550 [ 823.295980][T13566] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 823.296325][ T146] ? release_firmware_map_entry+0x190/0x190 [ 823.333990][ T146] ? mutex_unlock+0x10/0x10 [ 823.338524][ T146] ? mark_lock+0x98/0x340 [ 823.342883][ T146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 823.348899][ T146] hci_event_packet+0xc41/0x1550 [ 823.353869][ T146] ? rcu_lock_release+0x20/0x20 [ 823.357977][ T4241] dvb-usb: error while querying for an remote control event. [ 823.358748][ T146] ? hci_send_to_monitor+0x21/0x4d0 [ 823.358779][ T146] ? hci_uuids_clear+0x60/0x190 [ 823.376176][ T146] ? kasan_check_range+0x4a/0x290 [ 823.381233][ T146] hci_rx_work+0x232/0x990 [ 823.385694][ T146] process_one_work+0x8a1/0x10c0 [ 823.390679][ T146] ? worker_detach_from_pool+0x260/0x260 [ 823.396361][ T146] ? _raw_spin_lock_irqsave+0x120/0x120 [ 823.401935][ T146] ? kthread_data+0x4e/0xc0 [ 823.406467][ T146] ? wq_worker_running+0x97/0x170 [ 823.411522][ T146] worker_thread+0xaca/0x1280 [ 823.416254][ T146] kthread+0x3f6/0x4f0 [ 823.420359][ T146] ? rcu_lock_release+0x20/0x20 [ 823.425241][ T146] ? kthread_blkcg+0xd0/0xd0 [ 823.429863][ T146] ret_from_fork+0x1f/0x30 [ 823.434340][ T146] [ 823.651004][ T4428] m920x_read = error: -19 [ 823.666050][ T4428] dvb-usb: error while querying for an remote control event. [ 823.697306][ T146] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 823.710670][ T146] Bluetooth: hci3: failed to register connection device [ 824.579673][ T4428] m920x_read = error: -19 [ 824.613371][ T4428] dvb-usb: error while querying for an remote control event. [ 824.697672][T13591] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2482'. [ 824.797929][ T4241] m920x_read = error: -19 [ 824.802617][ T4241] dvb-usb: error while querying for an remote control event. [ 824.914142][ T4241] m920x_read = error: -19 [ 824.919661][ T4241] dvb-usb: error while querying for an remote control event. [ 825.043381][ T21] m920x_read = error: -19 [ 825.047792][ T21] dvb-usb: error while querying for an remote control event. [ 825.172245][ T4428] m920x_read = error: -19 [ 825.176888][ T4428] dvb-usb: error while querying for an remote control event. [ 825.302266][ T4428] m920x_read = error: -19 [ 825.306815][ T4428] dvb-usb: error while querying for an remote control event. [ 825.422281][ T4428] m920x_read = error: -19 [ 825.426810][ T4428] dvb-usb: error while querying for an remote control event. [ 825.960648][ T4241] m920x_read = error: -19 [ 826.011724][ T4241] dvb-usb: error while querying for an remote control event. [ 826.146092][ T4428] Bluetooth: hci3: command 0x2016 tx timeout [ 826.271839][ T4241] m920x_read = error: -19 [ 826.276418][ T4241] dvb-usb: error while querying for an remote control event. [ 826.420082][ T4241] m920x_read = error: -19 [ 826.426625][ T4241] dvb-usb: error while querying for an remote control event. [ 827.223613][ T4241] m920x_read = error: -19 [ 827.228026][ T4241] dvb-usb: error while querying for an remote control event. [ 827.277844][T13615] loop8: detected capacity change from 0 to 4096 [ 828.191323][T13632] loop7: detected capacity change from 0 to 736 [ 828.253230][T13615] ntfs3: loop8: ino=21, "file1" fallocate(0x20) is not supported [ 828.304339][ T4241] m920x_read = error: -19 [ 828.308717][ T4241] dvb-usb: error while querying for an remote control event. [ 828.461060][ T4241] m920x_read = error: -19 [ 828.618207][ T4241] dvb-usb: error while querying for an remote control event. [ 828.752236][ T4241] m920x_read = error: -19 [ 828.756705][ T4241] dvb-usb: error while querying for an remote control event. [ 829.011739][T13641] loop8: detected capacity change from 0 to 128 [ 829.124144][ T8318] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 829.135336][ T8318] CPU: 1 PID: 8318 Comm: kworker/u5:1 Not tainted 5.15.173-syzkaller #0 [ 829.143693][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 829.153759][ T8318] Workqueue: hci5 hci_rx_work [ 829.158459][ T8318] Call Trace: [ 829.161742][ T8318] [ 829.164682][ T8318] dump_stack_lvl+0x1e3/0x2d0 [ 829.169380][ T8318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 829.175035][ T8318] ? panic+0x860/0x860 [ 829.179126][ T8318] ? sysfs_create_dir_ns+0x282/0x390 [ 829.184431][ T8318] sysfs_create_dir_ns+0x2c6/0x390 [ 829.189559][ T8318] ? sysfs_warn_dup+0xa0/0xa0 [ 829.194259][ T8318] ? do_raw_spin_unlock+0x137/0x8b0 [ 829.199480][ T8318] kobject_add_internal+0x6e0/0xe00 [ 829.204701][ T8318] kobject_add+0x14e/0x210 [ 829.209135][ T8318] ? device_add+0x3c2/0xfd0 [ 829.213651][ T8318] ? kobject_init+0x1d0/0x1d0 [ 829.218343][ T8318] ? __raw_spin_lock_init+0x41/0x100 [ 829.223643][ T8318] ? get_device_parent+0x128/0x400 [ 829.228770][ T8318] device_add+0x476/0xfd0 [ 829.233123][ T8318] hci_conn_add_sysfs+0xe4/0x1f0 [ 829.238081][ T8318] le_conn_complete_evt+0xc15/0x1500 [ 829.243397][ T8318] ? cs_le_create_conn+0x5f0/0x5f0 [ 829.248617][ T8318] ? mark_lock+0x98/0x340 [ 829.252964][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 829.258966][ T8318] hci_le_meta_evt+0xd86/0x3f50 [ 829.263835][ T8318] ? mark_lock+0x98/0x340 [ 829.268181][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 829.274188][ T8318] ? print_irqtrace_events+0x210/0x210 [ 829.279664][ T8318] ? rcu_is_watching+0x11/0xa0 [ 829.284436][ T8318] ? hci_remote_host_features_evt+0x280/0x280 [ 829.290513][ T8318] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 829.296163][ T8318] ? lockdep_hardirqs_on+0x94/0x130 [ 829.301385][ T8318] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 829.307036][ T8318] ? hci_event_packet+0x44a/0x1550 [ 829.312173][ T8318] ? __sanitizer_cov_trace_switch+0x5d/0xe0 [ 829.318138][ T8318] hci_event_packet+0xc41/0x1550 [ 829.323105][ T8318] ? rcu_lock_release+0x20/0x20 [ 829.327983][ T8318] ? hci_send_to_monitor+0x99/0x4d0 [ 829.333210][ T8318] hci_rx_work+0x232/0x990 [ 829.337656][ T8318] process_one_work+0x8a1/0x10c0 [ 829.342622][ T8318] ? worker_detach_from_pool+0x260/0x260 [ 829.348269][ T8318] ? _raw_spin_lock_irqsave+0x120/0x120 [ 829.353828][ T8318] ? kthread_data+0x4e/0xc0 [ 829.358342][ T8318] ? wq_worker_running+0x97/0x170 [ 829.363379][ T8318] worker_thread+0xaca/0x1280 [ 829.368070][ T8318] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 829.373997][ T8318] kthread+0x3f6/0x4f0 [ 829.378090][ T8318] ? rcu_lock_release+0x20/0x20 [ 829.382952][ T8318] ? kthread_blkcg+0xd0/0xd0 [ 829.387555][ T8318] ret_from_fork+0x1f/0x30 [ 829.392002][ T8318] [ 829.469273][ T4428] m920x_read = error: -19 [ 829.478067][ T8318] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 829.494399][ T8318] Bluetooth: hci5: failed to register connection device [ 829.521239][ T4428] dvb-usb: error while querying for an remote control event. [ 829.604105][T13641] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 829.640198][T13647] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2493'. [ 829.749637][T13641] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 830.177683][ T4428] m920x_read = error: -19 [ 830.182062][ T4428] dvb-usb: error while querying for an remote control event. [ 830.553732][ T4428] m920x_read = error: -19 [ 830.570955][ T4428] dvb-usb: error while querying for an remote control event. [ 830.749543][ T4428] m920x_read = error: -19 [ 830.762351][ T4428] dvb-usb: error while querying for an remote control event. [ 830.882232][ T4241] m920x_read = error: -19 [ 830.886689][ T4241] dvb-usb: error while querying for an remote control event. [ 831.043250][ T4241] m920x_read = error: -19 [ 831.050498][ T4241] dvb-usb: error while querying for an remote control event. [ 831.099324][ T4211] Bluetooth: hci5: command 0x0406 tx timeout [ 831.302757][ T4241] m920x_read = error: -19 [ 831.307140][ T4241] dvb-usb: error while querying for an remote control event. [ 831.330937][T13654] loop6: detected capacity change from 0 to 32768 [ 831.453974][ T4241] m920x_read = error: -19 [ 831.458505][ T4241] dvb-usb: error while querying for an remote control event. [ 831.634625][ T4241] m920x_read = error: -19 [ 831.638994][ T4241] dvb-usb: error while querying for an remote control event. [ 831.901556][T13654] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2496 (13654) [ 831.907915][ T4241] m920x_read = error: -19 [ 831.985823][ T4241] dvb-usb: error while querying for an remote control event. [ 832.112244][ T4241] m920x_read = error: -19 [ 832.116814][ T4241] dvb-usb: error while querying for an remote control event. [ 832.174139][T13654] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 832.962327][T13654] BTRFS info (device loop6): allowing degraded mounts [ 832.971860][T13686] loop8: detected capacity change from 0 to 2048 [ 832.993706][T13654] BTRFS info (device loop6): ignoring data csums [ 833.005450][ T4428] m920x_read = error: -19 [ 833.009820][ T4428] dvb-usb: error while querying for an remote control event. [ 833.033547][T13654] BTRFS info (device loop6): turning on sync discard [ 833.040249][T13654] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 833.232522][T13654] BTRFS info (device loop6): trying to use backup root at mount time [ 833.445669][ T4241] Bluetooth: hci5: command 0x2016 tx timeout [ 833.512928][T13654] BTRFS info (device loop6): allowing degraded mounts [ 833.532202][T13654] BTRFS info (device loop6): metadata ratio 36085 [ 833.538703][T13654] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 833.549350][ T4428] m920x_read = error: -19 [ 833.553980][ T4428] dvb-usb: error while querying for an remote control event. [ 833.613219][T13686] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,sysvgroups,nolazytime,nobarrier,nodiscard,journal_dev=0x0000000000000000,. Quota mode: writeback. [ 833.615040][T13654] BTRFS info (device loop6): force lzo compression, level 0 [ 833.663692][T13686] EXT4-fs error (device loop8): ext4_search_dir:1549: inode #12: block 9: comm syz.8.2501: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 833.692569][T13654] BTRFS info (device loop6): turning off barriers [ 833.704574][ T4428] m920x_read = error: -19 [ 833.708943][ T4428] dvb-usb: error while querying for an remote control event. [ 833.716452][T13654] BTRFS info (device loop6): enabling ssd optimizations [ 833.724820][T13654] BTRFS info (device loop6): using spread ssd allocation scheme [ 833.733106][T13654] BTRFS info (device loop6): using free space tree [ 833.739677][T13654] BTRFS info (device loop6): has skinny extents [ 833.760462][T13686] EXT4-fs (loop8): Remounting filesystem read-only [ 833.840868][T13715] EXT4-fs error (device loop8): ext4_search_dir:1549: inode #12: block 9: comm syz.8.2501: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 833.939806][T13715] EXT4-fs (loop8): Remounting filesystem read-only [ 834.127604][T13740] loop7: detected capacity change from 0 to 128 [ 834.192216][ T4428] m920x_read = error: -19 [ 834.196588][ T4428] dvb-usb: error while querying for an remote control event. [ 834.394928][T13738] m920x_read = error: -19 [ 834.399303][T13738] dvb-usb: error while querying for an remote control event. [ 834.433150][T13654] BTRFS error (device loop6): open_ctree failed [ 834.522899][T13754] m920x_read = error: -19 [ 834.532185][T13754] dvb-usb: error while querying for an remote control event. [ 836.269751][T13738] m920x_read = error: -19 [ 836.274501][T13738] dvb-usb: error while querying for an remote control event. [ 836.306824][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2506'. [ 836.432204][T13738] m920x_read = error: -19 [ 836.436582][T13738] dvb-usb: error while querying for an remote control event. [ 836.619091][T13738] m920x_read = error: -19 [ 836.627761][T13738] dvb-usb: error while querying for an remote control event. [ 836.781359][T13781] loop6: detected capacity change from 0 to 256 [ 836.794444][T13753] m920x_read = error: -19 [ 836.798914][T13753] dvb-usb: error while querying for an remote control event. [ 837.030349][T13786] loop7: detected capacity change from 0 to 24 [ 838.604513][T13754] m920x_read = error: -19 [ 838.787077][T13754] dvb-usb: error while querying for an remote control event. [ 838.795348][T13786] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 