last executing test programs: 3.271822684s ago: executing program 4 (id=541): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4810, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x1, 0x69f, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20201, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8000) 3.164809792s ago: executing program 4 (id=544): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f00000032c0)=""/4096}, 0x20) 3.090162216s ago: executing program 4 (id=546): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(r0, &(0x7f0000000540)) 3.038346482s ago: executing program 4 (id=548): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x18}}, 0x2000c010) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 2.555763573s ago: executing program 0 (id=556): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.087193337s ago: executing program 3 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000030000000100000000000000000000000000c1ac64"]) 2.079564768s ago: executing program 1 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) 1.966488367s ago: executing program 1 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1}, 0x38) 1.77926667s ago: executing program 1 (id=563): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 1.740705808s ago: executing program 2 (id=564): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.74001969s ago: executing program 3 (id=565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r2, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 1.680649471s ago: executing program 4 (id=566): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@block_mode}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') 1.6427499s ago: executing program 3 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x2) 1.557045489s ago: executing program 3 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x8}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) 1.116992007s ago: executing program 2 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.116779248s ago: executing program 3 (id=570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d40be1f9bbc5dce7d9677609da65fc63fa9362b358f2360d2d1d63b2fa4f85afb207f1f80543393663468bbb5daac7e22302d14cb154c5a1", 0x38}], 0x1}}], 0x1, 0x0) 1.021394138s ago: executing program 3 (id=571): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000480)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 876.304746ms ago: executing program 0 (id=572): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xac, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 768.496334ms ago: executing program 0 (id=573): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000005bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="c802000000000000", @ANYRES8=r1], 0x2c8) 736.594304ms ago: executing program 2 (id=574): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)="88", 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000140), 0x4) 577.575013ms ago: executing program 1 (id=575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000300000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) 577.136608ms ago: executing program 2 (id=576): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 515.981087ms ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 515.221487ms ago: executing program 4 (id=578): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 250.747052ms ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008009776b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000008f5d00850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0x5) 182.743072ms ago: executing program 2 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) 142.99296ms ago: executing program 1 (id=581): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000000), 0x5}, 0x0) 97.673159ms ago: executing program 1 (id=582): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) 51.758124ms ago: executing program 2 (id=583): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@background_gc_off}, {@noextent_cache}, {@compress_cache}, {@lfs_mode}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x3000}], 0x1, 0x7800, 0x0, 0x3) 0s ago: executing program 0 (id=584): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="039b070000"]) kernel console output (not intermixed with test programs): already present! [ 53.561924][ T5236] Cannot create hsr debugfs directory [ 53.577463][ T5251] hsr_slave_0: entered promiscuous mode [ 53.583784][ T5251] hsr_slave_1: entered promiscuous mode [ 53.589911][ T5251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.597667][ T5251] Cannot create hsr debugfs directory [ 53.605260][ T5246] Bluetooth: hci2: command tx timeout [ 53.610647][ T5249] Bluetooth: hci3: command tx timeout [ 53.610907][ T5246] Bluetooth: hci1: command tx timeout [ 53.639799][ T5244] hsr_slave_0: entered promiscuous mode [ 53.647339][ T5244] hsr_slave_1: entered promiscuous mode [ 53.654795][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.662432][ T5244] Cannot create hsr debugfs directory [ 53.681738][ T5246] Bluetooth: hci4: command tx timeout [ 53.719301][ T5243] hsr_slave_0: entered promiscuous mode [ 53.726206][ T5243] hsr_slave_1: entered promiscuous mode [ 53.732743][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.740304][ T5243] Cannot create hsr debugfs directory [ 53.894688][ T5235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.925286][ T5235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.935663][ T5235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.963045][ T5235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.043487][ T5251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.052366][ T5251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.069855][ T5251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.079200][ T5251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.149299][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.159919][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.176008][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.185627][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.282392][ T5243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.294412][ T5243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.307435][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.318295][ T5243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.329698][ T5243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.376322][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.389338][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.416288][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.440257][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.450223][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.461496][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.484351][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.504647][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.512051][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.528098][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.540387][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.547500][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.556554][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.563672][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.606637][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.613763][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.644125][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.710601][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.758139][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.765283][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.775525][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.782662][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.819437][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.906961][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.937190][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.974802][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.995921][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.003073][ T2536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.025462][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.032606][ T2536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.059052][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.084679][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.091826][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.113831][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.120926][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.195855][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.229636][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.275193][ T5244] veth0_vlan: entered promiscuous mode [ 55.334971][ T5244] veth1_vlan: entered promiscuous mode [ 55.429455][ T5244] veth0_macvtap: entered promiscuous mode [ 55.455046][ T5244] veth1_macvtap: entered promiscuous mode [ 55.480598][ T5251] veth0_vlan: entered promiscuous mode [ 55.533962][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.542593][ T5251] veth1_vlan: entered promiscuous mode [ 55.602023][ T5246] Bluetooth: hci0: command tx timeout [ 55.606042][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.627431][ T5251] veth0_macvtap: entered promiscuous mode [ 55.647178][ T5235] veth0_vlan: entered promiscuous mode [ 55.661106][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.670773][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.681975][ T5246] Bluetooth: hci3: command tx timeout [ 55.683199][ T5239] Bluetooth: hci2: command tx timeout [ 55.687370][ T5246] Bluetooth: hci1: command tx timeout [ 55.703527][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.714335][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725319][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.742698][ T5251] veth1_macvtap: entered promiscuous mode [ 55.754451][ T5235] veth1_vlan: entered promiscuous mode [ 55.761844][ T5246] Bluetooth: hci4: command tx timeout [ 55.782936][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.794446][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.806186][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.839363][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.850459][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.865542][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.876641][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.899670][ T5251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.908558][ T5251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.918342][ T5251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.928621][ T5251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.949922][ T5243] veth0_vlan: entered promiscuous mode [ 55.976015][ T5243] veth1_vlan: entered promiscuous mode [ 56.007703][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.018929][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.065049][ T5235] veth0_macvtap: entered promiscuous mode [ 56.086492][ T5236] veth0_vlan: entered promiscuous mode [ 56.107762][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.108017][ T5235] veth1_macvtap: entered promiscuous mode [ 56.128695][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.166101][ T928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.186913][ T5236] veth1_vlan: entered promiscuous mode [ 56.195166][ T928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.208502][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.220185][ T5244] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.231462][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.246229][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.257306][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.270033][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.286156][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.296706][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.306652][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.317230][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.328332][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.366255][ T5235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.376845][ T5235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.386152][ T5235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.395429][ T5235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.412819][ T5243] veth0_macvtap: entered promiscuous mode [ 56.433034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.446141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.463098][ T5243] veth1_macvtap: entered promiscuous mode [ 56.538177][ T5236] veth0_macvtap: entered promiscuous mode [ 56.590121][ T5236] veth1_macvtap: entered promiscuous mode [ 56.617110][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.629971][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.644704][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.655459][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.665830][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.676665][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.694127][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.706397][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.717105][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.728947][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.740217][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.750444][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.760979][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.772643][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.797648][ T5243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.814058][ T5243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.823669][ T5243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841031][ T5243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.851749][ T5290] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.876917][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.897745][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.951031][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.964048][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.974276][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.984985][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.994887][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.005498][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.015615][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.021503][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 57.026262][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.040611][ T5290] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 57.046416][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.074535][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.077260][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.101713][ T5290] usb 1-1: config 0 descriptor?? [ 57.116342][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.137274][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.141905][ T5290] gspca_main: sunplus-2.14.0 probing 041e:400b [ 57.164481][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.177956][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.182651][ T29] audit: type=1326 audit(1728638076.947:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.3.10" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460377dff9 code=0x0 [ 57.190526][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.221111][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.232038][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.241919][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.253622][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.265681][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.309396][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.320500][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.330235][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.341597][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.377342][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.390226][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.459926][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.481021][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.539851][ T928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.576452][ T928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.629307][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.676711][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.692782][ T5246] Bluetooth: hci0: command tx timeout [ 57.762170][ T5246] Bluetooth: hci2: command tx timeout [ 57.767893][ T5246] Bluetooth: hci3: command tx timeout [ 57.770984][ T5239] Bluetooth: hci1: command tx timeout [ 57.779440][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 57.851874][ T5239] Bluetooth: hci4: command tx timeout [ 57.940502][ T5290] gspca_sunplus: reg_w_riv err -71 [ 57.947245][ T5290] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 57.968976][ T5290] usb 1-1: USB disconnect, device number 2 [ 58.187707][ T5360] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.290563][ T5367] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 58.321184][ T5367] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 58.647787][ T5383] Falling back ldisc for ptm0. [ 58.713678][ T5385] loop0: detected capacity change from 0 to 8 [ 58.724232][ T5385] ======================================================= [ 58.724232][ T5385] WARNING: The mand mount option has been deprecated and [ 58.724232][ T5385] and is ignored by this kernel. Remove the mand [ 58.724232][ T5385] option from the mount to silence this warning. [ 58.724232][ T5385] ======================================================= [ 58.849515][ T5379] loop4: detected capacity change from 0 to 4096 [ 58.857750][ T5385] SQUASHFS error: Unable to read directory block [6aa:9] [ 58.899795][ T5379] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 59.069196][ T5393] loop3: detected capacity change from 0 to 2048 [ 59.137768][ T5393] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.161893][ T5393] NILFS (loop3): mounting unchecked fs [ 59.207111][ T5253] udevd[5253]: incorrect nilfs2 checksum on /dev/loop3 [ 59.236434][ T5393] NILFS (loop3): recovery complete [ 59.266492][ T5404] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.441912][ T5338] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 59.645459][ T5338] usb 1-1: Using ep0 maxpacket: 16 [ 59.765253][ T5239] Bluetooth: hci0: command tx timeout [ 59.841577][ T5239] Bluetooth: hci1: command tx timeout [ 59.852607][ T5239] Bluetooth: hci3: command tx timeout [ 59.858039][ T5239] Bluetooth: hci2: command tx timeout [ 59.921805][ T5249] Bluetooth: hci4: command tx timeout [ 59.991495][ T5322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.156056][ T5322] usb 4-1: Using ep0 maxpacket: 16 [ 60.173627][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.216248][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 60.266616][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 60.303958][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 60.350764][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.387121][ T5322] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 60.404090][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.449319][ T5322] usb 4-1: Product: syz [ 60.463097][ T5322] usb 4-1: Manufacturer: syz [ 60.477498][ T5322] usb 4-1: SerialNumber: syz [ 60.518530][ T5322] usb 4-1: config 0 descriptor?? [ 60.842045][ T5322] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 60.922066][ T5322] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 60.970776][ T5338] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 61.110131][ T5426] loop1: detected capacity change from 0 to 512 [ 61.134293][ T5322] usb 4-1: USB disconnect, device number 2 [ 61.286788][ T5426] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.44: attempt to clear invalid blocks 2 len 1 [ 61.308209][ T5426] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 61.331320][ T5426] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 1819239214 (level 0) [ 61.357658][ T5426] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 1819239214 (level 1) [ 61.386632][ T5426] EXT4-fs (loop1): 1 truncate cleaned up [ 61.399176][ T5426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.525673][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.784621][ T5449] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 62.847730][ T5449] team0: Device hsr_slave_0 failed to register rx_handler [ 63.232905][ T5322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.421814][ T5322] usb 2-1: Using ep0 maxpacket: 32 [ 63.461132][ T5322] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=95.5e [ 63.490625][ T5322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.530937][ T5322] usb 2-1: Product: syz [ 63.555586][ T5322] usb 2-1: Manufacturer: syz [ 63.560219][ T5322] usb 2-1: SerialNumber: syz [ 63.593518][ T5322] usb 2-1: config 0 descriptor?? [ 64.027493][ T5452] loop3: detected capacity change from 0 to 32768 [ 64.042222][ T5322] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 64.086890][ T5452] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.55 (5452) [ 64.216962][ T5452] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 64.301694][ T5452] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 64.341016][ T5452] BTRFS info (device loop3): disk space caching is enabled [ 64.364009][ T5452] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 64.448410][ T5322] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 64.521791][ T5322] usb 2-1: USB disconnect, device number 2 [ 64.680139][ T5462] loop4: detected capacity change from 0 to 32768 [ 64.693777][ T5462] XFS: attr2 mount option is deprecated. [ 64.710118][ T5462] XFS: ikeep mount option is deprecated. [ 64.742596][ T5462] XFS: noikeep mount option is deprecated. [ 65.050586][ T5462] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 65.217737][ T5452] BTRFS info (device loop3): rebuilding free space tree [ 65.284970][ T5462] XFS (loop4): Ending clean mount [ 65.326276][ T5462] XFS (loop4): Quotacheck needed: Please wait. [ 65.358018][ T5452] BTRFS info (device loop3): disabling free space tree [ 65.397658][ T5452] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.454523][ T5462] XFS (loop4): Quotacheck: Done. [ 65.459718][ T5452] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.645060][ T5338] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 65.671472][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.700745][ T5338] usb 1-1: config 0 descriptor?? [ 65.709530][ T5338] usb 1-1: can't set config #0, error -71 [ 65.726294][ T5338] usb 1-1: USB disconnect, device number 3 [ 65.742337][ T5235] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 65.922697][ T5244] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 66.142873][ T5338] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 66.158562][ T5483] loop1: detected capacity change from 0 to 32768 [ 66.250240][ T5495] Bluetooth: MGMT ver 1.23 [ 66.417146][ T5483] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 66.446132][ T5507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.504334][ T5503] loop0: detected capacity change from 0 to 1024 [ 66.516187][ T5511] loop4: detected capacity change from 0 to 22 [ 66.523206][ T5511] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 66.537305][ T5511] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 66.839196][ T12] hfsplus: b-tree write err: -5, ino 8 [ 66.851106][ T5483] XFS (loop1): Ending clean mount [ 66.883332][ T5483] XFS (loop1): Quotacheck needed: Please wait. [ 67.055611][ T5483] XFS (loop1): Quotacheck: Done. [ 67.108339][ T5527] loop4: detected capacity change from 0 to 1024 [ 67.232849][ T5236] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.338506][ T5529] loop4: detected capacity change from 0 to 256 [ 67.374770][ T5529] exfat: Bad value for 'uid' [ 67.386646][ T5529] exfat: Bad value for 'uid' [ 67.392489][ T5338] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.557647][ T5338] usb 1-1: Using ep0 maxpacket: 32 [ 67.570485][ T5338] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.578630][ T5338] usb 1-1: config 0 has no interface number 0 [ 67.591735][ T5338] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.613909][ T5338] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.641490][ T5338] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 67.652816][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.674472][ T5338] usb 1-1: config 0 descriptor?? [ 68.103496][ T5543] loop3: detected capacity change from 0 to 512 [ 68.141029][ T5543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.358875][ T5338] uclogic 0003:28BD:0094.0001: pen parameters not found [ 68.372185][ T5338] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 68.392472][ T5338] usb 1-1: USB disconnect, device number 5 [ 68.516857][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.539823][ T5543] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.732673][ T5244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.479305][ T5539] loop4: detected capacity change from 0 to 32768 [ 69.673432][ T5548] loop1: detected capacity change from 0 to 40427 [ 69.721164][ T5548] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.752393][ T5548] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.843978][ T5548] F2FS-fs (loop1): invalid crc value [ 69.944503][ T5539] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 70.089482][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.100645][ T5548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.125112][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.156849][ T5338] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.167944][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.197991][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.198761][ T5548] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 70.212308][ T5548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.233260][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.247335][ T5235] ocfs2: Unmounting device (7,4) on (node local) [ 70.264087][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.341472][ T5338] usb 4-1: Using ep0 maxpacket: 16 [ 70.348273][ T5338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.359617][ T5338] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 70.368917][ T5338] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 70.377418][ T5338] usb 4-1: Product: syz [ 70.382071][ T5338] usb 4-1: Manufacturer: syz [ 70.386899][ T5338] usb 4-1: SerialNumber: syz [ 70.393833][ T5338] usb 4-1: config 0 descriptor?? [ 70.642814][ T5556] loop3: detected capacity change from 0 to 16 [ 70.681705][ T5556] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.695329][ T5338] usb 4-1: selecting invalid altsetting 1 [ 70.805710][ T5338] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 70.847851][ T5338] usb 4-1: USB disconnect, device number 3 [ 70.907901][ T5557] loop0: detected capacity change from 0 to 40427 [ 70.938886][ T5557] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 70.951513][ T5557] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 70.972151][ T5253] udevd[5253]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.036073][ T5557] F2FS-fs (loop0): invalid crc value [ 71.108371][ T5557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.143070][ T5564] chnl_net:caif_netlink_parms(): no params data found [ 71.306527][ T5557] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.314065][ T5557] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.524150][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.546595][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.647170][ T5251] syz-executor: attempt to access beyond end of device [ 71.647170][ T5251] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 71.679080][ T5251] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 71.700701][ T5251] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 72.045429][ T5583] loop4: detected capacity change from 0 to 32768 [ 72.095326][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.117799][ T5583] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.92 (5583) [ 72.149519][ T5564] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.150770][ T5583] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 72.176401][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.180759][ T5583] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 72.192411][ T5583] BTRFS info (device loop4): using free-space-tree [ 72.216635][ T5564] bridge_slave_0: entered allmulticast mode [ 72.239813][ T5564] bridge_slave_0: entered promiscuous mode [ 72.260036][ T5564] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.274204][ T5564] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.283274][ T5564] bridge_slave_1: entered allmulticast mode [ 72.291399][ T5564] bridge_slave_1: entered promiscuous mode [ 72.419946][ T5239] Bluetooth: hci5: command tx timeout [ 72.689842][ T5625] loop1: detected capacity change from 0 to 512 [ 72.727361][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.760130][ T5630] loop0: detected capacity change from 0 to 1024 [ 72.773691][ T5625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.789062][ T5625] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 72.813516][ T5239] Bluetooth: hci0: command tx timeout [ 72.959773][ T5564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.973558][ T5564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.184300][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.244571][ T5564] team0: Port device team_slave_0 added [ 73.283390][ T5564] team0: Port device team_slave_1 added [ 73.332559][ T5235] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 73.573534][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.622319][ T5564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.642656][ T5564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.685852][ T5564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.702719][ T5564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.710071][ T5564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.781690][ T5564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.985810][ T5564] hsr_slave_0: entered promiscuous mode [ 74.005791][ T5564] hsr_slave_1: entered promiscuous mode [ 74.024228][ T5564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.057207][ T5564] Cannot create hsr debugfs directory [ 74.093138][ T5661] tipc: Started in network mode [ 74.113507][ T5661] tipc: Node identity ac141441, cluster identity 4711 [ 74.167774][ T5661] tipc: Enabled bearer , priority 10 [ 74.385491][ T35] bridge_slave_1: left allmulticast mode [ 74.406118][ T35] bridge_slave_1: left promiscuous mode [ 74.426623][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.481581][ T5239] Bluetooth: hci5: command tx timeout [ 74.488950][ T35] bridge_slave_0: left allmulticast mode [ 74.513925][ T35] bridge_slave_0: left promiscuous mode [ 74.519648][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.853896][ T5682] loop0: detected capacity change from 0 to 1024 [ 74.903463][ T5685] loop4: detected capacity change from 0 to 512 [ 74.946883][ T5685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.973605][ T5668] hfsplus: request for non-existent node 211 in B*Tree [ 74.980999][ T5668] hfsplus: request for non-existent node 211 in B*Tree [ 75.018678][ T5685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.031615][ T5685] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.108457][ T5666] loop1: detected capacity change from 0 to 32768 [ 75.257344][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.267098][ T5690] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.280554][ T5289] tipc: Node number set to 2886997057 [ 75.318746][ T5692] loop3: detected capacity change from 0 to 1024 [ 75.369720][ T1130] hfsplus: b-tree write err: -5, ino 8 [ 75.398817][ T5692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.482298][ T5666] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.487975][ T5697] loop0: detected capacity change from 0 to 64 [ 75.512605][ T5692] EXT4-fs warning (device loop3): empty_inline_dir:1839: bad inline directory (dir #12) - no `..' [ 75.630639][ T5666] syz.1.121 (5666) used greatest stack depth: 17048 bytes left [ 75.740037][ T5244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.805658][ T5236] ocfs2: Unmounting device (7,1) on (node local) [ 76.063446][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.094855][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.111692][ T5289] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.125157][ T35] bond0 (unregistering): Released all slaves [ 76.180952][ T5705] netlink: 'syz.0.133': attribute type 12 has an invalid length. [ 76.189327][ T5705] netlink: 'syz.0.133': attribute type 29 has an invalid length. [ 76.221084][ T5705] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 76.242589][ T5705] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 76.262751][ T5705] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 76.270619][ T5705] netlink: 'syz.0.133': attribute type 37 has an invalid length. [ 76.280319][ T5705] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 76.291232][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.307772][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 76.345762][ T5289] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 76.381423][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.413009][ T5289] usb 5-1: config 0 descriptor?? [ 76.429950][ T5289] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 76.561642][ T5239] Bluetooth: hci5: command tx timeout [ 76.578452][ T5712] loop1: detected capacity change from 0 to 32768 [ 76.664034][ T46] cfg80211: failed to load regulatory.db [ 76.683945][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.707136][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.742835][ T5289] usb 5-1: USB disconnect, device number 2 [ 76.764322][ T5712] JBD2: Ignoring recovery information on journal [ 76.845038][ T5725] netlink: 52 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.878077][ T5712] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 76.936689][ T5708] loop3: detected capacity change from 0 to 32768 [ 77.066984][ T5236] ocfs2: Unmounting device (7,1) on (node local) [ 77.117650][ T5708] read_mapping_page failed! [ 77.142885][ T5708] ERROR: (device loop3): txCommit: [ 77.142885][ T5708] [ 77.207193][ T5708] ERROR: (device loop3): diFree: numfree > numinos [ 77.207193][ T5708] [ 77.219770][ T35] hsr_slave_0: left promiscuous mode [ 77.249336][ T35] hsr_slave_1: left promiscuous mode [ 77.268297][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.281595][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.288120][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.299211][ T5244] read_mapping_page failed! [ 77.317052][ T5244] ERROR: (device loop3): txCommit: [ 77.317052][ T5244] [ 77.336326][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.353422][ T5244] read_mapping_page failed! [ 77.358263][ T5244] ERROR: (device loop3): txCommit: [ 77.358263][ T5244] [ 77.371720][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.481172][ T35] veth1_macvtap: left promiscuous mode [ 77.493545][ T35] veth0_macvtap: left promiscuous mode [ 77.500967][ T46] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 77.504680][ T35] veth1_vlan: left promiscuous mode [ 77.513647][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 77.539502][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.540699][ T35] veth0_vlan: left promiscuous mode [ 77.550048][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.594311][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.617661][ T46] usb 5-1: invalid MIDI in EP 0 [ 77.989626][ T46] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 78.033579][ T46] usb 5-1: USB disconnect, device number 3 [ 78.467479][ T35] team0 (unregistering): Port device team_slave_1 removed [ 78.555546][ T35] team0 (unregistering): Port device team_slave_0 removed [ 78.641500][ T5239] Bluetooth: hci5: command tx timeout [ 79.672166][ T5244] ERROR: (device loop3): diFree: numfree > numinos [ 79.672166][ T5244] [ 79.709094][ T113] ERROR: (device loop3): diFree: numfree > numinos [ 79.709094][ T113] [ 79.722801][ T5564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.794945][ T5564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.865451][ T5564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.927177][ T5564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.004042][ T5564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.019326][ T5564] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.038813][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.045992][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.122791][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.129962][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.450233][ T5780] loop0: detected capacity change from 0 to 4096 [ 80.527949][ T5780] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 80.617714][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.708700][ T5564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.775587][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.907910][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.958005][ T5766] loop1: detected capacity change from 0 to 40427 [ 81.031157][ T5766] F2FS-fs (loop1): invalid crc value [ 81.068976][ T5766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.157646][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.223416][ T5564] veth0_vlan: entered promiscuous mode [ 81.247529][ T5766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.266463][ T5564] veth1_vlan: entered promiscuous mode [ 81.367310][ T5807] loop0: detected capacity change from 0 to 4096 [ 81.391177][ T5564] veth0_macvtap: entered promiscuous mode [ 81.452701][ T5807] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 81.471839][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.512740][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.538161][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.541875][ T5564] veth1_macvtap: entered promiscuous mode [ 81.553854][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.561816][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.569044][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.603121][ T5797] loop4: detected capacity change from 0 to 32768 [ 81.628220][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.638881][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.651399][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.668938][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.680222][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691907][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.701879][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.712352][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.724163][ T5564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.755748][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.768142][ T5807] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 81.787873][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.830544][ T5797] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 81.834541][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.872096][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.882027][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.892587][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.902441][ T5564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.912941][ T5564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.924094][ T5564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.968563][ T5564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038433][ T5797] XFS (loop4): Starting recovery (logdev: internal) [ 82.050094][ T5564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.074187][ T5564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.085351][ T5564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.100054][ T5832] loop1: detected capacity change from 0 to 64 [ 82.110160][ T35] bridge_slave_1: left allmulticast mode [ 82.116020][ T35] bridge_slave_1: left promiscuous mode [ 82.135659][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.152581][ T5797] XFS (loop4): Ending recovery (logdev: internal) [ 82.215835][ T35] bridge_slave_0: left allmulticast mode [ 82.222738][ T35] bridge_slave_0: left promiscuous mode [ 82.228434][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.283825][ T5235] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 82.850586][ T5840] loop0: detected capacity change from 0 to 32768 [ 82.875199][ T5840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.167 (5840) [ 83.042033][ T5847] loop4: detected capacity change from 0 to 32768 [ 83.061534][ T5847] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6483d5b0-291f-4cf0-8888-a7515c5a1cbd [ 83.071602][ T5847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.170 (5847) [ 83.090175][ T5840] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.103112][ T5847] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.123161][ T5840] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.124331][ T5847] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 83.139277][ T5840] BTRFS info (device loop0): disk space caching is enabled [ 83.149521][ T5840] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 