last executing test programs: 2m49.268653884s ago: executing program 4 (id=244): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1d, &(0x7f0000000040), 0x0) 2m49.043770497s ago: executing program 4 (id=248): r0 = socket(0x2, 0x3, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 2m48.344145772s ago: executing program 4 (id=257): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f00000016c0)="$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") chdir(&(0x7f0000000540)='./file0\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)="06b4552536", 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000, 0x0) 2m47.748199422s ago: executing program 4 (id=266): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x210017, &(0x7f0000000040)=ANY=[], 0x5, 0x1e3, &(0x7f0000000ac0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x66e, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZrb1qCmyZtQJVqNRIgLBK/yAVzISCEfKhQVQ6crcRprGzSYrvIrRB1eL320D+gHHxBnJC4RyocuMCtN+RjJSQuvWBOi3Z21l6/dp00Xqf9fKLZ53nmmXnm9/xmZ/bFijbAF9b8ROoPUmR+4pW1TntzY6a1uTFzt1dPMpJkPaknqSUp/ttutz9MrifF9jDFnnKf95fmXvvok82Pu616tZTb147ab49qu/U9q9d768aTnKnKR7BrvBuPPF6xHfn1JFeqEobubJL2Lj/7+9PbPX2aB+09eiIxAo9X0X3d3GcsOVdd6J33Ab1X3trJRje4kQG32/sOAgAAAJ40g3wG/vJWtrJWnD+BcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBzYX3n9/+Laqn16uMper//36jWpaqfLi8eb/MHjysOAAAAAAAAADhBL25lK2s532u3i/Jv/i+VjYvl41N5KytZzHKuZi0LWc1qljOVZKxvoMbawurq8tQAe04fuOf0pwQ6UpXNz2beAAAAAAAAAPA586vM7/z9HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAToMiOdMtUtzvWz2WWj3JaJJGZ8V68s9e/Un2YNgBAAAAwAkYSbaylvO9drvIxSTPld8BjOat3MtqlrKaVhZzs/xeoPupv7a5MdPa3Ji521n2j/v9/xwrjHLEdL97OPjIl8stmrmVpXLN1dzIG2nlZmrlnh2Xq3h6o/bFNZrkfiem4nuVASO7WZWdmb9Xlfu8e6zJHuaYX6aMlRk5u52RySq2Tjae6Z2Zg8/QMc/O3iNNpbYd7MU9R2rsnsxD5fxcVXbm87vDcj4UezMx3ffse+7onCdf/8uffjpZ1U/PlAZzpirb5WNzfyZm+jLx/CCZuN26d+f2rZWJJy0T+0yWmbi03Z7Pj/KTTGQ8r2Y5S/l5FrKaxYznh2VtoTr5Rd8lf0imru9qvfppkTSqZ2j3ZB0vppfKfc9nKT/OG7mZxbxc/pvOVL6d2cxmru8MXzr6DJdXfe2Qq779pQODv/KNqtJM8vuqPB06eX2mL6/999yxsq9/zU6WLgyQpWPeG+tfrSqdY/y6Kk+HvZmY6svEs0dn4g/lbWWlde/O8u2FNwc73IX3qkrnOvptMj7cG0ljT/1C52SVrd3Pjk7fswf2TZV9F7f7avv6Lm33da/U9UOv1Eb1Hm7/SNNl3/MH9s2UfZf7+g56vwXAqXfum+cazX83/9H8oPmb5u3mK6M/GPnOyAuNnP3r2e/WJ898rfZC8ed8kF/ufP4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe3srb79xZaLUWl7uVRpKy0m63393dddxKvTrCQ+7+CJWM/+upzpEP6Or9nNkJxvOVp5OTm/tprfyv3W5Xa4pDtvnj305NotqVU5G6IVWGd08CTsa11btvXlt5+51vLd1deH3x9cV7c7Ozc5Nzsy/PXLu11Fqc7D4OO0rgcdh50R92JAAAAAAAAAAAAMCgTuK/Ewx7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTbX4i9QcpMjV5dbLT3tyYaXWWXn1ny3qSWpLiF0nxYXI93SVjfcMVhx3n/aW51z76ZPPjnbHqve1rR+03mPVqyXiSM93y/mc13o2qPFJx1BSK7Rl2EnallzgYtv8HAAD//6zVBNw=") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2m46.756069057s ago: executing program 4 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m46.337559695s ago: executing program 4 (id=278): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x7e, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'IW\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2m45.815550644s ago: executing program 32 (id=278): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x7e, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'IW\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2m31.048230183s ago: executing program 0 (id=366): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f00000002c0)={0x6, 0x81}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) 2m30.547627394s ago: executing program 0 (id=370): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) chdir(0x0) ioprio_set$uid(0x3, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='contention_begin\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 2m25.502968236s ago: executing program 0 (id=390): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xffffffff, 0x0, &(0x7f0000000000)=0x15) 2m25.240372556s ago: executing program 0 (id=392): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x210017, &(0x7f0000000040)=ANY=[], 0x5, 0x1e3, &(0x7f0000000ac0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x66e, &(0x7f0000000640)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m24.30998212s ago: executing program 0 (id=397): unshare(0x4040600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m23.480197196s ago: executing program 0 (id=405): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8], [0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000], [0xb306, 0x0, 0xffffffff, 0x7]], '\x00', [{0xffffffff}, {0x6}, {0x0, 0x8}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0x1e7}, {0xef}, {0x0, 0x80000001}, {0x0, 0xfffffffe}, {0x80000}, {0x0, 0xfffffffd}], '\x00', 0x1000}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1b, &(0x7f0000000040)) 2m22.085149745s ago: executing program 33 (id=405): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8], [0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000], [0xb306, 0x0, 0xffffffff, 0x7]], '\x00', [{0xffffffff}, {0x6}, {0x0, 0x8}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0x1e7}, {0xef}, {0x0, 0x80000001}, {0x0, 0xfffffffe}, {0x80000}, {0x0, 0xfffffffd}], '\x00', 0x1000}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1b, &(0x7f0000000040)) 2m12.248214124s ago: executing program 1 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 2m11.648225241s ago: executing program 1 (id=449): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r0, 0xd, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m10.153443922s ago: executing program 1 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x220080c0) 2m9.566957521s ago: executing program 1 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) listxattr(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000480)=""/78, 0x4e) mount$bind(&(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x80700a, 0x0) 2m9.128881833s ago: executing program 1 (id=458): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x4000300, 0x4000, 0x300, 0x1, 0x0, r1, 0x0}]) 2m3.970689762s ago: executing program 1 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) poll(0x0, 0x0, 0x31) 2m3.066770399s ago: executing program 34 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) poll(0x0, 0x0, 0x31) 1m39.287302713s ago: executing program 2 (id=575): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218819, &(0x7f0000001480)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f72676574006769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xdf, 0xc2d, &(0x7f00000001c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m38.356054045s ago: executing program 2 (id=577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) pivot_root(&(0x7f0000000240)='./file1\x00', 0x0) 1m37.828152209s ago: executing program 2 (id=579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000240), 0x84080) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000b00)=""/182, 0xb6) 1m37.453526134s ago: executing program 2 (id=580): r0 = io_uring_setup(0x3eae, &(0x7f0000000100)) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="900fff9fb98e12986ee8f03dc720e8880a43ee3d363ab7ebe3dd9d83e65456eb7942b7ac13b8c2e34b7bf6f7dd3bfa8e0f6a9acdc1ee816d8cbfceca0715f42ad9451d7eeda62e8094e99dadc30c63f5943dd4a295b0413f52c1fe3ca0110fac8d60a68b0d73d06b93fc40cb2d9cbfa65d27a7c7ddb32d13cc2dfd", 0x7b, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@bridge_delvlan={0x18, 0x71, 0xdd1a64493a3fefea, 0x70bd28, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4404c881}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m36.960530629s ago: executing program 2 (id=582): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x0, 0x7fffffff, 0x1, 0x3, 0x5]}, &(0x7f0000000000)=0x54) 1m30.663491123s ago: executing program 2 (id=603): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 1m15.61642591s ago: executing program 35 (id=603): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 6.263453726s ago: executing program 8 (id=1010): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 4.250978515s ago: executing program 3 (id=1018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f9ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.173594285s ago: executing program 8 (id=1019): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000a40)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) mkdirat$cgroup(r4, &(0x7f0000000440)='syz0\x00', 0x1ff) write$cgroup_devices(r2, &(0x7f0000000000)={'b', ' *:* ', 'm\x00'}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.132800231s ago: executing program 7 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.975339351s ago: executing program 5 (id=1022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 3.94112382s ago: executing program 7 (id=1023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.621966109s ago: executing program 3 (id=1026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000000)="76389e147583ddd0569ba56a88a855055aa57dd856862078721e80f350", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) 3.591155263s ago: executing program 8 (id=1027): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x72}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 3.536227775s ago: executing program 7 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x4) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) 3.490362313s ago: executing program 5 (id=1029): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.31909995s ago: executing program 8 (id=1030): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000000000000000000000000000180100007e38000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000540), 0x200000, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.16816034s ago: executing program 6 (id=1031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.922013378s ago: executing program 5 (id=1033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f459400a6309580684010a486dd", 0x0, 0x8241, 0x0, 0xb9, 0x0, &(0x7f00000008c0)="389ceff69d08b0af1cc71b0c62d50660bbaf31a7f8cd6a6f911b625359c7689a3372a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebecf3330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9b4831e900c07255a5f1e3c3a9c6dd22ce97f1f857cfe8b68a2370b79ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531", 0x0}, 0x50) 2.877595111s ago: executing program 3 (id=1034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000702000000feffff7a0af0ff1800000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100f51f00000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16d875fe369258673b5df11cc2afb53611cc320000bc0b80e80eae8f5e64becef4db2ce77c55dbaca340e4a01e2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151f07bd4e97d62ecc645e143a60f1c6edc76609077909826151e2b42bf0ed0c7e8b0db51662de6d87c493db845b10e9468bda6f82881eb8c9cfa72bba6708eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf101000080496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b4207e6078625cb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6d2676bef8310f7032775cfd75652f87b039d543000000000000000008ce31344b554aca78a00000000000000e63a0dba7f6b25e8d5e40a3a571a5dfde3b4dca2d38a9c0ea7b5bcd49f977c609915c7601080d10b96af1eb55922b2ad13a0eeefae505f4535cd9dc69fbab92150c7e74e5c5b051ddf6399b0d00eee5c3afee38cdc55b8d3fbbe210bdec686a23503f4a5f5734a9e204dbc327ec8f9851d273fa07369c419942509198605ff2781f4d2d4685d762d4764f7ff762e09116946137b7ab812a2d408b57206093eea233054c6aa08bffc8a076d476bc28fc21d521b778de9e583b596d7102d0a7bea32f51aba25da0f72b895ec90882f56730236b30e656a1ab2fcb80df49afa05d8c9d5bdc3c1feed5c593a5d8482"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f459400a6309580684010a486dd", 0x0, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.876056112s ago: executing program 8 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@nodiscard}, {}]}, 0x2, 0xb967, &(0x7f0000000840)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPK0X/F1/44W8Cx2frH1eK/g3P3/K9wPHD9I8rRf/Lt/zkX4Hjh+sfV4r+d71xx2OB40foH1eK/g9v+OW0wPEj9Y8rRf+aJ38e+u80P6Z/XCn6n/XAvRcEjn9c/7hS9P/W2rtPDBw/avv9a3bWQxzXUvTve/bEZwPH26z/uFL0n/XK/NDfD9uuf1wp+l/UN+/HgeMd+seVov+trx79lcDxo/WPK0X/p58564rA8Tn6x5Wi/3vXL1wYOH6M/nGl6N+55rTmwPG5+seVon/vugXvDxyfp39cKfrPfeFLfw0cP1b/uFL0X/X81f8JHO/UP64U/f+05drrA8eP0z+uFP33fmPV6sDx+frHlaL/ORuubw8cP17/uFL0v+PJb58fOH6C/nGl6P/qAzfsETjepX9cKfoftvb7oT9s/UT940rR/7rXNtwQOH6S/nGl6D/nrcfuCRz/hP5xpei/z8vPPB44frL+caXo/8Tfn94UOL5A/7hS9P/RI2snBo5/Uv+4UvQ/+3d/GO73hLwdp+gfV4r+Rzy6rjNw/FT940rRf9PfHro4cPw0/eNK0X/mv/e6LXC8W/+4UvR/c/M+VwWOf0r/uFL0v23jni8Ejn9a/7hS9F/24gfWBY4v1D+uFP0n37/74YHjp+sfV4r+Tz24x96B42foH1eK/l98asKKwPEz9Y8rRf/5T0xcEDh+lv4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3AnfpXPB//MyYGUYIqaRo7JRdWVJZspYWW4gs2WUL2QstsrSQlKXFTlIpVMhSkSKyplIppUVJklSW+b/GzD00vjPP9Px7Gs33/X695j7bNcfv/D7nd+7jvu5zDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD0aLO1N1pjMBgx4dJhT7v9lH3WvWfpU1c/64RFrnnFTscMe3D8tavNNOHmMWMnMXjizlYbd9vw8ZuMOPGis4aPuzD8qfc78+jRw2YbDJsrj+rgrf6HYc8+dGb8nY4ZDAbDjh7/Z6LR476sevfdt/8P91Vts9XXWXvc5I3/M7HbDBNunnD9xPMjxv9ZZevBYJUtB5N9fkx7G95750PTegz/DTZbfZ31Juk/mND5ie6Tru9Wkz7PL7llt1Wmabh/k81WX3v9ca0nt47P2XS1s8Y+8bo+4tTBYMRpg8GI0weDEWdM6x78e6y+xvJrjHvNH7o8vvphQ28I0uv7sPk32nzmwWAwcvz3iRFnDn0vAP67rL7G8q8J63/U0O1p/a9692zzWP/w32+91ddYfvCU9/njrz1s6P/v4/q/Z4YNjpt2IwYAAAD+VY/fd+kVE/b1DR8M5htMsr/3CRN+LjDsgqtuummaDfSZ4Wn7yUaE35n4LzOu80znjRkM9thkWg+FaWDYtB4A05T+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276V9sMvv/Zx86Xf34jV89YdOFV5xr04sm/fvjrpvpPz7qaSZ8Tna62P8/2GXY+Jbjmu8yGAzesPqGGy82GAwu2nSuFRcYTLxtpXG3rTLnDBMOELDYE18Xnswdj3nq6cwT7+OCJ+5/vbGnzTBskkE8xevXvOygnTd7+GWTni46+ccx8fgSF6235ixDn2UZPslGk3uuDt3/0GOZtPOEsS82buxL77v7Xkvvc+BBS+6y+7Y77bDTDnssv9wKKy634rIrrbTC0jvustsOy4z/Opk5Gz8rC07NnI2adM7uW/2pczbpY5vcnI2Z0pxN+KTvPcdtesnQnI34F+dswSnP2ZhdhsY6ZuRgmyemZtyDWGjk4IBxF5ad8SmvLXOP2/aVcw4fDI598oGOOzfjxOfgsMN2+Tcct2TC6fwTTheIxy25eHLHLRkMHbdk6IAJK48/2ffyoe0m/Zz1hKun+rgl+6/x6AKDp30u6//E/+r7/9N6rTRs4kQNHTRkwjbjez15nImhaVvtKceZWDEdS+bf6WnjHTN84vM6jXfC5+KGTTL/U/pc3GCnHQ9ZeELUFcf/rcf/11Hya8f6T3yd3HoeM8nplF47Znjy7JPX7nDDvJO+drxu8kP8p3UxNEczTrLR5F47Dtj2ml2e+to0mdeO9XeZ8EHjJ187xv1nFxx67Rg39kVGDo4dd2G5cRcWHTk4d9yF5Z+4MHpw1bgLS223527bD3vi+9XTngeLDfunX3gMz9u1J3neTsXxcVa9bjBY9dr0uCY/nVl63o6awnjz57kHU/w895Xbzn/hYDCYdcLjWnlo7P8babwjpjzecPyJwZSOPzE47ab9zvg3j3fiOnviuTbhZXqxyfydf1pnsz9tnR0+w1NWxtS+r9k+bD/+/NwT7+30HW68fmiORk5yv//T9+ihx5L6D73ne6phhw2GTWluJvc+7J/mZrYpz83Uvn9ZbMIbjNFTmJslHjx08aG5GfUvzs2ik5mbp74ffqpRg8Hof56bEYO1xr2jmTA3i0zN3Mzy73nezBy2H39+4YlX3bHWISsNzU2Yi/j9f+j+F/kX52bYNhOfNws9cdsCwwejRg0O2HbfffdedvzXoYvLjf865TW40NTM5Uz/nrmcZ8KrzvCnT87Eq3Y9e+zy/9s1uNC/OpdjBsOH/p97l0kXy7+Pn/9007+b/t3076Z/N/276d9N/2KT2f8/ZujngkcNO3OjCT+MGXn1w3PsO63HO41N1/v/J/T9p/3/+87x8NXDBxNvm+L+2fHbPCP3z644/uTgZYe2m3T/4ISrp3r/7EPHXLv54D+zf/Z/ZWitTsXPDb3+d9O/m/7d9O+mfzf9u/2r/Vf9PxoH04b1303/bvp307+b/t3076Z/scns/19m6PcAbt7n0TMn7Agduc/Gqzwyrcc7jU3X+/8n9P2n/f+PrLLxPsMHE2+b4v7/8dt07P9f5a6Tjhg8g/f/D61V+//5H+jfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/sUms/9/taHfAxi5x4ILDv0+wK33HznDtB7vNDa97v/37//38vrfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30LzZh//9gkn/28E2eF1HY///fbTL9N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+b9Y/aum/qf5RS//N9I9a+m+uf9TS/y36Ry39t9A/aum/pf5RS/+36h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/+36R+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfR/u/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfS/+opf879I9a+u+tf9TSfx/9o5b+++oftfR/p/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rp/y79o5b+79Y/aul/qP5RS//D9I9a+h+uf9TS/z36Ry3936t/1NL/ffpHLf3fr3/U0v8I/aOW/h/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/h/UP2rp/yH9o5b+H9Y/aun/Ef2jlv7HlvUfNZXbtfQ/rqz/1Grp/1H9o5b+x+sftfT/mP5RS/8T9I9a+n9c/6il/yf0j1r6n6h/1NL/JP2jlv4n6x+19D9F/6il/yf1j1r6f0r/qKX/p/WPWvp/Rv+opf+p+kct/U/TP2rpf7r+UUv/M/SPWvqfqX/U0v8s/aOW/mfrH7X0P0f/qKX/ufpHLf0/q3/U0v88/aOW/p/TP2rpf77+UUv/z+sftfT/gv5RS/8v6h+19L9A/6il/5f0j1r6f1n/qKX/hfpHLf0v0j9q6X+x/lFL/6/oH7X0/6r+UUv/r+kftfS/RP+opf+l+kct/S/TP2rp/3X9o5b+l+sftfS/Qv+opf+V+kct/a/SP2rp/w39o5b+39Q/aun/Lf2jlv5X6x+19L9G/6il/7f1j1r6X6t/1NL/O/pHLf2/q3/U0v86/aOW/tfrH7X0/57+UUv/G/SPWvrfqH/U0v/7+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0/4H+UUv/O/SPWvr/UP+opf+P9I9a+v9Y/6il/536Ry39f6J/1NL/p/pHLf1/pn/U0v8u/aOW/j/XP2rp/wv9o5b+d+sftfT/pf5RS/9f6R+19L9H/6il/6/1j1r6/0b/qKX/b/WPWvr/Tv+opf+9+kct/X+vf9TS/w/6Ry3979M/aun/R/2jlv736x+19P+T/lFL/wd6+884pRtb+v+5t/8UtfR/UP+opf9f9I9a+j+kf9TS/6/6Ry39H9Y/aun/N/2jlv5/1z9q6f8P/aOS/qMH+kcl/QeP6h+19H9M/6il/+P6Ry39x+oflfQfNtA/auk/TP+opf9w/aOW/jPoH7X0H6F/1NJ/pP5RS/9R+kct/WfUP2rpP5P+UUv/0fpHLf1n1j9q6f8s/aOW/rPoH7X0n1X/qKX/bPpHLf2frX/U0n92/aOW/nPoH7X0n1P/qKX/c/SPWvrPpX/U0v+5+kct/Z+nf9TS//n6Ry3959Y/aun/Av2jlv7z6B+19H+h/lFL/xcV9z98Cre19J+3uP+UtPSfT/+opf+L9Y9a+o/RP2rpP7/+UUv/BfSPWvovqH/U0n8h/aOW/gvrH7X0X0T/qKX/ovpHLf0X0z9q6b+4/lFL/5foH7X0f6n+UUv/JfSPWvovqX/U0n+p9v6PjB1vkqtb+i/d3n8yWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/y/SPWvq/XP+opf8K+kct/VfUP2rpv5L+UUv/lfWPWvq/Qv+opf8q+kct/V+pf9TS/1X6Ry39X536j/gPjusZqqX/qtZ/1NJ/Nf2jlv6r6x+19F9D/6il/2v0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aun/Wv2jlv6v0z9q6b++/lFL/9frH7X0f4P+UUv/N+oftfR/k/5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+b9Y9a+m+qf9TSfzP9o5b+m+sftfR/i/5RS/8t9I9a+m+pf9TS/636Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/236Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfTfRf+opf+u+kct/d+uf9TSfzf9o5b+u+sftfTfQ/+opf+e+kct/feafP/R/5FxPUO19H+H9R+19N9b/6il/z76Ry3999U/aun/Tv2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/136Ry39361/1NL/UP2jlv6HtfWfyt9qaOl/eFv/qdTS/z36Ry3936t/1NL/ffpHLf3fr3/U0v8I/aOW/h/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/h/UP2rp/yH9o5b+H9Y/aun/Ef2jlv7H6h+19D9O/6il/0f1j1r6H69/1NL/Y/pHLf1P0D9q6f9x/aOW/p/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/p/UP2rp/yn9o5b+n9Y/aun/Gf2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfT/rP5RS//z9I9a+n9O/6il//n6Ry39P69/1NL/C/pHLf2/qH/U0v8C/aOW/l/SP2rp/2