last executing test programs: 10m37.126827343s ago: executing program 32 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m23.847762166s ago: executing program 33 (id=120): r0 = socket(0x1e, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000800)="ef746e1079a6cd04a5f9fa30d677967596fd1e0226c22ae7bd", 0x19}], 0x1, 0x0, 0x0, 0x8048001}, 0x20048851) 9m23.0269925s ago: executing program 34 (id=508): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x246, 0x7, 0x5, 0xfffffbfffffffff8, 0x1, 0x9, 0xf6b}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 9m6.324524373s ago: executing program 35 (id=606): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 7m34.776588809s ago: executing program 36 (id=1259): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}], {0x0, 0x600, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7m19.925674286s ago: executing program 37 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@xino_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='file\x00', 0x110) lstat(&(0x7f0000000240)='file\x00', &(0x7f0000000280)) 7m4.727040069s ago: executing program 6 (id=1447): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 7m3.733548896s ago: executing program 7 (id=1451): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 7m3.408898292s ago: executing program 7 (id=1453): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x2) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x4, 0x2000400, 0x9a, 0x0, 0x7, 0x3fd, 0x28ab, 0x100000000, 0x8}) write$binfmt_script(r0, 0x0, 0x0) 7m2.780900251s ago: executing program 7 (id=1456): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "552ca447e1a000a0", "e72de55b2c11ae99a05828ab9f9de8ae", "c5846bfd", "c5eee3d1c909cfe1"}, 0x28) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xde, &(0x7f0000000040)=0xf2f, 0x4) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7m2.446262006s ago: executing program 7 (id=1458): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x28) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 7m1.798979797s ago: executing program 7 (id=1460): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x4, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 7m1.443802723s ago: executing program 6 (id=1462): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 7m0.466827629s ago: executing program 6 (id=1464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='f', 0x7a80, 0x810, 0x0, 0x0) 7m0.143188754s ago: executing program 7 (id=1465): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 6m59.644683438s ago: executing program 38 (id=1465): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 6m59.3947164s ago: executing program 6 (id=1469): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x1200000, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x977e, &(0x7f0000006780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 6m57.183728164s ago: executing program 6 (id=1470): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x5b) write(r1, &(0x7f00000001c0)='0x0', 0x3) 6m54.168065895s ago: executing program 6 (id=1480): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r1, &(0x7f0000000080)=""/220, 0xdc) shutdown(r1, 0x1) 6m53.685933508s ago: executing program 39 (id=1480): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r1, &(0x7f0000000080)=""/220, 0xdc) shutdown(r1, 0x1) 5m54.505743734s ago: executing program 2 (id=1822): rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(r2) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) 5m54.085787564s ago: executing program 2 (id=1824): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) 5m53.74223825s ago: executing program 2 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 5m53.413165536s ago: executing program 2 (id=1831): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5m53.11508819s ago: executing program 2 (id=1835): syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) 5m52.172072164s ago: executing program 2 (id=1842): add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x7, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 5m51.547465483s ago: executing program 40 (id=1842): add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x7, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 5m14.617081597s ago: executing program 9 (id=2072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 5m14.094657011s ago: executing program 9 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000412, &(0x7f0000000c00)={[{@utf8}, {@dmode={'dmode', 0x3d, 0x9}}, {@overriderock}, {@utf8}, {@map_acorn}, {@nocompress}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@block={'block', 0x3d, 0xc00}}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@cruft}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000001c0)="$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") syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1519, &(0x7f0000002940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m13.382634794s ago: executing program 9 (id=2082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) 5m13.079032289s ago: executing program 9 (id=2086): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5m12.863648588s ago: executing program 9 (id=2089): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@ax25={{0x3, @null}, [@default, @rose, @rose, @netrom, @bcast, @bcast, @rose, @null]}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=""/81, 0x51}, 0xfffffffa}], 0x1, 0x102, 0x0) 5m12.611431451s ago: executing program 9 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-4\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 4m57.347718957s ago: executing program 41 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-4\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 55.24865836s ago: executing program 5 (id=3561): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x3, @loopback, 0x7b8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7b16, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x4000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/6, 0x6}, 0x7}], 0x1, 0x40022140, 0x0) 54.865001739s ago: executing program 5 (id=3564): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r2, 0x2, {0x1, 0xff, 0x4}}, 0x18) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 53.806884949s ago: executing program 5 (id=3573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x3c}}, 0x0) 53.282647578s ago: executing program 5 (id=3579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nolargeio}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0xb92c, &(0x7f000002e340)="$eJzs3XtsnWUdwPGnXbu1kMEwdFwUGZMBA9nWbVAKwbUd6yiXymVgB0yorMCk4zIKblxLCAmoGMB4IWZRIl6jRHEQiYLTiHJxGGOA+AeRgDFgsuhfoMZQ8/acU9pDaejTPU8z9vkk6+n7nv6eted7nvdky7LT03luRwh1oWQwVHvxza1PfHFd55M//9L92x++6/lHSmfbGsp3t5Vv28u3HWF4seHTtaVTdV/f9mhtcVA7et29Ghtr9gnh0qp1Wko3NzVXvm6oSvn0vMr9tSOHNZ8v/Rqxd/HhD23rekMIc0bN14QQlrzrB91D9bSv7iw/JmFUtxnlu2veuW/4tq70a8WzIazYHt7z+TGtiu9zTufsjx883d/I7qCnfXVXVf+2cuea8n5sq96De6Lq5/lrDy26s/wQDj/fpjHhlPS0d54RJtjHx/3vogVDpetmfQhhZghhVgihYbp7sGu0dywrXrNrK8fl7JX9P2e858WRS1/7TwhhbvEyXrpelF4LgN1Le8eylePs/5kT7f/WO7a9Yf/D7q+rvWNZsder9n/DRPt/Q+vaF0r7vq2lNPX29P4QAAAAAMC4rtty45W9/f19m3ziE5/4ZOST6b4yAam9s+mn+zsBAAAAAAAAAAAA3q8c/5x4un9GAAAAAAAAAAAAAPig6Opu3zmjZsypGaMPDtnRN3y7/K2eK753z9D6ym357tPHWXLM+/wPDQ0Nte5cUXkv9llV75fdUD1crD9Y99bT5cO26vcfrB8+Wx8uuWxDf9+S4rdaWR82FwfNxbqd9eHe4mBpcbC6Pny/OFg2fNAYthcHiy69un99ceLUyEfsg6WrezDMGFMsjHk2jO4/WD9/e+V2giUrq9WFcv/99z9vU9V9FeP3f2f99vd6X3J2jcn1X7S5cjvBku/a/we9vuaX49333v1H1u/QP61xrv9jGlVf96uu//PGWXJkfu6LT19R9H/sybvWlE/VvZ/r/6j1V1b3H1585PpfLHVK5fpfvLasmtKDsQfq6r5950T7f+L+dZXX9dpRsyOrnXHS861F/30Wbvtz+VT9JPufMtH+r5n3rusJk9TV/eBQ1f6fRP9wxDhLjjT52kunPVv0/8nTa5pG3TeZ/quq+y8e2HjN4uu23Hjsho29l/dd3ndVy5LlJxzf3LK8efHwFaH0cWqPyZ5kavt/+P3/R8/UhLBgZH7B8W9fUPSf++3OnvKphkn275xw/18y9ntllPm1YebMsLl3YGBTc+lj5XBp6WPpy8bpP4nX/48dVf6yxvJtTQgHjsy3HNB0YNG/acaqj5RPzZxk/9UT9h8c+X2JNMX9v75qZkz/wece/FnRf/4Pz6/8ncJkX/9Pnah/7bfs/6nq6q76C59drOj/t7qFJ0aOd/nzX1o5+v9q/wXnRo6fpn9aOfrf8OHDBiLHT9c/rRz9G5effHvk+Bn6p5Wj//aTWr8bOX6m/mnl6P+NY477Y+R4t/5p5eh/zuHNr0eOf1L/tHL0//uHtlwYOX6W/mnl6L/4kFtujhw/W/+0cvQfmH1tU+T4OfqnlaP/E7XXL40cP1f/tHL0/82xG34fOb5G/7Ry9N97/sZXIsfP0z+tHP3PWtp7d+T4+fqnlaP/Ayf3PRw5/in908rR/+KDH70scrxH/7Ry9P9q00/bI8fX6p/Wru5f/Q9yiv476p84KnK5C/RPK8f+r9vr8X0jxy/UP60c/W9a8J3/Ro5fpH9aOfo/cvSDL0eOr9M/rRz93zjxx9sixz+tf1o5+s877gdfjhy/WP+0cvS/5rA/vRQ5fon+aeXo//iiF/4VOd6rf1o5+r/6ib88EDn+Gf3TytH/mOaXn4wcv1T/tHL0X/PRX4/3/wS9H+v1TytH/637PdUfOd6nf1o5+v+u5pn6yPHL9E8rR/9999kxP3L8cv3TytH/mYWH/CNy/Ar908rRPxxx0I7I8Q36p5Wj/4XHNz0UOf5Z/dPK0f/+1v3uiBy/Uv+0cvTfOXf2DZHj/fqnlaP/4Qc1nh05vlH/tHL0v62x/oTI8av0TytH/8dm1hwaOX61/mnl6F+7pOtHkePX6J9Wjv7PrTjzC5Hj1+qfVo7+9y5ufzVyfJP+aeXov3beqqcix6/TP60c/Y/Yd23s/8g+oH9aOfr/M6w7IHL8ev3TytF/25yzb40cv0H/tHL0v+XQ89ZGjn/uxTe3zgr6J5Oj/y9OuPO+yPHN9n9aOfpvarn9scjxLfqnlaP/wiPv+Wvk+I36p5Wj/ytH3f3vyPGb9E8rR/9vzvrK7Mjxm/VPK0f/8xvuOzpy/Bb908rRf/aBW1dGjt+qf1o5+v/2gAfWR47fpj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt6dwF06Fv4fPzNmxhpS1iLZS3ZZUhg0KC3WJPs+WUNZC1EhWyhKypqtJEtJSLudylJJKdJGWilZ/q8xS4zvSP37NZrv+/16zTxnuefMda7PfZ3nmed+zj0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85208av3VBoNh464d9Iz7b3/olCuP3GzUVZcdfdzVFxx200Vjb111mnF3r/rERAZPPtiqY+4bOnaTYSddctbQMVeGPvVxp5t22iEzDoZsk0e1/+b/ZNjzjr8wdMLVIUeM/TXB9E/+7TNvdeFgMJj5nzxerY1HrjlqzOSN/TWh21Tj7h53+4TLw8b+WmmLwWClTQeT3D8mv8c2HLXu5B7D/4KNR6659kT9B+M6P9l94vXdauL9fKpDNx0yWcP9h2w8ctQ6Y1pPah3vs/fRT+4Dg8GwUweDYacNBsNOHwyGnTG5e/CfMXK1ZVYb85o//vrY6geN/4Igvb4PeeRNl4z5nDF87OeJYWeO/1wA/G8Zudoyq4f1P2L8/Wn93/voPRtZ//C/b+2Rqy0zeMrX+WNvPWj8v+/j+l957ivumnwjBgAAAP5Vjz9w+VXjjvUNHQzmGUx0vPdJ474vMOTCq2+5ZbIN9PkhHCd75s9M/I8Z03ma8+YdDHbdcHIPhclgijiOzb9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNonj/zOP/3jAVJeuMW7TBW89YacNJv7zY26b5r8+6slmSj3+Pxg9ZGzLMc1HDwaDN49cb4NFBoPBBjudcOt8gwn3rTDmvpVmmWrcCQIWefL310/igce/m/zJkzVMN+ExLnzy8dd+4rSphkw0iKfY9omjzt5x44eXnfjjQpN+HhPOL3HdG+44cfx7WYZOtNGk9tXxjz/+uUzcedzYFxkz9iX22mX3Jfbcd7/FRu+y1Q7b7bDdrssvuewKyy21/LJLLbH96J23W3Ls75Oas7Gnrlj9uczZiInn7IGRT52ziZ/bpOZs3mefsycfccdrbp9t/JwN+xfnbPVnn7N5R48f66rDB1s+OTdj/so1hg/2GXNlqanH7ELjtp1jzLavnWXoYHDsP57omEtTT9gHhxw0+j9w3pJxH0eO+7haPG/JpZM6b8lgm4keZ8WxH/a6cvx2E7/PetzNz/m8JSuPOmThMWtxoj//f+Hf+vz/jF4rDJkwUeNPGjJum7G9/nGeifHTtupTzjOxfDqXzH/SM8Y779AJ+3Ua77j3xQ2ZaP6f7X1xg0Xu3fL8sc9r1eXH/qnH/+0o+bVjnX/MXvC0147Bs792TPWPi/+4dbsb5574teONkx7i09bF+DmaeqKNJvXacc3Dww4a8/jjxzyJ1451Ro97o/E/XjvG/LWrj3/tGDP2UcMHx465svSYK2sOH5wz5soyT16ZdnD1mCuLb7PbztuOuWGtZ+63iwx52g88hv121ET77XM4P84q1w0Gq1ydntekpzNL++2IZxlvfj/34Fnfz73w4Y+uPxgMZhv7WXrMkxw79n9HGu+wZx9vOP/E4NnOPzFYcYXzV/8Pj3fCOntyXxt3uqi1JvFnnrbOZn7GOjt4qqesjOf6dc22Yfuxl+eY8GgXn3b9QePnaPhEj/vPPkePfy6p//iv+Z5q6KmDIc82N2s+l7mZ8dnn5rl+/bLI/GPvn/ZZ5maOWWdffvzcjPgX52bNSczNU78efqohBw2mffrcDHvya+AFxs3NqOcyNzP8Z/ab6cL2Yy8vOOGmTR5fbsHxcxPmIn7+H//4o/7Vudlywn6zwJP3zTd0MGLEYJ+t9tprj6XG/j7+6tJjf3/2NbjGc5nLaf4zcznXuFedoc+cnAk3rXjTSuv8u2twjX91LucdDB3/b+7REy+W/xzf/+mmfzf9u+nfTf9u+nfTv5v+xSZx/H/e8d8XXPTGRW4Z982Y4deev9G2k3u8k9kUffx/XN+nHf/fdqPzrx06mHDfsx6fHbvN8/L47PJjP+y/1PjtJj4+OO7m53x89opjLtv0v3R89t8yfq0+h+8bev3vpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276F5vE8f8lx/8cwOP373X3uAOhw7ceOee//T6rKcQUffx/XN+nHf+/es6RWw8dTLjvWY//j92m4/j/Hnfed8jz+fj/+LXq+D//hP7d9O/29P7TTrZxMHlY/93076Z/N/276d9N/276d9O/m/7d9C82ieP/q47/OYCdH7/twfE/D3DzyavtNrnHO5lNqcf//f//vbz+d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/YuNO/4/mOi/PXyr/SIKx///t02i/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+b9M/aum/sf5RS/+36x+19N9E/6il/zv0j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o6f3nwJmaBL9t9c/aln/O+gftfTfUf+opf9o/aOW/u/UP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/u/SPWvrvoX/U0n9P/aOW/nvpH7X0f7f+UUv/9+gftfTfW/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v+9+kct/d+nf9TS/0D9o5b+B+kftfQ/WP+opf/79Y9a+h+if9TS/1D9o5b+H9A/aun/Qf2jlv4f0j9q6X+Y/lFL/8P1j1r6H6F/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/2Gf0n/a/Oqznq5b+H7H+o5b+x+kftfQ/Xv+opf8J+kct/T+qf9TS/2P6Ry39T9Q/aul/kv5RS/+P6x+19P+E/lFL/5P1j1r6f1L/qKX/KfpHLf0/pX/U0v/T+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0/4z+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0P1//qKX/Z/WPWvp/Tv+opf8F+kct/T+vf9TS/0L9o5b+X9A/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+X9Q/aun/Jf2jlv6X6R+19P+y/lFL/8v1j1r6f0X/qKX/FfpHLf2v1D9q6X+V/lFL/6/qH7X0v1r/qKX/1/SPWvp/Xf+opf839I9a+n9T/6il/7f0j1r6f1v/qKX/d/SPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/u/pHLf2/p3/U0v/7+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9n0jPv6X/ffpHLf1/qX/U0v9X+kct/X+tf9TS/zf6Ry39f6t/1NL/fv2jlv4P6B+19P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f83/aOW/o/oH7X0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0HzLQP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/qKX/evpHLf3X1z9q6b+B/lFL/w31j1r6b6R/1NL/bfpHLf031j9q6f92/aOW/pvoH7X0f4f+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/2j9o5b+79Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf+79I+m3P5DntZ/D/2jKbf/09f/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+hNf2fGOvA57Z1S/8P1PT/17T0/6D+UUv/D+kftfQ/TP+opf/h+kct/Y/QP2rp/2H9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/j+gftfQ/Tv+opf/x+kct/U/QP2rp/1H9o5b+H9M/aul/ov7RlNt/6FNvHXKS/tGU2//p6//j+kct/T+hf9TS/2T9o5b+n9Q/aul/iv5RS/9P6R+19P+0/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39P6N/1NL/bP2jlv7n6B+19D9X/6il/3n6Ry39z9c/aun/Wf2jlv6f0z9q6X+B/lFL/8/rH7X0v1D/qKX/F/SPWvpfpH/U0v9i/aOW/pfoH7X0v1T/qKX/F/WPWvp/6Tn0H/c/pzzxfzm855uW/pdZ/1FL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrf0Nf/Of0ga0v/G/v6Pyct/W/SP2rpf7P+UUv/W/SPWvp/V/+opf/39I9a+n9f/6il/636Ry39b9M/aul/u/5RS/879I9a+v9A/6il/w/1j1r6/0j/qKX/nfpHLf1/rH/U0v8u/aOW/j/RP2rp/1P9o5b+d+sftfT/mf5RS/+f6x+19L9H/6il/736Ry39f6F/1NL/Pv2jlv6/1D9q6f8r/aOW/r/WP2rp/xv9o5b+v9U/aul/v/5RS/8H9I9a+v9O/6il/4P6Ry39f69/1NL/D/pHLf3/qH/U0v9P+kct/f+sf9TS/y/6Ry39H9I/aun/sP5RS/+/6h+19P+b/lFL/0f0j1r6/13/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j0r6P3lR/2dq6T9E/6il/1D9o5b+U+kftfQfpn/U0n+4/lFL/xH6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+M+gftfR/gf5RS/8Z9Y9a+s+kf9TSf2b9o5b+L9Q/auk/i/5RS/8X6R+19H+x/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry39X6J/1NL/pfpHLf3n1j9q6T+P/lFL/5fpH7X0n1f/qKX/y/WPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/1foH7X0f6X+UUv/RfWPWvq/Sv+opf9i+kct/RfXP2rpv4T+UUv/JfWPWvovpX/U0n9p/aOW/svoH7X0X1b/qKX/q/WPWvovp3/U0n95/aOW/ivoH7X0X7G9/9B8c0v/17T3n4SW/ivpH7X0f63+UUv/1+kftfRfWf+opf8q+kct/VfVP2rpP1L/qKX/avpHLf1X1z9q6b+G/lFL/9frH7X0H6V/1NJ/Tf2jlv5r6R+19F9b/6il/xv0j1r6v1H/qKX/OvpHLf3fpH/U0v/N+kct/d+if9TS/636Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfR/m/5RS/+N9Y9a+r9d/6ih//DBYOgm+kcN/cdcfIf+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j6b0/iPGXd5O/2hK7z/+4vb6Ry39d9A/aum/o/5RS//R+kct/d+p/xjHT3xDS/+d9I9a+u+sf9TSfxf9o5b+u+ofjes/fNzVKbb/bvpHLet/d/2jlv7v0j9q6b+H/lFL/z31j1r676V/1NL/3fpHLf3fo3/U0n9v/aOW/vvoH7X031f/qKX/fvpHLf331z9q6X+A/lFL//fqH7X0f5/+UUv/A/WPWvofpH/U0v9g/aOW/u/XP2rpf4j+UUv/Q/WPWvp/QP+opf8H9Y9a+n9I/6il/2H6Ry39D9c/aul/hP5RS/8P6x+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+n9E/6il/3H6Ry39j9c/aul/gv5RS/+P6h+19P+Y/lFL/xP1j1r6n6R/1NL/4/pHLf0/oX/U0v9k/aOW/p/UP2rpf4r+UUv/T+kftfT/tP5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/T+jf9TS/2z9o5b+5+gftfQ/V/+opf95+kct/c/XP2rp/1n9o5b+n9M/aul/gf5RS//P6x9Nef2nnXDxqf0v1D+a8vrn9f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6Ry39f6d/1NL/Qf2jlv6/1z9q6f8H/aOW/n/UP2rp/yf9o5b+f9Y/aun/F/2jlv4P6R+19H9Y/6il/1/1j1r6/03/qKX/I/pHLf3/rn/