83.164429][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.171533][ T5847] BTRFS info (device loop4): using free-space-tree [ 83.348656][ T46] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.358741][ T46] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.369683][ T5840] BTRFS info (device loop0): rebuilding free space tree [ 83.371735][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.391432][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 83.410818][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 83.423007][ T5840] BTRFS info (device loop0): disabling free space tree [ 83.429557][ T46] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.439365][ T46] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.455755][ T46] usb 2-1: Product: syz [ 83.457558][ T5840] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.479558][ T46] usb 2-1: Manufacturer: syz [ 83.496658][ T46] cdc_wdm 2-1:1.0: skipping garbage [ 83.501421][ T5840] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.512246][ T46] cdc_wdm 2-1:1.0: skipping garbage [ 83.544835][ T46] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 83.554607][ T46] cdc_wdm 2-1:1.0: Unknown control protocol [ 83.563803][ T5235] BTRFS info (device loop4): last unmount of filesystem 6483d5b0-291f-4cf0-8888-a7515c5a1cbd [ 83.602060][ T5239] Bluetooth: hci2: command tx timeout [ 83.673740][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.730125][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.756118][ T35] bond0 (unregistering): Released all slaves [ 83.778216][ T5251] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.266593][ T5345] usb 2-1: USB disconnect, device number 3 [ 84.764595][ T5914] sg_write: data in/out 32733/17 bytes for SCSI command 0x15-- guessing data in; [ 84.764595][ T5914] program syz.0.178 not setting count and/or reply_len properly [ 84.809681][ T5915] netlink: 596 bytes leftover after parsing attributes in process `syz.1.177'. [ 84.831826][ T35] hsr_slave_0: left promiscuous mode [ 84.851316][ T35] hsr_slave_1: left promiscuous mode [ 84.906202][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.923264][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.990847][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.033215][ T5926] loop1: detected capacity change from 0 to 256 [ 85.037126][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.082180][ T5926] exfat: Deprecated parameter 'namecase' [ 85.087894][ T5926] exfat: Deprecated parameter 'utf8' [ 85.128406][ T35] veth1_macvtap: left promiscuous mode [ 85.140413][ T35] veth0_macvtap: left promiscuous mode [ 85.146116][ T35] veth1_vlan: left promiscuous mode [ 85.151568][ T35] veth0_vlan: left promiscuous mode [ 85.190074][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 85.205738][ T5930] loop4: detected capacity change from 0 to 4096 [ 85.238578][ T5926] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 85.308122][ T5930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.385376][ T29] audit: type=1800 audit(1728638105.157:3): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 85.660831][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.686694][ T5239] Bluetooth: hci2: command tx timeout [ 86.009359][ T35] team0 (unregistering): Port device team_slave_1 removed [ 86.049628][ T35] team0 (unregistering): Port device team_slave_0 removed [ 86.451095][ T5944] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 86.459310][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 86.506110][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.532301][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.561952][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 86.686163][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.705499][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.758423][ T5951] loop4: detected capacity change from 0 to 512 [ 86.830136][ T5951] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.195: corrupted in-inode xattr: invalid ea_ino [ 86.948494][ T5951] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.195: couldn't read orphan inode 15 (err -117) [ 86.998301][ T5951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.081582][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.091975][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.099188][ T5812] bridge_slave_0: entered allmulticast mode [ 87.112570][ T5812] bridge_slave_0: entered promiscuous mode [ 87.132939][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.140107][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.222059][ T5812] bridge_slave_1: entered allmulticast mode [ 87.242822][ T5812] bridge_slave_1: entered promiscuous mode [ 87.322562][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.406682][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.479499][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.581967][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.591155][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.601482][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.612091][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.618585][ T5812] team0: Port device team_slave_0 added [ 87.636085][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.644561][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.671519][ T5345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.700856][ T5812] team0: Port device team_slave_1 added [ 87.772193][ T5239] Bluetooth: hci2: command tx timeout [ 87.867169][ T5345] usb 5-1: config 0 has no interfaces? [ 87.876085][ T5345] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.885298][ T5345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.900002][ T5345] usb 5-1: config 0 descriptor?? [ 87.947562][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.978241][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.985429][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.024356][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.038759][ T5991] netlink: 'syz.2.201': attribute type 10 has an invalid length. [ 88.050301][ T5991] geneve0: entered promiscuous mode [ 88.060980][ T5991] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 88.137466][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.160567][ T5345] usb 5-1: USB disconnect, device number 4 [ 88.223678][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.230646][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.245068][ T5997] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.257386][ T5995] loop2: detected capacity change from 0 to 128 [ 88.281578][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.415752][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.466530][ T6002] loop2: detected capacity change from 0 to 256 [ 88.473891][ T5812] hsr_slave_0: entered promiscuous mode [ 88.490344][ T5812] hsr_slave_1: entered promiscuous mode [ 88.501772][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.520049][ T5812] Cannot create hsr debugfs directory [ 88.528779][ T6002] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 88.543491][ T6002] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 88.631211][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.119645][ T6030] binder: 6029:6030 ioctl c018620c 20000180 returned -1 [ 89.299445][ T62] bridge_slave_1: left allmulticast mode [ 89.308556][ T62] bridge_slave_1: left promiscuous mode [ 89.319693][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.390429][ T62] bridge_slave_0: left allmulticast mode [ 89.407818][ T62] bridge_slave_0: left promiscuous mode [ 89.428161][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.767041][ T5239] Bluetooth: hci1: command tx timeout [ 89.788957][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.799860][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.810398][ T62] bond0 (unregistering): Released all slaves [ 89.841518][ T5239] Bluetooth: hci2: command tx timeout [ 89.902436][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 89.999215][ T6053] loop0: detected capacity change from 0 to 256 [ 90.019920][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 90.037715][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 90.067111][ T6053] capability: warning: `syz.0.221' uses deprecated v2 capabilities in a way that may be insecure [ 90.184696][ T6058] loop4: detected capacity change from 0 to 2048 [ 90.241699][ T6058] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 90.283914][ T6058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.338775][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 90.535919][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.553124][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.572724][ T5982] bridge_slave_0: entered allmulticast mode [ 90.593225][ T5982] bridge_slave_0: entered promiscuous mode [ 90.770684][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.792736][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.816879][ T5982] bridge_slave_1: entered allmulticast mode [ 90.839039][ T5982] bridge_slave_1: entered promiscuous mode [ 90.896496][ T6088] dummy0: entered promiscuous mode [ 91.093907][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.156108][ T62] hsr_slave_0: left promiscuous mode [ 91.177674][ T62] hsr_slave_1: left promiscuous mode [ 91.225033][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.234077][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.244149][ T6102] loop0: detected capacity change from 0 to 256 [ 91.251864][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.267090][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.279921][ T6102] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 91.340798][ T62] veth1_macvtap: left promiscuous mode [ 91.372111][ T62] veth0_macvtap: left promiscuous mode [ 91.377731][ T62] veth1_vlan: left promiscuous mode [ 91.383159][ T62] veth0_vlan: left promiscuous mode [ 91.430205][ T6104] loop0: detected capacity change from 0 to 1024 [ 91.462170][ T6104] EXT4-fs: Ignoring removed oldalloc option [ 91.536983][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.766035][ T5251] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.843045][ T5239] Bluetooth: hci1: command tx timeout [ 91.939336][ T6098] loop4: detected capacity change from 0 to 32768 [ 92.040069][ T6098] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.375757][ T6111] loop2: detected capacity change from 0 to 32768 [ 92.481853][ T6098] XFS (loop4): Ending clean mount [ 92.494138][ T6111] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.501209][ T6098] XFS (loop4): Quotacheck needed: Please wait. [ 92.558446][ T62] team0 (unregistering): Port device team_slave_1 removed [ 92.600791][ T6098] XFS (loop4): Quotacheck: Done. [ 92.619498][ T62] team0 (unregistering): Port device team_slave_0 removed [ 92.648110][ T6111] XFS (loop2): Ending clean mount [ 92.670030][ T6111] XFS (loop2): Quotacheck needed: Please wait. [ 92.750038][ T6111] XFS (loop2): Quotacheck: Done. [ 92.823931][ T5235] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.856503][ T5564] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.249789][ T6144] loop2: detected capacity change from 0 to 2048 [ 93.276883][ T6144] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 93.299904][ T6144] UDF-fs: Scanning with blocksize 512 failed [ 93.336586][ T6144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.488302][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.521679][ T6142] netlink: 'syz.4.243': attribute type 5 has an invalid length. [ 93.541449][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 93.617820][ T6147] loop2: detected capacity change from 0 to 512 [ 93.680332][ T6147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.730582][ T5982] team0: Port device team_slave_0 added [ 93.756861][ T5982] team0: Port device team_slave_1 added [ 93.759340][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.787056][ T6147] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.815716][ T6151] loop0: detected capacity change from 0 to 4096 [ 93.913598][ T6158] loop4: detected capacity change from 0 to 8192 [ 93.914360][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.922278][ T5239] Bluetooth: hci1: command tx timeout [ 93.941565][ T6158] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.952599][ T5564] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.994205][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.007559][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.075455][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.101776][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.128111][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.142033][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.148997][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.175360][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.214465][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.307553][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.329777][ T6161] ntfs3(loop0): failed to convert "0080" to cp869 [ 94.363955][ T6160] loop2: detected capacity change from 0 to 4096 [ 94.369117][ T6161] ntfs3(loop0): failed to convert name for inode 1e. [ 94.380875][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.397873][ T6160] ntfs3(loop2): ino=3, Correct links count -> 2. [ 94.453876][ T5982] hsr_slave_0: entered promiscuous mode [ 94.468047][ T5982] hsr_slave_1: entered promiscuous mode [ 94.486177][ T5982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.494268][ T5982] Cannot create hsr debugfs directory [ 94.533433][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.540551][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.573499][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.580626][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.622098][ T6160] ntfs3(loop2): failed to convert "0080" to cp874 [ 94.708980][ T6170] netlink: 'syz.0.252': attribute type 11 has