X9o5b+F+oftfS/SP+opf/F+kct/b+if9TS/6v6Ry39v6Z/1NL/Ev2jlv6X6h+19L9M/6il/9f1j1r6X65/1NL/Cv2jlv5X6h+19L9K/6il/zf0j1r6f1P/qKX/t/SPWvpfrX/U0v8a/aOW/t/WP2rpf63+UUv/7+gftfT/rv5RS//r9I9a+l+vf9TS/3v6Ry39b9A/aul/o/5RS//v6x+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+t+uf9TS/wf6Ry3979A/aun/w8FgMGpajekZrKX/j6z/qKX/j/WPWvrfqX/U0v8n+kct/X+qf9TS/2f6Ry3979I/aun/c/2jlv6/0D9q6X+3/lFL/1/qH7X0/5X+UUv/e/SPWvr/Wv+opf9v9I9a+v9W/6il/+/0j1r636v/k2Z/8mxL/9/rH7X0/4P+UUv/+/SPWvr/Uf+opf/9+kct/f+kf9TS/wH9o5b+f9Y/aun/oP5RS/+/6B+19H9I/6il/1/1j1r6P6x/1NL/b/pHLf3/rn/U0v8f+kct/R/RP2rp/6j+UUv/x/SPWvo/rn/U0n+s/lFJ/yfO6v90Lf2H6R+19B+uf9TSfwb9o5b+I/SPWvqP1D9q6T9K/6il/4z6Ry39Z9I/auk/Wv+opf/M+kct/Z+lf9TSfxb9o5b+s+oftfSfTf+opf+z9Y9a+s+uf9TSfw79o5b+c+oftfR/jv5RS/+59I9a+j9X/6il//P0j1r6P1//qKX/3PpHLf1foH/U0n8e/aOW/i/UP2rp/yL9o5b+8+oftfSfT/+opf+L9Y9a+o/RP2rpP7/+UUv/BfSPWvovqH/U0n8h/aOW/gvrH7X0X0T/qKX/ovpHLf0X0z9q6b+4/lFL/5foH7X0f6n+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/5fpH7X0f7n+UUv/FfSPWvqvqH/U0n8l/aOW/ivrH7X0f4X+UUv/VfSPWvq/Uv+opf+r9I9a+r9a/6il/6r6Ry39V5tM/zmX/k8N7Jmppf/q1n/U0n8N/aOW/q/RP2rpv6b+UUv/tfSPWvqvrX/U0n8d/aOW/uvqH7X0X0//qKX/a/WPWvq/Tv+opf/6+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv5v1j9q6b+p/lFL/830j1r6b65/1NL/LfpHLf230D9q6b+l/lFL/7fqH7X030r/qKX/1vpHLf230T9q6b+t/lFL/7fpH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/1NJ/F/2jlv676h+19H+7/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/zv0j1r6761/1NJ/H/2jlv776h+19H+n/lFL//30j1r6769/1NL/AP2jlv4H6h+19D9I/6il/8H6Ry39D9E/aun/Lv2jlv7v1j9q6X+o/lFL/8P0j1r6H65/1NL/PfpHLf3fq3/U0v99+kct/d+vf9TS/wj9o5b+H9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+H9Q/aun/If2jlv4f1j9q6f8R/aOW/sfqH7X0P07/qKX/R/WPWvofr3/U0v9j+kct/U/QP2rp/3H9o5b+nyjrf9hUbtfS/8Sy/lOrpf9J+kct/U/WP2rpf4r+UUv/T+oftfT/lP5RS/9P6x+19P+M/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39z9Y/aul/jv5RS/9z9Y9a+n9W/6il/3n6Ry39P6d/1NL/fP2jlv6f1z9q6f8F/aOW/l/UP2rpf4H+UUv/L+kftfT/sv5RS/8L9Y9a+l+kf9TS/2L9o5b+X9E/aun/Vf2jlv5f0z9q6X+J/lFL/0v1j1r6X6Z/1NL/6/pHLf0v1z9q6X+F/lFL/yv1j1r6X6X/P5lvwmlL/2/oH7X0/6b+UUv/b+kftfS/Wv+opf81+kct/b+tf9TS/1r9o5b+39E/aun/Xf2jlv7X6R+19L9e/6il//f0j1r636B/1NL/Rv2jlv7f1z9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/w/0j1r63zHUf6ZpNK5nqJb+P7T+o5b+P9I/aun/Y/2jlv536h+19P+J/lFL/5/qH7X0/5n+UUv/u/SPWvr/XP+opf8v9I9a+t+tf9TS/5f6Ry39f6V/1NL/Hv2jlv6/1j9q6f8b/aOW/r/VP2rp/zv9o5b+9+oftfT/vf5RS/8/6B+19L9P/6il/x/1j1r6369/1NL/T/pHLf0f0D9q6f9n/aOW/g/qH7X0/4v+UUv/h/SPWvr/Vf+opf/D+kct/f+mf9TS/+/6Ry39/6F/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39x+oflfSfYaB/1NJ/mP5RS//h+kct/WfQP2rpP0L/qKX/SP2jlv6j9I9a+s+of9TSfyb9o5b+o/WPWvrPrH/U0v9Z+kct/WfRP2rpP6v+UUv/2fSPWvo/W/+opf/s+kct/efQP2rpP6f+UUv/5+gftfSfS/+opf9z9Y9a+j9P/6il//P1j1r6z61/1NL/BfpHLf3n0T9q6f9C/aOW/i/SP2rpP6/+UUv/+fSPWvq/WP+opf8Y/aOW/vPrH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19H+J/lFL/5fqH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19H+Z/lFL/5frH7X0X0H/qKX/ivpHLf1X6u0/45RubOm/cm//KWrp/wr9o5b+q+gftfR/pf5RS/9X6R+19H+1/lFL/1X1j1r6r6Z/1NJ/df2jlv5r6B+19H+N/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry39X6t/1NL/dfpHLf3X1z9q6f96/aOW/m/QP2rp/0b9o5b+b9I/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfR/s/5RS/9N9Y9a+m+mfzS+/0yD6b3/5vpHLev/LfpHLf230D9q6b+l/lFL/7fqH7X030r/qKX/1vpHLf230T9q6b+t/lFL/7fpH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/1NJ/F/2jlv676h+19H+7/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/zv0j1r6761/1NJ/H/2jlv776h+19H+n/lFL//30j1r6769/1NL/AP2jlv4H6h+19D9I/6il/8H6Ry39D9E/aun/Lv2jlv7v1j9q6X+o/lFL/8P0j1r6H65/1NL/PfpHLf3fq3/U0v99+kct/d+vf9TS/wj9h4wd+5QLLf0/oH/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf0/qH/U0v9D+kct/T+sf9TS/yP6Ry39j9U/aul/nP5RS/+P6h+19D9e/6il/8f0j1r6n6B/1NL/4/pHLf0/oX/U0v9E/aOW/ifpH7X0P1n/qKX/KfpHLf0/qX/U0v9T+kct/T+tf9TS/zP6Ry39T9U/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf85+kct/c/VP2rp/1n9o5b+5+kftfT/nP5RS//z9Y9a+n9e/6il/xf0j1r6f1H/qKX/BfpHLf2/pH/U0v/L+kct/S/UP2rpf5H+UUv/i/WPWvp/Rf+opf9X9Y9a+n9N/6il/yX6Ry39L9U/aul/mf7R9Nx/tSevneHr+kfTc/+nrv/L9Y9a+l+hf9TS/0r9o5b+V+kftfT/hv5RS/9v6h+19P+W/lFL/6v1j1r6X6N/1NL/2/pHLf2v1T9q6f8d/aOW/t/VP2rpf53+UUv/6/WPWvp/T/+opf8N+kct/W/UP2rp/339o5b+N+kftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvr/QP+opf8d+kct/X+of9TS/0f6R0P9R024PL32/7H+Ucv6v1P/qKX/T/SPWvr/VP+opf/P9I9a+t+lf9TS/+f6Ry39f6F/1NL/bv2jlv6/1D9q6f8r/aOW/vfoH7X0/7X+UUv/3+gftfT/rf5RS//f6R+19L9X/6il/+/1j1r6/0H/qKX/ffpHLf3/qH/U0v9+/aOW/n/SP2rp/4D+UUv/P+sftfR/UP+opf9f9I9a+j+kf9TS/6/6Ry39H9Y/aun/N/2jlv5/1z9q6f8P/aOW/o/oH7X0f1T/qKX/Y/pHLf0f1z9q6T9W/6ik/4iB/lFL/2H6Ry39h/+P/Wf4vx3XM1RL/xms/6il/wj9o5b+I/WPWvqP0j9q6T+j/lFB/4nZ9X+6gv7jjBitf9TSf2b9o5b+z9I/auk/i/5RS/9Z9Y9a+s+mf9TS/9n6Ry39Z9c/auk/h/5RS/859Y9a+j9H/6il/1z6Ry39n6t/1NL/efpHLf2fr3/U0n9u/aOW/i/QP2rpP4/+UUv/F+oftfR/kf5RS/959Y9a+s+nf9TS/8X6Ry39x+gftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/S/SPWvq/VP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/aDruP/op1454mf7RdNz/n9b/y/WPxvffb8Kl6bf/CvpHLet/Rf2jlv4r6R+19F9Z/6il/ytq+s/0L23d0n+Vmv7/mpb+r9Q/aun/Kv2jlv6v1j9q6b+q/lFL/9X0j1r6r65/1NJ/Df2jlv6v0T9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il/2v1j1r6v07/qKX/+vpHLf1fr3/U0v8N+kct/d+of9TS/036Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+b9Y/aum/qf5RS//N9I9a+m+uf9TS/y36Ry39t9A/aum/pf5RS/+36h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/+36R+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfR/u/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfS/+opf879I9a+u+tf9TSfx/9o5b+++oftfR/p/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rp/y79o5b+79Y/aul/qP5RS//D9I9a+h+uf9TS/z36Ry3936t/1NL/ffpHLf3fr3/U0v8I/aOW/h/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/h/UP2rp/yH9o5b+H9Y/aun/Ef2jlv7H6h+19D9O/6il/0f1j1r6H69/1NL/Y/pHLf1P0D9q6f9x/aOW/p/QP2rpf6L+UUv/k/SPWvqfrH/0RP9ZB4PBdN7/FP2jlvX/Sf2jlv6f0j9q6f9p/aOW/p/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL/8/qH03P/Wd68toR5+kfTc/9n7r+P6d/1NL/fP2jlv6f1z9q6f8F/aOW/l/UP2rpf4H+UUv/L+kftfT/sv5RS/8L9Y9a+l+kf9TS/2L9o5b+X9E/aun/Vf2jlv5f0z9q6X+J/lFL/0v1j1r6X6Z/1NL/6/pHLf0v1z9q6X+F/lFL/yv1j1r6X6V/1NL/G/pHLf2/qX/U0v9b+kct/a/WP2rpf43+UUv/b+sftfS/Vv+opf939I9a+n9X/6il/3X6Ry39r9c/aun/Pf2jlv436B+19L9R/6il//f1j1r636R/1NL/Zv2jlv636B+19L+1rv/tY6dmq5b+t9X1nzot/W/XP2rp/wP9o5b+d+gftfT/of5RS/8f6R+19P+x/lFL/zv1j1r6/0T/qKX/T/WPWvr/TP+opf9d+kct/X+uf9TS/xf6Ry3979Y/aun/S/2jlv6/0j9q6X+P/lFL/1/rH7X0/43+UUv/3+oftfT/nf5RS/979Y9a+v9e/6il/x/0j1r636d/1NL/j/pHLf3v1z9q6f8n/aOW/g/oH7X0/7P+UUv/B/WPWvr/Rf+opf9D+kct/f+qf9TS/2H9o5b+f9M/aun/d/2jlv7/0D9q6f+I/lFL/0f1j1r6P6Z/1NL/cf2jlv5j9Y9K+o8c6B+19B+mf9TSf7j+UUv/GfSPWvqP0D9q6T9S/6il/yj9o5b+M+oftfSfSf+opf9o/aOW/jPrH7X0f5b+UUv/WfSPJvbfYthgMB33n1X/qGX9z6Z/1NL/2fpHLf1n1z9q6T+H/lFL/zn1j1r6P0f/qKX/XPpHLf2fq3/U0v95+kct/Z+vf9TSf279o5b+L9A/auk/j/5RS/8X6h+19H+R/lFL/3n1j1r6z6d/1NL/xfpHLf3H6B+19J9f/2g677/y0uPPjlxA/2g67z9k5IL6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfR/if5RS/+X6h+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rf9TSfzn9o5b+y+sftfR/mf5RS/+X6x+19F9B/6il/4r6Ry39V9I/aum/sv5RS/9X6B+19F9F/6il/yv1j1r6v0r/qKX/q/WPWvqvqn/U0n81/aOW/qvrH7X0X0P/qKX/a/SPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6f9a/aOW/q/TP2rpv77+UUv/1+sftfR/g/5RS/836h+19H+T/lFL/w30j8b1v20wGEzv/TfUP2pZ/xvpH7X031j/qKX/JvpHLf3frH/U0n9T/aOW/pvpH7X031z/qKX/W/SPWvpvoX/U0n9L/aOW/m/VP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/m/TP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf131T9q6f92/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/3foH7X031v/qKX/PvpHLf331T9q6f9O/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/XfpHLf3frX/U0v9Q/aOW/ofpH7X0P1z/qKX/e/SPWvq/V/+opf/79I9a+r9f/6il/xH6Ry39P6B/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39P6h/1NL/Q/pHLf0/rH/U0v8j+kct/Y/VP2rpf5z+UUv/j+oftfQ/Xv+opf/H9I9a+p+gf9TS/+P6Ry39P6F/1NL/RP2jlv4n6R+19D9Z/6il/yn6Ry39P6l/1NL/U/pHLf0/rX/U0v8z+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0P1v/qKX/OfpHLf3P1T9q6f9Z/aOW/ufpH7X0/1xV/3WPmtotW/qfX9V/6rX0/7z+UUv/L+gftfT/ov5RS/8L9I9a+n9J/6il/5f1j1r6X6h/1NL/Iv2jlv4X6x+19P+K/lFL/6/qH7X0/5r+UUv/S/SPWvpfqn/U0v8y/aOW/l/XP2rpf7n+UUv/K/SPWvpfqX/U0v8q/aOW/t/QP2rp/039o5b+39I/aul/tf5RS/9r9I9a+n9b/6il/7X6Ry39v6N/1NL/u/pHLf2v0z9q6X+9/lFL/+/pH7X0v0H/qKX/jfpHLf2/r3/U0v8m/aOW/jfrH7X0v0X/qKX/rfpHLf1v0z9q6X+7/lFL/x/oH7X0v0P/qKX/D/WPWvr/SP+opf+P9Y9a+t+pf9TS/yf6Ry39f6p/1NL/Z/pHLf3v0j9q6f9z/aOW/r/QP2rpf7f+UUv/X+oftfT/lf5RS/979I9a+v9a/6il/2/0j1r6/1b/qKX/7/SPWvrfq3/U0v/3+kct/f+gf9TS/z79o5b+f9Q/aul/v/5RS/8/6R+19H9A/6il/5/1j1r6P6h/1NL/L/pHLf0f0j9q6f9X/aOW/g/rH7X0/5v+UUv/v+sftfT/h/5RS/9H9I9a+j+qf9TS/zH9o5b+j+sftfQfq39U0n/UQP+opf8w/aOW/sP1j1r6z6B/1NJ/hP5RS/+R+kct/UfpH7X0n1H/qKX/TPpHLf1H6x+19J9Z/6il/7P0j1r6z6J/1NJ/Vv2jlv6z6R+19H+2/lFL/9n1j1r6z6F/1NJ/Tv2jlv7P0T9q6T+X/lFL/+fqH7X0f57+UUv/5+sftfSfW/+opf8L6vofNlVbtfSfp67/1Gnp/0L9o5b+L9I/auk/r/5RS//59I9a+r9Y/6il/xj9o5b+8+sftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0f4n+UUv/l+oftfRfQv+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq380sf/503f/5fSPWtb/8vpHLf1fpn/U0v/l+kct/VfQP2rpv6L+UUv/lfSPWvqvrH/U0v8V+kct/VfRP2rp/0r9o5b+r9I/aun/av2jlv6r6h+19F9N/6il/+r6Ry3919A/aun/Gv2jlv5r6h+19F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+r9W/6il/+v0j1r6r69/1NL/9fpHLf3foH/U0v+N+kct/d+kf9TSfwP9o5b+G+oftfTfSP+opf/G+kct/TfRP2rp/2b9o5b+m+oftfTfTP+opf/m+kct/d+if9TSfwv9o5b+W+oftfR/q/5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfR/m/5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfTfSf+opf/O+kdP9h87dlqP5d9iMv130T9qWf+76h+19H+7/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/zv0j1r6761/1NJ/H/2jlv776h+19H+n/lFL//30j1r6769/1NL/AP2jlv4H6h+19D9I/6il/8H6Ry39D9E/aun/Lv2jlv7v1j9q6X+o/lFL/8P0j1r6H65/1NL/PfpHLf3fq3/U0v99+kct/d+vf9TS/wj9o5b+H9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+H9Q/aun/If2jlv4f1j9q6f8R/aOW/sfqH7X0P07/qKX/R/WPWvofr3/U0v9j+kct/U/QP2rp/3H9o5b+n9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+n9Q/aun/Kf2jlv6f1j9q6f8Z/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/HP2jlv7n6h+19P+s/lFL//P0j1r6f07/qKX/+fpHLf0/r3/U0v8L+kct/b+of9TS/wL9o5b+X9I/aun/Zf2jlv4X6h+19L9I/6il/8X6Ry39v6J/1NL/q/pHLf2/pn/U0v8S/aOW/pfqH7X0v0z/qKX/1/WPWvpfrn/U0v8K/aOW/lfqH7X0v0r/qKX/N/SPWvp/U/+opf+39I9a+l+tf9TS/xr9o5b+39Y/aul/rf5RS//v6B+19P+u/lFL/+v0j1r6X69/1NL/e/pHLf1v0D9q6X+j/lFL/+/rH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/B/pHLf3v0D9q6f/DSfsv8R8e1zNUS/8fWf9RS/8f6x+19L9T/6il/0/0j1r6/1T/qKX/z/SPWvrfpX/U0v/n+kct/X+hf9TS/279o5b+v9Q/aun/K/2jlv736B+19P+1/lFL/9/oH7X0/63+UUv/343v7ykwiZb+91r/UUv/3+sftfT/g/5RS//79I9a+v9R/6il//36Ry39/6R/1NL/Af2jlv5/1j9q6f+g/lFL/7/oH7X0f0j/qKX/X/WPWvo/rH/U0v9v+kct/f+uf9TS/x/6Ry39H9E/aun/qP5RS//H9I9a+j+uf9TSf6z+UUn/GQf6Ry39h+kftfQfrn/U0n8G/aOW/iP0j1r6j9Q/auk/Sv+opf+M+kct/WfSP2rpP1r/qKX/zPpHLf2fpX/U0n8W/aOW/rPqH7X0n03/qKX/s/WPWvrPrn/U0n8O/aOW/nPqH7X0f47+UUv/ufSPWvo/V/+opf/z9I9a+j9f/6il/9z6Ry39X6B/1NJ/Hv2jlv4v1D9q6f8i/aOW/vPqH7X0n0//qKX/i/WPWvqP0T9q6T+//lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/+X6B+19H+p/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/7L6Ry39l9M/aum/vP5RS/+X6R+19H+5/lFL/xX0j1r6rzgV/R+Y7f9yYM9MLf1Xsv6jlv4r6x+19H+F/lFL/1X0j1r6v1L/qKX/q/SPWvq/Wv+opf+q+kct/VfTP2rpv7r+UUv/NfSPWvq/Rv+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/q/VP2rp/zr9o5b+6+sftfR/vf5RS/836B+19H+j/lFL/zfpH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6v1n/qKX/pvpHLf030z9q6b+5/lFL/7foH7X030L/qKX/lvpHLf3fqn/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf3fpn/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/130j1r676p/1NL/7fpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv7v0D9q6b+3/lFL/330j1r676t/1NL/nfpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv4H6x+19D9E/6il/7v0j1r6v1v/qKX/ofpHLf0P0z9q6X+4/lFL//foH7X0f6/+UUv/9+kftfR/v/5RS/8j9I9a+n9A/6il/5H6Ry39j9I/aul/tP5RS/9j9I9a+n9Q/6il/4f0j1r6f1j/qKX/R/SPWvofG/s/Nna8/9zwnmla+h9n/Uct/T+qf9TS/3j9o5b+H9M/aul/gv5RS/+P6x+19P+E/lFL/xP1j1r6n6R/1NL/ZP2jlv6n6B+19P+k/lFL/0/pH7X0/7T+UUv/z+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/Z/WPWvqfp3/U0v9z+kct/c/XP2rp/3n9o5b+X9A/aun/Rf2jlv4X6B+19P+S/lFL/y/rH7X0v1D/qKX/RfpHLf0v1j9q6f8V/aOW/l/VP2rp/zX9o5b+l+gftfS/VP+opf9l+kct/b+uf9TS/3L9o5b+V+gftfS/Uv+opf9V+kct/b+hf9TS/5v6Ry39v6V/1NL/av2jlv7X6B+19P+2/lFL/2v1j1r6f0f/qKX/d/WPWvpfp3/U0v96/aOW/t/TP2rpf4P+UUv/G/WPWvp/X/+opf9N+kct/W/WP2rpf4v+E830lPMt/W/VP2rpf5v+UUv/2/WPWvr/QP+opf8d+kct/X+of9TS/0f6Ry39f6x/1NL/Tv2jlv4/0T9q6f9T/aOW/j/TP2rpf5f+UUv/n+sftfT/hf5RS/+79Y9a+v9S/6il/6/0j1r636N/1NL/1/pHLf1/o3/U0v+3+kct/X+nf9TS/179o5b+v9c/aun/B/2jlv736R+19P+j/lFL//v1j1r6/0n/qKX/A/pHLf3/rH/U0v9B/aOW/n/RP2rp/5D+UUv/v+oftfR/WP+opf/f9I9a+v9d/6il/z/0j1r6P6J/1NL/Uf2jlv6P6R+19H9c/6il/1j9o5L+TxzyWv+na+k/TP+opf9w/aOW/jPoH7X0H6F/1NJ/pP5RS/9R+kct/WfUP2rpP5P+UUv/0fpHLf1n1j9q6f8s/aOW/rPoH7X0n1X/qKX/bPpHLf2frX/U0n92/aOW/nPoH7X0n1P/qKX/c/SPWvrPpX/U0v+5+kct/Z+nf9TS//n6Ry3959Y/aun/Av2jlv7z6B+19H+h/lFL/xfpH7X0n1f/qKX/fPpHLf1frH/U0n+M/lFL//n1j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+r9E/6il/0v1j1r6L6F/1NJ/Sf2jlv5L6R+19F9a/6il/zL6Ry39l9U/aum/nP5RS//l9Y9a+r8s9v+vf7T/31r6v9z6j1r6r6B/1NJ/Rf2jlv4r6R+19F9Z/6il/yv0j1r6r6J/1NL/lfpHLf1fpX/U0v/V+kct/VfVP2rpv5r+UUv/1fWPWvqvoX/U0v81+kct/dfUP2rpv5b+UUv/tfWPWvqvo3/U0n9d/aOW/uvpH7X0f63+UUv/1+kftfRfX/+opf/r9Y9a+r9B/6il/xv1j1r6v0n/qKX/BvpHLf031D9q6b+R/lFL/431j1r6b6J/1NL/zfpHLf031T9q6b+Z/lFL/831j1r6v0X/qKX/FvpHLf231D9q6f9W/aOW/lvpH7X031r/qKX/NvpHLf231T9q6f82/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv5v1z9q6b+b/lFL/931j1r676F/1NJ/T/2jlv576R+19H+H/lFL/731j1r676N/1NJ/X/2jlv7v1D9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H9fbfe8TJk3/kLf0P7u0/RS39D9E/aun/Lv2jlv7v1j9q6X+o/lFL/8P0j1r6H65/1NL/PfpHLf3fq3/U0v99+kct/d+vf9TS/wj9o5b+H9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+H9Q/aun/If2jlv4f1j9q6f8R/aOW/sfqH7X0P07/qKX/R/WPWvofr3/U0v9j+kct/U/QP2rp/3H9o5b+n9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+n9Q/aun/Kf2jlv6f1j9q6f8Z/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/HP2jlv7n6h+19P+s/lFL//P0j1r6f07/qKX/+fpHLf0/r3/U0v8L+kct/b+of9TS/wL9o5b+X9I/aun/Zf2jlv4X6h+19L9I/6il/8X6Ry39v6J/1NL/q/pHLf2/pn/U0v8S/aOW/pfqH7X0v0z/qKX/1/WPWvpfrn/U0v8K/aOW/lfqH7X0v0r/qKX/N/SPWvp/U/+opf+39I9a+l+tf9TS/xr9o5b+39Y/aul/rf5RS//v6B+19P+u/lFL/+v0j1r6X69/1NL/e/pHLf1v0D9q6X+j/lFL/+/rH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/B/pHLf3v0D9q6f9D/aOW/j/SP2rp/2P9o5b+d+oftfT/if5RS/+f6h+19P+Z/lFL/7v0j1r6/1z/qKX/L/SPWvrfrX/U0v+X+kct/X+lf9TS/x79o5b+v9Y/aun/G/2jlv6/1T9q6f87/aOW/vfqH7X0/73+UUv/P+gftfS/T/+opf8f9Y9a+t+vf9TS/0/6Ry39H9A/aun/Z/2jlv4P6h+19P+L/lFL/4f0j1r6/1X/qKX/w/pHLf3/pn/U0v/v+kct/f+hf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/cfqH5X0Hz3QP2rpP0z/qKX/cP2jlv4z6B+19B+hf9TSf6T+UUv/UfpHLf1n1D9q6T+T/lFL/9H6Ry39Z9Y/aun/LP2jlv6z6B+19J9V/6il/2z6Ry39n61/1NJ/dv2jlv5z6B+19J9T/6il/3P0j1r6z6V/1NL/ufpHLf2fp3/U0v/5+kct/efWP2rp/wL9o5b+8+gftfR/of5RS/8X6R+19J9X/6il/3z6Ry39X6x/1NJ/jP5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvq/RP+opf9L9Y9a+i+hf9TSf0n9o5b+S+kfTZ/9Rzxx9qn9l9Y/mu76AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhyQAAAAAAj6/7odgQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATQEAAP//BCsB+w==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) 2.680465305s ago: executing program 9 (id=1036): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x50) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 2.679396222s ago: executing program 6 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 2.512232274s ago: executing program 5 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 2.431352685s ago: executing program 7 (id=1039): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) 2.006317174s ago: executing program 3 (id=1040): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_int(r3, 0x0, 0x0) 1.940153583s ago: executing program 6 (id=1041): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.890606629s ago: executing program 7 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r2, @ANYBLOB="7d15c701398ba31216c12c4899864aa65862065cf734da1f99522c23685e5a103351c1c57e06c3bc75354368940f4f40b1c1770f5143fe5b1e23c7c6b15cd2a7ffffff9cd99f1b1756c13cbaa2507ca46f8f097101"], 0x40}, 0x1, 0xd}, 0x0) 1.842402537s ago: executing program 9 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.531903696s ago: executing program 9 (id=1044): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000071114c0000000000850000002f0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x34) 1.318009194s ago: executing program 6 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 1.245040339s ago: executing program 3 (id=1046): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4e17f003e80000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bd000004129054e7704a000000"], 0xf}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 984.335152ms ago: executing program 9 (id=1047): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x4}, 0x8) 760.126709ms ago: executing program 5 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 700.524322ms ago: executing program 6 (id=1049): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x56}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 636.279772ms ago: executing program 9 (id=1050): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000071118f0000000000850000002f0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x34) 559.309195ms ago: executing program 3 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x4) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) 533.117536ms ago: executing program 7 (id=1052): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='./bus\x00') creat(0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 400.242051ms ago: executing program 9 (id=1053): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x6000) 311.342455ms ago: executing program 6 (id=1054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xb, "f0bc"}, @global=@item_012={0x1, 0x1, 0x2, "c0"}]}}, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 152.677844ms ago: executing program 5 (id=1055): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000000000000000000000000000180100007e38000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000540), 0x200000, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 8 (id=1056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0xc00, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x5dc3, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) kernel console output (not intermixed with test programs): newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.479050][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.489651][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.501397][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.512815][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.531579][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.542959][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.561189][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.572165][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.583346][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.594525][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.607405][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.618328][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.628595][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.647790][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.671061][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.687657][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.701772][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.712145][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.723183][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.739404][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.740403][ T5840] Bluetooth: hci1: command tx timeout [ 99.756017][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.769151][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.792297][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.811429][ T5840] Bluetooth: hci4: command tx timeout [ 99.811473][ T5842] Bluetooth: hci0: command tx timeout [ 99.816871][ T5840] Bluetooth: hci5: command tx timeout [ 99.822452][ T5838] Bluetooth: hci2: command tx timeout [ 99.828155][ T5846] Bluetooth: hci3: command tx timeout [ 99.834568][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.864939][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.896520][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.919348][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930321][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.985186][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.999958][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.038217][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.078117][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.098838][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.115889][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.129244][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.152346][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.169500][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.204938][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.219528][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.238428][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.257780][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.258870][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.274527][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283798][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.338127][ T5837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.353602][ T5837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.362968][ T5837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.372466][ T5837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.480349][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.521128][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.541633][ T25] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 100.555974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.559742][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.572318][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.621098][ T25] usb 1-1: config 0 descriptor?? [ 100.670277][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.678181][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.798472][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.820586][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.867082][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.879274][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.960574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.981610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.099595][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.126370][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.228671][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.264078][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.638642][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 101.653131][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.701730][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.714276][ T25] usb 1-1: USB disconnect, device number 2 [ 101.770237][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.733408][ T5972] Bluetooth: MGMT ver 1.23 [ 103.777617][ T5980] loop5: detected capacity change from 0 to 512 [ 103.875496][ T5980] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.939613][ T5980] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.013511][ T5980] EXT4-fs (loop5): 1 truncate cleaned up [ 104.073468][ T5980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.114364][ T5988] loop4: detected capacity change from 0 to 65536 [ 105.351738][ T29] audit: type=1800 audit(1738635550.533:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 106.134518][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 106.333131][ T5994] loop0: detected capacity change from 0 to 2048 [ 106.421939][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.465793][ T5988] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.515744][ T5994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.957317][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.000740][ T5988] XFS (loop4): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x152/0x200 [ 107.015856][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.4.13 Not tainted 6.14.0-rc1-syzkaller #0 [ 107.015897][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.015920][ T5988] Call Trace: [ 107.015930][ T5988] [ 107.015943][ T5988] dump_stack_lvl+0x16c/0x1f0 [ 107.015993][ T5988] xfs_corruption_error+0x12f/0x150 [ 107.016055][ T5988] ? xlog_alloc_buffer+0x152/0x200 [ 107.016114][ T5988] xlog_alloc_buffer+0x199/0x200 [ 107.016163][ T5988] ? xlog_alloc_buffer+0x152/0x200 [ 107.016216][ T5988] xlog_do_recovery_pass+0x379/0xd70 [ 107.016291][ T5988] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 107.016352][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.016417][ T5988] ? mark_held_locks+0x9f/0xe0 [ 107.016504][ T5988] xlog_verify_head+0x193/0x530 [ 107.016566][ T5988] ? __pfx_xlog_verify_head+0x10/0x10 [ 107.016625][ T5988] ? __entry_text_end+0x1020c5/0x1020c9 [ 107.016692][ T5988] ? xlog_check_unmount_rec+0x1fd/0x550 [ 107.016750][ T5988] ? __pfx_xlog_check_unmount_rec+0x10/0x10 [ 107.016808][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.016873][ T5988] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 107.016937][ T5988] xlog_find_tail+0x85d/0xf00 [ 107.017008][ T5988] ? __pfx_xlog_find_tail+0x10/0x10 [ 107.017070][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.017134][ T5988] ? mark_held_locks+0x9f/0xe0 [ 107.017192][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.017255][ T5988] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.017297][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.017360][ T5988] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 107.017406][ T5988] xlog_recover+0x8f/0x4e0 [ 107.017464][ T5988] ? __pfx_xlog_recover+0x10/0x10 [ 107.017539][ T5988] xfs_log_mount+0x234/0x460 [ 107.017584][ T5988] xfs_mountfs+0x12cc/0x2300 [ 107.017653][ T5988] ? __pfx_xfs_mountfs+0x10/0x10 [ 107.017716][ T5988] ? do_init_timer+0xc9/0x110 [ 107.017764][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.017827][ T5988] ? xfs_mru_cache_create+0x4be/0x5d0 [ 107.017887][ T5988] ? __pfx_xfs_fstrm_free_func+0x10/0x10 [ 107.017942][ T5988] xfs_fs_fill_super+0x1554/0x1f10 [ 107.017999][ T5988] get_tree_bdev_flags+0x38e/0x620 [ 107.018053][ T5988] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 107.018104][ T5988] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 107.018162][ T5988] ? apparmor_capable+0x114/0x1d0 [ 107.018202][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.018266][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.018330][ T5988] ? security_capable+0x7e/0x260 [ 107.018399][ T5988] vfs_get_tree+0x8e/0x340 [ 107.018444][ T5988] path_mount+0x14e6/0x1f10 [ 107.018510][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.018573][ T5988] ? kmem_cache_free+0x2e2/0x4d0 [ 107.018632][ T5988] ? __pfx_path_mount+0x10/0x10 [ 107.018705][ T5988] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.018768][ T5988] ? putname+0x13c/0x180 [ 107.018811][ T5988] __x64_sys_mount+0x28f/0x310 [ 107.018874][ T5988] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.018940][ T5988] ? do_user_addr_fault+0x83d/0x13f0 [ 107.019005][ T5988] do_syscall_64+0xcd/0x250 [ 107.019055][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.019111][ T5988] RIP: 0033:0x7f85add8e54a [ 107.019140][ T5988] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.019177][ T5988] RSP: 002b:00007f85aebb4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.019213][ T5988] RAX: ffffffffffffffda RBX: 00007f85aebb4ef0 RCX: 00007f85add8e54a [ 107.019238][ T5988] RDX: 0000000020000800 RSI: 0000000020000000 RDI: 00007f85aebb4eb0 [ 107.019263][ T5988] RBP: 0000000020000800 R08: 00007f85aebb4ef0 R09: 0000000003000010 [ 107.019287][ T5988] R10: 0000000003000010 R11: 0000000000000246 R12: 0000000020000000 [ 107.019311][ T5988] R13: 00007f85aebb4eb0 R14: 000000000000b967 R15: 00000000200002c0 [ 107.019356][ T5988] [ 107.019369][ T5988] XFS (loop4): Corruption detected. Unmount and run xfs_repair [ 107.415117][ T5988] XFS (loop4): Invalid block length (0x20040) for buffer [ 107.423195][ T5988] XFS (loop4): failed to locate log tail [ 107.428859][ T5988] XFS (loop4): log mount/recovery failed: error -12 [ 107.458861][ T5988] XFS (loop4): log mount failed [ 108.463456][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.656853][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.686885][ T6019] loop1: detected capacity change from 0 to 1024 [ 108.695898][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.717673][ T6019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.766838][ T6019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.878152][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.243338][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.962398][ T6039] loop4: detected capacity change from 0 to 512 [ 109.973304][ T6039] EXT4-fs: Ignoring removed oldalloc option [ 110.035540][ T6039] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz.4.26: Parent and EA inode have the same ino 15 [ 110.060934][ T6039] EXT4-fs (loop4): Remounting filesystem read-only [ 110.068118][ T6039] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 110.077657][ T6039] EXT4-fs (loop4): 1 orphan inode deleted [ 110.088920][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.656509][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.287142][ T6062] loop4: detected capacity change from 0 to 512 [ 111.320639][ T6062] ======================================================= [ 111.320639][ T6062] WARNING: The mand mount option has been deprecated and [ 111.320639][ T6062] and is ignored by this kernel. Remove the mand [ 111.320639][ T6062] option from the mount to silence this warning. [ 111.320639][ T6062] ======================================================= [ 111.392918][ T6062] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.525157][ T6062] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.590905][ T6062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 111.624216][ T6062] System zones: 0-1, 15-15, 18-18, 34-34 [ 111.648362][ T6062] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.676803][ T6062] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 111.720839][ T6062] EXT4-fs warning (device loop4): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.805015][ T6062] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 111.839494][ T6062] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.32: bg 0: block 40: padding at end of block bitmap is not set [ 111.917384][ T6062] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 111.937495][ T6062] EXT4-fs (loop4): 1 truncate cleaned up [ 111.985423][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.583065][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.392524][ T6115] warning: `syz.5.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.630536][ T5975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.817266][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.852180][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.898214][ T5975] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 115.926291][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.442285][ T5975] usb 3-1: config 0 descriptor?? [ 119.780209][ T6107] loop0: detected capacity change from 0 to 40427 [ 119.932064][ T6140] netlink: 80 bytes leftover after parsing attributes in process `syz.3.61'. [ 120.214001][ T5975] usbhid 3-1:0.0: can't add hid device: -71 [ 120.220908][ T5975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.295401][ T6140] loop3: detected capacity change from 0 to 32768 [ 120.395245][ T5975] usb 3-1: USB disconnect, device number 2 [ 120.423412][ T6140] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.635843][ T6140] XFS (loop3): Ending clean mount [ 120.803803][ T5833] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.000885][ T5839] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.214378][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.294735][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.400848][ T5839] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 122.479071][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.569134][ T5839] usb 1-1: config 0 descriptor?? [ 123.025619][ T5839] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 123.096654][ T5839] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 123.152030][ T5839] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 123.224588][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -32 [ 123.589884][ T5839] usb 1-1: USB disconnect, device number 3 [ 126.442513][ T6273] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.114'. [ 126.660033][ T6273] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.913624][ T6288] syzkaller0: entered allmulticast mode [ 131.244718][ T5839] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.271594][ T5839] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.315807][ T6324] loop2: detected capacity change from 0 to 1024 [ 131.373430][ T6324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.378488][ T6327] Illegal XDP return value 2509059989 on prog (id 52) dev N/A, expect packet loss! [ 131.392528][ T6324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.423332][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.477286][ T6324] 9pnet_fd: Insufficient options for proto=fd [ 131.545091][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.959996][ T5975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.149225][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.178655][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.209055][ T5975] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 133.222790][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.240720][ T5975] usb 6-1: config 0 descriptor?? [ 133.743358][ T5975] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 133.768639][ T5975] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 133.796132][ T5975] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 133.938879][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -32 [ 134.290415][ T5975] usb 6-1: USB disconnect, device number 2 [ 137.682691][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 137.710181][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.731694][ T6416] loop3: detected capacity change from 0 to 1024 [ 137.770825][ T6416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.800884][ T6416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.868682][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.977189][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 138.255101][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.187664][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 140.202429][ T6469] loop4: detected capacity change from 0 to 1024 [ 140.218360][ T25] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.230107][ T6469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.267348][ T6469] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.421283][ T6469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.580725][ T6469] 9pnet_fd: Insufficient options for proto=fd [ 140.963404][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.780459][ T6508] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.211'. [ 141.807710][ T6508] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.700182][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.707252][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.026312][ T6604] loop4: detected capacity change from 0 to 256 [ 145.156723][ T6604] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 145.781192][ T6623] loop4: detected capacity change from 0 to 8 [ 146.528524][ T5855] SQUASHFS error: Failed to read block 0x6a4: -5 [ 146.564237][ T5855] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 146.583783][ T5855] SQUASHFS error: Unable to read inode 0x87 [ 146.591707][ T5855] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 146.639771][ T5855] SQUASHFS error: Unable to read inode 0x87 [ 146.639949][ T6644] netlink: 272 bytes leftover after parsing attributes in process `syz.5.273'. [ 146.749825][ T5975] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.836326][ T6646] loop1: detected capacity change from 0 to 1024 [ 146.912704][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.067904][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.081379][ T5975] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 147.090532][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.101356][ T5975] usb 4-1: config 0 descriptor?? [ 147.357635][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.554722][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.596164][ T6657] loop2: detected capacity change from 0 to 512 [ 147.598718][ T5975] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 147.634699][ T5975] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 147.683484][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.687950][ T5975] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 147.736496][ T6657] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.812700][ C1] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -32 [ 147.948061][ T5845] usb 4-1: USB disconnect, device number 2 [ 148.000706][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.036354][ T6664] EXT4-fs error (device loop2): ext4_add_entry:2444: inode #12: comm syz.2.282: Directory hole found for htree leaf block 0 [ 148.422219][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.466577][ T6669] loop1: detected capacity change from 0 to 8192 [ 148.477173][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.094511][ T35] bridge_slave_1: left allmulticast mode [ 149.119902][ T35] bridge_slave_1: left promiscuous mode [ 149.167140][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.171233][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.184799][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.196242][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.210872][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.240724][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.280468][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.414087][ T35] bridge_slave_0: left allmulticast mode [ 149.450677][ T35] bridge_slave_0: left promiscuous mode [ 149.456715][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.512374][ T6691] netlink: 80 bytes leftover after parsing attributes in process `syz.1.288'. [ 149.742253][ T6700] loop5: detected capacity change from 0 to 256 [ 149.856139][ T6700] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 149.919883][ T6700] FAT-fs (loop5): Filesystem has been set read-only [ 150.333974][ T6717] loop5: detected capacity change from 0 to 256 [ 150.357534][ T6717] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 150.398766][ T6717] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 150.408623][ T6717] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 150.416464][ T5975] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.435048][ T6720] loop2: detected capacity change from 0 to 128 [ 150.440184][ T6717] UDF-fs: Scanning with blocksize 512 failed [ 150.485088][ T6717] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 150.528849][ T6717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.660069][ T5975] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 150.699763][ T5975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 150.750581][ T5975] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 150.762125][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.803617][ T5975] usb 1-1: config 0 descriptor?? [ 151.055436][ T6697] loop1: detected capacity change from 0 to 32768 [ 151.117533][ T6697] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.286991][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.330176][ T5846] Bluetooth: hci5: command tx timeout [ 151.372138][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.404832][ T6697] XFS (loop1): Ending clean mount [ 151.452141][ T35] bond0 (unregistering): Released all slaves [ 151.485667][ T5975] nintendo 0003:057E:2009.0008: item fetching failed at offset 3/5 [ 151.495825][ T5975] nintendo 0003:057E:2009.0008: HID parse failed [ 151.517594][ T5975] nintendo 0003:057E:2009.0008: probe - fail = -22 [ 152.510298][ T5975] nintendo 0003:057E:2009.0008: probe with driver nintendo failed with error -22 [ 152.527598][ T5975] usb 1-1: USB disconnect, device number 4 [ 152.820576][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.411959][ T5846] Bluetooth: hci5: command tx timeout [ 154.072073][ T6676] chnl_net:caif_netlink_parms(): no params data found [ 154.909772][ T35] hsr_slave_0: left promiscuous mode [ 154.950034][ T35] hsr_slave_1: left promiscuous mode [ 154.972416][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.003352][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.324'. [ 155.012815][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.069464][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.099041][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.138596][ T35] veth1_macvtap: left promiscuous mode [ 155.184528][ T35] veth0_macvtap: left promiscuous mode [ 155.200423][ T35] veth1_vlan: left promiscuous mode [ 155.206430][ T35] veth0_vlan: left promiscuous mode [ 155.220642][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.401749][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.428956][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.459557][ T5904] usb 3-1: config 1 has no interface number 0 [ 155.472674][ T5904] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.493081][ T5846] Bluetooth: hci5: command tx timeout [ 155.502585][ T5904] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 155.542453][ T5904] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.584016][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.608195][ T5904] usb 3-1: Product: syz [ 155.614021][ T5904] usb 3-1: Manufacturer: syz [ 155.618832][ T5904] usb 3-1: SerialNumber: syz [ 156.142523][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.299892][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 156.318339][ T5900] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 156.330386][ T5900] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.341187][ T5900] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.356214][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.366144][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.374646][ T5900] usb 4-1: Product: syz [ 156.379317][ T5900] usb 4-1: Manufacturer: syz [ 156.384723][ T5900] usb 4-1: SerialNumber: syz [ 156.418542][ T35] team0 (unregistering): Port device team_slave_1 removed [ 156.450846][ T35] team0 (unregistering): Port device team_slave_0 removed [ 156.633043][ T5904] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 156.642517][ T5904] cdc_ncm 3-1:1.1: bind() failure [ 156.664036][ T5904] usb 3-1: USB disconnect, device number 3 [ 156.810827][ T5900] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 156.888862][ T6809] netlink: 'syz.5.329': attribute type 5 has an invalid length. [ 157.019419][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.050003][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.057492][ T6676] bridge_slave_0: entered allmulticast mode [ 157.141242][ T6676] bridge_slave_0: entered promiscuous mode [ 157.204951][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.254354][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.290120][ T6676] bridge_slave_1: entered allmulticast mode [ 157.327768][ T6676] bridge_slave_1: entered promiscuous mode [ 157.820211][ T5846] Bluetooth: hci5: command tx timeout [ 158.166545][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 158.278299][ T5900] usb 4-1: current rate 9338599 is different from the runtime rate 9338507 [ 158.366641][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.417998][ T6841] loop5: detected capacity change from 0 to 2048 [ 158.441150][ T6841] udf: Bad value for 'session' [ 158.443901][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.656251][ T5900] usb 4-1: USB disconnect, device number 3 [ 158.764593][ T6846] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.783273][ T6676] team0: Port device team_slave_0 added [ 158.891074][ T6676] team0: Port device team_slave_1 added [ 159.052646][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.261955][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.269142][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.377618][ T6861] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 159.599723][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.702251][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.711569][ T6864] loop5: detected capacity change from 0 to 512 [ 159.739213][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.765230][ T6864] EXT4-fs: journaled quota format not specified [ 159.894259][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.091774][ T6882] netlink: 300 bytes leftover after parsing attributes in process `syz.3.352'. [ 160.261172][ T6676] hsr_slave_0: entered promiscuous mode [ 160.279947][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 160.296191][ T6676] hsr_slave_1: entered promiscuous mode [ 160.325438][ T6676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.369343][ T6676] Cannot create hsr debugfs directory [ 161.679883][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 161.972704][ T6909] loop1: detected capacity change from 0 to 1024 [ 162.002392][ T6909] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.017172][ T6912] netlink: 'syz.3.365': attribute type 5 has an invalid length. [ 162.027790][ T6915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.364'. [ 162.056165][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 162.078003][ T6909] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.136145][ T6909] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.362: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 162.249321][ T6909] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.362: couldn't read orphan inode 11 (err -117) [ 162.298989][ T6909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.407014][ T6676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.536027][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.548177][ T6676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.691548][ T6676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.831306][ T6676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.023284][ T6916] loop2: detected capacity change from 0 to 256 [ 163.085926][ T6916] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 163.242987][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.256446][ T6916] process 'syz.2.363' launched './file0' with NULL argv: empty string added [ 163.279972][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.326484][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.362010][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.369281][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.448299][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.455756][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.475615][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.522615][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.554064][ T5900] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 163.594976][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.635402][ T5900] usb 1-1: config 0 descriptor?? [ 163.968746][ T6967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.084552][ T5900] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 164.151245][ T5900] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 164.247074][ T5900] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 164.288068][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -32 [ 164.591632][ T5975] usb 1-1: USB disconnect, device number 5 [ 164.720660][ T6987] netlink: 144 bytes leftover after parsing attributes in process `syz.2.378'. [ 164.755653][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.816614][ T6676] veth0_vlan: entered promiscuous mode [ 165.838892][ T6676] veth1_vlan: entered promiscuous mode [ 165.985250][ T6676] veth0_macvtap: entered promiscuous mode [ 166.012146][ T7008] loop5: detected capacity change from 0 to 4096 [ 166.024016][ T6676] veth1_macvtap: entered promiscuous mode [ 166.068732][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.130990][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.178344][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.229855][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.274907][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.577761][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.593744][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.613153][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.627646][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.640019][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.656525][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.029390][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.105297][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.159854][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.232333][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.303237][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.313829][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.324029][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.334826][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.344826][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.355831][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.421996][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.503071][ T6676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.559401][ T6676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.578110][ T7028] loop2: detected capacity change from 0 to 2048 [ 167.596415][ T6676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.673269][ T6676] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.754576][ T7028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.065420][ T3564] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.074632][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.136794][ T3564] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.141797][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.202750][ T3564] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.202750][ T3564] [ 168.269955][ T3564] EXT4-fs (loop2): Total free blocks count 0 [ 168.296929][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.301874][ T7045] loop0: detected capacity change from 0 to 8 [ 168.311316][ T3564] EXT4-fs (loop2): Free/Dirty block details [ 168.313331][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.319858][ T3564] EXT4-fs (loop2): free_blocks=2415919104 [ 168.353942][ T3564] EXT4-fs (loop2): dirty_blocks=32 [ 168.369918][ T3564] EXT4-fs (loop2): Block reservation details [ 168.414141][ T3564] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 168.451097][ T2998] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 168.949277][ T5832] SQUASHFS error: Failed to read block 0x6a4: -5 [ 169.004946][ T5832] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 169.039067][ T5832] SQUASHFS error: Unable to read inode 0x87 [ 169.062283][ T5832] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 169.111654][ T5832] SQUASHFS error: Unable to read inode 0x87 [ 169.813027][ T7076] loop1: detected capacity change from 0 to 4096 [ 170.222999][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.998279][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.311679][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.504728][ T7108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.723236][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.761598][ T7115] loop2: detected capacity change from 0 to 8 [ 171.808202][ T7115] unable to read fragment index table [ 172.010690][ T7121] netlink: 'syz.5.415': attribute type 11 has an invalid length. [ 172.342433][ T35] bridge_slave_1: left allmulticast mode [ 172.392964][ T35] bridge_slave_1: left promiscuous mode [ 172.399108][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.547838][ T7135] input: syz0 as /devices/virtual/input/input5 [ 172.593714][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.599797][ T35] bridge_slave_0: left allmulticast mode [ 173.282778][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.300448][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.311058][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.318780][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.326307][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.445753][ T7134] loop5: detected capacity change from 0 to 4096 [ 173.571029][ T35] bridge_slave_0: left promiscuous mode [ 173.576824][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.736776][ T7144] loop1: detected capacity change from 0 to 2048 [ 173.771716][ T7144] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 