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHJf2nGugftfQfon/U0n+o/lFL/6n0j1r6D9M/auk/XP+opf8I/aOW/lPrH7X0n0b/qKX/tPpHLf2n0z9q6T+9/lFL/xn0j1r6v0D/qKX/jPpHLf1n0j9q6T+z/lFL/xfqH7X0n0X/qKX/i/SPWvq/WP+opf+s+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/i/RP2rp/1L9o5b+c+sftfSfR/+opf/L9I9a+s+rf9TS/+X6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf8r9I9a+r9S/6il/6L6Ry39X6V/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39lxrbf+rJNaznq5b+S1v/UUv/ZfSPWvovq3/U0v/V+kct/ZfTP2rpv7z+UUv/FfSPWvqvqH/U0v81+kct/VfSP2rp/1r9o5b+r9M/aum/sv5RS/9V9I9a+q+qf9TSf6T+UUv/1fSPWvqvrn/U0n8N/aOW/q/XP2rpP0r/qKX/mvpHLf3X0j9q6b+2/lFL/zfoH7X0f6P+UUv/dfSPWvq/Sf+opf+b9Y9a+r9F/6il/1v1j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aun/Nv2jlv4b6x+19H+7/lFL/030j1r6v0P/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSf7T+UUv/d+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fSPWvrvrn/U0v9d+kct/ffQP2rpv6f+UUv/vfSPWvq/W/+opf979I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rp/179o5b+79M/aul/oP5RS/+D9I9a+h+sf9TS//36Ry39D9E/aul/qP5RS/8P6B+19P+g/lFL/w/pH7X0P0z/qKX/4fpHE/VfdXKP5//bJPofoX/Usv4/rH/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf2P1T9q6f8R/aOW/sfpH7X0P17/qKX/CfpHLf0/qn/U0v9j+kct/U/UP2rpf5L+UUv/j+sftfT/hP5RS/+T9Y9a+n9S/6il/yn6Ry39P6V/1NL/0/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19P+M/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/2f1j1r6f07/qKX/BfpHLf0/r3/U0v9C/aOW/l/QP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/l/UP2rp/yX9o5b+l+kftfT/sv5RS//L9Y9a+n9F/6il/xX6Ry39r9Q/aul/lf5RS/+v6h+19L9a/6il/9f0j1r6f13/qKX/N/SPWvp/U/+opf+39I9a+n9b/6il/3f0j1r6X6N/1NL/Wv2jlv7X6f8MI4r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Xf2jlv7f0z9q6f99/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6f8D/aOW/j/UP2rp/yP9o5b+d+oftfT/sf5RS/+79I9a+v9E/6il/0/1j1r6361/1NL/Z/pHLf1/rn/U0v8e/aOW/vfqH7X0/4X+UUv/+/SPWvr/Uv+opf+v9I9a+v9a/6il/2/0j1r6/3Zyjed5rqX//dZ/1NL/Af2jlv6/0z9q6f+g/lFL/9/rH7X0/4P+UUv/P+oftfT/k/5RS/8/6x+19P+L/lFL/4f0j1r6P6x/1NL/r/pHLf3/pn/U0v8R/aOW/n/XP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOS/sMG+kct/YfoH7X0H6p/1NJ/Kv2jlv7D9I9a+g8fDKaeXEN6Pll6oust/UdY/1FL/6n1j1r6T6N/1NJ/Wv2jlv7T6R+19J9e/6il/wz6Ry39X6B/1NJ/Rv2jlv4z6R+19J9Z/6il/wv1j1r6z6J/1NL/RfpHLf1frH/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/5foH7X0f6n+UUv/ufWf2JPT0dJ/Hv2jlv4v0z9q6T+v/lFL/5frH7X0n0//qKX//PpHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6v0D9q6f9K/aOW/ovqH7X0f5X+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/1frH7X0X07/qKX/8vpHLf1X0D9q6b+i/lFL/9foH7X0X0n/qKX/a/WPWvq/Tv+opf/K+kct/VfRP2rpv6r+UUv/kfpHLf1X0z9q6b+6/lFL/zX0j1r6v17/qKX/KP2jlv5r6h+19F9L/6il/9r6Ry3936B/1NL/jfpHLf3X0T9q6f8m/aOW/m/WP2rp/xb9o5b+b9U/aum/rv5RS//19I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf/b9I9a+m+sf9TS/+36Ry39N9E/aun/Dv2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/0fpHLf3fqX/U0n8n/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/3fpH7X030P/qKX/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+h+kct/T+gf9TS/4P6Ry39P6R/1NL/MP2jlv6HT6L/kPKdoqX/EdZ/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/WP2jlv4f0T9q6X+c/lFL/+P1j1r6n6B/1NL/o/pHLf0/pn/U0v9E/aOW/ifpH7X0/7j+UUv/T+gftfQ/Wf+opf8n9Y9a+p+if9TS/1P6Ry39P61/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS//P6B+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+n9W/6il/+f0j1r6X6B/1NL/8/pHLf0v1D9q6f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6J+e29P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f+31v6bPvvdLf0fae3/T7T0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0Hz7QP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/aMrs/8RMg4n6r6d/NGX2H+up/dfXP2rpv4H+UUv/DfWPWvpvpH/U0v9t+kct/TfWP2rp/3b9o5b+m+gftfR/h/5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/aP2jlv7v1D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv676R+19N9d/6il/7v0j1r676F/1NJ/z8r+Q//pFi3996rs/8+19H+3/lFL//foH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/vfpHLf3fp3/U0v9A/aOW/gfpH7X0P1j/qKX/+/WPWvofon/U0v9Q/aOW/h/QP2rp/0H9o5b+H9I/aul/mP5RS//D9Y9a+h+hf9TS/8P6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+H9E/aul/nP5RS//j9Y9a+p+gf9TS/6P6Ry39P6Z/1NL/RP2jlv4n6R+19P+4/lFL/0/oH7X0P1n/qKX/J/WPWvqfon/U0v9T+kct/T+tf9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/z+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvp/Vv+opf/n9I9a+l+gf9TS//P6Ry39L9Q/aun/Bf2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aun/Rf2jlv5f0j9q6X+Z/lFL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf2/G/uPXvqwof+9oT0ftfT/nvUftfT/vv5RS/9b9Y9a+t+mf9TS/3b9oym4/8xP7X+H/tEU3P9p6/8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9o5b+9+kftfT/pf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/+/WPWvo/oH/U0v93+kct/R/UP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/5D+UUv/h/WPWvr/Vf+opf/f9I9a+j+if9TS/+/6Ry39H9U/aun/mP5RS//H9Y9a+j+hf1TSf8RA/6il/xD9o5b+Q/WPWvpPpX/U0n+Y/lFL/+H6Ry39R+gftfSfWv+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0v8F+kct/WfUP2rpP5P+UUv/mfWPWvq/UP+opf8s+kct/V+kf9TS/8X6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfR/if5RS/+X6h+19J9b/6il/zz6Ry39X6Z/1NJ/Xv2jlv4v1z9q6T+f/lFL//n1j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39X6F/1NL/lfpHLf0X1T9q6f8q/aOW/ovpH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv6v1j9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv6v0T9q6b+S/lFL/9fqH7X0f53+UUv/lfWPWvqvon/U0n9V/aOW/iP1j1r6r6Z/1NJ/df2jlv5r6B+19H+9/lFL/1H6Ry3919Q/aum/lv5RS/+19Y9a+r9B/6il/xv1j1r6r6N/1NL/TfpHLf3frH/U0v8t+kct/d+qf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/t+kftfTfWP+opf/b9Y9a+m+if9TS/x36Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aMpuP9UT7l1xGj9oym4/9PW/zv1j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aun/Lv2jlv576B+19N9T/6il/176Ry39361/1NL/PfpHLf331j9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19H+v/lFL//fpH7X0P1D/qKX/QfpHLf0P1j9q6f9+/aOW/ofoH7X0P1T/qKX/B/SPWvp/UP+opf+H9I9a+h+mf9TS/3D9o5b+R+gftfT/sP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfQ/Vv+opf9H9I9a+h+nf9TS/3j9o5b+J+gftfT/qP5RS/+P6R+19D9R/6il/0n6Ry39P65/1NL/E/pHLf1P1j9q6f9J/aOW/qfoH7X0/5T+UUv/T+sftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v8z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/p/VP2rp/zn9o5b+F+gftfT/vP5RS/8L9Y9a+n9B/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+n9R/6il/5f0j1r6X6Z/1NL/y/pHLf0v1z9q6f8V/aOW/lfoH7X0v1L/qKX/VfpHLf2/qn/U0v9q/aOW/l/TP2rp/3X9o5b+39A/aun/Tf2jlv7f0j9q6f9t/aOW/t/RP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/+/qH7X0/57+UUv/7+sftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/H+gftfT/of5RS/8f6R+19L9T/6il/4/1j1r636V/1NL/J/pHLf1/qn/U0v9u/aOW/j/TP2rp/3P9o5b+9+gftfS/V/+opf8v9I9a+t+nf9TS/5f6Ry39f6V/1NL/1/pHLf1/o3/U0v+3+kct/e/XP2rp/4D+UUv/3+kftfR/UP+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9D+kct/R/WP2rp/1f9o5b+f9M/aun/iP5RS/+/6x+19H9U/6il/2P6Ry39H9c/aun/hP5RSf+pB/pHLf2H6B+19B+qf9TSfyr9o5b+w/SPWvoP1z9q6T9C/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+L9A/auk/o/5RS/+Z9I9a+s+sf9TS/4X6Ry39Z9E/aun/Iv2jlv4v1j9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/0v0j1r6v1T/qKX/3PpHLf3n0T9q6f8y/aOW/vPqH7X0f7n+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6f8K/aOW/q/UP2rpv6j+UUv/V+kftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0f7X+UUv/5fSPWvovr3/U0n8F/aOW/ivqH7X0f43+0ZTc/ym9p15J/2hK7v/U9f/a6v5DDprkPSX9X1fdf9Ja+q+sf9TSfxX9o5b+q+oftfQfqX/U0n81/aOW/qvrH7X0X0P/qKX/6/WPWvqP0j9q6b+m/lFL/7X0j1r6r61/1NL/DfpHLf3fqH/U0n8d/aOW/m/SP2rp/2b9o5b+b9E/aun/Vv2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+r9N/6il/8b6Ry39365/1NJ/E/2jlv7v0D9q6b+p/lFL/830j1r6b65/1NJ/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfQfrX/U0v+d+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvr/0zTjPtY0P9d+kct638P/aOW/nvqH7X030v/qKX/u/WPWvq/R/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/u/VP2rp/z79o5b+B+oftfQ/SP+opf/B+kct/d+vf9TS/xD9o5b+h+oftfT/gP5RS/8P6h+19P+Q/lFL/8P0j1r6H65/1NL/CP2jlv4f1j9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19P+I/lFL/+P0j1r6H69/1NL/BP2jlv4f1T9q6f8x/aOW/ifqH7X0P0n/qKX/x/WPWvp/Qv+opf/J+kct/T+pf9TS/xT9o5b+n9I/aun/af2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+n9G/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/7P6Ry39P6d/1NL/Av2jlv6f1z9q6X+h/lFL/y/oH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/y/qH7X0/5L+UUv/y/SPWvp/Wf+opf/l+kct/b+if9TS/wr9o5b+V+oftfS/Sv+opf9X9Y9a+l+tf9TS/2v6Ry39v65/1NL/G/pHLf2/qX/U0v9b+kct/b+tf9TS/zv6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rp/139o5b+39M/aun/ff2jlv636h+19L9N/6il/+36Ry3979A/aun/A/2jlv4/fI79hzz6xJP+r4b3fNPS/0fWf9TS/079o5b+P9Y/aul/l/5RS/+f6B+19P+p/lFL/7v1j1r6/0z/qKX/z/WPWvrfo3/U0v9e/aOW/r/QP2rpf5/+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/9/qH7X0v1//qKX/A/pHLf1/p3/U0v9B/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/g/pH7X0f1j/qKX/X/WPWvr/Tf+opf8j+kct/f+uf9TS/1H9o5b+j+kftfR/XP+opf8T+kcl/acZ6B+19B+if9TSf6j+UUv/qfSPWvoP0z9q6T9c/6il/wj9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvq/QP+opf+M+kct/WfSP2rpP7P+UUv/F+oftfSfRf+opf+L9I9a+r9Y/6il/6z6Ry39Z9M/auk/u/5RS/859I9a+s+pf9TSfy79o5b+L9E/aun/Uv2jlv5z6x+19J9H/6il/8v0j1r6z6t/1NL/5fpHLf3n0z9q6T+//lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/yv0j1r6v1L/qKX/ovpHLf1fpX/U0n8x/aOW/ovrH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NL/1fpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NL/NfpHLf1X0j9q6f9a/aOW/q/TP2rpv7L+UUv/VfSPWvqvqn/U0n+k/lFL/9X0j1r6r65/1NJ/Df2jlv6v1z9q6T9K/6il/5r6Ry3919I/aum/tv5RS/836B+19H+j/lFL/3X0j1r6v0n/qKX/m/WPWvq/Rf+opf9b9Y9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rp/zb9o5b+G+sftfR/u/5RS/9N9I9a+r9D/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n+0/lFL/3fqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NL/XfpHLf330D9q6b+n/lFL/730j1r6v1v/qKX/e/SPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6f9e/aOW/u/TP2rpf6D+UUv/g/SPWvofrH/U0v/9+kct/Q/RP2rpf6j+UUv/D+gftfT/oP5RS/8P6R+19D9M/6il/+H6Ry39j9A/aun/Yf2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS/+P6B+19D9O/6il//H6Ry39T9A/aun/Uf2jlv4f0z9q6X+i/lFD/xsGg2lO0j9q6D9m/X9c/6il/yf0j1r6n6x/1NL/k/pHLf1P0T9q6f8p/aOW/p/WP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/Z/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0/q3/U0v9z+kct/S/QP2rp/3n9o5b+F+oftfT/gv5RS/+L9I9a+l+sf9TS/xL9o5b+l+oftfT/ov5RS/8v6R+19L9M/6il/5f1j1r6X65/1NL/K/pHLf2v0D9q6X+l/lFL/6v0j1r6f1X/qKX/1fpHLf2/pn/U0v/r+kct/b+hf9TS/5v6Ry39v6V/1NL/2/pHLf2/o3/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv7f1T9q6f89/aOW/t/XP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/j/QP2rp/8NJ9R/6XxrX81RL/x9Z/1FL/zv1j1r6/1j/qKX/XfpHLf1/on/U0v+n+kct/e/WP2rp/zP9o5b+P9c/aul/j/5RS/979Y9a+v9C/6il/336Ry39f6l/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/379o5b+D+gftfT/nf5RS/8H9Y9a+v9e/6il/x/0j1r6/1H/qKX/n/SPWvr/Wf+opf9f9I9a+j+kf9TS/2H9o5b+f9U/aun/N/2jlv6P6B+19P+7/lFL/0f1j1r6P6Z/1NL/cf2jlv5P6B+V9J92oH/U0n+I/lFL/6H6Ry39p9I/auk/TP+opf9w/aOW/iP0j1r6T61/1NJ/Gv2jlv7T6h+19J9O/6il//T6Ry39Z9A/aun/Av2jlv4z6h+19J9J/6il/8z6Ry39X6h/1NJ/Fv2jlv4v0j9q6f9i/aOW/rPqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6v0T/qKX/S/WPWvrPrX/U0n8e/aOW/i/TP2rpP6/+UUv/l+sftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/q/QP2rp/0r9o5b+i+oftfR/lf5RS//F9I9a+i+uf9TSfwn9oymuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAAP//KTc12w==") r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 51.520042191s ago: executing program 5 (id=3584): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 49.420037981s ago: executing program 5 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}}}}}}, 0x0) 49.127728492s ago: executing program 42 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}}}}}}, 0x0) 5.848009069s ago: executing program 0 (id=3850): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="7bf10d04e49d27cdfb8c", 0xa}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendfile(r2, r0, &(0x7f0000000280)=0x5, 0x9) 5.57147237s ago: executing program 0 (id=3852): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f000000040000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240), &(0x7f0000000280)=@udp=r0}, 0x20) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x2, 0x2382, @loopback}, 0x80) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x40) 5.30149266s ago: executing program 0 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdb0, &(0x7f0000001340)=ANY=[], 0x0) 4.486942772s ago: executing program 4 (id=3855): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 4.156786757s ago: executing program 4 (id=3857): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x2c020400) r0 = msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) 4.002438629s ago: executing program 3 (id=3858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001002bbd700000000100e00000020000000000000000000000000000000000000000000000000000000006530000000208000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.759142727s ago: executing program 3 (id=3859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000480)=""/16, 0x10}], 0x2}, 0x4}], 0x2, 0x60, 0x0) 3.482619808s ago: executing program 3 (id=3860): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r0}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000000)) 3.394780284s ago: executing program 4 (id=3861): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 3.090409867s ago: executing program 0 (id=3862): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 2.690680268s ago: executing program 3 (id=3864): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) 2.490648593s ago: executing program 4 (id=3866): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 2.352089013s ago: executing program 0 (id=3867): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) 2.280628728s ago: executing program 8 (id=3868): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') fchdir(r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 2.095795633s ago: executing program 1 (id=3869): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000440), &(0x7f0000000140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 2.032052978s ago: executing program 0 (id=3870): syz_open_dev$vim2m(0x0, 0x400202, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 1.99192039s ago: executing program 8 (id=3871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '\'+/[&:]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.777197717s ago: executing program 1 (id=3872): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000f40)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000380)=[{0x41, 0x4001, 0x0, 0x0}], 0x1}) 1.622785708s ago: executing program 8 (id=3873): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.303801022s ago: executing program 4 (id=3874): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @random="dd7b70c42693", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x18, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800}]}}}}}}}}, 0x0) 1.150330834s ago: executing program 8 (id=3875): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 1.125388616s ago: executing program 3 (id=3876): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000040)=ANY=[], 0x0, 0x6a9, &(0x7f00000000c0)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0413"], 0x8) r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 947.213469ms ago: executing program 1 (id=3877): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) 799.96484ms ago: executing program 8 (id=3878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r0, &(0x7f00000008c0)='l', 