an invalid length. [ 94.978836][ T6182] loop4: detected capacity change from 0 to 64 [ 95.140895][ T6190] loop0: detected capacity change from 0 to 64 [ 95.236899][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.469028][ T5812] veth0_vlan: entered promiscuous mode [ 95.506138][ T5812] veth1_vlan: entered promiscuous mode [ 95.530526][ T5812] veth0_macvtap: entered promiscuous mode [ 95.539426][ T5812] veth1_macvtap: entered promiscuous mode [ 95.554850][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.569916][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.579812][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.590358][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.600302][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.610982][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.623853][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.712156][ T5982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.737836][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.749103][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.771711][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.811417][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.839392][ T6203] loop0: detected capacity change from 0 to 8192 [ 95.842006][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.871418][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.887626][ T6203] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.892926][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.936650][ T5982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.968556][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.991428][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.000143][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.017410][ T5239] Bluetooth: hci1: command tx timeout [ 96.031456][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111455][ T5982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.132737][ T5982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.135552][ T6189] loop2: detected capacity change from 0 to 32768 [ 96.220443][ T6189] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 96.428454][ T6189] XFS (loop2): Ending clean mount [ 96.438712][ T6189] XFS (loop2): Quotacheck needed: Please wait. [ 96.476313][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.484527][ T6189] XFS (loop2): Quotacheck: Done. [ 96.567954][ T5564] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 96.856736][ T6224] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.916534][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.942667][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.977805][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.985582][ T2536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.020412][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.027559][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.101825][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.109674][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.122994][ T2536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.131030][ T2536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.622034][ T6238] loop2: detected capacity change from 0 to 32768 [ 97.730346][ T6240] loop0: detected capacity change from 0 to 40427 [ 97.758025][ T6240] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 97.766186][ T6240] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.789650][ T6240] F2FS-fs (loop0): inline encryption not supported [ 97.829955][ T6240] F2FS-fs (loop0): invalid crc value [ 97.867637][ T6262] hsr0: entered promiscuous mode [ 97.868079][ T6238] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 97.875027][ T6262] macsec1: entered allmulticast mode [ 97.885057][ T6240] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.887022][ T6262] hsr0: entered allmulticast mode [ 97.898345][ T6262] hsr_slave_0: entered allmulticast mode [ 97.905049][ T6262] hsr_slave_1: entered allmulticast mode [ 97.999048][ T6262] hsr0: left allmulticast mode [ 98.000532][ T6240] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.009741][ T6262] hsr_slave_0: left allmulticast mode [ 98.017047][ T6262] hsr_slave_1: left allmulticast mode [ 98.085056][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.091408][ T5239] Bluetooth: hci1: command tx timeout [ 98.097316][ T6240] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.199753][ T5251] syz-executor: attempt to access beyond end of device [ 98.199753][ T5251] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 98.292536][ T5251] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.299514][ T5251] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.320934][ T5982] veth0_vlan: entered promiscuous mode [ 98.382423][ T5982] veth1_vlan: entered promiscuous mode [ 98.426352][ T5982] veth0_macvtap: entered promiscuous mode [ 98.459622][ T6238] XFS (loop2): Ending clean mount [ 98.462649][ T5982] veth1_macvtap: entered promiscuous mode [ 98.522632][ T6238] XFS (loop2): User initiated shutdown received. [ 98.529277][ T6238] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 98.583230][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.594294][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.604415][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.631416][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.638722][ T6238] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 98.641241][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.641260][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.641277][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.694867][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.706302][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.797580][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.842817][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.857672][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.906469][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.931817][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.951693][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.973797][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.993663][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.026675][ T5564] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 99.038102][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.073930][ T5982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.096861][ T5982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.123613][ T5982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.141480][ T5982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.364853][ T6316] loop4: detected capacity change from 0 to 4096 [ 99.393199][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 99.459865][ T6324] loop2: detected capacity change from 0 to 2048 [ 99.469248][ T6316] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 99.498143][ T6324] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 99.577462][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.627234][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.747000][ T29] audit: type=1326 audit(1728638119.517:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 99.773142][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.781705][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.849388][ T29] audit: type=1326 audit(1728638119.537:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 99.958520][ T29] audit: type=1326 audit(1728638119.537:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 99.969384][ T6337] loop1: detected capacity change from 0 to 128 [ 100.044007][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 100.080773][ T6337] EXT4-fs: Ignoring removed nobh option [ 100.087060][ T6340] netlink: 72 bytes leftover after parsing attributes in process `syz.4.295'. [ 100.096300][ T29] audit: type=1326 audit(1728638119.537:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.135450][ T6337] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.144333][ T29] audit: type=1326 audit(1728638119.537:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.225508][ T29] audit: type=1326 audit(1728638119.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.263194][ T29] audit: type=1326 audit(1728638119.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.290952][ T29] audit: type=1326 audit(1728638119.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.313123][ T29] audit: type=1326 audit(1728638119.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.313771][ T6337] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.335692][ T29] audit: type=1326 audit(1728638119.547:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35d37dff9 code=0x7ffc0000 [ 100.435710][ T6359] ipvlan2: entered promiscuous mode [ 100.609640][ T6368] loop4: detected capacity change from 0 to 256 [ 100.627771][ T5289] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.634989][ T6337] fscrypt (loop1, inode 12): Unsupported log2_data_unit_size in encryption policy: 133 [ 100.718521][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.747033][ T5238] IPVS: starting estimator thread 0... [ 100.764833][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.784001][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.799380][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.819530][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.831260][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.848148][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.859936][ T5982] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.869288][ T6375] IPVS: using max 24 ests per chain, 57600 per kthread [ 100.871969][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 100.884623][ T5289] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 100.897746][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.905547][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.919672][ T5289] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.929225][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.936433][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.937792][ T5289] usb 3-1: Product: syz [ 100.971283][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 100.971527][ T5289] usb 3-1: Manufacturer: syz [ 100.991728][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.001219][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.023228][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.041023][ T5289] usb 3-1: SerialNumber: syz [ 101.050066][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.060307][ T5289] usb 3-1: config 0 descriptor?? [ 101.078153][ T5289] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 101.096574][ T5289] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 101.105860][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.123793][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.141741][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.156841][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.171806][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.191105][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.221015][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.246711][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.281337][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.305465][ T46] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 101.305656][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.343344][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.355301][ T46] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 101.365167][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.374908][ T46] usb 1-1: Product: syz [ 101.375273][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.379096][ T46] usb 1-1: Manufacturer: syz [ 101.420289][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.421493][ T46] usb 1-1: SerialNumber: syz [ 101.444416][ T46] usb 1-1: config 0 descriptor?? [ 101.460724][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.469912][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.478825][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.500303][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.531764][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.550805][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.575357][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.616313][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.645175][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.658892][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 101.669292][ T46] asix 1-1:0.0: probe with driver asix failed with error -61 [ 101.677491][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.711754][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.730218][ T5289] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 101.731548][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.787054][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.809385][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.828974][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.838339][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.854924][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.895693][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.930151][ T5289] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 101.933633][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.941463][ T5289] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 101.962622][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.971304][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.994051][ T6388] loop1: detected capacity change from 0 to 32768 [ 101.998185][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.011245][ T5289] em28xx 3-1:0.0: No AC97 audio processor [ 102.049419][ T5289] usb 3-1: USB disconnect, device number 2 [ 