838.807650][T13786] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 838.987989][T13754] m920x_read = error: -19 [ 839.042050][T13754] dvb-usb: error while querying for an remote control event. [ 839.077658][T13781] exFAT-fs (loop6): failed to load upcase table (idx : 0x000105cd, chksum : 0x20d18879, utbl_chksum : 0xe619d30d) [ 839.215795][T13754] m920x_read = error: -19 [ 839.220489][T13754] dvb-usb: error while querying for an remote control event. [ 839.443096][T13754] m920x_read = error: -19 [ 839.450631][T13754] dvb-usb: error while querying for an remote control event. [ 839.850379][T13743] m920x_read = error: -19 [ 839.854960][T13743] dvb-usb: error while querying for an remote control event. [ 840.101037][ T4241] m920x_read = error: -19 [ 840.121660][ T4241] dvb-usb: error while querying for an remote control event. [ 840.989581][ T4241] m920x_read = error: -19 [ 840.994028][ T4241] dvb-usb: error while querying for an remote control event. [ 841.102208][T13754] m920x_read = error: -19 [ 841.106582][T13754] dvb-usb: error while querying for an remote control event. [ 841.151041][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2524'. [ 841.374214][T13754] m920x_read = error: -19 [ 841.402223][T13754] dvb-usb: error while querying for an remote control event. [ 841.459165][ T8318] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 841.468734][ T8318] CPU: 1 PID: 8318 Comm: kworker/u5:1 Not tainted 5.15.173-syzkaller #0 [ 841.477079][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 841.487147][ T8318] Workqueue: hci3 hci_rx_work [ 841.491850][ T8318] Call Trace: [ 841.495136][ T8318] [ 841.498079][ T8318] dump_stack_lvl+0x1e3/0x2d0 [ 841.502778][ T8318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 841.508422][ T8318] ? panic+0x860/0x860 [ 841.512528][ T8318] ? sysfs_create_dir_ns+0x282/0x390 [ 841.517824][ T8318] sysfs_create_dir_ns+0x2c6/0x390 [ 841.522942][ T8318] ? sysfs_warn_dup+0xa0/0xa0 [ 841.527621][ T8318] ? do_raw_spin_unlock+0x137/0x8b0 [ 841.532825][ T8318] kobject_add_internal+0x6e0/0xe00 [ 841.538033][ T8318] kobject_add+0x14e/0x210 [ 841.542460][ T8318] ? device_add+0x3c2/0xfd0 [ 841.546964][ T8318] ? kobject_init+0x1d0/0x1d0 [ 841.551642][ T8318] ? __raw_spin_lock_init+0x41/0x100 [ 841.556931][ T8318] ? get_device_parent+0x128/0x400 [ 841.562040][ T8318] device_add+0x476/0xfd0 [ 841.566434][ T8318] hci_conn_add_sysfs+0xe4/0x1f0 [ 841.571373][ T8318] le_conn_complete_evt+0xc15/0x1500 [ 841.576661][ T8318] ? cs_le_create_conn+0x5f0/0x5f0 [ 841.581780][ T8318] hci_le_meta_evt+0x28c/0x3f50 [ 841.586635][ T8318] ? __lock_acquire+0x1ff0/0x1ff0 [ 841.591660][ T8318] ? __mutex_lock_common+0x444/0x25a0 [ 841.597178][ T8318] ? hci_remote_host_features_evt+0x280/0x280 [ 841.603345][ T8318] ? __mutex_unlock_slowpath+0x218/0x750 [ 841.608979][ T8318] ? hci_event_packet+0x3b4/0x1550 [ 841.614091][ T8318] ? mutex_unlock+0x10/0x10 [ 841.618598][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 841.624577][ T8318] ? print_irqtrace_events+0x210/0x210 [ 841.630032][ T8318] hci_event_packet+0xc41/0x1550 [ 841.634974][ T8318] ? rcu_lock_release+0x20/0x20 [ 841.639827][ T8318] ? hci_send_to_monitor+0x99/0x4d0 [ 841.645020][ T8318] hci_rx_work+0x232/0x990 [ 841.649444][ T8318] process_one_work+0x8a1/0x10c0 [ 841.654391][ T8318] ? worker_detach_from_pool+0x260/0x260 [ 841.660025][ T8318] ? _raw_spin_lock_irqsave+0x120/0x120 [ 841.665568][ T8318] ? kthread_data+0x4e/0xc0 [ 841.670075][ T8318] ? wq_worker_running+0x97/0x170 [ 841.675103][ T8318] worker_thread+0xaca/0x1280 [ 841.679782][ T8318] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 841.685684][ T8318] kthread+0x3f6/0x4f0 [ 841.689764][ T8318] ? rcu_lock_release+0x20/0x20 [ 841.694632][ T8318] ? kthread_blkcg+0xd0/0xd0 [ 841.699243][ T8318] ret_from_fork+0x1f/0x30 [ 841.703692][ T8318] [ 841.713600][ T8318] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 841.726795][ T8318] Bluetooth: hci3: failed to register connection device [ 841.738938][T13743] m920x_read = error: -19 [ 841.743674][T13743] dvb-usb: error while querying for an remote control event. [ 841.852353][ T4241] m920x_read = error: -19 [ 841.857155][ T4241] dvb-usb: error while querying for an remote control event. [ 841.972291][T13743] m920x_read = error: -19 [ 841.976754][T13743] dvb-usb: error while querying for an remote control event. [ 843.022242][T13743] m920x_read = error: -19 [ 843.026717][T13743] dvb-usb: error while querying for an remote control event. [ 843.274264][T13743] m920x_read = error: -19 [ 843.314520][T13743] dvb-usb: error while querying for an remote control event. [ 843.557591][T13743] m920x_read = error: -19 [ 843.562521][T13743] dvb-usb: error while querying for an remote control event. [ 844.076586][T13743] Bluetooth: hci3: command 0x2016 tx timeout [ 844.083912][T13743] m920x_read = error: -19 [ 844.088273][T13743] dvb-usb: error while querying for an remote control event. [ 844.203989][ T4241] m920x_read = error: -19 [ 844.208386][ T4241] dvb-usb: error while querying for an remote control event. [ 844.353552][ T4241] m920x_read = error: -19 [ 844.357962][ T4241] dvb-usb: error while querying for an remote control event. [ 844.388351][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'. [ 844.512193][ T4241] m920x_read = error: -19 [ 844.516637][ T4241] dvb-usb: error while querying for an remote control event. [ 844.538264][ T4213] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 844.658047][ T4241] m920x_read = error: -19 [ 844.675803][ T4241] dvb-usb: error while querying for an remote control event. [ 845.072207][ T4213] usb 9-1: Using ep0 maxpacket: 16 [ 845.202372][ T4213] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 845.231818][ T4213] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 845.292349][ T4213] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 845.326891][ T4241] m920x_read = error: -19 [ 845.331266][ T4241] dvb-usb: error while querying for an remote control event. [ 845.344549][ T4213] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 845.403023][ T4213] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 845.427165][ T4213] usb 9-1: config 1 interface 0 has no altsetting 0 [ 845.444879][T13753] m920x_read = error: -19 [ 845.449352][T13753] dvb-usb: error while querying for an remote control event. [ 845.455336][ T4213] usb 9-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 845.487115][ T4213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.582274][T13753] m920x_read = error: -19 [ 845.607002][T13753] dvb-usb: error while querying for an remote control event. [ 845.698218][T13880] loop7: detected capacity change from 0 to 32768 [ 845.733559][ T4213] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 846.254240][ T4213] ums-sddr09: probe of 9-1:1.0 failed with error -22 [ 846.465058][ T4213] usb 9-1: USB disconnect, device number 3 [ 846.531971][ T4241] m920x_read = error: -19 [ 846.536402][ T4241] dvb-usb: error while querying for an remote control event. [ 846.610217][T13880] XFS (loop7): Mounting V5 Filesystem [ 846.655195][ T4241] m920x_read = error: -19 [ 846.674704][ T4241] dvb-usb: error while querying for an remote control event. [ 846.842293][ T4241] m920x_read = error: -19 [ 846.846674][ T4241] dvb-usb: error while querying for an remote control event. [ 846.857839][T13880] XFS (loop7): Ending clean mount [ 846.962177][T13753] m920x_read = error: -19 [ 846.966553][T13753] dvb-usb: error while querying for an remote control event. [ 847.124578][T13753] m920x_read = error: -19 [ 847.128937][T13753] dvb-usb: error while querying for an remote control event. [ 847.169770][ T4213] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 847.200220][T11616] XFS (loop7): Unmounting Filesystem [ 847.226761][ T4213] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 847.249430][T13957] ptrace attach of ""[13958] was attempted by "./syz-executor exec"[13957] [ 847.262201][T13753] m920x_read = error: -19 [ 847.266619][T13753] dvb-usb: error while querying for an remote control event. [ 847.293682][ T4213] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 847.402357][T13753] m920x_read = error: -19 [ 847.420075][T13753] dvb-usb: error while querying for an remote control event. [ 848.088884][T13753] m920x_read = error: -19 [ 848.094827][T13753] dvb-usb: error while querying for an remote control event. [ 848.264181][T13738] m920x_read = error: -19 [ 848.268555][T13738] dvb-usb: error while querying for an remote control event. [ 848.423558][T13753] m920x_read = error: -19 [ 848.427941][T13753] dvb-usb: error while querying for an remote control event. [ 848.506002][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2550'. [ 848.562187][T13753] m920x_read = error: -19 [ 848.566561][T13753] dvb-usb: error while querying for an remote control event. [ 848.759566][T13753] m920x_read = error: -19 [ 848.768650][T13753] dvb-usb: error while querying for an remote control event. [ 848.947605][ T4213] Bluetooth: hci2: command 0x0411 tx timeout [ 849.847535][T14010] loop7: detected capacity change from 0 to 256 [ 849.857750][T14010] exfat: Unknown parameter 'keep_last_dots' [ 849.945370][T13738] m920x_read = error: -19 [ 849.949781][T13738] dvb-usb: error while querying for an remote control event. [ 850.102958][T13743] m920x_read = error: -19 [ 850.111032][T13743] dvb-usb: error while querying for an remote control event. [ 850.341119][T14025] loop1: detected capacity change from 0 to 128 [ 850.479112][T13743] m920x_read = error: -19 [ 850.483855][T13743] dvb-usb: error while querying for an remote control event. [ 851.125946][T13743] m920x_read = error: -19 [ 851.130413][T13743] dvb-usb: error while querying for an remote control event. [ 851.239276][T14025] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 851.242274][ T4241] m920x_read = error: -19 [ 851.254874][ T4241] dvb-usb: error while querying for an remote control event. [ 851.257048][T14025] ext4 filesystem being mounted at /496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 851.372291][ T4241] m920x_read = error: -19 [ 851.376867][ T4241] dvb-usb: error while querying for an remote control event. [ 851.512331][ T4241] m920x_read = error: -19 [ 851.516937][ T4241] dvb-usb: error while querying for an remote control event. [ 851.862164][ T4241] m920x_read = error: -19 [ 851.866749][ T4241] dvb-usb: error while querying for an remote control event. [ 852.002286][ T4241] m920x_read = error: -19 [ 852.006789][ T4241] dvb-usb: error while querying for an remote control event. [ 852.153411][ T4241] m920x_read = error: -19 [ 852.157895][ T4241] dvb-usb: error while querying for an remote control event. [ 852.337516][T13738] m920x_read = error: -19 [ 852.349869][T13738] dvb-usb: error while querying for an remote control event. [ 852.366672][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2571'. [ 852.462184][T13738] m920x_read = error: -19 [ 852.471850][T13738] dvb-usb: error while querying for an remote control event. [ 852.602578][T13753] m920x_read = error: -19 [ 852.607138][T13753] dvb-usb: error while querying for an remote control event. [ 852.642268][T13738] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 852.753203][T13753] m920x_read = error: -19 [ 852.761145][T13753] dvb-usb: error while querying for an remote control event. [ 853.749749][T14063] loop6: detected capacity change from 0 to 32768 [ 853.753374][ T4241] m920x_read = error: -19 [ 853.761647][ T4241] dvb-usb: error while querying for an remote control event. [ 853.792480][T13738] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 853.804447][T14063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2572 (14063) [ 853.867836][T14063] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 853.876804][T14063] BTRFS info (device loop6): unrecognized rescue option 'ignoremetacsums' [ 853.882794][T13738] usb 2-1: config index 0 descriptor too short (expected 65397, got 72) [ 853.885562][T14063] BTRFS error (device loop6): unrecognized rescue value ignoremetacsums [ 853.912318][ T4241] m920x_read = error: -19 [ 853.916760][ T4241] dvb-usb: error while querying for an remote control