173.800640][ T7144] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 173.854168][ T7144] UDF-fs: Scanning with blocksize 512 failed [ 173.884915][ T7144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.420786][ T5838] Bluetooth: hci0: command tx timeout [ 176.005886][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 176.112956][ T7171] loop3: detected capacity change from 0 to 1024 [ 176.139578][ T7171] EXT4-fs: Ignoring removed orlov option [ 176.193925][ T7172] loop1: detected capacity change from 0 to 1024 [ 176.222327][ T7172] EXT4-fs: inline encryption not supported [ 176.270748][ T7172] EXT4-fs: Ignoring removed i_version option [ 176.301671][ T7172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.349731][ T7181] capability: warning: `syz.5.433' uses deprecated v2 capabilities in a way that may be insecure [ 176.440776][ T7172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.467306][ T7171] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.530499][ T7171] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.569768][ T7171] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 176.601599][ T7171] EXT4-fs (loop3): invalid journal inode [ 176.607348][ T7171] EXT4-fs (loop3): can't get journal size [ 176.658023][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.664086][ T7171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.018392][ T7197] loop1: detected capacity change from 0 to 512 [ 177.368382][ T7201] loop1: detected capacity change from 0 to 1024 [ 177.480614][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 177.491138][ T5838] Bluetooth: hci0: command tx timeout [ 178.176467][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.351172][ T7209] loop2: detected capacity change from 0 to 512 [ 178.359303][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.399262][ T35] bond0 (unregistering): Released all slaves [ 178.406242][ T7209] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 178.569442][ T7212] loop1: detected capacity change from 0 to 256 [ 178.670350][ T7209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 178.685995][ T7209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 178.704715][ T7209] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.434: bg 0: block 361: padding at end of block bitmap is not set [ 178.741993][ T7212] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 178.847995][ T7209] EXT4-fs (loop2): Remounting filesystem read-only [ 178.899590][ T7209] EXT4-fs (loop2): 1 truncate cleaned up [ 178.921473][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 179.877268][ T7219] loop6: detected capacity change from 0 to 512 [ 179.925086][ T5838] Bluetooth: hci0: command tx timeout [ 180.315229][ T7219] EXT4-fs (loop6): orphan cleanup on readonly fs [ 180.338363][ T7219] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.444: bg 0: block 248: padding at end of block bitmap is not set [ 180.360344][ T7219] Quota error (device loop6): write_blk: dquota write failed [ 180.368524][ T7219] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 180.379589][ T7219] EXT4-fs error (device loop6): ext4_acquire_dquot:6925: comm syz.6.444: Failed to acquire dquot type 1 [ 180.429385][ T7219] EXT4-fs (loop6): 1 truncate cleaned up [ 180.461706][ T7219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.122206][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.659823][ T35] hsr_slave_0: left promiscuous mode [ 181.707030][ T35] hsr_slave_1: left promiscuous mode [ 181.757060][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.818205][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.861247][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.899468][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.970826][ T5838] Bluetooth: hci0: command tx timeout [ 182.061397][ T35] veth1_macvtap: left promiscuous mode [ 182.140561][ T35] veth0_macvtap: left promiscuous mode [ 182.191790][ T35] veth1_vlan: left promiscuous mode [ 182.227961][ T35] veth0_vlan: left promiscuous mode [ 182.252153][ T7237] loop5: detected capacity change from 0 to 8192 [ 182.329506][ T7237] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.678756][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 182.693168][ T6676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.755022][ T7237] FAT-fs (loop5): Filesystem has been set read-only [ 182.807242][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 182.906591][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 182.998982][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.084793][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.156592][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.165859][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.174746][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.183638][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.192715][ T7237] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 183.204292][ T29] audit: type=1800 audit(1738635628.603:3): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.448" name="file2" dev="loop5" ino=7 res=0 errno=0 [ 183.262772][ T7237] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 183.966073][ T7265] loop5: detected capacity change from 0 to 256 [ 184.002353][ T7265] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 184.025228][ T7264] loop3: detected capacity change from 0 to 2048 [ 184.111884][ T7264] EXT4-fs: Ignoring removed bh option [ 184.176745][ T7264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.438555][ T7274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.460'. [ 184.490579][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.749506][ T7278] loop5: detected capacity change from 0 to 512 [ 184.770183][ T7278] EXT4-fs (loop5): Test dummy encryption mode enabled [ 184.811685][ T7278] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #12: comm syz.5.463: corrupted in-inode xattr: invalid ea_ino [ 184.911158][ T7278] EXT4-fs (loop5): Remounting filesystem read-only [ 184.918832][ T7278] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.994041][ T7278] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 185.207890][ T7286] loop5: detected capacity change from 0 to 2048 [ 185.230591][ T7286] udf: Bad value for 'rootdir' [ 185.266596][ T35] team0 (unregistering): Port device team_slave_1 removed [ 185.372179][ T35] team0 (unregistering): Port device team_slave_0 removed [ 185.966881][ T5845] kernel write not supported for file /input/event0 (pid: 5845 comm: kworker/0:4) [ 186.214806][ T7296] loop6: detected capacity change from 0 to 2048 [ 186.287545][ T7296] UDF-fs: warning (device loop6): udf_fill_super: No fileset found [ 186.379477][ T7298] loop3: detected capacity change from 0 to 512 [ 186.389922][ T7298] EXT4-fs: Ignoring removed oldalloc option [ 186.466423][ T7298] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz.3.469: Parent and EA inode have the same ino 15 [ 186.503331][ T7298] EXT4-fs (loop3): Remounting filesystem read-only [ 186.510940][ T7298] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 186.520676][ T7298] EXT4-fs (loop3): 1 orphan inode deleted [ 186.559518][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.608815][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.322206][ T5900] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 188.539994][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.569981][ T5900] usb 7-1: config 0 has no interfaces? [ 188.597591][ T5900] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.627223][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.659716][ T5900] usb 7-1: SerialNumber: syz [ 188.689321][ T5900] usb 7-1: config 0 descriptor?? [ 188.943960][ T5973] usb 7-1: USB disconnect, device number 2 [ 189.048993][ T7311] loop3: detected capacity change from 0 to 256 [ 189.121559][ T7311] exfat: Deprecated parameter 'namecase' [ 189.200132][ T7311] exfat: Deprecated parameter 'namecase' [ 189.276270][ T7311] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 189.449487][ T7278] syz.5.463 (7278) used greatest stack depth: 21136 bytes left [ 189.836477][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 190.200130][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.208449][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.248338][ T7137] bridge_slave_0: entered allmulticast mode [ 190.281097][ T7137] bridge_slave_0: entered promiscuous mode [ 190.313649][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.339965][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.347304][ T7137] bridge_slave_1: entered allmulticast mode [ 190.394013][ T7137] bridge_slave_1: entered promiscuous mode [ 190.520891][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.599002][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 190.848799][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.906353][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.971059][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.163952][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.341355][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.390202][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.402466][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.412081][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.427047][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.435459][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.607681][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.707645][ T7137] team0: Port device team_slave_0 added [ 191.775364][ T7137] team0: Port device team_slave_1 added [ 191.999005][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.019829][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.099344][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.148583][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.170256][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.206628][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.621117][ T7381] loop5: detected capacity change from 0 to 512 [ 192.682184][ T7381] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 192.698044][ T7137] hsr_slave_0: entered promiscuous mode [ 192.724948][ T7137] hsr_slave_1: entered promiscuous mode [ 192.982292][ T35] bridge_slave_1: left allmulticast mode [ 193.026266][ T35] bridge_slave_1: left promiscuous mode [ 193.070625][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.236763][ T35] bridge_slave_0: left allmulticast mode [ 193.250484][ T35] bridge_slave_0: left promiscuous mode [ 193.256572][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.490377][ T5846] Bluetooth: hci2: command tx timeout [ 193.769011][ T7409] loop5: detected capacity change from 0 to 512 [ 193.779327][ T7409] EXT4-fs: Ignoring removed oldalloc option [ 193.936831][ T7409] EXT4-fs error (device loop5): ext4_xattr_inode_iget:435: comm syz.5.499: Parent and EA inode have the same ino 15 [ 193.954129][ T7409] EXT4-fs (loop5): Remounting filesystem read-only [ 193.961310][ T7409] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -5) [ 193.970624][ T7409] EXT4-fs (loop5): 1 orphan inode deleted [ 193.982812][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.805202][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.277889][ T7422] loop2: detected capacity change from 0 to 512 [ 195.385265][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.405981][ T7422] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.557348][ T7422] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 195.577007][ T5846] Bluetooth: hci2: command tx timeout [ 195.793370][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.902654][ T7435] 9pnet_fd: Insufficient options for proto=fd [ 196.625803][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.720713][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.814950][ T35] bond0 (unregistering): Released all slaves [ 197.492352][ T7352] chnl_net:caif_netlink_parms(): no params data found [ 197.638736][ T7424] loop6: detected capacity change from 0 to 65536 [ 197.651808][ T5846] Bluetooth: hci2: command tx timeout [ 197.726870][ T7424] XFS (loop6): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 197.887434][ T35] hsr_slave_0: left promiscuous mode [ 197.900377][ T35] hsr_slave_1: left promiscuous mode [ 197.911505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.929214][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.965505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.979981][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.006090][ T7424] XFS (loop6): Ending clean mount [ 198.042702][ T35] veth1_macvtap: left promiscuous mode [ 198.048304][ T35] veth0_macvtap: left promiscuous mode [ 198.079872][ T35] veth1_vlan: left promiscuous mode [ 198.085240][ T35] veth0_vlan: left promiscuous mode [ 198.185537][ T6676] XFS (loop6): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 199.189623][ T7476] loop2: detected capacity change from 0 to 4096 [ 199.731331][ T5846] Bluetooth: hci2: command tx timeout [ 199.792773][ T7484] loop6: detected capacity change from 0 to 8 [ 200.721809][ T35] team0 (unregistering): Port device team_slave_1 removed [ 201.906834][ T35] team0 (unregistering): Port device team_slave_0 removed [ 203.788317][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.809878][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.817535][ T7352] bridge_slave_0: entered allmulticast mode [ 203.841195][ T7352] bridge_slave_0: entered promiscuous mode [ 203.864396][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.876113][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.883564][ T7352] bridge_slave_1: entered allmulticast mode [ 203.902630][ T7352] bridge_slave_1: entered promiscuous mode [ 203.947950][ T7509] loop5: detected capacity change from 0 to 512 [ 203.982806][ T7509] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.529: corrupted in-inode xattr: invalid ea_ino [ 204.038415][ T7509] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.529: couldn't read orphan inode 15 (err -117) [ 204.053824][ T7509] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.104598][ T7499] loop2: detected capacity change from 0 to 32768 [ 204.140273][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.146764][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.181937][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.206163][ T7499] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.245506][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.345355][ T7499] XFS (loop2): Ending clean mount [ 204.347492][ T5837] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 204.387566][ T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 204.387651][ T7352] team0: Port device team_slave_0 added [ 204.406786][ T7137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.421380][ T9] XFS (loop2): Unmount and run xfs_repair [ 204.427238][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 204.445082][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 204.457023][ T7352] team0: Port device team_slave_1 added [ 204.463170][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 204.502963][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 204.534847][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 204.553132][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 204.576455][ T7137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.589959][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.619961][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.637061][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.659823][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.661770][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.697179][ T7499] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x4 len 4 error 74 [ 204.764179][ T7499] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x402/0x980 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 204.775436][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.796061][ T7499] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 204.828495][ T7137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.872854][ T5847] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.908785][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.928455][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.961147][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.046047][ T7137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.455374][ T7543] loop2: detected capacity change from 0 to 4096 [ 205.468169][ T7352] hsr_slave_0: entered promiscuous mode [ 205.499484][ T7352] hsr_slave_1: entered promiscuous mode [ 205.521928][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.529540][ T7352] Cannot create hsr debugfs directory [ 206.018210][ T7556] loop3: detected capacity change from 0 to 1024 [ 206.084353][ T7556] EXT4-fs: Ignoring removed orlov option [ 206.143572][ T7556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.194820][ T7556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.053360][ T7564] pimreg: entered allmulticast mode [ 208.079882][ T7567] pimreg: left allmulticast mode [ 208.668155][ T7589] syz_tun: entered allmulticast mode [ 208.720907][ T7589] dvmrp0: entered allmulticast mode [ 208.820037][ T7591] dvmrp0: left allmulticast mode [ 208.825119][ T7591] syz_tun: left allmulticast mode [ 208.836095][ T7590] loop2: detected capacity change from 0 to 4096 [ 209.054811][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.235626][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.328747][ T7352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 209.406372][ T7352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 209.465838][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.473099][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.529600][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.536819][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.622307][ T7352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 209.716543][ T7352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 209.833114][ T7137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.156436][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.247880][ T7352] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.295202][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.302398][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.547736][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.554943][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.863188][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.425550][ T29] audit: type=1326 audit(1738635656.