last executing test programs: 3m29.150318179s ago: executing program 32 (id=1520): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x1, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xe, 0x2004, @fd_index=0x5, 0x7, 0x2, 0x72, 0x1a, 0x1, {0x3}}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 3m17.206760923s ago: executing program 33 (id=1647): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3m14.885243997s ago: executing program 34 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd27, 0x25dfdbec, {0x2, 0x18, 0x4, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x20}}, 0x880) 3m11.813012977s ago: executing program 35 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x25}, 0x4814) 2m45.654372628s ago: executing program 5 (id=1998): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f00000000c0)={0x1, 0xc8a9, 0x5, 0x1, 0x0, "3eccd8f9d200000500"}) 2m44.474855804s ago: executing program 5 (id=2006): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 2m43.795901286s ago: executing program 5 (id=2009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) r1 = memfd_secret(0x0) futimesat(r1, 0x0, 0x0) 2m43.587063733s ago: executing program 5 (id=2011): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m43.196726993s ago: executing program 5 (id=2015): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x381401a, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x617f, &(0x7f0000012640)="$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") chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) 2m41.237871609s ago: executing program 5 (id=2024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) waitid$P_PIDFD(0x3, r0, 0x0, 0x1, &(0x7f0000000400)) 2m28.541831706s ago: executing program 36 (id=2010): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m25.967500086s ago: executing program 37 (id=2024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) waitid$P_PIDFD(0x3, r0, 0x0, 0x1, &(0x7f0000000400)) 2m10.836257962s ago: executing program 9 (id=2241): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 2m10.463874584s ago: executing program 9 (id=2244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0xc2f, 0x0) getdents64(r0, 0x0, 0x0) 2m10.165565626s ago: executing program 9 (id=2247): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m9.82350481s ago: executing program 9 (id=2249): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40701, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) 2m9.450685494s ago: executing program 9 (id=2253): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2m7.611466909s ago: executing program 9 (id=2275): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 1m52.446476279s ago: executing program 38 (id=2275): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 1m9.728882798s ago: executing program 4 (id=2779): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000280)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x200000000000000, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m9.47145745s ago: executing program 4 (id=2781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) accept4$unix(r1, &(0x7f00000002c0), 0x0, 0x0) 1m9.253942475s ago: executing program 4 (id=2783): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120825", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.129667855s ago: executing program 4 (id=2792): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x3, 0x0, 0xfffffffffffffffe, 0xfffffffffffc}) 1m7.602028176s ago: executing program 4 (id=2799): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x615b, &(0x7f0000008b40)="$eJzs3UuPHFfZB/Cnr3PJm2SURZTXQmjihEsI8TUYQ4A4C1iwyQJ5i2xNJpGFA8g2yIksPGg2LFjxCUBILBFiiVjwAbJgyy4rVkSykUBZUahmzvFUt7vdY8bT1TPn95PG1U+d6u5T/e/qi6uqTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8d3vfO9sJyKu/DTNWIv4v+hFdCNW6no9IlbW1/Ly/Yh4IXaa4/mIGCxF1Nff+efZiNcj4qNnIu7dv7NRzz63z358+w9/++33n3r7r78fnP73H2/13pi23O3bv/zXn+4ebJ0BAACgNFVVVZ30Nf9E+n7fbbtTAMBc5Pf/KsnzF6buHtLt/+rvb/95EdZPrVar1eo51k3VZHebRURsNa9Tf2awOx4Ajpit+LTtLtAi+RetHxFPtd0JYKF12u4Ah+Le/TsbnZRvp/l+sL7bno8FGcl/q/Pg/I5p01nGjzGZ1/NrO3rx3JT+rMypD4sk598dz//KbvswLXfY+c/LtPyHu6c+FSfn3xvPf8zxyb87Mf9S5fz7j5V/T/4AAAAAALDA8v//r7W8/3fp4KuyL4/a/7s+pz4AAAAAAAAAwJN20PH/HjD+HwAAACys+rt67dfP7M2b9lts9fzLnYinx5YHCpNOllltux8AAAAAAAAAAAAAUJL+7jG8lzsRg4h4enW1qqr6r2m8flwHvf5RV/r6Q8nafpEHAIBdHz0zdi5/J2I5Ii6n3/obrK6uVtXyymq1Wq0s5c+zw6XlaqXxvTZP63lLw318IO4Pq/rGlhvXa5r1fXlW+/jt1fc1rHr76NgTMkiP5pTmlsIGgGT33eied6RjpqqenfbhA0bY/o8f2z/70fbzFAAAADh8VVVVnfRz3ifSPv9u250CAOYiv/+P7xc4lDricG9frVYf97qzYP1Rq49c3VRNdrdZRMRW8zr1ZwbD8QPAEbMVn7bdBVok/6L1I+KFtjsBLLRO2x3gUNy7f2ejk/LtNN8P0vju+ViQkfy3OjvXy9efNJ1l/BiTeT2/tqMXz03pz/Nz6sMiyfl3x/O/sts+TMsddv7zMi3/ej3XWuhP23L+vfH8xxyf/LsT8y9Vzr//WPn35A8AAAAAAAss////mv2/eZUBAAAAAAAA4Mi5d//ORj7vNe///8yE5Zz/eTzl/DvyL1LOvzuW/xfHlus1Ln/y1l7+/7x/Z+N3t/7x/3m63/yX8oVOemZ10jOik+6p00/Tg6zdw7YHvWF9T4NOt9dPx/xUg3fjWlyPzTgzsmw3PR577WdH2uueDkbaz4209x9qPz/SPki/O1Ct5PZTsRE/iuvxzk573bY0Y/2XZ7RXM9pz/j3bf5Fy/v3GX53/amrvjE2jsWk2t/vmdNL9XLr22V+cOeR12Y/t6D1Yt6Z6/U620J+dx+SpYfzk5uaNU7ev3rp142ykycjcc5EmT1jOf7Dzt7T3+v/Sbnt+3W9ur5/8fPjQ6/6s/BfFdvSn5v9S43K9vq/MuW9tyPkP01/O/53UPmn7P9r5T9/+X22hPwAAAAAAAAAAAAAAAPAoVVXtnCJ6KSIupPN/2jo3EwCYr/z+XyV5vlqtVqvV7dYfD5tz2u/P8aibqsnebBYR8ZfmderPDD+bdGMAwCL7T0R83HYnaI38C5Z/76+evtx2Z4C5uvnBhz+4ev365o2bbfcEAAAAAAAAAPhf5fE/1xvjP78cEWtjy42M//pWrB90/M9+vvBggNEnPND3FNvdYa/bGG78xdgZn/vUtPG/T8ajx//uz7i/wYz24Yz2pRntyxPn7qU18USPhpz/i43xzuv8T4wNv17C+K/jY96XIOd/svF8rvP/wthyzfyr3yxc/lv7XXA7uiP5n771/o9P3/zgw9euvX/1vc33Nn94/uzZM+cvXLh48eLpd69d3zyz++/h9HoB5Pzz2NeOAy1Lzj9nLv+y5Pw/l2r5lyXn//lUy78sOf/8eU/+Zcn55+8+8i9Lzv+VVMu/LDn/L6Va/mXJ+b+aavmXJef/5VTLvyw5/9dSLf+y5PxPpVr+Zcn5n071PvL38/DHSM4/7+Gy/Zcl55+PbJB/WXL+51It/7Lk/M+nWv5lyfm/nmr5lyXn/5VUy78sOf8LqZZ/WXL+X021/MuS87+YavmXJef/tVTLvyw5/6+nWv5lyfm/kWr5lyXn/41Uy78sOf9vplr+Zcn5fyvV8i9Lzv/NVMu/LHu//1/uhUvpsViU/rjgQvsXWn5hAgAAAAAAAAAAAAAeMo/DidteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zF7stUOIgRCc1JBNYkJIluzaTnyhTTHh2gClQEKhF2zXuzYLvuG1S6BINg2USBgVVVRNH2gBoTZSVWEhHmhFaR6qXp5K+0BfKqpKSI1QQAYJqa1otpo5///fM+PZObve8Xr2/D8fyf7tzpyZc+bMmdn9rv3dAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAuzveMPeZRlEUzT+tv7YUxQuaH2+a3NK67LXXewsBAACA1fq/1t+XbkoX7F/GjdqW+YdX/PM3FhcXF4v3jf7h+BcWF9MVk0UxvrEoWtdFF//z/Y32ZYInionGSNvnIxWrH624fqzi+vGK6zdUXL+x4vqJiuuv2AFX2FT+PKZ1Z9tbH24pd2lxczHeum57j1s90dg4MhJ/ltPSaN1mcfxIMV8cK+aKmY7ly2UbreW/dUdzXW8t4rpG2ta1rXmE/PgTh+M2NMI+3t6xrsv3Gf3w9cXkT378icN/dua5W3vNyt3QcX/ldt5zZ3M7PxUuKbe1UWxM+yRu50jbdm7r8ZyMdmxno3W75sfd23lpmds5enkz11T3cz5RjLQ+/k5rP421/1gv7adt4bL/vqsoivOXN7t7mSvWVYwUmzsuGbn8/EyUR2TzPpqH0ouLsRUdp3cs4zhtztntncdp92siPv93hNuNLbEN7U/TDz+54YrnfaXHadR81Eu9VrqPwUG/VoblGIzHxXdaD/rJnsfg9vD4P3H30sdgz2OnxzGYHnfbMXhn1TE4smG0tc3pSWi0bnP5GNzRsfxoa02N1nz27v7H4PSZ46emFz728dfMHz90dO7o3IldO3bM7Nq9e+/evdNH5o/NzZR/X+XeHn6bi5H0Grgz7Lv4GnhV17Lth+rilwf3Opzo8zrc0rXsoF+HY90PrrE2L8grj+nytfFoc6dPXBgplniNtZ6fe1f/OkyPu+11ONb2Ouz5NaXH63BsGa/D5jKn7l3e9yxjbX96bcO1+lqwpe0Y7P5+pPsYHPT3I8NyDE6E4+Lf7136a8G2sL1PTq30+5HRK47B9HDDe0/zkvT9/sTe1uh1XN7WvOKGDcXZhbnT9z9+6MyZ0zuKMNbES9qOle7jdXPbYyquOF5HVny87p9/xZO39bh8S9hXE69p/jWx5HPVXOaB+/s/V62vbr33Z8elO4swBmyt92evr+bN/ZmyZJ/92VzmU9Or/1485dK299/xJd5/Y+5/vlxfuqsnRsfHytfvaNo74x3vx51P1VjrvavRWvel6eW9H4+HP2v9fnxzn/fjrV3LDvr9eLz7wcX340bVTztWp/v5nAjHybGZ/u/HzWW27lzpMTnW9/34rjAbYf+/OiSFlIvajp2ljtu0rrGx8fC4xuIaOo/TXR3Lj4ds1lzX0zuv7ji9567yvkbTo7tsrY7Tya5lB32cpverpY7TRtVP365O9/M5EY6Lm3f1P06byzzzwOrfOzfFD9veOzdUHYPjoxua2zyeDsLy/X5xUzwG7y8OFyeLY8Vs69oNreOp0VrX1IPLOwY3hD9r/V65tc8xeE/XsoM+BtPXsaWOvcbYlQ9+ALqfz4lwXDz1YP9jsLnMG/cM9nvXe8IlaZm27127f7621M+8buvaTdfyZ17N7fy7Pf1/Nttc5tjelebM/vvpvnDJDT32U/frd6nX1GyxNvtpa9jO5/YuvZ+a29Nc5gv7lnk87S+K4txHHm79vDf8+8rXz373Gx3/7tLr33TOfeThH9145O9Xsv0ArH/Pl2Nz+bWu7V+mlvPv/wAAAMC6EHP/SJiJ/A8AAAC1EXN//F/hifwPAAAAtRFz/1iYSSb5f+sbn5t//lyRmvmLQbw+7YZHyuVix3UmfD65eFnz8oe/OvfTvz63vHWPFEXxs0d+p+fyWx+J21WaDNt58U2dl195w3PLWv/Bxy4v195f/1K4//h4wuOv+lWKPSu4M0VRfOumz7XWM/n+C635zCMHW/Pd5598ornMpX3l5/H2z76kXP6Lofy7/8ihjts/G/bD98OceVvv/RFv97ULr962572X1xdv17jzha2H/dQHyvuND/DzT5TLx/281Pb/zWef/lpz+cdf2Xv7z4303v6nw/1+Ncz/eXm5fPtz0Pw83u7TYfvj+uLt7v/Kt3tu/8XPlMufenO53MEw4/rvCZ9vf/Nz8+376/HGoY7HVbylXC6uf+a7v9+6Pt5fvP/u7Z84cKFjf3QfH8/8a3k/013Lx8vjeqK/6lp/837aj8+4/qd/72DHfq5a/8V3P/vy5v12r/++ruVGu27f/Rub/uTTn+u5vrg9+//yVMfj2f+u8DoO63/qA+F4DNf/78XPdaw3OviuzvefuPyXtpzreDzRW39Srv/i64625n9N/vSPb3jBjS88f3tz3xXFd95T3l/V+o/+6cmO7f/yLfe2no94fezod69/KXH9pz86deLkwtn52ba92vrdOW8vt2fjxKbNze29Kby3dn9+4OSZD86dnpyZnCmKyfr+Cr2r9pUwf1SO8yu9/b2Phefztj/61ua7/+Wz8fJ/e7S8/MLbyq9brwrLfT5cvqV8/hYbq1z/U3fc0np9N54pP+/osQ/Atu0/2LusBcPj7/6+IB7vp176wdZ+aF7X+roRX9er3P7vzZb3882wXxfDb2a+85bL62tfPv5uhAvvKV/vq95/4W0uPq9/Hp7vd3y/vP+4XfHxfi98H/PtrZ3vd/H4+Oa5ke77b/0Wj/Ph/aQ4X14fl4r7+8KlW3puXvw9JMX5W1uf/0G6n1tX9DCXsvCxhelj8yfOPj59Zm7hzPTCxz5+4PjJsyfOHGj9Ls8DH6q6/eX3p82t96fZud0PFDObiqI4WcyswRvWtdn+5kfL2/5Tjx2e3TNz9+zckUNnj5x57NTc6aOHFxYOz80u3H3oyJG5j1bdfn72oR079+3as3Pq6PzsQ3v37du1b2r+xMnmZpQbVWH3zIenTpw+0LrJwkMP7Nvx4IMPzEwdPzk799CemZmps1W3b31tmmre+renTs8dO3Rm/vjc1ML8x+ce2rFv9+6dlb8N8PipIwuT06fPnpg+uzB3erp8LJNnWhc3v/ZV3Z56WviP8vvZbo3yF/EV77xvd/r9rE1f/eSSd1Uu0vULRJ8Lv4vmn150au9yPo+5fzzMJJP8DwAAADmIuX9DmIn8DwAAALURc//GMBP5HwAAAGoj5v6JMJNM8r/+/7L6/5Xq3/8vr9f/z6v/f+ojZa90vff/Y39e/z8P17n/v+r16//r/9ev/7/8/vzAt//r+v/6/1xvw9b/j7l/U1Fkmf8BAAAgBzH3bw4zkf8BAACgNmLuvyHMRP4HAACA2oi5/wVhJpnkf/3/ZfX/d1YVrurf/3f+f/3/Yn32/+OTo/+fjRX379/7aMen+v+B/r/+fx36/87/r//PdTa+5DXXq/8fc/+NYSaZ5H8AAADIQcz9Lwwzkf8BAACgNmLuvynMRP4HAACA2oi5f0uYSSb5X//f+f/1//X/a93/X+35/9s2Rv9/fXD+//569P9v77mg/v8K+/8T+v/rsf8/PtjtH+7+f+Xm6/9zTQzb+f9j7n9RmEkm+R8AAAByEHP/i8NM5H8AAACojZj7XxJmIv8DAABAbcTcf3OYSSb5X/9f/1//X/9f/7/3+qvP/19+pP8/XPT/+9u2/Qd7u19jPen/O/9/Dv3/AW//cPf/B33+//E3dd9e/59ehq3/H3P/S8NMMsn/AAAAkIOY+28JM5H/AQAAoDZi7n9ZmIn8DwAAALURc//WMJNM8r/+v/6//r/+v/5/7/VX9/9L+v/DRf+/vx7n/+9tmf3/0a7L9f9L+v/6/7Xv//f45lf/n16Grf8fc/+tYSaZ5H8AAADIQcz9t4WZyP8AAABQGzH3/1yYifwPAAAAtRFz/7Ywk0zyv/6//r/+f179//s26P/r/9eb/n9/g+7/O/+//n87/f+M+v89rKT/v7HqzqiNYev/x9z/8jCTTPI/AAAA5CDm/leEmcj/AAAAUBsx998eZiL/AwAAQG3E3D8ZZpJJ/tf/r1f//y/+9qnbC/1//f+K9de0/x8PA/3/zOn/96f/X0H/X/9f/39N+v/kY9j6/zH33xFmkkn+BwAAgBzE3H9nmIn8DwAAALURc/9dYSbyPwAAANRGzP3bw0wyyf/6//Xq/0f6//r//dZf0/5/Mmz9/y+Gqf+/NvT/e2h7ker/V9D/1//Pvv8fv/vV/2cwhq3/H3P/K8NMMsn/AAAAkIOY++8OM5H/AQAAoDZi7n9VmIn8DwAAALURc/89YSaZ5H/9f/1//X/9f/3/3ut3/v/1Sf+/P/3/Cvr/+v/Z9/+d/5/BGrb+f8z9rw4zyST/AwAAQA5i7r83zET+BwAAgNqI/3+z/H+v8j8AAADUUcz9U2EmmeR//X/9/5z6/w39f/1//f/a0//vT/+/gv6//r/+v/4/AzVs/f+Y+18TZpJJ/gcAAIAcxNx/f5iJ/A8AAAC1EXP/dJiJ/A8AAAC1EXP/TJhJJvlf/1//P6f+v/P/d/T/J4pC/1//v370//vT/6+w1v3/4lLrYv3/wbje2z+U/f+i0P/nuhq2/n/M/TvCTDLJ/wAAAJCDmPt3hpnI/wAAAFAbMffvCjOR/wEAAKA2Yu5/IMwkk/yv/6//r/+fbf/f+f/1/2tJ/78//f8Kzv+v/1+3/r/z/3OdDVv/P+b+B8NMMsn/AAAAkIOY+3eHmcj/AAAAUBsx9+8JM5H/AQAAoDZi7t8bZpJJ/tf/r0n//3f/sWPd+v/6//3WP5j+/yb9/zD1/4dLTfv/3S+Lq6b/X0H/X/9f/1//n4Eatv5/zP37wkwyyf8AAACQg5j7XxtmIv8DAABAbcTc//NhJvI/AAAA1EbM/b8QZpJJ/tf/r0n/v4v+v/5/v/U7/7/+f53VtP8/MPr/FfT/9f/1//X/Gahr3/+PHy2v/x9z/0NhJpnkfwAAAMhBzP2/GGYi/wMAAEBtxNz/ujAT+R8AAABqI+b+/WEmmeR//X/9f/1//f9r0/9/XdFtGPv/zYNH/79eVtu/b+j/l/T/9f/1//X/9f8ZgGE7/3/M/a8PM8kk/wMAAEAOYu5/OMxE/gcAAIDaiLn/DWEm8j8AAADURmfuzy//6//r/+v/6/87/3/v9ev/r0/O/9+f/n8F/X/9f/1//X8Gatj6/29s3WqieFOYSSb5HwAAAHIQc/+bw0zkfwAAAKiNmPvfEmYi/wMAAEBtxNz/1jCTTPK//r/+v/6//n92/f+JQv+/xvT/+9P/r6D/r/+v/6//z0ANW/8/5v5fCjPJJP8DAABADmLufyTMRP4HAACA2oi5/21hJvI/AAAA1EbM/W8PM8kk/+v/6//r/+v/Z9f/d/7/WtP/70//v8IQ9P+bX9P0/9fn9uv/6/9zpWHr/8fc/44wk0zyPwAAAOQg5v5fDjOR/wEAAKA2Yu5/Z5iJ/A8AAAC1EXP/r4SZZJL/9f/1//X/9f+z6P83b6T/nwX9//70/yv06P9vdP5//X/9f/1/rtqw9f9j7n9XmEkm+R8AAAByEHP/u8NM5H8AAACojZj73xNmIv8DAABAbcTc/2iYSSb5X/8/y/5/esj6/yX9/wz6/87/nw39//70/ysMwfn/9f/X7/br/+v/c6Vh6//H3P9YmEkm+R8AAAByEHP/e8NM5H8AAACojZj7fzXMRP4HAACA2oi5/31hJpnkf/3/LPv/zv+/Zv3/sY7jI6f+/0Tb85mOS/1//f81oP/fn/5/Bf1//f9h7v+Ho3nTErfX/2cYDVv/P+b+94eZZJL/AQAAIAcx9/9amIn8DwAAALURc/+vh5nI/wAAAFAbMff/RphJJvlf/1//X//f+f+d/7/3+vX/1yf9//70/yvo/+v/D3P/v4L+P8No2Pr/Mff/ZphJRfDr/v4UAAAAGF4x938gzCSTf/8HAACAHMTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fyvMRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X//f+f8H1f//mf6//n+g/9+b/v/acP7//vT/K+j/6//r/+v/M1DD1v+PuX8uzCST/A8AAAA1ln4cHHP/kTAT+R8AAABqI+b+o2Em8j8AAADURsz9HwwzyST/6//r/zv///Xo/491LK//X9L/1/8fBP3//vT/K+j/6//r/+v/M1DD1v+PuX8+zCST/A8AAAA5iLn/Q2Em8j8AAADURsz9Hw4zkf8BAACgNmLuPxZmkkn+1//X/8+9/98oivPO/6//32v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3H88zCST/A8AAAA5iLn/RJiJ/A8AAAC1EXP//7N3H01yndcdh9ssksCs7I/gtVde2it/BW+9c5XWKiUqB4rKWaJyDlTOOScq55wzlXOkIqUqqDg45xCDbtwGMI3pe9/zPJujQQHqHqIF6S/Ur+5d4hb7HwAAAIaRu/+ucUuT/a//1/937/9Xe3n+/9Gfr/8/S/+v/9+Ftf7+6kv79Rfs///zv677f/2//l//P0n/r//X/3O+ufX/ufvvFrc02f8AAADQQe7+u8ct9j8AAAAMI3f/PeIW+x8AAACGkbv/urilyf7X/+v/9f/6/yP9/836f/3/snn+/zT9/xb6f/2//l//z07Nrf/P3X/PuKXJ/gcAAIAOcvffK26x/wEAAGAYufvvHbfY/wAAADCM3P33iVua7H/9/+z7/9P6f/2/5//r//X/F0//P03/v4X+X/+v/9f/s1Nz6/9z9983bmmy/wEAAKCD3P33i1vsfwAAABhG7v77xy32PwAAAAwjd/8D4pYm+1//P/v+3/P/9f/6f/2//v8S3LS6488E/f86/f8WW/r/1Ur/P+Wi+/nN395y3v8F6P/1/6ybW/+fu/+BcUuT/Q8AAAAd5O5/UNxi/wMAAMAwcvdfH7fY/wAAADCM3P0Pjlua7H/9v/5f/6//1/9vfn39/zJ5/v+04/f///Fvd75T3/7f8/+nef6//l//z/nm1v/n7r8hbmmy/wEAAKCD3P0PiVvsfwAAABhG7v6Hxi32PwAAAAwjd//D4pYm+1//36b/P6xd9P/6f/2//n90+v9pnv+/xeEfcwf1pf5f/6//1/9zPHPr/3P3PzxuabL/AQAAoIPc/Y+IW+x/AAAAGEbu/kfGLfY/AAAADCN3/6Pilib7X//fpv/3/H/9v/5f/9+C/n+a/n+LUZ7/f5mfmn3388e17/ev/9f/s25u/X/u/kfHLU32PwAAAHSQu/8xcYv9DwAAAMPI3f/YuMX+BwAAgGHk7n9c3NJk/+v/9f/L6P/zFebX/x+s9P/6f/3/nOj/p+n/txil/79M++7nl/7+9f/6f9bNrf/P3f/4uKXJ/gcAAIAOcvc/IW6x/wEAAGAYufufGLfY/wAAADCM3P1Pilua7H/9v/5/Gf2/5//r//X/+v+Lo/+fpv/fYtn9/yV/3s63735+6e9f/6//Z93c+v/c/TfGLU32PwAAAHSQu//JcYv9DwAAAMPI3f+UuMX+BwAAgGHk7n9q3NJk/+v/9f/6f/2//n/z6+v/l0n/P03/v8Wy+/9j23c/v/T3r//X/7NuRv3/Ob/q9OppcUuT/Q8AAAAd5O5/etxi/wMAAMAwcvc/I26x/wEAAGAYufufGbc02f/6/9n0/4c531j9/8FqtdL/r5r2/wfn/H7W51L/r/8/Afr/afr/LfT/+n/9v/6fnZpR/3/4de7+Z8UtTfY/AAAAdJC7/9lxi/0PAAAAw8jd/5y4xf4HAACAYeTuf27c0mT/6/9n0/8fGqv/9/z/8z8fnfp/z/9fp/8/GTPt/6+92NfX/+v/9f/Lff/6f/0/6+bW/+fuf17cdO01l/0tAgAAADOTu//5cUuTv/8HAACADnL3vyBusf8BAABgoW5c+5Hc/S+MW5rsf/3/bvv/cwNP/b/+//zPh/5f/6//v/Jm2v9fNP2//l//v9z3r//X/7Nubv1/7v4XxS1N9j8AAAB0kLv/prjF/gcAAIBh5O5/cdxi/wMAAMAwcve/JG5psv/1/57/r//X/+v/N7++/n+Z9P/T5t3/n6k/TvT/+v8lvv8d9P+n7viX+n/GcAn9/5kzZ66/4v1/7v6Xxi1N9j8AAAB0kLv/ZXGL/Q8AAADDyN3/8rjF/gcAAIBh5O5/RdzSZP/r/5v2//lR1/8f0v/r/ze9vv5/mfT/0+bd/3v+v/5/2e/f8//1/6yb2/P/c/e/Mm5psv8BAACgg9z9r4pb7H8AAAAYRu7+V8ct9j8AAAAMI3f/a+KWJvtf/9+0//f8f/2//v+k+//bVvr/E7GI/v/gwq8/9/7/Bv2//n9Cu/7/f//7yJf6f/0/6+bW/+fuf23c0mT/AwAAQAe5+18Xt9j/AAAAMIzc/a+PW+x/AAAAGEbu/jfETVc32f/6f/2//l//r//f/Pon/Pz/a1erlf5/BxbR/0+Ye//v+f/6/ynt+v/z6P/1/6ybW/+fu/+NcUuT/Q8AAAAd5O5/U9xi/wMAAMAwcve/OW6x/wEAAGAYufvfErc02f/6f/3/le7/b//M6P/P0v/vqf+/YRH9v+f/74j+f5r+fwv9v/5f/6//50Tsq//P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAYufvfHrfY/wAAADCM3P3viFua7H/9v/7f8//1/6dm1/+fPvLv1+T5//r/HdH/T9P/b6H/1//r/2/U/7NLc3v+f+7+d8YtTfY/AAAAdJC7/11x6/+6tf8BAABgGLn73x232P8AAAAwjNz974lbmux//b/+X/+v/x/++f/6/1b0/9P0/1vo//X/+n/P/2en5tb/5+5/b9zSZP8DAABAB7n73xe32P8AAAAwjNz9749b7H8AAAAYRu7+m+OWJvtf/6//1//r//X/Z38P9f9j0P9PO5n+/0D/r/+vfv5f4j8F+n/9/7Zfz5jm1v/n7v9A3NJk/wMAAEAHufs/GLfY/wAAADCM3P0filvsfwAAAFikqzf8WO7+D8ctTfa//l//r//X/+v/N7++/n+Z9P/TPP9/C/3/Jfbz/37kq6U9///8//7S/+v/2b399/9n/xdbfp27/yNxS5P9DwAAAB3k7v9o3GL/AwAAwDBy938sbrH/AQAAYBi5+z8etzTZ//p//b/+X/+v/9/8+vr/ZdL/T9P/b6H/3+vz85f+/vX/+n/W7b//P/p17v5PxC1N9j8AAAB0kLv/k3GL/Q8AAADDyN3/qbjF/gcAAIBhHO7+jMsa7n/9v/5f/6//1/9vfn39/zLp/6fp/7fQ/+v/9f/6f3Zqbv3/pw9/1enVZ+KWJvsfAAAAOsjd/9m4xf4HAACAYeTu/1zcYv8DAADAMHL3fz5uabL/G/T/pzb9NP3/0vr/M2fOXK//1/8f/X7u6P9v0f9T9P/T9P9b6P/1//p//T87Nbf+P3f/F+KWJvsfAAAAOsjd/8W4xf4HAACAYeTu/1LcYv8DAADAMHL3fzluabL/G/T/G82q/z+t//f8f/3/yvP/9f87ov+fpv/fYsT+//TFf/v77uePa9/vX/+v/2fd3Pr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACGkbv/a3GL/Q8AAADDyN3/9bhlcft/U4G+nf7/5Pr/2//ZdXn+/8Fq8/vX/+v/9f/6/ytN/z9N/7/FiP3/Jdh3P7/096//1/+zbm79f+7+b8Qti9v/AAAAwIXk7v9m3GL/AwAAwDBy938rbrH/AQAAYBi5+78dtzTZ//r/GTz/f8D+3/P/N38+9P+z7v+v0v+PQf8/Tf+/hf5f/6//31H/n59m/X93c+v/c/d/J25psv8BAACgg9z9341b7H8AAAAYRu7+78Ut9j8AAAAMI3f/LXHLOfv/8p6svwz6f/2//l//r//f/Pr6/2XS/0+72P7/1Op4/X/S/+v/9f9d+3/P/+esufX/ufu/H7f4+38AAABYnGsu8OO5+38Qt9j/AAAAMIzc/T+MW+x/AAAAGEbu/h/FLbdeta+3dKL0//p//b/+X/+/+fX1/8um/9/M8/+30P/vop//H/3/GP3/aqX/5/jm1v/n7v9x3OLv/wEAAGAYuft/ErfY/wAAADCM3P0/jVvsfwAAABhG7v6fxS1N9r/+X/9/zP7/MM3U/5+l/z9L/7+Z/v9keP7/NP3/Fvp/z//X/3v+Pzs1t/4/d//P45Ym+x8AAAA6yN3/i7jF/gcAAIBh5O7/Zdxi/wMAAMAwcvf/Km5psv/31v/HP2r9/+L7f8//1//r//X/s6L/n6b/30L/r//X/+v/2am59f+5+38dtzTZ/wAAANBB7v7fxC32PwAAAAwjd/9v4xb7HwAAAIaRu/93cUuT/e/5//p//b/+X/+/+fX1/8uk/5+m/9+sfqP0//p//b/+n52aW/+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvffGrfY/wAAADCM3P1/jFua7H/9v/5f/6//1/9vfn39/zLp/6fts///v3/d/rKe/7/3/j/fgv5f/6//Zyfm1v/n7v9T3NJk/wMAAEAHufv/HLfY/wAAADCM3P1/iVvsfwAAABhG7v6/xi1N9v+W/v9U/UT9/yT9/9H3r//f/PnQ/x+7/z9Y6f/1/1vo/6d5/v8W+n/P/9f/6//Zqbn1/7n7/xa3NNn/AAAA0EHu/tviFvsfAAAAhpG7/+9xi/0PAAAAw8jd/4+4pcn+9/x//b/+X/+/oP7/yPej/9f/b6L/n6b/30L/r//X/+v/2am59f+5+/8ZAAD///ZFSMI=") chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m5.926164643s ago: executing program 4 (id=2813): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 58.717870272s ago: executing program 7 (id=2880): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff7, 0x238d117e700efb5b, 0x401, 0x206, 0xe12, 0x2c0, 0x0, 0x0, 0x4, 0x27}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4d0881, 0x0) 57.669530563s ago: executing program 7 (id=2884): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x1b0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 57.305103971s ago: executing program 7 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5) 56.95806011s ago: executing program 7 (id=2889): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x7d, 0x50f, &(0x7f0000000140)="$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") ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) 56.637736124s ago: executing program 7 (id=2891): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 55.327804862s ago: executing program 7 (id=2899): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x40, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x1, r1}) 54.677593334s ago: executing program 39 (id=2899): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x40, 0x80800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x1, r1}) 50.371984987s ago: executing program 40 (id=2813): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 11.869498884s ago: executing program 2 (id=3224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.261911742s ago: executing program 2 (id=3228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000a40), r2, 0x1}}, 0x18) 10.983846972s ago: executing program 2 (id=3230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) 10.694451034s ago: executing program 2 (id=3234): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) 10.380735037s ago: executing program 2 (id=3237): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 9.929646801s ago: executing program 2 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 9.105596311s ago: executing program 41 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 7.717151372s ago: executing program 1 (id=3254): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1d, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 7.334212444s ago: executing program 1 (id=3258): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x20, 0x103) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) 4.969603122s ago: executing program 1 (id=3269): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xd0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) 4.585952341s ago: executing program 1 (id=3273): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x329, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 4.361180157s ago: executing program 1 (id=3275): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) 3.982228673s ago: executing program 1 (id=3278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f00000006c0)=ANY=[], 0x0) 3.927691188s ago: executing program 3 (id=3279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x143042, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) 3.633747509s ago: executing program 6 (id=3282): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.454317498s ago: executing program 6 (id=3283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3.146743788s ago: executing program 6 (id=3284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendto$packet(r2, &(0x7f0000000140)="330320000a0014000b007e752f555f2a0c9fe67025c1d97bfbf719143baa111f1f858ce632f47042197449", 