0x1, 0x1, 0x0, 0x0, r0}]) 620.323024ms ago: executing program 1 (id=3879): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) creat(&(0x7f00000000c0)='./file0\x00', 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) 502.867423ms ago: executing program 8 (id=3880): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000340)) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 401.45847ms ago: executing program 1 (id=3881): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) clock_settime(0x0, 0x0) 348.236184ms ago: executing program 4 (id=3882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000280)="1441f03303", 0x5}], 0x1) 127.944821ms ago: executing program 3 (id=3883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0004", 0x10, 0x11, 0x1, @local, @local, {[], {0x4e20, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x8, 0x0, @val=0x80}}}}}}}}, 0x0) 0s ago: executing program 1 (id=3884): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) kernel console output (not intermixed with test programs): T14013] dump_stack_lvl+0x188/0x24e [ 510.162773][T14013] ? show_regs_print_info+0x12/0x12 [ 510.167999][T14013] ? load_image+0x410/0x410 [ 510.172731][T14013] ? __might_sleep+0xd0/0xd0 [ 510.177362][T14013] ? __lock_acquire+0x7c40/0x7c40 [ 510.182434][T14013] should_fail_ex+0x390/0x4c0 [ 510.187159][T14013] should_failslab+0x5/0x20 [ 510.191706][T14013] slab_pre_alloc_hook+0x59/0x300 [ 510.196780][T14013] ? io_sqe_files_register+0x223/0x8a0 [ 510.202351][T14013] __kmem_cache_alloc_node+0x4f/0x270 [ 510.207966][T14013] ? io_sqe_files_register+0x223/0x8a0 [ 510.213469][T14013] kmalloc_trace+0x26/0xe0 [ 510.217923][T14013] io_sqe_files_register+0x223/0x8a0 [ 510.223244][T14013] ? __se_sys_io_uring_register+0x2c9/0xeb0 [ 510.229231][T14013] ? __fget_files+0x3fc/0x460 [ 510.233948][T14013] ? io_register_rsrc_update+0x1c0/0x1c0 [ 510.239631][T14013] ? io_run_task_work+0x267/0x310 [ 510.244705][T14013] __se_sys_io_uring_register+0x5c1/0xeb0 [ 510.250483][T14013] ? __x64_sys_io_uring_register+0xa0/0xa0 [ 510.256334][T14013] ? lockdep_hardirqs_on+0x94/0x140 [ 510.261662][T14013] do_syscall_64+0x4c/0xa0 [ 510.266291][T14013] ? clear_bhb_loop+0x60/0xb0 [ 510.270999][T14013] ? clear_bhb_loop+0x60/0xb0 [ 510.275718][T14013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.281653][T14013] RIP: 0033:0x7f7252f9e159 [ 510.286102][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.305839][T14013] RSP: 002b:00007f7253db0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 510.314389][T14013] RAX: ffffffffffffffda RBX: 00007f7253225fa0 RCX: 00007f7252f9e159 [ 510.322481][T14013] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 510.330484][T14013] RBP: 00007f725303506b R08: 0000000000000000 R09: 0000000000000000 [ 510.338578][T14013] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 510.346590][T14013] R13: 00007f7253226038 R14: 00007f7253225fa0 R15: 00007ffe4f37afb8 [ 510.354613][T14013] [ 510.751882][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 510.785608][T14028] device bridge_slave_1 left promiscuous mode [ 510.792031][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.874425][T14028] device bridge_slave_0 left promiscuous mode [ 510.903688][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.784810][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 511.998225][T14060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.009687][ T4402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.212407][T14074] netlink: 'syz.4.2793': attribute type 12 has an invalid length. [ 512.255632][T14074] netlink: 'syz.4.2793': attribute type 29 has an invalid length. [ 512.283943][T14074] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2793'. [ 512.356678][T14076] netlink: 'syz.4.2793': attribute type 12 has an invalid length. [ 512.441827][T14076] netlink: 'syz.4.2793': attribute type 29 has an invalid length. [ 512.466446][T14076] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2793'. [ 513.775663][T13857] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 513.992165][T13857] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 514.022895][T13857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 514.056749][T13857] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.107472][T13857] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 514.133650][T13857] usb 5-1: Product: syz [ 514.158492][T13857] usb 5-1: Manufacturer: syz [ 514.173580][T13857] usb 5-1: SerialNumber: syz [ 514.212977][T13857] usb 5-1: config 0 descriptor?? [ 514.239861][T14122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.272011][T13857] usb 5-1: selecting invalid altsetting 0 [ 514.532998][T14122] usb 5-1: BOGUS urb xfer, pipe 0 != type 3 [ 514.758690][ T5722] usb 5-1: USB disconnect, device number 13 [ 514.807734][T14157] loop3: detected capacity change from 0 to 128 [ 514.867862][T14157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 514.911094][T14157] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 514.939541][T14125] loop5: detected capacity change from 0 to 40427 [ 514.986872][T14125] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 515.032545][T14125] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 515.112610][T14157] Invalid argument reading file caps for ./file0 [ 515.121615][T14125] F2FS-fs (loop5): Found nat_bits in checkpoint [ 515.236149][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 515.350036][T14125] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 515.401924][T14125] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 516.135687][ T955] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 516.325648][ T955] usb 4-1: Using ep0 maxpacket: 32 [ 516.341843][ T955] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.394236][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.448584][ T955] usb 4-1: config 0 descriptor?? [ 516.482030][ T955] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 517.691121][ T955] gspca_nw80x: reg_w err -71 [ 517.702446][ T955] nw80x: probe of 4-1:0.0 failed with error -71 [ 517.728546][ T955] usb 4-1: USB disconnect, device number 13 [ 518.040451][T13857] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 518.103647][T13857] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 519.370881][T14245] netlink: 'syz.1.2843': attribute type 1 has an invalid length. [ 519.483746][T14245] device bond1 entered promiscuous mode [ 519.546702][T14245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.662496][T14249] bond1: (slave veth3): making interface the new active one [ 519.705209][T14249] device veth3 entered promiscuous mode [ 519.736434][T14249] bond1: (slave veth3): Enslaving as an active interface with an up link [ 519.772182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 519.789836][T14255] loop5: detected capacity change from 0 to 4096 [ 519.805395][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 519.840601][T14255] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 520.018841][T14255] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 520.494282][T14275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2853'. [ 520.513563][T10766] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 520.539223][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.547145][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.558808][T10766] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 520.661389][T14283] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2853'. [ 520.935574][ T5722] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 521.158272][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.195665][ T5722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 521.245619][ T5722] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.313547][ T5722] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 521.355571][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 521.363645][ T5722] usb 5-1: Product: syz [ 521.397375][ T5722] usb 5-1: Manufacturer: syz [ 521.436225][T14282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.446440][ T5722] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 521.494198][ T5722] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 521.628692][T14288] loop5: detected capacity change from 0 to 32768 [ 521.724930][T14288] JBD2: Ignoring recovery information on journal [ 521.765975][ T4327] usb 5-1: USB disconnect, device number 14 [ 521.801758][ T4327] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 521.887702][ T4327] garmin_gps 5-1:1.0: device disconnected [ 521.909036][T14288] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 522.703227][T10766] ocfs2: Unmounting device (7,5) on (node local) [ 523.066932][ T955] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.103272][T14330] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.445657][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.712482][T14349] device-mapper: table: 248:2: multipath: invalid initial priority group number (-EINVAL) [ 523.760556][T14349] device-mapper: ioctl: error adding target to table [ 525.085309][T14394] netlink: 'syz.4.2889': attribute type 1 has an invalid length. [ 525.241938][T14394] device bond1 entered promiscuous mode [ 525.307524][T14394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.483028][T14398] bond1: (slave veth3): making interface the new active one [ 525.557269][T14398] device veth3 entered promiscuous mode [ 525.564588][T14398] bond1: (slave veth3): Enslaving as an active interface with an up link [ 525.615791][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 525.686837][ T27] audit: type=1326 audit(1790172056.762:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14402 comm="syz.5.2894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7252f9e159 code=0x0 [ 526.725604][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.569355][T14423] loop4: detected capacity change from 0 to 32768 [ 527.606635][T14441] process '/newroot/325/file0' started with executable stack [ 527.635256][T14423] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2899 (14423) [ 527.773993][T14423] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 527.806707][T14423] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 527.852790][T14423] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 527.941827][T14423] BTRFS info (device loop4): use zstd compression, level 3 [ 527.980639][T14423] BTRFS info (device loop4): force clearing of disk cache [ 528.017255][T14423] BTRFS info (device loop4): enabling disk space caching [ 528.049101][T14423] BTRFS info (device loop4): disk space caching is enabled [ 528.325354][T14423] BTRFS info (device loop4): enabling ssd optimizations [ 528.396122][T14423] BTRFS info (device loop4): rebuilding free space tree [ 528.512657][T14423] BTRFS info (device loop4): disabling free space tree [ 528.525586][T14423] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 528.578545][T14423] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 529.474161][T14476] loop3: detected capacity change from 0 to 32768 [ 529.585645][T14476] JBD2: Ignoring recovery information on journal [ 529.709033][T14519] netlink: 762 bytes leftover after parsing attributes in process `syz.1.2923'. [ 529.767343][T14476] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 529.780990][T12037] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 530.167913][T14503] loop5: detected capacity change from 0 to 32768 [ 530.214247][T14476] OCFS2: ERROR (device loop3): int ocfs2_mark_extent_written(struct inode *, struct ocfs2_extent_tree *, handle_t *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *): Inode 17058 has unwritten extents that are being written to, but the feature bit is not set in the super block [ 530.249303][T14503] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 530.273540][T14503] JBD2: Ignoring recovery information on journal [ 530.362605][T14476] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 530.391931][T14476] OCFS2: File system is now read-only. [ 530.441638][T14476] (syz.3.2916,14476,1):ocfs2_dio_end_io_write:2372 ERROR: status = -30 [ 530.490110][T14503] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 530.921849][ T9560] ocfs2: Unmounting device (7,3) on (node local) [ 531.053765][T14544] loop4: detected capacity change from 0 to 512 [ 531.276041][T14544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 531.324471][T14544] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.341523][T10766] ocfs2: Unmounting device (7,5) on (node local) [ 531.467421][ T27] audit: type=1800 audit(1790172062.542:241): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2925" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 531.533312][ T27] audit: type=1800 audit(1790172062.542:242): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2925" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 531.617832][T14552] fuse: Bad value for 'fd' [ 531.660955][T14555] bridge0: port 3(veth0) entered blocking state [ 531.702899][T14555] bridge0: port 3(veth0) entered disabled state [ 531.712376][T12037] EXT4-fs (loop4): unmounting filesystem. [ 531.748234][T14555] device veth0 entered promiscuous mode [ 532.117336][T14568] block nbd5: shutting down sockets [ 532.238775][T14574] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 532.281424][T14574] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2936'. [ 533.157045][T14600] bridge0: port 3(veth0) entered blocking state [ 533.165880][T14600] bridge0: port 3(veth0) entered disabled state [ 533.173429][T14600] device veth0 entered promiscuous mode [ 533.211792][T14600] bridge0: port 3(veth0) entered blocking state [ 533.218261][T14600] bridge0: port 3(veth0) entered forwarding state [ 534.294656][T14631] netlink: 'syz.5.2955': attribute type 1 has an invalid length. [ 534.325667][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 536.523322][T14699] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2976'. [ 536.596586][T14699] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.604142][T14699] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.673730][T14704] loop4: detected capacity change from 0 to 2048 [ 536.683001][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2976'. [ 536.745941][T14704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.951455][T14711] bond0: invalid NS target :: specified for addition [ 537.045189][T14711] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 537.394195][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 537.495629][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 537.714848][ T7] usb 4-1: config 0 has an invalid interface number: 5 but max is 3 [ 537.728518][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 537.757827][ T7] usb 4-1: config 0 has no interface number 0 [ 537.779770][ T7] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 537.813640][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.846788][ T7] usb 4-1: config 0 descriptor?? [ 537.861507][ T7] ums-realtek 4-1:0.5: USB Mass Storage device detected [ 538.105183][ T5715] usb 4-1: USB disconnect, device number 14 [ 538.830288][T14758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2994'. [ 538.908021][T14758] bridge0: port 3(vlan2) entered disabled state [ 538.914557][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.922135][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.937731][T14750] loop4: detected capacity change from 0 to 32768 [ 539.003447][T14750] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 539.101360][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2994'. [ 539.443140][ T4367] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 539.458338][ T27] audit: type=1326 audit(1790172070.532:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.4.2998" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x0 [ 539.482184][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.247783][T14795] loop3: detected capacity change from 0 to 512 [ 540.397179][T14795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 540.416145][T14795] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 540.601998][T14795] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 540.725669][T14795] EXT4-fs (loop3): Remounting filesystem read-only [ 540.764626][T14795] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.3005: mark_inode_dirty error [ 540.826977][T14795] EXT4-fs (loop3): Remounting filesystem read-only [ 540.839968][T14813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3010'. [ 540.874609][T14795] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 540.977893][T14795] EXT4-fs (loop3): Remounting filesystem read-only [ 540.987769][T14817] netlink: 'syz.0.3021': attribute type 15 has an invalid length. [ 541.013594][T14806] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 541.048464][T14817] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 541.057768][T14817] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 541.067713][T14817] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 541.076985][T14817] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 541.111538][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.135554][T14806] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.3005: mark_inode_dirty error [ 541.183524][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.190508][T14806] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 541.232590][T14817] netlink: 'syz.0.3021': attribute type 15 has an invalid length. [ 541.259612][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.277629][T14806] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3005: mark_inode_dirty error [ 541.340940][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.354613][T14806] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 541.415773][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.443680][T14806] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.3005: mark_inode_dirty error [ 541.509592][T14806] EXT4-fs (loop3): Remounting filesystem read-only [ 541.654080][T14795] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.3005: corrupted inode contents [ 543.113615][ T38] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.195844][T14877] netlink: 'syz.0.3040': attribute type 12 has an invalid length. [ 543.251004][T14877] netlink: 'syz.0.3040': attribute type 29 has an invalid length. [ 543.312534][T14877] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3040'. [ 543.355953][T14877] netlink: 'syz.0.3040': attribute type 2 has an invalid length. [ 543.395654][T14877] netlink: 'syz.0.3040': attribute type 3 has an invalid length. [ 543.403767][T14877] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3040'. [ 544.214062][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 544.953268][T14916] loop4: detected capacity change from 0 to 512 [ 545.146115][T14916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 545.433514][T12037] EXT4-fs (loop4): unmounting filesystem. [ 546.118719][T14946] team0: Device ip6gre1 is of different type [ 546.816523][T14969] Bluetooth: hci0: service_discovery: too big uuid_count value 10000 [ 548.205861][T15000] fuse: Bad value for 'fd' [ 548.406968][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.460153][T14986] loop3: detected capacity change from 0 to 32768 [ 548.482825][T14986] XFS: attr2 mount option is deprecated. [ 548.626322][T14986] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 548.664326][T14986] XFS (loop3): Mounting V5 Filesystem [ 548.816931][T14986] XFS (loop3): Ending clean mount [ 548.842784][T15014] netlink: 'syz.4.3070': attribute type 15 has an invalid length. [ 548.945799][T15014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 548.955509][T15014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 548.964253][T15014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 548.974001][T15014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 548.994358][T14986] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 549.037615][T15014] netlink: 'syz.4.3070': attribute type 15 has an invalid length. [ 549.063106][T14986] XFS (loop3): Unmount and run xfs_repair [ 549.115824][T14986] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 549.155159][T14986] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 549.205684][T14986] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 549.214626][T14986] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 549.304602][T14986] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 549.335639][T14986] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 549.376037][T14986] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 549.395388][T14986] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 549.405203][T14986] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 549.436080][T14986] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 549.593554][ T9560] XFS (loop3): Unmounting Filesystem [ 549.779921][T15038] loop4: detected capacity change from 0 to 128 [ 549.869533][T15038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 549.936757][T15038] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.343691][T12037] EXT4-fs (loop4): unmounting filesystem. [ 550.633089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805778e800: rx timeout, send abort [ 550.645834][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805778e800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 550.963966][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 551.004909][T15065] device veth0 left promiscuous mode [ 551.016022][T15065] bridge0: port 3(veth0) entered disabled state [ 551.056633][T15065] device bridge_slave_1 left promiscuous mode [ 551.083643][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.111503][T15065] device bridge_slave_0 left promiscuous mode [ 551.156290][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.342009][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'. [ 551.357300][T15072] device bridge_slave_1 entered promiscuous mode [ 551.372171][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'. [ 551.802975][T15085] overlayfs: failed to clone upperpath [ 551.975582][ T4326] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 552.109021][T15094] overlayfs: failed to clone upperpath [ 552.170085][ T4326] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.201810][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.245757][ T4326] usb 4-1: Product: syz [ 552.250155][ T4326] usb 4-1: Manufacturer: syz [ 552.254778][ T4326] usb 4-1: SerialNumber: syz [ 552.302554][ T4326] usb 4-1: config 0 descriptor?? [ 552.542971][ T4326] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 552.849334][T15109] fuse: Bad value for 'fd' [ 553.888602][ T4326] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 553.913618][ T4326] usb 4-1: USB disconnect, device number 15 [ 554.236329][T15131] loop5: detected capacity change from 0 to 128 [ 554.355323][T15131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 554.396363][T15131] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.834148][T10766] EXT4-fs (loop5): unmounting filesystem. [ 555.401396][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 556.350095][T15179] loop3: detected capacity change from 0 to 1024 [ 556.387168][T15179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.469411][T15179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.349050][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 557.561608][T15196] loop5: detected capacity change from 0 to 4096 [ 557.631086][T15199] loop3: detected capacity change from 0 to 128 [ 557.650488][T15196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 557.806641][T15199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.845093][T15199] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.082692][T10766] EXT4-fs (loop5): unmounting filesystem. [ 558.303392][T15215] loop5: detected capacity change from 0 to 512 [ 558.398780][T15215] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 558.445056][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 558.752303][T10766] EXT4-fs (loop5): unmounting filesystem. [ 560.468422][T15264] gadgetfs: bound to dummy_udc driver [ 560.702480][T15269] loop3: detected capacity change from 0 to 4096 [ 560.833642][T15269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 560.845345][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 560.862667][T15276] device vlan2 left promiscuous mode [ 560.926425][T15276] device geneve0 left promiscuous mode [ 560.975959][T15276] bridge0: port 3(vlan2) entered disabled state [ 561.038558][T15276] device bridge_slave_1 left promiscuous mode [ 561.095778][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.141301][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 561.149755][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.241218][T15318] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.784689][T15335] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 562.914637][T15340] overlayfs: failed to clone lowerpath [ 562.917559][T15338] loop5: detected capacity change from 0 to 1024 [ 562.937450][T15340] overlayfs: failed to clone lowerpath [ 563.003952][T15338] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 563.034419][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8bb400: rx timeout, send abort [ 563.097488][T15338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 563.124789][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.131253][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.332330][T10766] EXT4-fs (loop5): unmounting filesystem. [ 563.534518][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880285aec00: rx timeout, send abort [ 563.543386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8bb400: abort rx timeout. Force session deactivation [ 563.596412][T15349] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 563.612161][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3161'. [ 563.666181][T15355] device bridge_slave_1 left promiscuous mode [ 563.705794][T15355] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.738964][T15355] device bridge_slave_0 left promiscuous mode [ 563.757956][T15355] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.044806][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880285aec00: abort rx timeout. Force session deactivation [ 564.585693][T13857] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 564.796470][T13857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.833320][T13857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.882537][T13857] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 564.905241][T13857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.946209][T13857] usb 4-1: config 0 descriptor?? [ 565.002439][T15381] 9pnet_fd: Insufficient options for proto=fd [ 565.355935][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.383182][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.405986][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.445104][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.497512][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.534914][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.561752][T13857] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 565.586077][T13857] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 565.697271][T15398] team0: Device ip6gre1 is of different type [ 566.254978][T13857] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 566.273878][T13857] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 566.302179][T13857] pyra: probe of 0003:1E7D:2CF6.0018 failed with error -71 [ 566.346830][T13857] usb 4-1: USB disconnect, device number 16 [ 566.776609][T15418] fido_id[15418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 567.156503][T15435] 9pnet_fd: Insufficient options for proto=fd [ 567.516224][ T4292] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 567.522598][ T4292] Bluetooth: hci0: command 0x1407 tx timeout [ 567.531907][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 567.555544][ T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 567.563097][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.573284][ T49] Workqueue: hci4 hci_rx_work [ 567.578809][ T49] Call Trace: [ 567.582221][ T49] [ 567.585198][ T49] dump_stack_lvl+0x188/0x24e [ 567.590023][ T49] ? show_regs_print_info+0x12/0x12 [ 567.595288][ T49] ? load_image+0x410/0x410 [ 567.599871][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 567.605215][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 567.610313][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 567.615056][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 567.620293][ T49] kobject_add_internal+0x617/0xca0 [ 567.625548][ T49] kobject_add+0x160/0x230 [ 567.630105][ T49] ? kobject_init+0x1c0/0x1c0 [ 567.635014][ T49] ? __raw_spin_lock_init+0x41/0x100 [ 567.640329][ T49] ? klist_children_get+0x50/0x50 [ 567.645369][ T49] ? get_device_parent+0x121/0x3e0 [ 567.650527][ T49] device_add+0x470/0x1050 [ 567.654994][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 567.659951][ T49] le_conn_complete_evt+0xf93/0x15c0 [ 567.665272][ T49] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 567.671650][ T49] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 567.677506][ T49] ? mutex_unlock+0x10/0x10 [ 567.682035][ T49] ? skb_pull_data+0xec/0x1f0 [ 567.686752][ T49] hci_le_conn_complete_evt+0x183/0x440 [ 567.692367][ T49] ? hci_remote_host_features_evt+0x230/0x230 [ 567.698493][ T49] hci_event_packet+0x7b3/0x1290 [ 567.703491][ T49] ? lock_chain_count+0x20/0x20 [ 567.708936][ T49] ? bis_list+0x280/0x280 [ 567.713476][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 567.719417][ T49] ? kcov_remote_start+0x50f/0x810 [ 567.724547][ T49] ? lockdep_hardirqs_on+0x94/0x140 [ 567.729766][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 567.735112][ T49] hci_rx_work+0x3eb/0xd40 [ 567.739558][ T49] ? _raw_spin_unlock+0x40/0x40 [ 567.744434][ T49] ? process_one_work+0x7b4/0x1160 [ 567.749649][ T49] process_one_work+0x8ab/0x1160 [ 567.754626][ T49] ? worker_detach_from_pool+0x240/0x240 [ 567.760279][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 567.765323][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 567.770919][ T49] ? wq_worker_running+0x97/0x190 [ 567.776043][ T49] worker_thread+0xaf5/0x12a0 [ 567.780938][ T49] kthread+0x29d/0x330 [ 567.785296][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 567.790477][ T49] ? kthread_blkcg+0xd0/0xd0 [ 567.795163][ T49] ret_from_fork+0x1f/0x30 [ 567.799631][ T49] [ 567.804880][ T49] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 567.818299][ T49] Bluetooth: hci4: failed to register connection device [ 567.973803][T15448] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 