event. [ 853.944123][T14063] BTRFS error (device loop6): open_ctree failed [ 854.082192][T13743] m920x_read = error: -19 [ 854.086574][T13743] dvb-usb: error while querying for an remote control event. [ 854.094181][T13738] usb 2-1: config index 1 descriptor too short (expected 65397, got 72) [ 854.251441][T13743] m920x_read = error: -19 [ 854.267924][T13743] dvb-usb: error while querying for an remote control event. [ 854.282424][T13738] usb 2-1: config index 2 descriptor too short (expected 65397, got 72) [ 854.362404][T13738] usb 2-1: config index 3 descriptor too short (expected 65397, got 72) [ 854.382499][T13743] m920x_read = error: -19 [ 854.386871][T13743] dvb-usb: error while querying for an remote control event. [ 854.453385][T13738] usb 2-1: config index 4 descriptor too short (expected 65397, got 72) [ 854.502351][T13743] m920x_read = error: -19 [ 854.506725][T13743] dvb-usb: error while querying for an remote control event. [ 854.704196][T13738] usb 2-1: config index 5 descriptor too short (expected 65397, got 72) [ 854.718164][T13743] m920x_read = error: -19 [ 854.722630][T13743] dvb-usb: error while querying for an remote control event. [ 856.346217][T13743] m920x_read = error: -19 [ 856.350589][T13743] dvb-usb: error while querying for an remote control event. [ 856.722226][T13738] usb 2-1: unable to read config index 6 descriptor/all [ 856.729531][T13738] usb 2-1: can't read configurations, error -71 [ 856.962984][T13753] m920x_read = error: -19 [ 856.967455][T13753] dvb-usb: error while querying for an remote control event. [ 857.054679][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 857.255475][T13753] m920x_read = error: -19 [ 857.259857][T13753] dvb-usb: error while querying for an remote control event. [ 857.397965][T13753] m920x_read = error: -19 [ 857.402627][T13753] dvb-usb: error while querying for an remote control event. [ 857.512312][T13753] m920x_read = error: -19 [ 857.519031][T13753] dvb-usb: error while querying for an remote control event. [ 857.653310][T13753] m920x_read = error: -19 [ 857.658611][T13753] dvb-usb: error while querying for an remote control event. [ 857.721857][T14102] loop8: detected capacity change from 0 to 128 [ 857.772240][T13738] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 857.814802][T13753] m920x_read = error: -19 [ 857.819407][T13753] dvb-usb: error while querying for an remote control event. [ 857.853173][T14102] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 857.952855][T13753] m920x_read = error: -19 [ 857.957233][T13753] dvb-usb: error while querying for an remote control event. [ 857.979988][T14102] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.012428][T13738] usb 2-1: Using ep0 maxpacket: 32 [ 858.112572][T13753] m920x_read = error: -19 [ 858.116951][T13753] dvb-usb: error while querying for an remote control event. [ 858.141296][ T8259] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.156916][T13738] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 858.168774][T13738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.199764][T13738] usb 2-1: config 0 has no interface number 0 [ 858.220101][T13738] usb 2-1: config 0 interface 19 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 858.295593][T13738] usb 2-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x91, skipping [ 858.350025][T14109] loop8: detected capacity change from 0 to 64 [ 858.360271][T14107] loop6: detected capacity change from 0 to 256 [ 858.367717][T13738] usb 2-1: config 0 interface 19 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 858.406204][T13753] m920x_read = error: -19 [ 858.410572][T13753] dvb-usb: error while querying for an remote control event. [ 858.532703][T13753] m920x_read = error: -19 [ 858.537083][T13753] dvb-usb: error while querying for an remote control event. [ 858.543856][T14107] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 858.562561][T13738] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 858.578693][T14111] loop8: detected capacity change from 0 to 736 [ 858.582026][T13738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.621960][T13738] usb 2-1: Product: syz [ 858.648233][T13738] usb 2-1: Manufacturer: syz [ 858.653227][T13738] usb 2-1: SerialNumber: syz [ 858.677579][T13738] usb 2-1: config 0 descriptor?? [ 858.689554][T13754] m920x_read = error: -19 [ 858.694650][T13754] dvb-usb: error while querying for an remote control event. [ 858.886805][T13753] m920x_read = error: -19 [ 858.891213][T13753] dvb-usb: error while querying for an remote control event. [ 859.003046][T13753] m920x_read = error: -19 [ 859.007494][T13753] dvb-usb: error while querying for an remote control event. [ 859.238522][T13738] usb 2-1: USB disconnect, device number 15 [ 859.281468][T13743] m920x_read = error: -19 [ 859.298268][T13743] dvb-usb: error while querying for an remote control event. [ 859.459248][T13743] m920x_read = error: -19 [ 859.468433][T13743] dvb-usb: error while querying for an remote control event. [ 859.608354][T13738] m920x_read = error: -19 [ 859.613348][T13738] dvb-usb: error while querying for an remote control event. [ 859.722383][T13738] m920x_read = error: -19 [ 859.726763][T13738] dvb-usb: error while querying for an remote control event. [ 859.902786][T13738] m920x_read = error: -19 [ 859.908001][T13738] dvb-usb: error while querying for an remote control event. [ 859.989936][T14130] loop8: detected capacity change from 0 to 256 [ 860.713220][T14130] FAT-fs (loop8): Unrecognized mount option "iochar{et=utf8" or missing value [ 860.734416][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 860.747883][T14127] ./file0: Can't open blockdev [ 860.772293][T13738] m920x_read = error: -19 [ 860.776754][T13738] dvb-usb: error while querying for an remote control event. [ 860.931378][T13738] m920x_read = error: -19 [ 860.978309][T13738] dvb-usb: error while querying for an remote control event. [ 861.316811][T14139] loop1: detected capacity change from 0 to 1024 [ 862.298018][T13738] m920x_read = error: -19 [ 862.302516][T13738] dvb-usb: error while querying for an remote control event. [ 862.614538][T13743] m920x_read = error: -19 [ 862.618934][T13743] dvb-usb: error while querying for an remote control event. [ 862.879978][T13743] m920x_read = error: -19 [ 862.884504][T13743] dvb-usb: error while querying for an remote control event. [ 863.341982][T13743] m920x_read = error: -19 [ 863.347494][T13743] dvb-usb: error while querying for an remote control event. [ 863.446755][T14152] loop6: detected capacity change from 0 to 128 [ 863.462290][T13743] m920x_read = error: -19 [ 863.466673][T13743] dvb-usb: error while querying for an remote control event. [ 863.501678][T14155] loop1: detected capacity change from 0 to 736 [ 863.602312][T13743] m920x_read = error: -19 [ 863.606714][T13743] dvb-usb: error while querying for an remote control event. [ 863.773039][T14152] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 864.017183][T14152] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 864.226976][T14169] binder: 14160:14169 ioctl c0306201 20000680 returned -14 [ 864.322938][T13743] m920x_read = error: -19 [ 864.327327][T13743] dvb-usb: error while querying for an remote control event. [ 865.556047][T13753] m920x_read = error: -19 [ 865.560456][T13753] dvb-usb: error while querying for an remote control event. [ 865.692287][T13753] m920x_read = error: -19 [ 865.706812][T13753] dvb-usb: error while querying for an remote control event. [ 865.861500][T13753] m920x_read = error: -19 [ 866.588893][T13753] dvb-usb: error while querying for an remote control event. [ 866.799331][T13743] m920x_read = error: -19 [ 866.803773][T13743] dvb-usb: error while querying for an remote control event. [ 866.927141][T14192] loop8: detected capacity change from 0 to 24 [ 866.936092][T13743] m920x_read = error: -19 [ 866.940530][T13743] dvb-usb: error while querying for an remote control event. [ 867.065358][T13743] m920x_read = error: -19 [ 867.069809][T13743] dvb-usb: error while querying for an remote control event. [ 867.105393][T14192] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 867.666968][T14192] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 868.434691][T13753] m920x_read = error: -19 [ 868.439071][T13753] dvb-usb: error while querying for an remote control event. [ 868.517563][T14204] loop6: detected capacity change from 0 to 2048 [ 868.843436][T14203] loop1: detected capacity change from 0 to 736 [ 868.861312][T13738] m920x_read = error: -19 [ 868.866425][T13738] dvb-usb: error while querying for an remote control event. [ 869.039371][T14204] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 869.099422][T14204] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.366545][ T4241] m920x_read = error: -19 [ 869.443509][ T8318] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 869.453808][ T8318] CPU: 0 PID: 8318 Comm: kworker/u5:1 Not tainted 5.15.173-syzkaller #0 [ 869.462216][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 869.472285][ T8318] Workqueue: hci4 hci_rx_work [ 869.476996][ T8318] Call Trace: [ 869.480367][ T8318] [ 869.483317][ T8318] dump_stack_lvl+0x1e3/0x2d0 [ 869.488013][ T8318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 869.493677][ T8318] ? panic+0x860/0x860 [ 869.498017][ T8318] ? sysfs_create_dir_ns+0x282/0x390 [ 869.503351][ T8318] sysfs_create_dir_ns+0x2c6/0x390 [ 869.508484][ T8318] ? sysfs_warn_dup+0xa0/0xa0 [ 869.513194][ T8318] kobject_add_internal+0x6e0/0xe00 [ 869.518417][ T8318] kobject_add+0x14e/0x210 [ 869.522853][ T8318] ? device_add+0x3c2/0xfd0 [ 869.527384][ T8318] ? kobject_init+0x1d0/0x1d0 [ 869.532070][ T8318] ? __raw_spin_lock_init+0x41/0x100 [ 869.537369][ T8318] ? get_device_parent+0x128/0x400 [ 869.542687][ T8318] device_add+0x476/0xfd0 [ 869.547040][ T8318] hci_conn_add_sysfs+0xe4/0x1f0 [ 869.551993][ T8318] le_conn_complete_evt+0xc15/0x1500 [ 869.557305][ T8318] ? __schedule+0x12cc/0x45b0 [ 869.562111][ T8318] ? cs_le_create_conn+0x5f0/0x5f0 [ 869.567282][ T8318] ? mark_lock+0x98/0x340 [ 869.571635][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 869.577631][ T8318] hci_le_meta_evt+0xd86/0x3f50 [ 869.582505][ T8318] ? mark_lock+0x98/0x340 [ 869.586943][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 869.592936][ T8318] ? print_irqtrace_events+0x210/0x210 [ 869.598406][ T8318] ? hci_remote_host_features_evt+0x280/0x280 [ 869.604490][ T8318] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 869.610138][ T8318] ? lockdep_hardirqs_on+0x94/0x130 [ 869.615345][ T8318] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 869.620995][ T8318] ? hci_event_packet+0x44a/0x1550 [ 869.626111][ T8318] ? hci_event_packet+0x6af/0x1550 [ 869.631246][ T8318] hci_event_packet+0xc41/0x1550 [ 869.636204][ T8318] ? rcu_lock_release+0x20/0x20 [ 869.641090][ T8318] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 869.646742][ T8318] ? hci_rx_work+0x201/0x990 [ 869.651343][ T8318] ? hci_rx_work+0x227/0x990 [ 869.655953][ T8318] hci_rx_work+0x232/0x990 [ 869.660393][ T8318] process_one_work+0x8a1/0x10c0 [ 869.665360][ T8318] ? worker_detach_from_pool+0x260/0x260 [ 869.671009][ T8318] ? _raw_spin_lock_irqsave+0x120/0x120 [ 869.676567][ T8318] ? kthread_data+0x4e/0xc0 [ 869.681077][ T8318] ? wq_worker_running+0x97/0x170 [ 869.686120][ T8318] worker_thread+0xaca/0x1280 [ 869.690814][ T8318] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.696736][ T8318] kthread+0x3f6/0x4f0 [ 869.700807][ T8318] ? rcu_lock_release+0x20/0x20 [ 869.705669][ T8318] ? kthread_blkcg+0xd0/0xd0 [ 869.710270][ T8318] ret_from_fork+0x1f/0x30 [ 869.714711][ T8318] [ 869.780680][ T8318] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 869.797151][ T8318] Bluetooth: hci4: failed to register connection device [ 869.899229][ T4241] dvb-usb: error while querying for an remote control event. [ 869.926717][T14221] program syz.8.2623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.937284][T14222] fs-verity: sha512 using implementation "sha512-avx2" [ 869.964728][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.025950][ T4241] m920x_read = error: -19 [ 870.030373][ T4241] dvb-usb: error while