0x2b, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x62}, 0x14) 2.870380556s ago: executing program 6 (id=3286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x800}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x800}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.638748432s ago: executing program 6 (id=3287): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.638463423s ago: executing program 3 (id=3288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) 2.492587694s ago: executing program 3 (id=3289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100121, 0x0, 0x0) 2.125681085s ago: executing program 8 (id=3291): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) 2.125470492s ago: executing program 6 (id=3292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x2c, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x2c}}, 0x0) 1.989308202s ago: executing program 0 (id=3293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x8050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x5}, 0x8) 1.845011945s ago: executing program 0 (id=3294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x40, @empty, 0x8011}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1.762761582s ago: executing program 8 (id=3295): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.509512322s ago: executing program 8 (id=3296): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f10200", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.499016708s ago: executing program 0 (id=3297): r0 = fanotify_init(0x202, 0x400) r1 = syz_io_uring_setup(0xc75, &(0x7f0000000640)={0x0, 0x7b0a, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x4, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.452617568s ago: executing program 3 (id=3298): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.265807395s ago: executing program 8 (id=3299): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x1, 0xc39, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) 1.229762842s ago: executing program 3 (id=3300): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.054144305s ago: executing program 0 (id=3301): getpid() write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 893.80519ms ago: executing program 3 (id=3302): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5d17, &(0x7f000000bac0)="$eJzs3U1vHVcZB/Dnvvj6pbSNKlSFiEWaQmkpzXsC5a0pCxawAAllTSLXrQIpoMQgWlnElReIFV8BNt2w6FfgA/QzID4AkWxWXVAGjX1OMh5f5zokvnPt8/tJzswz547vmfw9nns9M/cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/+uHPLvQi4sbv0oITEV+IQUQ/YrGuT0c9cy0/fhgRJ2O7OV6MiMF8RL3+9j/PR1yOiE+fi9jcWluuF188YD+unF+98/mPf/CPP/554+Qv3vn5x+32n37x0id/uhdx4idvfvL5vaez7QAAAFCKqqqqXnqbfyq9v+933SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJivblO/ZrB6XgAOGLW47Ouu0CH5F+0YUQ803UngJnW67oDHIrNrbXlXsq31zwenN5pz9eC7Mp/vffg/o79ppO0rzGZ1s/XRgzihX36szilPsySnH+/nf+NnfZRetxh5z8t++U/2rn1qTg5/0E7/5bjk39/bP6lyvkPHyv/gfwBAAAAAGCG5b//n+j4/O/8k2/KgTzq/O/pKfUBAAAAAAAAAJ62Jx3/7wHj/wEAAMDMqt+r1/7y3MNl+30WW738ei/i2dbjgcKkm2WWuu4HAAAAAAAAAAAAAJRkuHMN7/VexFxEPLu0VFVV/dXUrh/Xk65/1JW+/VCyrn/JAwDAjk+fa93L34tYiIjr6bP+5paWlqpqYXGpWqoW5/Pr2dH8QrXYeF+bp/Wy+dEBXhAPR1X9zRYa6zVNer88qb39/ernGlWDA3RsOjoMHAAiYudotOmIdMxU1fPR9ascjgb7//Fj/+cguv45BQAAAA5fVVVVL32c96l0zr/fdacAgKnIx//2eQG1Wq1Wq9XHr26qxrvXLCJivblO/ZrBcPwAcMSsx2ddd4EOyb9ow4g42XUngJnW67oDHIrNrbXlXsq31zwepPHd87Ugu/Jf722vl9cfN52kfY3JtH6+NmIQL+zTnxen1IdZkvPvt/O/sdM+So877PynZb/86+080UF/upbzH7Tzbzk++ffH5l+qnP/wsfIfyB8AAAAAAGZY/vv/Ced/8yYDAAAAAAAAwJGzubW2nO97zef/vzzmce7/PJ5y/j35Fynn32/n37ogZ9CYv//2w/z/vbW2/PHqv76UpzOf/9xgVD/3XK8/GKZrfqq5d+NW3I6VOL/n8cNd7Rf2tM/tar84of3SnvZR3b6Y28/Gcvw6bsc7D9rnJ1wYtTChvZrQnvMf2P+LlPMfNr7q/JdSe681rd3/qL9nv29Oxz3Ptb/955W9e9f0bcTgwbY11dt3poP+bP+fPDOK395duXP29zdXV+9ciDTZtfRipMlTlvOfS185/1df3mnPv/eb++v9j0aPnf+s2Ijhvvm/3Jivt/e1KfetCzn/UfrK+ecj0Pj9/yjnv//+/3oH/QEAAAAAAAAAAAAAAIBHqapq+xbRaxFxNd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49f3VSN91aziIi/N9epXzP8Ydw3AwBm2X8j4p9dd4LOyL9g+fP+6ulXuu4MMFV3P/jwlzdv3165c7frngAAAAAAAAAA/688/ufpxvjP29cBtcaN3jX+69tx+siO/9kfDbbHOk8b9FI8evzvM/Ho8b+HE55vbkL7aEL7/IT2hQntY2/0aMj5v5QyzvmfShtW0vivr3bQn67l/M+ksZ5z/l9rPa6Zf/XXo5x/f1f+51bf/825ux98+Mat92++t/Leyq8unL96+dKVy5euXDn37q3bK+d3/u2wx4cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/V1It/7Lk/PPrPfmXJeef3/vIvyw5/9dSLf+y5Py/nmr5lyXn/3qq5V+WnP83Ui3/suT830i1/MuS8z+bavmXJed/LtXyL0vOP5/hkn9Zcv75ygb5lyXnfzHV8i9Lzv9SquVflpz/5VTLvyw5/yupln9Zcv5XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVTLvyw5/++mWv5lyfl/L9XyL0vO//upln9Zcv5vpVr+ZXn4+f9mzJgxk2e6/s0EAAAAAAAAAAAAALRN43LirrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI1d93wH87M1eGwJuuBMHbHMzsLC7voFDDCYJKSW9UBLSpiU1jr02Tnyrd81NqGwKbYmCVKT2gT40TaI0itRWoCpSU4lGSI3UvjVPjXiJWikPfoDKQUmlVIGtzsz///fM7HrOGnvwzPl/PpH9886cM/OfM2dm97vRdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotf7jM382VBRF+afx15qiuLD896piZ/nl/LbzvUIAAADgbL3T+PvvL04X7FzGTi3b/Ns1//HdhYWFheILb5949y8WFtIV64piZGVRNK6L/v0XP19o3SZ4rhgfGm75erji7kcqrh+tuH6s4voVFdevrLh+vOL6RQdgkVXN38c0buz6xj/XNA9pcWkx1rju+iX2em5o5fBw/F1Ow1Bjn4WxfcWB4mAxU0wt2meo8b+ieG19eV/3F/G+hlvua21RFCd/+syeuIahcIyvL9rurKH1uXvr3mLd2z99Zs+35968aqlZeRgWrbQoNm4o1/l8UZz6dVUxVKxMxySuc7hlnWuXWOdI2zqHGvuV/+5c58llrjM+7vGwzh92WefacNmT1xVFMV+cdptOzxXDxeqOe03He7x5RpS3UT6VHyxGz+g8Wb+M86Tc5yfXtZ8nnedkPP7rwzEZPc0aWp+Ot768YtFxf6/nSfmo++FcLW/7wfJOx8dbf7Xadq6W2zxzw+nPgSWfuyXOgXQut5wDG6rOgeEVI41zYPjUmje0nQPTi/YZLoYa93Xihu7nwOTcoaOTs089fduBQ7v3z+yfOTw9tW3L5q1bNm/dOrnvwMGZqebfZ3ZIB8jqYjidgxvCe008B2/q2Lb1lFz4xrl7HYz3yeugfOyfubFc0IXDxWnO8XKb5zee/esgfd9veR2MtrwOlnxPXeJ1MLqM10G5zcmNy/ueOdryZ6k19Oq9cE3LOXA+vx+W9/nIzad/L1wb1vXCLWf6/XBk0TkQH9ZQeO2Vl6Sf98bvDMdl8XlxdXnFBSuK47Mzx25/cvfc3LHpIoz3xSUtz1Xn+bK65TEVi86X4TM+X3b+3S9vvHqJy9eEYzV+a/fnqtxmy0T356rx7r708Wy7dFMRxjn2fh/Ppb6blcczZYkux7Pc5vnbzv5nwZRLWt7/xqre/0bGRpvvfyPpaIy1vf8tfmpGGisripO3Le/9byz8eb/f/y7tk/e/8lg9cnv3c6Dc5oXJMz0HRru+/10X5lBYz80hMYy35P53G9fPN0/Tluey8rwZHR0L581ovMf282bzon3KWyvve+PUeztvNl7X/ly1/dxSw/OmPFZ/OdX9vCm3eX367N87VsV/trx3rKg6B8ZGVpTrHUsnQfP9bmFVPAduL/YUR4qDxd60T/ksl/c1sWl558CK8Of9fu+4sk/OgfJYvbyp+zlQbvODzef2Z6eN4ZK0TcvPTp2/Xzhd5r969NTtdR62c535y3V+Ykv33w2V27y55UxzRvfjdGu45IIljlPn6+d05/Te4v05TleGdR7c2v13U+U2l25b5vm0syiKN6bfaPy+K/x+9x+P/+d3237vu9TvlN+YfuOByYd+dCbrBwDgvXu38ff8iubPmi3/j/Vy/v9/AAAAYCDE3D8cZiL/AwAAQG3E3D8SZiL/AwAAQG3E3D8aZpJJ/n/szu2vvPNskT4NcCGI18fD8ODdze1ix3s+fL1u4ZTy8o99a+yVrzy7vPseLorilw98aMntH7s7rqvpaFznR9ovX+TKa5d1/48+fGq71s9POLm9efvx8Sz3NIhd5dcmNzVud91T0435+gNFYz40/8Jzzdtvfh23P7G5uf1fhw8t2blvqG3/jWE914e5LnymzIM7Tx2Hcsb9Xll7zb9e8tlT9xf3G9pwUeNhvvxHzduNnxH10iXN7ePjPt36/+Wr33ml3P7JG5Ze/7PDS6//RLjdn4T5ix3N7VuP+Vda1v8nYf3x/uJ+t3/z+0uu/9Urmtu/Gs6Lr4fZuf57//zD7yz1fMX72XlXc794/1P/u6WxX7y9ePud6x9/drrteHTe/utvN29nx+M/G2ndPl4e7yd69K7283soPL9tPfKiKL7zp0XbcS4+2tzvnzvWH2/v6F1Lr//WjnUeHbq2sf+px7Om7XF97W83Lfl443p2/sOatsfz0n3h+L09+YPydk88FM7HcP3//bB5e52fZfrqfe3vN3H7r69pvm7j7U12rP+ljvXPX1seu+r13/92c/2v3rOybf07PxnOp/ubs2r9+//m4rb9v/Ht5vNx7ImJw0dmjx/Y23JUW1/HK8dXrb7gwg9cdHF4L+38eteRucdmjq2bWjdVFOsG8CMDe73+b4b5P80xf+7voelHP2uedy9+qvl966afN79+KVz+aHg+4/fHr/3VWNv52vm8z9/TnGe7/lvCOpbriq/+97XL2vDE5187/k9//GbnzwXx8Ry9bLzx+F5ef3njuqHXm9d3vl9V+a/L2l/XPx6daszvheO6ED6ZecPlzfvrvP342SQvfrr5+o0/ycX9i47PE1kz0v44znb9Pw4/x3z/yvb3v3h+fO/Zjk9zXlMMlUuYD+8PxXzz+rhVPN4vnrx8yfuLn8NTzF91Jss8rdmnZicPHjh8/MnJuZnZucnZp57edejI8cNzuxqfXbrri1X7n3p9r268vvfObNtSNF7tR5qjx873+o8+vGfvHVM37p3Zt/v4vrmHj84c279ndnbPzN7ZG3fv2zfzRNX+B/bumN60ffMdmyb2H9i7487t2zdvnzhw+Ei5jOaiKmyb+tLE4WO7GrvM7tiyfXrr1i1TE4eO7J3ZccfU1MTxqv0b35smyr0fnzg2c3D33IFDMxOzB56e2TG9fdu2TZWf/njo6L7ZdZPHjh+ePD47c2yy+VjWzTUuLr/3Ve1PHmaPhPe7DkPhp/PP3botfT5u6VtfPu1NNTdp//G0eCt8FlT8/lb1dcz9Y2EmmeR/AAAAyEHM/eGD/09dIf8DAABAbcTcvzLMRP4HAACA2oi5fzzMJJP8r/+v/6//r/+v/6//30v6//r/3ej/6/8P8vr1//X/qdZv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAAGoj5v4LwkzkfwAAAKiNmPsvDDPJJP/r/+v/6//r/+v/6//3kv6//n83+v/6/4O8fv1//X+q9Vv/P+b+D4SZZJL/AQAAIAcx918UZiL/AwAAQG3E3H9xmIn8DwAAALURc/+aMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+7/lTCTTPI/AAAA5CDm/g+Gmcj/AAAAUBsx918SZiL/AwAAQG3E3H9pmEkm+V//X/9f/1//X/9f/7+X9P/1/7vR/9f/H+T16//r/1Ot3/r/MfdfFmaSSf4HAACAHMTcf3mYifwPAAAAtRFz/xVhJvI/AAAA1EbM/VeGmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc/9VYSaZ5H8AAADIQcz9V4eZyP8AAABQGzH3fyjMRP4HAACA2oi5f22YSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x9384zCST/A8AAAA5iLn/mjAT+R8AAABqI+b+a8NM5H8AAACojZj714WZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z//owk0zyPwAAAOQg5v4NYSbyPwAAANRGzP3XhZnI/wAAAFAbMfdfH2aSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z9N4SZZJL/AQAAIAcx998YZiL/AwAAQG3E3H9TmIn8DwAAALURc//GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+6/Ocwkk/wPAAAAOYi5/5YwE/kfAAAAaiPm/lvDTOR/AAAAqI2Y+yfCTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+Puf+2MJNM8j8AAADkIOb+28NM5H8AAACojZj7J8NM5H8AAACojZj7p8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5fzrMJJP8DwAAADmIuX9TmIn8DwAAALURc//mMBP5HwAAAGoj5v4tYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9y/Ncwkk/wPAAAAOYi5f1uYifwPAAAAtRFz/x1hJvI/AAAA1EbM/XeGmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc//2MJNM8j8AAADkIOb+j4SZyP8AAABQGzH33xVmIv8DAABAbcTc/9Ewk0zyv/6//r/+v/6//r/+fy+d7/7/+Dm6H/3/Jv3/dvr/+v/6//r/dNdv/f+Y+3eEmWSS/wEAACAHMfffHWYi/wMAAEBtxNx/T5iJ/A8AAAC1EXP/zjCTTPK//r/+v/6//r/+v/5/L53v/v+5ov/fpP/fTv9f/1//X/+f7vqt/x9z/71hJpnkfwAAAMhBzP0fCzOR/wEAAKA2Yu7/eJiJ/A8AAAC1EXP/J8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/74wk0zyPwAAAOQg5v5PhpnI/wAAAFAbMff/apiJ/A8AAAC1EXP//WEmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/2thJpnkfwAAAMhBzP0PhJnI/wAAAFAbMfd/KsxE/gcAAIDaiLn/18NMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/zfCTDLJ/wAAAJCDmPt/M8xE/gcAAIDaiLn/t8JM5H8AAACojZj7HwwzyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/t8OM8kk/wMAAEAOYu5/KMxE/gcAAIDaiLn/02Em8j8AAADURsz9nwkzyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/ofDTDLJ/wAAAJCDmPs/G2Yi/wMAAEBtxNz/O2Em8j8AAADURsz9vxtmkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/Z8LM8kk/wMAAEAOYu7/vTAT+R8AAABqI+b+3w8zkf8BAACgNmLufyTMJJP8r/+v/6//r/+v/6//30v6//r/3ej/6/8P8vr1//X/qdZv/f+Y+z8fZpJJ/gcAAIAcxNz/B2Em8j8AAADURsz9u8JM5H8AAACojZj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/t1hJpnkfwAAAMhBzP1fCDOR/wEAAKA2Yu7fE2Yi/wMAAEBtxNy/N8wkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j7Z8JMMsn/AAAAkIOY+/eFmcj/AAAAUBsx9+8PM5H/AQAAoDZi7n8szCST/K//r/+v/6//r/+v/99L+v/6/93o/+v/D/L69f/1/6nWb/3/mPsPhJlkkv8BAAAgBzH3fzHMRP4HAACA2oi5/0thJvI/AAAA1EbM/QfDTDLJ/2fQ/19R6P+flv7/0uvX/9f/1//X/9f/1//vRv9f/3+Q16//r/9PtX7r/8fcfyjMJJP8DwAAADmIuf9wmIn8DwAAALURc/+RMBP5HwAAAGoj5v6jYSaZ5H///X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fc/4dhJpnkfwAAAMhBzP3HwkzkfwAAAKiNmPtnw0zkfwAAAKiNmPvnwkwyyf/6//r/+v/Z9P/TG5z+fzv9/97S/9f/70b/X/9/kNev/6//T7V+6//H3H88zCST/A8AAAA5iLn/8TAT+R8AAABqI+b+J8JM5H8AAACojZj7nwwzyST/6//r/+v/Z9P/99//1/8/L/T/9f+70f/X/x/k9ev/6/9Trd/6/zH3PxVmkkn+BwAAgBzE3P90mIn8DwD8P3t3zQPAkcNxtL7PfMzMzMzMzMzMzHdh5iJFbKeItFutMmO/17idaqV/8dMCAG3k7n9i3GL/AwAAQBu5+58UtwzZ//p//b/+X/+v/9f/X0n/r/8/ov/X/+/8fv2//p9zq/X/ufufHLcM2f8AAAAwQe7+p8Qt9j8AAAC0kbv/qXGL/Q8AAABt5O5/WtwyZP/r//X/+n/9v/5f/38l/b/+/4j+X/+/8/v1//p/zq3W/+fuf3rcMmT/AwAAwAS5+58Rt9j/AAAA0Ebu/mfGLfY/AAAAtJG7/1lxy5D9r//X/+v/9f/6f/3/lfT/+v8j+n/9/87v1//r/zm3Wv+fu//ZccuQ/Q8AAAAT5O5/Ttxi/wMAAEAbufufG7fY/wAAANBG7v7nxS1D9r/+X/+v/9f/6//1/1fS/+v/H/1qP5b+X/+/8/v1//p/zq3W/+fuf37cMmT/AwAAwAS5+18Qt9j/AAAA0Ebu/hfGLfY/AAAAtJG7/0Vxy5D9r//X/+v/9f/6f/3/lfT/+v8j+n/9/87vf9z6/yc8cvT/7GC1/j93/4vjliH7HwAAACbI3f+SuMX+BwAAgDZy9780brH/AQAAoI3c/S+LW4bsf/2//l//r//X/+v/r6T/1/8f0f/r/3d+v///6/85t1r/n7v/5XHLkP0PAAAAE+Tuf0XcYv8DAABAG7n7Xxm32P8AAADQRu7+V8UtQ/a//l//r//X/+v/9f9X0v/r/4/o//X/O79f/6//59xq/X/u/lfHLUP2PwAAAEyQu/81cYv9DwAAAG3k7n9t3GL/AwAAQBu5+18XtwzZ//p//b/+X/+v/9f/X0n/r/8/ov/X/+/8fv2//p9zq/X/uftfH7cM2f8AAAAwQe7+N8Qt9j8AAAC0kbv/jXGL/Q8AAABt5O5/U9wyZP/r//X/+n/9v/5f/38l/b/+/4j+X/+/8/v1//p/zq3W/+fuf3PcMmT/AwAAwAS5+98St9j/AAAA0Ebu/rfGLfY/AAAAtJG7/21xy5D9r//X/+v/9f/6f/3/lfT/+v8j+n/9/87v1//r/zm3Wv+fu//tccuQ/Q8AAAAT5O5/R9xi/wMAAEAbufvfGbfY/wAAANBG7v53xS1D9r/+X/+v/9f/6//1/1fS/+v/j+j/9f87v1//r//n3Gr9f+7+d8ctQ/Y/AAAATJC7/z1xi/0PAAAAbeTuf2/cYv8DAABAG7n73xe3DNn/+n/9v/5f/6//1/9fSf+v/z+i/9f/7/x+/b/+n3Or9f+5+98ftwzZ/wAAADBB7v4PxC32PwAAALSRu/+DcYv9DwAAAG3k7v9Q3DJk/+v/9f/6f/2//l//fyX9v/7/iP5f/7/z+/X/+n/Ordb/5+7/cNwyZP8DAADABLn7PxK32P8AAADQRu7+j8Yt9j8AAAC0kbv/Y3HLkP2v/9f/6//1//p//f+V9P/6/yP6f/3/zu/X/+v/Obda/5+7/+Nxy5D9DwAAABPk7v9E3GL/AwAAQBu5+z8Zt9j/AAAA0Ebu/k/FLUP2v/5f/6//1//r//X/V9L/6/+P6P/1/zu/X/+v/+fcav1/7v5Pxy1D9j8AAABMkLv/M3GL/Q8AAABt5O7/bNxi/wMAAEAbufs/F7cM2f/6f/2//l//r//X/19J/6//P6L/1//v/H79v/6fc6v1/7n7Px+3DNn/AAAAMEHu/i/ELfY/AAAAtJG7/4txi/0PAAAAbeTu/1LcMmT/6//1//p//b/+X/9/Jf2//v+I/l//v/P79f/6f86t1v/n7v9y3DJk/wMAAMAEufu/ErfY/wAAANBG7v6vxi32PwAAALSRu/9rccuQ/a//1//r//X/+n/9/5X0//r/I/p//f/O79f/6/85t1r/n7v/63HLkP0PAAAAE+Tu/0bcYv8DAABAG7n7vxm32P8AAADQRu7+b8UtQ/a//l//r//X/+v/9f9X0v/r/4/o//X/O79f/6//59xq/X/u/m/HLUP2PwAAAEyQu/87cYv9DwAAAG3k7v9u3GL/AwAAQBu5+78XtwzZ//p//b/+X/+v/9f/X0n/r/8/ov/X/+/8fv2//p9zq/X/ufu/H7cM2f8AAAAwQe7+H8Qt9j8AAAC0kbv/h3GL/Q8AAABt5O7/UdwyZP/r//X/+n/9v/5f/38l/b/+/4j+X/+/8/v1//p/zq3W/+fu/3HcMmT/AwAAwAS5+38St9j/AAAA0Ebu/p/GLfY/AAAAtJG7/2dxy5D9r//X/+v/9f/6f/3/lfT/+v8j+n/9/87v1//r/zm3Wv+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/6//1/1fS/+v/j+j/9f87v1//r//n3Gr9f+7+X8ctQ/Y/AAAATJC7/zdxi/0PAAAAbeTu/23cYv8DAABAG7n7fxe3DNn/+n/9v/5f/6//1/9fSf+v/z+i/9f/7/x+/b/+n3Or9f+5+38ftwzZ/wAAADBB7v4/xC32PwAAALSRu/+PcYv9DwAAAG3k7v9T3DJk/+v/9f/6f/2//l//fyX9v/7/iP5f/7/z+/X/+n/Ordb/5+7/c9wyZP8DAADABLn7/xK32P8AAADQRu7+v8Yt9j8AAAC0kbv/b3HLkP2v/9f/6//1//p//f+V9P/6/yP6f/3/zu/X/+v/Obda/5+7/+9xy5D9DwAAABPk7v9H3GL/AwAAQBu5+/8Zt9j/AAAA0Ebu/n/FLUP2v/5f/6//1//r//X/V9L/6/+P6P/1/zu/X/+v/+fcav1/7v5/xy1D9j8AAABMkLv/P3GL/Q8AAABt5O7/b9xi/wMAAEAbufv/F7cM2f/6f/2//l//r//X/19J/6//P6L/1//v/H79v/6fc6v1/7n7/x+3DNn/AAAAMEHu/hviFvsfAAAA2sjdf2PcYv8DAABAG7n7b4pbhux//b/+X/+v/9f/6/+vpP/X/x/R/+v/d36//l//z7nV+v/c/TfHLUP2PwAAAEyQu/+WuMX+BwAAgDZy998at9j/AAAA0Ebu/tviliH7X/+v/9f/6//1//r/K+n/9f9H9P/6/53fr//X/3Nutf4/d//tccuQ/Q8AAAAT5O6/I26x/wEAAKCN3P13xi32PwAAALSRu/+uuGXI/tf/6//1//p//b/+/0r6f/3/Ef2//n/n9+v/9f+cW63/z91/d9wyZP8DAADABLn774lb7H8AAABoI3f/vXGL/Q8AAABt5O6/L24Zsv/1//p//b/+X/+v/7+S/l//f0T/r//f+f36f/0/51br/3P33x+3DNn/AAAAMEHu/gfiFvsfAAAA2sjd/2DcYv8DAABAG7n7H4pbhux//b/+X/+v/9f/6/+vpP/X/x/R/+v/d36//l//z7nV+v/c/Q8HAAD//1hEP40=") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x1000001, 0x0) getdents64(r0, 0x0, 0x0) 863.232556ms ago: executing program 8 (id=3303): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 363.983191ms ago: executing program 0 (id=3304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 21.90604ms ago: executing program 0 (id=3305): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 0s ago: executing program 8 (id=3306): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) kernel console output (not intermixed with test programs): lly initialized and connected. [ 425.838062][ T10] usb 7-1: Manufacturer: syz [ 425.846231][ T24] usb 3-1: USB disconnect, device number 24 [ 425.871725][ T10] usb 7-1: SerialNumber: syz [ 425.921860][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 426.027790][T10649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 426.220633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 426.452032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 426.463032][ T10] usb 7-1: 0:2 : does not exist [ 426.526788][ T10] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 426.557835][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 426.593802][ T10] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 426.601028][T12964] loop4: detected capacity change from 0 to 1024 [ 426.622451][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 426.685437][T12964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.725769][ T10] usb 7-1: USB disconnect, device number 11 [ 426.870511][ T30] audit: type=1800 audit(2000000089.068:230): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2627" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 426.966527][T12973] loop7: detected capacity change from 0 to 1024 [ 427.042307][T12973] EXT4-fs: Ignoring removed oldalloc option [ 427.091058][T12973] EXT4-fs: Ignoring removed bh option [ 427.110726][ T10] kernel read not supported for file /video7 (pid: 10 comm: kworker/0:1) [ 427.162639][T12973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.273500][T12964] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4182: comm syz.4.2627: Allocating blocks 497-513 which overlap fs metadata [ 427.494327][T10649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.501564][T12962] EXT4-fs (loop4): pa ffff8880793aa658: logic 32, phys. 161, len 22 [ 427.512539][T12962] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5433: group 0, free 0, pa_free 1 [ 427.753129][T11627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.394315][T13005] netlink: 844 bytes leftover after parsing attributes in process `syz.6.2643'. [ 428.848387][T12987] loop2: detected capacity change from 0 to 32768 [ 428.906347][T13020] loop6: detected capacity change from 0 to 256 [ 428.916828][T12987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2634 (12987) [ 428.970968][T12987] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13 [ 428.999260][T13024] loop4: detected capacity change from 0 to 512 [ 429.054475][T13020] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 429.117593][T13024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.147496][T13024] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.303422][T13024] EXT4-fs error (device loop4): ext4_get_first_dir_block:3533: inode #12: comm syz.4.2652: Attempting to read directory block (0) that is past i_size (3) [ 429.515829][T11627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.220946][ T5887] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 431.237038][T13066] loop6: detected capacity change from 0 to 512 [ 431.559867][T13066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.696764][T13066] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.761679][T13073] cgroup: Unknown subsys name 'cpuset' [ 431.969470][T13075] loop7: detected capacity change from 0 to 512 [ 432.018279][T13066] EXT4-fs error (device loop6): ext4_get_first_dir_block:3533: inode #12: comm syz.6.2670: Attempting to read directory block (0) that is past i_size (3) [ 432.074915][T13075] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 432.487239][T10383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.722576][T13054] loop4: detected capacity change from 0 to 262144 [ 432.741014][T13054] F2FS-fs (loop4): invalid crc value [ 432.860426][T13054] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 432.872123][T13054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 433.206613][T13060] loop2: detected capacity change from 0 to 32768 [ 433.270036][T13097] loop7: detected capacity change from 0 to 2048 [ 433.355541][T13103] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.398816][ T30] audit: type=1800 audit(2000000095.598:231): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2685" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 433.467243][T13103] NILFS (loop7): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0 [ 433.506753][T13103] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=16) [ 433.560749][T13103] Remounting filesystem read-only [ 433.708771][T10649] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 434.662871][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 435.630674][ T5872] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.801001][ T919] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 435.815136][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.868634][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.911071][ T5872] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 435.920132][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.991154][ T5872] usb 3-1: config 0 descriptor?? [ 436.000571][ T919] usb 8-1: Using ep0 maxpacket: 32 [ 436.009878][ T919] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 436.059149][ T919] usb 8-1: config 0 has no interface number 0 [ 436.130977][ T919] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 436.163186][ T919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.193357][ T919] usb 8-1: Product: syz [ 436.197558][ T919] usb 8-1: Manufacturer: syz [ 436.233881][ T919] usb 8-1: SerialNumber: syz [ 436.265162][ T919] usb 8-1: config 0 descriptor?? [ 436.293003][ T919] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 436.471033][ T5872] hid_mf 0003:0079:1846.0020: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 