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.549201][ T29] audit: type=1326 audit(1738635656.873:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.632831][ T29] audit: type=1326 audit(1738635656.873:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.689509][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.769914][ T29] audit: type=1326 audit(1738635656.873:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.814151][ T8] IPVS: starting estimator thread 0... [ 211.851058][ T29] audit: type=1326 audit(1738635656.873:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.902341][ T29] audit: type=1326 audit(1738635656.873:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.960407][ T29] audit: type=1326 audit(1738635656.873:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.6.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1d8cda9 code=0x7ffc0000 [ 211.989824][ T7660] IPVS: using max 17 ests per chain, 40800 per kthread [ 212.014840][ T7137] veth0_vlan: entered promiscuous mode [ 212.074040][ T7137] veth1_vlan: entered promiscuous mode [ 212.198799][ T7137] veth0_macvtap: entered promiscuous mode [ 212.270402][ T7137] veth1_macvtap: entered promiscuous mode [ 212.361841][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.413700][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.458719][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.486375][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.505940][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.517935][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.539188][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.578208][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.600893][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.628354][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.709754][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.741238][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.776898][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.819781][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.859927][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.889811][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.931361][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.959499][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.055034][ T7137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.084296][ T7137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.129729][ T7137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.169184][ T7137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.248939][ T7352] veth0_vlan: entered promiscuous mode [ 213.404013][ T7352] veth1_vlan: entered promiscuous mode [ 213.443352][ T7691] loop6: detected capacity change from 0 to 2048 [ 213.569272][ T7352] veth0_macvtap: entered promiscuous mode [ 213.616881][ T7352] veth1_macvtap: entered promiscuous mode [ 213.732937][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.755207][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.772761][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.800333][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.811002][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.841955][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.856478][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.869099][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.888125][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.909377][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.921265][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.932620][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.966666][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.320178][ T7703] loop2: detected capacity change from 0 to 2048 [ 216.702118][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 216.711016][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 216.717445][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 217.049859][ T7725] loop6: detected capacity change from 0 to 512 [ 217.060125][ T7725] EXT4-fs: Ignoring removed oldalloc option [ 217.200102][ T7725] EXT4-fs error (device loop6): ext4_xattr_inode_iget:435: comm syz.6.583: Parent and EA inode have the same ino 15 [ 217.215018][ T7725] EXT4-fs (loop6): Remounting filesystem read-only [ 217.222034][ T7725] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -5) [ 217.232906][ T7725] EXT4-fs (loop6): 1 orphan inode deleted [ 217.244715][ T7725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.999359][ T6676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.693677][ T7739] loop3: detected capacity change from 0 to 1764 [ 218.720406][ T7739] iso9660: Bad value for 'check' [ 219.934797][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.935556][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.953484][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.987684][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.019949][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.048711][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.099751][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.130876][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.159801][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.189692][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.202169][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.219890][ T7750] capability: warning: `syz.5.593' uses 32-bit capabilities (legacy support in use) [ 220.239905][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.251931][ T7751] evm: overlay not supported [ 220.260939][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.303396][ T7352] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.329730][ T7352] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.349156][ T7352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.365355][ T7352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.134567][ T7765] loop6: detected capacity change from 0 to 512 [ 221.144622][ T7765] EXT4-fs: Ignoring removed oldalloc option [ 221.256012][ T7765] EXT4-fs error (device loop6): ext4_xattr_inode_iget:435: comm syz.6.595: Parent and EA inode have the same ino 15 [ 221.278137][ T7765] EXT4-fs (loop6): Remounting filesystem read-only [ 221.285232][ T7765] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -5) [ 221.294652][ T7765] EXT4-fs (loop6): 1 orphan inode deleted [ 221.322873][ T7765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.921136][ T6676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.030335][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.074758][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.231159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.239036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.919342][ T7793] input: syz0 as /devices/virtual/input/input6 [ 224.019838][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.610'. [ 224.988935][ T7804] loop6: detected capacity change from 0 to 32768 [ 225.096347][ T7832] loop7: detected capacity change from 0 to 1024 [ 225.107575][ T7832] EXT4-fs: Ignoring removed orlov option [ 225.126750][ T7804] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.277441][ T7832] EXT4-fs: Ignoring removed nobh option [ 225.462940][ T7832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.507979][ T7804] XFS (loop6): Ending clean mount [ 226.087611][ T5900] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 226.180692][ T5900] XFS (loop6): Unmount and run xfs_repair [ 226.186479][ T5900] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 226.226486][ T5900] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 226.239144][ T5900] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 226.267077][ T5900] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 226.310374][ T5900] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 226.319900][ T5900] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 226.328801][ T5900] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 226.338762][ T5900] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 226.348034][ T5900] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 226.359158][ T5904] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x14 len 4 error 74 [ 226.371693][ T5904] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x402/0x980 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 226.400136][ T6676] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.439681][ T5904] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 226.471168][ T7852] overlayfs: missing 'lowerdir' [ 226.479054][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.616493][ T7824] loop8: detected capacity change from 0 to 32768 [ 226.806695][ T7824] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.000822][ T7865] loop5: detected capacity change from 0 to 2048 [ 227.044969][ T7865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.148058][ T7871] loop7: detected capacity change from 0 to 512 [ 227.160583][ T7871] ext4: Unknown parameter 'noacl' [ 227.180035][ T7824] XFS (loop8): Ending clean mount [ 228.609767][ T5973] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 228.879610][ T5973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.922999][ T5973] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.973787][ T5973] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 228.997770][ T5973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.035723][ T5973] usb 8-1: config 0 descriptor?? [ 229.502147][ T5973] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 229.544671][ T5973] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 229.566649][ T5973] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 229.839582][ C1] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -32 [ 230.212278][ T5904] usb 8-1: USB disconnect, device number 2 [ 232.140575][ T7942] Zero length message leads to an empty skb [ 232.483978][ T7352] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.944444][ T7991] loop6: detected capacity change from 0 to 128 [ 235.960765][ T7991] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.023308][ T7991] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 236.035641][ T8003] netlink: 25 bytes leftover after parsing attributes in process `syz.5.644'. [ 236.046848][ T8004] loop7: detected capacity change from 0 to 512 [ 236.081743][ T8003] gretap0: entered promiscuous mode [ 236.118045][ T8004] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 236.143425][ T8007] netlink: 5 bytes leftover after parsing attributes in process `syz.5.644'. [ 236.190200][ T8004] EXT4-fs (loop7): orphan cleanup on readonly fs [ 236.256625][ T8004] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 236.288873][ T8007] 0ªX¹¦Dö»: renamed from gretap0 [ 236.319052][ T8004] EXT4-fs warning (device loop7): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.337103][ T8007] 0ªX¹¦Dö»: left promiscuous mode [ 236.346788][ T8004] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 236.346974][ T1151] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 236.367427][ T8004] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.645: bg 0: block 40: padding at end of block bitmap is not set [ 236.379819][ T8007] 0ªX¹¦Dö»: entered allmulticast mode [ 236.460169][ T8004] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 236.486164][ T8004] EXT4-fs (loop7): 1 truncate cleaned up [ 236.513986][ T8004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.808443][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.435297][ T8029] overlayfs: overlapping lowerdir path [ 239.412194][ T8054] loop3: detected capacity change from 0 to 2048 [ 239.439908][ T8054] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.490607][ T8056] loop8: detected capacity change from 0 to 2048 [ 239.540824][ T8054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.590104][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.617286][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.627586][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.645834][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.648915][ T8056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.654060][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 239.674345][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.740933][ T8054] Cannot find add_set index 0 as target [ 239.900129][ T8054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.657: bg 0: block 234: padding at end of block bitmap is not set [ 239.993099][ T8054] EXT4-fs (loop3): Remounting filesystem read-only [ 240.282267][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.323582][ T7352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.675477][ T7894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.863936][ T8088] loop3: detected capacity change from 0 to 4096 [ 241.009511][ T7894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.334466][ T7894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.511715][ T7894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.574604][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 241.731059][ T5838] Bluetooth: hci6: command tx timeout [ 242.041131][ T8117] loop5: detected capacity change from 0 to 1024 [ 242.048560][ T8117] EXT4-fs: Ignoring removed orlov option [ 242.107889][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.395006][ T8117] No control pipe specified [ 242.410067][ T7894] bridge_slave_1: left allmulticast mode [ 242.415851][ T7894] bridge_slave_1: left promiscuous mode [ 242.452749][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.476911][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.669'. [ 242.496236][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'. [ 242.520395][ T7894] bridge_slave_0: left allmulticast mode [ 242.526087][ T7894] bridge_slave_0: left promiscuous mode [ 242.557922][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.559682][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 243.001890][ T8138] 9pnet_fd: Insufficient options for proto=fd [ 243.100922][ T8138] 9pnet_fd: Insufficient options for proto=fd [ 243.579412][ T8151] loop6: detected capacity change from 0 to 512 [ 243.590347][ T8151] EXT4-fs: Ignoring removed oldalloc option [ 243.686485][ T8151] EXT4-fs error (device loop6): ext4_xattr_inode_iget:435: comm syz.6.676: Parent and EA inode have the same ino 15 [ 243.704773][ T8151] EXT4-fs (loop6): Remounting filesystem read-only [ 243.712025][ T8151] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -5) [ 243.721578][ T8151] EXT4-fs (loop6): 1 orphan inode deleted [ 243.732900][ T8151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.860236][ T5838] Bluetooth: hci6: command tx timeout [ 244.198967][ T7894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.253432][ T7894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.308195][ T7894] bond0 (unregistering): Released all slaves [ 244.319056][ T6676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.329090][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.336725][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.345346][ T8063] bridge_slave_0: entered allmulticast mode [ 244.352612][ T8063] bridge_slave_0: entered promiscuous mode [ 244.360905][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.368019][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.389539][ T8063] bridge_slave_1: entered allmulticast mode [ 244.399604][ T8063] bridge_slave_1: entered promiscuous mode [ 244.462952][ T8131] geneve2: entered allmulticast mode [ 244.889365][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.933631][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.069226][ T8167] netlink: 80 bytes leftover after parsing attributes in process `syz.6.683'. [ 245.149855][ T5904] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 245.299835][ T7894] hsr_slave_0: left promiscuous mode [ 245.307308][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.328749][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.356240][ T5904] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 245.365676][ T7894] hsr_slave_1: left promiscuous mode [ 245.375928][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.393712][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.414426][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.442733][ T5904] usb 8-1: config 0 descriptor?? [ 245.479441][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.497846][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.572334][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.8.685'. [ 245.590163][ T7894] veth1_macvtap: left promiscuous mode [ 245.600281][ T7894] veth0_macvtap: left promiscuous mode [ 245.617794][ T7894] veth1_vlan: left promiscuous mode [ 245.638257][ T7894] veth0_vlan: left promiscuous mode [ 245.890006][ T5838] Bluetooth: hci6: command tx timeout [ 