last executing test programs: 18.01871487s ago: executing program 0 (id=796): gettid() accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0xfffffffffffffffe) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="03000300000000000000ab5d71acedd7c9560385dcb188a8", 0x29, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xff}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x10, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "2ee7b99b3cf21c10c989bc39bdce412b7ed2e33405d32824d9c25cef6f529cdd", "80d0dd19971748acc70d8dc3ae9abbbc937527997cb9328eed953063e1964a2565d1b0a3372fd39a298ea10a4faccb34", "ae38bf1139b9b09d1bf7683cb4b97ed3e9d51cda680f8910e18d21a9", {"e9dc972186367db70b745f3ce75d3659", "d2368da0216917aea2b7fbfae4d06409"}}}}}}}, 0x0) 17.912361199s ago: executing program 0 (id=799): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, 0x3, 0x1, 0x305, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x509}]}]}, 0x20}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="24000000010001", 0x7) 17.785096789s ago: executing program 0 (id=803): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000740)={[{@creator={'creator', 0x3d, "f617ff66"}}, {@umask={'umask', 0x3d, 0xb}}, {@type={'type', 0x3d, "4805f1c8"}}, {@barrier}, {@part={'part', 0x3d, 0x1000}}, {@force}, {@force}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp865'}}, {@type={'type', 0x3d, "d3268d71"}}]}, 0x81, 0x6d9, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000380)=""/4109, 0x100d) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="1b0000002000190f00003fffffffda060200007ffee80001dd0048", 0x1b}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[], 0x0, 0xad, &(0x7f0000000240)="$eJzs17FNxEAUBNCxLQwkboCADtwDpSCHkBGBLLkiWqEEd0BACMki2wLJpOh0d9J7wWpn9weT/rev15t0SaaklFLaJNfZ7k/PLw/3j8vZZHWRH5e7xNmqk1RJrpLcdlt+v1t+2t+Z+WMc5uqzlDIOx+wKAAD8T51+l6v0+4d1M/hjStIcuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAifgOAAD//5HaGo8=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/63, 0x3f) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3ff}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x47f}, 0x48) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_CHILD_SUBREAPER(0x37, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) 16.798789303s ago: executing program 0 (id=818): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.::/', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fstatfs(r1, &(0x7f0000000040)=""/83) 15.8949434s ago: executing program 0 (id=820): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT, @ANYRESDEC], 0x31) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) 15.740618893s ago: executing program 0 (id=824): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f000000bb40)='./file0\x00', 0x400, &(0x7f00000002c0), 0x0, 0xbb9f, &(0x7f000000bb80)="$eJzs2k9PHGUcB/Dfblla6qFJb+oFWrV6UKDaEG7dNWldTbjIgZMptoiNYE3h0D8m4tWTvoS+BhtjYmI8+iqMb6AHE89dM7szLPunUDI8DLWfz2FnnpnZH/Pd3zOzJLMr1z5tRdSjqxYjPvt869eZ9dZvP73e/OHRx+dXe1t3rua7p/PlTL68EBFnInay9bzoK1cfP65npet7605Nnamdi3g1Hxb1FnqLfx8Wx3XGe1rsP9U7n/zP1UcDsK+V5vVr/c53+zYREY18d23PrKjl+yaikw2/+72aM+YorTSvt4f6n12Lk/m27HqcfsY1+FKpuE3J5NlO9+7bMRURZ6v+rDk+zdZyK7vWi3FEtPJ7e8s9/v+v2Vr+UP9fXu1ma3mo/9n/9Au90dOqTw8AgCO2df/BV6sbG2t3rVixYmV3peo7E8eh3/Sqz4QqHMftpOqMPFt7qfmkPvjc/9Se9d09N7/956+FX35+WCzzzZ+MKTnwEL7T6XS6D5OnGzH3xe2Ntbls98VGfJQN5rP6bzXiRja4nA0uNeJeNni/O5iKH7PBezfvbNzKNrx9tOG7+XeiPvizgTG/gujlf+fOzJ/Fcp+SRbWJ6D9fO7EOl3/+y2K5T8mR/h/RqSYxZv7vPf/a8Lwfmv/ToxXPjeTvbtid/9kfe6OY/6cj4s0UuZ5Xe+n7J/v0/4D8E6/lx53qv3c0/0DxGwP3l8q1lx51hvp/iPxxaUzJkfyz25vfzG7df/Du7c3V9bX1ta8/mLsyt7g4v3hlcbY7JXqvKeIdqFz/4+zQe7L+D3yaI/3/Y/z9JYkL9ZicjHur29t353uvxfBy73Vs/kNc/xeLL6TzxfEHzf/J/rEnQsn+3xp6z8HX/9/H2P/n0F5K+6vBk//9J7/86bwQ+TfT1X8h8iesL7/8CcuXJr/88qcjv/wJy5cmv/zypyO//AnLlya//PKnI7/8CcuXJr/88qcjv/wJy5cmv/zypyO//AnLlya//PKnI7/8CcuXJr/88qcjv/wJy5cmv/zypyP/yc4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsI+Has0DEVhAD73WqXFQXETF32TpkOLri6ZBF18APsAmd18BF9BKgi+lrsScgMlCjoIQfy+KckPJyf8uQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH9VvbxcROTuJn3Or27uXs5uF68PJ9X948XRdfe0mZf49H0gIqYRTZuVofvzzSa3o/P23Nlsmg4iHX+91dvTN2sf9hc73T7ldfmHX02vrlbL0nwqvU0iYrfEaeuvSCWbRKyfI9bNeFvzW+pqdT7ov7XX9z483//VqCV9sHfXYZOWhd//791lSRVEVMKgwaA7FHaRRlRCsZAOpQRUSsIWC2xQuru7u7u7W7r7d+yyIOAH5Pt7vj7rw+f1Oo6da657ZmfO835f58zuX+d/0Ki5jfXK5/bAOAMDA+OO7t81//cMG77c8BFfnK+ej/jCHhgYmGNgYLytfca/+w0bvtxC+vdafNjw5QZe9z0/uscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9NXnrw+JNH7fU9eGBgy4E37fc+0qh9QQcdeuqll462gf53GLTiKhsdO8Waw0/YfrJh2+62xIQrv27P9P9Xjeg89v6TDwyst/zoHgqjwaDRPQBGK/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv9hb7P+/4KvHCxZ9ed1RT51morN23WbEnbVH64hHq3fr/v8Daw8aGBjVd4IRfZcetsxy0w8MDGyz61kTTTnw2mNzj3hsvgmHDAwZ+VenH3k7zVu88ASvPw597TVWGvn6i7+82+BBbxrE69z86Barbn7E0XO9+TjdW89j8OtPRr3X9CPea6aN191gpo023WyGtdddec3V11x9vdlnnmPmeeaZZZ455plpjbXXWX3mV27fYo6Tj7yd6p3Mccib5/jgsNfPcfA7nOPkbznF8dMcJ1/71deefOjAzCOnMuJNpx46sNiIk1nGet3anXjEc+efcPDAwNyDXh3PoEGjfv+jnrP1iOesMGzRxf+ZZeQ1PuIzYcxRP5trxLu9/B/0L+OdfNDINx8YNYA3j3fxYcOXG/HjV//+qHBzvXL20ltfNf/nxhl4y/Wx1Mjbt+o5wZuOb3ftDHmL13jztbPkW48zXTsjBjho6MDrr50RT5vq1WtnxAimHTqw0oiTWUecTDd0YJMRJ7ONPBlnYLsRJzOuuv46qw0a+XnwL92mH/Ta2n6L62yRN11nY7zyafGGv/Lq/TFe+bPVya/8+T+XrrM3v/nrxzts+HILvek6Gz5qLMP/t8b0Px3vGG8/3uH/Zrz/0X///ct4t/vn2436R8cbxjvKgqOOc71yeGLzf/M2ry6hUetk61Gv/OZP3Hc83tfW8dDXvfz0/+bNRx7H/pd1vM3g1w3jnX7PrRae/8r9+B0wwZv/TTbo1oFBbzeX6d5iSG+Yy1hvP5d3+n02/agvzwn/f85lzIGBCd84lzEGFh7xDTdqtNMOZG+Yy5j/O13GDc8fNZdB72Qug059rcvUIx+bcvDAmGMObLLyxhtvOMsrt6+ezvrK7dtfk1O/k7mP8bZzH/RO5z7pqA+aIf8693d2Ta40MOS1/0P8z5cm/xn+/99N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+lf7C32/9/61f3/L9px2DWj9uMdeumpa807usc7mr2r9/8f1fcN+//Pu9aplw4eeO2xt9zHeazXnjPolX29F1l2+Gs7BIdPmH/9PY6w9av7Pr+6ZfoUo45TvrKz8sjf9agXHW/BI48cPOKl37CT7DjjjD1o/IGBSUadvuU+0m/eb37Uj//X9pEe3V5dq+9gn12f/93076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9ib7H//6mjjluvfMQxO4zaCH3oLtuNueroHu9o9q7e/39U3zfs/7/qmNvtMnjgtcfedv//V55j////Bq+uVfv/82/o303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7F8v7/g0YdB07dfvU5FxhxHHG+0eSHDx3d4x3N3q37/4+9/+QDA+stP7qHwmjg87+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+lfbNT+/wOv7P//qkELui6isP///9veov8w/aOW/sP1j1r6L6R/1NL/c/pHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19F9S/6il/1L6Ry39P69/1NJ/af2jlv5f0D9q6f9F/aOW/l/SP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/l/WP2rp/xX9o5b+K+gftfT/qv5RS/+v6R+19P+6/lFL/2/oH7X0/6b+UUv/FfWPWvp/S/+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0n91/aOW/mvoH7X0X1P/qKX/WvpHLf3X1j9q6f9t/aOW/t/RP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X0/67+UUv/DfWPWvpvpH/U0n9j/aOW/t/TP2rp/339o5b+P9A/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfT/of5RS/8t9Y9a+m+lf9TSf2v9o5b+2+gftfT/kf5RS/8f6x+19P+J/lFL/5/qH7X0/5n+UUv/n+sftfT/hf5RS/9f6h+19N9W/6il/6/0j1r6/1r/qKX/b/SPWvr/Vv+opf/v9I9a+m+nf9TSf3v9o5b+v9c/aun/B/2jlv5/1D9q6f8n/aOW/n/WP2rp/xf9o5b+f9U/aum/g/5RS/8d9Y9a+v9N/6il/9/1j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+u+lf9TSf2/9o5b+++gftfTfV/+opf9++kct/ffXP2rpf4D+UUv/A/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/YfpHLf0P1z9q6X+E/lFL/yP1j1r6H6V/1NL/aP2jlv7H6B+19D9W/6il/3H6Ry39j9c/aul/gv5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/efpHLf3P1z9q6X+B/lFL/wv1j1r6X6R/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39L9c/aul/hf5RS/8r9Y9a+l+lf9TS/2r9o5b+1+gftfS/Vv+opf91+kct/a/XP2rpf4P+UUv/G/WPWvrfpH/U0v9m/aOW/rfoH7X0v1X/qKX/bfpHLf1v1z9q6X+H/lFL/zv1j1r636V/1NL/bv2jlv736B+19L9X/6il/336Ry3979c/aun/gP5RS/9/6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOW/i/oH7X0f1H/qKX/S/pHLf1f1j8q6T/yrv7/qqX/IP2jlv6D9Y9a+g/RP2rpP4b+UUv/ofpHLf3H1D9q6T+W/lFL/7H1j1r6j6N/1NJ/XP2jlv7j6R+19H+P/v805J93W/q/V/+opf/79I9a+o+vf9TSfwL9o5b+79c/auk/of5RS/8P6B+19J9I/6il/wf1j1r6f0j/qKX/h/WPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/R/SPWvp/VP+opf/H9I9a+n9c/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+k+tf9TSfxr9o5b+0+oftfSfTv+opf/0+kct/T+hf9TS/5P6Ry39P6V/1NL/0/pHLf1n0D9q6T+j/lFL/5n0j1r6z6x/1NJ/Fv2jlv6z6h+19J9N/6il/+z6Ry3959A/auk/p/5RS/+59I9a+s+tf9TSfx79o5b+8+oftfSfT/+opf/8+kct/T+jf9TS/7P6Ry39F9A/aum/oP5RS/9h+kct/YfrH7X0X0j/qKX/5/SPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6b+k/lFL/6X0j1r6f17/qKX/0vpHLf2/oH/U0v+L+kct/b+kf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/b+sf9TS/yv6Ry39V9A/aun/Vf2jlv5f0z9q6f91/aOW/t/QP2rp/039o5b+K+oftfT/lv5RS/+V9I9a+q+sf9TSfxX9o5b+q+oftfRfTf+opf/q+kct/dfQP2rpv6b+UUv/tfSPWvqvrX/U0v/b+kcF/Z95+eWXB39H/6ig/8i76+gftfRfV/+opf96+kct/dfXP2rpv4H+UUv/7+oftfTfUP+opf9G+kct/TfWP2rp/z39o5b+39c/aun/A/2jlv6b6B+19N9U/6il/2b6Ry39N9c/aum/hf7RqP4DW79y+q7t/0P9o5b1v6X+UUv/rfSPWvpvrX/U0n8b/aOW/j/SP2rp/2P9o5b+P9E/aun/U/2jlv4/0z9q6f9z/aOW/r/QP2rp/0v9o5b+2+oftfT/lf5RS/9f6x+19P+N/lFL/9/qH7X0/53+UUv/7fSPWvpvr3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0v+v+kct/XfQP2rpv6P+UUv/v+kftfT/u/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfTfTf+opf/u+kct/ffQP2rpv6f+UUv/vfSPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv6H6h+19D9M/6il/+H6Ry39j9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+x+oftfQ/Tv+opf/x+kct/U/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0jyr6DxkYfLb+UUX/gYHB5+gftfQ/V/+opf95+kct/c/XP2rpf4H+UUv/C/WPWvpfpH/U0v9i/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1z9q6X+F/lFL/yv1j1r6X6V/1NL/av2jlv7X6B+19L9W/6il/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/3/oH7X0f1D/qKX/Q/pHLf0f1j9q6f+I/lFL/0f1j1r6P6Z/1NL/cf2jlv5P6B+19H9S/6il/1P6Ry39n9Y/aun/jP5RS/9n9Y9a+j+nf9TS/3n9o5b+L+gftfR/Uf+opf9L+kct/V/WPyrpP2RA/6il/yD9o5b+g/WPWvoP0T9q6T+G/lFL/6H6Ry39x9Q/auk/lv5RS/+x9Y9a+o+jf9TSf1z9o5b+4+kftfR/j/5RS//36h+19H+f/lFL//H1j1r6T6B/1NL//fpHLf0n1D9q6f8B/aOW/hPpH7X0/6D+UUv/D+kftfT/sP5RS/+J9Y9a+k+if9TSf1L9o5b+k+kftfT/iP5RS/+P6h+19P+Y/lFL/4/rH7X0n1z/qKX/FPpHLf2n1D9q6T+V/lFL/6n1j1r6T6N/1NJ/Wv2jlv7T6R+19J9e/6il/yf0j1r6f1L/qKX/p/SPWvp/Wv+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6z6N/1NJ/Xv2jlv7z6R+19J9f/6il/2f0j1r6f1b/qKX/AvpHLf0X1D9q6T9M/6il/3D9o5b+C+kftfT/nP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/z+sftfRfWv+opf8X9I9a+n9R/6il/5f0j1r6L6N/1NJ/Wf2jlv7L6R+19F9e/6il/5f1j1r6f0X/qKX/CvpHLf2/qn/U0v9r+kct/b+uf9TS/xv6Ry39v6l/1NJ/Rf2jlv7f0j9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+n9b/6il/3f0j1r6r6N/1NJ/Xf2jlv7r6R+19F9f/6il/wb6Ry39v6t/1NJ/Q/2jlv4b6R+19N9Y/6il//f0j1r6f1//qKX/D/SPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/FvpHLf1/qH/U0n9L/aOW/lvpH/2z/xgDAwPv3v5b6x+1rP9t9I9a+v9I/6il/4/1j1r6/0T/qKX/T/WPWvr/TP+opf/P9Y9a+v9C/6il/y/1j1r6b6t/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/3f6Ry39t9M/aum/fWv/sd7+4Zb+v2/t/2+09P+D/lFL/z/qH7X0/5P+UUv/P+sftfT/i/5RS/+/6h+19N9B/6il/476Ry39/6Z/1NL/7/pHLf130j9q6b+z/lFL/130j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rpf7D+UUv/Q/SPWvofqn/U0v8w/aOW/ofrH7X0P0L/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/OP2jlv7H6x+19D9B/6il/4n6Ry39T9I/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v88/aOW/ufrH7X0v0D/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W96Z/2X/o+N679US/+brf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v9O/aOW/nfpH7X0v1v/qKX/PfpHLf3v1T9q6X/fv+0/9n92XP+lWvrfb/1HLf0f0D9q6f8P/aOW/g/qH7X0f0j/qKX/w/pHLf0f0T9q6f+o/lFL/8f0j1r6P65/1NL/Cf2jlv5P6h+19H9K/6il/9P6Ry39n9E/aun/rP5RS//n9I9a+j+vf9TS/wX9o5b+L+oftfR/Sf+opf/L+kcl/ccY0D9q6T9I/6il/2D9o5b+Q/SPWvqPoX/U0n+o/lFL/zH1j1r6j6V/1NJ/bP2jlv7j6B+19B9X/6il/3j6Ry3936N/1NL/vfpHLf3fp3/U0n98/aOW/hPoH7X0f7/+UUv/CfWPWvp/QP+opf9E+kct/T+of9TS/0P6Ry39P6x/1NJ/Yv2jlv6T6B+19J9U/6il/2T6Ry39P6J/1NL/o/pHLf0/pn/U0v/j+kct/SfXP2rpP4X+UUv/KfWPWvpPpX/U0n9q/aOW/tPoH7X0n1b/qKX/dPpHLf2n1z9q6f8J/aOW/p/UP2rp/yn9o5b+n9Y/auk/g/5RS/8Z9Y9a+s+kf9TSf2b9o5b+s+gftfSfVf+opf9s+kct/WfXP2rpP4f+UUv/OfWPWvrPpX/U0n9u/aOW/vPoH7X0n1f/qKX/fPpHLf3n1z9q6f8Z/aOW/p/VP2rpv4D+UUv/BfWPWvoP0z9q6T9c/6il/0L6Ry39P6d/1NJ/Yf2jlv6L6B+19F9U/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TS//P6Ry39l9Y/aun/Bf2jlv5f1D9q6f8l/aOW/svoH7X0X1b/qKX/cvpHLf2X1z9q6f9l/aOW/l/RP2rpv4L+UUv/r+oftfT/mv5RS/+v6x+19P+G/lFL/2/qH7X0X1H/qKX/t/SPWvqvpH/U0n9l/aOW/qvoH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7f1j9q6f8d/aOW/uvoH7X0X1f/qKX/evpHLf3X1z9q6b+B/lFL/+/qH7X031D/qKX/RvpHLf031j9q6f89/aOW/t/XP2rp/wP9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/H+oftfTfUv+opf9W+kct/bfWP2rpv43+UUv/H+kftfT/sf5RS/+f6B+19P+p/lFL/5/pH7X0/7n+UUv/X+gftfT/pf5RS/9t9Y9a+v9K/6il/6/1j1r6/0b/qKX/b/WPWvr/Tv+opf92+kct/bfXP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/1f9o5b+O+gftfTfUf+opf/f9I9a+v9d/6il/076Ry39d9Y/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf9e+kct/ffWP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6H6Z/1NL/cP2jlv5H6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+h+nf9TS/3j9o5b+J+gftfQ/Uf+opf9J+kct/U/WP2rpf4r+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0P1P/qKX/WfpHLf3P1j9q6X+O/lFL/3P1j1r6n6d/1NL/fP2jlv4X6B+19L9Q/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+l+mf9TS/3L9o5b+V+gftfS/Uv+opf9V+kct/a/WP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv536B+19L9T/6il/136Ry3979Y/aul/j/5RS/97a/tv/baPtvS/r7b/22vpf7/+UUv/B/SPWvr/Q/+opf+D+kct/R/SP2rp/7D+UUv/R/SPWvo/qn/U0v8x/aOW/o/rH7X0f0L/qKX/k/pHLf2f0j9q6f+0/lFL/2f0j1r6P6t/1NL/Of2jlv7P6x+19H9B/6il/4v6Ry39X9I/aun/sv5RSf+hA/pHLf0H6R+19B+sf9TSf4j+UUv/MfSPWvoP1T9q6T+m/lFL/7H0j1r6j61/1NJ/HP2jlv7j6h+19B9P/6il/3v0j1r6v1f/qKX/+/SPWvqPr3/U0n8C/aOW/u/XP2rpP6H+UUv/D+gftfSfSP+opf8H9Y9a+n9I/6il/4f1j1r6T6x/1NJ/Ev2jlv6T6h+19J9M/6il/0f0j1r6f1T/qKX/x/SPWvp/XP+opf/k+kct/afQP2rpP6X+UUv/qfSPWvpPrX/U0n8a/aOW/tPqH7X0n07/qKX/9PpHLf0/oX/U0v+T+kct/T+lf9TS/9P6Ry39Z9A/auk/o/5RS/+Z9I9a+s+sf9TSfxb9o5b+s+oftfSfTf+opf/s+kct/efQP2rpP6f+UUv/ufSPWvrPrX/U0n8e/aOW/vPqH7X0n0//qKX//PpHLf0/o3/U0v+z+kct/RfQP2rpv6D+UUv/YfpHLf2H6x+19F9I/6il/+f0j1r6L6x/1NJ/Ef2jlv6L6h+19F9M/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+n9e/6il/9L6Ry39v6B/1NL/i/pHLf2/pH/U0n8Z/aOW/svqH7X0X07/qKX/8vpHLf2/rH/U0v8r+kct/VfQP2rp/1X9o5b+X9M/aun/df2jlv7f0D9q6f9N/aOW/ivq/y8umvCVY0P/b+kftaz/lfSPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NL/2/pHLf2/o3/U0n8d/aOW/uvqH7X0X0//qKX/+vpHLf030D9q6f9d/aOW/hvqH7X030j/qKX/xvpHLf2/p3/U0v/7+kct/X+gf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/bfQP2rp/0P9o5b+W+oftfTfSv+opf/W+kct/bfRP2rp/yP9o5b+P9Y/aun/E/2jlv4/1T9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aum/rf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/3+kftfTfTv+opf/2+kct/X+vf9TS/w/6Ry39/6h/1NL/T/pHLf3/rH/U0v8v+kct/f+qf9TSfwf9o5b+O+oftfT/m/5RS/+/6x+19N9J/6il/876Ry39d9E/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfS/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9B9lrDectfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39L9Q/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfS/XP+opf8V+kct/a/UP2rpf5X+UUv/q/WPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/jemH7b0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/x/6Ry39H9Q/aun/kP5RS/+H9Y9a+j+if9TS/1H9o5b+j+kftfR/XP+opf8T+kct/Z/UP2rp/5T+UUv/p/WPWvo/o3/U0v9Z/aOW/s/pH7X0f17/qKX/C/pHLf1f1D9q6f+S/lFL/5f1j0r6jzmgf9TSf5D+UUv/wfpHLf2H6B+19B9D/6il/1D9o5b+Y+oftfQfS/+opf/Y+kct/cfRP2rpP67+UUv/8fSPWvq/R/+opf979Y9a+r9P/6il//j6Ry39J9A/aun/fv2jlv4T6h+19P+A/lFL/4n0j1r6f1D/qKX/h/SPWvp/WP+opf/E+kct/SfRP2rpP6n+UUv/yfSPWvp/RP+opf9H9Y9a+n9M/6il/8f1j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TS/xP6Ry39P6l/1NL/U/pHLf0/rX/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/9zvpP8Y/8Fx/Zdq6T+P9R+19J9X/6il/3z6Ry3959c/aun/Gf2jlv6f1T9q6b+A/lFL/wX1j1r6D9M/auk/XP+opf9C+kct/T+nf9TSf2H9o5b+i+gftfRfVP+opf9i+kct/RfXP2rpv4T+UUv/JfWPWvovpX/U0v/z+kct/ZfWP2rp/wX9o5b+X9Q/aun/Jf2jlv7L6B+19F9W/6il/3L6Ry39lx/Zf/DoGtV/rZb+X7b+o5b+X9E/aum/gv5RS/+v6h+19P+a/lFL/6/rH7X0/4b+UUv/b+oftfRfUf+opf+39I9a+q+kf9TSf2X9o5b+q+gftfRfVf+opf9q+kct/VfXP2rpv4b+UUv/NfWPWvqvpX/U0n9t/aOW/t/WP2rp/x39o5b+6+gftfRfV/+opf96+kct/dfXP2rpv4H+UUv/7+oftfTfUP+opf9G+kct/TfWP2rp/z39o5b+39c/aun/A/2jlv6b6B+19N9U/6il/2b6Ry39N9c/aum/hf5RS/8f6h+19N9S/6il/1b6R6/rP9a7uf/W+kct638b/aOW/j/SP2rp/2P9o5b+P9E/aun/U/2jlv4/0z9q6f9z/aOW/r/QP2rp/0v9o5b+2+oftfT/lf5RS/9f6x+19P+N/lFL/9/qH7X0/53+UUv/7fSPWvpvr3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0v+v+kct/XfQP2rpv6P+UUv/v+kftfT/u/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfTfTf+opf/u+kct/ffQP2rpv6f+UUv/vfSPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv6H6h+19D9M/6il/+H6Ry39j9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+x+oftfQ/Tv+opf/x+kct/U/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/snjuz4z04jju77/WfpHLev/bP2jlv7n6B+19D9X/6il/3n6Ry39z9c/aul/gf5RS/8L9Y9a+l/U1n+sd/a0lv4Xt/V/h1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39r9Q/aul/lf5RS/+r9Y9a+l+jf9TS/1r9o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0v13/qKX/HfpHLf3v1D9q6X+X/lFL/7v1j1r636N/1NL/Xv2jlv736R+19L9f/6il/wP6Ry39/6F/1NL/Qf2jlv4P6R+19H9Y/6il/yP6Ry39H9U/aun/mP5RS//H9Y9a+j+hf9TS/0n9o5b+T+kftfR/Wv+opf8z+kct/Z/VP2rp/5z+UUv/5/WPWvq/oH/U0v9F/aOW/i/pH7X0f1n/qKT/yN1Q9P9XLf0H6R+19B+sf9TSf4j+UUv/MfSPWvoP1T9q6T+m/lFL/7H0j1r6j61/1NJ/HP2jlv7j6h+19B9P/6il/3v0j1r6v1f/qKX/+/SPWvqPr3/U0n8C/aOW/u/XP2rpP6H+UUv/D+gftfSfSP+opf8H9Y9a+n9I/6il/4f1j1r6T6x/1NJ/Ev2jlv6T6h+19J9M/6il/0f0j1r6f1T/qKX/x/SPWvp/XP+opf/k+kdv7D/7u7b/FPpHLet/Sv2jlv5T6R+19J9a/6il/zT6Ry39p9U/auk/nf5RS//p9Y9a+n9C/6il/yf1j1r6f0r/qKX/p/WPWvrPoH/U0n9G/aOW/jPpH7X0n1n/qKX/LPpHLf1n1T9q6T+b/lFL/9n1j1r6z6F/1NJ/Tv2jlv5z6R+19J9b/6il/zz6Ry3959U/auk/n/5RS//59Y9a+n9G/6il/2f1j1r6L6B/1NJ/Qf2jlv7D9I9a+g/XP2rpv5D+UUv/z+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvovoX/U0n9J/aOW/kvpH7X0/7z+UUv/pfWPWvp/Qf+opf8X9Y9a+n9J/6il/zL6Ry39l9U/aum/nP5RS//l9Y9a+n9Z/6il/1f0j1r6r6B/1NL/q/pHLf2/pn/U0v/r+kev9F/gXd//G/pHLev/m/pHLf1X1D9q6f8t/aOW/ivpH7X0X1n/qKX/KvpHLf1X1T9q6b+a/lFL/9X1j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/7f1j1r6f0f/qKX/OvpHLf3X1T9q6b+e/lFL//X1j1r6b6B/1NL/u/pHLf031D9q6b+R/lFL/431j1r6f0//qKX/9/WPWvr/QP+opf8m+kct/TfVP2rpv5n+UUv/zfWPWvpvoX/U0v+H+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0v9H+kct/X+sf9TS/yf6Ry39f6p/1NL/Z/pHLf1/rn/U0v8X+kct/X+pf9TSf1v9o5b+v9I/aun/a/2jlv6/0T9q6f9b/aOW/r/TP2rpv53+UUv/7fWPWvr/Xv+opf8f9I9a+v9R/6il/5/0j1r6/1n/qKX/X/SPWvr/Vf+opf8O+kct/XfUP2rp/zf9o5b+f9c/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rpv5f+UUv/vfWPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39L9Q/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfS/XP+opf8V+kct/a/UP2rpf5X+UUv/q/WPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kcl/YeMruH8tyvpP9aD1n/U0v8h/aOW/g/rH7X0f0T/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j1r6P6l/1NL/Kf2jlv5P6x+19H9G/6il/7P6Ry39n9M/aun/vP5RS/8X9I9a+r+of9TS/yX9o5b+L+sflfQfe0D/qKX/IP2jlv6D9Y9a+g/RP2rpP4b+UUv/ofpHLf3H1D9q6T+W/lFL/7H1j1r6j6N/1NJ/XP2jlv7j6R+19H+P/lFL//fqH7X0f5/+UUv/8fWPWvpPoH/U0v/9+kct/SfUP2rp/wH9o5b+E+kftfT/oP5RS/8P6R+19P+w/lFL/4n1j1r6T6J/1NJ/Uv2jlv6T6R+19P+I/lFL/4/qH7X0/5j+UUv/j+sftfSfXP+opf8U+kct/afUP2rpP5X+UUv/qfWPWvpPo3/U0n9a/aOW/tPpH7X0n17/qKX/J/SPWvp/Uv+opf+n9I9a+n9a/6il/wz6Ry39Z9Q/auk/k/5RS/+Z9Y9a+s+if9TSf1b9o5b+s+kftfSfXf+opf8c+kct/efUP2rpP5f+UUv/ufWPWvrPo3/U0n9e/aOW/vPpH7X0n1//qKX/Z/SPWvp/Vv+opf8C+kct/RfUP2rpP0z/qKX/cP2jlv4L6R+19P+c/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/6il/xL6Ry39l9Q/aum/lP5RS//P6x+19F9a/6il/xf0j1r6f1H/qKX/l/SPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/l/WPWvp/Rf+opf8K+kct/b+qf9TS/2v6Ry39v65/1NL/G/pHLf2/qX/U0n9F/aOW/t/SP2rpv5L+UUv/lfWPWvqvon/U0n9V/aOW/qvpH7X0X13/qKX/GvpHLf3X1D9q6b+W/lFL/7X1j1r6f1v/qKX/d/SPWvqvo3/U0n9d/aOW/uvpH7X0X1//qKX/BvpHLf2/q3/U0n9D/aOW/hvpH7X031j/qKX/9/SPWvp/X/+opf8P9I9a+m+if9TSf1P9o5b+m+kftfTfXP+opf8W+kct/X+of9TSf0v9o5b+W+kftfTfWv+opf82+kct/X+kf9TS/8f6Ry39f6J/1NL/p/pHLf1/pn/U0v/n+kct/X+hf9TS/5f6Ry39t9U/aun/K/2jlv6/1j9q6f8b/aOW/r/VP2rp/zv9o5b+2+kftfTfXv+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9f9Y9a+u+gf9TSf0f9o5b+f9M/aun/d/2jlv476R+19N9Z/6il/y76Ry39d9U/aum/m/5RS//d9Y9a+u+hf9TSf0/9o5b+e+kftfTfW/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0P1j/qKX/IfpHLf0P1T9q6X+Y/lFL/8P1j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+p+gf9TS/0T9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0P1v/qKX/OfpHLf3P1T9q6X+e/lFL//P1j1r6X6B/1NL/Qv2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636H/SKe+/Mbzlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+/9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOW/s/qH7X0f07/qKX/8/pHLf1f0D9q6f+i/lFL/5f0j1r6v6x/VNJ/nAH9o5b+g/SPWvoP1j9q6T9E/6il/xj6Ry39h+oftfQfU/+opf9Y+kct/cfWP2rpP84b+o/xf39c/6Va+o9r/Uct/cfTP2rp/x79o5b+79U/aun/Pv2jlv7j6x+19J9A/6il//v1j1r6T6h/1NL/A/pHLf0n0j9q6f9B/aOW/h/SP2rp/2H9o5b+E+sftfSfRP+opf+k+kct/SfTP2rp/xH9o5b+H9U/aun/Mf2jlv4f1z9q6T+5/lFL/yn0j1r6T1nW/53OtaX/VGX936mW/lPrH7X0n0b/qKX/tPpHLf2n0z9q6T+9/lFL/0/oH7X0/6T+UUv/T+kftfT/tP5RS/8Z9I9a+s+of9TSfyb9o5b+M+sftfSfRf+opf+s+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/nPrH7X0n0f/qKX/vPpHLf3n0z9q6T+//lFL/8/oH7X0/6z+UUv/BfSPWvovqH/U0n+Y/lFL/+H6Ry39F9I/aun/Of2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TSfyn9o5b+n9c/aum/tP5RS/8v6B+19P+i/lFL/y/pH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/y/rH7X0/4r+UUv/FfSPWvp/Vf+opf/X9I9a+n9d/6il/zf0j1r6f1P/qKX/ivpHLf2/pX/U0n8l/aOW/ivrH7X0X0X/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19P+2/lFL/+/oH7X0X0f/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6f1f/qKX/hvpHLf030j9q6b+x/tG7tP8EA2/q/z39o3dp/5Fe3//7+kct/X+gf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/bfQP2rp/0P9o5b+W+oftfTfSv+opf/W+kct/bfRP2rp/yP9o5b+P9Y/aun/E/2jlv4/1T9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aum/rf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/3+kftfTfTv+opf/2+kct/X+vf9TS/w/6Ry39/6h/1NL/T/pHLf3/rH/U0v8v+kct/f+qf9TSfwf9o5b+O+oftfT/m/5RS/+/6x+19N9J/6il/876Ry39d9E/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfS/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+/9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOW/s/qH7X0f07/qKX/8/pHLf1f0D9q6f+i/lFL/5f0j1r6v6x/VNJ/3AH9o5b+g/SPWvoP1j9q6T9E/6il/xj6Ry39h+oftfQfU/+opf9Y+kct/cfWP2rpP47+UUv/cfWPWvqPp3/U0v89+kct/d+rf9TS/336Ry39x9c/auk/gf5RS//36x+19J9Q/6il/wf0j1r6T6R/1NL/g/pHLf0/pH/U0v/D+kct/SfWP2rpP4n+UUv/SfWPWvpPpn/U0v8j+kct/T+qf9TS/2P6Ry39P65/1NJ/cv2jlv5T6B+19J9S/6il/1T6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+n9A/aun/Sf2jlv6f0j9q6f9p/aOW/jPoH7X0n1H/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry3959Y/auk/j/5RS/959Y9a+s+nf9TSf379o5b+n9E/aun/Wf2jlv4L6B+19F9Q/6il/zD9o5b+w/WPWvovpH/U0v9z+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/UvpHLf0/r3/U0n9p/aOW/l/QP2rp/0X9o5b+X9I/aum/jP5RS/9l9Y9a+i+nf9TSf3n9o5b+X9Y/aun/Ff2jlv4r6B+19P+q/lFL/6/pH7X0/7r+UUv/b+gftfT/pv5RS/8V9Y9a+n9L/6il/0r6Ry39V9Y/aum/iv5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfs6X/y/+zWbb0X6ul//9QS/+19Y9a+n9b/6il/3f0j1r6r6N/1NJ/Xf2jlv7r6R+19F9f/6il/wb6Ry39v6t/1NJ/Q/2jlv4b6R+19N9Y/6il//f0j1r6f1//qKX/D/SPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/FvpHLf1/qH/U0n9L/aOW/lvpH7X031r/qKX/NvpHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39f6Z/1NL/5/pHLf1/oX/U0v+X+kct/bfVP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6f87/aOW/tvpH7X0317/qKX/7/WPWvr/Qf+opf8f9Y9a+v9J/6il/5/1j1r6/0X/qKX/X/WPWvrvoH/U0n9H/aOW/n/TP2rp/3f9o5b+O+kftfTfWf+opf8u+kct/XfVP2rpv5v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aul/mP5RS//D9Y9a+h+hf9TS/0j9o5b+R+kftfQ/Wv+opf8x+kct/Y/VP2rpf5z+UUv/4/WPWvqfoH/U0v9E/aOW/ifpH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+l+gf9TS/0L9o5b+F+kftfS/WP+opf8l+kct/S/VP2rpf5n+UUv/y/WPWvpfoX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf89+kct/e/VP2rpf5/+UUv/+/WPWvo/oH/U0v8f+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/1NL/Wf2jlv7P6R+19H9e/6il/wv6Ry39X9Q/aun/kv5RS/+X9Y9K+o83oH/U0n+Q/lFL/8H6Ry39h+gftfQfQ/+opf9Q/aOW/mPqH7X0H0v/qKX/2PpHLf3H0T9q6T+u/lFL//H0j1r6v0f/qKX/e/WPWvq/T/+opf/4+kct/SfQP2rp/379o5b+E+oftfT/gP5RS/+J9I9a+n9Q/6il/4f0j1r6f1j/qKX/xPpHLf0n0T9q6T+p/lFL/8n0j1r6f0T/qKX/R/WPWvp/TP+opf/H9Y9a+k+uf9TSfwr9o5b+U+oftfSfSv+opf/U+kct/afRP2rpP63+UUv/6fSPWvpPr3/U0v8T+kct/T+pf9TS/1P6Ry39P61/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf/c+kct/efRP2rpP6/+UUv/+fSPWvrPr3/U0v8z+kct/T+rf9TSfwH9o3ddfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtwIAAP//LYBzUA==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x2e}]}, 0x28}}, 0x0) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0x40000b}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x568, 0x0, 0x8, 0x8}, 0x10) r4 = fcntl$dupfd(r0, 0x0, r2) sendto$inet6(r4, &(0x7f0000000540)="da", 0x1, 0x0, 0x0, 0x0) 15.489931794s ago: executing program 2 (id=829): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f00000003c0)=""/4096, 0x80000001, 0x1000}, &(0x7f0000000100)={&(0x7f0000000240)=""/249, 0x0, 0xf9}) 15.42568508s ago: executing program 2 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f400000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000090800014000000000080002400000000a1400"], 0xdc}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 15.345058567s ago: executing program 2 (id=831): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.222586217s ago: executing program 2 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES8=r0, @ANYBLOB="05001300e0c90600000a000600ffffffffffff0000060000000500e40000785f172f811b552a00000000000000200000"], 0x50}}, 0x20008800) (async, rerun: 32) chdir(&(0x7f0000000240)='./file0\x00') (async, rerun: 32) fanotify_init(0x200, 0x0) (async) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r2 = dup(r1) fcntl$setlease(r2, 0x400, 0x0) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'U+', 0x3}, 0x16, 0x1) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) (async) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x40) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) (async) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x318, 0xb, 0x148, 0x0, 0x148, 0x3a8, 0x242, 0x240, 0x3a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x0, 0x2d0, 0x318, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xb}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 14.777751025s ago: executing program 2 (id=833): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x18100, 'sh\x00', 0x763109263de092}, 0x2c) 5.570628477s ago: executing program 4 (id=865): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) (fail_nth: 5) 5.385240163s ago: executing program 4 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R'], 0x28}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$video4linux(&(0x7f0000000580), 0xa0000000000, 0x200000) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000005c0)={0x1, 0x0, {0xf194, 0x40, 0x2016, 0x6, 0x7, 0x3, 0x1, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002d80), 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000568000/0x2000)=nil, 0x2000}, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000002dc0)={0x80, 0x4, 0x0, 0x9}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40}, {0x28, 0x0, 0x0, 0x7ff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, 0x0, 0x703, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 4.366226919s ago: executing program 1 (id=867): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) 4.154767887s ago: executing program 1 (id=869): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) 4.113112501s ago: executing program 1 (id=870): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22400049, &(0x7f0000002640)={[{@init_itable}, {@noinit_itable}, {@noauto_da_alloc}, {@noblock_validity}, {@usrquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@grpjquota}, {@lazytime}]}, 0x84, 0x485, &(0x7f0000002bc0)="$eJzs3E1vG0UfAPD/rpP06UsaP6W8tBRqKBURhaRJC/TABQRSL0hIcIBjSENV6raoCRKtKhoQKkfEJwCOSHwCTnBBwAnEFe4IqUK9UDggo7V3Wyd2QmLHcYp/P2njmd31zszOTHZ2x3YAA6uS/UkidkXEzxEx1ogu3aHSeLl548rsnzeuzCZRq738e1Lf748bV2aLXXflrzvzY46nEekHSSy2SXf+0uWzM9Xq3MU8Prlw7q3J+UuXnzhzbub03Om589MnThw/NvX0U9NPbkg5R7O87n/3woF9J1/7+MXZWrz+3RdZ/kv59uZyNJS7TrMSlajVarV0ydqR+t/DXR99axltCidDfcwI65K1/6y6huv9fyxKcbvyxuKF9/uaOaCnsuvT/1vWNq6K6eGkvh34r+qwj1/d8IwAm6y44mf3v8WyuSOQ/rr+bOMGKCv3zXxpbBmK7L49KTfu2Es9Sn9XRLy6+Ncn2RJtnkNs61G6AMDg+iob/zzebvyXxj1N++3O54bKEXEkIvZExF0RsTci7o6o73tvRNy3zvQry+Kt488ft3dUsDXKxn/P5HNbS8d/t2ZtyqU8Nlov/3Dyxpnq3NH8nIzH8LYsPrVKGl8//9NHK22rNI3/siVLvxgL5vn4bWjZIPDUzMJMN2Vudv29iP1D7cqf3JoJSCJiX0Ts7+D42Tk789jnB7Lw7p2t2/+9/KvYgHmm2mcRjzbqfzGWlb+QNFJaaX5y8n9RnTs6WbSKVt//cO2l5vhwU7ir8m+ArP53tG3/efmLblDM186vP41rv3y44j1lp+1/JHmlHh7J170zs7BwcSpiJF+xZP307fcW8WL/rPzjh9r3/z0Rf3+av+/+iMga8QMR8WBEHMzz/lBEPBwRh1Yp/7fPPfLm6meov/V/arX6jygnzfP1HQRKZ7/5cqX011b/x+uh8XzNWv7/rTWD3Zw7AAAAuFOk9TnoJJ24FU7TiYnGZ/j3xo60emF+4Ugl3j5/qjFXXY7htHjSNdb0PHQqfzZcxKeXxY9FJIv1jxtur8cnZi9UR/tdeBhwO1fo/5lfe/WhF2DrWNc8WtK7fACbz/c1YXDp/zC49H8YXPo/DK52/f9qxM0+ZAXYZK7/MLj0fxhc+j8MLv0fBlLrV+KLn1vp5Jv+twN7Tnb19i0SKH78opdplXp05Gj+0Y4eBCLtd+10EUi3QjYO5oFtEdF2n3MtzS/tbZ0ubz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3vn8CAAD//xyF26s=") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x3ff, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2040400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x67) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x400160c, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000540)=0xb7, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002d80), 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000568000/0x2000)=nil, 0x2000}, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000002dc0)={0x80, 0x4, 0x0, 0x9}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40}, {0x28, 0x0, 0x0, 0x7ff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, r9, 0x703, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 1.586965755s ago: executing program 3 (id=878): socket$l2tp(0x2, 0x2, 0x73) socket(0x10, 0x2, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000000), 0x4) 1.082273028s ago: executing program 1 (id=879): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) (async, rerun: 64) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) (rerun: 64) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') (async) keyctl$describe(0x6, r1, &(0x7f00000002c0)=""/123, 0x7b) 497.415778ms ago: executing program 3 (id=880): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x810100, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) 456.184502ms ago: executing program 4 (id=881): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) (fail_nth: 6) 354.70763ms ago: executing program 3 (id=882): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x0, 0x54e, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x41f, @time={0x0, 0xfffffffd}, 0xfe, {0x0, 0x5}, 0x0, 0x0, 0x6}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x0, 0x54e, &(0x7f00000010c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x41f, @time={0x0, 0xfffffffd}, 0xfe, {0x0, 0x5}, 0x0, 0x0, 0x6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) (async) 354.53646ms ago: executing program 4 (id=883): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) 290.763536ms ago: executing program 4 (id=884): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) 235.93065ms ago: executing program 3 (id=885): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x8, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x45) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000180)='./file0\x00', 0x1010000, &(0x7f0000001980)=ANY=[], 0x1, 0x363, &(0x7f0000000280)="$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") bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x1}, 0x8) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ppoll(&(0x7f00000006c0)=[{r4, 0x300}, {r1, 0x10}], 0x2, &(0x7f0000000780), &(0x7f00000007c0)={[0x4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) connect$can_bcm(r5, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 207.149583ms ago: executing program 2 (id=833): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x18100, 'sh\x00', 0x763109263de092}, 0x2c) 213.56µs ago: executing program 1 (id=886): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x33, @remote, 0x4e21, 0x0, 'sh\x00', 0x763109263de092}, 0x2c) (fail_nth: 2) 0s ago: executing program 4 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R'], 0x28}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$video4linux(&(0x7f0000000580), 0xa0000000000, 0x200000) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000005c0)={0x1, 0x0, {0xf194, 0x40, 0x2016, 0x6, 0x7, 0x3, 0x1, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002d80), 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000568000/0x2000)=nil, 0x2000}, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000002dc0)={0x80, 0x4, 0x0, 0x9}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40}, {0x28, 0x0, 0x0, 0x7ff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, r9, 0x703, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): etlink: 132 bytes leftover after parsing attributes in process `syz.1.144'. [ 73.865360][ T4718] loop2: detected capacity change from 0 to 1024 [ 74.006212][ T4718] hfsplus: unable to load nls mapping "ier" [ 74.007764][ T4718] hfsplus: unable to parse mount options [ 74.509903][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 74.752421][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 74.779960][ T3321] cfg80211: failed to load regulatory.db [ 74.954353][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 75.310260][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 75.649689][ T4774] loop3: detected capacity change from 0 to 512 [ 75.712286][ T4774] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2765: inode #11: comm syz.3.163: corrupted xattr block 95 [ 75.731231][ T4774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.163: bg 0: block 7: invalid block bitmap [ 75.755523][ T4718] loop2: detected capacity change from 0 to 32768 [ 75.776396][ T4774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 75.778898][ T4774] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2931: inode #11: comm syz.3.163: corrupted xattr block 95 [ 75.786315][ T4774] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 75.803025][ T4774] EXT4-fs (loop3): 1 orphan inode deleted [ 75.804502][ T4774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.904550][ T4777] loop4: detected capacity change from 0 to 8192 [ 75.933059][ T4773] loop0: detected capacity change from 0 to 32768 [ 75.971149][ T4718] jfs_strtoUCS: char2uni returned -22. [ 75.976511][ T4777] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 75.979018][ T4777] REISERFS (device loop4): using ordered data mode [ 75.980626][ T4777] reiserfs: using flush barriers [ 75.986323][ T4718] charset = cp949, char = 0xd4 [ 75.986658][ T4777] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.006489][ T4777] REISERFS (device loop4): checking transaction log (loop4) [ 76.018054][ T4777] REISERFS (device loop4): Using rupasov hash to sort names [ 76.020035][ T4777] REISERFS (device loop4): using 3.5.x disk format [ 76.021829][ T4777] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.024888][ T4777] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.077314][ T4777] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.080049][ T4777] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 76.098236][ T4773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.162 (4773) [ 76.131807][ T4777] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.134881][ T4777] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.170908][ T4773] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 76.173290][ T4773] BTRFS info (device loop0): using free space tree [ 76.174869][ T4773] BTRFS info (device loop0): has skinny extents [ 76.446016][ T4773] BTRFS info (device loop0): enabling ssd optimizations [ 76.535533][ T4810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 76.742960][ T4813] loop4: detected capacity change from 0 to 2048 [ 76.750600][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 76.850147][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 77.005450][ T4831] loop2: detected capacity change from 0 to 64 [ 77.059109][ T4831] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2 [ 77.164704][ T4841] device bridge_slave_1 left promiscuous mode [ 77.187284][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.370892][ T4841] bridge1: port 1(bridge_slave_1) entered blocking state [ 77.546204][ T4841] bridge1: port 1(bridge_slave_1) entered disabled state [ 78.053548][ T4841] device bridge_slave_1 entered promiscuous mode [ 78.219776][ T4855] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 78.222672][ T4855] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 78.281840][ T4856] loop4: detected capacity change from 0 to 64 [ 78.327131][ T4856] hfs: type requires a 4 character value [ 78.328614][ T4856] hfs: unable to parse mount options [ 78.808548][ T4867] __nla_validate_parse: 1 callbacks suppressed [ 78.808563][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 79.222261][ T4858] loop0: detected capacity change from 0 to 32768 [ 79.362829][ T4858] XFS (loop0): Mounting V5 Filesystem [ 79.369063][ T4853] loop2: detected capacity change from 0 to 32768 [ 79.397587][ T4883] netlink: 'syz.4.187': attribute type 15 has an invalid length. [ 79.415217][ T4853] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ : Trying to join cluster "lock_nolock", "ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ " [ 79.485510][ T4853] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ : Now mounting FS (format 0)... [ 79.586949][ T4853] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: journal 0 mapped with 22 extents in 0ms [ 79.628487][ T4222] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: jid=0, already locked for use [ 79.631962][ T4222] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: jid=0: Looking at journal... [ 79.747186][ T4896] loop4: detected capacity change from 0 to 256 [ 79.752000][ T4858] XFS (loop0): Ending clean mount [ 79.762312][ T4222] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: jid=0: Journal head lookup took 130ms [ 79.777871][ T4222] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: jid=0: Done [ 79.781517][ T4853] gfs2: fsid=ÍýãÇ׉h[ÿ´]è1[Ôu·05†_)Ìíy6^1O¯ãºYƒqº¸d4kþm4¢ÆB:PGäÙÜ .0: first mount done, others may mount [ 79.813682][ T4027] XFS (loop0): Unmounting Filesystem [ 80.582381][ T4917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.190'. [ 81.571028][ T4932] loop0: detected capacity change from 0 to 256 [ 81.624468][ T4932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 81.821755][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 82.564511][ T4953] loop2: detected capacity change from 0 to 512 [ 82.832372][ T4953] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.832720][ T4951] loop4: detected capacity change from 0 to 32768 [ 82.836104][ T4953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.840024][ T4953] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 82.974283][ T4951] XFS (loop4): Mounting V5 Filesystem [ 83.071947][ T4951] XFS (loop4): Ending clean mount [ 83.208617][ T4978] loop0: detected capacity change from 0 to 512 [ 83.990369][ T4978] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.209: corrupted in-inode xattr [ 84.000994][ T4978] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.209: couldn't read orphan inode 15 (err -117) [ 84.017735][ T4978] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.073888][ T4978] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.209: Directory hole found for htree leaf block 0 [ 84.162450][ T5005] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.209: Directory hole found for htree leaf block 0 [ 84.200361][ T4978] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.209: Directory hole found for htree leaf block 0 [ 84.305114][ T4987] loop2: detected capacity change from 0 to 2048 [ 84.619849][ T4026] XFS (loop4): Unmounting Filesystem [ 85.011448][ T4987] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,,errors=continue. Quota mode: none. [ 85.074803][ T4967] loop1: detected capacity change from 0 to 32768 [ 85.194040][ T5014] loop0: detected capacity change from 0 to 512 [ 85.211831][ T4967] XFS (loop1): Mounting V5 Filesystem [ 85.262074][ T4967] XFS (loop1): Ending clean mount [ 85.272736][ T4967] XFS (loop1): Quotacheck needed: Please wait. [ 85.333798][ T5014] EXT4-fs (loop0): 1 orphan inode deleted [ 85.339098][ T5023] device tunl0 entered promiscuous mode [ 85.342607][ T4967] XFS (loop1): Quotacheck: Done. [ 85.348009][ T5014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.380569][ T5023] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 85.382577][ T5023] netlink: 9 bytes leftover after parsing attributes in process `syz.2.213'. [ 85.506086][ T4022] XFS (loop1): Unmounting Filesystem [ 85.952686][ T5038] loop4: detected capacity change from 0 to 32768 [ 85.958992][ T5058] serio: Serial port pts0 [ 85.962499][ T5046] chnl_net:caif_netlink_parms(): no params data found [ 86.108958][ T5038] XFS (loop4): Mounting V5 Filesystem [ 86.134951][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.145943][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.148638][ T5046] device bridge_slave_0 entered promiscuous mode [ 86.152562][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.156120][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.164022][ T5046] device bridge_slave_1 entered promiscuous mode [ 86.215115][ T5058] loop0: detected capacity change from 0 to 4096 [ 86.229813][ T5054] loop2: detected capacity change from 0 to 40427 [ 86.257558][ T5046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.262197][ T5046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.295726][ T5038] XFS (loop4): Ending clean mount [ 86.340197][ T5046] team0: Port device team_slave_0 added [ 86.357221][ T5046] team0: Port device team_slave_1 added [ 86.423930][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.432176][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.461212][ T5046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.474561][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.482372][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.526304][ T5046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.380993][ T5093] loop1: detected capacity change from 0 to 1024 [ 87.427948][ T5046] device hsr_slave_0 entered promiscuous mode [ 87.487541][ T5046] device hsr_slave_1 entered promiscuous mode [ 87.525952][ T5046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.528992][ T5046] Cannot create hsr debugfs directory [ 87.567888][ T4026] XFS (loop4): Unmounting Filesystem [ 87.699224][ T5054] loop2: detected capacity change from 0 to 40427 [ 87.722088][ T5107] loop1: detected capacity change from 0 to 256 [ 87.787292][ T5046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.826126][ T4817] Bluetooth: hci5: command 0x0409 tx timeout [ 87.865113][ T5046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.964938][ T5046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.095396][ T5110] loop1: detected capacity change from 0 to 4096 [ 88.109731][ T5046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.146491][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 88.234506][ T5054] loop2: detected capacity change from 0 to 40427 [ 88.285055][ T5046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.350144][ T5046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.350448][ T5110] loop1: detected capacity change from 0 to 4096 [ 88.362506][ T5121] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 88.457144][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 88.533616][ T5046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.581278][ T5110] loop1: detected capacity change from 0 to 4096 [ 88.581643][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 88.589512][ T5046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.470693][ T5130] udc-core: couldn't find an available UDC or it's busy [ 89.470716][ T5130] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.482526][ T5110] loop1: detected capacity change from 0 to 4096 [ 89.526540][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 89.585060][ T5134] loop0: detected capacity change from 0 to 64 [ 89.595514][ T5046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.615238][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.615889][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.626517][ T5046] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.632988][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.633471][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.633797][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.633862][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.634277][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.696863][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.697563][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.697950][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.697993][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.710533][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.725084][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.749880][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.754953][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.762689][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.771858][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.772649][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.785056][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.790742][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.804910][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.805514][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.815803][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.893597][ T5110] loop1: detected capacity change from 0 to 4096 [ 89.896189][ T4069] Bluetooth: hci5: command 0x041b tx timeout [ 89.926365][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 89.991322][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.991511][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.996129][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.038676][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.039279][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.085702][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.094317][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.103979][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.104562][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.106757][ T5046] device veth0_vlan entered promiscuous mode [ 90.114840][ T5046] device veth1_vlan entered promiscuous mode [ 90.160785][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.161475][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.162030][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.162563][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.171298][ T5046] device veth0_macvtap entered promiscuous mode [ 90.187295][ T5046] device veth1_macvtap entered promiscuous mode [ 90.243834][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.245986][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.246007][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.246021][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.246034][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.246046][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.246060][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.246072][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.246085][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.246098][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.252008][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.287837][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.290033][ T5110] loop1: detected capacity change from 0 to 4096 [ 90.290799][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.294025][ T5138] loop4: detected capacity change from 0 to 40427 [ 90.294605][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.298443][ T5110] ntfs3: Unknown parameter '0x00000000000000030x0000000000000000' [ 90.307914][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.314898][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.314922][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.314935][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.314947][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.314959][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.314984][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.314996][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.315009][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.315068][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.315081][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.316541][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.317412][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.318049][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.320402][ T5046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320467][ T5046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320491][ T5046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.320514][ T5046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.349642][ T5138] F2FS-fs (loop4): invalid crc value [ 90.371207][ T5138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.433021][ T5138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.470171][ T1705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.470216][ T1705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.473169][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.354898][ T5153] loop2: detected capacity change from 0 to 1024 [ 91.400635][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.425409][ T5153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.459614][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.480786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.530425][ T5160] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 92.731229][ T4068] Bluetooth: hci5: command 0x040f tx timeout [ 92.874438][ T5180] loop2: detected capacity change from 0 to 47 [ 92.909277][ T5190] loop0: detected capacity change from 0 to 64 [ 92.911580][ T5190] hfs: unable to parse mount options [ 92.939005][ T5191] loop4: detected capacity change from 0 to 128 [ 92.968667][ T5180] netlink: 'syz.2.246': attribute type 3 has an invalid length. [ 92.970661][ T5180] netlink: 'syz.2.246': attribute type 3 has an invalid length. [ 92.976740][ T5191] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.027410][ T5193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.320405][ T5199] udc-core: couldn't find an available UDC or it's busy [ 93.322242][ T5199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.324716][ T5199] udc-core: couldn't find an available UDC or it's busy [ 93.435625][ T5201] xt_hashlimit: max too large, truncated to 1048576 [ 93.439214][ T5199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.462448][ T5199] udc-core: couldn't find an available UDC or it's busy [ 93.464342][ T5199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.471974][ T5205] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 93.557578][ T5168] loop1: detected capacity change from 0 to 32768 [ 93.610942][ T5168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.242 (5168) [ 93.673736][ T5210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 93.731872][ T5214] loop2: detected capacity change from 0 to 256 [ 93.734018][ T5214] exfat: Unknown parameter 'uiƒd' [ 93.804528][ T5168] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 93.808887][ T5168] BTRFS info (device loop1): setting nodatacow, compression disabled [ 93.810993][ T5168] BTRFS info (device loop1): turning on flush-on-commit [ 93.812685][ T5168] BTRFS info (device loop1): enabling auto defrag [ 93.814398][ T5168] BTRFS info (device loop1): max_inline at 0 [ 93.836606][ T5214] udc-core: couldn't find an available UDC or it's busy [ 93.838497][ T5214] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.846244][ T5168] BTRFS info (device loop1): using free space tree [ 93.848002][ T5168] BTRFS info (device loop1): has skinny extents [ 94.008787][ T5218] loop0: detected capacity change from 0 to 256 [ 94.883816][ T5218] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 94.948719][ T4068] Bluetooth: hci5: command 0x0419 tx timeout [ 95.126769][ T5168] BTRFS error (device loop1): open_ctree failed [ 95.552101][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.269'. [ 95.677662][ T5283] cgroup: Need name or subsystem set [ 95.694413][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 95.730477][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'. [ 95.936588][ T5288] loop2: detected capacity change from 0 to 47 [ 96.914170][ T5297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.275'. [ 96.948066][ T5297] sctp: [Deprecated]: syz.4.275 (pid 5297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.948066][ T5297] Use struct sctp_sack_info instead [ 97.055182][ T5304] IPv6: Can't replace route, no match found [ 97.328475][ T5316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 97.498394][ T5288] MINIX-fs: deleted inode referenced: 9 [ 97.501046][ T5288] MINIX-fs: deleted inode referenced: 9 [ 97.619074][ T5322] fuse: Bad value for 'fd' [ 97.630170][ T5294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.272'. [ 97.638093][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.670492][ T5318] loop1: detected capacity change from 0 to 32768 [ 97.880089][ T5331] loop2: detected capacity change from 0 to 128 [ 97.884045][ T5318] XFS (loop1): Mounting V5 Filesystem [ 98.800555][ T5318] XFS (loop1): Ending clean mount [ 98.858694][ T5318] netlink: 644 bytes leftover after parsing attributes in process `syz.1.282'. [ 98.912521][ T5334] dccp_close: ABORT with 72 bytes unread [ 99.108311][ T4022] XFS (loop1): Unmounting Filesystem [ 99.303416][ T5383] loop0: detected capacity change from 0 to 64 [ 100.645599][ T5399] netlink: 100 bytes leftover after parsing attributes in process `syz.1.295'. [ 100.647146][ T5393] netlink: 80 bytes leftover after parsing attributes in process `syz.3.299'. [ 100.694874][ T5401] loop2: detected capacity change from 0 to 64 [ 100.769073][ T5396] loop0: detected capacity change from 0 to 4096 [ 100.785050][ T5375] loop4: detected capacity change from 0 to 32768 [ 100.830050][ T5375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.294 (5375) [ 100.849899][ T5375] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 100.852160][ T5375] BTRFS info (device loop4): use zlib compression, level 3 [ 100.854049][ T5375] BTRFS info (device loop4): using free space tree [ 100.867598][ T5375] BTRFS info (device loop4): has skinny extents [ 100.938872][ T5417] binder: 5414:5417 ERROR: BC_REGISTER_LOOPER called without request [ 101.082801][ T5375] BTRFS info (device loop4): enabling ssd optimizations [ 101.276743][ T5444] loop2: detected capacity change from 0 to 4096 [ 101.376646][ T5444] ntfs3: Bad value for 'uid' [ 102.401165][ T5473] loop1: detected capacity change from 0 to 256 [ 102.436638][ T5473] exfat: Unknown parameter 'iocharset]cp855' [ 102.446764][ T5471] loop0: detected capacity change from 0 to 2048 [ 102.499417][ T5473] xt_limit: Overflow, try lower: 0/0 [ 102.514107][ T5481] loop4: detected capacity change from 0 to 2048 [ 102.537541][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 102.556737][ T5481] UDF-fs: bad mount option "no rs" or missing value [ 102.574704][ T5471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.147127][ T5473] loop1: detected capacity change from 0 to 32768 [ 103.200631][ T5473] XFS: noikeep mount option is deprecated. [ 103.202217][ T5473] XFS: attr2 mount option is deprecated. [ 103.401318][ T5473] XFS (loop1): Mounting V5 Filesystem [ 104.277080][ T5473] XFS (loop1): Ending clean mount [ 104.295204][ T5473] XFS (loop1): Quotacheck needed: Please wait. [ 104.362838][ T5473] XFS (loop1): Quotacheck: Done. [ 104.442135][ T5549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 104.591650][ T4022] XFS (loop1): Unmounting Filesystem [ 104.634924][ T5516] loop2: detected capacity change from 0 to 32768 [ 104.690463][ T5516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (5516) [ 104.767882][ T5516] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 104.770147][ T5516] BTRFS info (device loop2): using free space tree [ 104.771811][ T5516] BTRFS info (device loop2): has skinny extents [ 104.877912][ T5547] loop4: detected capacity change from 0 to 32768 [ 104.917247][ T5516] BTRFS info (device loop2): enabling ssd optimizations [ 104.928933][ T5547] (syz.4.331,5547,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 104.933555][ T5547] (syz.4.331,5547,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 