436.485842][ T919] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 436.520807][ T5872] hid_mf 0003:0079:1846.0020: Invalid report, this should never happen! [ 436.529186][ T5872] hid_mf 0003:0079:1846.0020: Force feedback init failed. [ 436.570722][ T919] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 436.676086][ T5872] usb 3-1: USB disconnect, device number 25 [ 436.942511][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 436.960791][ T919] usb 8-1: USB disconnect, device number 10 [ 436.997948][ T919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 437.051307][ T919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 437.083944][ T919] quatech2 8-1:0.51: device disconnected [ 437.477572][T13169] loop2: detected capacity change from 0 to 2048 [ 437.588587][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 438.531447][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2731'. [ 439.243481][T13218] loop7: detected capacity change from 0 to 128 [ 439.348101][ T30] audit: type=1800 audit(2000000101.548:232): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2737" name="file1" dev="loop7" ino=1048718 res=0 errno=0 [ 439.541275][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 439.564844][T13223] syz.7.2737: attempt to access beyond end of device [ 439.564844][T13223] loop7: rw=0, sector=121, nr_sectors = 8 limit=128 [ 439.630691][ T919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 439.717007][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 439.739309][T11089] kworker/u8:30: attempt to access beyond end of device [ 439.739309][T11089] loop7: rw=1, sector=129, nr_sectors = 912 limit=128 [ 439.753467][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 439.775597][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.800642][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 439.813882][ T919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.836738][ T919] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 439.846193][ T24] usb 7-1: Product: syz [ 439.860617][ T24] usb 7-1: Manufacturer: syz [ 439.865335][ T919] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 439.874865][ T24] usb 7-1: SerialNumber: syz [ 439.890819][ T24] usb 7-1: config 0 descriptor?? [ 439.895992][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.922518][ T24] usb 7-1: selecting invalid altsetting 0 [ 439.931643][ T919] usb 1-1: config 0 descriptor?? [ 440.251318][ T5840] usb 7-1: USB disconnect, device number 12 [ 440.496713][T13239] loop2: detected capacity change from 0 to 512 [ 440.589862][ T919] Bluetooth: Can't get version to change to load ram patch err [ 440.600586][ T919] Bluetooth: Loading sysconfig file failed [ 440.606423][ T919] ath3k 1-1:0.0: probe with driver ath3k failed with error -32 [ 440.651099][ T919] usb 1-1: USB disconnect, device number 11 [ 440.771063][ T6000] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 440.920627][ T6000] usb 8-1: Using ep0 maxpacket: 16 [ 440.933828][ T6000] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 440.944348][ T6000] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.968344][ T6000] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 440.978809][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.010147][ T6000] usb 8-1: Product: syz [ 441.030357][ T6000] usb 8-1: Manufacturer: syz [ 441.039472][ T6000] usb 8-1: SerialNumber: syz [ 441.430573][ T5872] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 441.474824][ T6000] usb 8-1: 0:2 : does not exist [ 441.521316][ T6000] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 441.567863][ T6000] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 441.621181][ T5872] usb 3-1: config 0 has no interfaces? [ 441.632451][ T6000] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 441.669738][ T5872] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 441.693815][ T6000] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 441.710337][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 441.748551][ T5872] usb 3-1: Product: syz [ 441.758237][ T5872] usb 3-1: Manufacturer: syz [ 441.778470][ T5872] usb 3-1: SerialNumber: syz [ 441.807959][ T5872] usb 3-1: config 0 descriptor?? [ 441.833951][ T6000] usb 8-1: USB disconnect, device number 11 [ 442.078060][ T5840] usb 3-1: USB disconnect, device number 26 [ 442.578686][T13287] sctp: [Deprecated]: syz.3.2769 (pid 13287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.578686][T13287] Use struct sctp_sack_info instead [ 442.714240][T13289] loop7: detected capacity change from 0 to 4096 [ 442.901918][T13289] overlayfs: upper fs does not support tmpfile. [ 442.952146][T13289] overlayfs: workdir/#15 already exists [ 443.100907][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 443.224502][T13308] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2776'. [ 443.292358][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.336204][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.356592][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.406134][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.426335][T13313] raw_sendmsg: syz.4.2779 forgot to set AF_INET. Fix it! [ 443.441147][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.472510][T13312] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2777'. [ 443.474009][ T10] usb 3-1: config 0 descriptor?? [ 443.931167][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.029542][T13323] loop7: detected capacity change from 0 to 16 [ 444.107229][T13323] erofs (device loop7): mounted with root inode @ nid 36. [ 444.186680][T13323] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 444.291201][T13323] erofs (device loop7): failed to decompress -29 in[58, 4038] out[1851] [ 444.300052][T13323] erofs (device loop7): read error -117 @ 43 of nid 36 [ 444.430847][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.438283][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.460508][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.467914][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.490497][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.511773][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.519177][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.557776][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.565267][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 444.621010][ T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 444.666133][T13331] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2788'. [ 444.673951][ T10] usb 3-1: USB disconnect, device number 27 [ 444.696034][T13331] ip6gretap0: entered promiscuous mode [ 444.716462][T13331] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2788'. [ 445.064792][T13339] loop4: detected capacity change from 0 to 512 [ 445.139900][T13339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.162105][T13339] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.176757][T13349] loop7: detected capacity change from 0 to 1024 [ 445.182078][T13347] netlink: 'syz.0.2794': attribute type 15 has an invalid length. [ 445.230697][ T919] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 445.236521][T13349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.393471][ T919] usb 3-1: Using ep0 maxpacket: 8 [ 445.418297][ T919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 445.439488][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.473023][T11627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.490402][ T919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 445.501629][ T919] pvrusb2: ********** [ 445.505726][ T919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 445.519862][T10649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.534103][ T919] pvrusb2: Important functionality might not be entirely working. [ 445.545656][ T919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 445.578506][ T919] pvrusb2: ********** [ 445.702561][ T2339] pvrusb2: Invalid write control endpoint [ 445.961947][ T919] usb 3-1: USB disconnect, device number 28 [ 445.968587][ T2339] pvrusb2: Invalid write control endpoint [ 445.999691][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 446.019199][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 446.045745][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 446.071973][ T2339] pvrusb2: Device being rendered inoperable [ 446.088175][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 446.108361][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 446.131479][ T2339] pvrusb2: Attached sub-driver cx25840 [ 446.147142][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 446.192550][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 446.322333][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 446.514722][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 446.544682][ T10] usb 8-1: config 0 has no interfaces? [ 446.583749][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.600552][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.628967][ T10] usb 8-1: Product: syz [ 446.639112][ T10] usb 8-1: Manufacturer: syz [ 446.647691][T13383] loop6: detected capacity change from 0 to 256 [ 446.669497][ T10] usb 8-1: SerialNumber: syz [ 446.691049][ T10] usb 8-1: config 0 descriptor?? [ 446.826495][T13383] FAT-fs (loop6): Directory bread(block 64) failed [ 446.850941][T13383] FAT-fs (loop6): Directory bread(block 65) failed [ 446.857560][T13383] FAT-fs (loop6): Directory bread(block 66) failed [ 446.870605][T13383] FAT-fs (loop6): Directory bread(block 67) failed [ 446.879054][T13362] loop4: detected capacity change from 0 to 32768 [ 446.902022][T13383] FAT-fs (loop6): Directory bread(block 68) failed [ 446.922661][T13383] FAT-fs (loop6): Directory bread(block 69) failed [ 446.940102][T13383] FAT-fs (loop6): Directory bread(block 70) failed [ 446.955901][T13383] FAT-fs (loop6): Directory bread(block 71) failed [ 447.005506][T13383] FAT-fs (loop6): Directory bread(block 72) failed [ 447.023590][T13383] FAT-fs (loop6): Directory bread(block 73) failed [ 447.114138][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.133192][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.173251][ T10] usb 8-1: USB disconnect, device number 12 [ 447.179104][T13391] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2814'. [ 448.140171][T13415] loop6: detected capacity change from 0 to 1024 [ 448.195509][T13415] EXT4-fs: Ignoring removed nobh option [ 448.250601][T13415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.333350][T13415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.588668][T10383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.040576][ T919] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 449.207010][T13447] loop2: detected capacity change from 0 to 256 [ 449.263736][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 449.272785][ T919] usb 1-1: config 0 has no interfaces? [ 449.278513][ T919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.298352][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.328910][ T919] usb 1-1: config 0 descriptor?? [ 449.591392][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.622999][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.677973][ T919] usb 1-1: USB disconnect, device number 12 [ 449.711304][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.723642][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.844052][T13470] loop2: detected capacity change from 0 to 128 [ 449.991631][ T5840] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 450.120536][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 450.160726][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 450.168149][ T5840] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 450.187106][ T5840] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 450.205790][ T5840] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 450.229612][ T5840] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 450.247289][ T5840] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 450.259115][ T5840] usb 7-1: config 0 has no interface number 0 [ 450.270664][ T5840] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 450.300596][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.311644][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 450.325134][ T5840] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 450.335594][ T5840] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.346608][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 450.355360][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 450.364723][ T5840] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.391045][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.421766][ T5840] usb 7-1: config 0 interface 125 has no altsetting 0 [ 450.428692][ T5840] usb 7-1: config 0 interface 125 has no altsetting 2 [ 450.437789][ T24] usb 1-1: config 0 descriptor?? [ 450.449899][ T24] yurex 1-1:0.0: Could not submitting URB [ 450.455847][ T5840] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 450.465222][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.481051][ T24] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 450.490101][ T5840] usb 7-1: Product: syz [ 450.500868][ T5840] usb 7-1: Manufacturer: syz [ 450.505504][ T5840] usb 7-1: SerialNumber: syz [ 450.525428][ T5840] usb 7-1: config 0 descriptor?? [ 450.553102][ T5840] usb 7-1: selecting invalid altsetting 2 [ 450.630732][ T7089] jfs_flush_journal: synclist not empty [ 450.637346][ T7089] metapage: ffff888059a37aa8: 00001000 00000000 00003938 00000000 [ 450.645574][ T7089] metapage: ffff888059a37ab8: 59a37ca8 ffff8880 2a08d228 ffff8880 [ 450.666522][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 450.673818][ T7089] metapage: ffff888059a37ac8: 00000004 00000000 00000000 00000000 [ 450.681285][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 450.690593][ T7089] metapage: ffff888059a37ad8: 79754000 ffff8880 0000002d 00000000 [ 450.705360][ T24] usb 1-1: USB disconnect, device number 13 [ 450.706054][ T7089] metapage: ffff888059a37ae8: 00000000 dead4ead ffffffff 00000000 [ 450.724856][ T7089] metapage: ffff888059a37af8: ffffffff ffffffff 9af38860 ffffffff [ 450.734636][T13476] loop2: detected capacity change from 0 to 32768 [ 450.742071][ T7089] metapage: ffff888059a37b08: 95e387a8 ffffffff 00000000 00000000 [ 450.758557][ T7089] metapage: ffff888059a37b18: 8bedc220 ffffffff 00000300 00000000 [ 450.769403][T13476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2849 (13476) [ 450.783000][ T7089] metapage: ffff888059a37b28: 59a37b28 ffff8880 59a37b28 ffff8880 [ 450.796823][T13476] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13 [ 450.805960][ T7089] metapage: ffff888059a37b38: 01e5d500 ffffea00 2a4aa000 ffff8880 [ 450.814109][ T7089] metapage: ffff888059a37b48: 00001000 00003e24 00000000 00000000 [ 450.822710][ T7089] metapage: ffff888059a37b58: 2a08d000 ffff8880 [ 450.829159][ T7089] page: ffffea0001e5d500: 00fff2000000403c ffffea0001398808 [ 450.851341][ T7089] page: ffffea0001e5d510: ffffea00015062c8 0000000000000000 [ 450.858778][ T7089] page: ffffea0001e5d520: 000000000000002d ffff888059a37aa8 [ 450.866937][ T7089] page: ffffea0001e5d530: 00000001ffffffff ffff88801caf9a00 [ 450.874938][ T7089] metapage: ffff888059a37c98: 00001000 00000000 00003cb0 00000000 [ 450.882994][ T7089] metapage: ffff888059a37ca8: 59a379c0 ffff8880 59a37ab8 ffff8880 [ 450.890981][ T7089] metapage: ffff888059a37cb8: 00000004 00000000 00000000 00000000 [ 450.898988][ T7089] metapage: ffff888059a37cc8: 27f8f000 ffff8880 00000030 00000000 [ 450.907086][ T7089] metapage: ffff888059a37cd8: 00000000 dead4ead ffffffff 00000000 [ 450.915112][ T7089] metapage: ffff888059a37ce8: ffffffff ffffffff 9af38860 ffffffff [ 450.923137][ T7089] metapage: ffff888059a37cf8: 95e387a8 ffffffff 00000000 00000000 [ 450.931262][ T7089] metapage: ffff888059a37d08: 8bedc220 ffffffff 00000300 00000000 [ 450.939202][ T7089] metapage: ffff888059a37d18: 59a37d18 ffff8880 59a37d18 ffff8880 [ 450.947951][ T7089] metapage: ffff888059a37d28: 009fe3c0 ffffea00 2a4aa000 ffff8880 [ 450.957323][ T7089] metapage: ffff888059a37d38: 00001000 00003e24 00000000 00000000 [ 450.970653][ T7089] metapage: ffff888059a37d48: 2a08d000 ffff8880 [ 450.990845][ T7089] page: ffffea00009fe3c0: 00fff2800000403c ffffea0001f33408 [ 450.998205][ T7089] page: ffffea00009fe3d0: ffffea0001616948 0000000000000000 [ 451.019058][ T7089] page: ffffea00009fe3e0: 0000000000000030 ffff888059a37c98 [ 451.029954][ T7089] page: ffffea00009fe3f0: 00000001ffffffff ffff88801caf9a00 [ 451.049484][ T7089] metapage: ffff888059a379b0: 00001000 00000000 00003d58 00000000 [ 451.059647][ T7089] metapage: ffff888059a379c0: 2a08d228 ffff8880 59a37ca8 ffff8880 [ 451.069766][ T7089] metapage: ffff888059a379d0: 00000004 00000000 00000000 00000000 [ 451.077839][ T7089] metapage: ffff888059a379e0: 7ccd0000 ffff8880 0000001c 00000000 [ 451.085755][ T7089] metapage: ffff888059a379f0: 00000000 dead4ead ffffffff 00000000 [ 451.093761][ T7089] metapage: ffff888059a37a00: ffffffff ffffffff 9af38860 ffffffff [ 451.104757][ T7089] metapage: ffff888059a37a10: 95e387a8 ffffffff 00000000 00000000 [ 451.112779][ T7089] metapage: ffff888059a37a20: 8bedc220 ffffffff 00000300 00000000 [ 451.120683][ T7089] metapage: ffff888059a37a30: 59a37a30 ffff8880 59a37a30 ffff8880 [ 451.128533][ T7089] metapage: ffff888059a37a40: 01f33400 ffffea00 2a4aa000 ffff8880 [ 451.136538][ T7089] metapage: ffff888059a37a50: 00001000 00003e24 00000000 00000000 [ 451.146813][ T7089] metapage: ffff888059a37a60: 2a08d000 ffff8880 [ 451.165356][ T7089] page: ffffea0001f33400: 00fff2800000403c ffffea00014fa008 [ 451.179027][ T7089] page: ffffea0001f33410: ffffea00009fe3c8 0000000000000000 [ 451.188693][ T7089] page: ffffea0001f33420: 000000000000001c ffff888059a379b0 [ 451.196294][ T7089] page: ffffea0001f33430: 00000001ffffffff ffff88801caf9a00 [ 451.697439][ T5840] usb 7-1: USB disconnect, device number 13 [ 451.910678][ T5952] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 451.957422][T13499] loop2: detected capacity change from 0 to 8192 [ 452.091650][ T5952] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.102192][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 452.108831][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 452.128160][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.140529][ T5872] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 452.150716][ T5952] usb 1-1: config 0 descriptor?? [ 452.309538][T13503] loop2: detected capacity change from 0 to 4096 [ 452.323361][ T5872] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.336531][ T5872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.357668][ T5872] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.399389][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.420749][ T5872] usb 8-1: SerialNumber: syz [ 452.605388][ T5952] lg-g15 0003:046D:C225.0022: item fetching failed at offset 0/2 [ 452.637279][ T5952] lg-g15 0003:046D:C225.0022: probe with driver lg-g15 failed with error -22 [ 452.656726][T11082] bridge_slave_1: left allmulticast mode [ 452.660570][ T5872] usb 8-1: 0:2 : does not exist [ 452.665208][T11082] bridge_slave_1: left promiscuous mode [ 452.703391][ T5872] usb 8-1: USB disconnect, device number 13 [ 452.709971][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.772960][T11082] bridge_slave_0: left allmulticast mode [ 452.778651][T11082] bridge_slave_0: left promiscuous mode [ 452.810468][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.842148][ T5870] usb 1-1: USB disconnect, device number 14 [ 453.215260][ T919] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 453.370622][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 453.412037][ T919] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.438684][ T919] usb 7-1: config 0 has no interface number 0 [ 453.465557][ T919] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.496144][ T919] usb 7-1: config 0 interface 85 has no altsetting 0 [ 453.544721][ T919] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 453.563972][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.599916][ T919] usb 7-1: Product: syz [ 453.623002][ T919] usb 7-1: Manufacturer: syz [ 453.642703][ T919] usb 7-1: SerialNumber: syz [ 453.681661][ T919] usb 7-1: config 0 descriptor?? [ 453.858764][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 453.881984][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 