102.061233][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.063859][ T5289] em28xx 3-1:0.0: Disconnecting em28xx [ 102.079299][ T5289] em28xx 3-1:0.0: Freeing device [ 102.110153][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.124705][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.129448][ T6388] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 102.134044][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.150959][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.191832][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.200375][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.204840][ T6388] XFS (loop1): Ending clean mount [ 102.252599][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.261141][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.290715][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.319016][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.337450][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.346382][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.363783][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.377523][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.386841][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.401335][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.419333][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.434718][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.444473][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.453368][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.464014][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.473160][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.490134][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.501036][ T5982] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 102.519714][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.541493][ T6368] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 102.978350][ T6450] bond1 (unregistering): Released all slaves [ 103.322948][ T6469] loop1: detected capacity change from 0 to 512 [ 103.330676][ T6469] EXT4-fs: Ignoring removed orlov option [ 103.368821][ T6469] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 3: comm syz.1.324: lblock 0 mapped to illegal pblock 3 (length 1) [ 103.423043][ T6469] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.324: error -117 reading directory block [ 103.447813][ T6469] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 103.457932][ T6469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.521137][ T6476] loop3: detected capacity change from 0 to 4096 [ 103.533525][ T6476] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 103.570467][ T6476] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 103.692815][ T5982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.818356][ T5238] usb 1-1: USB disconnect, device number 6 [ 103.878300][ T6476] ntfs3(loop3): ino=1e, "file1" failed to open parent directory r=30005 to update [ 103.878625][ T6475] loop2: detected capacity change from 0 to 32768 [ 103.901559][ T6475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.328 (6475) [ 103.919892][ T6475] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.935458][ T6475] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.965993][ T6475] BTRFS info (device loop2): disk space caching is enabled [ 103.997983][ T6475] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 104.026303][ T6486] netlink: 612 bytes leftover after parsing attributes in process `syz.0.333'. [ 104.279601][ T6475] BTRFS info (device loop2): rebuilding free space tree [ 104.296660][ T6504] netlink: 68 bytes leftover after parsing attributes in process `syz.0.336'. [ 104.309826][ T6475] BTRFS info (device loop2): disabling free space tree [ 104.327534][ T6475] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.347760][ T6475] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.385038][ T6508] loop3: detected capacity change from 0 to 2048 [ 104.458468][ T6508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.568873][ T6512] netlink: 84 bytes leftover after parsing attributes in process `syz.1.337'. [ 104.635128][ T5564] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.809248][ T6518] loop1: detected capacity change from 0 to 512 [ 104.913457][ T6518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.977647][ T6518] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.114986][ T6518] __quota_error: 1 callbacks suppressed [ 105.115004][ T6518] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 105.203044][ T6518] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 105.219802][ T6482] loop4: detected capacity change from 0 to 32768 [ 105.231504][ T6518] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.342: Failed to acquire dquot type 0 [ 105.278772][ T6482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.303679][ T6528] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.352042][ T6482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.380824][ T5982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.447936][ T6520] loop0: detected capacity change from 0 to 32768 [ 105.509440][ T6520] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.343 (6520) [ 105.565951][ T6482] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 105.569254][ T6520] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.610549][ T5238] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 105.636579][ T6520] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.638905][ T5238] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.653606][ T6520] BTRFS info (device loop0): disk space caching is enabled [ 105.661117][ T6520] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 105.841713][ T5238] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 202ms [ 105.855878][ T6520] BTRFS info (device loop0): rebuilding free space tree [ 105.863387][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.871129][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.890053][ T5238] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.908087][ T6520] BTRFS info (device loop0): disabling free space tree [ 105.910391][ T6482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 105.923303][ T6520] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.951458][ T6520] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.078188][ T6534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.127484][ T6526] loop3: detected capacity change from 0 to 32768 [ 106.173837][ T5251] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 106.289476][ T6526] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.431605][ T6526] XFS (loop3): Ending clean mount [ 106.522231][ T6526] XFS (loop3): Quotacheck needed: Please wait. [ 106.607020][ T6526] XFS (loop3): Quotacheck: Done. [ 106.813207][ T5812] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.290388][ T6573] loop1: detected capacity change from 0 to 32768 [ 107.331599][ T6573] (syz.1.352,6573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.359498][ T6573] (syz.1.352,6573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.472529][ T6573] JBD2: Ignoring recovery information on journal [ 107.472942][ T6582] loop2: detected capacity change from 0 to 2048 [ 107.528686][ T6584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.540599][ T6571] loop0: detected capacity change from 0 to 32768 [ 107.569472][ T6573] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.006357][ T4693] udevd[4693]: worker [5253] terminated by signal 33 (Unknown signal 33) [ 108.099016][ T5982] ocfs2: Unmounting device (7,1) on (node local) [ 108.391154][ T6608] loop2: detected capacity change from 0 to 24 [ 108.859352][ T6601] loop0: detected capacity change from 0 to 32768 [ 109.001690][ T938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.037821][ T6601] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.171513][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 109.186196][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.191576][ T6616] loop2: detected capacity change from 0 to 32768 [ 109.198705][ T938] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.232897][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.322939][ T938] usb 5-1: config 0 descriptor?? [ 109.338565][ T938] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 109.384539][ T6622] loop3: detected capacity change from 0 to 32768 [ 109.406600][ T6616] JBD2: Ignoring recovery information on journal [ 109.421253][ T6622] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 109.438155][ T6622] JBD2: Ignoring recovery information on journal [ 109.477895][ T6601] XFS (loop0): Ending clean mount [ 109.509069][ T6616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.565423][ T6622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.603523][ T5251] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.695867][ T5564] ocfs2: Unmounting device (7,2) on (node local) [ 109.707186][ T6622] overlayfs: upper fs does not support tmpfile. [ 109.774288][ T6622] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 109.811144][ T6622] overlayfs: failed to set xattr on upper [ 109.861055][ T6622] overlayfs: ...falling back to redirect_dir=nofollow. [ 109.868376][ T6622] overlayfs: ...falling back to index=off. [ 109.877166][ T6622] overlayfs: ...falling back to uuid=null. [ 109.884627][ T6622] overlayfs: upper fs missing required features. [ 110.162776][ T5812] ocfs2: Unmounting device (7,3) on (node local) [ 110.267714][ T6645] loop1: detected capacity change from 0 to 32768 [ 110.274838][ T6645] XFS: ikeep mount option is deprecated. [ 110.317619][ T938] gspca_vc032x: reg_w err -71 [ 110.323513][ T938] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 110.333281][ T938] usb 5-1: USB disconnect, device number 5 [ 110.498671][ T6645] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.573365][ T6669] sch_tbf: peakrate 6 is lower than or equals to rate 7694164503644904053 ! [ 110.632177][ T6660] loop2: detected capacity change from 0 to 32768 [ 110.642498][ T6660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.384 (6660) [ 110.669301][ T6660] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.686700][ T6645] XFS (loop1): Ending clean mount [ 110.696013][ T6645] XFS (loop1): Quotacheck needed: Please wait. [ 110.705400][ T6660] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 110.727198][ T6660] BTRFS info (device loop2): using free-space-tree [ 110.738479][ T6645] XFS (loop1): Quotacheck: Done. [ 110.749581][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.762236][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.772583][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.783172][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.793454][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.805466][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.817052][ T6674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.827658][ T6674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.839045][ T5982] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.840203][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.856189][ T6674] batadv_slave_0: entered promiscuous mode [ 111.045240][ T6660] overlay: Unknown parameter '/32 [ 111.045240][ T6660] time [ 111.045240][ T6660] string [ 111.045240][ T6660] statistic [ 111.045240][ T6660] state [ 111.045240][ T6660] realm [ 111.045240][ T6660] rateest [ 111.045240][ T6660] quota [ 111.045240][ T6660] pkttype [ 111.045240][ T6660] physdev [ 111.045240][ T6660] cgroup [ 111.045240][ T6660] cgroup [ 111.045240][ T6660] cgroup [ 111.045240][ T6660] owner [ 111.045240][ T6660] nfacct [ 111.045240][ T6660] nfacct [ 111.045240][ T6660] mac [ 111.045240][ T6660] limit [ 111.045240][ T6660] ipvs [ 111.045240][ T6660] helper [ 111.045240][ T6660] devgroup [ 111.045240][ T6660] cpu [ 111.045240][ T6660] conntrack [ 111.045240][ T6660] conntrack [ 111.045240][ T6660] conntrack [ 111.045240][ T6660] connlabel [ 111.045240][ T6660] connbytes [ 111.045240][ T6660] comment [ 111.045240][ T6660] bpf [ 111.045240][ T6660] bpf [ 111.045240][ T6660] connmark [ 111.045240][ T6660] mark [ 111.045240][ T6660] srh [ 111.045240][ T6660] srh [ 111.045240][ T6660] rt [ 111.045240][ T6660] rpfilter [ 111.045240][ T6660] dst [ 111.045240][ T6660] hbh [ 111.045240][ T6660] mh [ 111.045240][ T6660] ipv6header [ 111.045240][ T6660] frag [ 111.045240][ T6660] eui64 [ 111.045240][ T6660] ah [ 111.045240][ T6660] tcpmss [ 111.045240][ T6660] socket [ 111.045240][ T6660] socket [ 111.045240][ T6660] socket [ 111.045240][ T6660] sctp [ 111.045240][ T6660] recent [ 111.045240][ T6660] recent [ 111.045240][ T6660] policy [ 111.045240][ T6660] multiport [ 111.045240][ T6660] length [ 111.045240][ T6660] l2tp [ 111.045240][ T6660] iprange [ 111.045240][ T6660] ipcomp [ 111.045240][ T6660] hl [ 111.045240][ T6660] hashlimit [ 111.045240][ T6660] hashlimit [ 111.045240][ T6660] hashlimit [ 111.045240][ T6660] esp [ 111.045240][ T6660] ecn [ 111.045240][ T6660] tos [ 111.045240][ T6660] dscp [ 111.045240][ T6660] dccp [ 111.045240][ T6660] connlimit [ 111.045240][ T6660] cluster [ 111.045240][ T6660] addrtype [ 111.295393][ T6702] xt_hashlimit: size too large, truncated to 1048576 [ 111.326588][ T5564] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.381763][ T5289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.541526][ T5289] usb 5-1: Using ep0 maxpacket: 16 [ 111.552661][ T5289] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 111.562144][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.580176][ T5289] usb 5-1: Product: syz [ 111.595783][ T5289] usb 5-1: Manufacturer: syz [ 111.610342][ T5289] usb 5-1: SerialNumber: syz [ 111.670723][ T5289] usb 5-1: config 0 descriptor?? [ 111.689374][ T5289] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 111.896103][ T5289] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 111.920915][ T5289] visor 5-1:0.0: probe with driver