105.169503][ T5587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.333'. [ 105.405761][ T5589] loop1: detected capacity change from 0 to 512 [ 105.445666][ T5589] EXT4-fs (loop1): inline encryption not supported [ 105.447628][ T5589] EXT4-fs (loop1): Unrecognized mount option "fsuuid=_" or missing value [ 106.573544][ T5589] loop1: detected capacity change from 0 to 8192 [ 106.669495][ T5589] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 106.672195][ T5589] REISERFS (device loop1): using ordered data mode [ 106.673985][ T5589] reiserfs: using flush barriers [ 106.694324][ T5589] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.701450][ T5589] REISERFS (device loop1): checking transaction log (loop1) [ 106.742473][ T5621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 106.752696][ T5619] loop0: detected capacity change from 0 to 256 [ 106.841292][ T5619] exfat: Deprecated parameter 'namecase' [ 106.842887][ T5619] exfat: Bad value for 'umask' [ 106.855039][ T5625] udc-core: couldn't find an available UDC or it's busy [ 106.882326][ T5625] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.905001][ T5589] REISERFS (device loop1): Using tea hash to sort names [ 106.907672][ T5589] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 106.911337][ T5589] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 106.979235][ T5629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'. [ 107.238207][ T5629] loop0: detected capacity change from 0 to 4096 [ 107.394338][ T5635] netlink: 56 bytes leftover after parsing attributes in process `syz.1.348'. [ 107.406239][ T5629] NILFS (loop0): invalid segment: Checksum error in segment payload [ 107.408644][ T5629] NILFS (loop0): trying rollback from an earlier position [ 107.522088][ T5629] NILFS (loop0): recovery complete [ 107.546714][ T5638] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.721643][ T5640] loop1: detected capacity change from 0 to 2048 [ 107.724222][ T5625] loop4: detected capacity change from 0 to 40427 [ 107.811000][ T5625] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (2561, 24) [ 107.813304][ T5625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.816303][ T5625] F2FS-fs (loop4): group quota file already specified [ 107.842675][ T5640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.855077][ T5640] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 108.233978][ T5650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.356'. [ 108.936124][ T5655] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 109.081413][ T5662] device bridge_slave_1 left promiscuous mode [ 109.095330][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.207397][ T5673] netlink: 56 bytes leftover after parsing attributes in process `syz.3.360'. [ 109.309800][ T5687] loop0: detected capacity change from 0 to 128 [ 109.505656][ T5709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 109.519712][ T5711] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 110.607243][ T5727] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 110.645080][ T5729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.374'. [ 110.702535][ T5731] loop2: detected capacity change from 0 to 256 [ 110.719733][ T5731] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.740923][ T5731] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x861339c0, utbl_chksum : 0xe619d30d) [ 111.009501][ T5747] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 111.011868][ T5708] loop0: detected capacity change from 0 to 32768 [ 111.049832][ T5708] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.366 (5708) [ 111.089059][ T5708] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 111.091505][ T5708] BTRFS info (device loop0): using free space tree [ 111.093187][ T5708] BTRFS info (device loop0): has skinny extents [ 111.157284][ T5755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 111.307905][ T5772] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 111.440335][ T5777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.386'. [ 111.506102][ T5708] BTRFS info (device loop0): enabling ssd optimizations [ 112.440080][ T5792] loop2: detected capacity change from 0 to 8 [ 113.654174][ T5816] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 113.692775][ T5820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.397'. [ 114.293592][ T5847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 114.851395][ T5851] loop2: detected capacity change from 0 to 4096 [ 114.921930][ T5851] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 114.956680][ T5851] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 115.962340][ T4028] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 116.034289][ T5862] loop4: detected capacity change from 0 to 8192 [ 116.117698][ T5862] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 116.123279][ T5873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.409'. [ 116.126001][ T5862] REISERFS (device loop4): using ordered data mode [ 116.164454][ T5862] reiserfs: using flush barriers [ 116.190906][ T5862] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.208846][ T5862] REISERFS (device loop4): checking transaction log (loop4) [ 116.598849][ T5862] REISERFS (device loop4): Using tea hash to sort names [ 116.600868][ T5862] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 116.604357][ T5862] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.827542][ T5904] loop1: detected capacity change from 0 to 1024 [ 117.939093][ T5913] loop4: detected capacity change from 0 to 256 [ 119.631321][ T5921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.420'. [ 119.683194][ T5919] loop0: detected capacity change from 0 to 1024 [ 120.027455][ T5954] loop2: detected capacity change from 0 to 8 [ 120.054668][ T5954] SQUASHFS error: zstd decompression error: 2 [ 120.060325][ T5954] SQUASHFS error: zstd decompression failed, data probably corrupt [ 120.062888][ T5954] SQUASHFS error: Failed to read block 0x62b: -5 [ 120.064833][ T5954] SQUASHFS error: Unable to read metadata cache entry [629] [ 120.072191][ T5954] SQUASHFS error: Unable to read directory block [629:ff26] [ 120.078413][ T5953] vhci_hcd: invalid port number 61 [ 120.380312][ T5965] tipc: Started in network mode [ 120.402641][ T5965] tipc: Node identity 1, cluster identity 4711 [ 120.412309][ T5965] tipc: Node number set to 1 [ 120.445158][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 120.445181][ T26] audit: type=1326 audit(120.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.4.432" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb69d3ea8 code=0x0 [ 120.512060][ T5967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.433'. [ 120.665155][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'. [ 120.780592][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 120.833031][ T5985] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 120.845570][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 121.109759][ T6021] loop2: detected capacity change from 0 to 1024 [ 121.243764][ T6021] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.443: Invalid block bitmap block 0 in block_group 0 [ 121.254323][ T6021] Quota error (device loop2): write_blk: dquota write failed [ 121.259538][ T6021] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 121.264523][ T6021] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.443: Failed to acquire dquot type 0 [ 121.269523][ T6021] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.443: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.288464][ T6021] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.443: Invalid inode bitmap blk 0 in block_group 0 [ 121.294311][ T6021] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 121.322702][ T6021] EXT4-fs (loop2): 1 orphan inode deleted [ 121.324251][ T6021] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 121.336882][ T6021] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.443: Invalid inode table block 12884901889 in block_group 0 [ 121.348933][ T6021] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 121.358693][ T6042] loop0: detected capacity change from 0 to 128 [ 121.360595][ T6041] loop4: detected capacity change from 0 to 1024 [ 121.364787][ T9] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:0: Invalid inode table block 12884901889 in block_group 0 [ 121.518215][ T6041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.531606][ T6042] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.542682][ T6042] FAT-fs (loop0): bogus number of FAT sectors [ 121.544422][ T6042] FAT-fs (loop0): Can't find a valid FAT filesystem [ 121.585151][ T6044] loop1: detected capacity change from 0 to 512 [ 121.626472][ T6041] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 121.692996][ T6044] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.451: iget: bad i_size value: -67835469387268086 [ 121.709313][ T6044] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.451: couldn't read orphan inode 15 (err -117) [ 121.719061][ T6044] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.802351][ T6049] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 121.802351][ T6049] The task syz.0.449 (6049) triggered the difference, watch for misbehavior. [ 122.196306][ T6068] loop1: detected capacity change from 0 to 1024 [ 122.244312][ T6068] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 122.248340][ T6068] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 122.256483][ T6068] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.297216][ T6068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.299355][ T6068] System zones: 0-1, 3-36 [ 122.302586][ T6068] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 122.458667][ T6083] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.561395][ T6068] Zero length message leads to an empty skb [ 123.016757][ T6133] loop2: detected capacity change from 0 to 16 [ 123.040609][ T6126] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 123.058701][ T6125] loop1: detected capacity change from 0 to 2048 [ 123.077332][ T6126] CIFS: Unable to determine destination address [ 123.105920][ T6133] erofs: (device loop2): mounted with root inode @ nid 36. [ 123.150782][ T6133] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 123.199322][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 123.857260][ T6175] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 124.102068][ T6145] loop0: detected capacity change from 0 to 32768 [ 124.494712][ T6173] loop1: detected capacity change from 0 to 32768 [ 124.560671][ T6204] loop2: detected capacity change from 0 to 512 [ 124.605689][ T6204] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 124.623137][ T6204] EXT4-fs (loop2): error: journal path ./file1 is not a block device [ 124.660422][ T6213] netlink: 52 bytes leftover after parsing attributes in process `syz.3.491'. [ 124.673009][ T6213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.683701][ T6173] XFS (loop1): Mounting V5 Filesystem [ 124.777991][ T6173] XFS (loop1): Ending clean mount [ 124.872669][ T6227] loop0: detected capacity change from 0 to 1024 [ 124.947799][ T6173] XFS (loop1): User initiated shutdown received. [ 124.958005][ T6173] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x124/0x15c (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 124.965412][ T6173] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 124.973192][ T6227] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 124.975581][ T6227] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 124.982226][ T6227] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.010365][ T4022] XFS (loop1): Unmounting Filesystem [ 125.040152][ T6227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 125.042379][ T6227] System zones: 0-1, 3-36 [ 125.044903][ T6227] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 125.326571][ T6187] loop4: detected capacity change from 0 to 32768 [ 125.562537][ T6187] XFS (loop4): Mounting V5 Filesystem [ 125.713344][ T6187] XFS (loop4): Ending clean mount [ 125.788990][ T6204] loop2: detected capacity change from 0 to 32768 [ 125.927613][ T6204] XFS (loop2): Mounting V5 Filesystem [ 126.036590][ T6204] XFS (loop2): Ending clean mount [ 126.080546][ T4028] XFS (loop2): Unmounting Filesystem [ 126.254636][ T6283] netlink: 100 bytes leftover after parsing attributes in process `syz.3.507'. [ 126.360223][ T6290] loop1: detected capacity change from 0 to 2048 [ 126.444474][ T6290] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 126.761858][ T6306] loop2: detected capacity change from 0 to 1024 [ 126.767702][ T6306] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 126.770737][ T6306] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 126.772761][ T6306] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.790571][ T6306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 126.792853][ T6306] System zones: 0-1, 3-36 [ 126.797940][ T6306] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 126.935610][ T4026] XFS (loop4): Unmounting Filesystem [ 127.936669][ T6336] loop4: detected capacity change from 0 to 512 [ 127.949482][ T6336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.013729][ T6336] EXT4-fs (loop4): 1 orphan inode deleted [ 128.015396][ T6336] EXT4-fs (loop4): 1 truncate cleaned up [ 128.055427][ T6336] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 128.572085][ T6362] loop4: detected capacity change from 0 to 512 [ 128.577153][ T6362] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.588337][ T6362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 128.590380][ T6362] System zones: 0-2, 18-18, 34-34 [ 128.595229][ T6362] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.529: bad orphan inode 15 [ 128.601942][ T6362] ext4_test_bit(bit=14, block=18) = 1 [ 128.603303][ T6362] is_bad_inode(inode)=0 [ 128.604371][ T6362] NEXT_ORPHAN(inode)=2264924160 [ 128.605613][ T6362] max_ino=32 [ 128.606513][ T6362] i_nlink=0 [ 128.607370][ T6362] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.646319][ T6362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.529: bg 0: block 80: padding at end of block bitmap is not set [ 128.654697][ T6362] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 128.686486][ T6362] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 128.698511][ T6362] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 128.737294][ T6362] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #11: block 4: comm syz.4.529: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=33012, size=4096 fake=1 [ 128.867241][ T6338] loop0: detected capacity change from 0 to 32768 [ 128.917417][ T6338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (6338) [ 129.698073][ T6338] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 129.700336][ T6338] BTRFS info (device loop0): using free space tree [ 129.702012][ T6338] BTRFS info (device loop0): has skinny extents [ 129.852859][ T6382] loop4: detected capacity change from 0 to 512 [ 129.869565][ T6382] EXT4-fs (loop4): Ignoring removed bh option [ 129.893619][ T6364] loop1: detected capacity change from 0 to 32768 [ 129.935568][ T6382] EXT4-fs (loop4): 1 truncate cleaned up [ 129.940651][ T6382] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 129.947981][ T6338] BTRFS info (device loop0): enabling ssd optimizations [ 130.457320][ T6332] loop2: detected capacity change from 0 to 65536 [ 130.945448][ T6437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.967431][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.539'. [ 131.099039][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.100703][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.140674][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 131.144339][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 131.218833][ T6457] device bond0 entered promiscuous mode [ 131.225908][ T6457] device bond_slave_0 entered promiscuous mode [ 131.227722][ T6457] device bond_slave_1 entered promiscuous mode [ 131.234601][ T6457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.306494][ T6457] device bond0 left promiscuous mode [ 131.308047][ T6457] device bond_slave_0 left promiscuous mode [ 131.309876][ T6457] device bond_slave_1 left promiscuous mode [ 131.329206][ T6467] loop2: detected capacity change from 0 to 128 [ 131.363878][ T6467] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 131.365140][ T6472] loop1: detected capacity change from 0 to 1024 [ 131.418493][ T6476] loop4: detected capacity change from 0 to 1024 [ 133.145345][ T6548] loop2: detected capacity change from 0 to 2048 [ 133.161132][ T6548] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (85c0) [ 133.461626][ T6560] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 133.474393][ T6560] loop1: detected capacity change from 0 to 512 [ 133.681669][ T6560] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 133.684138][ T6560] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 133.838208][ T6560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 133.840534][ T6560] System zones: 1-12 [ 133.887191][ T6560] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.573: corrupted in-inode xattr [ 133.925669][ T6560] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.573: couldn't read orphan inode 15 (err -117) [ 133.951850][ T6560] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 134.269582][ T6585] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 134.410092][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 134.440418][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.582'. [ 134.485684][ T6596] loop4: detected capacity change from 0 to 256 [ 134.633256][ T6596] FAT-fs (loop4): Directory bread(block 64) failed [ 134.634948][ T6596] FAT-fs (loop4): Directory bread(block 65) failed [ 134.648248][ T6596] FAT-fs (loop4): Directory bread(block 66) failed [ 134.650014][ T6596] FAT-fs (loop4): Directory bread(block 67) failed [ 134.651723][ T6596] FAT-fs (loop4): Directory bread(block 68) failed [ 134.653525][ T6596] FAT-fs (loop4): Directory bread(block 69) failed [ 134.655276][ T6596] FAT-fs (loop4): Directory bread(block 70) failed [ 134.685927][ T6596] FAT-fs (loop4): Directory bread(block 71) failed [ 134.687799][ T6596] FAT-fs (loop4): Directory bread(block 72) failed [ 134.689436][ T6596] FAT-fs (loop4): Directory bread(block 73) failed [ 135.048777][ T26] audit: type=1326 audit(134.