453.892005][T13527] ceph: No mds server is up or the cluster is laggy [ 453.910994][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 453.917848][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 454.295083][T11082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.317961][ T919] appletouch 7-1:0.85: Geyser mode initialized. [ 454.335303][ T919] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input36 [ 454.363846][T11082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.405560][T11082] bond0 (unregistering): (slave bond1): Releasing backup interface [ 454.422738][T11082] bond0 (unregistering): Released all slaves [ 454.521084][ T6000] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 454.560086][ T5952] usb 7-1: USB disconnect, device number 14 [ 454.593646][ T5952] appletouch 7-1:0.85: input: appletouch disconnected [ 454.683453][T11082] bond1 (unregistering): Released all slaves [ 454.703489][ T6000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.741062][ T6000] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.749980][ T6000] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.799756][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.817781][T11082] tipc: Left network mode [ 454.846116][ T6000] usb 1-1: config 0 descriptor?? [ 454.869656][ T6000] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.900428][ T6000] dvb-usb: bulk message failed: -22 (3/0) [ 454.910935][T13538] loop2: detected capacity change from 0 to 32768 [ 454.914536][ T6000] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.942125][ T6000] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 454.950369][ T6000] usb 1-1: media controller created [ 454.974169][ T6000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.015990][ T6000] dvb-usb: bulk message failed: -22 (6/0) [ 455.021904][ T6000] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.033561][ T6000] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 455.072157][ T6000] dvb-usb: schedule remote query interval to 150 msecs. [ 455.079619][T13540] dibusb: i2c wr: len=61 is too big! [ 455.079619][T13540] [ 455.093918][ T6000] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.125550][ T6000] usb 1-1: USB disconnect, device number 15 [ 455.211734][ T6000] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.235425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 455.384422][T11082] hsr_slave_0: left promiscuous mode [ 455.397847][T11082] hsr_slave_1: left promiscuous mode [ 455.413773][T11082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.442596][T11082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.453332][T11082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.470572][T11082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.499368][T13551] loop7: detected capacity change from 0 to 4096 [ 455.511371][T13551] EXT4-fs (loop7): Test dummy encryption mode enabled [ 455.535113][T11082] veth1_macvtap: left promiscuous mode [ 455.541936][T11082] veth0_macvtap: left promiscuous mode [ 455.548237][T11082] veth1_vlan: left promiscuous mode [ 455.553715][T13551] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 455.562236][T13551] System zones: 0-5 [ 455.566710][T11082] veth0_vlan: left promiscuous mode [ 455.576617][T13551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.701392][T10649] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.856576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 456.168260][T13569] loop7: detected capacity change from 0 to 512 [ 456.229567][T13569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.246061][T13569] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.444748][T10649] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 456.476403][T10649] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 456.675329][T11082] team0 (unregistering): Port device team_slave_1 removed [ 456.739696][T11082] team0 (unregistering): Port device team_slave_0 removed [ 457.530600][ T6000] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 457.609959][T13574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.713047][ T6000] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 457.742615][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.791140][ T6000] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 457.815911][ T6000] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 457.850779][ T6000] usb 1-1: Manufacturer: syz [ 457.871738][ T6000] usb 1-1: config 0 descriptor?? [ 458.096784][ T6000] rc_core: IR keymap rc-hauppauge not found [ 458.109663][ T6000] Registered IR keymap rc-empty [ 458.136102][ T6000] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 458.173082][ T6000] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 458.290645][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 458.314562][T11082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.483367][ C1] igorplugusb 1-1:0.0: receive overflow, at least 3 lost [ 458.493308][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.531007][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 458.540390][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 458.570746][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.583433][T11082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.602110][ T24] usb 4-1: config 0 descriptor?? [ 458.622616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 458.626897][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 458.647723][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 458.670725][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 458.690315][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 458.694471][ T5872] usb 1-1: USB disconnect, device number 16 [ 458.719699][ T24] usb 4-1: media controller created [ 458.727189][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.770086][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 458.780621][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 458.808533][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 458.854681][T13593] dibusb: i2c wr: len=61 is too big! [ 458.854681][T13593] [ 458.866363][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 458.881975][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 458.910841][ T24] usb 4-1: USB disconnect, device number 21 [ 458.998372][T11082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.010702][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.197571][T11082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.302354][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.333281][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.342486][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.368614][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.377658][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.734737][T11082] bridge_slave_1: left allmulticast mode [ 459.740599][T11082] bridge_slave_1: left promiscuous mode [ 459.761019][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.815520][T11082] bridge_slave_0: left allmulticast mode [ 459.821499][T11082] bridge_slave_0: left promiscuous mode [ 459.827272][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.932592][T13616] loop3: detected capacity change from 0 to 512 [ 460.072286][T13616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.117757][T13616] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.166653][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.244803][T13603] loop6: detected capacity change from 0 to 32768 [ 460.279144][T13603] btrfs: Deprecated parameter 'usebackuproot' [ 460.295110][T13603] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 460.337302][T13603] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 73334ac3-b375-4f56-a198-0eff4c7b8edb [ 460.395365][T13603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2905 (13603) [ 460.427359][T13603] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.437961][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.463099][T13603] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 460.482180][T13603] BTRFS info (device loop6): disk space caching is enabled [ 460.490295][T13603] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 460.702834][T11089] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 460.777384][T13603] BTRFS error (device loop6): failed to load root extent [ 460.804858][T13603] BTRFS warning (device loop6): try to load backup roots slot 1 [ 460.842600][T11075] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 460.903302][T13603] BTRFS warning (device loop6): couldn't read tree root [ 460.910430][T13603] BTRFS warning (device loop6): try to load backup roots slot 2 [ 460.936519][T11441] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 460.950574][T13603] BTRFS warning (device loop6): couldn't read tree root [ 460.960611][T13603] BTRFS warning (device loop6): try to load backup roots slot 3 [ 461.033303][T13603] BTRFS info (device loop6): rebuilding free space tree [ 461.139703][T13603] BTRFS info (device loop6): disabling free space tree [ 461.157466][T13603] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 461.177686][T13603] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 461.440234][T10383] BTRFS info (device loop6): last unmount of filesystem 73334ac3-b375-4f56-a198-0eff4c7b8edb [ 461.461323][ T51] Bluetooth: hci0: command tx timeout [ 461.983777][T11082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.050733][T11082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.072569][T11082] bond0 (unregistering): Released all slaves [ 462.280800][ T6000] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 462.383371][T13604] chnl_net:caif_netlink_parms(): no params data found [ 462.442513][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.455159][ T6000] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.464358][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.472599][ T919] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 462.488059][T11082] hsr_slave_0: left promiscuous mode [ 462.489520][ T6000] usb 3-1: config 0 descriptor?? [ 462.503777][T11082] hsr_slave_1: left promiscuous mode [ 462.518586][T11082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.527516][T11082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.540649][T11082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.548043][T11082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.587869][T11082] veth1_macvtap: left promiscuous mode [ 462.593720][T11082] veth0_macvtap: left promiscuous mode [ 462.599446][T11082] veth1_vlan: left promiscuous mode [ 462.605646][T11082] veth0_vlan: left promiscuous mode [ 462.630964][ T919] usb 7-1: Using ep0 maxpacket: 16 [ 462.644416][ T919] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.675391][ T919] usb 7-1: config 0 has no interface number 0 [ 462.691869][ T919] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.727447][ T919] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 462.756852][ T919] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.773017][ T919] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.790649][ T919] usb 7-1: Product: syz [ 462.798373][ T919] usb 7-1: SerialNumber: syz [ 462.814417][ T919] usb 7-1: config 0 descriptor?? [ 462.834744][ T919] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 462.894366][ T919] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input40 [ 462.940721][ T6000] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 462.996088][ T6000] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input41 [ 463.081686][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 463.213674][ T6000] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 463.541172][ T51] Bluetooth: hci0: command tx timeout [ 463.696534][ T6000] usb 7-1: USB disconnect, device number 15 [ 463.709943][ T6000] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 463.728722][ T5887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.743371][ T5887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.751423][ T5887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.759707][ T5887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.767580][ T5887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.985416][ T5872] usb 3-1: USB disconnect, device number 29 [ 464.082856][ T5870] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 464.284649][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.296667][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.297788][T11082] team0 (unregistering): Port device team_slave_1 removed [ 464.313784][ T5870] usb 1-1: Product: syz [ 464.318021][ T5870] usb 1-1: Manufacturer: syz [ 464.326176][ T5870] usb 1-1: SerialNumber: syz [ 464.362482][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.372118][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.381213][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.390268][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.399361][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.408452][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.417557][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.426645][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.435728][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.444843][T13686] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 464.853518][T13690] loop2: detected capacity change from 0 to 64 [ 464.874610][T11082] team0 (unregistering): Port device team_slave_0 removed [ 465.385077][ T5870] cdc_ncm 1-1:1.0: failed to get mac address [ 465.396544][ T5870] cdc_ncm 1-1:1.0: bind() failure [ 465.430713][ T5870] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 465.446581][ T5870] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 465.471883][ T5870] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 465.534168][ T5870] usb 1-1: USB disconnect, device number 17 [ 465.620870][ T5887] Bluetooth: hci0: command tx timeout [ 465.861148][ T5887] Bluetooth: hci3: command tx timeout [ 466.014589][T13692] loop6: detected capacity change from 0 to 32768 [ 466.039669][T13704] binder: 13703:13704 ioctl c0306201 2000000003c0 returned -14 [ 466.116631][T13692] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 466.176062][T13692] XFS (loop6): Ending clean mount [ 466.188392][T13692] XFS (loop6): Quotacheck needed: Please wait. [ 466.281908][T13692] XFS (loop6): Quotacheck: Done. [ 466.338640][T13692] XFS (loop6): User initiated shutdown received. [ 466.360821][T13692] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x160/0x190 (fs/xfs/xfs_fsops.c:475). Shutting down filesystem. [ 466.384670][T13692] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 466.473652][T10383] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 466.768361][T13725] loop2: detected capacity change from 0 to 512 [ 466.903373][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.922799][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.930023][T13604] bridge_slave_0: entered allmulticast mode [ 466.973017][T13604] bridge_slave_0: entered promiscuous mode [ 467.026354][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.062910][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.070164][T13604] bridge_slave_1: entered allmulticast mode [ 467.102892][T13604] bridge_slave_1: entered promiscuous mode [ 467.352087][T13736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.387266][T13736] bond0: (slave rose0): Enslaving as an active interface with an up link [ 467.440658][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 467.464477][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.580293][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.701137][ T5887] Bluetooth: hci0: command tx timeout [ 467.758984][T11082] IPVS: stop unused estimator thread 0... [ 467.829122][T13604] team0: Port device team_slave_0 added [ 467.871122][T13604] team0: Port device team_slave_1 added [ 467.949407][ T5887] Bluetooth: hci3: command tx timeout [ 467.982403][T13747] loop2: detected capacity change from 0 to 32768 [ 468.095110][T13604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.130763][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.157691][T13604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.173807][T13604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.179480][T13756] loop3: detected capacity change from 0 to 1024 [ 468.180787][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.180840][T13604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.213412][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.232645][T13756] EXT4-fs: inline encryption not supported [ 468.238568][T13756] EXT4-fs: Ignoring removed bh option [ 468.296097][T13756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.456688][T13756] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4182: comm syz.3.2955: Allocating blocks 385-513 which overlap fs metadata [ 468.473783][T13604] hsr_slave_0: entered promiscuous mode [ 468.489888][T13604] hsr_slave_1: entered promiscuous mode [ 468.496713][T13756] EXT4-fs (loop3): Remounting filesystem read-only [ 468.517711][T13604] debugfs: 'hsr0' already exists in 'hsr' [ 468.530719][T13604] Cannot create hsr debugfs directory [ 468.544472][T13754] EXT4-fs (loop3): pa ffff8880793aa910: logic 16, phys. 129, len 24 [ 468.705215][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.795898][T13764] loop2: detected capacity change from 0 to 4096 [ 469.004996][T13764] loop2: detected capacity change from 0 to 1024 [ 469.209413][T13676] chnl_net:caif_netlink_parms(): no params data found [ 469.395506][T13604] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.417179][T13604] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.460985][ T24] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 469.600962][T13604] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.622821][T13604] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.793235][T13604] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.824045][T13794] misc userio: Invalid payload size [ 469.863504][T13604] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.020909][ T5887] Bluetooth: hci3: command tx timeout [ 470.066893][T13604] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.110937][T13604] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.176008][T13676] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.213921][T13676] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.250804][T13676] bridge_slave_0: entered allmulticast mode [ 470.279314][T13676] bridge_slave_0: entered promiscuous mode [ 470.309097][T13676] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.341450][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.369074][T13676] bridge_slave_1: entered allmulticast mode [ 470.389764][T13676] bridge_slave_1: entered promiscuous mode [ 470.402646][T13782] loop6: detected capacity change from 0 to 32768 [ 470.433032][T13782] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 34beb2d0-6d99-40fd-bd17-c18c96f35682 [ 470.473048][T13782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2964 (13782) [ 470.595817][T13782] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.636516][T13782] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 470.646434][T13676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.676549][T13782] BTRFS info (device loop6): using free-space-tree [ 470.697346][T13676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.046762][T13676] team0: Port device team_slave_0 added [ 471.084297][T13676] team0: Port device team_slave_1 added [ 471.165650][T10383] BTRFS info (device loop6): last unmount of filesystem 34beb2d0-6d99-40fd-bd17-c18c96f35682 [ 471.341523][T13802] loop3: detected capacity change from 0 to 32768 [ 471.357341][T13829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2977'. [ 471.385695][T13802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2971 (13802) [ 471.609243][T13831] loop2: detected capacity change from 0 to 32768 [ 471.648715][T13831] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13 [ 471.686600][T13802] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.814416][T13802] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 471.834031][T13802] BTRFS info (device loop3): using free-space-tree [ 471.975861][T13676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.990908][T13676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.040793][T13676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.100847][ T5887] Bluetooth: hci3: command tx timeout [ 472.109178][T13676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.159318][T13676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.300673][T13676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.355059][T13604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.415855][T13604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.451345][T11687] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 472.656271][T13676] hsr_slave_0: entered promiscuous mode [ 472.671857][T13676] hsr_slave_1: entered promiscuous mode [ 472.686416][T13676] debugfs: 'hsr0' already exists in 'hsr' [ 472.702834][T13676] Cannot create hsr debugfs directory [ 472.716285][T13604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.840245][T13604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.985269][ T30] audit: type=1326 audit(2000000135.178:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.0.2986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d01f8ebe9 code=0x0 [ 473.136365][T13841] loop2: detected capacity change from 0 to 32768 [ 473.161051][T13841] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13 [ 473.476937][T13604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.589867][T13604] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.663152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.670340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.744388][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.751606][T11090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.773061][T13841] loop2: detected capacity change from 0 to 1764 [ 473.905328][T13841] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 474.052473][T13880] /dev/loop0: Can't open blockdev [ 474.126054][T13676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.198038][T13676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 474.291265][T13676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 474.317887][T13876] loop6: detected capacity change from 0 to 32768 [ 474.360159][T13676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 474.391276][T13885] loop4: detected capacity change from 32768 to 32685 [ 474.449924][T13876] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 474.462969][T13887] loop4: detected capacity change from 32685 to 32768 [ 474.713622][T13676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.726546][T13897] loop2: detected capacity change from 0 to 1024 [ 474.758255][T13676] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.835495][T10383] ocfs2: Unmounting device (7,6) on (node local) [ 474.836453][T11090] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.849008][T11090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.962445][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.969666][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.248253][T13604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.401192][ T5952] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 475.469641][T13604] veth0_vlan: entered promiscuous mode [ 475.532216][T13604] veth1_vlan: entered promiscuous mode [ 475.560517][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 475.584387][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 475.600557][ T5952] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 475.637692][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.690098][ T5952] usb 3-1: config 0 descriptor?? [ 475.702882][T13604] veth0_macvtap: entered promiscuous mode [ 475.764476][T13604] veth1_macvtap: entered promiscuous mode [ 475.838417][T13604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.894583][T13604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.019282][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.051328][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.060077][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.125966][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.153513][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.154006][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.387743][T13676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.448616][ T5951] usb 3-1: USB disconnect, device number 30 [ 476.472130][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.480043][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.591992][T11082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.599854][T11082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.770572][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 476.947155][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.984096][ T5870] IPVS: starting estimator thread 0... [ 476.991243][T13926] net_ratelimit: 3319 callbacks suppressed [ 476.991269][T13926] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.004223][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 477.050835][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.082584][ T24] usb 1-1: config 0 descriptor?? [ 477.090806][T13931] IPVS: using max 21 ests per chain, 50400 per kthread [ 477.534250][ T24] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 477.615757][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0025/input/input43 [ 477.636340][T13676] veth0_vlan: entered promiscuous mode [ 477.698913][T13676] veth1_vlan: entered promiscuous mode [ 477.772185][ T24] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 477.856276][T13676] veth0_macvtap: entered promiscuous mode [ 477.898061][T13676] veth1_macvtap: entered promiscuous mode [ 477.977804][T13676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.033626][T13676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.115161][T11290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.146180][T11290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.210880][T11290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.260357][T11290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.622805][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.647550][ T919] usb 1-1: USB disconnect, device number 18 [ 478.661395][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.804109][T11090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.839437][T11090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.890550][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 479.072817][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.108129][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.139691][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.160805][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.174305][ T5952] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 479.192668][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.206231][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.230151][ T10] usb 7-1: config 0 descriptor?? [ 479.333143][T13977] loop3: detected capacity change from 0 to 4096 [ 479.341091][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 479.357175][T13977] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.357843][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.384186][T13977] EXT4-fs (loop3): Test dummy encryption mode enabled [ 479.426624][T13977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.439598][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.483807][T13977] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 479.497152][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.580552][ T5952] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 479.589659][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.645489][ T5952] usb 2-1: config 0 descriptor?? [ 479.685674][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.737107][ T10] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 480.043792][T14000] loop3: detected capacity change from 0 to 512 [ 480.051009][ T10] usb 7-1: USB disconnect, device number 16 [ 480.068967][T14000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.103658][T14000] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.131742][ T5952] ryos 0003:1E7D:31CE.0027: bogus close delimiter [ 480.140545][ T5952] ryos 0003:1E7D:31CE.0027: item 0 4 2 10 parsing failed [ 480.148502][ T5952] ryos 0003:1E7D:31CE.0027: parse failed [ 480.157219][ T5952] ryos 0003:1E7D:31CE.0027: probe with driver ryos failed with error -22 [ 480.207354][ T30] audit: type=1326 audit(2000000142.408:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.229737][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.292556][ T30] audit: type=1326 audit(2000000142.408:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.314921][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.322207][ T30] audit: type=1326 audit(2000000142.408:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.344550][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.398516][ T5870] usb 2-1: USB disconnect, device number 15 [ 480.409359][ T30] audit: type=1326 audit(2000000142.408:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.487849][ T30] audit: type=1326 audit(2000000142.408:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.531548][ T30] audit: type=1326 audit(2000000142.408:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.532956][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.566728][ T30] audit: type=1326 audit(2000000142.408:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.594550][ T919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 480.594555][ T30] audit: type=1326 audit(2000000142.408:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.594633][ T30] audit: type=1326 audit(2000000142.408:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.647530][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.749679][ T30] audit: type=1326 audit(2000000142.408:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.8.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45cd8ebe9 code=0x7fc00000 [ 480.760636][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 480.822650][ T919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.855654][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.904328][ T919] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.930986][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.954851][ T919] usb 1-1: Product: syz [ 480.959032][ T919] usb 1-1: Manufacturer: syz [ 481.010820][ T919] usb 1-1: SerialNumber: syz [ 481.034334][ T919] usb 1-1: config 0 descriptor?? [ 481.064540][ T919] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.090597][ T919] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 481.198676][ T5952] kernel read not supported for file /input/mouse0 (pid: 5952 comm: kworker/0:5) [ 481.477046][T14030] loop3: detected capacity change from 0 to 2048 [ 481.508366][T14030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.686625][ T919] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 481.706261][T14030] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.3045: bit already cleared for inode 15 [ 481.715402][ T919] em28xx 1-1:0.0: Config register raw data: 0x41 [ 481.903781][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.924164][T13921] usb 1-1: USB disconnect, device number 19 [ 481.949750][T13921] em28xx 1-1:0.0: Disconnecting em28xx [ 481.966204][T13921] em28xx 1-1:0.0: Freeing device [ 482.120568][ T919] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 482.200242][T14054] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 482.225151][T11090] Bluetooth: hci7: Frame reassembly failed (-84) [ 482.280595][ T919] usb 3-1: Using ep0 maxpacket: 8 [ 482.294480][ T919] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 482.307615][ T919] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 482.318271][ T919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.331127][ T919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.348426][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.368351][ T919] usb 3-1: Product: syz [ 482.377049][ T919] usb 3-1: Manufacturer: syz [ 482.390597][ T919] usb 3-1: SerialNumber: syz [ 483.034129][ T919] usb 3-1: 0:2 : does not exist [ 483.138670][T14062] netlink: 'syz.1.3058': attribute type 10 has an invalid length. [ 483.148276][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3058'. [ 483.157989][T14062] dummy0: entered promiscuous mode [ 483.163422][T14062] dummy0: entered allmulticast mode [ 483.173698][T14062] bridge0: port 3(dummy0) entered blocking state [ 483.180341][T14062] bridge0: port 3(dummy0) entered disabled state [ 483.190616][T14062] bridge0: port 3(dummy0) entered blocking state [ 483.197201][T14062] bridge0: port 3(dummy0) entered forwarding state [ 483.242045][ T5870] usb 3-1: USB disconnect, device number 31 [ 484.262691][ T5869] Bluetooth: hci7: command 0x1003 tx timeout [ 484.271755][ T5887] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 484.349917][ T5952] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 484.419524][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 484.420844][ T51] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 484.436085][ T5887] Bluetooth: hci8: command 0x1003 tx timeout [ 484.530664][ T5952] usb 7-1: Using ep0 maxpacket: 16 [ 484.558726][ T5952] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 484.580868][ T5952] usb 7-1: config 0 has no interface number 0 [ 484.586994][ T5952] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.610825][ T919] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 484.679017][ T5952] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.701511][ T5952] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 484.720639][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 484.764734][ T5952] usb 7-1: Product: syz [ 484.769813][ T5952] usb 7-1: SerialNumber: syz [ 484.780814][ T919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.786104][ T5952] usb 7-1: config 0 descriptor?? [ 484.810281][ T5952] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 484.820940][ T919] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.854890][ T5952] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input45 [ 484.860391][ T919] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.916038][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.952598][T14094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 484.966932][ T919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.151745][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 485.207046][ T919] usb 1-1: USB disconnect, device number 20 [ 485.340909][T14123] loop8: detected capacity change from 0 to 128 [ 485.373282][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.382848][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.390087][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.397290][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.404469][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.409849][T14123] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.411756][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.427976][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.435160][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.442437][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.449597][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 485.482390][ T5870] usb 7-1: USB disconnect, device number 17 [ 485.488368][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 485.509736][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.510728][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 485.531832][ T5870] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 485.693613][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.706132][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.730630][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.760623][ T919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 485.795622][ T24] usb 4-1: config 0 descriptor?? [ 485.941989][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 485.948370][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 485.948393][ T30] audit: type=1326 audit(2000000148.148:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14129 comm="syz.0.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d01f8ebe9 code=0x0 [ 485.951774][ T919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.003202][ T919] usb 2-1: config 0 has no interface number 0 [ 486.010090][ T919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.030856][ T919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.081112][ T919] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 486.091080][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.113571][ T919] usb 2-1: config 0 descriptor?? [ 486.244792][ T24] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 486.260145][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0028/input/input46 [ 486.362832][T14143] input: syz1 as /devices/virtual/input/input47 [ 486.404241][ T24] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 486.759516][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.834018][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.903105][ T919] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0029/input/input48 [ 486.957771][ T919] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0029/input/input49 [ 487.014663][ T919] uclogic 0003:28BD:0071.0029: input,hidraw1: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 487.139137][ T5870] usb 4-1: USB disconnect, device number 22 [ 487.198258][ T919] usb 2-1: USB disconnect, device number 16 [ 487.355401][T14139] loop6: detected capacity change from 0 to 32768 [ 487.388609][T14139] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.419861][T14139] XFS (loop6): Ending clean mount [ 487.495704][T10383] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.720592][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 487.903717][ T10] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 487.930927][ T10] usb 1-1: config 4 has no interface number 0 [ 487.957388][ T10] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 487.990867][ T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 488.010147][T14184] loop6: detected capacity change from 0 to 64 [ 488.017311][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.049143][ T10] usb 1-1: Product: syz [ 488.070761][ T10] usb 1-1: Manufacturer: syz [ 488.093403][ T10] usb 1-1: SerialNumber: syz [ 488.468003][T14193] syzkaller1: entered promiscuous mode [ 488.473760][T14193] syzkaller1: entered allmulticast mode [ 488.526257][ T5952] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 488.551037][ T10] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 488.571219][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 488.580381][ T10] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 488.600751][ T10] usb 1-1: media controller created [ 488.610121][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.733715][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 488.747947][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.784872][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.820487][ T5952] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 488.829558][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.860624][ T10] DVB: Unable to find symbol dib7000p_attach() [ 488.866789][ T10] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 488.890371][T14183] loop8: detected capacity change from 0 to 40427 [ 488.898304][T14183] F2FS-fs: heap/no_heap options were deprecated [ 488.907139][T14183] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 488.914852][T14183] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 488.921546][ T5952] usb 3-1: config 0 descriptor?? [ 488.931710][T14183] F2FS-fs (loop8): build fault injection type: 0x0 [ 488.964330][T14183] F2FS-fs (loop8): invalid crc value [ 489.022184][T14198] loop3: detected capacity change from 0 to 2048 [ 489.029850][T14198] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.107330][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 489.133143][T14198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.149569][ T10] Registered IR keymap rc-empty [ 489.164405][ T10] dvb-usb: could not initialize remote control. [ 489.176705][T14183] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 489.191667][T14183] F2FS-fs (loop8): Try to recover 1th superblock, ret: -30 [ 489.198980][ T10] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 489.236700][T14183] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 