querying for an remote control event. [ 870.038525][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.053760][T14223] binder: 14217:14223 ioctl c0306201 20000680 returned -14 [ 870.068975][T14222] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28 [ 870.254246][ T4241] m920x_read = error: -19 [ 870.259797][ T4241] dvb-usb: error while querying for an remote control event. [ 870.457746][ T4241] m920x_read = error: -19 [ 870.781034][ T4241] dvb-usb: error while querying for an remote control event. [ 871.297277][T14227] loop1: detected capacity change from 0 to 4096 [ 871.501176][T13753] m920x_read = error: -19 [ 871.509062][T14243] loop7: detected capacity change from 0 to 128 [ 871.515544][T13753] dvb-usb: error while querying for an remote control event. [ 872.195741][T13753] m920x_read = error: -19 [ 872.200315][T13753] dvb-usb: error while querying for an remote control event. [ 872.565061][ T7755] Bluetooth: hci4: command 0x2016 tx timeout [ 872.651393][T14243] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 872.672263][T14243] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.732193][T13753] m920x_read = error: -19 [ 872.736568][T13753] dvb-usb: error while querying for an remote control event. [ 872.952144][T13754] m920x_read = error: -19 [ 872.956521][T13754] dvb-usb: error while querying for an remote control event. [ 873.398202][T13754] m920x_read = error: -19 [ 873.403169][T13754] dvb-usb: error while querying for an remote control event. [ 873.717142][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 873.727604][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.173-syzkaller #0 [ 873.735884][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.745953][ T146] Workqueue: hci3 hci_rx_work [ 873.750634][ T146] Call Trace: [ 873.753929][ T146] [ 873.756891][ T146] dump_stack_lvl+0x1e3/0x2d0 [ 873.761612][ T146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 873.767275][ T146] ? panic+0x860/0x860 [ 873.771377][ T146] ? sysfs_create_dir_ns+0x282/0x390 [ 873.776699][ T146] sysfs_create_dir_ns+0x2c6/0x390 [ 873.781846][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 873.786554][ T146] ? do_raw_spin_unlock+0x137/0x8b0 [ 873.791868][ T146] kobject_add_internal+0x6e0/0xe00 [ 873.797087][ T146] kobject_add+0x14e/0x210 [ 873.801514][ T146] ? device_add+0x3c2/0xfd0 [ 873.806020][ T146] ? kobject_init+0x1d0/0x1d0 [ 873.810700][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 873.815982][ T146] ? get_device_parent+0x128/0x400 [ 873.821093][ T146] device_add+0x476/0xfd0 [ 873.825426][ T146] hci_conn_add_sysfs+0xe4/0x1f0 [ 873.830367][ T146] le_conn_complete_evt+0xc15/0x1500 [ 873.835762][ T146] ? cs_le_create_conn+0x5f0/0x5f0 [ 873.840887][ T146] hci_le_meta_evt+0xd86/0x3f50 [ 873.845742][ T146] ? __lock_acquire+0x1ff0/0x1ff0 [ 873.850764][ T146] ? __mutex_lock_common+0x444/0x25a0 [ 873.856153][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 873.862213][ T146] ? __mutex_unlock_slowpath+0x218/0x750 [ 873.867842][ T146] ? hci_event_packet+0x3b4/0x1550 [ 873.872981][ T146] ? mutex_unlock+0x10/0x10 [ 873.877481][ T146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 873.883457][ T146] ? print_irqtrace_events+0x210/0x210 [ 873.888911][ T146] hci_event_packet+0xc41/0x1550 [ 873.893849][ T146] ? rcu_lock_release+0x20/0x20 [ 873.898703][ T146] ? hci_send_to_monitor+0x99/0x4d0 [ 873.903900][ T146] hci_rx_work+0x232/0x990 [ 873.908323][ T146] process_one_work+0x8a1/0x10c0 [ 873.913281][ T146] ? worker_detach_from_pool+0x260/0x260 [ 873.918922][ T146] ? _raw_spin_lock_irqsave+0x120/0x120 [ 873.924464][ T146] ? kthread_data+0x4e/0xc0 [ 873.928962][ T146] ? wq_worker_running+0x97/0x170 [ 873.933987][ T146] worker_thread+0xaca/0x1280 [ 873.938684][ T146] kthread+0x3f6/0x4f0 [ 873.942749][ T146] ? rcu_lock_release+0x20/0x20 [ 873.947597][ T146] ? kthread_blkcg+0xd0/0xd0 [ 873.952189][ T146] ret_from_fork+0x1f/0x30 [ 873.956617][ T146] [ 873.983726][ T146] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 873.997565][ T146] Bluetooth: hci3: failed to register connection device [ 874.139489][T13753] m920x_read = error: -19 [ 874.144718][T13753] dvb-usb: error while querying for an remote control event. [ 874.262360][T13753] m920x_read = error: -19 [ 874.266840][T13753] dvb-usb: error while querying for an remote control event. [ 874.296303][T14263] Bluetooth: hci6: Frame reassembly failed (-84) [ 874.304805][T12678] Bluetooth: hci6: Frame reassembly failed (-84) [ 874.450211][T14271] binder: 14268:14271 ioctl c0306201 20000680 returned -14 [ 874.526186][T13754] m920x_read = error: -19 [ 874.655714][T13754] dvb-usb: error while querying for an remote control event. [ 875.505200][T13754] m920x_read = error: -19 [ 875.509730][T13754] dvb-usb: error while querying for an remote control event. [ 875.652177][T13754] m920x_read = error: -19 [ 875.656696][T13754] dvb-usb: error while querying for an remote control event. [ 875.770842][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 875.782246][T13754] m920x_read = error: -19 [ 875.786634][T13754] dvb-usb: error while querying for an remote control event. [ 875.902247][T13754] m920x_read = error: -19 [ 875.909149][T13754] dvb-usb: error while querying for an remote control event. [ 876.008012][T14272] loop7: detected capacity change from 0 to 32768 [ 876.055820][T13754] m920x_read = error: -19 [ 876.060197][T13754] dvb-usb: error while querying for an remote control event. [ 876.135850][ T7755] Bluetooth: hci3: command 0x2016 tx timeout [ 876.510326][ T7755] Bluetooth: hci6: command 0x1003 tx timeout [ 876.621240][ T8318] Bluetooth: hci6: sending frame failed (-49) [ 876.843707][ T7755] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 876.885353][ T7755] Bluetooth: hci4: Injecting HCI hardware error event [ 876.918266][ T8318] Bluetooth: hci4: hardware error 0x00 [ 876.930476][T14272] XFS (loop7): Mounting V5 Filesystem [ 877.137937][T14272] XFS (loop7): Ending clean mount [ 877.188450][T14272] XFS (loop7): Quotacheck needed: Please wait. [ 877.270867][T14272] XFS (loop7): Quotacheck: Done. [ 877.308159][T13753] m920x_read = error: -19 [ 877.312599][T13753] dvb-usb: error while querying for an remote control event. [ 877.363826][T11616] XFS (loop7): Unmounting Filesystem [ 877.435308][T13753] m920x_read = error: -19 [ 877.439805][T13753] dvb-usb: error while querying for an remote control event. [ 877.678447][T13753] m920x_read = error: -19 [ 877.722227][T13753] dvb-usb: error while querying for an remote control event. [ 877.752660][ T7755] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 877.852246][T13754] m920x_read = error: -19 [ 877.859882][T13754] dvb-usb: error while querying for an remote control event. [ 878.015418][T13754] m920x_read = error: -19 [ 878.020253][T13754] dvb-usb: error while querying for an remote control event. [ 878.032211][ T7755] usb 2-1: Using ep0 maxpacket: 8 [ 878.142313][T13753] m920x_read = error: -19 [ 878.146709][T13753] dvb-usb: error while querying for an remote control event. [ 878.444662][T13753] m920x_read = error: -19 [ 878.706865][ T4208] Bluetooth: hci6: command 0x1001 tx timeout [ 878.713004][T14307] Bluetooth: hci6: sending frame failed (-49) [ 878.731624][T13753] dvb-usb: error while querying for an remote control event. [ 878.862426][ T7755] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 878.910819][T13754] m920x_read = error: -19 [ 878.920046][T13754] dvb-usb: error while querying for an remote control event. [ 879.029005][ T7755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.037500][ T7755] usb 2-1: Product: syz [ 879.041704][ T7755] usb 2-1: Manufacturer: syz [ 879.046413][ T7755] usb 2-1: SerialNumber: syz [ 879.067024][T13754] m920x_read = error: -19 [ 879.071395][T13754] dvb-usb: error while querying for an remote control event. [ 879.073231][ T7755] usb 2-1: config 0 descriptor?? [ 879.930314][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 879.931358][T14335] loop6: detected capacity change from 0 to 736 [ 879.991206][T13753] m920x_read = error: -19 [ 880.001758][T13753] dvb-usb: error while querying for an remote control event. [ 880.295004][T13753] m920x_read = error: -19 [ 880.322336][ T7755] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 880.348882][T14307] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 880.358605][T14307] CPU: 0 PID: 14307 Comm: kworker/u5:2 Not tainted 5.15.173-syzkaller #0 [ 880.367043][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 880.377118][T14307] Workqueue: hci1 hci_rx_work [ 880.381914][T14307] Call Trace: [ 880.383941][T13753] dvb-usb: error while querying for an remote control event. [ 880.385199][T14307] [ 880.395500][T14307] dump_stack_lvl+0x1e3/0x2d0 [ 880.400209][T14307] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 880.405875][T14307] ? panic+0x860/0x860 [ 880.409972][T14307] ? sysfs_create_dir_ns+0x282/0x390 [ 880.415296][T14307] sysfs_create_dir_ns+0x2c6/0x390 [ 880.420443][T14307] ? sysfs_warn_dup+0xa0/0xa0 [ 880.425160][T14307] ? do_raw_spin_unlock+0x137/0x8b0 [ 880.430396][T14307] kobject_add_internal+0x6e0/0xe00 [ 880.435634][T14307] kobject_add+0x14e/0x210 [ 880.440082][T14307] ? device_add+0x3c2/0xfd0 [ 880.444611][T14307] ? kobject_init+0x1d0/0x1d0 [ 880.449311][T14307] ? __raw_spin_lock_init+0x41/0x100 [ 880.454620][T14307] ? get_device_parent+0x128/0x400 [ 880.459762][T14307] device_add+0x476/0xfd0 [ 880.464149][T14307] hci_conn_add_sysfs+0xe4/0x1f0 [ 880.469119][T14307] le_conn_complete_evt+0xc15/0x1500 [ 880.474442][T14307] ? cs_le_create_conn+0x5f0/0x5f0 [ 880.479605][T14307] hci_le_meta_evt+0xd86/0x3f50 [ 880.484487][T14307] ? __lock_acquire+0x1ff0/0x1ff0 [ 880.489540][T14307] ? __mutex_lock_common+0x444/0x25a0 [ 880.494947][T14307] ? hci_remote_host_features_evt+0x280/0x280 [ 880.501041][T14307] ? __mutex_unlock_slowpath+0x218/0x750 [ 880.506254][T13753] m920x_read = error: -19 [ 880.506691][T14307] ? hci_event_packet+0x3b4/0x1550 [ 880.511024][T13753] dvb-usb: error while querying for an remote control event. [ 880.516122][T14307] ? mutex_unlock+0x10/0x10 [ 880.516148][T14307] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 880.516173][T14307] ? print_irqtrace_events+0x210/0x210 [ 880.516199][T14307] hci_event_packet+0xc41/0x1550 [ 880.544444][T14307] ? rcu_lock_release+0x20/0x20 [ 880.549340][T14307] ? hci_send_to_monitor+0x99/0x4d0 [ 880.554574][T14307] hci_rx_work+0x232/0x990 [ 880.559008][T14307] process_one_work+0x8a1/0x10c0 [ 880.563982][T14307] ? worker_detach_from_pool+0x260/0x260 [ 880.569627][T14307] ? _raw_spin_lock_irqsave+0x120/0x120 [ 880.575178][T14307] ? kthread_data+0x4e/0xc0 [ 880.579696][T14307] ? wq_worker_running+0x97/0x170 [ 880.584727][T14307] worker_thread+0xaca/0x1280 [ 880.589411][T14307] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 880.595328][T14307] kthread+0x3f6/0x4f0 [ 880.599396][T14307] ? rcu_lock_release+0x20/0x20 [ 880.604246][T14307] ? kthread_blkcg+0xd0/0xd0 [ 880.608833][T14307] ret_from_fork+0x1f/0x30 [ 880.613256][T14307] [ 880.619047][T14307] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 880.632273][T14307] Bluetooth: hci1: failed to register connection device [ 880.639851][ T7755] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 880.649221][ T7755] usb 2-1: USB disconnect, device number 16 [ 880.801175][T14345] loop1: detected capacity change from 0 to 24 [ 880.840877][ T4287] Bluetooth: hci6: command 0x1009 tx timeout [ 880.843462][T14345] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 880.882482][T14345] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 880.912287][T13753] m920x_read = error: -19 [ 880.916662][T13753] dvb-usb: error while querying for an remote control event. [ 880.944107][T14345] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 881.035103][T13754] m920x_read = error: -19 [ 881.039486][T13754] dvb-usb: error while querying for an remote control event. [ 881.226657][T13753] m920x_read = error: -19 [ 881.231061][T13753] dvb-usb: error while querying for an remote control event. [ 881.392438][T14348] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 881.421484][T13753] m920x_read = error: -19 [ 881.430218][T13753] dvb-usb: error while querying for an remote control event. [ 881.468960][T14363] loop6: detected capacity change from 0 to 128 [ 881.556765][T13753] m920x_read = error: -19 [ 881.561146][T13753] dvb-usb: error while querying for an remote control event. [ 881.670079][T14363] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 881.682455][T14363] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 881.696015][T13753] m920x_read = error: -19 [ 881.720469][T13753] dvb-usb: error while querying for an remote control event. [ 881.898773][T13753] m920x_read = error: -19 [ 881.903208][T13753] dvb-usb: error while querying for an remote control event. [ 882.273314][T13753] m920x_read = error: -19 [ 882.277684][T13753] dvb-usb: error while querying for an remote control event. [ 882.393273][T13743] m920x_read = error: -19 [ 882.397850][T13743] dvb-usb: error while querying for an remote control event. [ 882.513107][T13743] m920x_read = error: -19 [ 882.517646][T13743] dvb-usb: error while querying for an remote control event. [ 882.652228][T13753] m920x_read = error: -19 [ 882.656609][T13753] dvb-usb: error while querying for an remote control event. [ 882.708739][T11056] Bluetooth: hci1: command 0x2016 tx timeout [ 882.859654][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 882.874777][T13754] m920x_read = error: -19 [ 882.879145][T13754] dvb-usb: error while querying for an remote control event. [ 883.151287][T13754] m920x_read = error: -19 [ 883.172145][T13754] dvb-usb: error while querying for an remote control event. [ 883.238445][T14384] loop7: detected capacity change from 0 to 736 [ 883.571835][T13754] m920x_read = error: -19 [ 883.578581][T13754] dvb-usb: error while querying for an remote control event. [ 883.702435][T13743] m920x_read = error: -19 [ 883.709141][T13743] dvb-usb: error while querying for an remote control event. [ 883.770060][T14348] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 883.779862][T14348] CPU: 1 PID: 14348 Comm: kworker/u5:3 Not tainted 5.15.173-syzkaller #0 [ 883.788311][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 883.798515][T14348] Workqueue: hci5 hci_rx_work [ 883.803237][T14348] Call Trace: [ 883.806635][T14348] [ 883.809584][T14348] dump_stack_lvl+0x1e3/0x2d0 [ 883.814292][T14348] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 883.819959][T14348] ? panic+0x860/0x860 [ 883.824061][T14348] ? sysfs_create_dir_ns+0x282/0x390 [ 883.829374][T14348] sysfs_create_dir_ns+0x2c6/0x390 [ 883.834514][T14348] ? sysfs_warn_dup+0xa0/0xa0 [ 883.839215][T14348] ? do_raw_spin_unlock+0x137/0x8b0 [ 883.844477][T14348] kobject_add_internal+0x6e0/0xe00 [ 883.849700][T14348] kobject_add+0x14e/0x210 [ 883.854144][T14348] ? device_add+0x3c2/0xfd0 [ 883.858692][T14348] ? kobject_init+0x1d0/0x1d0 [ 883.863401][T14348] ? __raw_spin_lock_init+0x41/0x100 [ 883.868708][T14348] ? get_device_parent+0x128/0x400 [ 883.873849][T14348] device_add+0x476/0xfd0 [ 883.878219][T14348] hci_conn_add_sysfs+0xe4/0x1f0 [ 883.883194][T14348] le_conn_complete_evt+0xc15/0x1500 [ 883.888519][T14348] ? cs_le_create_conn+0x5f0/0x5f0 [ 883.893676][T14348] hci_le_meta_evt+0xd86/0x3f50 [ 883.898555][T14348] ? __lock_acquire+0x1ff0/0x1ff0 [ 883.903608][T14348] ? __mutex_lock_common+0x444/0x25a0 [ 883.909020][T14348] ? hci_remote_host_features_evt+0x280/0x280 [ 883.915231][T14348] ? __mutex_unlock_slowpath+0x218/0x750 [ 883.920889][T14348] ? hci_event_packet+0x3b4/0x1550 [ 883.926032][T14348] ? mutex_unlock+0x10/0x10 [ 883.930568][T14348] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 883.936586][T14348] ? print_irqtrace_events+0x210/0x210 [ 883.942091][T14348] hci_event_packet+0xc41/0x1550 [ 883.947071][T14348] ? rcu_lock_release+0x20/0x20 [ 883.951978][T14348] ? hci_send_to_monitor+0x99/0x4d0 [ 883.957210][T14348] hci_rx_work+0x232/0x990 [ 883.961674][T14348] process_one_work+0x8a1/0x10c0 [ 883.966658][T14348] ? worker_detach_from_pool+0x260/0x260 [ 883.972321][T14348] ? _raw_spin_lock_irqsave+0x120/0x120 [ 883.977893][T14348] ? kthread_data+0x4e/0xc0 [ 883.982472][T14348] ? wq_worker_running+0x97/0x170 [ 883.987524][T14348] worker_thread+0xaca/0x1280 [ 883.992231][T14348] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 883.998198][T14348] kthread+0x3f6/0x4f0 [ 884.002303][T14348] ? rcu_lock_release+0x20/0x20 [ 884.007271][T14348] ? kthread_blkcg+0xd0/0xd0 [ 884.011891][T14348] ret_from_fork+0x1f/0x30 [ 884.016410][T14348] [ 884.085967][T14348] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 884.102813][T14348] Bluetooth: hci5: failed to register connection device [ 884.117570][T13743] m920x_read = error: -19 [ 884.149400][T13743] dvb-usb: error while querying for an remote control event. [ 884.262846][T13743] m920x_read = error: -19 [ 884.267268][T13743] dvb-usb: error while querying for an remote control event. [ 884.274710][T14388] loop1: detected capacity change from 0 to 32768 [ 884.455337][T13743] m920x_read = error: -19 [ 884.459841][T13743] dvb-usb: error while querying for an remote control event. [ 884.545980][T14388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2674 (14388) [ 884.634696][T14397] loop7: detected capacity change from 0 to 24 [ 885.323402][T14397] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 885.323898][T13743] m920x_read = error: -19 [ 885.333876][T14397] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 885.353089][T14388] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 885.361922][T14395] VFS: Lookup of 'file0' in romfs loop7 would have caused loop [ 885.369958][T14388] BTRFS info (device loop1): setting nodatasum [ 885.382478][T14388] BTRFS info (device loop1): setting nodatacow, compression disabled [ 885.415142][T13743] dvb-usb: error while querying for an remote control event. [ 885.441905][T14388] BTRFS info (device loop1): max_inline at 0 [ 885.514283][T14388] BTRFS info (device loop1): using free space tree [ 885.524405][T14388] BTRFS info (device loop1): has skinny extents [ 885.532842][T13743] m920x_read = error: -19 [ 885.537249][T13743] dvb-usb: error while querying for an remote control event. [ 885.952604][T14423] loop7: detected capacity change from 0 to 128 [ 886.043094][ T4241] m920x_read = error: -19 [ 886.047446][ T4241] dvb-usb: error while querying for an remote control event. [ 886.132431][ T4208] Bluetooth: hci5: command 0x2016 tx timeout [ 886.607107][T13754] m920x_read = error: -19 [ 886.868894][T13754] dvb-usb: error while querying for an remote control event. [ 886.881766][T14423] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 886.932527][T14423] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 887.168834][T13753] m920x_read = error: -19 [ 887.219518][T13753] dvb-usb: error while querying for an remote control event. [ 887.654943][T14436] devtmpfs: Too few inodes for current use [ 888.079237][T13754] m920x_read = error: -19 [ 888.085632][T13754] dvb-usb: error while querying for an remote control event. [ 888.576105][ T4212] m920x_read = error: -19 [ 888.585445][ T4212] dvb-usb: error while querying for an remote control event. [ 888.764439][T14443] m920x_read = error: -19 [ 888.772136][T14443] dvb-usb: error while querying for an remote control event. [ 888.893977][ T4212] m920x_read = error: -19 [ 888.902617][ T4212] dvb-usb: error while querying for an remote control event. [ 888.922448][T14445] loop8: detected capacity change from 0 to 736 [ 889.155735][ T4212] m920x_read = error: -19 [ 889.165943][ T4212] dvb-usb: error while querying for an remote control event. [ 890.985910][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 891.175490][ T4212] m920x_read = error: -19 [ 891.183417][ T4212] dvb-usb: error while querying for an remote control event. [ 891.425966][ T4212] m920x_read = error: -19 [ 891.430357][ T4212] dvb-usb: error while querying for an remote control event. [ 892.565565][T14479] loop8: detected capacity change from 0 to 24 [ 893.510299][ T4212] m920x_read = error: -19 [ 893.517728][T14477] loop6: detected capacity change from 0 to 128 [ 893.539552][T14476] loop1: detected capacity change from 0 to 736 [ 893.545987][ T4212] dvb-usb: error while querying for an remote control event. [ 893.604762][ T4287] Bluetooth: hci2: command 0x2016 tx timeout [ 893.622932][T14479] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 893.662266][ T21] m920x_read = error: -19 [ 893.667258][T14479] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 893.683440][T14478] VFS: Lookup of 'file0' in romfs loop8 would have caused loop [ 893.703810][ T21] dvb-usb: error while querying for an remote control event. [ 894.256493][T14477] EXT4-fs: error -4 creating inode table initialization thread [ 894.298092][T14477] EXT4-fs (loop6): mount failed [ 894.479272][ T7059] m920x_read = error: -19 [ 894.490583][T14500] xt_hashlimit: max too large, truncated to 1048576 [ 894.522172][ T7059] dvb-usb: error while querying for an remote control event. [ 894.786354][ T21] m920x_read = error: -19 [ 894.790750][ T21] dvb-usb: error while querying for an remote control event. [ 894.851293][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2702'. [ 894.902755][T13749] m920x_read = error: -19 [ 894.907315][T13749] dvb-usb: error while querying for an remote control event. [ 895.619060][T13749] m920x_read = error: -19 [ 895.623529][T13749] dvb-usb: error while querying for an remote control event. [ 895.733000][T13749] m920x_read = error: -19 [ 895.737380][T13749] dvb-usb: error while querying for an remote control event. [ 896.208081][T13749] m920x_read = error: -19 [ 896.212664][T13749] dvb-usb: error while querying for an remote control event. [ 897.311696][T14525] loop8: detected capacity change from 0 to 1024 [ 897.659608][T13749] m920x_read = error: -19 [ 897.673700][T13749] dvb-usb: error while querying for an remote control event. [ 898.155200][ T21] m920x_read = error: -19 [ 898.160375][ T21] dvb-usb: error while querying for an remote control event. [ 898.282876][ T21] m920x_read = error: -19 [ 898.287429][ T21] dvb-usb: error while querying for an remote control event. [ 898.412196][ T21] m920x_read = error: -19 [ 898.416576][ T21] dvb-usb: error while querying for an remote control event. [ 898.542237][ T21] m920x_read = error: -19 [ 898.546620][ T21] dvb-usb: error while querying for an remote control event. [ 898.682701][ T21] m920x_read = error: -19 [ 898.687179][ T21] dvb-usb: error while querying for an remote control event. [ 898.828018][ T21] m920x_read = error: -19 [ 898.832524][ T21] dvb-usb: error while querying for an remote control event. [ 898.947807][ T21] m920x_read = error: -19 [ 898.952271][ T21] dvb-usb: error while querying for an remote control event. [ 899.062739][ T21] m920x_read = error: -19 [ 899.067173][ T21] dvb-usb: error while querying for an remote control event. [ 899.070510][T14533] loop1: detected capacity change from 0 to 32768 [ 899.126937][T14533] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 899.141454][T14533] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 899.224816][T14533] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 899.243423][ T21] m920x_read = error: -19 [ 899.247790][ T21] dvb-usb: error while querying for an remote control event. [ 899.373143][ T21] m920x_read = error: -19 [ 899.468816][ T21] dvb-usb: error while querying for an remote control event. [ 900.117451][T14542] loop6: detected capacity change from 0 to 128 [ 900.121482][T14543] loop8: detected capacity change from 0 to 736 [ 900.155818][T14533] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 900.174647][ T21] m920x_read = error: -19 [ 900.201282][ T21] dvb-usb: error while querying for an remote control event. [ 900.279227][T14542] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 900.297345][T14542] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 900.459467][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 900.469673][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted 5.15.173-syzkaller #0 [ 900.477964][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 900.488037][ T146] Workqueue: hci2 hci_rx_work [ 900.492753][ T146] Call Trace: [ 900.496040][ T146] [ 900.498977][ T146] dump_stack_lvl+0x1e3/0x2d0 [ 900.503674][ T146] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 900.509317][ T146] ? panic+0x860/0x860 [ 900.513408][ T146] ? sysfs_create_dir_ns+0x282/0x390 [ 900.518717][ T146] sysfs_create_dir_ns+0x2c6/0x390 [ 900.523867][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 900.528561][ T146] ? do_raw_spin_unlock+0x137/0x8b0 [ 900.533797][ T146] kobject_add_internal+0x6e0/0xe00 [ 900.539028][ T146] kobject_add+0x14e/0x210 [ 900.543467][ T146] ? device_add+0x3c2/0xfd0 [ 900.548007][ T146] ? kobject_init+0x1d0/0x1d0 [ 900.552702][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 900.558010][ T146] ? get_device_parent+0x128/0x400 [ 900.563148][ T146] device_add+0x476/0xfd0 [ 900.567510][ T146] hci_conn_add_sysfs+0xe4/0x1f0 [ 900.572472][ T146] le_conn_complete_evt+0xc15/0x1500 [ 900.577787][ T146] ? cs_le_create_conn+0x5f0/0x5f0 [ 900.582936][ T146] hci_le_meta_evt+0xd86/0x3f50 [ 900.587809][ T146] ? __lock_acquire+0x1ff0/0x1ff0 [ 900.592850][ T146] ? __mutex_lock_common+0x444/0x25a0 [ 900.598249][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 900.604329][ T146] ? __mutex_unlock_slowpath+0x218/0x750 [ 900.609975][ T146] ? hci_event_packet+0x3b4/0x1550 [ 900.615102][ T146] ? mutex_unlock+0x10/0x10 [ 900.619619][ T146] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 900.625648][ T146] ? print_irqtrace_events+0x210/0x210 [ 900.631123][ T146] hci_event_packet+0xc41/0x1550 [ 900.636085][ T146] ? rcu_lock_release+0x20/0x20 [ 900.640959][ T146] ? hci_send_to_monitor+0x99/0x4d0 [ 900.646174][ T146] hci_rx_work+0x232/0x990 [ 900.650613][ T146] process_one_work+0x8a1/0x10c0 [ 900.655573][ T146] ? worker_detach_from_pool+0x260/0x260 [ 900.661219][ T146] ? _raw_spin_lock_irqsave+0x120/0x120 [ 900.666781][ T146] ? kthread_data+0x4e/0xc0 [ 900.671297][ T146] ? wq_worker_running+0x97/0x170 [ 900.676335][ T146] worker_thread+0xaca/0x1280 [ 900.681053][ T146] kthread+0x3f6/0x4f0 [ 900.685132][ T146] ? rcu_lock_release+0x20/0x20 [ 900.689990][ T146] ? kthread_blkcg+0xd0/0xd0 [ 900.694589][ T146] ret_from_fork+0x1f/0x30 [ 900.699042][ T146] [ 900.716908][ T21] m920x_read = error: -19 [ 900.725903][ T21] dvb-usb: error while querying for an remote control event. [ 900.728177][ T146] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 900.760911][ T146] Bluetooth: hci2: failed to register connection device [ 901.076488][ T21] m920x_read = error: -19 [ 901.097695][ T21] dvb-usb: error while querying for an remote control event. [ 901.242274][ T21] m920x_read = error: -19 [ 901.246777][ T21] dvb-usb: error while querying for an remote control event. [ 901.491393][ T7059] m920x_read = error: -19 [ 901.496293][ T7059] dvb-usb: error while querying for an remote control event. [ 901.516048][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 901.646968][T11276] m920x_read = error: -19 [ 901.658922][T11276] dvb-usb: error while querying for an remote control event. [ 901.687399][T14562] loop1: detected capacity change from 0 to 2048 [ 901.763734][T14562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.796680][T14563] loop6: detected capacity change from 0 to 4096 [ 901.806499][ T7059] m920x_read = error: -19 [ 901.826860][ T7059] dvb-usb: error while querying for an remote control event. [ 901.888654][T14563] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 901.962967][ T7059] m920x_read = error: -19 [ 901.969588][ T7059] dvb-usb: error while querying for an remote control event. [ 902.102883][ T7059] m920x_read = error: -19 [ 902.114839][ T7059] dvb-usb: error while querying for an remote control event. [ 902.267675][T11276] m920x_read = error: -19 [ 902.276763][T11276] dvb-usb: error while querying for an remote control event. [ 902.310800][T14580] loop6: detected capacity change from 0 to 128 [ 902.412919][T14580] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 902.423479][T11276] m920x_read = error: -19 [ 902.423503][T11276] dvb-usb: error while querying for an remote control event. [ 902.532245][T11276] m920x_read = error: -19 [ 902.662336][T14580] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 902.707555][T11276] dvb-usb: error while querying for an remote control event. [ 903.832173][ T21] m920x_read = error: -19 [ 903.837141][ T21] dvb-usb: error while querying for an remote control event. [ 903.963204][ T21] m920x_read = error: -19 [ 903.967659][ T21] dvb-usb: error while querying for an remote control event. [ 904.123366][ T21] m920x_read = error: -19 [ 904.127907][ T21] dvb-usb: error while querying for an remote control event. [ 904.164220][ T4208] Bluetooth: hci2: command 0x2016 tx timeout [ 904.252448][T14569] loop7: detected capacity change from 0 to 32768 [ 904.315229][ T21] m920x_read = error: -19 [ 904.326574][ T21] dvb-usb: error while querying for an remote control event. [ 904.492895][ T21] m920x_read = error: -19 [ 904.497482][ T21] dvb-usb: error while querying for an remote control event. [ 904.561820][T14573] loop1: detected capacity change from 0 to 40427 [ 904.642958][ T21] m920x_read = error: -19 [ 904.647509][ T21] dvb-usb: error while querying for an remote control event. [ 904.660605][T14573] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 904.676415][T14573] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 904.720749][T14573] F2FS-fs (loop1): invalid crc value [ 904.753869][T14573] F2FS-fs (loop1): Found nat_bits in checkpoint [ 904.802850][ T21] m920x_read = error: -19 [ 904.807342][ T21] dvb-usb: error while querying for an remote control event. [ 904.917737][T14573] F2FS-fs (loop1): Start checkpoint disabled! [ 904.945113][ T21] m920x_read = error: -19 [ 904.952803][ T21] dvb-usb: error while querying for an remote control event. [ 906.210115][ T21] m920x_read = error: -19 [ 906.222228][ T21] dvb-usb: error while querying for an remote control event. [ 906.289127][T14613] loop7: detected capacity change from 0 to 16 [ 906.335128][ T7059] m920x_read = error: -19 [ 906.339635][ T7059] dvb-usb: error while querying for an remote control event. [ 906.387522][T14613] erofs: (device loop7): mounted with root inode @ nid 36. [ 906.435986][T14613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 906.462226][ T7059] m920x_read = error: -19 [ 906.466608][ T7059] dvb-usb: error while querying for an remote control event. [ 906.490094][T14613] overlayfs: failed to get metacopy (-117) [ 906.604414][ T7059] m920x_read = error: -19 [ 906.609072][ T7059] dvb-usb: error while querying for an remote control event. [ 906.759250][T11276] m920x_read = error: -19 [ 906.765068][T11276] dvb-usb: error while querying for an remote control event. [ 906.826732][ T4247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.886708][ T4212] m920x_read = error: -19 [ 906.891087][ T4212] dvb-usb: error while querying for an remote control event. [ 906.968861][ T4247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.042201][ T4212] m920x_read = error: -19 [ 907.046588][ T4212] dvb-usb: error while querying for an remote control event. [ 907.126603][ T4247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.173400][ T4212] m920x_read = error: -19 [ 907.177894][ T4212] dvb-usb: error while querying for an remote control event. [ 907.447516][T14635] loop8: detected capacity change from 0 to 2048 [ 907.556309][ T4212] m920x_read = error: -19 [ 907.588893][T14635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 907.673983][ T4212] dvb-usb: error while querying for an remote control event. [ 907.800703][ T4247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.825713][ T4212] m920x_read = error: -19 [ 907.834718][ T4212] dvb-usb: error while querying for an remote control event. [ 907.975568][ T21] m920x_read = error: -19 [ 907.979955][ T21] dvb-usb: error while querying for an remote control event. [ 908.172257][ T21] m920x_read = error: -19 [ 908.176707][ T21] dvb-usb: error while querying for an remote control event. [ 908.344900][T11276] m920x_read = error: -19 [ 908.349498][T11276] dvb-usb: error while querying for an remote control event. [ 908.549757][T14620] chnl_net:caif_netlink_parms(): no params data found [ 908.594542][ T7755] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 908.615380][T14640] loop8: detected capacity change from 0 to 4096 [ 908.627339][T11276] m920x_read = error: -19 [ 908.631819][T11276] dvb-usb: error while querying for an remote control event. [ 908.652278][T14640] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 908.799988][T14640] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 908.811639][T13749] m920x_read = error: -19 [ 908.817076][T14630] loop7: detected capacity change from 0 to 32768 [ 908.817664][T13749] dvb-usb: error while querying for an remote control event. [ 908.828173][T14640] ntfs3: loop8: Failed to load $Extend. [ 908.854333][T11056] Bluetooth: hci3: command 0x0409 tx timeout [ 908.860486][ T7755] usb 2-1: Using ep0 maxpacket: 32 [ 908.900128][T14620] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.908491][T14620] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.919986][T14620] device bridge_slave_0 entered promiscuous mode [ 908.972372][ T4212] m920x_read = error: -19 [ 908.976749][ T4212] dvb-usb: error while querying for an remote control event. [ 909.000149][T14620] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.011877][T14620] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.019577][ T7755] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 909.075987][T14656] loop6: detected capacity change from 0 to 4096 [ 909.086373][T14620] device bridge_slave_1 entered promiscuous mode [ 909.092303][ T4212] m920x_read = error: -19 [ 909.097178][ T4212] dvb-usb: error while querying for an remote control event. [ 909.190041][T14620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.228400][T14620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.258515][ T7755] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 909.287281][T14656] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 909.305627][ T4212] m920x_read = error: -19 [ 909.305995][ T7755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.310286][ T4212] dvb-usb: error while querying for an remote control event. [ 909.370073][ T7755] usb 2-1: Product: syz [ 909.385404][ T7755] usb 2-1: Manufacturer: syz [ 909.390347][ T7755] usb 2-1: SerialNumber: syz [ 909.443443][ T4212] m920x_read = error: -19 [ 909.448709][ T4212] dvb-usb: error while querying for an remote control event. [ 909.449805][ T7755] usb 2-1: config 0 descriptor?? [ 909.557841][ T7755] usb 2-1: no audio or video endpoints found [ 909.562213][ T4212] m920x_read = error: -19 [ 909.568207][ T4212] dvb-usb: error while querying for an remote control event. [ 909.637687][T14620] team0: Port device team_slave_0 added [ 909.701330][T14620] team0: Port device team_slave_1 added [ 909.712315][ T4212] m920x_read = error: -19 [ 909.716698][ T4212] dvb-usb: error while querying for an remote control event. [ 909.764106][ T4212] usb 2-1: USB disconnect, device number 17 [ 909.781171][T14620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.790051][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.831947][T14620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.832388][ T7059] m920x_read = error: -19 [ 909.847180][ T7059] dvb-usb: error while querying for an remote control event. [ 909.927712][T14620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.937562][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.962269][ T7059] m920x_read = error: -19 [ 909.969983][T14620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.051639][T14620] device hsr_slave_0 entered promiscuous mode [ 910.063619][ T7059] dvb-usb: error while querying for an remote control event. [ 910.114448][T14620] device hsr_slave_1 entered promiscuous mode [ 910.121848][T14620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.141618][T14620] Cannot create hsr debugfs directory [ 910.172268][ T7059] m920x_read = error: -19 [ 910.176640][ T7059] dvb-usb: error while querying for an remote control event. [ 910.221080][T14681] loop8: detected capacity change from 0 to 128 [ 910.250814][ T4247] bond1: (slave gretap1): Releasing