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.587" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0545ea8 code=0x0 [ 135.746875][ T6634] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 137.712056][ T6658] device vlan2 entered promiscuous mode [ 138.196489][ T6685] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 139.223466][ T6698] loop0: detected capacity change from 0 to 1024 [ 139.318083][ T6698] hfsplus: failed to load root directory [ 140.515644][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 140.563241][ T6730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.621'. [ 140.748726][ T6745] syz.3.625 (6745): /proc/6739/oom_adj is deprecated, please use /proc/6739/oom_score_adj instead. [ 140.906548][ T6707] loop1: detected capacity change from 0 to 40427 [ 140.975868][ T6707] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 140.978134][ T6707] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 141.041422][ T6707] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.085353][ T6707] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 141.087423][ T6707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.130129][ T6705] loop4: detected capacity change from 0 to 40427 [ 141.143852][ T6707] sctp: [Deprecated]: syz.1.616 (pid 6707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.143852][ T6707] Use struct sctp_sack_info instead [ 141.157350][ T5811] kernel write not supported for file bpf-prog (pid: 5811 comm: kworker/1:14) [ 141.195827][ T6705] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 141.197689][ T6705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 141.215587][ T6705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.265129][ T6759] raw_sendmsg: syz.1.616 forgot to set AF_INET. Fix it! [ 141.271148][ T6757] F2FS-fs (loop1): Unrecognized mount option " " or missing value [ 141.272636][ T6705] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 141.275516][ T6705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.367640][ T4022] attempt to access beyond end of device [ 141.367640][ T4022] loop1: rw=2049, want=45104, limit=40427 [ 142.896310][ T4099] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.956511][ T6784] loop1: detected capacity change from 0 to 1024 [ 143.014100][ T6784] hfsplus: failed to load root directory [ 143.276035][ T4099] usb 1-1: Using ep0 maxpacket: 16 [ 143.321415][ T4099] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 143.666077][ T4099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 143.668291][ T4099] usb 1-1: can't read configurations, error -61 [ 143.820308][ T4099] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.840810][ T6794] FAULT_INJECTION: forcing a failure. [ 143.840810][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.844189][ T6794] CPU: 0 PID: 6794 Comm: syz.3.639 Not tainted 5.15.165-syzkaller #0 [ 143.846329][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 143.848901][ T6794] Call trace: [ 143.849740][ T6794] dump_backtrace+0x0/0x530 [ 143.850940][ T6794] show_stack+0x2c/0x3c [ 143.852064][ T6794] dump_stack_lvl+0x108/0x170 [ 143.853234][ T6794] dump_stack+0x1c/0x58 [ 143.854313][ T6794] should_fail+0x3b8/0x514 [ 143.855455][ T6794] should_fail_usercopy+0x20/0x30 [ 143.856736][ T6794] __copy_msghdr_from_user+0xbc/0x5d0 [ 143.858153][ T6794] ___sys_sendmsg+0x154/0x294 [ 143.859386][ T6794] __arm64_sys_sendmsg+0x1ac/0x25c [ 143.860710][ T6794] invoke_syscall+0x98/0x2b8 [ 143.861923][ T6794] el0_svc_common+0x138/0x258 [ 143.863141][ T6794] do_el0_svc+0x58/0x14c [ 143.864266][ T6794] el0_svc+0x7c/0x1f0 [ 143.865437][ T6794] el0t_64_sync_handler+0x84/0xe4 [ 143.866850][ T6794] el0t_64_sync+0x1a0/0x1a4 [ 143.997663][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.022276][ T6797] option changes via remount are deprecated (pid=6796 comm=syz.1.640) [ 144.095878][ T4099] usb 1-1: Using ep0 maxpacket: 16 [ 144.136343][ T4099] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 144.378129][ T6805] loop4: detected capacity change from 0 to 32768 [ 144.483123][ T4099] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 144.485284][ T4099] usb 1-1: can't read configurations, error -61 [ 144.487628][ T4099] usb usb1-port1: attempt power cycle [ 144.598178][ T6805] XFS (loop4): Mounting V5 Filesystem [ 144.693096][ T6805] XFS (loop4): Ending clean mount [ 144.975565][ T4026] XFS (loop4): Unmounting Filesystem [ 146.252611][ T6841] loop2: detected capacity change from 0 to 1024 [ 146.267603][ T6840] FAULT_INJECTION: forcing a failure. [ 146.267603][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.270885][ T6840] CPU: 1 PID: 6840 Comm: syz.1.653 Not tainted 5.15.165-syzkaller #0 [ 146.272940][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 146.275614][ T6840] Call trace: [ 146.276454][ T6840] dump_backtrace+0x0/0x530 [ 146.277697][ T6840] show_stack+0x2c/0x3c [ 146.278871][ T6840] dump_stack_lvl+0x108/0x170 [ 146.280174][ T6840] dump_stack+0x1c/0x58 [ 146.281299][ T6840] should_fail+0x3b8/0x514 [ 146.282470][ T6840] should_fail_usercopy+0x20/0x30 [ 146.283791][ T6840] iovec_from_user+0xcc/0x630 [ 146.285073][ T6840] __import_iovec+0x80/0x414 [ 146.286278][ T6840] import_iovec+0x88/0xa4 [ 146.287470][ T6840] ___sys_sendmsg+0x1dc/0x294 [ 146.288752][ T6840] __arm64_sys_sendmsg+0x1ac/0x25c [ 146.290161][ T6840] invoke_syscall+0x98/0x2b8 [ 146.291400][ T6840] el0_svc_common+0x138/0x258 [ 146.292638][ T6840] do_el0_svc+0x58/0x14c [ 146.293748][ T6840] el0_svc+0x7c/0x1f0 [ 146.294805][ T6840] el0t_64_sync_handler+0x84/0xe4 [ 146.296178][ T6840] el0t_64_sync+0x1a0/0x1a4 [ 146.352917][ T6841] hfsplus: failed to load root directory [ 146.381835][ T6846] loop0: detected capacity change from 0 to 1764 [ 147.101964][ T6870] udc-core: couldn't find an available UDC or it's busy [ 147.104402][ T6870] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.143967][ T6887] loop2: detected capacity change from 0 to 1024 [ 149.187694][ T26] audit: type=1326 audit(149.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffa3925ea8 code=0x7fc00000 [ 149.422661][ T6896] FAULT_INJECTION: forcing a failure. [ 149.422661][ T6896] name failslab, interval 1, probability 0, space 0, times 1 [ 149.428760][ T6892] hfsplus: request for non-existent node 1280 in B*Tree [ 149.448211][ T6896] CPU: 1 PID: 6896 Comm: syz.4.669 Not tainted 5.15.165-syzkaller #0 [ 149.450275][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 149.452842][ T6896] Call trace: [ 149.453666][ T6896] dump_backtrace+0x0/0x530 [ 149.454866][ T6896] show_stack+0x2c/0x3c [ 149.455911][ T6896] dump_stack_lvl+0x108/0x170 [ 149.457089][ T6896] dump_stack+0x1c/0x58 [ 149.458215][ T6896] should_fail+0x3b8/0x514 [ 149.459379][ T6896] __should_failslab+0xbc/0x110 [ 149.460643][ T6896] should_failslab+0x10/0x28 [ 149.461793][ T6896] slab_pre_alloc_hook+0x64/0xe8 [ 149.462794][ T6892] hfsplus: request for non-existent node 1280 in B*Tree [ 149.463133][ T6896] kmem_cache_alloc_node+0x9c/0x49c [ 149.463149][ T6896] __alloc_skb+0x174/0x584 [ 149.463160][ T6896] netlink_sendmsg+0x644/0xb38 [ 149.469072][ T6896] ____sys_sendmsg+0x584/0x870 [ 149.470365][ T6896] ___sys_sendmsg+0x214/0x294 [ 149.471590][ T6896] __arm64_sys_sendmsg+0x1ac/0x25c [ 149.472990][ T6896] invoke_syscall+0x98/0x2b8 [ 149.474238][ T6896] el0_svc_common+0x138/0x258 [ 149.475548][ T6896] do_el0_svc+0x58/0x14c [ 149.476628][ T6896] el0_svc+0x7c/0x1f0 [ 149.477733][ T6896] el0t_64_sync_handler+0x84/0xe4 [ 149.479070][ T6896] el0t_64_sync+0x1a0/0x1a4 [ 149.528634][ T6901] loop1: detected capacity change from 0 to 512 [ 149.570350][ T6901] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.606668][ T6901] EXT4-fs (loop1): 1 orphan inode deleted [ 149.608192][ T6901] EXT4-fs (loop1): 1 truncate cleaned up [ 149.619957][ T6901] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,noinit_itable,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 149.929499][ T6899] loop0: detected capacity change from 0 to 32768 [ 150.091037][ T6921] Option '§?ßÖ ó' to dns_resolver key: bad/missing value [ 150.140476][ T6927] loop4: detected capacity change from 0 to 512 [ 150.204646][ T6927] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.234996][ T6927] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.678: casefold flag without casefold feature [ 150.241061][ T6927] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 150.258269][ T6927] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 150.572582][ T6927] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 150.738873][ T6927] udc-core: couldn't find an available UDC or it's busy [ 150.740818][ T6927] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.746164][ T6927] udc-core: couldn't find an available UDC or it's busy [ 150.748101][ T6927] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.750692][ T6927] udc-core: couldn't find an available UDC or it's busy [ 150.752580][ T6927] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 150.995526][ T6944] FAULT_INJECTION: forcing a failure. [ 150.995526][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 151.017430][ T6944] CPU: 0 PID: 6944 Comm: syz.3.684 Not tainted 5.15.165-syzkaller #0 [ 151.019522][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 151.022117][ T6944] Call trace: [ 151.022922][ T6944] dump_backtrace+0x0/0x530 [ 151.024126][ T6944] show_stack+0x2c/0x3c [ 151.025197][ T6944] dump_stack_lvl+0x108/0x170 [ 151.026390][ T6944] dump_stack+0x1c/0x58 [ 151.027518][ T6944] should_fail+0x3b8/0x514 [ 151.028655][ T6944] __should_failslab+0xbc/0x110 [ 151.029983][ T6944] should_failslab+0x10/0x28 [ 151.031242][ T6944] slab_pre_alloc_hook+0x64/0xe8 [ 151.032486][ T6944] __kmalloc_node_track_caller+0x74/0x448 [ 151.034054][ T6944] kmalloc_reserve+0xe8/0x270 [ 151.035312][ T6944] __alloc_skb+0x1a4/0x584 [ 151.036510][ T6944] netlink_sendmsg+0x644/0xb38 [ 151.037803][ T6944] ____sys_sendmsg+0x584/0x870 [ 151.039137][ T6944] ___sys_sendmsg+0x214/0x294 [ 151.040443][ T6944] __arm64_sys_sendmsg+0x1ac/0x25c [ 151.041871][ T6944] invoke_syscall+0x98/0x2b8 [ 151.043093][ T6944] el0_svc_common+0x138/0x258 [ 151.044365][ T6944] do_el0_svc+0x58/0x14c [ 151.045496][ T6944] el0_svc+0x7c/0x1f0 [ 151.046533][ T6944] el0t_64_sync_handler+0x84/0xe4 [ 151.047821][ T6944] el0t_64_sync+0x1a0/0x1a4 [ 151.798331][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 151.821713][ T4713] hfsplus: b-tree write err: -5, ino 8 [ 152.098271][ T6956] loop0: detected capacity change from 0 to 4096 [ 152.304634][ T6960] udc-core: couldn't find an available UDC or it's busy [ 152.306535][ T6960] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.037353][ T6956] netlink: 'syz.0.683': attribute type 12 has an invalid length. [ 153.048224][ T6956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.683'. [ 153.084633][ T6947] loop1: detected capacity change from 0 to 32768 [ 153.303622][ T6962] udc-core: couldn't find an available UDC or it's busy [ 153.310562][ T6962] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.338037][ T6962] udc-core: couldn't find an available UDC or it's busy [ 153.340126][ T6962] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.581469][ T6977] FAULT_INJECTION: forcing a failure. [ 153.581469][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.596010][ T6977] CPU: 0 PID: 6977 Comm: syz.3.695 Not tainted 5.15.165-syzkaller #0 [ 153.598139][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 153.600723][ T6977] Call trace: [ 153.601550][ T6977] dump_backtrace+0x0/0x530 [ 153.602726][ T6977] show_stack+0x2c/0x3c [ 153.603830][ T6977] dump_stack_lvl+0x108/0x170 [ 153.605046][ T6977] dump_stack+0x1c/0x58 [ 153.606164][ T6977] should_fail+0x3b8/0x514 [ 153.607346][ T6977] should_fail_usercopy+0x20/0x30 [ 153.608685][ T6977] do_ip_vs_set_ctl+0x228/0x109c [ 153.610032][ T6977] nf_setsockopt+0x270/0x290 [ 153.611222][ T6977] ip_setsockopt+0x1d70/0x32cc [ 153.612544][ T6977] tcp_setsockopt+0x204/0x33ec [ 153.613820][ T6977] sock_common_setsockopt+0xb0/0xcc [ 153.615221][ T6977] smc_setsockopt+0x19c/0xdf8 [ 153.616460][ T6977] __sys_setsockopt+0x3a8/0x6b4 [ 153.617751][ T6977] __arm64_sys_setsockopt+0xb8/0xd4 [ 153.619146][ T6977] invoke_syscall+0x98/0x2b8 [ 153.620404][ T6977] el0_svc_common+0x138/0x258 [ 153.621638][ T6977] do_el0_svc+0x58/0x14c [ 153.622773][ T6977] el0_svc+0x7c/0x1f0 [ 153.623844][ T6977] el0t_64_sync_handler+0x84/0xe4 [ 153.625208][ T6977] el0t_64_sync+0x1a0/0x1a4 [ 154.103821][ T6984] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 154.219113][ T6991] FAULT_INJECTION: forcing a failure. [ 154.219113][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.222504][ T6991] CPU: 1 PID: 6991 Comm: syz.4.699 Not tainted 5.15.165-syzkaller #0 [ 154.224558][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.227147][ T6991] Call trace: [ 154.228022][ T6991] dump_backtrace+0x0/0x530 [ 154.229225][ T6991] show_stack+0x2c/0x3c [ 154.230395][ T6991] dump_stack_lvl+0x108/0x170 [ 154.231788][ T6991] dump_stack+0x1c/0x58 [ 154.232919][ T6991] should_fail+0x3b8/0x514 [ 154.234095][ T6991] should_fail_usercopy+0x20/0x30 [ 154.235390][ T6991] _copy_from_iter+0x1f0/0xcf0 [ 154.236751][ T6991] netlink_sendmsg+0x70c/0xb38 [ 154.238063][ T6991] ____sys_sendmsg+0x584/0x870 [ 154.239312][ T6991] ___sys_sendmsg+0x214/0x294 [ 154.240640][ T6991] __arm64_sys_sendmsg+0x1ac/0x25c [ 154.242021][ T6991] invoke_syscall+0x98/0x2b8 [ 154.243293][ T6991] el0_svc_common+0x138/0x258 [ 154.244574][ T6991] do_el0_svc+0x58/0x14c [ 154.245693][ T6991] el0_svc+0x7c/0x1f0 [ 154.246815][ T6991] el0t_64_sync_handler+0x84/0xe4 [ 154.248194][ T6991] el0t_64_sync+0x1a0/0x1a4 [ 154.634019][ T7008] loop1: detected capacity change from 0 to 2048 [ 154.718442][ T7008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.899650][ T7018] FAULT_INJECTION: forcing a failure. [ 154.899650][ T7018] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.913422][ T7018] CPU: 0 PID: 7018 Comm: syz.1.706 Not tainted 5.15.165-syzkaller #0 [ 154.915593][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.918295][ T7018] Call trace: [ 154.919146][ T7018] dump_backtrace+0x0/0x530 [ 154.920309][ T7018] show_stack+0x2c/0x3c [ 154.921364][ T7018] dump_stack_lvl+0x108/0x170 [ 154.922599][ T7018] dump_stack+0x1c/0x58 [ 154.923655][ T7018] should_fail+0x3b8/0x514 [ 154.924892][ T7018] should_fail_alloc_page+0x74/0xa8 [ 154.926360][ T7018] prepare_alloc_pages+0x160/0x460 [ 154.927792][ T7018] __alloc_pages+0x138/0x674 [ 154.928993][ T7018] alloc_pages+0x368/0x5d4 [ 154.930253][ T7018] __pmd_alloc+0xa4/0x52c [ 154.931400][ T7018] handle_mm_fault+0x2508/0x3424 [ 154.932712][ T7018] do_page_fault+0x700/0xb60 [ 154.933909][ T7018] do_translation_fault+0xe8/0x138 [ 154.935323][ T7018] do_mem_abort+0x70/0x1d8 [ 154.936480][ T7018] el1_abort+0x3c/0x5c [ 154.937583][ T7018] el1h_64_sync_handler+0x60/0xac [ 154.939045][ T7018] el1h_64_sync+0x78/0x7c [ 154.940175][ T7018] __arch_copy_from_user+0x94/0x218 [ 154.941541][ T7018] nf_setsockopt+0x270/0x290 [ 154.942799][ T7018] ip_setsockopt+0x1d70/0x32cc [ 154.944051][ T7018] tcp_setsockopt+0x204/0x33ec [ 154.945220][ T7018] sock_common_setsockopt+0xb0/0xcc [ 154.946609][ T7018] smc_setsockopt+0x19c/0xdf8 [ 154.947831][ T7018] __sys_setsockopt+0x3a8/0x6b4 [ 154.949067][ T7018] __arm64_sys_setsockopt+0xb8/0xd4 [ 154.950526][ T7018] invoke_syscall+0x98/0x2b8 [ 154.951740][ T7018] el0_svc_common+0x138/0x258 [ 154.953007][ T7018] do_el0_svc+0x58/0x14c [ 154.954166][ T7018] el0_svc+0x7c/0x1f0 [ 154.955239][ T7018] el0t_64_sync_handler+0x84/0xe4 [ 154.956624][ T7018] el0t_64_sync+0x1a0/0x1a4 [ 155.068616][ T7020] loop1: detected capacity change from 0 to 8 [ 155.245211][ T7024] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 155.307194][ T7031] FAULT_INJECTION: forcing a failure. [ 155.307194][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 155.310583][ T7031] CPU: 1 PID: 7031 Comm: syz.3.713 Not tainted 5.15.165-syzkaller #0 [ 155.312582][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 155.315229][ T7031] Call trace: [ 155.316095][ T7031] dump_backtrace+0x0/0x530 [ 155.317344][ T7031] show_stack+0x2c/0x3c [ 155.318489][ T7031] dump_stack_lvl+0x108/0x170 [ 155.319793][ T7031] dump_stack+0x1c/0x58 [ 155.320948][ T7031] should_fail+0x3b8/0x514 [ 155.322187][ T7031] __should_failslab+0xbc/0x110 [ 155.323563][ T7031] should_failslab+0x10/0x28 [ 155.324822][ T7031] slab_pre_alloc_hook+0x64/0xe8 [ 155.326192][ T7031] kmem_cache_alloc+0x98/0x45c [ 155.327533][ T7031] skb_clone+0x180/0x304 [ 155.328689][ T7031] __netlink_deliver_tap+0x360/0x714 [ 155.330227][ T7031] netlink_deliver_tap+0x1ac/0x1b0 [ 155.331658][ T7031] netlink_unicast+0x648/0x938 [ 155.333059][ T7031] netlink_sendmsg+0x844/0xb38 [ 155.334277][ T7031] ____sys_sendmsg+0x584/0x870 [ 155.335583][ T7031] ___sys_sendmsg+0x214/0x294 [ 155.336857][ T7031] __arm64_sys_sendmsg+0x1ac/0x25c [ 155.338226][ T7031] invoke_syscall+0x98/0x2b8 [ 155.339424][ T7031] el0_svc_common+0x138/0x258 [ 155.340611][ T7031] do_el0_svc+0x58/0x14c [ 155.341739][ T7031] el0_svc+0x7c/0x1f0 [ 155.342797][ T7031] el0t_64_sync_handler+0x84/0xe4 [ 155.344208][ T7031] el0t_64_sync+0x1a0/0x1a4 [ 155.365062][ T7020] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 155.402668][ T7020] SQUASHFS error: zstd decompression error: 2 [ 155.404292][ T7020] SQUASHFS error: zstd decompression failed, data probably corrupt [ 155.409720][ T7020] SQUASHFS error: Failed to read block 0x62b: -5 [ 155.411303][ T7020] SQUASHFS error: Unable to read metadata cache entry [629] [ 155.413201][ T7020] SQUASHFS error: Unable to read directory block [629:ff26] [ 155.455272][ T7016] loop4: detected capacity change from 0 to 32768 [ 155.455325][ T7038] loop0: detected capacity change from 0 to 512 [ 155.595995][ T7038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.607993][ T7016] XFS (loop4): Mounting V5 Filesystem [ 155.700738][ T7056] Injecting memory failure for pfn 0x13077c at process virtual address 0x20ffe000 [ 155.714835][ T26] audit: type=1326 audit(155.