569.871824][T15504] loop3: detected capacity change from 0 to 128 [ 569.978558][T15504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 570.076266][T15504] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 570.385652][ T4326] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 570.625750][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 570.634041][ T4326] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.666654][ T4326] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.715632][ T4326] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 570.761355][ T4326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.788788][ T4326] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 570.816022][T15531] 9pnet_fd: Insufficient options for proto=fd [ 570.823398][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.877947][ T4326] usb 4-1: config 0 descriptor?? [ 571.122825][T15512] loop5: detected capacity change from 0 to 32768 [ 571.190915][T15512] JBD2: Ignoring recovery information on journal [ 571.294348][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 571.309973][ T4326] hid (null): unknown global tag 0xe [ 571.321587][ T4326] hid (null): global environment stack underflow [ 571.329775][ T4326] hid (null): unknown global tag 0xd [ 571.336671][ T4326] hid (null): unknown global tag 0xc [ 571.342110][ T4326] hid (null): unknown global tag 0xe [ 571.348282][ T4326] hid (null): invalid report_size 61170 [ 571.379222][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 571.454892][T15512] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 571.513360][T13857] usb 4-1: USB disconnect, device number 17 [ 572.205322][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 572.476730][T15573] team0: Device ip6gre1 is of different type [ 572.521826][T10766] ocfs2: Unmounting device (7,5) on (node local) [ 572.942668][T15580] FAULT_INJECTION: forcing a failure. [ 572.942668][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 573.026034][T15580] CPU: 1 PID: 15580 Comm: syz.0.3231 Not tainted syzkaller #0 [ 573.033587][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.043963][T15580] Call Trace: [ 573.047305][T15580] [ 573.050268][T15580] dump_stack_lvl+0x188/0x24e [ 573.054986][T15580] ? show_regs_print_info+0x12/0x12 [ 573.060409][T15580] ? load_image+0x410/0x410 [ 573.067745][T15580] ? __might_sleep+0xd0/0xd0 [ 573.073712][T15580] ? __lock_acquire+0x7c40/0x7c40 [ 573.078896][T15580] should_fail_ex+0x390/0x4c0 [ 573.083738][T15580] should_failslab+0x5/0x20 [ 573.088372][T15580] slab_pre_alloc_hook+0x59/0x300 [ 573.093535][T15580] ? __request_module+0x31c/0xa00 [ 573.098723][T15580] __kmem_cache_alloc_node+0x4f/0x270 [ 573.104245][T15580] ? __request_module+0x31c/0xa00 [ 573.109493][T15580] kmalloc_trace+0x26/0xe0 [ 573.113978][T15580] __request_module+0x31c/0xa00 [ 573.118979][T15580] ? lockdep_hardirqs_on+0x94/0x140 [ 573.124661][T15580] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 573.130612][T15580] ? copy_regset_to_user+0x1f0/0x1f0 [ 573.135970][T15580] ? __wake_up_common+0x5b/0x4d0 [ 573.140961][T15580] ? __wake_up_bit+0x210/0x210 [ 573.145745][T15580] ? _raw_read_unlock+0x40/0x40 [ 573.151071][T15580] ? __lock_acquire+0x7c40/0x7c40 [ 573.156143][T15580] netlink_create+0x1b5/0x510 [ 573.161225][T15580] __sock_create+0x49a/0x940 [ 573.165885][T15580] __sys_socket+0xc4/0x190 [ 573.170362][T15580] __x64_sys_socket+0x76/0x80 [ 573.175067][T15580] do_syscall_64+0x4c/0xa0 [ 573.179497][T15580] ? clear_bhb_loop+0x60/0xb0 [ 573.184187][T15580] ? clear_bhb_loop+0x60/0xb0 [ 573.189137][T15580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.195062][T15580] RIP: 0033:0x7fd8e559e159 [ 573.199759][T15580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.219646][T15580] RSP: 002b:00007fd8e64b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 573.228119][T15580] RAX: ffffffffffffffda RBX: 00007fd8e5825fa0 RCX: 00007fd8e559e159 [ 573.236137][T15580] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000010 [ 573.244131][T15580] RBP: 00007fd8e563506b R08: 0000000000000000 R09: 0000000000000000 [ 573.252115][T15580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.260124][T15580] R13: 00007fd8e5826038 R14: 00007fd8e5825fa0 R15: 00007ffd9d49edd8 [ 573.268180][T15580] [ 573.550315][T15592] netlink: 'syz.3.3233': attribute type 1 has an invalid length. [ 573.777263][T15592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.145678][ T4402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.269798][T15631] loop5: detected capacity change from 0 to 512 [ 575.285582][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.327974][T15610] loop4: detected capacity change from 0 to 32768 [ 575.433822][T15610] JBD2: Ignoring recovery information on journal [ 575.454191][T15631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 575.611729][T15610] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 575.863258][T10766] EXT4-fs (loop5): unmounting filesystem. [ 576.150499][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 576.195788][T12037] ocfs2: Unmounting device (7,4) on (node local) [ 576.199653][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 576.300522][T15649] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.309423][T15649] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.318431][T15649] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.327212][T15649] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.466299][T15649] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 576.502252][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 576.535737][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 577.401719][T15674] loop4: detected capacity change from 0 to 8192 [ 577.466018][T15674] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 577.518325][T15674] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 577.575611][T15674] REISERFS (device loop4): using ordered data mode [ 577.582187][T15674] reiserfs: using flush barriers [ 577.655606][T15674] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 577.776748][T15674] REISERFS (device loop4): checking transaction log (loop4) [ 577.855304][T15674] REISERFS (device loop4): Using r5 hash to sort names [ 577.896145][T15674] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 578.110591][T15693] device bridge0 entered promiscuous mode [ 578.413119][T15679] loop5: detected capacity change from 0 to 32768 [ 579.725675][ T5715] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 579.927326][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.965951][ T5715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.985538][T14540] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 580.003623][ T5715] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 580.044382][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.079711][ T5715] usb 6-1: config 0 descriptor?? [ 580.200829][T14540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.246206][T14540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.277170][T14540] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.337054][T14540] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.367545][T14540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.396487][T14540] usb 4-1: config 0 descriptor?? [ 580.523273][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.552202][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.573588][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.633176][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.651168][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.670214][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.712778][ T5715] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 580.754498][ T5715] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 580.836622][T14540] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 580.881424][T14540] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 581.402901][ T5715] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 581.432405][ T5715] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 581.467549][ T5715] pyra: probe of 0003:1E7D:2CF6.001A failed with error -71 [ 581.500574][ T5715] usb 6-1: USB disconnect, device number 22 [ 581.671944][T14540] usb 4-1: USB disconnect, device number 18 [ 581.897272][T15770] fido_id[15770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 582.599556][T15794] device lo entered promiscuous mode [ 582.699519][T15794] device tunl0 entered promiscuous mode [ 582.737055][T15794] device gre0 entered promiscuous mode [ 582.771605][T15794] device gretap0 entered promiscuous mode [ 582.805320][T15794] device erspan0 entered promiscuous mode [ 582.840247][T15794] device ip_vti0 entered promiscuous mode [ 582.870914][T15794] device ip6_vti0 entered promiscuous mode [ 582.902261][T15794] device ip6tnl0 entered promiscuous mode [ 582.943815][T15794] device ip6gre0 entered promiscuous mode [ 582.987565][T15794] device syz_tun entered promiscuous mode [ 583.050205][T15794] device ip6gretap0 entered promiscuous mode [ 583.096469][T15794] device vcan0 entered promiscuous mode [ 583.126313][T15794] device bond0 entered promiscuous mode [ 583.143122][T15794] device bond_slave_0 entered promiscuous mode [ 583.183802][T15794] device bond_slave_1 entered promiscuous mode [ 583.229613][T15790] loop3: detected capacity change from 0 to 32768 [ 583.250033][T15794] device team0 entered promiscuous mode [ 583.285576][T15794] device team_slave_0 entered promiscuous mode [ 583.291951][T15794] device team_slave_1 entered promiscuous mode [ 583.313499][T15790] JBD2: Ignoring recovery information on journal [ 583.333337][T15794] device dummy0 entered promiscuous mode [ 583.360786][T15794] device nlmon0 entered promiscuous mode [ 583.393991][T15794] device caif0 entered promiscuous mode [ 583.426380][T15794] device batadv0 entered promiscuous mode [ 583.459702][T15794] device vxcan0 entered promiscuous mode [ 583.497246][T15790] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 583.524639][T15794] device vxcan1 entered promiscuous mode [ 583.548547][T15794] device veth0 entered promiscuous mode [ 583.584619][T15794] device veth1 entered promiscuous mode [ 583.656307][T15794] device wg0 entered promiscuous mode [ 583.701507][T15794] device wg1 entered promiscuous mode [ 583.753184][T15794] device wg2 entered promiscuous mode [ 583.783570][T15794] device veth0_to_bridge entered promiscuous mode [ 583.885918][T15794] device bridge_slave_0 entered promiscuous mode [ 583.926786][T15808] overlayfs: failed to clone upperpath [ 583.967084][T15794] device veth1_to_bridge entered promiscuous mode [ 584.016916][T15794] device bridge_slave_1 entered promiscuous mode [ 584.056849][T15794] device veth0_to_bond entered promiscuous mode [ 584.069845][ T9560] ocfs2: Unmounting device (7,3) on (node local) [ 584.177286][T15794] device veth1_to_bond entered promiscuous mode [ 584.229797][T15794] device veth0_to_team entered promiscuous mode [ 584.275782][T15794] device veth1_to_team entered promiscuous mode [ 584.333875][T15794] device veth0_to_batadv entered promiscuous mode [ 584.370590][T15794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.414607][T15794] device batadv_slave_0 entered promiscuous mode [ 584.456488][T15794] device veth1_to_batadv entered promiscuous mode [ 584.511789][T15794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.571266][T15794] device batadv_slave_1 entered promiscuous mode [ 584.626581][T15794] device xfrm0 entered promiscuous mode [ 584.651310][T15794] device veth0_to_hsr entered promiscuous mode [ 584.742778][T15794] device veth1_to_hsr entered promiscuous mode [ 584.796748][T15794] device hsr0 entered promiscuous mode [ 584.848906][T15794] device veth1_virt_wifi entered promiscuous mode [ 584.892523][T15794] device veth0_virt_wifi entered promiscuous mode [ 584.963159][T15794] device virt_wifi0 entered promiscuous mode [ 585.073553][T15794] device vlan0 entered promiscuous mode [ 585.095906][T15794] device vlan1 entered promiscuous mode [ 585.115933][T15794] device macvlan0 entered promiscuous mode [ 585.166959][T15794] device macvlan1 entered promiscuous mode [ 585.224948][T15794] device ipvlan0 entered promiscuous mode [ 585.235089][T15794] device ipvlan1 entered promiscuous mode [ 585.308238][T15794] device macvtap0 entered promiscuous mode [ 585.353842][T15794] device macsec0 entered promiscuous mode [ 585.405307][T15794] device geneve0 entered promiscuous mode [ 585.434548][T15794] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.470524][T15794] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.509033][T15794] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.529688][T15794] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.552484][T15794] device geneve1 entered promiscuous mode [ 585.576230][T15794] device netdevsim0 entered promiscuous mode [ 585.603497][T15794] device netdevsim1 entered promiscuous mode [ 585.626632][T15794] device netdevsim2 entered promiscuous mode [ 585.653396][T15794] device netdevsim3 entered promiscuous mode [ 585.711998][T15794] device wlan0 entered promiscuous mode [ 585.777065][T15794] device wlan1 entered promiscuous mode [ 585.803489][T15794] device macvlan2 entered promiscuous mode [ 585.833529][T15794] device macvlan3 entered promiscuous mode [ 585.844392][T15794] device sit1 entered promiscuous mode [ 585.937702][T15794] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.946826][T15794] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.955894][T15794] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.964806][T15794] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.033050][T15794] device vxlan0 entered promiscuous mode [ 586.052455][T15847] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 586.246443][T15847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.883295][T15868] loop3: detected capacity change from 0 to 8192 [ 586.945993][T15868] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 586.997050][T15868] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 587.067887][T15868] REISERFS (device loop3): using ordered data mode [ 587.074515][T15868] reiserfs: using flush barriers [ 587.136190][T15868] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 587.204618][T15868] REISERFS (device loop3): checking transaction log (loop3) [ 587.256788][T15868] REISERFS (device loop3): Using r5 hash to sort names [ 587.308791][T15868] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 588.355847][T15903] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 588.451613][T15903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.725606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.908986][T15937] loop5: detected capacity change from 0 to 8192 [ 589.925557][ T4282] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 589.976595][T15937] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 590.005509][T15937] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 590.053253][T15937] REISERFS (device loop5): using ordered data mode [ 590.085831][T15937] reiserfs: using flush barriers [ 590.127540][ T4282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.154609][ T4282] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 590.158751][T15937] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 590.198623][ T4282] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 