visor failed with error -5 [ 111.975989][ T6713] loop3: detected capacity change from 0 to 256 [ 112.000529][ T6713] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 112.026563][ T6713] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 112.175360][ T5289] usb 5-1: USB disconnect, device number 6 [ 112.312305][ T6715] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 112.664442][ T6725] loop3: detected capacity change from 0 to 164 [ 113.192242][ T5238] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.281706][ T938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.343765][ T6742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.351497][ T6742] IPv6: NLM_F_CREATE should be set when creating new route [ 113.369114][ T5238] usb 1-1: Using ep0 maxpacket: 16 [ 113.383605][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.403583][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.431575][ T5238] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.461534][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 113.477645][ T5238] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.498319][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.518435][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.532887][ T938] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.554279][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.575516][ T5238] usb 1-1: config 0 descriptor?? [ 113.590446][ T938] usb 4-1: Product: syz [ 113.610814][ T938] usb 4-1: Manufacturer: syz [ 113.631093][ T938] usb 4-1: SerialNumber: syz [ 113.659136][ T938] usb 4-1: config 0 descriptor?? [ 113.675467][ T938] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.699983][ T938] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 114.061917][ T5238] microsoft 0003:045E:07DA.0002: report is too long [ 114.068641][ T5238] microsoft 0003:045E:07DA.0002: item 0 4 0 8 parsing failed [ 114.106959][ T5238] microsoft 0003:045E:07DA.0002: parse failed [ 114.121830][ T5238] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 114.221542][ T6763] loop4: detected capacity change from 0 to 16 [ 114.228363][ T6763] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 114.265307][ T5238] usb 1-1: USB disconnect, device number 7 [ 114.288444][ T938] em28xx 4-1:0.0: chip ID is em28174 [ 114.301460][ T5289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.451519][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 114.458555][ T5289] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 114.467091][ T5289] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 114.475862][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 114.492816][ T5289] usb 3-1: config 1 has no interface number 0 [ 114.505475][ T5289] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.523055][ T5289] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 114.539553][ T5289] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 114.550988][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.567879][ T938] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.570907][ T5289] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 114.589291][ T938] em28xx 4-1:0.0: board has no eeprom [ 114.620293][ T6771] loop4: detected capacity change from 0 to 128 [ 114.636361][ T6771] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.660453][ T6771] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.692961][ T938] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.707305][ T938] em28xx 4-1:0.0: dvb set to bulk mode. [ 114.726383][ T5238] em28xx 4-1:0.0: Binding DVB extension [ 114.740460][ T938] usb 4-1: USB disconnect, device number 4 [ 114.758865][ T938] em28xx 4-1:0.0: Disconnecting em28xx [ 114.800354][ T6771] process 'syz.4.423' launched './file1' with NULL argv: empty string added [ 114.825981][ T5238] em28xx 4-1:0.0: Registering input extension [ 114.915593][ T5235] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.924755][ T5238] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 114.931271][ T5238] Registered IR keymap rc-empty [ 114.953920][ T5238] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 114.988851][ T5238] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 115.038885][ T5238] em28xx 4-1:0.0: Input extension successfully initialized [ 115.056979][ T938] em28xx 4-1:0.0: Closing input extension [ 115.123931][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 115.133297][ T5289] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 115.223133][ T938] em28xx 4-1:0.0: Freeing device [ 115.393451][ T5289] usb 3-1: USB disconnect, device number 3 [ 115.401228][ T5289] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 115.495361][ T6809] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.599524][ T5332] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.796036][ T5332] usb 1-1: Using ep0 maxpacket: 16 [ 115.865396][ T5332] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 115.881515][ T5332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.898333][ T6805] loop1: detected capacity change from 0 to 40427 [ 115.905052][ T5332] usb 1-1: Product: syz [ 115.909235][ T5332] usb 1-1: Manufacturer: syz [ 115.915875][ T5332] usb 1-1: SerialNumber: syz [ 115.925417][ T5332] usb 1-1: config 0 descriptor?? [ 115.943790][ T6805] F2FS-fs (loop1): invalid crc value [ 115.966005][ T6805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.986750][ T6811] loop4: detected capacity change from 0 to 32768 [ 116.021090][ T6811] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.439 (6811) [ 116.060243][ T6811] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.077169][ T6805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.084934][ T6811] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 116.099571][ T6811] BTRFS info (device loop4): using free-space-tree [ 116.137776][ T5332] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 116.144545][ T5332] usb 1-1: No valid video chain found. [ 116.151756][ T6812] f2fs_ckpt-7:1: attempt to access beyond end of device [ 116.151756][ T6812] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.171987][ T6812] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.193038][ T5332] usb 1-1: USB disconnect, device number 8 [ 116.238472][ T6811] BTRFS info (device loop4): rebuilding free space tree [ 116.390522][ T5235] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.430110][ T6844] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 116.602878][ T6846] loop3: detected capacity change from 0 to 1024 [ 116.760898][ T35] hfsplus: b-tree write err: -5, ino 4 [ 117.206331][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 117.264251][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 117.287409][ T6851] loop0: detected capacity change from 0 to 32768 [ 117.311696][ T6851] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.451 (6851) [ 117.323726][ T6842] loop2: detected capacity change from 0 to 40427 [ 117.334585][ T6851] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.347086][ T6842] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 117.348628][ T6851] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 117.362714][ T6842] F2FS-fs (loop2): Image doesn't support compression [ 117.365023][ T938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.379126][ T6842] F2FS-fs (loop2): invalid crc value [ 117.386334][ T6851] BTRFS info (device loop0): using free-space-tree [ 117.407106][ T6842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.455913][ T6842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.496638][ T6882] VFS: could not find a valid V7 on nullb0. [ 117.518097][ T6882] hpfs: Bad magic ... probably not HPFS [ 117.528901][ T6851] BTRFS info (device loop0): rebuilding free space tree [ 117.547603][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 117.558110][ T5564] syz-executor: attempt to access beyond end of device [ 117.558110][ T5564] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.562689][ T938] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 117.581527][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.589795][ T938] usb 2-1: Product: syz [ 117.594433][ T938] usb 2-1: Manufacturer: syz [ 117.599049][ T938] usb 2-1: SerialNumber: syz [ 117.606658][ T938] usb 2-1: config 0 descriptor?? [ 117.623084][ T938] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 117.637915][ T938] dvb-usb: bulk message failed: -22 (2/0) [ 117.644145][ T5564] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 117.659230][ T938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.673623][ T938] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 117.687505][ T938] usb 2-1: media controller created [ 117.707618][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.725792][ T6891] loop4: detected capacity change from 0 to 512 [ 117.740196][ T938] dvb-usb: bulk message failed: -22 (1/0) [ 117.746822][ T6891] EXT4-fs: Ignoring removed oldalloc option [ 117.753164][ T938] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 117.753527][ T6851] BTRFS info (device loop0): balance: start -s [ 117.774363][ T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 117.792443][ T6851] BTRFS info (device loop0): balance: ended with status: 0 [ 117.797525][ T938] dvb-usb: schedule remote query interval to 50 msecs. [ 117.812515][ T6891] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.460: Parent and EA inode have the same ino 15 [ 117.827009][ T938] dvb-usb: bulk message failed: -22 (2/0) [ 117.832938][ T938] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 117.848535][ T938] usb 2-1: USB disconnect, device number 4 [ 117.856082][ T6891] EXT4-fs (loop4): Remounting filesystem read-only [ 117.888003][ T938] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 117.895334][ T6891] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.923318][ T6891] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 117.933866][ T6891] EXT4-fs (loop4): 1 orphan inode deleted [ 117.940433][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.017167][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.042018][ T5251] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.145012][ T6902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.463'. [ 118.346268][ T6907] sctp: [Deprecated]: syz.0.465 (pid 6907) Use of int in maxseg socket option. [ 118.346268][ T6907] Use struct sctp_assoc_value instead [ 118.663426][ T6923] loop3: detected capacity change from 0 to 1024 [ 118.857521][ T5812] hfsplus: node 4:3 still has 1 user(s)! [ 119.135891][ T6936] warning: `syz.4.479' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.198130][ T6915] loop0: detected capacity change from 0 to 40427 [ 119.214930][ T6915] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.226171][ T6915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.260511][ T6915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.355373][ T6915] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.371732][ T6915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.470082][ T29] audit: type=1804 audit(1728638139.237:15): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.469" name="/newroot/107/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 119.561023][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 119.715888][ T6963] loop4: detected capacity change from 0 to 512 [ 119.874747][ T6970] loop0: detected capacity change from 0 to 512 [ 119.900135][ T6970] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 119.908435][ T6963] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.490: corrupted in-inode xattr: invalid ea_ino [ 119.927640][ T6970] EXT4-fs (loop0): 1 truncate cleaned up [ 119.934582][ T6970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.947581][ T6963] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.490: couldn't read orphan inode 15 (err -117) [ 119.970466][ T6963] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.983240][ T6970] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.487: Logical block already allocated [ 120.006723][ T6970] EXT4-fs (loop0): Remounting filesystem read-only [ 120.089354][ T5251] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.178821][ T5235] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 120.248459][ T6990] netlink: 'syz.4.499': attribute type 2 has an invalid length. [ 120.256606][ T6990] netlink: 'syz.4.499': attribute type 8 has an invalid length. [ 120.450541][ T7000] netlink: 120 bytes leftover after parsing attributes in process `syz.2.505'. [ 120.728610][ T7016] loop2: detected capacity change from 0 to 2048 [ 120.743177][ T7016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.858209][ T7025] loop4: detected capacity change from 0 to 256 [ 120.874502][ T7025] exfat: Deprecated parameter 'utf8' [ 120.898927][ T7025] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 121.034699][ T7034] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 121.050223][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'. [ 121.063240][ T7034] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 121.098813][ T7038] netpci0: tun_chr_ioctl cmd 21731 [ 121.218422][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 121.231823][ T5332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.294247][ T7048] loop1: detected capacity change from 0 to 16 [ 121.309100][ T7048] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.332269][ T938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.386362][ T5332] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 121.402258][ T5332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.422024][ T5248] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.422480][ T5339] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 121.438056][ T5332] usb 3-1: config 0 descriptor?? [ 121.501871][ T938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.522640][ T7056] loop4: detected capacity change from 0 to 1024 [ 121.551660][ T5289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.631734][ T5289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.643456][ T5339] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.652140][ T5339] usb 4-1: config 179 has no interface number 0 [ 121.662496][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 121.681745][ T5289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.690358][ T5339] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 121.721499][ T5339] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 121.747605][ T5339] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 121.765293][ T5339] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 121.783360][ T5339] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.797229][ T5339] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.806660][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.808693][ T7064] loop1: detected capacity change from 0 to 512 [ 121.821120][ T7041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.831595][ T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.833909][ T7041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.850626][ T7064] EXT4-fs: Ignoring removed i_version option [ 121.872858][ T7064] EXT4-fs: Ignoring removed nobh option [ 121.896076][ T7064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.966803][ T7064] EXT4-fs (loop1): 1 truncate cleaned up [ 121.988758][ T7064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.031906][ T5339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.122234][ T5339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.167579][ T5982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.191559][ T5289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.231733][ T7076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.539'. [ 122.273931][ T5289] usb 4-1: USB disconnect, device number 5 [ 122.274049][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.304086][ T5332] usb 3-1: Cannot set autoneg [ 122.308986][ T5332] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 122.329629][ T5332] usb 3-1: USB disconnect, device number 4 [ 122.382445][ T7080] loop4: detected capacity change from 0 to 1024 [ 122.841703][ T5332] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.985047][ T7108] loop3: detected capacity change from 0 to 64 [ 123.023883][ T5332] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 123.039989][ T5332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.071683][ T5332] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.080750][ T5332] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.111388][ T5332] usb 5-1: Manufacturer: syz [ 123.124489][ T5332] usb 5-1: config 0 descriptor?? [ 123.203976][ T5332] rc_core: IR keymap rc-hauppauge not found [ 123.209923][ T5332] Registered IR keymap rc-empty [ 123.230143][ T5332] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 123.253653][ T5332] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 123.341451][ T5289] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.360526][ T5248] usb 5-1: USB disconnect, device number 7 [ 123.504855][ T7106] loop2: detected capacity change from 0 to 40427 [ 123.505946][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 123.531413][ T7106] F2FS-fs (loop2): invalid crc value [ 123.538556][ T5289] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.556642][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 123.568323][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.582432][ T7106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.585001][ T5289] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 123.597965][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.625726][ T5289] usb 1-1: config 0 descriptor?? [ 123.649449][ T7110] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.672232][ T7106] F2FS-fs (loop2): Start checkpoint disabled! [ 123.672627][ T5289] hub 1-1:0.0: USB hub found [ 123.710329][ T7106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 123.734535][ T29] audit: type=1800 audit(1728638143.507:16): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 123.759718][ T7106] syz.2.552: attempt to access beyond end of device [ 123.759718][ T7106] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.888030][ T35] kworker/u8:2: attempt to access beyond end of device [ 123.888030][ T35] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 123.902841][ T5289] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 123.943967][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.962286][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.969202][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 124.096094][ T7140] netlink: 'syz.3.568': attribute type 8 has an invalid length. [ 124.118699][ T5289] usbhid 1-1:0.0: can't add hid device: -71 [ 124.125547][ T5289] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 124.166468][ T5289] usb 1-1: USB disconnect, device number 9 [ 124.703636][ T7138] loop4: detected capacity change from 0 to 40427 [ 124.714929][ T7138] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 124.722133][ T7138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.754145][ T7138] F2FS-fs (loop4): invalid crc value [ 124.763354][ T7138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.881870][ T7138] F2FS-fs (loop4): Start checkpoint disabled! [ 124.930313][ T7138] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.952117][ T7138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.046094][ T7138] syz.4.566: attempt to access beyond end of device [ 125.046094][ T7138] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 125.323884][ T35] kworker/u8:2: attempt to access beyond end of device [ 125.323884][ T35] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 125.394832][ T35] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 125.429887][ T35] kworker/u8:2: attempt to access beyond end of device [ 125.429887][ T35] loop4: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 125.477424][ T35] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 125.500313][ T7149] loop3: detected capacity change from 0 to 32768 [ 125.649217][ T7181] loop0: detected capacity change from 0 to 16 [ 125.710271][ T7181] erofs: (device loop0): mounted with root inode @ nid 36. [ 125.723443][ T7181] ------------[ cut here ]------------ [ 125.729005][ T7181] WARNING: CPU: 1 PID: 7181 at fs/iomap/iter.c:51 iomap_iter+0x9db/0xf60 [ 125.737576][ T7181] Modules linked in: [ 125.741585][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.0.584 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 125.751786][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.762546][ T7181] RIP: 0010:iomap_iter+0x9db/0xf60 [ 125.768448][ T7181] Code: 0f 0b 90 e9 0a f9 ff ff e8 d2 10 62 ff 90 0f 0b 90 e9 42 fd ff ff e8 c4 10 62 ff 90 0f 0b 90 e9 71 fd ff ff e8 b6 10 62 ff 90 <0f> 0b 90 e9 d5 fd ff ff e8 a8 10 62 ff 90 0f 0b 90 43 80 3c 2e 00 [ 125.788318][ T7181] RSP: 0018:ffffc90008f776e0 EFLAGS: 00010287 [ 125.794503][ T7181] RAX: ffffffff8232e26a RBX: 0000000000074726 RCX: 0000000000040000 [ 125.802566][ T7181] RDX: ffffc900046f1000 RSI: 000000000000047c RDI: 000000000000047d [ 125.810557][ T7181] RBP: 0000000000079b03 R08: ffffffff8232e03a R09: 1ffffd400012434e [ 125.818824][ T7181] R10: dffffc0000000000 R11: fffff9400012434f R12: 1ffff920011eef05 [ 125.826887][ T7181] R13: dffffc0000000000 R14: 1ffff920011eef04 R15: ffffc90008f77820 [ 125.834967][ T7181] FS: 00007fa35e14d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 125.843962][ T7181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.850563][ T7181] CR2: 000000110c2e97b6 CR3: 000000006d1ac000 CR4: 00000000003526f0 [ 125.859173][ T7181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.867827][ T7181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.869675][ T7184] loop4: detected capacity change from 0 to 128 [ 125.875884][ T7181] Call Trace: [ 125.875898][ T7181] [ 125.875908][ T7181] ? __warn+0x168/0x4e0 [ 125.875935][ T7181] ? iomap_iter+0x9db/0xf60 [ 125.875965][ T7181] ? report_bug+0x2b3/0x500 [ 125.875989][ T7181] ? iomap_iter+0x9db/0xf60 [ 125.876019][ T7181] ? handle_bug+0x60/0x90 [ 125.876040][ T7181] ? exc_invalid_op+0x1a/0x50 [ 125.876060][ T7181] ? asm_exc_invalid_op+0x1a/0x20 [ 125.876091][ T7181] ? iomap_iter+0x7aa/0xf60 [ 125.876115][ T7181] ? iomap_iter+0x9da/0xf60 [ 125.876142][ T7181] ? iomap_iter+0x9db/0xf60 [ 125.876178][ T7181] iomap_fiemap+0x1d0/0x9b0 [ 125.876212][ T7181] ? __pfx_iomap_fiemap+0x10/0x10 [ 125.876254][ T7181] ? __might_fault+0xc6/0x120 [ 125.876277][ T7181] ? __pfx_erofs_fiemap+0x10/0x10 [ 125.876299][ T7181] do_vfs_ioctl+0x1bf8/0x2e40 [ 125.959946][ T7181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.965585][ T7181] ? mark_lock+0x9a/0x360 [ 125.970024][ T7181] ? tomoyo_path_number_perm+0x208/0x880 [ 125.975723][ T7181] ? __pfx_lock_release+0x10/0x10 [ 125.980767][ T7181] ? lockdep_hardirqs_on+0x99/0x150 [ 125.986059][ T7181] ? kfree+0x1a0/0x460 [ 125.990150][ T7181] ? tomoyo_path_number_perm+0x68d/0x880 [ 125.995852][ T7181] ? tomoyo_path_number_perm+0x71a/0x880 [ 126.001677][ T7181] ? __lock_acquire+0x1384/0x2050 [ 126.006727][ T7181] ? tomoyo_path_number_perm+0x208/0x880 [ 126.012461][ T7181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.018529][ T7181] ? __fget_files+0x28/0x430 [ 126.023253][ T7181] ? __fget_files+0x28/0x430 [ 126.027880][ T7181] __se_sys_ioctl+0x81/0x170 [ 126.032556][ T7181] do_syscall_64+0xf3/0x230 [ 126.037086][ T7181] ? clear_bhb_loop+0x35/0x90 [ 126.041837][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.047758][ T7181] RIP: 0033:0x7fa35d37dff9 [ 126.052289][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.072612][ T7181] RSP: 002b:00007fa35e14d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.081066][ T7181] RAX: ffffffffffffffda RBX: 00007fa35d535f80 RCX: 00007fa35d37dff9 [ 126.089732][ T7181] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000004 [ 126.098047][ T7181] RBP: 00007fa35d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 126.106127][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.114178][ T7181] R13: 0000000000000000 R14: 00007fa35d535f80 R15: 00007ffd18947558 [ 126.122257][ T7181] [ 126.125298][ T7181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.132593][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.0.584 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 126.142672][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.152738][ T7181] Call Trace: [ 126.156042][ T7181] [ 126.158983][ T7181] dump_stack_lvl+0x241/0x360 [ 126.163688][ T7181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.168912][ T7181] ? __pfx__printk+0x10/0x10 [ 126.173530][ T7181] ? vscnprintf+0x5d/0x90 [ 126.177879][ T7181] panic+0x349/0x880 [ 126.181796][ T7181] ? __warn+0x177/0x4e0 [ 126.185975][ T7181] ? __pfx_panic+0x10/0x10 [ 126.190430][ T7181] __warn+0x34b/0x4e0 [ 126.194430][ T7181] ? iomap_iter+0x9db/0xf60 [ 126.198958][ T7181] report_bug+0x2b3/0x500 [ 126.203306][ T7181] ? iomap_iter+0x9db/0xf60 [ 126.207836][ T7181] handle_bug+0x60/0x90 [ 126.212006][ T7181] exc_invalid_op+0x1a/0x50 [ 126.216529][ T7181] asm_exc_invalid_op+0x1a/0x20 [ 126.221408][ T7181] RIP: 0010:iomap_iter+0x9db/0xf60 [ 126.226547][ T7181] Code: 0f 0b 90 e9 0a f9 ff ff e8 d2 10 62 ff 90 0f 0b 90 e9 42 fd ff ff e8 c4 10 62 ff 90 0f 0b 90 e9 71 fd ff ff e8 b6 10 62 ff 90 <0f> 0b 90 e9 d5 fd ff ff e8 a8 10 62 ff 90 0f 0b 90 43 80 3c 2e 00 [ 126.246172][ T7181] RSP: 0018:ffffc90008f776e0 EFLAGS: 00010287 [ 126.252243][ T7181] RAX: ffffffff8232e26a RBX: 0000000000074726 RCX: 0000000000040000 [ 126.260210][ T7181] RDX: ffffc900046f1000 RSI: 000000000000047c RDI: 000000000000047d [ 126.268178][ T7181] RBP: 0000000000079b03 R08: ffffffff8232e03a R09: 1ffffd400012434e [ 126.276150][ T7181] R10: dffffc0000000000 R11: fffff9400012434f R12: 1ffff920011eef05 [ 126.284123][ T7181] R13: dffffc0000000000 R14: 1ffff920011eef04 R15: ffffc90008f77820 [ 126.292093][ T7181] ? iomap_iter+0x7aa/0xf60 [ 126.296595][ T7181] ? iomap_iter+0x9da/0xf60 [ 126.301103][ T7181] iomap_fiemap+0x1d0/0x9b0 [ 126.305607][ T7181] ? __pfx_iomap_fiemap+0x10/0x10 [ 126.310637][ T7181] ? __might_fault+0xc6/0x120 [ 126.315306][ T7181] ? __pfx_erofs_fiemap+0x10/0x10 [ 126.320324][ T7181] do_vfs_ioctl+0x1bf8/0x2e40 [ 126.324996][ T7181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.330013][ T7181] ? mark_lock+0x9a/0x360 [ 126.334346][ T7181] ? tomoyo_path_number_perm+0x208/0x880 [ 126.339976][ T7181] ? __pfx_lock_release+0x10/0x10 [ 126.344987][ T7181] ? lockdep_hardirqs_on+0x99/0x150 [ 126.350188][ T7181] ? kfree+0x1a0/0x460 [ 126.354251][ T7181] ? tomoyo_path_number_perm+0x68d/0x880 [ 126.359877][ T7181] ? tomoyo_path_number_perm+0x71a/0x880 [ 126.365503][ T7181] ? __lock_acquire+0x1384/0x2050 [ 126.370522][ T7181] ? tomoyo_path_number_perm+0x208/0x880 [ 126.376156][ T7181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.382160][ T7181] ? __fget_files+0x28/0x430 [ 126.386749][ T7181] ? __fget_files+0x28/0x430 [ 126.391337][ T7181] __se_sys_ioctl+0x81/0x170 [ 126.395925][ T7181] do_syscall_64+0xf3/0x230 [ 126.400423][ T7181] ? clear_bhb_loop+0x35/0x90 [ 126.405092][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.411005][ T7181] RIP: 0033:0x7fa35d37dff9 [ 126.415434][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.435068][ T7181] RSP: 002b:00007fa35e14d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.443491][ T7181] RAX: ffffffffffffffda RBX: 00007fa35d535f80 RCX: 00007fa35d37dff9 [ 126.451481][ T7181] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000004 [ 126.459470][ T7181] RBP: 00007fa35d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 126.467445][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.475438][ T7181] R13: 0000000000000000 R14: 00007fa35d535f80 R15: 00007ffd18947558 [ 126.483449][ T7181] [ 126.486700][ T7181] Kernel Offset: disabled [ 126.491025][ T7181] Rebooting in 86400 seconds..