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.3.717" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ebcdea8 code=0x0 [ 155.716023][ T7016] XFS (loop4): Ending clean mount [ 155.737747][ T7056] Memory failure: 0x13077c: recovery action for clean LRU page: Recovered [ 155.759110][ T7016] XFS (loop4): Quotacheck needed: Please wait. [ 155.838636][ T7016] XFS (loop4): Quotacheck: Done. [ 156.276329][ T7072] udc-core: couldn't find an available UDC or it's busy [ 156.278295][ T7072] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.959066][ T7076] FAULT_INJECTION: forcing a failure. [ 156.959066][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 156.968238][ T7076] CPU: 1 PID: 7076 Comm: syz.3.722 Not tainted 5.15.165-syzkaller #0 [ 156.970455][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 156.973137][ T7076] Call trace: [ 156.973940][ T7076] dump_backtrace+0x0/0x530 [ 156.975147][ T7076] show_stack+0x2c/0x3c [ 156.976186][ T7076] dump_stack_lvl+0x108/0x170 [ 156.977474][ T7076] dump_stack+0x1c/0x58 [ 156.978577][ T7076] should_fail+0x3b8/0x514 [ 156.979764][ T7076] __should_failslab+0xbc/0x110 [ 156.981094][ T7076] should_failslab+0x10/0x28 [ 156.982309][ T7076] slab_pre_alloc_hook+0x64/0xe8 [ 156.983743][ T7076] kmem_cache_alloc+0x98/0x45c [ 156.985138][ T7076] __pmd_alloc+0x104/0x52c [ 156.986316][ T7076] handle_mm_fault+0x2508/0x3424 [ 156.987638][ T7076] do_page_fault+0x700/0xb60 [ 156.988829][ T7076] do_translation_fault+0xe8/0x138 [ 156.990190][ T7076] do_mem_abort+0x70/0x1d8 [ 156.991380][ T7076] el1_abort+0x3c/0x5c [ 156.992478][ T7076] el1h_64_sync_handler+0x60/0xac [ 156.993752][ T7076] el1h_64_sync+0x78/0x7c [ 156.994958][ T7076] __arch_copy_from_user+0x94/0x218 [ 156.996399][ T7076] nf_setsockopt+0x270/0x290 [ 156.997604][ T7076] ip_setsockopt+0x1d70/0x32cc [ 156.998877][ T7076] tcp_setsockopt+0x204/0x33ec [ 157.000144][ T7076] sock_common_setsockopt+0xb0/0xcc [ 157.001482][ T7076] smc_setsockopt+0x19c/0xdf8 [ 157.002766][ T7076] __sys_setsockopt+0x3a8/0x6b4 [ 157.004091][ T7076] __arm64_sys_setsockopt+0xb8/0xd4 [ 157.005419][ T7076] invoke_syscall+0x98/0x2b8 [ 157.006659][ T7076] el0_svc_common+0x138/0x258 [ 157.007890][ T7076] do_el0_svc+0x58/0x14c [ 157.009073][ T7076] el0_svc+0x7c/0x1f0 [ 157.010101][ T7076] el0t_64_sync_handler+0x84/0xe4 [ 157.011472][ T7076] el0t_64_sync+0x1a0/0x1a4 [ 157.054512][ T7079] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 157.427192][ T7094] FAULT_INJECTION: forcing a failure. [ 157.427192][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 157.430920][ T7094] CPU: 1 PID: 7094 Comm: syz.0.729 Not tainted 5.15.165-syzkaller #0 [ 157.433059][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.435540][ T7094] Call trace: [ 157.436396][ T7094] dump_backtrace+0x0/0x530 [ 157.437592][ T7094] show_stack+0x2c/0x3c [ 157.438672][ T7094] dump_stack_lvl+0x108/0x170 [ 157.439963][ T7094] dump_stack+0x1c/0x58 [ 157.441136][ T7094] should_fail+0x3b8/0x514 [ 157.442359][ T7094] __should_failslab+0xbc/0x110 [ 157.443630][ T7094] should_failslab+0x10/0x28 [ 157.444826][ T7094] slab_pre_alloc_hook+0x64/0xe8 [ 157.446101][ T7094] kmem_cache_alloc+0x98/0x45c [ 157.447357][ T7094] skb_clone+0x180/0x304 [ 157.448517][ T7094] dev_queue_xmit_nit+0x21c/0x970 [ 157.449829][ T7094] dev_hard_start_xmit+0x110/0x92c [ 157.451239][ T7094] __dev_queue_xmit+0x13a8/0x2a6c [ 157.452618][ T7094] dev_queue_xmit+0x24/0x34 [ 157.453886][ T7094] __netlink_deliver_tap+0x454/0x714 [ 157.455257][ T7094] netlink_deliver_tap+0x1ac/0x1b0 [ 157.456682][ T7094] netlink_unicast+0x648/0x938 [ 157.457947][ T7094] netlink_sendmsg+0x844/0xb38 [ 157.459221][ T7094] ____sys_sendmsg+0x584/0x870 [ 157.460516][ T7094] ___sys_sendmsg+0x214/0x294 [ 157.461763][ T7094] __arm64_sys_sendmsg+0x1ac/0x25c [ 157.463137][ T7094] invoke_syscall+0x98/0x2b8 [ 157.464392][ T7094] el0_svc_common+0x138/0x258 [ 157.465619][ T7094] do_el0_svc+0x58/0x14c [ 157.466779][ T7094] el0_svc+0x7c/0x1f0 [ 157.467876][ T7094] el0t_64_sync_handler+0x84/0xe4 [ 157.469192][ T7094] el0t_64_sync+0x1a0/0x1a4 [ 157.508426][ T4026] XFS (loop4): Unmounting Filesystem [ 157.597640][ T7097] loop0: detected capacity change from 0 to 128 [ 157.634039][ T7097] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 157.776899][ T7099] loop0: detected capacity change from 0 to 256 [ 157.779079][ T7099] exfat: Deprecated parameter 'utf8' [ 157.780576][ T7099] exfat: Unknown parameter 'defcontext' [ 157.974646][ T7101] FAULT_INJECTION: forcing a failure. [ 157.974646][ T7101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.005882][ T7101] CPU: 1 PID: 7101 Comm: syz.0.733 Not tainted 5.15.165-syzkaller #0 [ 158.007930][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 158.010568][ T7101] Call trace: [ 158.011382][ T7101] dump_backtrace+0x0/0x530 [ 158.012651][ T7101] show_stack+0x2c/0x3c [ 158.013830][ T7101] dump_stack_lvl+0x108/0x170 [ 158.015047][ T7101] dump_stack+0x1c/0x58 [ 158.016166][ T7101] should_fail+0x3b8/0x514 [ 158.017362][ T7101] should_fail_alloc_page+0x74/0xa8 [ 158.018711][ T7101] prepare_alloc_pages+0x160/0x460 [ 158.020049][ T7101] __alloc_pages+0x138/0x674 [ 158.021372][ T7101] alloc_pages+0x368/0x5d4 [ 158.022552][ T7101] pte_alloc_one+0x2c/0x258 [ 158.023818][ T7101] __pte_alloc+0x84/0x2c4 [ 158.024933][ T7101] handle_mm_fault+0x2cd8/0x3424 [ 158.026208][ T7101] do_page_fault+0x700/0xb60 [ 158.027385][ T7101] do_translation_fault+0xe8/0x138 [ 158.028756][ T7101] do_mem_abort+0x70/0x1d8 [ 158.029964][ T7101] el1_abort+0x3c/0x5c [ 158.030963][ T7101] el1h_64_sync_handler+0x60/0xac [ 158.032232][ T7101] el1h_64_sync+0x78/0x7c [ 158.033398][ T7101] __arch_copy_from_user+0x94/0x218 [ 158.034755][ T7101] nf_setsockopt+0x270/0x290 [ 158.035989][ T7101] ip_setsockopt+0x1d70/0x32cc [ 158.037283][ T7101] tcp_setsockopt+0x204/0x33ec [ 158.038525][ T7101] sock_common_setsockopt+0xb0/0xcc [ 158.039840][ T7101] smc_setsockopt+0x19c/0xdf8 [ 158.041063][ T7101] __sys_setsockopt+0x3a8/0x6b4 [ 158.042311][ T7101] __arm64_sys_setsockopt+0xb8/0xd4 [ 158.043749][ T7101] invoke_syscall+0x98/0x2b8 [ 158.044979][ T7101] el0_svc_common+0x138/0x258 [ 158.046200][ T7101] do_el0_svc+0x58/0x14c [ 158.047248][ T7101] el0_svc+0x7c/0x1f0 [ 158.048221][ T7101] el0t_64_sync_handler+0x84/0xe4 [ 158.049534][ T7101] el0t_64_sync+0x1a0/0x1a4 [ 158.198557][ T7106] loop4: detected capacity change from 0 to 16 [ 158.244236][ T7111] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 158.533334][ T7120] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 159.624038][ T7127] input: syz1 as /devices/virtual/input/input3 [ 159.643885][ T7130] FAULT_INJECTION: forcing a failure. [ 159.643885][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 159.647484][ T7130] CPU: 0 PID: 7130 Comm: syz.1.743 Not tainted 5.15.165-syzkaller #0 [ 159.649481][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.651988][ T7130] Call trace: [ 159.652772][ T7130] dump_backtrace+0x0/0x530 [ 159.653929][ T7130] show_stack+0x2c/0x3c [ 159.655064][ T7130] dump_stack_lvl+0x108/0x170 [ 159.656410][ T7130] dump_stack+0x1c/0x58 [ 159.657561][ T7130] should_fail+0x3b8/0x514 [ 159.658740][ T7130] __should_failslab+0xbc/0x110 [ 159.660095][ T7130] should_failslab+0x10/0x28 [ 159.661392][ T7130] slab_pre_alloc_hook+0x64/0xe8 [ 159.662723][ T7130] kmem_cache_alloc_node+0x9c/0x49c [ 159.664125][ T7130] __alloc_skb+0x174/0x584 [ 159.664422][ T7125] loop4: detected capacity change from 0 to 2048 [ 159.665391][ T7130] netlink_ack+0x2ec/0x9c0 [ 159.668251][ T7130] netlink_rcv_skb+0x1ec/0x3b8 [ 159.669523][ T7130] genl_rcv+0x38/0x50 [ 159.670674][ T7130] netlink_unicast+0x664/0x938 [ 159.672039][ T7130] netlink_sendmsg+0x844/0xb38 [ 159.673276][ T7130] ____sys_sendmsg+0x584/0x870 [ 159.674611][ T7130] ___sys_sendmsg+0x214/0x294 [ 159.675929][ T7130] __arm64_sys_sendmsg+0x1ac/0x25c [ 159.677328][ T7130] invoke_syscall+0x98/0x2b8 [ 159.678566][ T7130] el0_svc_common+0x138/0x258 [ 159.679874][ T7130] do_el0_svc+0x58/0x14c [ 159.681100][ T7130] el0_svc+0x7c/0x1f0 [ 159.682211][ T7130] el0t_64_sync_handler+0x84/0xe4 [ 159.683585][ T7130] el0t_64_sync+0x1a0/0x1a4 [ 159.759415][ T7125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.784514][ T7138] syz.1.745 uses old SIOCAX25GETINFO [ 159.794190][ T7125] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 159.823075][ T7140] FAULT_INJECTION: forcing a failure. [ 159.823075][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 159.832521][ T7140] CPU: 0 PID: 7140 Comm: syz.0.746 Not tainted 5.15.165-syzkaller #0 [ 159.834759][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.837291][ T7140] Call trace: [ 159.838127][ T7140] dump_backtrace+0x0/0x530 [ 159.839261][ T7140] show_stack+0x2c/0x3c [ 159.840296][ T7140] dump_stack_lvl+0x108/0x170 [ 159.841498][ T7140] dump_stack+0x1c/0x58 [ 159.842629][ T7140] should_fail+0x3b8/0x514 [ 159.843969][ T7140] __should_failslab+0xbc/0x110 [ 159.845315][ T7140] should_failslab+0x10/0x28 [ 159.846510][ T7140] slab_pre_alloc_hook+0x64/0xe8 [ 159.847771][ T7140] kmem_cache_alloc+0x98/0x45c [ 159.848981][ T7140] pte_alloc_one+0x78/0x258 [ 159.850140][ T7140] __pte_alloc+0x84/0x2c4 [ 159.851243][ T7140] handle_mm_fault+0x2cd8/0x3424 [ 159.852593][ T7140] do_page_fault+0x700/0xb60 [ 159.853820][ T7140] do_translation_fault+0xe8/0x138 [ 159.855186][ T7140] do_mem_abort+0x70/0x1d8 [ 159.856340][ T7140] el1_abort+0x3c/0x5c [ 159.857484][ T7140] el1h_64_sync_handler+0x60/0xac [ 159.858891][ T7140] el1h_64_sync+0x78/0x7c [ 159.860091][ T7140] __arch_copy_from_user+0x94/0x218 [ 159.861487][ T7140] nf_setsockopt+0x270/0x290 [ 159.862777][ T7140] ip_setsockopt+0x1d70/0x32cc [ 159.864105][ T7140] tcp_setsockopt+0x204/0x33ec [ 159.865425][ T7140] sock_common_setsockopt+0xb0/0xcc [ 159.866814][ T7140] smc_setsockopt+0x19c/0xdf8 [ 159.868096][ T7140] __sys_setsockopt+0x3a8/0x6b4 [ 159.869395][ T7140] __arm64_sys_setsockopt+0xb8/0xd4 [ 159.870838][ T7140] invoke_syscall+0x98/0x2b8 [ 159.872072][ T7140] el0_svc_common+0x138/0x258 [ 159.873370][ T7140] do_el0_svc+0x58/0x14c [ 159.874513][ T7140] el0_svc+0x7c/0x1f0 [ 159.875585][ T7140] el0t_64_sync_handler+0x84/0xe4 [ 159.876939][ T7140] el0t_64_sync+0x1a0/0x1a4 [ 160.149562][ T7150] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.158994][ T7151] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 160.314681][ T7154] loop1: detected capacity change from 0 to 512 [ 160.338230][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.751'. [ 160.383517][ T7154] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 160.395672][ T7159] loop0: detected capacity change from 0 to 512 [ 161.331334][ T7166] loop0: detected capacity change from 0 to 131072 [ 161.795465][ T7169] udc-core: couldn't find an available UDC or it's busy [ 161.797377][ T7169] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.092714][ T7176] loop1: detected capacity change from 0 to 32768 [ 162.781368][ T7172] FAULT_INJECTION: forcing a failure. [ 162.781368][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 162.791750][ T7172] CPU: 0 PID: 7172 Comm: syz.3.756 Not tainted 5.15.165-syzkaller #0 [ 162.793914][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.796433][ T7172] Call trace: [ 162.797248][ T7172] dump_backtrace+0x0/0x530 [ 162.798389][ T7172] show_stack+0x2c/0x3c [ 162.799431][ T7172] dump_stack_lvl+0x108/0x170 [ 162.800642][ T7172] dump_stack+0x1c/0x58 [ 162.801713][ T7172] should_fail+0x3b8/0x514 [ 162.802886][ T7172] __should_failslab+0xbc/0x110 [ 162.804138][ T7172] should_failslab+0x10/0x28 [ 162.805349][ T7172] slab_pre_alloc_hook+0x64/0xe8 [ 162.806745][ T7172] __kmalloc_node_track_caller+0x74/0x448 [ 162.808258][ T7172] kmalloc_reserve+0xe8/0x270 [ 162.809517][ T7172] __alloc_skb+0x1a4/0x584 [ 162.810678][ T7172] netlink_ack+0x2ec/0x9c0 [ 162.811799][ T7172] netlink_rcv_skb+0x1ec/0x3b8 [ 162.813159][ T7172] genl_rcv+0x38/0x50 [ 162.814194][ T7172] netlink_unicast+0x664/0x938 [ 162.815422][ T7172] netlink_sendmsg+0x844/0xb38 [ 162.816623][ T7172] ____sys_sendmsg+0x584/0x870 [ 162.817867][ T7172] ___sys_sendmsg+0x214/0x294 [ 162.819172][ T7172] __arm64_sys_sendmsg+0x1ac/0x25c [ 162.820611][ T7172] invoke_syscall+0x98/0x2b8 [ 162.821819][ T7172] el0_svc_common+0x138/0x258 [ 162.823028][ T7172] do_el0_svc+0x58/0x14c [ 162.824195][ T7172] el0_svc+0x7c/0x1f0 [ 162.825219][ T7172] el0t_64_sync_handler+0x84/0xe4 [ 162.826625][ T7172] el0t_64_sync+0x1a0/0x1a4 [ 162.954007][ T7187] FAULT_INJECTION: forcing a failure. [ 162.954007][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.978375][ T7176] XFS (loop1): Mounting V5 Filesystem [ 162.982879][ T7187] CPU: 0 PID: 7187 Comm: syz.3.759 Not tainted 5.15.165-syzkaller #0 [ 162.984956][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.987573][ T7187] Call trace: [ 162.988509][ T7187] dump_backtrace+0x0/0x530 [ 162.989719][ T7187] show_stack+0x2c/0x3c [ 162.990782][ T7187] dump_stack_lvl+0x108/0x170 [ 162.991994][ T7187] dump_stack+0x1c/0x58 [ 162.993151][ T7187] should_fail+0x3b8/0x514 [ 162.994455][ T7187] should_fail_usercopy+0x20/0x30 [ 162.995770][ T7187] smc_setsockopt+0x298/0xdf8 [ 162.997057][ T7187] __sys_setsockopt+0x3a8/0x6b4 [ 162.998462][ T7187] __arm64_sys_setsockopt+0xb8/0xd4 [ 162.999961][ T7187] invoke_syscall+0x98/0x2b8 [ 163.001288][ T7187] el0_svc_common+0x138/0x258 [ 163.002521][ T7187] do_el0_svc+0x58/0x14c [ 163.003619][ T7187] el0_svc+0x7c/0x1f0 [ 163.004712][ T7187] el0t_64_sync_handler+0x84/0xe4 [ 163.006046][ T7187] el0t_64_sync+0x1a0/0x1a4 [ 163.054611][ T7176] XFS (loop1): Ending clean mount [ 163.070848][ T7195] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 163.148422][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 163.227807][ T4022] XFS (loop1): Unmounting Filesystem [ 163.626147][ T7209] loop4: detected capacity change from 0 to 512 [ 163.887186][ T7217] FAULT_INJECTION: forcing a failure. [ 163.887186][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 163.924151][ T7217] CPU: 1 PID: 7217 Comm: syz.3.769 Not tainted 5.15.165-syzkaller #0 [ 163.926240][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.928847][ T7217] Call trace: [ 163.929679][ T7217] dump_backtrace+0x0/0x530 [ 163.930795][ T7217] show_stack+0x2c/0x3c [ 163.931853][ T7217] dump_stack_lvl+0x108/0x170 [ 163.933032][ T7217] dump_stack+0x1c/0x58 [ 163.934226][ T7217] should_fail+0x3b8/0x514 [ 163.935335][ T7217] __should_failslab+0xbc/0x110 [ 163.936604][ T7217] should_failslab+0x10/0x28 [ 163.937868][ T7217] slab_pre_alloc_hook+0x64/0xe8 [ 163.939132][ T7217] kmem_cache_alloc+0x98/0x45c [ 163.940363][ T7217] skb_clone+0x180/0x304 [ 163.941503][ T7217] __netlink_deliver_tap+0x360/0x714 [ 163.942907][ T7217] netlink_deliver_tap+0x1ac/0x1b0 [ 163.944249][ T7217] netlink_sendskb+0x6c/0x168 [ 163.945474][ T7217] netlink_unicast+0x328/0x938 [ 163.946781][ T7217] netlink_ack+0x6c8/0x9c0 [ 163.948034][ T7217] netlink_rcv_skb+0x1ec/0x3b8 [ 163.949337][ T7217] genl_rcv+0x38/0x50 [ 163.950410][ T7217] netlink_unicast+0x664/0x938 [ 163.951736][ T7217] netlink_sendmsg+0x844/0xb38 [ 163.953013][ T7217] ____sys_sendmsg+0x584/0x870 [ 163.954238][ T7217] ___sys_sendmsg+0x214/0x294 [ 163.955454][ T7217] __arm64_sys_sendmsg+0x1ac/0x25c [ 163.956851][ T7217] invoke_syscall+0x98/0x2b8 [ 163.958145][ T7217] el0_svc_common+0x138/0x258 [ 163.959433][ T7217] do_el0_svc+0x58/0x14c [ 163.960671][ T7217] el0_svc+0x7c/0x1f0 [ 163.961740][ T7217] el0t_64_sync_handler+0x84/0xe4 [ 163.963107][ T7217] el0t_64_sync+0x1a0/0x1a4 [ 164.195489][ T7233] FAULT_INJECTION: forcing a failure. [ 164.195489][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.206509][ T7233] CPU: 0 PID: 7233 Comm: syz.3.774 Not tainted 5.15.165-syzkaller #0 [ 164.208620][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.211131][ T7233] Call trace: [ 164.211930][ T7233] dump_backtrace+0x0/0x530 [ 164.213125][ T7233] show_stack+0x2c/0x3c [ 164.214178][ T7233] dump_stack_lvl+0x108/0x170 [ 164.215379][ T7233] dump_stack+0x1c/0x58 [ 164.216452][ T7233] should_fail+0x3b8/0x514 [ 164.217656][ T7233] should_fail_usercopy+0x20/0x30 [ 164.219050][ T7233] simple_read_from_buffer+0xd8/0x26c [ 164.220628][ T7233] proc_fail_nth_read+0x1a0/0x248 [ 164.221957][ T7233] vfs_read+0x278/0xb18 [ 164.223020][ T7233] ksys_read+0x15c/0x26c [ 164.224179][ T7233] __arm64_sys_read+0x7c/0x90 [ 164.225387][ T7233] invoke_syscall+0x98/0x2b8 [ 164.226566][ T7233] el0_svc_common+0x138/0x258 [ 164.227919][ T7233] do_el0_svc+0x58/0x14c [ 164.229071][ T7233] el0_svc+0x7c/0x1f0 [ 164.230155][ T7233] el0t_64_sync_handler+0x84/0xe4 [ 164.231447][ T7233] el0t_64_sync+0x1a0/0x1a4 [ 164.703497][ T7253] device ip6gretap0 entered promiscuous mode [ 164.712855][ T7253] device macvlan2 entered promiscuous mode [ 164.764611][ T7262] FAULT_INJECTION: forcing a failure. [ 164.764611][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.773314][ T7262] CPU: 1 PID: 7262 Comm: syz.3.783 Not tainted 5.15.165-syzkaller #0 [ 164.775673][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.778307][ T7262] Call trace: [ 164.779164][ T7262] dump_backtrace+0x0/0x530 [ 164.780336][ T7262] show_stack+0x2c/0x3c [ 164.781404][ T7262] dump_stack_lvl+0x108/0x170 [ 164.782660][ T7262] dump_stack+0x1c/0x58 [ 164.783749][ T7262] should_fail+0x3b8/0x514 [ 164.784935][ T7262] should_fail_usercopy+0x20/0x30 [ 164.786414][ T7262] simple_read_from_buffer+0xd8/0x26c [ 164.787787][ T7262] proc_fail_nth_read+0x1a0/0x248 [ 164.789279][ T7262] vfs_read+0x278/0xb18 [ 164.790453][ T7262] ksys_read+0x15c/0x26c [ 164.791577][ T7262] __arm64_sys_read+0x7c/0x90 [ 164.792813][ T7262] invoke_syscall+0x98/0x2b8 [ 164.794067][ T7262] el0_svc_common+0x138/0x258 [ 164.795320][ T7262] do_el0_svc+0x58/0x14c [ 164.796547][ T7262] el0_svc+0x7c/0x1f0 [ 164.797686][ T7262] el0t_64_sync_handler+0x84/0xe4 [ 164.799077][ T7262] el0t_64_sync+0x1a0/0x1a4 [ 165.094446][ T7279] loop0: detected capacity change from 0 to 2048 [ 165.204223][ T7289] loop1: detected capacity change from 0 to 512 [ 165.283791][ T7289] EXT2-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 165.286334][ T7289] EXT2-fs (loop1): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 165.478384][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.797'. [ 165.687521][ T7308] loop0: detected capacity change from 0 to 1024 [ 165.756597][ T7308] overlayfs: filesystem on './file0' not supported [ 165.945429][ T7319] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:0 [ 166.030947][ T7324] 9pnet: Insufficient options for proto=fd [ 166.193603][ T7336] FAULT_INJECTION: forcing a failure. [ 166.193603][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.204353][ T7334] loop4: detected capacity change from 0 to 1024 [ 166.214146][ T7336] CPU: 0 PID: 7336 Comm: syz.2.814 Not tainted 5.15.165-syzkaller #0 [ 166.216392][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.219129][ T7336] Call trace: [ 166.219966][ T7336] dump_backtrace+0x0/0x530 [ 166.221103][ T7336] show_stack+0x2c/0x3c [ 166.222300][ T7336] dump_stack_lvl+0x108/0x170 [ 166.223637][ T7336] dump_stack+0x1c/0x58 [ 166.224768][ T7336] should_fail+0x3b8/0x514 [ 166.225990][ T7336] should_fail_usercopy+0x20/0x30 [ 166.227302][ T7336] do_ip_vs_set_ctl+0x228/0x109c [ 166.228638][ T7336] nf_setsockopt+0x270/0x290 [ 166.229893][ T7336] ip_setsockopt+0x1d70/0x32cc [ 166.231163][ T7336] tcp_setsockopt+0x204/0x33ec [ 166.232477][ T7336] sock_common_setsockopt+0xb0/0xcc [ 166.233846][ T7336] smc_setsockopt+0x19c/0xdf8 [ 166.235103][ T7336] __sys_setsockopt+0x3a8/0x6b4 [ 166.236430][ T7336] __arm64_sys_setsockopt+0xb8/0xd4 [ 166.237823][ T7336] invoke_syscall+0x98/0x2b8 [ 166.239097][ T7336] el0_svc_common+0x138/0x258 [ 166.240397][ T7336] do_el0_svc+0x58/0x14c [ 166.241540][ T7336] el0_svc+0x7c/0x1f0 [ 166.242654][ T7336] el0t_64_sync_handler+0x84/0xe4 [ 166.244105][ T7336] el0t_64_sync+0x1a0/0x1a4 [ 166.403516][ T7341] loop2: detected capacity change from 0 to 64 [ 166.443892][ T7341] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 166.537219][ T7342] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 166.547264][ T4194] hfsplus: b-tree write err: -5, ino 4 [ 166.684478][ T7346] udc-core: couldn't find an available UDC or it's busy [ 166.686387][ T7346] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.448454][ T7349] libceph: resolve '0.' (ret=-3): failed [ 167.772294][ T7373] FAULT_INJECTION: forcing a failure. [ 167.772294][ T7373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.776927][ T7373] CPU: 0 PID: 7373 Comm: syz.3.827 Not tainted 5.15.165-syzkaller #0 [ 167.779016][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.781536][ T7373] Call trace: [ 167.782486][ T7373] dump_backtrace+0x0/0x530 [ 167.783643][ T7373] show_stack+0x2c/0x3c [ 167.784727][ T7373] dump_stack_lvl+0x108/0x170 [ 167.785939][ T7373] dump_stack+0x1c/0x58 [ 167.787049][ T7373] should_fail+0x3b8/0x514 [ 167.788294][ T7373] should_fail_alloc_page+0x74/0xa8 [ 167.789712][ T7373] prepare_alloc_pages+0x160/0x460 [ 167.791133][ T7373] __alloc_pages+0x138/0x674 [ 167.792347][ T7373] alloc_pages+0x368/0x5d4 [ 167.793483][ T7373] __pmd_alloc+0xa4/0x52c [ 167.794569][ T7373] handle_mm_fault+0x2508/0x3424 [ 167.795961][ T7373] do_page_fault+0x700/0xb60 [ 167.797195][ T7373] do_translation_fault+0xe8/0x138 [ 167.798564][ T7373] do_mem_abort+0x70/0x1d8 [ 167.799718][ T7373] el1_abort+0x3c/0x5c [ 167.800834][ T7373] el1h_64_sync_handler+0x60/0xac [ 167.802228][ T7373] el1h_64_sync+0x78/0x7c [ 167.803383][ T7373] __arch_copy_from_user+0x94/0x218 [ 167.804785][ T7373] nf_setsockopt+0x270/0x290 [ 167.806034][ T7373] ip_setsockopt+0x1d70/0x32cc [ 167.807311][ T7373] tcp_setsockopt+0x204/0x33ec [ 167.808600][ T7373] sock_common_setsockopt+0xb0/0xcc [ 167.809963][ T7373] smc_setsockopt+0x19c/0xdf8 [ 167.811274][ T7373] __sys_setsockopt+0x3a8/0x6b4 [ 167.812552][ T7373] __arm64_sys_setsockopt+0xb8/0xd4 [ 167.813946][ T7373] invoke_syscall+0x98/0x2b8 [ 167.815141][ T7373] el0_svc_common+0x138/0x258 [ 167.816429][ T7373] do_el0_svc+0x58/0x14c [ 167.817549][ T7373] el0_svc+0x7c/0x1f0 [ 167.818671][ T7373] el0t_64_sync_handler+0x84/0xe4 [ 167.820057][ T7373] el0t_64_sync+0x1a0/0x1a4 [ 168.500517][ T7368] loop0: detected capacity change from 0 to 65536 [ 168.648275][ T5811] XFS (loop0): Superblock earlier than Version 5 has XFS_{P|G}QUOTA_{ENFD|CHKD} bits. [ 168.651734][ T5811] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x328/0x44c, xfs_sb block 0x0 [ 168.654404][ T5811] XFS (loop0): Unmount and run xfs_repair [ 168.666439][ T5811] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 168.673613][ T5811] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 01 00 00 XFSB............ [ 168.677649][ T7376] netlink: 'syz.3.828': attribute type 22 has an invalid length. [ 168.680458][ T5811] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 168.686485][ T5811] 00000020: 5e 62 73 b8 21 67 42 bb 91 1b 41 8a a1 4a 12 61 ^bs.!gB...A..J.a [ 168.696358][ T5811] 00000030: 00 00 00 00 00 00 80 40 00 00 00 00 00 00 00 20 .......@....... [ 168.706158][ T5811] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 168.708592][ T5811] 00000050: 00 00 00 08 00 00 80 00 00 00 00 02 00 00 00 00 ................ [ 168.716284][ T5811] 00000060: 00 00 0b 40 b4 b4 02 00 01 00 00 02 00 00 00 00 ...@............ [ 168.718549][ T5811] 00000070: 00 00 00 00 00 00 00 00 09 09 08 01 0f 00 00 19 ................ [ 168.720911][ T7368] XFS (loop0): SB validate failed with error -117. [ 168.960720][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.069251][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.181968][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.252826][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.302010][ T7389] chnl_net:caif_netlink_parms(): no params data found [ 169.336979][ T4819] Bluetooth: hci3: command 0x0406 tx timeout [ 169.339037][ T4819] Bluetooth: hci2: command 0x0406 tx timeout [ 169.426152][ T4069] Bluetooth: hci0: command 0x0406 tx timeout [ 169.496022][ T4819] Bluetooth: hci1: command 0x0406 tx timeout [ 169.628994][ T7411] loop4: detected capacity change from 0 to 1024 [ 169.639476][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.643505][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.646878][ T7389] device bridge_slave_0 entered promiscuous mode [ 169.708219][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.710050][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.712666][ T7389] device bridge_slave_1 entered promiscuous mode [ 169.818534][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.823361][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.871399][ T7419] FAULT_INJECTION: forcing a failure. [ 169.871399][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 169.896242][ T7419] CPU: 1 PID: 7419 Comm: syz.4.840 Not tainted 5.15.165-syzkaller #0 [ 169.898279][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.900908][ T7419] Call trace: [ 169.901700][ T7419] dump_backtrace+0x0/0x530 [ 169.902792][ T7419] show_stack+0x2c/0x3c [ 169.903812][ T7419] dump_stack_lvl+0x108/0x170 [ 169.904965][ T7419] dump_stack+0x1c/0x58 [ 169.906072][ T7419] should_fail+0x3b8/0x514 [ 169.907321][ T7419] __should_failslab+0xbc/0x110 [ 169.908668][ T7419] should_failslab+0x10/0x28 [ 169.909869][ T7419] slab_pre_alloc_hook+0x64/0xe8 [ 169.911124][ T7419] kmem_cache_alloc+0x98/0x45c [ 169.912316][ T7419] __pmd_alloc+0x104/0x52c [ 169.913427][ T7419] handle_mm_fault+0x2508/0x3424 [ 169.914681][ T7419] do_page_fault+0x700/0xb60 [ 169.915913][ T7419] do_translation_fault+0xe8/0x138 [ 169.917295][ T7419] do_mem_abort+0x70/0x1d8 [ 169.918459][ T7419] el1_abort+0x3c/0x5c [ 169.919518][ T7419] el1h_64_sync_handler+0x60/0xac [ 169.920810][ T7419] el1h_64_sync+0x78/0x7c [ 169.921934][ T7419] __arch_copy_from_user+0x94/0x218 [ 169.923221][ T7419] nf_setsockopt+0x270/0x290 [ 169.924358][ T7419] ip_setsockopt+0x1d70/0x32cc [ 169.925599][ T7419] tcp_setsockopt+0x204/0x33ec [ 169.926823][ T7419] sock_common_setsockopt+0xb0/0xcc [ 169.928143][ T7419] smc_setsockopt+0x19c/0xdf8 [ 169.929415][ T7419] __sys_setsockopt+0x3a8/0x6b4 [ 169.930645][ T7419] __arm64_sys_setsockopt+0xb8/0xd4 [ 169.931952][ T7419] invoke_syscall+0x98/0x2b8 [ 169.933145][ T7419] el0_svc_common+0x138/0x258 [ 169.934413][ T7419] do_el0_svc+0x58/0x14c [ 169.935548][ T7419] el0_svc+0x7c/0x1f0 [ 169.936551][ T7419] el0t_64_sync_handler+0x84/0xe4 [ 169.937898][ T7419] el0t_64_sync+0x1a0/0x1a4 [ 169.957610][ T7405] loop1: detected capacity change from 0 to 32768 [ 170.001758][ T7389] team0: Port device team_slave_0 added [ 170.020568][ T7389] team0: Port device team_slave_1 added [ 170.184118][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.187601][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.224996][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.238662][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.240464][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.274871][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.326038][ T7431] loop4: detected capacity change from 0 to 64 [ 170.363816][ T7431] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=1badfffb) [ 170.393103][ T7434] loop1: detected capacity change from 0 to 1764 [ 170.438164][ T7389] device hsr_slave_0 entered promiscuous mode [ 170.476615][ T7389] device hsr_slave_1 entered promiscuous mode [ 170.525844][ T7389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.527917][ T7389] Cannot create hsr debugfs directory [ 170.866256][ T4069] Bluetooth: hci4: command 0x0409 tx timeout [ 171.276818][ T7456] udc-core: couldn't find an available UDC or it's busy [ 171.278677][ T7456] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.392229][ T7463] udc-core: couldn't find an available UDC or it's busy [ 172.394358][ T7463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.698445][ T4068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.936057][ T4068] Bluetooth: hci4: command 0x041b tx timeout [ 173.638252][ T7389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.730167][ T7389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.837812][ T7389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.916943][ T136] device hsr_slave_0 left promiscuous mode [ 173.984882][ T136] device hsr_slave_1 left promiscuous mode [ 174.047902][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.049946][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.066325][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.068366][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.080183][ T136] bridge0: port 3(team0) entered disabled state [ 174.112900][ T7477] loop4: detected capacity change from 0 to 1024 [ 174.127484][ T136] device bridge_slave_1 left promiscuous mode [ 174.129331][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.157051][ T136] device bridge_slave_0 left promiscuous mode [ 174.162059][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.167084][ T7480] netlink: 248 bytes leftover after parsing attributes in process `syz.1.851'. [ 174.168763][ T7477] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 174.169681][ T7480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.851'. [ 174.317955][ T136] device veth1_macvtap left promiscuous mode [ 174.319908][ T136] device veth0_macvtap left promiscuous mode [ 174.321676][ T136] device veth1_vlan left promiscuous mode [ 174.323305][ T136] device veth0_vlan left promiscuous mode [ 174.326735][ T7491] FAULT_INJECTION: forcing a failure. [ 174.326735][ T7491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.330295][ T7491] CPU: 1 PID: 7491 Comm: syz.4.853 Not tainted 5.15.165-syzkaller #0 [ 174.332402][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.334952][ T7491] Call trace: [ 174.335736][ T7491] dump_backtrace+0x0/0x530 [ 174.336860][ T7491] show_stack+0x2c/0x3c [ 174.337916][ T7491] dump_stack_lvl+0x108/0x170 [ 174.339117][ T7491] dump_stack+0x1c/0x58 [ 174.340216][ T7491] should_fail+0x3b8/0x514 [ 174.341372][ T7491] should_fail_alloc_page+0x74/0xa8 [ 174.342734][ T7491] prepare_alloc_pages+0x160/0x460 [ 174.344100][ T7491] __alloc_pages+0x138/0x674 [ 174.345297][ T7491] alloc_pages+0x368/0x5d4 [ 174.346407][ T7491] pte_alloc_one+0x2c/0x258 [ 174.347583][ T7491] __pte_alloc+0x84/0x2c4 [ 174.348657][ T7491] handle_mm_fault+0x2cd8/0x3424 [ 174.349951][ T7491] do_page_fault+0x700/0xb60 [ 174.351102][ T7491] do_translation_fault+0xe8/0x138 [ 174.352421][ T7491] do_mem_abort+0x70/0x1d8 [ 174.353583][ T7491] el1_abort+0x3c/0x5c [ 174.354595][ T7491] el1h_64_sync_handler+0x60/0xac [ 174.355841][ T7491] el1h_64_sync+0x78/0x7c [ 174.356934][ T7491] __arch_copy_from_user+0x94/0x218 [ 174.358265][ T7491] nf_setsockopt+0x270/0x290 [ 174.359441][ T7491] ip_setsockopt+0x1d70/0x32cc [ 174.360644][ T7491] tcp_setsockopt+0x204/0x33ec [ 174.361877][ T7491] sock_common_setsockopt+0xb0/0xcc [ 174.363176][ T7491] smc_setsockopt+0x19c/0xdf8 [ 174.364361][ T7491] __sys_setsockopt+0x3a8/0x6b4 [ 174.365664][ T7491] __arm64_sys_setsockopt+0xb8/0xd4 [ 174.367026][ T7491] invoke_syscall+0x98/0x2b8 [ 174.368197][ T7491] el0_svc_common+0x138/0x258 [ 174.369369][ T7491] do_el0_svc+0x58/0x14c [ 174.370475][ T7491] el0_svc+0x7c/0x1f0 [ 174.371467][ T7491] el0t_64_sync_handler+0x84/0xe4 [ 174.372875][ T7491] el0t_64_sync+0x1a0/0x1a4 [ 174.887964][ T136] device team_slave_1 left promiscuous mode [ 174.905163][ T136] team0 (unregistering): Port device team_slave_1 removed [ 174.919363][ T136] device team_slave_0 left promiscuous mode [ 174.922033][ T136] team0 (unregistering): Port device team_slave_0 removed [ 175.025930][ T4819] Bluetooth: hci4: command 0x040f tx timeout [ 175.041088][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.146637][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.335691][ T136] bond0 (unregistering): Released all slaves [ 175.480921][ T7389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.750802][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.788816][ T7513] binder_alloc: binder_alloc_mmap_handler: 7511 20ffd000-21000000 already mapped failed -16 [ 175.794771][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.797624][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.812964][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.817145][ T7515] binder: BINDER_SET_CONTEXT_MGR already set [ 175.819004][ T7515] binder: 7511:7515 ioctl 4018620d 20000040 returned -16 [ 175.820923][ T7515] binder: BINDER_SET_CONTEXT_MGR already set [ 175.822485][ T7515] binder: 7511:7515 ioctl 4018620d 20000040 returned -16 [ 175.824304][ T7515] binder: BINDER_SET_CONTEXT_MGR already set [ 175.834086][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.838541][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.848679][ T7516] binder: 7511:7516 tried to acquire reference to desc 0, got 1 instead [ 175.856255][ T7515] binder: 7511:7515 ioctl 4018620d 20000040 returned -16 [ 175.856556][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.860006][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.887176][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.905718][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.913371][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.943860][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.945863][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.956467][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.975672][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.997470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.000649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.003214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.008544][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.014022][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.023078][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.098101][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.117089][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.127154][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.191708][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.206751][ T7502] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 176.321275][ T7530] udc-core: couldn't find an available UDC or it's busy [ 176.323312][ T7530] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.096301][ T4819] Bluetooth: hci4: command 0x0419 tx timeout [ 177.099290][ T7539] udc-core: couldn't find an available UDC or it's busy [ 177.101157][ T7539] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.134004][ T7539] udc-core: couldn't find an available UDC or it's busy [ 177.135720][ T7539] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.244849][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.254296][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.284910][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.378923][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.382143][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.477295][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.480127][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.483697][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.487825][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.504088][ T7389] device veth0_vlan entered promiscuous mode [ 177.551380][ T7389] device veth1_vlan entered promiscuous mode [ 177.670860][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.673786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.703024][ T7389] device veth0_macvtap entered promiscuous mode [ 177.731290][ T7389] device veth1_macvtap entered promiscuous mode [ 177.744874][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.747889][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.750410][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.755402][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.762697][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.765498][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.768607][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.771313][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.774003][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.777118][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.784342][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.807911][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.831122][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.833944][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.843008][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.856368][ T7555] FAULT_INJECTION: forcing a failure. [ 177.856368][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 177.862343][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.865018][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.872768][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.876584][ T7555] CPU: 1 PID: 7555 Comm: syz.4.865 Not tainted 5.15.165-syzkaller #0 [ 177.878686][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.881289][ T7555] Call trace: [ 177.882097][ T7555] dump_backtrace+0x0/0x530 [ 177.883327][ T7555] show_stack+0x2c/0x3c [ 177.884496][ T7555] dump_stack_lvl+0x108/0x170 [ 177.885716][ T7555] dump_stack+0x1c/0x58 [ 177.886944][ T7555] should_fail+0x3b8/0x514 [ 177.888164][ T7555] __should_failslab+0xbc/0x110 [ 177.889463][ T7555] should_failslab+0x10/0x28 [ 177.890761][ T7555] slab_pre_alloc_hook+0x64/0xe8 [ 177.892153][ T7555] kmem_cache_alloc+0x98/0x45c [ 177.893443][ T7555] pte_alloc_one+0x78/0x258 [ 177.894702][ T7555] __pte_alloc+0x84/0x2c4 [ 177.895924][ T7555] handle_mm_fault+0x2cd8/0x3424 [ 177.897271][ T7555] do_page_fault+0x700/0xb60 [ 177.898516][ T7555] do_translation_fault+0xe8/0x138 [ 177.899969][ T7555] do_mem_abort+0x70/0x1d8 [ 177.901197][ T7555] el1_abort+0x3c/0x5c [ 177.902306][ T7555] el1h_64_sync_handler+0x60/0xac [ 177.903706][ T7555] el1h_64_sync+0x78/0x7c [ 177.904903][ T7555] __arch_copy_from_user+0x94/0x218 [ 177.906351][ T7555] nf_setsockopt+0x270/0x290 [ 177.907583][ T7555] ip_setsockopt+0x1d70/0x32cc [ 177.908942][ T7555] tcp_setsockopt+0x204/0x33ec [ 177.910314][ T7555] sock_common_setsockopt+0xb0/0xcc [ 177.911763][ T7555] smc_setsockopt+0x19c/0xdf8 [ 177.913138][ T7555] __sys_setsockopt+0x3a8/0x6b4 [ 177.914431][ T7555] __arm64_sys_setsockopt+0xb8/0xd4 [ 177.915840][ T7555] invoke_syscall+0x98/0x2b8 [ 177.917120][ T7555] el0_svc_common+0x138/0x258 [ 177.918398][ T7555] do_el0_svc+0x58/0x14c [ 177.919524][ T7555] el0_svc+0x7c/0x1f0 [ 177.920613][ T7555] el0t_64_sync_handler+0x84/0xe4 [ 177.922025][ T7555] el0t_64_sync+0x1a0/0x1a4 [ 177.935921][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.938510][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.941222][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.943716][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.965901][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.968508][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.971128][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.011286][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.014467][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.017503][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.035180][ T7389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.064857][ T7389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.072886][ T7389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.075311][ T7389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.357224][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.361942][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.392490][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.422003][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.439090][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.476678][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.532538][ T7562] chnl_net:caif_netlink_parms(): no params data found [ 179.222850][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.231907][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.264053][ T7562] device bridge_slave_0 entered promiscuous mode [ 179.274563][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.277046][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.279544][ T7562] device bridge_slave_1 entered promiscuous mode [ 179.344871][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.359841][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.371640][ T7600] loop1: detected capacity change from 0 to 512 [ 179.378427][ T7601] FAULT_INJECTION: forcing a failure. [ 179.378427][ T7601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.381825][ T7601] CPU: 0 PID: 7601 Comm: syz.3.871 Not tainted 5.15.165-syzkaller #0 [ 179.383939][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 179.386599][ T7601] Call trace: [ 179.387447][ T7601] dump_backtrace+0x0/0x530 [ 179.388664][ T7601] show_stack+0x2c/0x3c [ 179.389803][ T7601] dump_stack_lvl+0x108/0x170 [ 179.391037][ T7601] dump_stack+0x1c/0x58 [ 179.392151][ T7601] should_fail+0x3b8/0x514 [ 179.393303][ T7601] should_fail_usercopy+0x20/0x30 [ 179.394663][ T7601] do_ip_vs_set_ctl+0x228/0x109c [ 179.396033][ T7601] nf_setsockopt+0x270/0x290 [ 179.397330][ T7601] ip_setsockopt+0x1d70/0x32cc [ 179.398626][ T7601] tcp_setsockopt+0x204/0x33ec [ 179.399873][ T7601] sock_common_setsockopt+0xb0/0xcc [ 179.401259][ T7601] smc_setsockopt+0x19c/0xdf8 [ 179.402551][ T7601] __sys_setsockopt+0x3a8/0x6b4 [ 179.403840][ T7601] __arm64_sys_setsockopt+0xb8/0xd4 [ 179.405258][ T7601] invoke_syscall+0x98/0x2b8 [ 179.406508][ T7601] el0_svc_common+0x138/0x258 [ 179.407769][ T7601] do_el0_svc+0x58/0x14c [ 179.409089][ T7601] el0_svc+0x7c/0x1f0 [ 179.410183][ T7601] el0t_64_sync_handler+0x84/0xe4 [ 179.411478][ T7601] el0t_64_sync+0x1a0/0x1a4 [ 179.465996][ T7600] EXT4-fs (loop1): Ignoring removed oldalloc option [ 179.504722][ T7600] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 179.522982][ T7600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=80fc01c, mo2=0002] [ 179.524758][ T7562] team0: Port device team_slave_0 added [ 179.536119][ T7600] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 179.538590][ T7600] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 179.540736][ T7600] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,noauto_da_alloc,noblock_validity,usrquota,oldalloc,jqfmt=vfsv0,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 179.656337][ T7562] team0: Port device team_slave_1 added [ 179.708045][ T7600] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.870: dx entry: limit 65535 != root limit 120 [ 179.711119][ T7600] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.870: Corrupt directory, running e2fsck is recommended [ 179.723377][ T7567] udc-core: couldn't find an available UDC or it's busy [ 179.747201][ T7600] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.870: dx entry: limit 65535 != root limit 120 [ 179.750250][ T7600] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.870: Corrupt directory, running e2fsck is recommended [ 179.753717][ T7567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.784026][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.796157][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.823309][ T7562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.840533][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.846678][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.872668][ T7562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.009660][ T7562] device hsr_slave_0 entered promiscuous mode [ 180.037300][ T7562] device hsr_slave_1 entered promiscuous mode [ 180.076706][ T7562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.082693][ T7562] Cannot create hsr debugfs directory [ 180.135928][ T4034] Bluetooth: hci6: command 0x0409 tx timeout [ 180.714288][ T7562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.819834][ T7562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.967495][ T7562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.661929][ T7621] loop1: detected capacity change from 0 to 32768 [ 181.684927][ T7562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.793211][ T7621] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.874 (7621) [ 181.821386][ T7621] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 181.823818][ T7621] BTRFS info (device loop1): using free space tree [ 181.825638][ T7621] BTRFS info (device loop1): has skinny extents [ 182.024762][ T7562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.040292][ T4713] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0x75b2f64faa35f206b1a88ea3b6f31558383a31a854040d586de8c3b25b16b4ef level 0 [ 182.056613][ T7621] BTRFS warning (device loop1): couldn't read tree root [ 182.090789][ T7562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.094388][ T7621] BTRFS error (device loop1): open_ctree failed [ 182.203455][ T7562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.216053][ T4034] Bluetooth: hci6: command 0x041b tx timeout [ 182.229193][ T7562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.303477][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.741956][ T7657] loop1: detected capacity change from 0 to 512 [ 182.941895][ T7664] FAULT_INJECTION: forcing a failure. [ 182.941895][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.961019][ T7664] CPU: 0 PID: 7664 Comm: syz.4.881 Not tainted 5.15.165-syzkaller #0 [ 182.963155][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 182.965681][ T7664] Call trace: [ 182.966493][ T7664] dump_backtrace+0x0/0x530 [ 182.967600][ T7664] show_stack+0x2c/0x3c [ 182.968613][ T7664] dump_stack_lvl+0x108/0x170 [ 182.969759][ T7664] dump_stack+0x1c/0x58 [ 182.970802][ T7664] should_fail+0x3b8/0x514 [ 182.971989][ T7664] should_fail_usercopy+0x20/0x30 [ 182.973320][ T7664] smc_setsockopt+0x298/0xdf8 [ 182.974622][ T7664] __sys_setsockopt+0x3a8/0x6b4 [ 182.975862][ T7664] __arm64_sys_setsockopt+0xb8/0xd4 [ 182.977167][ T7664] invoke_syscall+0x98/0x2b8 [ 182.978294][ T7664] el0_svc_common+0x138/0x258 [ 182.979447][ T7664] do_el0_svc+0x58/0x14c [ 182.980564][ T7664] el0_svc+0x7c/0x1f0 [ 182.981573][ T7664] el0t_64_sync_handler+0x84/0xe4 [ 182.982928][ T7664] el0t_64_sync+0x1a0/0x1a4 [ 183.042282][ T7657] loop1: detected capacity change from 0 to 512 [ 183.170761][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.214855][ T7562] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.217850][ T7680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.222369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.225042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.241803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.244416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.278637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.281906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.284473][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.286279][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.294701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.301222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.303729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.305647][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.328847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.331542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.334637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.358229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.365556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.433206][ T7684] FAULT_INJECTION: forcing a failure. [ 183.433206][ T7684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.455705][ T7684] CPU: 0 PID: 7684 Comm: syz.1.886 Not tainted 5.15.165-syzkaller #0 [ 183.457929][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.460549][ T7684] Call trace: [ 183.461383][ T7684] dump_backtrace+0x0/0x530 [ 183.462517][ T7684] show_stack+0x2c/0x3c [ 183.463594][ T7684] dump_stack_lvl+0x108/0x170 [ 183.464757][ T7684] dump_stack+0x1c/0x58 [ 183.465860][ T7684] should_fail+0x3b8/0x514 [ 183.466970][ T7684] should_fail_alloc_page+0x74/0xa8 [ 183.468362][ T7684] prepare_alloc_pages+0x160/0x460 [ 183.469725][ T7684] __alloc_pages+0x138/0x674 [ 183.471033][ T7684] alloc_pages+0x368/0x5d4 [ 183.472234][ T7684] __pmd_alloc+0xa4/0x52c [ 183.473419][ T7684] handle_mm_fault+0x2508/0x3424 [ 183.474641][ T7684] do_page_fault+0x700/0xb60 [ 183.475859][ T7684] do_translation_fault+0xe8/0x138 [ 183.477275][ T7684] do_mem_abort+0x70/0x1d8 [ 183.478540][ T7684] el1_abort+0x3c/0x5c [ 183.479633][ T7684] el1h_64_sync_handler+0x60/0xac [ 183.480940][ T7684] el1h_64_sync+0x78/0x7c [ 183.482102][ T7684] __arch_copy_from_user+0x94/0x218 [ 183.483441][ T7684] nf_setsockopt+0x270/0x290 [ 183.484649][ T7684] ip_setsockopt+0x1d70/0x32cc [ 183.485968][ T7684] tcp_setsockopt+0x204/0x33ec [ 183.487241][ T7684] sock_common_setsockopt+0xb0/0xcc [ 183.488675][ T7684] smc_setsockopt+0x19c/0xdf8 [ 183.489889][ T7684] __sys_setsockopt+0x3a8/0x6b4 [ 183.491137][ T7684] __arm64_sys_setsockopt+0xb8/0xd4 [ 183.492527][ T7684] invoke_syscall+0x98/0x2b8 [ 183.493771][ T7684] el0_svc_common+0x138/0x258 [ 183.495102][ T7684] do_el0_svc+0x58/0x14c [ 183.496182][ T7684] el0_svc+0x7c/0x1f0 [ 183.497322][ T7684] el0t_64_sync_handler+0x84/0xe4 [ 183.498704][ T7684] el0t_64_sync+0x1a0/0x1a4 [ 204.225743][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz.3.885:7687] [ 204.228420][ C1] Modules linked in: [ 204.229466][ C1] irq event stamp: 6392 [ 204.230517][ C1] hardirqs last enabled at (6391): [] exit_to_kernel_mode+0x100/0x178 [ 204.233067][ C1] hardirqs last disabled at (6392): [] enter_el1_irq_or_nmi+0x10/0x1c [ 204.235508][ C1] softirqs last enabled at (2178): [] local_bh_enable+0x10/0x34 [ 204.237822][ C1] softirqs last disabled at (2174): [] local_bh_disable+0x10/0x34 [ 204.240243][ C1] CPU: 1 PID: 7687 Comm: syz.3.885 Not tainted 5.15.165-syzkaller #0 [ 204.242420][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 204.245017][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 204.247011][ C1] pc : smp_call_function_many_cond+0xa38/0x1044 [ 204.248602][ C1] lr : smp_call_function_many_cond+0xa50/0x1044 [ 204.250243][ C1] sp : ffff80001d4d7900 [ 204.251385][ C1] x29: ffff80001d4d7950 x28: 0000000000000000 x27: dfff800000000000 [ 204.253523][ C1] x26: 0000000000000011 x25: ffff0001b47e9940 x24: ffff800014ac0ff8 [ 204.255548][ C1] x23: 1fffe000368fd328 x22: ffff0001b47cedc8 x21: ffff800014cada40 [ 204.257563][ C1] x20: 0000000000000000 x19: ffff0001b47e9948 x18: 1fffe000368fab8e [ 204.259580][ C1] x17: 1fffe000368fab8e x16: ffff800011abc7d0 x15: ffff800014b5ef00 [ 204.261714][ C1] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000040000 [ 204.263724][ C1] x11: 000000000003ffff x10: ffff800025c00000 x9 : 0000000000000000 [ 204.265709][ C1] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 204.267757][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000840edf4 [ 204.269842][ C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 204.271902][ C1] Call trace: [ 204.272737][ C1] smp_call_function_many_cond+0xa38/0x1044 [ 204.274222][ C1] smp_call_function_many+0x40/0x54 [ 204.275505][ C1] clock_was_set+0x69c/0x784 [ 204.276666][ C1] do_settimeofday64+0x6cc/0x8d8 [ 204.277915][ C1] do_sys_settimeofday64+0x1b8/0x23c [ 204.279340][ C1] posix_clock_realtime_set+0x24/0x34 [ 204.280697][ C1] __arm64_sys_clock_settime+0x1fc/0x248 [ 204.282103][ C1] invoke_syscall+0x98/0x2b8 [ 204.283229][ C1] el0_svc_common+0x138/0x258 [ 204.284397][ C1] do_el0_svc+0x58/0x14c [ 204.285458][ C1] el0_svc+0x7c/0x1f0 [ 204.286509][ C1] el0t_64_sync_handler+0x84/0xe4 [ 204.287728][ C1] el0t_64_sync+0x1a0/0x1a4 [ 204.288897][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 204.290652][ C1] CPU: 1 PID: 7687 Comm: syz.3.885 Tainted: G L 5.15.165-syzkaller #0 [ 204.293034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 204.295557][ C1] Call trace: [ 204.296374][ C1] dump_backtrace+0x0/0x530 [ 204.297521][ C1] show_stack+0x2c/0x3c [ 204.298603][ C1] dump_stack_lvl+0x108/0x170 [ 204.299797][ C1] dump_stack+0x1c/0x58 [ 204.300849][ C1] panic+0x304/0x8bc [ 204.301830][ C1] softlockup_fn+0x0/0x120 [ 204.302947][ C1] __hrtimer_run_queues+0x458/0xca4 [ 204.304294][ C1] hrtimer_interrupt+0x2c0/0xb64 [ 204.305516][ C1] arch_timer_handler_virt+0x74/0x88 [ 204.306844][ C1] handle_percpu_devid_irq+0x29c/0x7fc [ 204.308329][ C1] handle_domain_irq+0xec/0x178 [ 204.309535][ C1] gic_handle_irq+0x78/0x1c8 [ 204.310715][ C1] call_on_irq_stack+0x24/0x4c [ 204.311933][ C1] do_interrupt_handler+0x74/0x94 [ 204.313305][ C1] el1_interrupt+0x30/0x58 [ 204.314410][ C1] el1h_64_irq_handler+0x18/0x24 [ 204.315723][ C1] el1h_64_irq+0x78/0x7c [ 204.316864][ C1] smp_call_function_many_cond+0xa38/0x1044 [ 204.318526][ C1] smp_call_function_many+0x40/0x54 [ 204.319833][ C1] clock_was_set+0x69c/0x784 [ 204.320990][ C1] do_settimeofday64+0x6cc/0x8d8 [ 204.322240][ C1] do_sys_settimeofday64+0x1b8/0x23c [ 204.323640][ C1] posix_clock_realtime_set+0x24/0x34 [ 204.325050][ C1] __arm64_sys_clock_settime+0x1fc/0x248 [ 204.326515][ C1] invoke_syscall+0x98/0x2b8 [ 204.327685][ C1] el0_svc_common+0x138/0x258 [ 204.328883][ C1] do_el0_svc+0x58/0x14c [ 204.329937][ C1] el0_svc+0x7c/0x1f0 [ 204.330935][ C1] el0t_64_sync_handler+0x84/0xe4 [ 204.332202][ C1] el0t_64_sync+0x1a0/0x1a4 [ 204.333371][ C1] SMP: stopping secondary CPUs [ 205.418978][ C1] SMP: failed to stop secondary CPUs 0-1 [ 205.420486][ C1] Kernel Offset: disabled [ 205.421568][ C1] CPU features: 0x8,000081c1,21302e40 [ 205.422949][ C1] Memory Limit: none [ 205.454466][ C1] [ 205.455128][ C1] ================================ [ 205.456405][ C1] WARNING: inconsistent lock state [ 205.457668][ C1] 5.15.165-syzkaller #0 Tainted: G L [ 205.459316][ C1] -------------------------------- [ 205.460604][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 205.462311][ C1] syz.3.885/7687 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 205.463883][ C1] ffff800014afdcf8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 205.466640][ C1] {HARDIRQ-ON-W} state was registered at: [ 205.468135][ C1] lock_acquire+0x240/0x77c [ 205.469300][ C1] _raw_spin_lock+0xb0/0x10c [ 205.470544][ C1] efi_call_rts+0x80/0x9d8 [ 205.471757][ C1] process_one_work+0x790/0x11b8 [ 205.473090][ C1] worker_thread+0x910/0x1034 [ 205.474320][ C1] kthread+0x37c/0x45c [ 205.475397][ C1] ret_from_fork+0x10/0x20 [ 205.476582][ C1] irq event stamp: 6392 [ 205.477668][ C1] hardirqs last enabled at (6391): [] exit_to_kernel_mode+0x100/0x178 [ 205.480239][ C1] hardirqs last disabled at (6392): [] enter_el1_irq_or_nmi+0x10/0x1c [ 205.482852][ C1] softirqs last enabled at (2178): [] local_bh_enable+0x10/0x34 [ 205.485356][ C1] softirqs last disabled at (2174): [] local_bh_disable+0x10/0x34 [ 205.487915][ C1] [ 205.487915][ C1] other info that might help us debug this: [ 205.490086][ C1] Possible unsafe locking scenario: [ 205.490086][ C1] [ 205.492063][ C1] CPU0 [ 205.492929][ C1] ---- [ 205.493811][ C1] lock(efi_rt_lock); [ 205.494850][ C1] [ 205.495768][ C1] lock(efi_rt_lock); [ 205.496821][ C1] [ 205.496821][ C1] *** DEADLOCK *** [ 205.496821][ C1] [ 205.498932][ C1] 3 locks held by syz.3.885/7687: [ 205.500269][ C1] #0: ffff800014b301d0 (cpu_hotplug_lock){++++}-{0:0}, at: clock_was_set+0x124/0x784 [ 205.502766][ C1] #1: ffff800014c917a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 205.505147][ C1] #2: ffff8000167f5d88 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x174/0x9dc [ 205.507663][ C1] [ 205.507663][ C1] stack backtrace: [ 205.509267][ C1] CPU: 1 PID: 7687 Comm: syz.3.885 Tainted: G L 5.15.165-syzkaller #0 [ 205.511812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 205.514488][ C1] Call trace: [ 205.515323][ C1] dump_backtrace+0x0/0x530 [ 205.516512][ C1] show_stack+0x2c/0x3c [ 205.517564][ C1] dump_stack_lvl+0x108/0x170 [ 205.518815][ C1] dump_stack+0x1c/0x58 [ 205.519881][ C1] print_usage_bug+0x64c/0x9a8 [ 205.521150][ C1] mark_lock_irq+0x980/0xd2c [ 205.522446][ C1] mark_lock+0x258/0x360 [ 205.523567][ C1] __lock_acquire+0xb50/0x7638 [ 205.524816][ C1] lock_acquire+0x240/0x77c [ 205.526019][ C1] _raw_spin_lock+0xb0/0x10c [ 205.527211][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 205.528864][ C1] efivar_entry_set_safe+0x560/0x580 [ 205.530257][ C1] efi_pstore_write+0x280/0x400 [ 205.531526][ C1] pstore_dump+0x6b0/0x9dc [ 205.532699][ C1] kmsg_dump+0x17c/0x26c [ 205.533797][ C1] panic+0x358/0x8bc [ 205.534830][ C1] softlockup_fn+0x0/0x120 [ 205.535998][ C1] __hrtimer_run_queues+0x458/0xca4 [ 205.537369][ C1] hrtimer_interrupt+0x2c0/0xb64 [ 205.538653][ C1] arch_timer_handler_virt+0x74/0x88 [ 205.540126][ C1] handle_percpu_devid_irq+0x29c/0x7fc [ 205.541536][ C1] handle_domain_irq+0xec/0x178 [ 205.542801][ C1] gic_handle_irq+0x78/0x1c8 [ 205.544031][ C1] call_on_irq_stack+0x24/0x4c [ 205.545280][ C1] do_interrupt_handler+0x74/0x94 [ 205.546563][ C1] el1_interrupt+0x30/0x58 [ 205.547737][ C1] el1h_64_irq_handler+0x18/0x24 [ 205.549044][ C1] el1h_64_irq+0x78/0x7c [ 205.550144][ C1] smp_call_function_many_cond+0xa38/0x1044 [ 205.551710][ C1] smp_call_function_many+0x40/0x54 [ 205.553037][ C1] clock_was_set+0x69c/0x784 [ 205.554193][ C1] do_settimeofday64+0x6cc/0x8d8 [ 205.555508][ C1] do_sys_settimeofday64+0x1b8/0x23c [ 205.556875][ C1] posix_clock_realtime_set+0x24/0x34 [ 205.558276][ C1] __arm64_sys_clock_settime+0x1fc/0x248 [ 205.559749][ C1] invoke_syscall+0x98/0x2b8 [ 205.561004][ C1] el0_svc_common+0x138/0x258 [ 205.562211][ C1] do_el0_svc+0x58/0x14c [ 205.563281][ C1] el0_svc+0x7c/0x1f0 [ 205.564305][ C1] el0t_64_sync_handler+0x84/0xe4 [ 205.565584][ C1] el0t_64_sync+0x1a0/0x1a4 [ 206.120274][ C1] Rebooting in 86400 seconds..