489.258230][ T10] dib0700: There's no endpoint for remote controller [ 489.275242][ T5870] Process accounting resumed [ 489.298240][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm kworker/u8:3: bg 0: block 234: padding at end of block bitmap is not set [ 489.332427][ T37] EXT4-fs (loop3): Remounting filesystem read-only [ 489.368949][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 489.386168][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 489.419519][ T5952] usb 3-1: USB disconnect, device number 32 [ 489.519326][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.521810][ T919] usb 1-1: USB disconnect, device number 21 [ 489.600822][ T919] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 489.638425][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3124'. [ 490.437370][T14220] loop3: detected capacity change from 0 to 32768 [ 490.445576][ T5951] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 490.523447][T14220] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 490.532568][T14220] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 490.550243][T14220] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 490.561122][T13921] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 490.567898][T13921] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 490.600639][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 490.626935][T14222] loop2: detected capacity change from 0 to 32768 [ 490.629668][T14225] loop6: detected capacity change from 0 to 1024 [ 490.650381][ T5951] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 490.691828][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.741813][T14225] hfsplus: failed to load catalog file [ 490.764585][ T5951] pvrusb2: Hardware description: Terratec Grabster AV400 [ 490.818381][T14228] loop8: detected capacity change from 0 to 512 [ 490.834520][ T5951] pvrusb2: ********** [ 490.862551][ T5951] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 490.865219][T14228] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.882932][ T5951] pvrusb2: Important functionality might not be entirely working. [ 490.906024][T14228] EXT4-fs: inline encryption not supported [ 490.906436][T13921] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 338ms [ 490.922241][T14228] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.947506][ T5951] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 490.950525][T14228] EXT4-fs (loop8): Test dummy encryption mode enabled [ 490.968572][T13921] gfs2: fsid=syz:syz.0: jid=0: Done [ 490.974189][ T5951] pvrusb2: ********** [ 490.978872][T14220] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 490.995116][T14232] loop2: detected capacity change from 0 to 1024 [ 491.010514][ T2339] pvrusb2: Invalid write control endpoint [ 491.026844][T14228] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 491.144081][T14228] EXT4-fs (loop8): 1 truncate cleaned up [ 491.192930][T14228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.236711][ T2339] pvrusb2: Invalid write control endpoint [ 491.262600][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 491.327721][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 491.335437][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 491.359057][T13676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.360826][ T2339] pvrusb2: Device being rendered inoperable [ 491.391209][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 491.398650][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 491.430581][ T2339] pvrusb2: Attached sub-driver cx25840 [ 491.436766][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 491.480613][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 491.572216][T14238] loop6: detected capacity change from 0 to 4096 [ 491.739106][ T10] usb 2-1: USB disconnect, device number 17 [ 491.821097][T14238] ntfs3(loop6): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 491.848943][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.157683][T14255] serio: Serial port pty21 [ 493.546073][T14279] loop6: detected capacity change from 0 to 4096 [ 493.766518][T14284] 9pnet: p9_errstr2errno: server reported unknown error ¯@cāīĮ^ ą³7 [ 493.798275][T14285] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 493.807655][T14285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.815559][T14285] IPv6: NLM_F_CREATE should be set when creating new route [ 493.822850][T14285] IPv6: NLM_F_CREATE should be set when creating new route [ 493.834340][T14285] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 493.843028][T14285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.088964][T14261] loop2: detected capacity change from 0 to 32768 [ 494.318053][T14300] loop3: detected capacity change from 0 to 2048 [ 494.541381][T14300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.638297][T14300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 494.680068][T14300] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 17 with max blocks 1 with error 28 [ 494.725671][T14300] EXT4-fs (loop3): This should not happen!! Data will be lost [ 494.725671][T14300] [ 494.735529][T14300] EXT4-fs (loop3): Total free blocks count 0 [ 494.741910][T14300] EXT4-fs (loop3): Free/Dirty block details [ 494.747984][T14300] EXT4-fs (loop3): free_blocks=2415919104 [ 494.753902][T14300] EXT4-fs (loop3): dirty_blocks=16 [ 494.760350][T14300] EXT4-fs (loop3): Block reservation details [ 494.775891][T14300] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 494.935652][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.095268][T14314] binder: 14313:14314 ioctl c018620c 200000000040 returned -1 [ 495.476543][T14326] netlink: 'syz.1.3167': attribute type 1 has an invalid length. [ 495.493939][T14326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3167'. [ 495.546130][T14328] loop3: detected capacity change from 0 to 128 [ 495.575486][T14328] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 495.632586][T14328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.800032][T14332] loop8: detected capacity change from 0 to 256 [ 495.826227][T14332] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.856748][T14332] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 495.926354][T14332] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 496.092012][ T30] audit: type=1800 audit(2000000158.298:251): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3148" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 496.336046][T14344] Bluetooth: MGMT ver 1.23 [ 496.394435][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 496.633997][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.644406][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 496.678204][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.729847][ T10] usb 3-1: config 0 descriptor?? [ 496.758996][T14350] loop3: detected capacity change from 0 to 1024 [ 496.775887][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 496.840036][T14350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.852070][T14358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.885629][ T30] audit: type=1800 audit(2000000159.088:252): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3181" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 497.061337][ T5952] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 497.201243][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 497.254084][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.274836][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.298353][ T5952] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 497.322725][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.371772][ T5952] usb 2-1: config 0 descriptor?? [ 497.490347][T14371] syzkaller1: entered promiscuous mode [ 497.497386][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3191'. [ 497.499235][T11687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.517086][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3191'. [ 497.523118][T14371] syzkaller1: entered allmulticast mode [ 497.529299][T14375] netlink: 'syz.6.3191': attribute type 6 has an invalid length. [ 497.557054][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3191'. [ 497.617582][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 497.625979][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 497.634750][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 497.656430][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 497.680321][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 497.687920][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 497.702929][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 497.717686][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 497.724925][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 497.748848][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 497.755562][T11079] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.769912][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 497.776717][T11079] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.797245][T11079] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.797442][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 497.819171][ T5952] hid_parser_main: 28 callbacks suppressed [ 497.819201][ T5952] isku 0003:1E7D:319C.002A: unknown main item tag 0x0 [ 497.832423][T11079] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.844460][ T5952] isku 0003:1E7D:319C.002A: unknown main item tag 0x0 [ 497.851593][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 497.864064][ T5952] isku 0003:1E7D:319C.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 497.878868][ T10] pwc: Registered as video103. [ 497.886257][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 497.908075][ T10] usb 3-1: USB disconnect, device number 33 [ 498.000575][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 498.015319][ T5952] isku 0003:1E7D:319C.002A: couldn't init struct isku_device [ 498.023042][ T5952] isku 0003:1E7D:319C.002A: couldn't install keyboard [ 498.045296][ T5952] isku 0003:1E7D:319C.002A: probe with driver isku failed with error -71 [ 498.069246][ T5952] usb 2-1: USB disconnect, device number 18 [ 498.174042][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.203146][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.232827][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.279136][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.301644][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.332023][ T9] usb 4-1: Product: syz [ 498.336205][ T9] usb 4-1: Manufacturer: syz [ 498.355690][ T9] usb 4-1: SerialNumber: syz [ 498.367850][T14392] loop2: detected capacity change from 0 to 512 [ 498.479866][T14394] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 498.510722][T14394] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 498.930767][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 499.053813][T14408] 9pnet: p9_errstr2errno: server reported unknown error ¯@c˙˙˙˙˙˙˙˙D†üB‘…0xffffffffffffffff [ 499.141042][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 499.187404][T14400] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3202'. [ 499.266644][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 499.296668][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 499.323373][ T10] usb 1-1: can't read configurations, error -71 [ 499.429004][ T9] cdc_ncm 4-1:1.0: bind() failure [ 499.454510][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 499.493391][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 499.528954][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 499.568978][ T9] usb 4-1: USB disconnect, device number 23 [ 500.553366][T14430] vlan2: entered promiscuous mode [ 500.570571][T14430] bridge0: entered promiscuous mode [ 500.586205][T14430] vlan2: entered allmulticast mode [ 500.611135][T14430] bridge0: entered allmulticast mode [ 500.855331][T14411] loop6: detected capacity change from 0 to 32768 [ 500.899909][T14411] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 55caf6d5-d306-43c1-b79b-1ca41e174609 [ 500.980078][T14411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3208 (14411) [ 501.055127][T14441] input: syz1 as /devices/virtual/input/input52 [ 501.076773][ T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 501.084567][T14411] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 501.084663][T14411] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 501.146623][T14411] BTRFS info (device loop6): using free-space-tree [ 501.305386][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 501.373924][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 501.444500][ T9] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 501.517276][ T9] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.645009][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 501.710059][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 501.767566][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.846652][ T9] usb 1-1: Product: syz [ 501.871700][ T9] usb 1-1: Manufacturer: syz [ 501.915746][ T9] usb 1-1: SerialNumber: syz [ 501.935540][T14437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.994930][T14411] BTRFS info (device loop6): rebuilding free space tree [ 502.204304][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input53 [ 502.425509][T10383] BTRFS info (device loop6): last unmount of filesystem 55caf6d5-d306-43c1-b79b-1ca41e174609 [ 502.479901][T14483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.783138][ T5210] bcm5974 1-1:1.0: could not read from device [ 502.806084][ T9] usb 1-1: USB disconnect, device number 24 [ 502.814641][ T5210] bcm5974 1-1:1.0: could not read from device [ 502.817938][T14488] input: syz1 as /devices/virtual/input/input54 [ 503.414562][T11079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.463534][ T5951] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 503.601082][T14498] loop3: detected capacity change from 0 to 40427 [ 503.668781][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 503.691056][ T5951] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 503.699164][ T5951] usb 2-1: config 0 has no interface number 0 [ 503.729687][T11079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.752726][T14498] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 503.766240][T14498] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 503.767031][ T5951] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 503.826463][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.841367][T11687] syz-executor: attempt to access beyond end of device [ 503.841367][T11687] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 503.855705][ T5951] usb 2-1: Product: syz [ 503.859875][ T5951] usb 2-1: Manufacturer: syz [ 503.880856][T11687] CPU: 0 UID: 0 PID: 11687 Comm: syz-executor Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 503.880908][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.880932][T11687] Call Trace: [ 503.880945][T11687] [ 503.880959][T11687] dump_stack_lvl+0x16c/0x1f0 [ 503.881026][T11687] f2fs_handle_critical_error+0x624/0x9f0 [ 503.881073][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.881121][T11687] ? f2fs_build_fault_attr+0x53/0x1f0 [ 503.881195][T11687] f2fs_write_end_io+0x958/0xcf0 [ 503.881247][T11687] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 503.881298][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.881355][T11687] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 503.881398][T11687] bio_endio+0x70d/0x850 [ 503.881453][T11687] submit_bio_noacct+0x306/0x1eb0 [ 503.881529][T11687] __submit_merged_bio+0x33c/0x770 [ 503.881581][T11687] __submit_merged_write_cond+0x319/0x3f0 [ 503.881640][T11687] f2fs_write_cache_pages+0x2067/0x2570 [ 503.881724][T11687] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 503.881786][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.881832][T11687] ? __lock_acquire+0x62e/0x1ce0 [ 503.881903][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.881949][T11687] ? __lock_acquire+0x62e/0x1ce0 [ 503.882099][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.882154][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.882208][T11687] f2fs_write_data_pages+0x4ad/0xd90 [ 503.882272][T11687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.882324][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.882382][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.882433][T11687] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.882491][T11687] do_writepages+0x27a/0x600 [ 503.882549][T11687] ? __pfx_do_writepages+0x10/0x10 [ 503.882595][T11687] ? do_raw_spin_unlock+0x172/0x230 [ 503.882639][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.882685][T11687] ? _raw_spin_unlock+0x28/0x50 [ 503.882752][T11687] filemap_fdatawrite_wbc+0x104/0x160 [ 503.882807][T11687] __filemap_fdatawrite_range+0xb9/0x100 [ 503.882872][T11687] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 503.883001][T11687] ? find_held_lock+0x2b/0x80 [ 503.883052][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883097][T11687] ? do_raw_spin_unlock+0x172/0x230 [ 503.883140][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883192][T11687] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 503.883271][T11687] block_operations+0x2b0/0xfe0 [ 503.883332][T11687] ? __pfx___schedule+0x10/0x10 [ 503.883373][T11687] ? __pfx_block_operations+0x10/0x10 [ 503.883485][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883531][T11687] ? down_write+0x14d/0x200 [ 503.883577][T11687] ? __pfx_down_write+0x10/0x10 [ 503.883627][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883673][T11687] ? rcu_is_watching+0x12/0xc0 [ 503.883729][T11687] f2fs_write_checkpoint+0x2b8/0x4c60 [ 503.883794][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883840][T11687] ? kfree+0x2b4/0x4d0 [ 503.883884][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883927][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.883966][T11687] ? rcu_is_watching+0x12/0xc0 [ 503.884017][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.884058][T11687] ? kthread_stop+0x273/0x630 [ 503.884095][T11687] kill_f2fs_super+0x3c2/0x470 [ 503.884147][T11687] ? __pfx_kill_f2fs_super+0x10/0x10 [ 503.884198][T11687] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.884252][T11687] deactivate_locked_super+0xc1/0x1a0 [ 503.884305][T11687] deactivate_super+0xde/0x100 [ 503.884357][T11687] cleanup_mnt+0x225/0x450 [ 503.884413][T11687] task_work_run+0x150/0x240 [ 503.884457][T11687] ? __pfx_task_work_run+0x10/0x10 [ 503.884497][T11687] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.884546][T11687] ? __pfx___x64_sys_umount+0x10/0x10 [ 503.884594][T11687] exit_to_user_mode_loop+0xeb/0x110 [ 503.884638][T11687] do_syscall_64+0x3f6/0x4c0 [ 503.884687][T11687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.884725][T11687] RIP: 0033:0x7fcfb6f8ff17 [ 503.884755][T11687] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 503.884793][T11687] RSP: 002b:00007ffc79be6ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 503.884830][T11687] RAX: 0000000000000000 RBX: 00007fcfb7011c05 RCX: 00007fcfb6f8ff17 [ 503.884855][T11687] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc79be6d60 [ 503.884880][T11687] RBP: 00007ffc79be6d60 R08: 0000000000000000 R09: 0000000000000000 [ 503.884904][T11687] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc79be7df0 [ 503.884929][T11687] R13: 00007fcfb7011c05 R14: 000000000007afe9 R15: 00007ffc79be7e30 [ 503.884979][T11687] [ 503.886529][T11687] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 503.897795][ T5951] usb 2-1: SerialNumber: syz [ 504.379118][ T5951] usb 2-1: config 0 descriptor?? [ 504.395948][ T5951] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 504.420820][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 504.434800][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.435713][ T5863] jfs_flush_journal: synclist not empty [ 504.450893][ T5951] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 504.458930][ T5951] usb 2-1: media controller created [ 504.494404][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.505866][T11079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.520557][ T5863] metapage: ffff8880578bee88: 00001000 00000000 00003938 00000000 [ 504.528386][ T5863] metapage: ffff8880578bee98: 578beab8 ffff8880 7a531228 ffff8880 [ 504.569391][ T5951] cxusb: set interface failed [ 504.594289][T14496] cxusb: i2c rd: len=133 is too big! [ 504.594289][T14496] [ 504.624268][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 504.770529][ T5863] metapage: ffff8880578beea8: 00000004 00000000 00000000 00000000 [ 504.844803][ T5863] metapage: ffff8880578beeb8: 29d9a000 ffff8880 0000002d 00000000 [ 504.875913][ T5951] DVB: Unable to find symbol lgdt330x_attach() [ 504.894915][ T5951] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 504.915373][ T5863] metapage: ffff8880578beec8: 00000000 dead4ead ffffffff 00000000 [ 504.930892][ T5863] metapage: ffff8880578beed8: ffffffff ffffffff 9af38860 ffffffff [ 504.948272][ T5863] metapage: ffff8880578beee8: 95e387a8 ffffffff 00000000 00000000 [ 504.989622][ T5863] metapage: ffff8880578beef8: 8bedc220 ffffffff 00000300 00000000 [ 505.020159][ T5863] metapage: ffff8880578bef08: 578bef08 ffff8880 578bef08 ffff8880 [ 505.047316][T11079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.082064][ T5863] metapage: ffff8880578bef18: 00a76680 ffffea00 2bfb6000 ffff8880 [ 505.134607][ T5863] metapage: ffff8880578bef28: 00001000 00003e24 00000000 00000000 [ 505.160513][ T5951] rc_core: IR keymap rc-dvico-portable not found [ 505.173204][ T5951] Registered IR keymap rc-empty [ 505.180381][ T5863] metapage: ffff8880578bef38: 7a531000 ffff8880 [ 505.199508][ T5951] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 505.219216][T14520] tipc: Started in network mode [ 505.235431][ T5863] page: ffffea0000a76680: 00fff2000000403c ffffea000086da88 [ 505.253161][ T5951] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input55 [ 505.269143][T14520] tipc: Node identity 4, cluster identity 4711 [ 505.285179][ T5863] page: ffffea0000a76690: ffffea0000df9a08 0000000000000000 [ 505.310842][ T5951] dvb-usb: schedule remote query interval to 100 msecs. [ 505.329644][T14520] tipc: Node number set to 4 [ 505.340685][ T5863] page: ffffea0000a766a0: 000000000000002d ffff8880578bee88 [ 505.370804][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 505.395952][ T5951] usb 2-1: USB disconnect, device number 19 [ 505.446231][ T5863] page: ffffea0000a766b0: 00000001ffffffff ffff888030420d00 [ 505.476586][ T5887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 505.498526][ T5887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 505.510580][ T5887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 505.545064][ T5887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 505.554684][ T5863] metapage: ffff8880578beaa8: 00001000 00000000 00003cb0 00000000 [ 505.570871][ T5887] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 505.594128][ T5863] metapage: ffff8880578beab8: 58c8e010 ffff8880 578bee98 ffff8880 [ 505.603132][ T5863] metapage: ffff8880578beac8: 00000004 00000000 00000000 00000000 [ 505.612708][ T5863] metapage: ffff8880578bead8: 52632000 ffff8880 00000030 00000000 [ 505.620876][ T5863] metapage: ffff8880578beae8: 00000000 dead4ead ffffffff 00000000 [ 505.630679][ T5863] metapage: ffff8880578beaf8: ffffffff ffffffff 9af38860 ffffffff [ 505.638507][ T5863] metapage: ffff8880578beb08: 95e387a8 ffffffff 00000000 00000000 [ 505.646474][ T5863] metapage: ffff8880578beb18: 8bedc220 ffffffff 00000300 00000000 [ 505.654455][ T5863] metapage: ffff8880578beb28: 578beb28 ffff8880 578beb28 ffff8880 [ 505.672707][ T5863] metapage: ffff8880578beb38: 01498c80 ffffea00 2bfb6000 ffff8880 [ 505.752354][ T5863] metapage: ffff8880578beb48: 00001000 00003e24 00000000 00000000 [ 505.797613][ T5863] metapage: ffff8880578beb58: 7a531000 ffff8880 [ 505.850103][T14535] ceph: No mds server is up or the cluster is laggy [ 505.857952][ T5863] page: ffffea0001498c80: 00fff2800000403c ffffea0000a28a08 [ 505.865860][ T5863] page: ffffea0001498c90: ffffea00009e8048 0000000000000000 [ 505.869237][ T24] libceph: connect (1)[c::]:6789 error -101 [ 505.873229][ T5863] page: ffffea0001498ca0: 0000000000000030 ffff8880578beaa8 [ 505.873269][ T5863] page: ffffea0001498cb0: 00000001ffffffff ffff888030420d00 [ 505.873308][ T5863] metapage: ffff888058c8e000: 00001000 00000000 00003d58 00000000 [ 505.873348][ T5863] metapage: ffff888058c8e010: 7a531228 ffff8880 578beab8 ffff8880 [ 505.908025][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 505.911331][ T5863] metapage: ffff888058c8e020: 00000004 00000000 00000000 00000000 [ 505.936538][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 505.940696][ T5863] metapage: ffff888058c8e030: 28a28000 ffff8880 0000001c 00000000 [ 505.982719][ T5863] metapage: ffff888058c8e040: 00000000 dead4ead ffffffff 00000000 [ 506.096409][ T5863] metapage: ffff888058c8e050: ffffffff ffffffff 9af38860 ffffffff [ 506.145280][ T5863] metapage: ffff888058c8e060: 95e387a8 ffffffff 00000000 00000000 [ 506.153213][ T5863] metapage: ffff888058c8e070: 8bedc220 ffffffff 00000300 00000000 [ 506.199342][ T5863] metapage: ffff888058c8e080: 58c8e080 ffff8880 58c8e080 ffff8880 [ 506.234496][ T5863] metapage: ffff888058c8e090: 00a28a00 ffffea00 2bfb6000 ffff8880 [ 506.274050][ T5863] metapage: ffff888058c8e0a0: 00001000 00003e24 00000000 00000000 [ 506.291837][ T5951] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 506.315309][ T5863] metapage: ffff888058c8e0b0: 7a531000 ffff8880 [ 506.321918][ T5863] page: ffffea0000a28a00: 00fff2800000403c ffffea00015019c8 [ 506.330080][ T5863] page: ffffea0000a28a10: ffffea0001498c88 0000000000000000 [ 506.337560][ T5863] page: ffffea0000a28a20: 000000000000001c ffff888058c8e000 [ 506.346537][ T5863] page: ffffea0000a28a30: 00000001ffffffff ffff888030420d00 [ 506.365724][T14545] syzkaller1: entered promiscuous mode [ 506.402064][T14545] syzkaller1: entered allmulticast mode [ 506.418967][T11079] bridge_slave_1: left allmulticast mode [ 506.425712][T11079] bridge_slave_1: left promiscuous mode [ 506.433114][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.442166][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 506.463612][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 506.468231][T11079] bridge_slave_0: left allmulticast mode [ 506.474875][T11079] bridge_slave_0: left promiscuous mode [ 506.485191][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.489782][ T5951] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 506.525701][ T5951] usb 2-1: config 0 has no interface number 0 [ 506.536996][ T5951] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 506.568946][ T5951] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 506.616883][ T5951] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 506.618007][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 506.630477][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 506.651376][ T5951] usb 2-1: Product: syz [ 506.655552][ T5951] usb 2-1: SerialNumber: syz [ 506.676636][ T10] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.688588][ T5951] usb 2-1: config 0 descriptor?? [ 506.690461][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.714879][ T5951] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 506.733995][ T5951] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input56 [ 506.747805][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.811056][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 506.818942][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.840679][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.848764][ T10] usb 9-1: Product: syz [ 506.880466][ T10] usb 9-1: Manufacturer: syz [ 506.885085][ T10] usb 9-1: SerialNumber: syz [ 507.002739][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 507.011464][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 507.023211][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 507.030538][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.059509][ T9] usb 4-1: config 220 has no interface number 2 [ 507.066196][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 507.087701][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 507.104522][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 507.116562][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 507.135415][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 507.153409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.164976][ T9] usb 4-1: Product: syz [ 507.169231][ T9] usb 4-1: Manufacturer: syz [ 507.174293][ T9] usb 4-1: SerialNumber: syz [ 507.231196][ C0] cm109_urb_ctl_callback: 122 callbacks suppressed [ 507.231229][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.244937][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.252104][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.259519][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.267251][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.285199][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.292602][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.299843][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.311194][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.329522][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 507.330782][ T5951] usb 2-1: USB disconnect, device number 20 [ 507.336482][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 507.336940][ T10] usb 9-1: 0:2 : does not exist [ 507.395562][ T5951] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 507.419867][ T9] usb 4-1: selecting invalid altsetting 0 [ 507.437371][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 507.443940][ T9] usb 4-1: No valid video chain found. [ 507.501365][ T9] usb 4-1: selecting invalid altsetting 0 [ 507.507232][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 507.526755][ T9] usb 4-1: USB disconnect, device number 24 [ 507.623584][ T5887] Bluetooth: hci7: command tx timeout [ 507.716215][T11079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.729500][T11079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.743319][T11079] bond0 (unregistering): Released all slaves [ 508.005792][ T10] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 508.118659][ T10] usb 9-1: USB disconnect, device number 2 [ 508.529116][T14581] loop0: detected capacity change from 0 to 512 [ 508.545274][T14581] EXT4-fs: Ignoring removed orlov option [ 508.599204][T14581] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 508.632197][T14581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 508.659682][T14581] EXT4-fs error (device loop0): ext4_iget_extra_inode:5103: inode #15: comm syz.0.3272: corrupted in-inode xattr: e_value size too large [ 508.714113][T14581] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3272: couldn't read orphan inode 15 (err -117) [ 508.734303][T14581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.738938][T14525] chnl_net:caif_netlink_parms(): no params data found [ 508.774513][T14581] EXT4-fs error (device loop0): ext4_check_dx_root:2202: inode #2: comm syz.0.3272: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 508.855969][T14589] ceph: No mds server is up or the cluster is laggy [ 508.892998][T12416] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.219909][T11079] hsr_slave_0: left promiscuous mode [ 509.248326][T11079] hsr_slave_1: left promiscuous mode [ 509.253776][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 509.271425][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.292307][T11079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.315957][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.336027][T11079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.378403][T11079] veth1_macvtap: left promiscuous mode [ 509.396030][T11079] veth0_macvtap: left promiscuous mode [ 509.411792][T11079] veth1_vlan: left promiscuous mode [ 509.427845][T11079] veth0_vlan: left promiscuous mode [ 509.441004][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 509.450057][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 509.460745][T13921] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 509.486495][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.501304][ T10] usb 1-1: config 0 descriptor?? [ 509.630720][T13921] usb 9-1: Using ep0 maxpacket: 16 [ 509.644441][T13921] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 509.665664][T13921] usb 9-1: config 0 has no interface number 0 [ 509.686034][T13921] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 509.700511][ T5887] Bluetooth: hci7: command tx timeout [ 509.721557][T13921] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 509.736101][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 509.744675][T13921] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 509.756254][T13921] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 509.768142][T13921] usb 9-1: Product: syz [ 509.772485][T13921] usb 9-1: SerialNumber: syz [ 509.780367][T13921] usb 9-1: config 0 descriptor?? [ 509.793807][T13921] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 509.802350][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.828362][T13921] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input57 [ 509.846617][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 509.874605][ T10] usb 1-1: media controller created [ 509.942107][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.998059][ T10] az6027: usb out operation failed. (-71) [ 510.008260][ T10] az6027: usb out operation failed. (-71) [ 510.014338][ T10] stb0899_attach: Driver disabled by Kconfig [ 510.028801][ T10] az6027: no front-end attached [ 510.028801][ T10] [ 510.046944][ T10] az6027: usb out operation failed. (-71) [ 510.062830][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 510.072815][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 510.094135][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 510.150892][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 510.181024][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 510.221808][ T10] usb 1-1: USB disconnect, device number 25 [ 510.296663][ T5951] usb 9-1: USB disconnect, device number 3 [ 510.302772][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 510.332974][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 510.360172][ T5951] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 510.447303][T14619] loop6: detected capacity change from 0 to 64 [ 511.024804][ T24] libceph: connect (1)[c::]:6789 error -101 [ 511.031180][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 511.059542][T14629] ceph: No mds server is up or the cluster is laggy [ 511.162971][T11079] team0 (unregistering): Port device team_slave_1 removed [ 511.178748][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.342531][T14638] input: syz0 as /devices/virtual/input/input59 [ 511.349460][T14638] input: failed to attach handler leds to device input59, error: -6 [ 511.423610][T11079] team0 (unregistering): Port device team_slave_0 removed [ 511.783915][ T5887] Bluetooth: hci7: command tx timeout [ 511.889410][T14646] loop8: detected capacity change from 0 to 2048 [ 511.932883][T14646] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 511.959300][T14648] overlayfs: upper fs does not support file handles, falling back to index=off. [ 511.968768][T14646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.417948][ T5887] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 512.433277][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/u9:10 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 512.433331][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.433358][ T5887] Workqueue: hci3 hci_rx_work [ 512.433399][ T5887] Call Trace: [ 512.433413][ T5887] [ 512.433428][ T5887] dump_stack_lvl+0x16c/0x1f0 [ 512.433474][ T5887] sysfs_warn_dup+0x7f/0xa0 [ 512.433519][ T5887] sysfs_create_dir_ns+0x24b/0x2b0 [ 512.433566][ T5887] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 512.433610][ T5887] ? find_held_lock+0x2b/0x80 [ 512.433669][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.433718][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 512.433767][ T5887] kobject_add_internal+0x2c4/0x9b0 [ 512.433827][ T5887] kobject_add+0x16e/0x240 [ 512.433877][ T5887] ? __pfx_kobject_add+0x10/0x10 [ 512.433930][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.433977][ T5887] ? do_raw_spin_unlock+0x172/0x230 [ 512.434026][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.434073][ T5887] ? kobject_put+0xab/0x5a0 [ 512.434125][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.434184][ T5887] device_add+0x288/0x1aa0 [ 512.434244][ T5887] ? __pfx_dev_set_name+0x10/0x10 [ 512.434305][ T5887] ? __pfx_device_add+0x10/0x10 [ 512.434360][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.434408][ T5887] ? mgmt_send_event_skb+0x2fb/0x460 [ 512.434487][ T5887] hci_conn_add_sysfs+0x17e/0x230 [ 512.434532][ T5887] le_conn_complete_evt+0x1075/0x1d70 [ 512.434595][ T5887] ? preempt_count_sub+0x150/0x160 [ 512.434656][ T5887] ? find_held_lock+0x2b/0x80 [ 512.434704][ T5887] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 512.434764][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.434824][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.434873][ T5887] ? __mutex_unlock_slowpath+0x163/0x800 [ 512.434930][ T5887] hci_le_conn_complete_evt+0x23c/0x370 [ 512.435012][ T5887] hci_le_meta_evt+0x357/0x5e0 [ 512.435050][ T5887] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 512.435122][ T5887] hci_event_packet+0x685/0x11c0 [ 512.435186][ T5887] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 512.435229][ T5887] ? __pfx_hci_event_packet+0x10/0x10 [ 512.435293][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.435346][ T5887] ? kcov_remote_start+0x3c9/0x6d0 [ 512.435393][ T5887] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.435435][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.435497][ T5887] hci_rx_work+0x2c5/0x16b0 [ 512.435540][ T5887] ? rcu_is_watching+0x12/0xc0 [ 512.435601][ T5887] process_one_work+0x9cf/0x1b70 [ 512.435670][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 512.435716][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.435779][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.435828][ T5887] ? assign_work+0x1a0/0x250 [ 512.435875][ T5887] worker_thread+0x6c8/0xf10 [ 512.435932][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.435983][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.436037][ T5887] ? __kthread_parkme+0x19e/0x250 [ 512.436097][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.436150][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 512.436198][ T5887] kthread+0x3c5/0x780 [ 512.436240][ T5887] ? __pfx_kthread+0x10/0x10 [ 512.436284][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.436333][ T5887] ? rcu_is_watching+0x12/0xc0 [ 512.436385][ T5887] ? __pfx_kthread+0x10/0x10 [ 512.436429][ T5887] ret_from_fork+0x5d7/0x6f0 [ 512.436466][ T5887] ? __pfx_kthread+0x10/0x10 [ 512.436508][ T5887] ret_from_fork_asm+0x1a/0x30 [ 512.436588][ T5887] [ 512.436627][ T5887] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 512.804599][ T5887] Bluetooth: hci3: failed to register connection device [ 513.130615][ T30] audit: type=1326 audit(2000000175.328:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.0.3305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d01f8ebe9 code=0x0 [ 513.233801][T14666] [ 513.236155][T14666] ===================================================== [ 513.243114][T14666] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 513.250566][T14666] 6.16.0-syzkaller-11852-g479058002c32 #0 Not tainted [ 513.257323][T14666] ----------------------------------------------------- [ 513.264249][T14666] syz.0.3305/14666 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 513.271972][T14666] ffff88807d3a2c20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 513.280633][T14666] [ 513.280633][T14666] and this task is already holding: [ 513.287982][T14666] ffff8880794ac2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 513.296727][T14666] which would create a new lock dependency: [ 513.302602][T14666] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 513.310219][T14666] [ 513.310219][T14666] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 513.319662][T14666] (&dev->event_lock#2){..-.