backup interface [ 910.279940][ T4247] device gretap1 left promiscuous mode [ 910.457763][ T7059] m920x_read = error: -19 [ 910.462233][ T7059] dvb-usb: error while querying for an remote control event. [ 910.590138][ T7059] m920x_read = error: -19 [ 910.597931][ T7059] dvb-usb: error while querying for an remote control event. [ 910.663735][T14681] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 910.790540][T14681] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 911.014394][ T7059] m920x_read = error: -19 [ 911.074326][ T7059] dvb-usb: error while querying for an remote control event. [ 911.244846][T11056] Bluetooth: hci3: command 0x041b tx timeout [ 911.401041][ T21] m920x_read = error: -19 [ 911.405748][ T21] dvb-usb: error while querying for an remote control event. [ 911.442167][ T7755] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 911.500657][ T4247] bond0: (slave wlan1): Releasing backup interface [ 911.522442][ T21] m920x_read = error: -19 [ 911.526820][ T21] dvb-usb: error while querying for an remote control event. [ 911.744748][ T7059] m920x_read = error: -19 [ 911.749241][ T7059] dvb-usb: error while querying for an remote control event. [ 911.762241][ T7755] usb 2-1: Using ep0 maxpacket: 16 [ 911.892689][ T7059] m920x_read = error: -19 [ 911.897137][ T7059] dvb-usb: error while querying for an remote control event. [ 912.022426][ T7059] m920x_read = error: -19 [ 912.026980][ T7059] dvb-usb: error while querying for an remote control event. [ 912.124128][T14676] loop6: detected capacity change from 0 to 32768 [ 912.200398][ T7059] m920x_read = error: -19 [ 912.228418][ T7059] dvb-usb: error while querying for an remote control event. [ 912.519272][ T7059] m920x_read = error: -19 [ 912.524286][ T7059] dvb-usb: error while querying for an remote control event. [ 912.575602][T14676] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 912.588993][T14676] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 912.621051][T14676] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 912.632232][ T7059] m920x_read = error: -19 [ 912.636602][ T7059] dvb-usb: error while querying for an remote control event. [ 912.752294][ T7755] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 912.755806][ T4212] m920x_read = error: -19 [ 912.767907][ T7755] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 912.784683][T14676] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 912.792304][ T7755] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 912.800499][ T7755] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 912.808934][ T4212] dvb-usb: error while querying for an remote control event. [ 912.852963][ T4247] device hsr_slave_0 left promiscuous mode [ 912.859369][ T7755] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 912.872525][ T4247] device hsr_slave_1 left promiscuous mode [ 912.888806][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.895485][ T7755] usb 2-1: config 0 has no interface number 0 [ 912.899555][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.922776][ T7755] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 912.928843][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.948681][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.956533][ T4212] m920x_read = error: -19 [ 912.960886][ T4212] dvb-usb: error while querying for an remote control event. [ 912.961284][ T7755] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 912.986612][ T4247] device bridge_slave_1 left promiscuous mode [ 912.992546][ T7755] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 912.994609][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.011715][ T7755] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.031439][ T4247] device bridge_slave_0 left promiscuous mode [ 913.037342][ T7755] usb 2-1: Duplicate descriptor for config 0 interface 125 altsetting 1, skipping [ 913.063775][ T7755] usb 2-1: config 0 interface 125 has no altsetting 0 [ 913.092611][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.104940][ T23] m920x_read = error: -19 [ 913.109298][ T23] dvb-usb: error while querying for an remote control event. [ 913.137483][ T4247] device veth1_macvtap left promiscuous mode [ 913.143786][ T4247] device veth0_macvtap left promiscuous mode [ 913.242223][ T23] m920x_read = error: -19 [ 913.246602][ T23] dvb-usb: error while querying for an remote control event. [ 913.262329][ T7755] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 913.281719][ T7755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.310646][ T7755] usb 2-1: Product: syz [ 913.323010][ T7755] usb 2-1: Manufacturer: syz [ 913.342090][ T7755] usb 2-1: SerialNumber: syz [ 913.369101][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 913.410290][ T7755] usb 2-1: config 0 descriptor?? [ 913.531462][ T7059] m920x_read = error: -19 [ 913.535899][ T7059] dvb-usb: error while querying for an remote control event. [ 913.560788][ T7755] usb 2-1: USB disconnect, device number 18 [ 913.663654][ T7059] m920x_read = error: -19 [ 913.677665][ T7059] dvb-usb: error while querying for an remote control event. [ 913.899678][ T4247] bond1 (unregistering): Released all slaves [ 913.942480][ T7059] m920x_read = error: -19 [ 914.010658][ T7059] dvb-usb: error while querying for an remote control event. [ 914.370482][T14711] loop7: detected capacity change from 0 to 32768 [ 914.442302][ T7059] m920x_read = error: -19 [ 914.446690][ T7059] dvb-usb: error while querying for an remote control event. [ 914.758800][ T7059] m920x_read = error: -19 [ 914.763329][ T7059] dvb-usb: error while querying for an remote control event. [ 914.828846][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 914.872259][ T7059] m920x_read = error: -19 [ 914.876632][ T7059] dvb-usb: error while querying for an remote control event. [ 914.888710][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 914.961602][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.999883][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.012180][ T7059] m920x_read = error: -19 [ 915.016587][ T7059] dvb-usb: error while querying for an remote control event. [ 915.174870][ T7059] m920x_read = error: -19 [ 915.179251][ T7059] dvb-usb: error while querying for an remote control event. [ 915.240129][ T4247] bond0 (unregistering): Released all slaves [ 915.284959][T14719] loop1: detected capacity change from 0 to 32768 [ 915.292417][T11276] m920x_read = error: -19 [ 915.297406][T11276] dvb-usb: error while querying for an remote control event. [ 915.393299][T14719] XFS (loop1): Mounting V5 Filesystem [ 915.402654][ T7755] Bluetooth: hci3: command 0x0419 tx timeout [ 915.515629][ T4212] m920x_read = error: -19 [ 915.520018][ T4212] dvb-usb: error while querying for an remote control event. [ 915.633597][T14719] XFS (loop1): Ending clean mount [ 915.644910][ T4212] m920x_read = error: -19 [ 915.649293][ T4212] dvb-usb: error while querying for an remote control event. [ 915.710436][T14745] loop6: detected capacity change from 0 to 1024 [ 915.787416][T14745] EXT4-fs (loop6): Ignoring removed orlov option [ 915.821920][ T4212] m920x_read = error: -19 [ 915.825743][T14745] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 915.832189][ T4212] dvb-usb: error while querying for an remote control event. [ 915.907861][ T4179] XFS (loop1): Unmounting Filesystem [ 915.933422][T14745] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 915.981850][ T4212] m920x_read = error: -19 [ 915.988918][ T4212] dvb-usb: error while querying for an remote control event. [ 916.102247][ T21] m920x_read = error: -19 [ 916.112195][ T21] dvb-usb: error while querying for an remote control event. [ 916.232149][T11276] m920x_read = error: -19 [ 916.236537][T11276] dvb-usb: error while querying for an remote control event. [ 916.302568][T14753] loop8: detected capacity change from 0 to 736 [ 916.432269][T11276] m920x_read = error: -19 [ 916.436650][T11276] dvb-usb: error while querying for an remote control event. [ 916.522630][T14620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 916.634458][T14620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 917.373490][T14759] loop6: detected capacity change from 0 to 24 [ 918.369084][ T4212] m920x_read = error: -19 [ 918.383902][ T4212] dvb-usb: error while querying for an remote control event. [ 918.422886][T14759] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 918.442420][T14759] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 918.466235][T14758] VFS: Lookup of 'file0' in romfs loop6 would have caused loop [ 918.494867][ T8318] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 918.504375][ T8318] CPU: 1 PID: 8318 Comm: kworker/u5:1 Not tainted 5.15.173-syzkaller #0 [ 918.512735][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 918.522886][ T8318] Workqueue: hci2 hci_rx_work [ 918.527587][ T8318] Call Trace: [ 918.530872][ T8318] [ 918.533806][ T8318] dump_stack_lvl+0x1e3/0x2d0 [ 918.538503][ T8318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 918.544338][ T8318] ? panic+0x860/0x860 [ 918.548426][ T8318] ? sysfs_create_dir_ns+0x282/0x390 [ 918.553729][ T8318] sysfs_create_dir_ns+0x2c6/0x390 [ 918.558861][ T8318] ? sysfs_warn_dup+0xa0/0xa0 [ 918.563552][ T8318] ? do_raw_spin_unlock+0x137/0x8b0 [ 918.568784][ T8318] kobject_add_internal+0x6e0/0xe00 [ 918.574000][ T8318] kobject_add+0x14e/0x210 [ 918.578431][ T8318] ? device_add+0x3c2/0xfd0 [ 918.582954][ T8318] ? kobject_init+0x1d0/0x1d0 [ 918.587679][ T8318] ? __raw_spin_lock_init+0x41/0x100 [ 918.592997][ T8318] ? get_device_parent+0x128/0x400 [ 918.598134][ T8318] device_add+0x476/0xfd0 [ 918.602499][ T8318] hci_conn_add_sysfs+0xe4/0x1f0 [ 918.607478][ T8318] le_conn_complete_evt+0xc15/0x1500 [ 918.612797][ T8318] ? cs_le_create_conn+0x5f0/0x5f0 [ 918.617947][ T8318] hci_le_meta_evt+0xd86/0x3f50 [ 918.622817][ T8318] ? __lock_acquire+0x1ff0/0x1ff0 [ 918.627859][ T8318] ? __mutex_lock_common+0x444/0x25a0 [ 918.633256][ T8318] ? hci_remote_host_features_evt+0x280/0x280 [ 918.639337][ T8318] ? __mutex_unlock_slowpath+0x218/0x750 [ 918.644994][ T8318] ? hci_event_packet+0x3b4/0x1550 [ 918.650123][ T8318] ? mutex_unlock+0x10/0x10 [ 918.654647][ T8318] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 918.660646][ T8318] ? print_irqtrace_events+0x210/0x210 [ 918.666118][ T8318] hci_event_packet+0xc41/0x1550 [ 918.671078][ T8318] ? rcu_lock_release+0x20/0x20 [ 918.675954][ T8318] ? hci_send_to_monitor+0x99/0x4d0 [ 918.681187][ T8318] hci_rx_work+0x232/0x990 [ 918.685631][ T8318] process_one_work+0x8a1/0x10c0 [ 918.690601][ T8318] ? worker_detach_from_pool+0x260/0x260 [ 918.696272][ T8318] ? _raw_spin_lock_irqsave+0x120/0x120 [ 918.701849][ T8318] ? kthread_data+0x4e/0xc0 [ 918.706375][ T8318] ? wq_worker_running+0x97/0x170 [ 918.711414][ T8318] worker_thread+0xaca/0x1280 [ 918.716110][ T8318] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 918.722041][ T8318] kthread+0x3f6/0x4f0 [ 918.726118][ T8318] ? rcu_lock_release+0x20/0x20 [ 918.730982][ T8318] ? kthread_blkcg+0xd0/0xd0 [ 918.735584][ T8318] ret_from_fork+0x1f/0x30 [ 918.740028][ T8318] [ 918.882873][T14620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 918.917624][T11276] m920x_read = error: -19 [ 918.922026][T11276] dvb-usb: error while querying for an remote control event. [ 918.922162][ T8318] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 918.945945][ T8318] Bluetooth: hci2: failed to register connection device [ 918.949182][T14620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 919.042787][T14764] loop1: detected capacity change from 0 to 2048 [ 919.062181][T11276] m920x_read = error: -19 [ 919.066829][T11276] dvb-usb: error while querying for an remote control event. [ 919.172350][T14764] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 919.182227][ T4212] m920x_read = error: -19 [ 919.186695][ T4212] dvb-usb: error while querying for an remote control event. [ 919.258278][T14764] attempt to access beyond end of device [ 919.258278][T14764] loop1: rw=524288, want=33554432, limit=2048 [ 919.270923][T14776] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 919.332226][ T4212] m920x_read = error: -19 [ 