245.932900][ T5904] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 245.972563][ T5904] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 245.987822][ T5904] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 246.135422][ C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -32 [ 246.266259][ T5904] usb 8-1: USB disconnect, device number 3 [ 246.535399][ T8173] loop6: detected capacity change from 0 to 32768 [ 246.576022][ T8173] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 246.804049][ T8173] XFS (loop6): Ending clean mount [ 247.017063][ T7894] team0 (unregistering): Port device team_slave_1 removed [ 247.046458][ T6676] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.165648][ T7894] team0 (unregistering): Port device team_slave_0 removed [ 247.205150][ T8198] loop3: detected capacity change from 0 to 4096 [ 247.976018][ T5838] Bluetooth: hci6: command tx timeout [ 249.140643][ T8181] sch_tbf: burst 88 is lower than device veth1_vlan mtu (1514) ! [ 249.320304][ T8063] team0: Port device team_slave_0 added [ 249.393980][ T8063] team0: Port device team_slave_1 added [ 249.668681][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.688395][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.692798][ T8218] loop6: detected capacity change from 0 to 512 [ 249.753761][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.803322][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.810968][ T8218] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.692: casefold flag without casefold feature [ 249.819776][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.868449][ T8218] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.692: couldn't read orphan inode 15 (err -117) [ 249.909437][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.941312][ T8218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.003861][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.012525][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.037606][ T8218] bridge0: entered allmulticast mode [ 250.040625][ T8226] loop8: detected capacity change from 0 to 1024 [ 250.063559][ T8226] EXT4-fs: Ignoring removed orlov option [ 250.147094][ T8226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.223664][ T8218] bridge_slave_1: left allmulticast mode [ 250.229553][ T8218] bridge_slave_1: left promiscuous mode [ 250.241436][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.253676][ T8226] No control pipe specified [ 250.321798][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.8.695'. [ 250.342633][ T8218] bridge_slave_0: left allmulticast mode [ 250.352618][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.8.695'. [ 250.363642][ T8218] bridge_slave_0: left promiscuous mode [ 250.373202][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.434994][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 250.441964][ T5904] IPVS: starting estimator thread 0... [ 250.530010][ T8238] IPVS: using max 16 ests per chain, 38400 per kthread [ 250.561624][ T8063] hsr_slave_0: entered promiscuous mode [ 250.568178][ T8063] hsr_slave_1: entered promiscuous mode [ 250.580712][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.600563][ T8063] Cannot create hsr debugfs directory [ 250.641766][ T8235] geneve2: entered allmulticast mode [ 250.779459][ T6676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.862775][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.812264][ T8063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 251.881623][ T8063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 251.938713][ T8063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 252.000787][ T8063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 252.190871][ T8273] loop3: detected capacity change from 0 to 128 [ 252.242028][ T8273] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 252.290850][ T7352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.352685][ T8273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.368376][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.459312][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.569524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.576742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.625220][ T8245] loop7: detected capacity change from 0 to 32768 [ 252.638755][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.641311][ T8245] XFS: noikeep mount option is deprecated. [ 252.646049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.809428][ T8245] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.239362][ T8245] XFS (loop7): Ending clean mount [ 253.277996][ T8245] XFS (loop7): Quotacheck needed: Please wait. [ 253.387861][ T8245] XFS (loop7): Quotacheck: Done. [ 253.675845][ T7137] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.689035][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.538908][ T8331] loop7: detected capacity change from 0 to 1024 [ 254.579862][ T8331] EXT4-fs: Ignoring removed orlov option [ 254.694619][ T8334] loop8: detected capacity change from 0 to 512 [ 254.705561][ T8334] EXT4-fs: Ignoring removed oldalloc option [ 254.932543][ T8334] EXT4-fs error (device loop8): ext4_xattr_inode_iget:435: comm syz.8.718: Parent and EA inode have the same ino 15 [ 254.984000][ T8334] EXT4-fs (loop8): Remounting filesystem read-only [ 254.991340][ T8334] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -5) [ 255.000780][ T8334] EXT4-fs (loop8): 1 orphan inode deleted [ 255.012978][ T8334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.511931][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.520517][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.581271][ T8331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.599075][ T7352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.714392][ T8343] bridge_slave_1: left allmulticast mode [ 255.729948][ T8343] bridge_slave_1: left promiscuous mode [ 255.750015][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.785660][ T8331] No control pipe specified [ 255.809154][ T8343] bridge_slave_0: left allmulticast mode [ 255.859486][ T8343] bridge_slave_0: left promiscuous mode [ 255.875547][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.716'. [ 255.895680][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.923350][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.7.716'. [ 255.989224][ T5904] IPVS: starting estimator thread 0... [ 255.998232][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 256.079757][ T8353] IPVS: using max 17 ests per chain, 40800 per kthread [ 256.219907][ T8350] geneve2: entered allmulticast mode [ 256.341340][ T8063] veth0_vlan: entered promiscuous mode [ 256.450827][ T8063] veth1_vlan: entered promiscuous mode [ 257.005940][ T8063] veth0_macvtap: entered promiscuous mode [ 257.189554][ T8063] veth1_macvtap: entered promiscuous mode [ 257.538650][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.565547][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.598213][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.630625][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.661121][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.675180][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.695598][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.706592][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.717089][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.728107][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.749240][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.819540][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.885230][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.897100][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.907834][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.940127][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.967076][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.999370][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.023058][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.057999][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.091866][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.114898][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.190468][ T8063] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.219778][ T8063] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.228577][ T8063] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.264458][ T8063] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.532384][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.570798][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.659069][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.724054][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.774534][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.706905][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 264.049557][ T8463] loop9: detected capacity change from 0 to 512 [ 264.141317][ T8463] EXT4-fs (loop9): blocks per group (71) and clusters per group (32768) inconsistent [ 264.271810][ T8453] syz.7.751 (8453) used greatest stack depth: 20752 bytes left [ 265.610910][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.617600][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.238792][ T8484] loop6: detected capacity change from 0 to 1024 [ 266.351542][ T8484] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 267.270452][ T29] audit: type=1107 audit(1738635712.657:11): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 267.601187][ T8511] overlayfs: missing 'lowerdir' [ 268.055640][ T8529] loop9: detected capacity change from 0 to 128 [ 268.085906][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.772'. [ 268.304049][ T8531] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 269.767924][ T8549] netlink: 300 bytes leftover after parsing attributes in process `syz.6.778'. [ 271.207094][ T8566] loop8: detected capacity change from 0 to 2048 [ 271.482332][ T8566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.765866][ T8566] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 271.825980][ T8566] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 188 with error 28 [ 271.890395][ T8566] EXT4-fs (loop8): This should not happen!! Data will be lost [ 271.890395][ T8566] [ 271.915932][ T8576] netlink: 76 bytes leftover after parsing attributes in process `syz.7.785'. [ 271.949858][ T8566] EXT4-fs (loop8): Total free blocks count 0 [ 271.956011][ T8566] EXT4-fs (loop8): Free/Dirty block details [ 272.022870][ T8566] EXT4-fs (loop8): free_blocks=2415919104 [ 272.028686][ T8566] EXT4-fs (loop8): dirty_blocks=192 [ 272.056219][ T8566] EXT4-fs (loop8): Block reservation details [ 272.109938][ T8566] EXT4-fs (loop8): i_reserved_data_blocks=12 [ 272.274586][ T8339] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 272.976079][ T8562] loop9: detected capacity change from 0 to 32768 [ 273.030428][ T8562] XFS: ikeep mount option is deprecated. [ 273.065946][ T8619] netlink: 80 bytes leftover after parsing attributes in process `syz.6.794'. [ 273.190059][ T8562] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.497913][ T8607] loop8: detected capacity change from 0 to 32768 [ 273.515031][ T8562] XFS (loop9): Ending clean mount [ 273.576855][ T8607] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 273.586569][ T8562] XFS (loop9): Quotacheck needed: Please wait. [ 273.728898][ T8650] overlayfs: missing 'lowerdir' [ 273.769963][ T8562] XFS (loop9): Quotacheck: Done. [ 273.826664][ T8562] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.874468][ T8607] XFS (loop8): Starting recovery (logdev: internal) [ 274.140889][ T8607] XFS (loop8): Ending recovery (logdev: internal) [ 274.468645][ T7352] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.066225][ T8619] loop6: detected capacity change from 0 to 32768 [ 275.146401][ T8619] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.421276][ T8675] loop8: detected capacity change from 0 to 256 [ 275.490064][ T8675] FAT-fs (loop8): bogus number of FAT sectors [ 275.520328][ T8675] FAT-fs (loop8): Can't find a valid FAT filesystem [ 275.642694][ T8619] XFS (loop6): Ending clean mount [ 275.681566][ T8691] syz.9.804 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.704888][ T8692] loop7: detected capacity change from 0 to 512 [ 275.751608][ T8692] EXT4-fs (loop7): filesystem is read-only [ 275.758190][ T8691] bridge: RTM_NEWNEIGH with invalid ether address [ 275.789197][ T8692] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 275.897029][ T8692] EXT4-fs (loop7): filesystem is read-only [ 275.929904][ T8692] EXT4-fs (loop7): orphan cleanup on readonly fs [ 276.028143][ T8692] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.806: bg 0: block 64: padding at end of block bitmap is not set [ 276.162297][ T8692] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 276.212972][ T8692] EXT4-fs (loop7): 1 orphan inode deleted [ 276.282648][ T8692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 276.713825][ T6676] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.791021][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.667737][ T8755] loop3: detected capacity change from 0 to 2048 [ 278.855264][ T8764] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 278.890702][ T8755] Alternate GPT is invalid, using primary GPT. [ 278.924072][ T8755] loop3: p1 p2 p3 [ 279.116237][ T5899] udevd[5899]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 279.156629][ T6845] udevd[6845]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 279.216326][ T5957] udevd[5957]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 279.906878][ T8788] fuse: Unknown parameter '' [ 280.821033][ T8809] xt_hashlimit: size too large, truncated to 1048576 [ 281.038893][ T8811] loop3: detected capacity change from 0 to 512 [ 281.123422][ T8811] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 281.392314][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.847'. [ 281.809823][ T8830] wireguard0: entered promiscuous mode [ 281.916223][ T8830] wireguard0: entered allmulticast mode [ 283.252442][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 283.292200][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 283.354902][ T8855] loop9: detected capacity change from 0 to 128 [ 283.416429][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 283.431949][ T8855] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.445601][ T5959] IPVS: starting estimator thread 0... [ 283.455627][ T8852] geneve2: entered allmulticast mode [ 283.524984][ T8855] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.580240][ T8859] IPVS: using max 16 ests per chain, 38400 per kthread [ 283.822362][ T8063] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.929717][ T5904] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 284.091708][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.132089][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.183397][ T5904] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 284.269831][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.312758][ T5904] usb 8-1: config 0 descriptor?? [ 285.098259][ T5904] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 285.148328][ T5904] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 285.441003][ T5904] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 285.451688][ C1] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -32 [ 285.871513][ T5904] usb 8-1: USB disconnect, device number 4 [ 286.035749][ T8878] loop9: detected capacity change from 0 to 128 [ 286.076195][ T8878] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.172042][ T8878] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.567399][ T3564] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.723073][ T8922] loop7: detected capacity change from 0 to 1024 [ 287.793172][ T8922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.901431][ T8922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.073072][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.442155][ T8936] overlayfs: failed to resolve './file2': -2 [ 288.563512][ T8938] loop7: detected capacity change from 0 to 1024 [ 288.616605][ T8938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.262291][ T8955] loop9: detected capacity change from 0 to 512 [ 289.273369][ T8955] EXT4-fs: Ignoring removed oldalloc option [ 289.376971][ T8955] EXT4-fs error (device loop9): ext4_xattr_inode_iget:435: comm syz.9.885: Parent and EA inode have the same ino 15 [ 289.390999][ T8955] EXT4-fs (loop9): Remounting filesystem read-only [ 289.398092][ T8955] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -5) [ 289.407542][ T8955] EXT4-fs (loop9): 1 orphan inode deleted [ 289.419790][ T8955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.122999][ T8063] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.587445][ T8969] loop9: detected capacity change from 0 to 2048 [ 291.024820][ T8984] loop3: detected capacity change from 0 to 256 [ 291.124337][ T8933] loop8: detected capacity change from 0 to 32768 [ 291.588042][ T8933] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 291.824512][ T8933] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR [ 291.824757][ T8933] XFS (loop8): log mount failed [ 292.467838][ T9008] loop6: detected capacity change from 0 to 2048 [ 292.507309][ T9008] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.568262][ T9008] EXT4-fs: Ignoring removed i_version option [ 292.607701][ T9008] ext4: Unknown parameter 'euid>00000000000000000000' [ 292.944387][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.908'. [ 292.973097][ T9022] bridge_slave_1: left allmulticast mode [ 292.994449][ T9022] bridge_slave_1: left promiscuous mode [ 293.004991][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.103769][ T9022] bridge_slave_0: left allmulticast mode [ 293.127480][ T9022] bridge_slave_0: left promiscuous mode [ 293.137833][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.426395][ T9034] loop3: detected capacity change from 0 to 4096 [ 293.912668][ T9048] netlink: 'syz.9.914': attribute type 16 has an invalid length. [ 293.958120][ T9048] netlink: 'syz.9.914': attribute type 17 has an invalid length. [ 294.174335][ T9048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.413591][ T9059] loop7: detected capacity change from 0 to 512 [ 294.450731][ T9059] ext4: Unknown parameter 'noacl' [ 294.641187][ T9066] netlink: 80 bytes leftover after parsing attributes in process `syz.5.919'. [ 296.302393][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.935'. [ 296.523097][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.8.937'. [ 296.552577][ T9119] loop3: detected capacity change from 0 to 164 [ 296.640451][ T9066] loop5: detected capacity change from 0 to 32768 [ 296.667800][ T9119] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 296.755198][ T9066] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.436743][ T9066] XFS (loop5): Ending clean mount [ 297.702792][ T5837] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.948544][ T9149] loop3: detected capacity change from 0 to 4096 [ 298.383435][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 298.389859][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 299.949492][ T9175] devpts: called with bogus options [ 301.078479][ T9216] loop7: detected capacity change from 0 to 1024 [ 301.147673][ T9216] EXT4-fs: Ignoring removed orlov option [ 301.210223][ T9216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.892907][ T9216] No control pipe specified [ 302.035370][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.962'. [ 302.137769][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.962'. [ 302.454371][ T9243] loop3: detected capacity change from 0 to 512 [ 302.506767][ T9243] EXT4-fs: Ignoring removed bh option [ 302.571459][ T9243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.670795][ T9243] EXT4-fs (loop3): 1 orphan inode deleted [ 302.679751][ T9243] EXT4-fs (loop3): 1 truncate cleaned up [ 302.728520][ T9243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.888476][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.970'. [ 303.005072][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.603174][ T7137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.898047][ T9337] loop9: detected capacity change from 0 to 8192 [ 307.710672][ T9395] loop5: detected capacity change from 0 to 65536 [ 307.780017][ T9395] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 307.836185][ T9395] XFS (loop5): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x152/0x200 [ 307.852334][ T9395] CPU: 0 UID: 0 PID: 9395 Comm: syz.5.1009 Not tainted 6.14.0-rc1-syzkaller #0 [ 307.852377][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.852400][ T9395] Call Trace: [ 307.852410][ T9395] [ 307.852424][ T9395] dump_stack_lvl+0x16c/0x1f0 [ 307.852473][ T9395] xfs_corruption_error+0x12f/0x150 [ 307.852535][ T9395] ? xlog_alloc_buffer+0x152/0x200 [ 307.852594][ T9395] xlog_alloc_buffer+0x199/0x200 [ 307.852642][ T9395] ? xlog_alloc_buffer+0x152/0x200 [ 307.852696][ T9395] xlog_do_recovery_pass+0x379/0xd70 [ 307.852772][ T9395] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 307.852832][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.852897][ T9395] ? mark_held_locks+0x9f/0xe0 [ 307.852985][ T9395] xlog_verify_head+0x193/0x530 [ 307.853054][ T9395] ? __pfx_xlog_verify_head+0x10/0x10 [ 307.853112][ T9395] ? __entry_text_end+0x1020c5/0x1020c9 [ 307.853175][ T9395] ? xlog_check_unmount_rec+0x1fd/0x550 [ 307.853233][ T9395] ? __pfx_xlog_check_unmount_rec+0x10/0x10 [ 307.853291][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.853355][ T9395] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 307.853419][ T9395] xlog_find_tail+0x85d/0xf00 [ 307.853491][ T9395] ? __pfx_xlog_find_tail+0x10/0x10 [ 307.853553][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.853616][ T9395] ? mark_held_locks+0x9f/0xe0 [ 307.853674][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.853738][ T9395] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.853780][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.853843][ T9395] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.853890][ T9395] xlog_recover+0x8f/0x4e0 [ 307.853948][ T9395] ? __pfx_xlog_recover+0x10/0x10 [ 307.854029][ T9395] xfs_log_mount+0x234/0x460 [ 307.854074][ T9395] xfs_mountfs+0x12cc/0x2300 [ 307.854145][ T9395] ? __pfx_xfs_mountfs+0x10/0x10 [ 307.854202][ T9395] ? do_init_timer+0xc9/0x110 [ 307.854250][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.854314][ T9395] ? xfs_mru_cache_create+0x4be/0x5d0 [ 307.854373][ T9395] ? __pfx_xfs_fstrm_free_func+0x10/0x10 [ 307.854429][ T9395] xfs_fs_fill_super+0x1554/0x1f10 [ 307.854487][ T9395] get_tree_bdev_flags+0x38e/0x620 [ 307.854541][ T9395] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 307.854592][ T9395] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 307.854650][ T9395] ? apparmor_capable+0x114/0x1d0 [ 307.854691][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.854754][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.854818][ T9395] ? security_capable+0x7e/0x260 [ 307.854887][ T9395] vfs_get_tree+0x8e/0x340 [ 307.854933][ T9395] path_mount+0x14e6/0x1f10 [ 307.854998][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.855070][ T9395] ? kmem_cache_free+0x2e2/0x4d0 [ 307.855128][ T9395] ? __pfx_path_mount+0x10/0x10 [ 307.855197][ T9395] ? srso_alias_return_thunk+0x5/0xfbef5 [ 307.855260][ T9395] ? putname+0x13c/0x180 [ 307.855304][ T9395] __x64_sys_mount+0x28f/0x310 [ 307.855368][ T9395] ? __pfx___x64_sys_mount+0x10/0x10 [ 307.855433][ T9395] ? do_user_addr_fault+0x83d/0x13f0 [ 307.855498][ T9395] do_syscall_64+0xcd/0x250 [ 307.855570][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.855627][ T9395] RIP: 0033:0x7feae3b8e54a [ 307.855656][ T9395] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.855695][ T9395] RSP: 002b:00007feae19f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.855730][ T9395] RAX: ffffffffffffffda RBX: 00007feae19f5ef0 RCX: 00007feae3b8e54a [ 307.855756][ T9395] RDX: 0000000020000800 RSI: 0000000020000000 RDI: 00007feae19f5eb0 [ 307.855781][ T9395] RBP: 0000000020000800 R08: 00007feae19f5ef0 R09: 0000000003000010 [ 307.855806][ T9395] R10: 0000000003000010 R11: 0000000000000246 R12: 0000000020000000 [ 307.855830][ T9395] R13: 00007feae19f5eb0 R14: 000000000000b967 R15: 00000000200002c0 [ 307.855878][ T9395] [ 307.855891][ T9395] XFS (loop5): Corruption detected. Unmount and run xfs_repair [ 308.246013][ T9395] XFS (loop5): Invalid block length (0x20040) for buffer [ 308.254124][ T9395] XFS (loop5): failed to locate log tail [ 308.260317][ T9395] XFS (loop5): log mount/recovery failed: error -12 [ 308.279586][ T9395] XFS (loop5): log mount failed [ 308.344529][ T9414] loop7: detected capacity change from 0 to 2048 [ 308.539688][ T9414] EXT4-fs error (device loop7): __ext4_fill_super:5497: inode #2: comm syz.7.1014: casefold flag without casefold feature [ 308.697070][ T9414] EXT4-fs (loop7): get root inode failed [ 308.739702][ T9414] EXT4-fs (loop7): mount failed [ 311.285734][ T9469] loop8: detected capacity change from 0 to 65536 [ 311.303389][ T9469] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 311.306685][ T9475] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 311.360062][ T9475] syzkaller0: entered promiscuous mode [ 311.387963][ T9475] syzkaller0: entered allmulticast mode [ 311.497726][ T9469] XFS (loop8): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x152/0x200 [ 311.512757][ T9469] CPU: 1 UID: 0 PID: 9469 Comm: syz.8.1035 Not tainted 6.14.0-rc1-syzkaller #0 [ 311.512805][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.512827][ T9469] Call Trace: [ 311.512837][ T9469] [ 311.512851][ T9469] dump_stack_lvl+0x16c/0x1f0 [ 311.512899][ T9469] xfs_corruption_error+0x12f/0x150 [ 311.512958][ T9469] ? xlog_alloc_buffer+0x152/0x200 [ 311.513015][ T9469] xlog_alloc_buffer+0x199/0x200 [ 311.513061][ T9469] ? xlog_alloc_buffer+0x152/0x200 [ 311.513105][ T9469] xlog_do_recovery_pass+0x379/0xd70 [ 311.513174][ T9469] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 311.513233][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.513296][ T9469] ? mark_held_locks+0x9f/0xe0 [ 311.513381][ T9469] xlog_verify_head+0x193/0x530 [ 311.513442][ T9469] ? __pfx_xlog_verify_head+0x10/0x10 [ 311.513499][ T9469] ? __entry_text_end+0x1020c5/0x1020c9 [ 311.513560][ T9469] ? xlog_check_unmount_rec+0x1fd/0x550 [ 311.513618][ T9469] ? __pfx_xlog_check_unmount_rec+0x10/0x10 [ 311.513674][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.513737][ T9469] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 311.513808][ T9469] xlog_find_tail+0x85d/0xf00 [ 311.513878][ T9469] ? __pfx_xlog_find_tail+0x10/0x10 [ 311.513940][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.514003][ T9469] ? mark_held_locks+0x9f/0xe0 [ 311.514060][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.514122][ T9469] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.514164][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.514226][ T9469] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.514272][ T9469] xlog_recover+0x8f/0x4e0 [ 311.514329][ T9469] ? __pfx_xlog_recover+0x10/0x10 [ 311.514404][ T9469] xfs_log_mount+0x234/0x460 [ 311.514448][ T9469] xfs_mountfs+0x12cc/0x2300 [ 311.514517][ T9469] ? __pfx_xfs_mountfs+0x10/0x10 [ 311.514572][ T9469] ? do_init_timer+0xc9/0x110 [ 311.514619][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.514681][ T9469] ? xfs_mru_cache_create+0x4be/0x5d0 [ 311.514739][ T9469] ? __pfx_xfs_fstrm_free_func+0x10/0x10 [ 311.514815][ T9469] xfs_fs_fill_super+0x1554/0x1f10 [ 311.514872][ T9469] get_tree_bdev_flags+0x38e/0x620 [ 311.514926][ T9469] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 311.514976][ T9469] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 311.515033][ T9469] ? apparmor_capable+0x114/0x1d0 [ 311.515073][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.515136][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.515197][ T9469] ? security_capable+0x7e/0x260 [ 311.515265][ T9469] vfs_get_tree+0x8e/0x340 [ 311.515310][ T9469] path_mount+0x14e6/0x1f10 [ 311.515373][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.515436][ T9469] ? kmem_cache_free+0x2e2/0x4d0 [ 311.515494][ T9469] ? __pfx_path_mount+0x10/0x10 [ 311.515579][ T9469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.515641][ T9469] ? putname+0x13c/0x180 [ 311.515684][ T9469] __x64_sys_mount+0x28f/0x310 [ 311.515747][ T9469] ? __pfx___x64_sys_mount+0x10/0x10 [ 311.515815][ T9469] ? do_user_addr_fault+0x83d/0x13f0 [ 311.515880][ T9469] do_syscall_64+0xcd/0x250 [ 311.515930][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.515985][ T9469] RIP: 0033:0x7faae978e54a [ 311.516013][ T9469] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.516050][ T9469] RSP: 002b:00007faaea515e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.516084][ T9469] RAX: ffffffffffffffda RBX: 00007faaea515ef0 RCX: 00007faae978e54a [ 311.516110][ T9469] RDX: 0000000020000800 RSI: 0000000020000000 RDI: 00007faaea515eb0 [ 311.516135][ T9469] RBP: 0000000020000800 R08: 00007faaea515ef0 R09: 0000000003000010 [ 311.516160][ T9469] R10: 0000000003000010 R11: 0000000000000246 R12: 0000000020000000 [ 311.516184][ T9469] R13: 00007faaea515eb0 R14: 000000000000b967 R15: 00000000200002c0 [ 311.516231][ T9469] [ 311.516245][ T9469] XFS (loop8): Corruption detected. Unmount and run xfs_repair [ 311.917455][ T9469] XFS (loop8): Invalid block length (0x20040) for buffer [ 311.925764][ T9469] XFS (loop8): failed to locate log tail [ 311.931792][ T9469] XFS (loop8): log mount/recovery failed: error -12 [ 311.948241][ T9469] XFS (loop8): log mount failed [ 313.073187][ T9524] loop9: detected capacity change from 0 to 256 [ 313.240536][ T9521] loop7: detected capacity change from 0 to 2048 [ 313.339992][ T9521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.477850][ T9521] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 313.490683][ T9521] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 313.499128][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.7.1052 Not tainted 6.14.0-rc1-syzkaller #0 [ 313.508095][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.518172][ T9521] RIP: 0010:d_splice_alias+0x9cd/0xf30 [ 313.523673][ T9521] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4e 05 00 00 49 8b 85 70 ff ff ff 48 ba 00 00 00 00 00 fc ff df 48 8d 78 68 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 14 05 00 00 48 8b 40 68 48 85 c0 74 31 48 89 44 [ 313.543327][ T9521] RSP: 0018:ffffc900030b76e8 EFLAGS: 00010212 [ 313.549429][ T9521] RAX: 0000000000000000 RBX: ffff888056fbc000 RCX: 000000000000000d [ 313.557423][ T9521] RDX: dffffc0000000000 RSI: ffffffff8234b06c RDI: 0000000000000068 [ 313.565424][ T9521] RBP: ffff88804b581478 R08: 0000000000000000 R09: ffffed1009691902 [ 313.573433][ T9521] R10: ffff88804b48c813 R11: 0000000000000099 R12: ffff88804b48c758 [ 313.581531][ T9521] R13: ffff888056fbc708 R14: ffff888056fbc5e0 R15: ffff888056fbc678 [ 313.589529][ T9521] FS: 00007fe442a806c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 313.598491][ T9521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.605108][ T9521] CR2: 0000000000000000 CR3: 0000000034204000 CR4: 0000000000350ef0 [ 313.613111][ T9521] Call Trace: [ 313.616409][ T9521] [ 313.619357][ T9521] ? die_addr+0x3b/0xa0 [ 313.623571][ T9521] ? exc_general_protection+0x155/0x230 [ 313.629171][ T9521] ? asm_exc_general_protection+0x26/0x30 [ 313.634944][ T9521] ? d_splice_alias+0x98c/0xf30 [ 313.639831][ T9521] ? d_splice_alias+0x9cd/0xf30 [ 313.644723][ T9521] ? d_splice_alias+0x98c/0xf30 [ 313.649622][ T9521] udf_lookup+0x191/0x240 [ 313.654011][ T9521] ? __pfx_udf_lookup+0x10/0x10 [ 313.658925][ T9521] ? find_held_lock+0x2d/0x110 [ 313.663720][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.669405][ T9521] ? lockdep_init_map_type+0x16d/0x7d0 [ 313.674917][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.680626][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.686406][ T9521] __lookup_slow+0x252/0x470 [ 313.691042][ T9521] ? __pfx___lookup_slow+0x10/0x10 [ 313.696205][ T9521] ? walk_component+0x342/0x5b0 [ 313.701106][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.706801][ T9521] ? lookup_fast+0x153/0x5f0 [ 313.711441][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.717137][ T9521] walk_component+0x350/0x5b0 [ 313.721870][ T9521] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 313.728254][ T9521] path_parentat+0xaa/0x1b0 [ 313.730940][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 313.732784][ T9521] __filename_parentat+0x22d/0x680 [ 313.743912][ T9521] ? __pfx___filename_parentat+0x10/0x10 [ 313.749695][ T9521] ? __pfx_stack_trace_save+0x10/0x10 [ 313.755132][ T9521] do_renameat2+0x25a/0xdd0 [ 313.759704][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.765396][ T9521] ? __pfx_do_renameat2+0x10/0x10 [ 313.770475][ T9521] ? lock_acquire+0x2f/0xb0 [ 313.775119][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.780806][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.786492][ T9521] ? __phys_addr_symbol+0x30/0x80 [ 313.791547][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.797250][ T9521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.802938][ T9521] ? getname_flags.part.0+0x1c5/0x550 [ 313.808443][ T9521] __x64_sys_rename+0x7d/0xa0 [ 313.813149][ T9521] do_syscall_64+0xcd/0x250 [ 313.817690][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.823664][ T9521] RIP: 0033:0x7fe441b8cda9 [ 313.828101][ T9521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.847768][ T9521] RSP: 002b:00007fe442a80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 313.856214][ T9521] RAX: ffffffffffffffda RBX: 00007fe441da5fa0 RCX: 00007fe441b8cda9 [ 313.864384][ T9521] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 313.872381][ T9521] RBP: 00007fe441c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.880381][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.888373][ T9521] R13: 0000000000000000 R14: 00007fe441da5fa0 R15: 00007ffce43851b8 [ 313.896378][ T9521] [ 313.899408][ T9521] Modules linked in: [ 313.905012][ T9521] ---[ end trace 0000000000000000 ]--- [ 313.911700][ T9521] RIP: 0010:d_splice_alias+0x9cd/0xf30 [ 313.917228][ T9521] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4e 05 00 00 49 8b 85 70 ff ff ff 48 ba 00 00 00 00 00 fc ff df 48 8d 78 68 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 14 05 00 00 48 8b 40 68 48 85 c0 74 31 48 89 44 [ 313.937125][ T9521] RSP: 0018:ffffc900030b76e8 EFLAGS: 00010212 [ 313.943285][ T9521] RAX: 0000000000000000 RBX: ffff888056fbc000 RCX: 000000000000000d [ 313.951570][ T9521] RDX: dffffc0000000000 RSI: ffffffff8234b06c RDI: 0000000000000068 [ 313.959567][ T9521] RBP: ffff88804b581478 R08: 0000000000000000 R09: ffffed1009691902 [ 313.967611][ T9521] R10: ffff88804b48c813 R11: 0000000000000099 R12: ffff88804b48c758 [ 313.975648][ T9521] R13: ffff888056fbc708 R14: ffff888056fbc5e0 R15: ffff888056fbc678 [ 313.983678][ T9521] FS: 00007fe442a806c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 313.992691][ T9521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.999306][ T9521] CR2: 0000000000000000 CR3: 0000000034204000 CR4: 0000000000350ef0 [ 314.008492][ T9521] Kernel panic - not syncing: Fatal exception [ 314.014832][ T9521] Kernel Offset: disabled [ 314.019158][ T9521] Rebooting in 86400 seconds..