}-{3:3} [ 513.319729][T14666] [ 513.319729][T14666] ... which became SOFTIRQ-irq-safe at: [ 513.332592][T14666] lock_acquire+0x179/0x350 [ 513.337212][T14666] _raw_spin_lock_irqsave+0x3a/0x60 [ 513.342554][T14666] input_inject_event+0x9f/0x3b0 [ 513.347599][T14666] led_set_brightness+0x217/0x290 [ 513.352724][T14666] led_trigger_event+0xda/0x270 [ 513.357713][T14666] kbd_bh+0x21b/0x300 [ 513.361789][T14666] tasklet_action_common+0x284/0x400 [ 513.367178][T14666] handle_softirqs+0x219/0x8e0 [ 513.372065][T14666] __irq_exit_rcu+0x109/0x170 [ 513.376856][T14666] irq_exit_rcu+0x9/0x30 [ 513.381196][T14666] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 513.386945][T14666] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.393028][T14666] _raw_spin_unlock_irqrestore+0x31/0x80 [ 513.398751][T14666] input_inject_event+0x1c0/0x3b0 [ 513.403906][T14666] evdev_write+0x457/0x750 [ 513.408429][T14666] vfs_write+0x2a0/0x1150 [ 513.412872][T14666] ksys_write+0x1f8/0x250 [ 513.417314][T14666] do_syscall_64+0xcd/0x4c0 [ 513.421914][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.427899][T14666] [ 513.427899][T14666] to a SOFTIRQ-irq-unsafe lock: [ 513.434902][T14666] (tasklist_lock){.+.+}-{3:3} [ 513.434949][T14666] [ 513.434949][T14666] ... which became SOFTIRQ-irq-unsafe at: [ 513.447548][T14666] ... [ 513.447561][T14666] lock_acquire+0x179/0x350 [ 513.454734][T14666] _raw_read_lock+0x5f/0x70 [ 513.459323][T14666] __do_wait+0x105/0x890 [ 513.463679][T14666] do_wait+0x21e/0x5a0 [ 513.467856][T14666] kernel_wait+0x9f/0x160 [ 513.472271][T14666] call_usermodehelper_exec_work+0xf1/0x170 [ 513.478268][T14666] process_one_work+0x9cf/0x1b70 [ 513.483299][T14666] worker_thread+0x6c8/0xf10 [ 513.487984][T14666] kthread+0x3c5/0x780 [ 513.492140][T14666] ret_from_fork+0x5d7/0x6f0 [ 513.496820][T14666] ret_from_fork_asm+0x1a/0x30 [ 513.501689][T14666] [ 513.501689][T14666] other info that might help us debug this: [ 513.501689][T14666] [ 513.511907][T14666] Chain exists of: [ 513.511907][T14666] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 513.511907][T14666] [ 513.524905][T14666] Possible interrupt unsafe locking scenario: [ 513.524905][T14666] [ 513.533216][T14666] CPU0 CPU1 [ 513.538571][T14666] ---- ---- [ 513.543922][T14666] lock(tasklist_lock); [ 513.548172][T14666] local_irq_disable(); [ 513.554913][T14666] lock(&dev->event_lock#2); [ 513.562129][T14666] lock(&new->fa_lock); [ 513.568893][T14666] [ 513.572332][T14666] lock(&dev->event_lock#2); [ 513.577200][T14666] [ 513.577200][T14666] *** DEADLOCK *** [ 513.577200][T14666] [ 513.585332][T14666] 5 locks held by syz.0.3305/14666: [ 513.590612][T14666] #0: ffff888032cbd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 513.600454][T14666] #1: ffff88803157c0b8 (&buf->lock){+.+.}-{4:4}, at: tty_ioctl+0x522/0x1680 [ 513.609303][T14666] #2: ffff888032cbd2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x85/0x1980 [ 513.620178][T14666] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 513.629461][T14666] #4: ffff8880794ac2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 513.638671][T14666] [ 513.638671][T14666] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 513.649074][T14666] -> (&dev->event_lock#2){..-.}-{3:3} { [ 513.654754][T14666] IN-SOFTIRQ-W at: [ 513.658816][T14666] lock_acquire+0x179/0x350 [ 513.665176][T14666] _raw_spin_lock_irqsave+0x3a/0x60 [ 513.672248][T14666] input_inject_event+0x9f/0x3b0 [ 513.679036][T14666] led_set_brightness+0x217/0x290 [ 513.685901][T14666] led_trigger_event+0xda/0x270 [ 513.692605][T14666] kbd_bh+0x21b/0x300 [ 513.698419][T14666] tasklet_action_common+0x284/0x400 [ 513.705553][T14666] handle_softirqs+0x219/0x8e0 [ 513.712156][T14666] __irq_exit_rcu+0x109/0x170 [ 513.718669][T14666] irq_exit_rcu+0x9/0x30 [ 513.724749][T14666] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 513.732212][T14666] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.740027][T14666] _raw_spin_unlock_irqrestore+0x31/0x80 [ 513.747488][T14666] input_inject_event+0x1c0/0x3b0 [ 513.754364][T14666] evdev_write+0x457/0x750 [ 513.760626][T14666] vfs_write+0x2a0/0x1150 [ 513.766803][T14666] ksys_write+0x1f8/0x250 [ 513.772977][T14666] do_syscall_64+0xcd/0x4c0 [ 513.779313][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.787036][T14666] INITIAL USE at: [ 513.791012][T14666] lock_acquire+0x179/0x350 [ 513.797277][T14666] _raw_spin_lock_irqsave+0x3a/0x60 [ 513.804241][T14666] input_inject_event+0x9f/0x3b0 [ 513.810937][T14666] led_set_brightness+0x217/0x290 [ 513.817713][T14666] kbd_led_trigger_activate+0xcb/0x110 [ 513.824920][T14666] led_trigger_set+0x59a/0xc50 [ 513.831448][T14666] led_trigger_set_default+0x1e0/0x2e0 [ 513.838671][T14666] led_classdev_register_ext+0x7b8/0xa10 [ 513.846078][T14666] input_leds_connect+0x552/0x8e0 [ 513.852852][T14666] input_attach_handler.isra.0+0x184/0x260 [ 513.860412][T14666] input_register_device+0xab9/0x1180 [ 513.867549][T14666] atkbd_connect+0x5f8/0xa40 [ 513.873878][T14666] serio_driver_probe+0x7f/0xd0 [ 513.880481][T14666] really_probe+0x241/0xa90 [ 513.886728][T14666] __driver_probe_device+0x1de/0x440 [ 513.893757][T14666] driver_probe_device+0x4c/0x1b0 [ 513.900527][T14666] __driver_attach+0x283/0x580 [ 513.907035][T14666] bus_for_each_dev+0x13e/0x1d0 [ 513.913647][T14666] serio_handle_event+0x335/0xc30 [ 513.920429][T14666] process_one_work+0x9cf/0x1b70 [ 513.927119][T14666] worker_thread+0x6c8/0xf10 [ 513.933452][T14666] kthread+0x3c5/0x780 [ 513.939261][T14666] ret_from_fork+0x5d7/0x6f0 [ 513.945589][T14666] ret_from_fork_asm+0x1a/0x30 [ 513.952103][T14666] } [ 513.954676][T14666] ... key at: [] __key.7+0x0/0x40 [ 513.961894][T14666] -> (&new->fa_lock){....}-{3:3} { [ 513.967040][T14666] INITIAL USE at: [ 513.970927][T14666] lock_acquire+0x179/0x350 [ 513.977021][T14666] _raw_write_lock_irq+0x36/0x50 [ 513.983522][T14666] fasync_remove_entry+0xb2/0x1e0 [ 513.990122][T14666] fasync_helper+0xaf/0xd0 [ 513.996112][T14666] fuse_dev_fasync+0x6f/0xa0 [ 514.002289][T14666] __fput+0x96b/0xb70 [ 514.007840][T14666] task_work_run+0x150/0x240 [ 514.013999][T14666] exit_to_user_mode_loop+0xeb/0x110 [ 514.020854][T14666] do_syscall_64+0x3f6/0x4c0 [ 514.027019][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.034480][T14666] INITIAL READ USE at: [ 514.038804][T14666] lock_acquire+0x179/0x350 [ 514.045330][T14666] _raw_read_lock_irqsave+0x74/0x90 [ 514.052528][T14666] kill_fasync+0x138/0x510 [ 514.058954][T14666] fuse_abort_conn+0x9f0/0xd30 [ 514.065718][T14666] cuse_process_init_reply+0x158/0x10b0 [ 514.073273][T14666] fuse_request_end+0x533/0x9e0 [ 514.080120][T14666] fuse_dev_do_write+0x8c9/0x3420 [ 514.087147][T14666] fuse_dev_write+0x155/0x1e0 [ 514.093827][T14666] vfs_write+0x6c7/0x1150 [ 514.100176][T14666] ksys_write+0x12a/0x250 [ 514.106527][T14666] do_syscall_64+0xcd/0x4c0 [ 514.113044][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.120938][T14666] } [ 514.123423][T14666] ... key at: [] __key.0+0x0/0x40 [ 514.130552][T14666] ... acquired at: [ 514.134345][T14666] _raw_read_lock_irqsave+0x74/0x90 [ 514.139733][T14666] kill_fasync+0x138/0x510 [ 514.144333][T14666] mousedev_notify_readers+0x6d8/0xa30 [ 514.149980][T14666] mousedev_event+0x84e/0x1490 [ 514.154925][T14666] input_handle_events_default+0x119/0x1b0 [ 514.160912][T14666] input_pass_values+0x74e/0x880 [ 514.166071][T14666] input_handle_event+0xf00/0x14d0 [ 514.171373][T14666] input_inject_event+0x1e8/0x3b0 [ 514.176589][T14666] evdev_write+0x457/0x750 [ 514.181196][T14666] vfs_write+0x2a0/0x1150 [ 514.185726][T14666] ksys_write+0x1f8/0x250 [ 514.190252][T14666] do_syscall_64+0xcd/0x4c0 [ 514.194935][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.201011][T14666] [ 514.203319][T14666] [ 514.203319][T14666] the dependencies between the lock to be acquired [ 514.203336][T14666] and SOFTIRQ-irq-unsafe lock: [ 514.216816][T14666] -> (tasklist_lock){.+.+}-{3:3} { [ 514.222049][T14666] HARDIRQ-ON-R at: [ 514.226111][T14666] lock_acquire+0x179/0x350 [ 514.232466][T14666] _raw_read_lock+0x5f/0x70 [ 514.238794][T14666] __do_wait+0x105/0x890 [ 514.244883][T14666] do_wait+0x21e/0x5a0 [ 514.250800][T14666] kernel_wait+0x9f/0x160 [ 514.256951][T14666] call_usermodehelper_exec_work+0xf1/0x170 [ 514.264684][T14666] process_one_work+0x9cf/0x1b70 [ 514.271453][T14666] worker_thread+0x6c8/0xf10 [ 514.277875][T14666] kthread+0x3c5/0x780 [ 514.283769][T14666] ret_from_fork+0x5d7/0x6f0 [ 514.290185][T14666] ret_from_fork_asm+0x1a/0x30 [ 514.296789][T14666] SOFTIRQ-ON-R at: [ 514.300851][T14666] lock_acquire+0x179/0x350 [ 514.307206][T14666] _raw_read_lock+0x5f/0x70 [ 514.313534][T14666] __do_wait+0x105/0x890 [ 514.319623][T14666] do_wait+0x21e/0x5a0 [ 514.325538][T14666] kernel_wait+0x9f/0x160 [ 514.331693][T14666] call_usermodehelper_exec_work+0xf1/0x170 [ 514.339426][T14666] process_one_work+0x9cf/0x1b70 [ 514.346193][T14666] worker_thread+0x6c8/0xf10 [ 514.352618][T14666] kthread+0x3c5/0x780 [ 514.358513][T14666] ret_from_fork+0x5d7/0x6f0 [ 514.364927][T14666] ret_from_fork_asm+0x1a/0x30 [ 514.371531][T14666] INITIAL USE at: [ 514.375505][T14666] lock_acquire+0x179/0x350 [ 514.381773][T14666] _raw_write_lock_irq+0x36/0x50 [ 514.388450][T14666] copy_process+0x4caf/0x7690 [ 514.394879][T14666] kernel_clone+0xfc/0x930 [ 514.401049][T14666] user_mode_thread+0xc7/0x110 [ 514.407571][T14666] rest_init+0x23/0x2b0 [ 514.413486][T14666] start_kernel+0x3ee/0x4d0 [ 514.419741][T14666] x86_64_start_reservations+0x18/0x30 [ 514.426949][T14666] x86_64_start_kernel+0x130/0x190 [ 514.433811][T14666] common_startup_64+0x13e/0x148 [ 514.440497][T14666] INITIAL READ USE at: [ 514.444906][T14666] lock_acquire+0x179/0x350 [ 514.451605][T14666] _raw_read_lock+0x5f/0x70 [ 514.458279][T14666] __do_wait+0x105/0x890 [ 514.464716][T14666] do_wait+0x21e/0x5a0 [ 514.470981][T14666] kernel_wait+0x9f/0x160 [ 514.477498][T14666] call_usermodehelper_exec_work+0xf1/0x170 [ 514.485574][T14666] process_one_work+0x9cf/0x1b70 [ 514.492689][T14666] worker_thread+0x6c8/0xf10 [ 514.499456][T14666] kthread+0x3c5/0x780 [ 514.505697][T14666] ret_from_fork+0x5d7/0x6f0 [ 514.512460][T14666] ret_from_fork_asm+0x1a/0x30 [ 514.519406][T14666] } [ 514.521975][T14666] ... key at: [] tasklist_lock+0x18/0x40 [ 514.529836][T14666] ... acquired at: [ 514.533716][T14666] _raw_read_lock+0x5f/0x70 [ 514.538392][T14666] send_sigurg+0xed/0xc80 [ 514.542907][T14666] sk_send_sigurg+0x76/0x360 [ 514.547675][T14666] tcp_urg+0x341/0xb80 [ 514.551924][T14666] tcp_rcv_established+0x87a/0x23f0 [ 514.557318][T14666] tcp_v4_do_rcv+0x5ca/0xa90 [ 514.562101][T14666] __release_sock+0x31b/0x400 [ 514.566955][T14666] release_sock+0x5a/0x220 [ 514.571551][T14666] tcp_sendmsg+0x38/0x50 [ 514.575982][T14666] inet6_sendmsg+0xb9/0x140 [ 514.580676][T14666] ____sys_sendmsg+0x705/0xc70 [ 514.585631][T14666] ___sys_sendmsg+0x134/0x1d0 [ 514.590481][T14666] __sys_sendmmsg+0x200/0x420 [ 514.595335][T14666] __x64_sys_sendmmsg+0x9c/0x100 [ 514.600450][T14666] do_syscall_64+0xcd/0x4c0 [ 514.605136][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.611204][T14666] [ 514.613514][T14666] -> (&f_owner->lock){....}-{3:3} { [ 514.618745][T14666] INITIAL USE at: [ 514.622631][T14666] lock_acquire+0x179/0x350 [ 514.628723][T14666] _raw_write_lock_irq+0x36/0x50 [ 514.635224][T14666] __f_setown+0x61/0x3c0 [ 514.641040][T14666] fcntl_dirnotify+0x7b1/0xb60 [ 514.647378][T14666] do_fcntl+0xe62/0x15a0 [ 514.653191][T14666] __x64_sys_fcntl+0x163/0x200 [ 514.659533][T14666] do_syscall_64+0xcd/0x4c0 [ 514.665608][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.673068][T14666] INITIAL READ USE at: [ 514.677393][T14666] lock_acquire+0x179/0x350 [ 514.683918][T14666] _raw_read_lock_irqsave+0x74/0x90 [ 514.691117][T14666] send_sigio+0x31/0x3e0 [ 514.697367][T14666] dnotify_handle_event+0x15e/0x2b0 [ 514.704574][T14666] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 514.713014][T14666] fsnotify+0x13d6/0x1dc0 [ 514.719361][T14666] path_openat+0x1b50/0x2cb0 [ 514.725947][T14666] do_filp_open+0x20b/0x470 [ 514.732450][T14666] do_sys_openat2+0x11b/0x1d0 [ 514.739135][T14666] __x64_sys_openat+0x174/0x210 [ 514.746000][T14666] do_syscall_64+0xcd/0x4c0 [ 514.752515][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.760412][T14666] } [ 514.762901][T14666] ... key at: [] __key.1+0x0/0x40 [ 514.770054][T14666] ... acquired at: [ 514.773845][T14666] lock_acquire+0x179/0x350 [ 514.778546][T14666] _raw_read_lock_irqsave+0x74/0x90 [ 514.783919][T14666] send_sigio+0x31/0x3e0 [ 514.788344][T14666] kill_fasync+0x214/0x510 [ 514.792946][T14666] n_tty_receive_buf_common+0x5d1/0x1980 [ 514.798782][T14666] tty_ioctl+0x583/0x1680 [ 514.803290][T14666] __x64_sys_ioctl+0x18e/0x210 [ 514.808246][T14666] do_syscall_64+0xcd/0x4c0 [ 514.812930][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.819001][T14666] [ 514.821310][T14666] [ 514.821310][T14666] stack backtrace: [ 514.827187][T14666] CPU: 0 UID: 0 PID: 14666 Comm: syz.0.3305 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 514.827234][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.827261][T14666] Call Trace: [ 514.827274][T14666] [ 514.827288][T14666] dump_stack_lvl+0x116/0x1f0 [ 514.827329][T14666] check_irq_usage+0x7dc/0x920 [ 514.827395][T14666] ? check_path.constprop.0+0x24/0x50 [ 514.827456][T14666] ? __lock_acquire+0x12bc/0x1ce0 [ 514.827512][T14666] __lock_acquire+0x12bc/0x1ce0 [ 514.827574][T14666] ? __lock_acquire+0x107f/0x1ce0 [ 514.827635][T14666] lock_acquire+0x179/0x350 [ 514.827691][T14666] ? send_sigio+0x31/0x3e0 [ 514.827737][T14666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.827781][T14666] ? lock_acquire+0x179/0x350 [ 514.827841][T14666] _raw_read_lock_irqsave+0x74/0x90 [ 514.827876][T14666] ? send_sigio+0x31/0x3e0 [ 514.827918][T14666] send_sigio+0x31/0x3e0 [ 514.827962][T14666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.828009][T14666] kill_fasync+0x214/0x510 [ 514.828055][T14666] n_tty_receive_buf_common+0x5d1/0x1980 [ 514.828127][T14666] ? __pfx_n_tty_receive_buf+0x10/0x10 [ 514.828181][T14666] tty_ioctl+0x583/0x1680 [ 514.828223][T14666] ? __pfx_tty_ioctl+0x10/0x10 [ 514.828274][T14666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.828318][T14666] ? find_held_lock+0x2b/0x80 [ 514.828361][T14666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.828405][T14666] ? hook_file_ioctl_common+0x145/0x410 [ 514.828452][T14666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.828496][T14666] ? __fget_files+0x20e/0x3c0 [ 514.828532][T14666] ? __pfx_tty_ioctl+0x10/0x10 [ 514.828573][T14666] __x64_sys_ioctl+0x18e/0x210 [ 514.828624][T14666] do_syscall_64+0xcd/0x4c0 [ 514.828668][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.828705][T14666] RIP: 0033:0x7f4d01f8ebe9 [ 514.828733][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.828770][T14666] RSP: 002b:00007f4d02e8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.828804][T14666] RAX: ffffffffffffffda RBX: 00007f4d021b6090 RCX: 00007f4d01f8ebe9 [ 514.828829][T14666] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 514.828852][T14666] RBP: 00007f4d02011e19 R08: 0000000000000000 R09: 0000000000000000 [ 514.828876][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.828899][T14666] R13: 00007f4d021b6128 R14: 00007f4d021b6090 R15: 00007ffd9b94f038 [ 514.828936][T14666] [ 514.880497][ T51] Bluetooth: hci7: command tx timeout [ 514.930608][T14654] loop3: detected capacity change from 0 to 32768 [ 515.328816][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.339967][T14525] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.349427][T14525] bridge_slave_0: entered allmulticast mode [ 515.357296][T14525] bridge_slave_0: entered promiscuous mode [ 515.365012][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.372714][T14525] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.379880][T14525] bridge_slave_1: entered allmulticast mode [ 515.389550][T14525] bridge_slave_1: entered promiscuous mode [ 515.422088][T14525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.435655][T14525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.474803][T14525] team0: Port device team_slave_0 added [ 515.482547][T14525] team0: Port device team_slave_1 added [ 515.504752][T14525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.512015][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.539711][T14525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.556327][T14525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.563995][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.590298][T14525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.626666][T14525] hsr_slave_0: entered promiscuous mode [ 515.633305][T14525] hsr_slave_1: entered promiscuous mode [ 515.639339][T14525] debugfs: 'hsr0' already exists in 'hsr' [ 515.646128][T14525] Cannot create hsr debugfs directory [ 515.704628][T11079] bridge_slave_1: left allmulticast mode [ 515.710275][T11079] bridge_slave_1: left promiscuous mode [ 515.716369][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.724973][T11079] bridge_slave_0: left allmulticast mode [ 515.730864][T11079] bridge_slave_0: left promiscuous mode [ 515.736505][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.906024][T11079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.916617][T11079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.927752][T11079] bond0 (unregistering): (slave bond1): Releasing backup interface [ 515.936349][T11079] bond0 (unregistering): Released all slaves [ 516.042897][T11079] bond1 (unregistering): Released all slaves [ 516.074732][T14525] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.084567][T14525] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.134945][T14525] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.145855][T14525] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.193731][T14525] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.204790][T14525] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.239497][T11079] hsr_slave_0: left promiscuous mode [ 516.249049][T11079] hsr_slave_1: left promiscuous mode [ 516.255044][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.267009][T11079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.275634][T11079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.283216][T11079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.294014][T11079] team_slave_0: left promiscuous mode [ 516.299393][T11079] team_slave_1: left promiscuous mode [ 516.304849][T11079] veth1_macvtap: left promiscuous mode [ 516.310327][T11079] veth0_macvtap: left promiscuous mode [ 516.316624][T11079] veth1_vlan: left promiscuous mode [ 516.322134][T11079] veth0_vlan: left promiscuous mode [ 516.490499][T11079] team0 (unregistering): Port device team_slave_1 removed [ 516.512410][T11079] team0 (unregistering): Port device team_slave_0 removed [ 516.632816][T14525] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.642789][T14525] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.755729][T14525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.770002][T14525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.782191][T14525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.802631][T14525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.860784][T14525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.879892][T14525] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.894367][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.901474][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.920328][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.927417][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.963422][T14525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.110315][T14525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.315041][T14525] veth0_vlan: entered promiscuous mode [ 517.325384][T14525] veth1_vlan: entered promiscuous mode [ 517.348403][T14525] veth0_macvtap: entered promiscuous mode [ 517.357796][T14525] veth1_macvtap: entered promiscuous mode [ 517.374230][T14525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.387689][T14525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.402244][T11290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.411599][T11290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.421113][T11290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.430517][T11290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.456541][T14525] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 517.485551][T11290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.487163][T14525] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 517.503466][T11290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.525248][T11079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.533147][T11079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.981235][ T51] Bluetooth: hci3: command 0x0406 tx timeout