919.351719][ T4212] dvb-usb: error while querying for an remote control event. [ 919.499217][T14780] xt_CT: No such helper "pptp" [ 919.506597][T11276] m920x_read = error: -19 [ 919.511022][T11276] dvb-usb: error while querying for an remote control event. [ 919.556761][T14764] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 919.603936][T14620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.633526][T14764] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 919.676359][T11276] m920x_read = error: -19 [ 919.681341][T11276] dvb-usb: error while querying for an remote control event. [ 919.683465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.730522][T14764] Remounting filesystem read-only [ 919.771160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 919.775720][T14764] NILFS (loop1): error -5 truncating bmap (ino=16) [ 919.826108][T14620] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.833404][ T4212] m920x_read = error: -19 [ 919.837757][ T4212] dvb-usb: error while querying for an remote control event. [ 919.882222][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.902582][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.948017][ T4179] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 919.968424][T12678] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.975627][T12678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.007785][ T4179] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 920.012595][T11276] m920x_read = error: -19 [ 920.030182][T11276] dvb-usb: error while querying for an remote control event. [ 920.036831][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.087792][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.111816][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.129546][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 920.165620][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.182556][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 920.185218][T11276] m920x_read = error: -19 [ 920.226584][ T4179] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 920.238378][T12678] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.245497][T12678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.285780][ T4179] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 920.323797][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 920.336381][T11276] dvb-usb: error while querying for an remote control event. [ 920.348454][ T4179] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 920.386717][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.403613][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 920.464625][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.515027][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 920.557467][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.575199][ T4212] m920x_read = error: -19 [ 920.575310][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 920.579614][ T4212] dvb-usb: error while querying for an remote control event. [ 920.601452][ T4179] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 920.634296][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.668783][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 920.670595][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.698461][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 920.713371][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 920.728069][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.744303][T14620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.754997][ T4179] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 920.773813][ T4179] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 920.801324][T14620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 920.832923][T14801] loop7: detected capacity change from 0 to 512 [ 920.864268][ T4212] m920x_read = error: -19 [ 920.868654][ T4212] dvb-usb: error while querying for an remote control event. [ 920.873778][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 920.914599][T14782] loop6: detected capacity change from 0 to 32768 [ 920.933680][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 920.961388][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 921.021515][ T7059] Bluetooth: hci2: command 0x2016 tx timeout [ 921.063002][ T7059] m920x_read = error: -19 [ 921.138365][ T7059] dvb-usb: error while querying for an remote control event. [ 921.408943][ T7059] m920x_read = error: -19 [ 921.425725][ T7059] dvb-usb: error while querying for an remote control event. [ 921.692888][ T7059] m920x_read = error: -19 [ 921.697282][ T7059] dvb-usb: error while querying for an remote control event. [ 921.800032][T14782] ================================================================================ [ 921.837416][T14782] UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2342:10 [ 921.845852][T14801] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 921.997629][T14782] shift exponent 196617 is too large for 32-bit type 'int' [ 922.005517][T14801] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.018203][ T7059] m920x_read = error: -19 [ 922.023217][T14782] CPU: 1 PID: 14782 Comm: syz.6.2778 Not tainted 5.15.173-syzkaller #0 [ 922.031486][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 922.041544][T14782] Call Trace: [ 922.044841][T14782] [ 922.047764][T14782] dump_stack_lvl+0x1e3/0x2d0 [ 922.052442][T14782] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 922.058073][T14782] ? panic+0x860/0x860 [ 922.062145][T14782] ? memset+0x1f/0x40 [ 922.066154][T14782] ? lockdep_init_map_type+0x9d/0x8d0 [ 922.071523][T14782] __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 [ 922.077940][T14782] ocfs2_fill_super+0x1040/0x58a0 [ 922.082993][T14782] ? ocfs2_mount+0x40/0x40 [ 922.087431][T14782] ? validate_chain+0x112/0x5930 [ 922.092374][T14782] ? unwind_next_frame+0x1437/0x1fa0 [ 922.097654][T14782] ? deref_stack_reg+0xbe/0x110 [ 922.102507][T14782] ? reacquire_held_locks+0x660/0x660 [ 922.107890][T14782] ? is_bpf_text_address+0x24f/0x260 [ 922.113171][T14782] ? validate_chain+0x112/0x5930 [ 922.118112][T14782] ? validate_chain+0x112/0x5930 [ 922.123168][T14782] ? mark_lock+0x98/0x340 [ 922.127507][T14782] ? mark_lock+0x98/0x340 [ 922.131831][T14782] ? __lock_acquire+0x1295/0x1ff0 [ 922.136888][T14782] ? string+0x26a/0x2b0 [ 922.141070][T14782] ? widen_string+0x3a/0x310 [ 922.145673][T14782] ? string+0x26a/0x2b0 [ 922.149848][T14782] ? bdev_name+0x297/0x3a0 [ 922.154287][T14782] ? pointer+0x6a5/0xc40 [ 922.158549][T14782] ? print_unlock_imbalance_bug+0x2b0/0x2b0 [ 922.164465][T14782] ? string+0x2b0/0x2b0 [ 922.168786][T14782] ? vsnprintf+0x1c70/0x1c70 [ 922.173443][T14782] ? ptr_to_hashval+0x60/0x60 [ 922.178164][T14782] ? snprintf+0xd6/0x120 [ 922.182453][T14782] ? vscnprintf+0x80/0x80 [ 922.186827][T14782] ? set_blocksize+0x1ec/0x370 [ 922.191631][T14782] mount_bdev+0x2c9/0x3f0 [ 922.196003][T14782] ? ocfs2_mount+0x40/0x40 [ 922.200485][T14782] legacy_get_tree+0xeb/0x180 [ 922.205200][T14782] ? trace_raw_output_ocfs2_buffer_cached_end+0xe0/0xe0 [ 922.212189][T14782] vfs_get_tree+0x88/0x270 [ 922.216641][T14782] do_new_mount+0x2ba/0xb40 [ 922.221145][T14782] ? do_move_mount_old+0x160/0x160 [ 922.226259][T14782] ? user_path_at_empty+0x12b/0x180 [ 922.231462][T14782] __se_sys_mount+0x2d5/0x3c0 [ 922.236158][T14782] ? __x64_sys_mount+0xc0/0xc0 [ 922.240939][T14782] ? syscall_enter_from_user_mode+0x2e/0x240 [ 922.246916][T14782] ? lockdep_hardirqs_on+0x94/0x130 [ 922.252114][T14782] ? __x64_sys_mount+0x1c/0xc0 [ 922.256923][T14782] do_syscall_64+0x3b/0xb0 [ 922.261335][T14782] ? clear_bhb_loop+0x15/0x70 [ 922.266184][T14782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 922.272090][T14782] RIP: 0033:0x7f7fad0fc67a [ 922.276523][T14782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.296330][T14782] RSP: 002b:00007f7faaf2ee88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.304773][T14782] RAX: ffffffffffffffda RBX: 00007f7faaf2ef10 RCX: 00007f7fad0fc67a [ 922.312855][T14782] RDX: 0000000020004440 RSI: 0000000020000040 RDI: 00007f7faaf2eed0 [ 922.320828][T14782] RBP: 0000000020004440 R08: 00007f7faaf2ef10 R09: 00000000000008c0 [ 922.328820][T14782] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000020000040 [ 922.336872][T14782] R13: 00007f7faaf2eed0 R14: 0000000000004429 R15: 0000000020000100 [ 922.344855][T14782] [ 922.369442][ T7059] dvb-usb: error while querying for an remote control event. [ 922.403279][T14782] ================================================================================ [ 922.423590][T14782] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 922.430820][T14782] CPU: 0 PID: 14782 Comm: syz.6.2778 Not tainted 5.15.173-syzkaller #0 [ 922.439076][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 922.449135][T14782] Call Trace: [ 922.452430][T14782] [ 922.455418][T14782] dump_stack_lvl+0x1e3/0x2d0 [ 922.460119][T14782] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 922.465772][T14782] ? panic+0x860/0x860 [ 922.469852][T14782] panic+0x318/0x860 [ 922.473752][T14782] ? check_panic_on_warn+0x1d/0xa0 [ 922.478914][T14782] ? fb_is_primary_device+0xd0/0xd0 [ 922.484169][T14782] ? dump_stack_lvl+0x24f/0x2d0 [ 922.489031][T14782] ? memset+0x1f/0x40 [ 922.493039][T14782] check_panic_on_warn+0x7e/0xa0 [ 922.497984][T14782] __ubsan_handle_shift_out_of_bounds+0x3de/0x420 [ 922.504407][T14782] ocfs2_fill_super+0x1040/0x58a0 [ 922.509440][T14782] ? ocfs2_mount+0x40/0x40 [ 922.513857][T14782] ? validate_chain+0x112/0x5930 [ 922.518796][T14782] ? unwind_next_frame+0x1437/0x1fa0 [ 922.524087][T14782] ? deref_stack_reg+0xbe/0x110 [ 922.528946][T14782] ? reacquire_held_locks+0x660/0x660 [ 922.534313][T14782] ? is_bpf_text_address+0x24f/0x260 [ 922.539595][T14782] ? validate_chain+0x112/0x5930 [ 922.544539][T14782] ? validate_chain+0x112/0x5930 [ 922.549578][T14782] ? mark_lock+0x98/0x340 [ 922.553917][T14782] ? mark_lock+0x98/0x340 [ 922.558251][T14782] ? __lock_acquire+0x1295/0x1ff0 [ 922.563302][T14782] ? string+0x26a/0x2b0 [ 922.567462][T14782] ? widen_string+0x3a/0x310 [ 922.572069][T14782] ? string+0x26a/0x2b0 [ 922.576275][T14782] ? bdev_name+0x297/0x3a0 [ 922.580708][T14782] ? pointer+0x6a5/0xc40 [ 922.584946][T14782] ? print_unlock_imbalance_bug+0x2b0/0x2b0 [ 922.590840][T14782] ? string+0x2b0/0x2b0 [ 922.595005][T14782] ? vsnprintf+0x1c70/0x1c70 [ 922.599639][T14782] ? ptr_to_hashval+0x60/0x60 [ 922.604323][T14782] ? snprintf+0xd6/0x120 [ 922.608572][T14782] ? vscnprintf+0x80/0x80 [ 922.613060][T14782] ? set_blocksize+0x1ec/0x370 [ 922.617871][T14782] mount_bdev+0x2c9/0x3f0 [ 922.622211][T14782] ? ocfs2_mount+0x40/0x40 [ 922.626628][T14782] legacy_get_tree+0xeb/0x180 [ 922.631302][T14782] ? trace_raw_output_ocfs2_buffer_cached_end+0xe0/0xe0 [ 922.638245][T14782] vfs_get_tree+0x88/0x270 [ 922.642667][T14782] do_new_mount+0x2ba/0xb40 [ 922.647230][T14782] ? do_move_mount_old+0x160/0x160 [ 922.652374][T14782] ? user_path_at_empty+0x12b/0x180 [ 922.657602][T14782] __se_sys_mount+0x2d5/0x3c0 [ 922.662303][T14782] ? __x64_sys_mount+0xc0/0xc0 [ 922.667072][T14782] ? syscall_enter_from_user_mode+0x2e/0x240 [ 922.673113][T14782] ? lockdep_hardirqs_on+0x94/0x130 [ 922.678313][T14782] ? __x64_sys_mount+0x1c/0xc0 [ 922.683110][T14782] do_syscall_64+0x3b/0xb0 [ 922.687534][T14782] ? clear_bhb_loop+0x15/0x70 [ 922.692216][T14782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 922.698109][T14782] RIP: 0033:0x7f7fad0fc67a [ 922.702516][T14782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.722132][T14782] RSP: 002b:00007f7faaf2ee88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.730599][T14782] RAX: ffffffffffffffda RBX: 00007f7faaf2ef10 RCX: 00007f7fad0fc67a [ 922.738565][T14782] RDX: 0000000020004440 RSI: 0000000020000040 RDI: 00007f7faaf2eed0 [ 922.746545][T14782] RBP: 0000000020004440 R08: 00007f7faaf2ef10 R09: 00000000000008c0 [ 922.754534][T14782] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000020000040 [ 922.762610][T14782] R13: 00007f7faaf2eed0 R14: 0000000000004429 R15: 0000000020000100 [ 922.770612][T14782] [ 922.773950][T14782] Kernel Offset: disabled [ 922.779525][T14782] Rebooting in 86400 seconds..