590.239168][ T4282] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 590.263629][T15937] REISERFS (device loop5): checking transaction log (loop5) [ 590.293301][ T4282] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 590.323845][ T4282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.326601][T15937] REISERFS (device loop5): Using r5 hash to sort names [ 590.349562][T15937] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 590.360770][T15935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.400972][T15935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.442245][ T4282] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 590.482900][ T4282] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 590.525658][ T4282] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 590.564519][ T4282] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 590.589947][ T4282] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 590.619199][ T4282] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 590.662825][ T4282] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 590.723617][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'. [ 590.797486][T15960] device veth0 left promiscuous mode [ 590.845867][T15960] bridge0: port 3(veth0) entered disabled state [ 590.883176][T15960] device bridge_slave_1 left promiscuous mode [ 590.933990][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.988378][T15960] device bridge_slave_0 left promiscuous mode [ 591.000715][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.262138][ T4282] usb 4-1: USB disconnect, device number 19 [ 591.305281][ T4282] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 591.347600][ T4282] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 591.375940][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 591.403145][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 591.415894][ T4282] keyspan 4-1:1.0: device disconnected [ 591.462300][T15971] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 591.471222][T15971] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 591.480232][T15971] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 591.489105][T15971] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 591.576560][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 591.637084][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 592.607482][T16005] loop4: detected capacity change from 0 to 128 [ 592.730037][T16005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 592.812943][T16005] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.022138][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 593.140538][T12037] EXT4-fs (loop4): unmounting filesystem. [ 593.975530][ T5722] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 594.223599][ T5722] usb 4-1: config 0 has no interfaces? [ 594.232130][ T5722] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 594.273014][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.313660][ T5722] usb 4-1: Product: syz [ 594.345468][ T5722] usb 4-1: Manufacturer: syz [ 594.357076][ T5722] usb 4-1: SerialNumber: syz [ 594.386808][ T5722] usb 4-1: config 0 descriptor?? [ 594.505282][ T27] audit: type=1326 audit(1790172381.623:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 594.575893][ T27] audit: type=1326 audit(1790172381.623:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 594.699000][ T27] audit: type=1326 audit(1790172381.623:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 594.843023][ T27] audit: type=1326 audit(1790172381.623:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 594.920642][T13855] usb 4-1: USB disconnect, device number 20 [ 594.965590][ T27] audit: type=1326 audit(1790172381.623:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.056981][ T27] audit: type=1326 audit(1790172381.623:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.176950][ T27] audit: type=1326 audit(1790172381.623:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.279062][T16074] gadgetfs: bound to dummy_udc driver [ 595.282321][ T27] audit: type=1326 audit(1790172381.623:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.419832][ T27] audit: type=1326 audit(1790172381.623:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.535074][ T27] audit: type=1326 audit(1790172381.623:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.4.3367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9739e159 code=0x7fc00000 [ 595.556450][T16072] loop4: detected capacity change from 0 to 8192 [ 595.645040][T16072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 595.765473][T16072] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 595.774846][T16072] REISERFS (device loop4): using ordered data mode [ 595.797033][T16085] overlayfs: failed to clone upperpath [ 595.826015][T16072] reiserfs: using flush barriers [ 595.836976][T16072] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 595.913737][T16072] REISERFS (device loop4): checking transaction log (loop4) [ 595.988188][T16072] REISERFS (device loop4): Using r5 hash to sort names [ 596.009810][T16072] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 596.452803][T16099] loop3: detected capacity change from 0 to 128 [ 596.556943][T16099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 596.616090][T16099] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 596.877337][T16109] FAULT_INJECTION: forcing a failure. [ 596.877337][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 596.923936][ T9560] EXT4-fs (loop3): unmounting filesystem. [ 596.946607][T16109] CPU: 1 PID: 16109 Comm: syz.5.3388 Not tainted syzkaller #0 [ 596.954245][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.964343][T16109] Call Trace: [ 596.967664][T16109] [ 596.970647][T16109] dump_stack_lvl+0x188/0x24e [ 596.975398][T16109] ? show_regs_print_info+0x12/0x12 [ 596.980740][T16109] ? load_image+0x410/0x410 [ 596.985324][T16109] should_fail_ex+0x390/0x4c0 [ 596.990093][T16109] should_failslab+0x5/0x20 [ 596.994674][T16109] slab_pre_alloc_hook+0x59/0x300 [ 596.999758][T16109] ? __hw_addr_add_ex+0x1f4/0x700 [ 597.004845][T16109] __kmem_cache_alloc_node+0x4f/0x270 [ 597.010276][T16109] ? trace_contention_end+0x5f/0x170 [ 597.015615][T16109] ? __hw_addr_add_ex+0x1f4/0x700 [ 597.020693][T16109] kmalloc_trace+0x26/0xe0 [ 597.025156][T16109] __hw_addr_add_ex+0x1f4/0x700 [ 597.030117][T16109] dev_addr_init+0x143/0x220 [ 597.034854][T16109] ? dev_addr_flush+0x210/0x210 [ 597.039767][T16109] alloc_netdev_mqs+0x26a/0xf10 [ 597.044653][T16109] ? tun_not_capable+0x1f0/0x1f0 [ 597.049635][T16109] tun_set_iff+0x546/0xea0 [ 597.054202][T16109] __tun_chr_ioctl+0x770/0x1ed0 [ 597.059103][T16109] ? tun_flow_create+0x310/0x310 [ 597.064105][T16109] ? bpf_lsm_file_ioctl+0x5/0x10 [ 597.069162][T16109] ? security_file_ioctl+0x7c/0xa0 [ 597.074593][T16109] ? tun_chr_poll+0x630/0x630 [ 597.079473][T16109] __se_sys_ioctl+0xfa/0x170 [ 597.084146][T16109] do_syscall_64+0x4c/0xa0 [ 597.088917][T16109] ? clear_bhb_loop+0x60/0xb0 [ 597.093720][T16109] ? clear_bhb_loop+0x60/0xb0 [ 597.098449][T16109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.104433][T16109] RIP: 0033:0x7f7252f9e159 [ 597.108896][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.128534][T16109] RSP: 002b:00007f7253db0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.136970][T16109] RAX: ffffffffffffffda RBX: 00007f7253225fa0 RCX: 00007f7252f9e159 [ 597.144960][T16109] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 597.152945][T16109] RBP: 00007f725303506b R08: 0000000000000000 R09: 0000000000000000 [ 597.160931][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.169002][T16109] R13: 00007f7253226038 R14: 00007f7253225fa0 R15: 00007ffe4f37afb8 [ 597.177001][T16109] [ 597.755895][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.762175][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 598.365125][T16139] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 598.386045][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 598.415942][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 598.443229][T16137] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 598.452701][T16137] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 598.461575][T16137] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 598.470350][T16137] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 598.527812][T16139] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 598.551820][T16139] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.3396'. [ 598.574444][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 598.598943][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 598.975259][T16129] loop5: detected capacity change from 0 to 32768 [ 599.000594][T16129] XFS: attr2 mount option is deprecated. [ 599.069297][T16129] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 599.086334][T16129] XFS (loop5): Mounting V5 Filesystem [ 599.167637][T16129] XFS (loop5): Ending clean mount [ 599.262804][T13855] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 599.304224][T13855] XFS (loop5): Unmount and run xfs_repair [ 599.329592][T13855] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 599.352543][T13855] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 599.361991][T13855] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 599.380859][T13855] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 599.390035][T13855] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 599.434469][T13855] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 599.468357][T13855] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.507872][T13855] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.543365][T13855] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.595050][T16129] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 599.710716][T10766] XFS (loop5): Unmounting Filesystem [ 600.264388][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 600.295715][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 600.384904][T16193] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.393805][T16193] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.402960][T16193] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.411790][T16193] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.668530][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 600.718492][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 601.035663][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 601.225098][T16223] device lo entered promiscuous mode [ 601.363127][T16223] device tunl0 entered promiscuous mode [ 601.411033][T16223] device gre0 entered promiscuous mode [ 601.416791][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 601.479051][T16223] device gretap0 entered promiscuous mode [ 601.510265][T16223] device erspan0 entered promiscuous mode [ 601.533258][T16223] device ip_vti0 entered promiscuous mode [ 601.554144][T16223] device ip6_vti0 entered promiscuous mode [ 601.590705][T16223] device sit0 entered promiscuous mode [ 601.620941][ T14] usb 5-1: config 0 has no interfaces? [ 601.647161][T16223] device ip6tnl0 entered promiscuous mode [ 601.654380][ T14] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 601.681016][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.710041][ T14] usb 5-1: Product: syz [ 601.724809][ T14] usb 5-1: Manufacturer: syz [ 601.737757][ T14] usb 5-1: SerialNumber: syz [ 601.755392][T16223] device ip6gre0 entered promiscuous mode [ 601.777020][ T14] usb 5-1: config 0 descriptor?? [ 601.819021][T16223] device syz_tun entered promiscuous mode [ 601.854441][T16223] device ip6gretap0 entered promiscuous mode [ 601.886607][T16223] device vcan0 entered promiscuous mode [ 601.906044][T16223] device bond0 entered promiscuous mode [ 601.911740][T16223] device bond_slave_0 entered promiscuous mode [ 601.938905][T16223] device bond_slave_1 entered promiscuous mode [ 601.982146][T16223] device team0 entered promiscuous mode [ 602.023248][T16223] device team_slave_0 entered promiscuous mode [ 602.053932][T16223] device team_slave_1 entered promiscuous mode [ 602.146355][T16223] device dummy0 entered promiscuous mode [ 602.244265][T16223] device nlmon0 entered promiscuous mode [ 602.302619][T16223] device caif0 entered promiscuous mode [ 602.338063][T16223] device batadv0 entered promiscuous mode [ 602.419001][T13855] usb 5-1: USB disconnect, device number 15 [ 602.443205][T16223] device vxcan0 entered promiscuous mode [ 602.486977][T16223] device vxcan1 entered promiscuous mode [ 602.517881][T16223] device veth0 entered promiscuous mode [ 602.550770][T16223] device veth1 entered promiscuous mode [ 602.584340][T16223] device wg0 entered promiscuous mode [ 602.614656][T16223] device wg1 entered promiscuous mode [ 602.669506][T16223] device wg2 entered promiscuous mode [ 602.689582][T16223] device veth0_to_bridge entered promiscuous mode [ 602.720347][T16223] device bridge_slave_0 entered promiscuous mode [ 602.751022][T16223] device veth1_to_bridge entered promiscuous mode [ 602.789364][T16223] device bridge_slave_1 entered promiscuous mode [ 602.818743][T16223] device veth0_to_bond entered promiscuous mode [ 602.855269][T16223] device veth1_to_bond entered promiscuous mode [ 602.893205][T16223] device veth0_to_team entered promiscuous mode [ 602.939057][T16223] device veth1_to_team entered promiscuous mode [ 603.027315][T16223] device veth0_to_batadv entered promiscuous mode [ 603.053438][T16223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.084803][T16223] device batadv_slave_0 entered promiscuous mode [ 603.139002][T16223] device veth1_to_batadv entered promiscuous mode [ 603.161941][T16223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.207590][T16223] device batadv_slave_1 entered promiscuous mode [ 603.249754][T16223] device xfrm0 entered promiscuous mode [ 603.306151][T16223] device veth0_to_hsr entered promiscuous mode [ 603.362096][T16223] device hsr0 entered promiscuous mode [ 603.394362][T16223] device veth1_virt_wifi entered promiscuous mode [ 603.413568][T16223] device veth0_virt_wifi entered promiscuous mode [ 603.465770][T16223] device virt_wifi0 entered promiscuous mode [ 603.553309][T16223] device vlan0 entered promiscuous mode [ 603.572806][T16223] device vlan1 entered promiscuous mode [ 603.591151][T16223] device macvlan0 entered promiscuous mode [ 603.600638][T16223] device macvlan1 entered promiscuous mode [ 603.612469][T16223] device ipvlan0 entered promiscuous mode [ 603.618651][T16223] device ipvlan1 entered promiscuous mode [ 603.647850][T16223] device macvtap0 entered promiscuous mode [ 603.669802][T16223] device macsec0 entered promiscuous mode [ 603.690470][T16223] device geneve0 entered promiscuous mode [ 603.716694][T16223] device geneve1 entered promiscuous mode [ 603.729268][T16223] device netdevsim0 entered promiscuous mode [ 603.745944][T16223] device netdevsim1 entered promiscuous mode [ 603.758337][T16223] device netdevsim2 entered promiscuous mode [ 603.769890][T16223] device netdevsim3 entered promiscuous mode [ 603.790223][T16223] device wlan0 entered promiscuous mode [ 603.808991][T16223] device wlan1 entered promiscuous mode [ 603.819300][T16223] device sit1 entered promiscuous mode [ 603.827580][T16223] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.837868][T16223] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.847293][T16223] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.856251][T16223] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.871283][T16223] device @ entered promiscuous mode [ 603.882323][T16223] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.891646][T16223] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.901103][T16223] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.910260][T16223] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.919825][T16223] device geneve2 entered promiscuous mode [ 603.931536][T16223] device bond1 entered promiscuous mode [ 603.941416][T16223] device sit2 entered promiscuous mode [ 604.016349][T16223] device bond2 entered promiscuous mode [ 604.095634][T11629] svc: failed to register nfsdv3 RPC service (errno 512). [ 604.135160][T11629] svc: failed to register nfsaclv3 RPC service (errno 512). [ 604.312665][T16259] loop4: detected capacity change from 0 to 4096 [ 604.546636][T16259] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 604.901087][T12037] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 605.173170][T16289] gadgetfs: bound to dummy_udc driver [ 605.347397][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3443'. [ 605.396049][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3443'. [ 606.712702][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 606.754336][T13857] kernel write not supported for file /gssd/clntXX/gssd (pid: 13857 comm: kworker/1:17) [ 607.926761][T16384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3472'. [ 608.203262][T16398] gadgetfs: bound to dummy_udc driver [ 608.498614][T16408] IPVS: rr: UDP [::1]:8080 - no destination available [ 608.593044][T16414] x86/PAT: syz.0.3484:16414 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 608.640583][T16415] FAULT_INJECTION: forcing a failure. [ 608.640583][T16415] name failslab, interval 1, probability 0, space 0, times 0 [ 608.665703][T16415] CPU: 1 PID: 16415 Comm: syz.3.3483 Not tainted syzkaller #0 [ 608.673237][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.683315][T16415] Call Trace: [ 608.686604][T16415] [ 608.689558][T16415] dump_stack_lvl+0x188/0x24e [ 608.694254][T16415] ? show_regs_print_info+0x12/0x12 [ 608.699550][T16415] ? load_image+0x410/0x410 [ 608.704069][T16415] ? __lock_acquire+0x7c40/0x7c40 [ 608.709202][T16415] should_fail_ex+0x390/0x4c0 [ 608.713915][T16415] should_failslab+0x5/0x20 [ 608.718435][T16415] slab_pre_alloc_hook+0x59/0x300 [ 608.723470][T16415] ? __lock_acquire+0x7c40/0x7c40 [ 608.728513][T16415] ? anon_vma_name_alloc+0x37/0xb0 [ 608.733646][T16415] __kmem_cache_alloc_node+0x4f/0x270 [ 608.739120][T16415] ? anon_vma_name_alloc+0x37/0xb0 [ 608.744242][T16415] __kmalloc+0xa3/0x240 [ 608.748431][T16415] ? _copy_from_user+0x10b/0x170 [ 608.753387][T16415] anon_vma_name_alloc+0x37/0xb0 [ 608.758337][T16415] prctl_set_vma+0x185/0x2e0 [ 608.763625][T16415] __se_sys_prctl+0x162/0x1100 [ 608.768405][T16415] ? __x64_sys_prctl+0xc0/0xc0 [ 608.773195][T16415] ? lockdep_hardirqs_on+0x94/0x140 [ 608.778401][T16415] ? __x64_sys_prctl+0x1c/0xc0 [ 608.783191][T16415] do_syscall_64+0x4c/0xa0 [ 608.787612][T16415] ? clear_bhb_loop+0x60/0xb0 [ 608.792308][T16415] ? clear_bhb_loop+0x60/0xb0 [ 608.797006][T16415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.803003][T16415] RIP: 0033:0x7f5f3cb9e159 [ 608.807435][T16415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.827070][T16415] RSP: 002b:00007f5f3db2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 608.835792][T16415] RAX: ffffffffffffffda RBX: 00007f5f3ce25fa0 RCX: 00007f5f3cb9e159 [ 608.843775][T16415] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 608.851949][T16415] RBP: 00007f5f3cc3506b R08: 0000200000000b40 R09: 0000000000000000 [ 608.859950][T16415] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 608.867933][T16415] R13: 00007f5f3ce26038 R14: 00007f5f3ce25fa0 R15: 00007ffe55570908 [ 608.876103][T16415] [ 624.560155][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.566583][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.685615][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 664.271913][T17411] loop3: detected capacity change from 0 to 256 [ 664.322940][T17411] exfat: Deprecated parameter 'utf8' [ 664.349404][T17411] exfat: Deprecated parameter 'namecase' [ 664.379547][T17411] exfat: Deprecated parameter 'namecase' [ 664.419485][T17411] exfat: Deprecated parameter 'namecase' [ 664.463973][T17411] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 664.578749][T17411] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3485'. [ 665.585629][T13857] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 665.777624][T13857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.809133][T13857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.845472][T13857] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 665.885268][T13857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.926442][T13857] usb 5-1: config 0 descriptor?? [ 666.045811][T17430] loop3: detected capacity change from 0 to 40427 [ 666.073954][T17430] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 666.102408][ T22] libceph: connect (1)[c::]:6789 error -101 [ 666.128044][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 666.141994][T17430] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 666.166209][T17430] F2FS-fs (loop3): invalid crc value [ 666.182928][T17458] ceph: No mds server is up or the cluster is laggy [ 666.313571][T17430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 666.354918][T13857] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 666.403447][T13857] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 666.475073][T13857] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 666.547351][T17430] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 666.554570][T17430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 666.583061][T13857] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 666.716204][T13857] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected [ 667.114890][ T4326] usb 5-1: USB disconnect, device number 16 [ 667.161000][ T4326] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 668.243813][T17501] loop4: detected capacity change from 0 to 164 [ 670.262881][T17525] loop5: detected capacity change from 0 to 32768 [ 670.337211][T17525] JBD2: Ignoring recovery information on journal [ 670.476682][T17525] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 670.860738][T17525] OCFS2: ERROR (device loop5): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1 [ 670.991723][T17525] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 671.053133][T17525] OCFS2: File system is now read-only. [ 671.165948][T17560] loop4: detected capacity change from 0 to 8192 [ 671.208407][T17525] (syz.5.3526,17525,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 671.321393][T17525] (syz.5.3526,17525,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 671.392216][T17525] (syz.5.3526,17525,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 671.457539][T17525] (syz.5.3526,17525,0):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 671.494467][T17525] (syz.5.3526,17525,0):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 671.555117][T17525] (syz.5.3526,17525,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 671.637147][T17566] page:ffffea0001200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 671.699464][T17566] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 671.739072][T10766] ocfs2: Unmounting device (7,5) on (node local) [ 671.815622][T17566] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017441640 [ 671.855190][T17566] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 671.897722][T17566] page dumped because: unmovable page [ 671.922457][T17566] page_owner tracks the page as allocated [ 671.963513][T17566] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 15860, tgid 15859 (syz.5.3308), ts 589387659133, free_ts 589193985047 [ 672.034138][T17566] post_alloc_hook+0x173/0x1a0 [ 672.052416][T17566] get_page_from_freelist+0x206b/0x2180 [ 672.085482][T17566] __alloc_pages+0x1ec/0x4f0 [ 672.097575][T17566] alloc_slab_page+0x5d/0x180 [ 672.113356][T17566] new_slab+0x87/0x2d0 [ 672.117915][T17566] ___slab_alloc+0xbc5/0x1240 [ 672.133615][T17566] __kmem_cache_alloc_node+0x126/0x270 [ 672.143792][T17566] __kmalloc+0xa3/0x240 [ 672.155674][T17566] hash_ipport4_add+0x16cc/0x2320 [ 672.167956][T17566] hash_ipport4_uadt+0xa0a/0xd40 [ 672.195232][T17566] call_ad+0x350/0xb00 [ 672.209373][T17566] ip_set_ad+0x816/0x9c0 [ 672.222042][T17566] nfnetlink_rcv_msg+0xcab/0x1290 [ 672.235005][T17566] netlink_rcv_skb+0x1ef/0x440 [ 672.257076][T17566] nfnetlink_rcv+0x2b0/0x2470 [ 672.266837][T17566] netlink_unicast+0x7ad/0x920 [ 672.278869][T17566] page last free stack trace: [ 672.287677][T17566] free_unref_page_prepare+0x8e5/0x9e0 [ 672.302514][T17566] free_unref_page_list+0xbb/0x8e0 [ 672.315214][T17566] release_pages+0x20d1/0x2340 [ 672.332426][T17566] tlb_flush_mmu+0x105/0x220 [ 672.344148][T17566] tlb_finish_mmu+0xf0/0x220 [ 672.354597][T17566] exit_mmap+0x388/0x970 [ 672.364943][T17566] __mmput+0x118/0x3a0 [ 672.374192][T17566] exit_mm+0x24d/0x350 [ 672.384007][T17566] do_exit+0x958/0x2570 [ 672.394031][T17566] do_group_exit+0x229/0x2e0 [ 672.402863][T17566] __x64_sys_exit_group+0x3b/0x40 [ 672.415880][T17566] do_syscall_64+0x4c/0xa0 [ 672.425780][T17566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.730440][T17587] loop6: detected capacity change from 0 to 6 [ 672.779418][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 673.337356][T17600] loop5: detected capacity change from 0 to 16 [ 673.367323][T17600] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 673.451388][T17603] FAULT_INJECTION: forcing a failure. [ 673.451388][T17603] name failslab, interval 1, probability 0, space 0, times 0 [ 673.465487][T17603] CPU: 1 PID: 17603 Comm: syz.4.3554 Not tainted syzkaller #0 [ 673.472997][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.483188][T17603] Call Trace: [ 673.486507][T17603] [ 673.489467][T17603] dump_stack_lvl+0x188/0x24e [ 673.494183][T17603] ? lock_chain_count+0x20/0x20 [ 673.499078][T17603] ? show_regs_print_info+0x12/0x12 [ 673.504327][T17603] ? load_image+0x410/0x410 [ 673.508897][T17603] ? get_random_u32+0x4d1/0x930 [ 673.513872][T17603] ? get_random_u32+0x16b/0x930 [ 673.518780][T17603] should_fail_ex+0x390/0x4c0 [ 673.523552][T17603] should_failslab+0x5/0x20 [ 673.528092][T17603] slab_pre_alloc_hook+0x59/0x300 [ 673.533167][T17603] kmem_cache_alloc+0x56/0x2f0 [ 673.537949][T17603] ? inet_bind_bucket_create+0x2b/0x230 [ 673.543511][T17603] inet_bind_bucket_create+0x2b/0x230 [ 673.548898][T17603] inet_csk_get_port+0xd63/0x1880 [ 673.553959][T17603] ? inet_csk_update_fastreuse+0xaa0/0xaa0 [ 673.559776][T17603] inet_csk_listen_start+0x120/0x300 [ 673.565095][T17603] inet_listen+0x2cb/0x580 [ 673.569554][T17603] __sys_listen+0x19d/0x220 [ 673.574100][T17603] __x64_sys_listen+0x56/0x60 [ 673.578859][T17603] do_syscall_64+0x4c/0xa0 [ 673.583297][T17603] ? clear_bhb_loop+0x60/0xb0 [ 673.587996][T17603] ? clear_bhb_loop+0x60/0xb0 [ 673.592683][T17603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.598597][T17603] RIP: 0033:0x7fcc9739e159 [ 673.603027][T17603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.622647][T17603] RSP: 002b:00007fcc981cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 673.631075][T17603] RAX: ffffffffffffffda RBX: 00007fcc97625fa0 RCX: 00007fcc9739e159 [ 673.639149][T17603] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000000003 [ 673.647128][T17603] RBP: 00007fcc9743506b R08: 0000000000000000 R09: 0000000000000000 [ 673.655136][T17603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.663153][T17603] R13: 00007fcc97626038 R14: 00007fcc97625fa0 R15: 00007fffeb75c9f8 [ 673.671162][T17603] [ 673.726764][T17584] loop3: detected capacity change from 0 to 32768 [ 674.124446][T17615] loop4: detected capacity change from 0 to 128 [ 674.205545][T17615] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 674.343286][T17615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 674.419775][T17615] ext2 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 674.584379][T17615] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 33: comm syz.4.3558: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 674.616688][T17615] EXT4-fs (loop4): Remounting filesystem read-only [ 674.623304][T17615] EXT4-fs error (device loop4) in do_split:2097: Corrupt filesystem [ 674.694178][T17615] EXT4-fs (loop4): Remounting filesystem read-only [ 674.739607][T17629] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 33: comm syz.4.3558: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 674.803793][T17629] EXT4-fs (loop4): Remounting filesystem read-only [ 674.825630][T17629] EXT4-fs error (device loop4) in do_split:2097: Corrupt filesystem [ 674.845312][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'. [ 674.865528][T17629] EXT4-fs (loop4): Remounting filesystem read-only [ 675.047505][T12037] EXT4-fs (loop4): unmounting filesystem. [ 675.475965][T17643] loop3: detected capacity change from 0 to 4096 [ 675.556408][T17643] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 675.949206][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 676.020573][ T9560] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 676.788613][T17667] loop5: detected capacity change from 0 to 65536 [ 676.903365][T17667] XFS (loop5): Mounting V5 Filesystem [ 677.060622][T17667] XFS (loop5): Ending clean mount [ 677.071197][T17667] XFS (loop5): Quotacheck needed: Please wait. [ 677.343720][T17667] XFS (loop5): Quotacheck: Done. [ 678.135596][ T5722] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 678.247076][T17693] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 678.247076][T17693] Q&|x6 [ 678.327784][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.352577][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 678.394940][ T5722] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 678.439375][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 678.458938][ T5722] usb 4-1: Product: syz [ 678.463162][ T5722] usb 4-1: Manufacturer: syz [ 678.516310][ T5722] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 678.576329][ T5722] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 678.781772][T17690] loop4: detected capacity change from 0 to 32768 [ 678.860462][T17690] XFS (loop4): Mounting V5 Filesystem [ 679.046973][T17685] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: is not a unsigned long [ 679.063500][T17690] XFS (loop4): Ending clean mount [ 679.069855][ T5715] usb 4-1: USB disconnect, device number 21 [ 679.084099][ T5715] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 679.113542][ T5715] iuu_phoenix 4-1:1.0: device disconnected [ 679.352987][T12037] XFS (loop4): Unmounting Filesystem [ 679.582113][T17687] XFS (loop5): Unmounting Filesystem [ 680.536178][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 681.295957][ T4296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.311001][ T4296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.326100][ T4296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.337768][ T4296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.345695][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 681.355554][ T4296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.901395][T17744] loop4: detected capacity change from 0 to 2048 [ 682.053077][T17730] chnl_net:caif_netlink_parms(): no params data found [ 682.406026][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.413340][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.431439][T17730] device bridge_slave_0 entered promiscuous mode [ 682.477430][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.495168][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.535775][T17730] device bridge_slave_1 entered promiscuous mode [ 682.637295][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.688963][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.851523][T17730] team0: Port device team_slave_0 added [ 682.878564][T17730] team0: Port device team_slave_1 added [ 682.997498][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.029337][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.137742][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.177852][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.184870][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.295491][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.446256][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 683.449971][T17730] device hsr_slave_0 entered promiscuous mode [ 683.538235][T17730] device hsr_slave_1 entered promiscuous mode [ 683.565639][T17730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.615222][T17730] Cannot create hsr debugfs directory [ 683.706347][T17773] loop4: detected capacity change from 0 to 2048 [ 683.791036][T17773] NILFS (loop4): invalid segment: Magic number mismatch [ 683.805764][T17773] NILFS (loop4): trying rollback from an earlier position [ 683.889537][T17773] NILFS (loop4): recovery complete [ 683.954691][T17777] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.954443][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 685.458452][T17801] FAULT_INJECTION: forcing a failure. [ 685.458452][T17801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 685.515843][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 685.534732][T17801] CPU: 1 PID: 17801 Comm: syz.3.3617 Not tainted syzkaller #0 [ 685.542269][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.552371][T17801] Call Trace: [ 685.556210][T17801] [ 685.559167][T17801] dump_stack_lvl+0x188/0x24e [ 685.563897][T17801] ? show_regs_print_info+0x12/0x12 [ 685.569131][T17801] ? load_image+0x410/0x410 [ 685.573693][T17801] ? __lock_acquire+0x7c40/0x7c40 [ 685.578795][T17801] should_fail_ex+0x390/0x4c0 [ 685.583592][T17801] prepare_alloc_pages+0x1e1/0x5b0 [ 685.588766][T17801] __alloc_pages+0x130/0x4f0 [ 685.593412][T17801] ? zone_statistics+0x170/0x170 [ 685.598406][T17801] ? _raw_spin_lock_irqsave+0x100/0x100 [ 685.604005][T17801] ? copy_page_from_iter+0xe4/0x100 [ 685.609261][T17801] pipe_write+0x616/0x1ae0 [ 685.613764][T17801] ? pipe_read+0x12d0/0x12d0 [ 685.618423][T17801] ? end_current_label_crit_section+0x14b/0x170 [ 685.624743][T17801] ? common_file_perm+0x171/0x1c0 [ 685.629930][T17801] vfs_write+0x482/0x9a0 [ 685.634431][T17801] ? file_end_write+0x250/0x250 [ 685.639350][T17801] ? __fget_files+0x3fc/0x460 [ 685.644076][T17801] ? __fdget_pos+0x1d4/0x360 [ 685.648801][T17801] ? ksys_write+0x70/0x260 [ 685.653285][T17801] ksys_write+0x14d/0x260 [ 685.657682][T17801] ? __ia32_sys_read+0x80/0x80 [ 685.662588][T17801] ? lockdep_hardirqs_on+0x94/0x140 [ 685.668009][T17801] do_syscall_64+0x4c/0xa0 [ 685.672565][T17801] ? clear_bhb_loop+0x60/0xb0 [ 685.677293][T17801] ? clear_bhb_loop+0x60/0xb0 [ 685.682028][T17801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.687988][T17801] RIP: 0033:0x7f5f3cb9e159 [ 685.692456][T17801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.712556][T17801] RSP: 002b:00007f5f3db2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.721012][T17801] RAX: ffffffffffffffda RBX: 00007f5f3ce25fa0 RCX: 00007f5f3cb9e159 [ 685.729021][T17801] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 685.737297][T17801] RBP: 00007f5f3cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 685.745317][T17801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.753348][T17801] R13: 00007f5f3ce26038 R14: 00007f5f3ce25fa0 R15: 00007ffe55570908 [ 685.761386][T17801] [ 686.003507][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.003651][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.756111][T17826] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 686.800612][T17826] bond3: (slave lo): Enslaving as an active interface with an up link [ 686.897895][T17826] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 687.392121][T17730] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 687.449321][T17730] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 687.501777][T17730] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 687.572087][T17730] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 687.595779][ T4296] Bluetooth: hci3: command 0x040f tx timeout [ 688.005972][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.095257][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.126028][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.144025][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.196248][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.223872][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.286005][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.293189][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.322946][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.348052][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.382297][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.454961][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.462233][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.601538][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.666458][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 688.901339][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.921640][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.969493][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.013429][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.043716][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.083179][T17730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 689.149753][T17730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.201182][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.215145][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.240029][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.268016][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.304369][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.330854][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.677065][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 690.477156][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.484790][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.520480][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.150976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 692.178124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 692.281719][T17974] input: syz0 as /devices/virtual/input/input45 [ 692.292158][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 692.310528][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 692.374942][T17730] device veth0_vlan entered promiscuous mode [ 692.390108][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 692.448660][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.472526][T17730] device veth1_vlan entered promiscuous mode [ 692.578726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 692.617511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 692.634293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.667993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.692896][T17730] device veth0_macvtap entered promiscuous mode [ 692.730624][T17730] device veth1_macvtap entered promiscuous mode [ 692.811573][T17988] FAULT_INJECTION: forcing a failure. [ 692.811573][T17988] name failslab, interval 1, probability 0, space 0, times 0 [ 692.835227][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.866022][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.887021][T17988] CPU: 1 PID: 17988 Comm: syz.0.3671 Not tainted syzkaller #0 [ 692.894645][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.904750][T17988] Call Trace: [ 692.908072][T17988] [ 692.911132][T17988] dump_stack_lvl+0x188/0x24e [ 692.915951][T17988] ? show_regs_print_info+0x12/0x12 [ 692.921199][T17988] ? load_image+0x410/0x410 [ 692.925753][T17988] ? __might_sleep+0xd0/0xd0 [ 692.930402][T17988] ? __lock_acquire+0x7c40/0x7c40 [ 692.935570][T17988] should_fail_ex+0x390/0x4c0 [ 692.940313][T17988] should_failslab+0x5/0x20 [ 692.945030][T17988] slab_pre_alloc_hook+0x59/0x300 [ 692.950112][T17988] ? __se_sys_memfd_create+0xee/0x340 [ 692.955536][T17988] __kmem_cache_alloc_node+0x4f/0x270 [ 692.960961][T17988] ? __se_sys_memfd_create+0xee/0x340 [ 692.966385][T17988] __kmalloc+0xa3/0x240 [ 692.970593][T17988] __se_sys_memfd_create+0xee/0x340 [ 692.975839][T17988] do_syscall_64+0x4c/0xa0 [ 692.980386][T17988] ? clear_bhb_loop+0x60/0xb0 [ 692.985103][T17988] ? clear_bhb_loop+0x60/0xb0 [ 692.989817][T17988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.995756][T17988] RIP: 0033:0x7fd8e559e159 [ 693.000296][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.020384][T17988] RSP: 002b:00007fd8e64b2e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 693.028855][T17988] RAX: ffffffffffffffda RBX: 000000000000033a RCX: 00007fd8e559e159 [ 693.036874][T17988] RDX: 00007fd8e64b2ee0 RSI: 0000000000000000 RDI: 00007fd8e563524b [ 693.045064][T17988] RBP: 0000200000000700 R08: 00000000ffffffff R09: 0000000000000000 [ 693.053080][T17988] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 693.061208][T17988] R13: 00007fd8e64b2ee0 R14: 00007fd8e64b2ea0 R15: 0000200000000440 [ 693.069768][T17988] [ 693.095481][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.125680][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.144398][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.155674][T13857] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 693.176905][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.210603][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.231768][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.259791][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.280618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 693.299785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 693.328237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.355059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.373825][T13857] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 693.397121][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.425787][T13857] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 693.442387][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.448230][T13857] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 693.469322][T13857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 693.481401][T13857] usb 5-1: Product: syz [ 693.491060][T13857] usb 5-1: Manufacturer: syz [ 693.493066][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.545714][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.585444][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.625416][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.668778][T17730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.713146][T17730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.732034][T17985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 693.760633][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.776576][T17985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 693.794902][T13857] dvb_ttusb_budget: ttusb_init_controller: error [ 693.806679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.825914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 693.838422][T17730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.855479][T13857] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 693.872272][T17730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.905098][T17730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.945581][T17730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.274313][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.309551][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.333852][T13857] DVB: Unable to find symbol cx22700_attach() [ 694.353301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 694.464745][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.483246][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.534211][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 694.616283][T13857] DVB: Unable to find symbol tda10046_attach() [ 694.627939][T13857] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 694.684437][T13857] usb 5-1: USB disconnect, device number 17 [ 695.410180][T18004] loop3: detected capacity change from 0 to 32768 [ 695.463342][T18004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3676 (18004) [ 695.555646][T18004] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.614398][T18004] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 695.667026][T18004] BTRFS info (device loop3): force clearing of disk cache [ 695.716200][T18004] BTRFS info (device loop3): enabling auto defrag [ 695.722738][T18004] BTRFS info (device loop3): max_inline at 0 [ 695.776353][T18004] BTRFS info (device loop3): enabling disk space caching [ 695.783454][T18004] BTRFS info (device loop3): disk space caching is enabled [ 695.838823][T18031] FAULT_INJECTION: forcing a failure. [ 695.838823][T18031] name failslab, interval 1, probability 0, space 0, times 0 [ 695.903968][T18031] CPU: 1 PID: 18031 Comm: syz.8.3682 Not tainted syzkaller #0 [ 695.911508][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.914342][T18034] device ipvlan2 entered promiscuous mode [ 695.921928][T18031] Call Trace: [ 695.921945][T18031] [ 695.921955][T18031] dump_stack_lvl+0x188/0x24e [ 695.921986][T18031] ? show_regs_print_info+0x12/0x12 [ 695.922008][T18031] ? load_image+0x410/0x410 [ 695.922036][T18031] ? __might_sleep+0xd0/0xd0 [ 695.953325][T18031] ? __lock_acquire+0x7c40/0x7c40 [ 695.958414][T18031] should_fail_ex+0x390/0x4c0 [ 695.963122][T18031] should_failslab+0x5/0x20 [ 695.967633][T18031] slab_pre_alloc_hook+0x59/0x300 [ 695.972673][T18031] ? security_prepare_creds+0x47/0x130 [ 695.978146][T18031] __kmem_cache_alloc_node+0x4f/0x270 [ 695.983533][T18031] ? security_prepare_creds+0x47/0x130 [ 695.989002][T18031] __kmalloc+0xa3/0x240 [ 695.993177][T18031] security_prepare_creds+0x47/0x130 [ 695.998485][T18031] prepare_creds+0x450/0x610 [ 696.003137][T18031] __sys_setreuid+0x101/0x980 [ 696.007828][T18031] ? syscall_enter_from_user_mode+0x21/0x80 [ 696.013750][T18031] ? lockdep_hardirqs_on+0x94/0x140 [ 696.018971][T18031] do_syscall_64+0x4c/0xa0 [ 696.023507][T18031] ? clear_bhb_loop+0x60/0xb0 [ 696.028210][T18031] ? clear_bhb_loop+0x60/0xb0 [ 696.032897][T18031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.038854][T18031] RIP: 0033:0x7f683139e159 [ 696.043377][T18031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.063016][T18031] RSP: 002b:00007f6832341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 696.071791][T18031] RAX: ffffffffffffffda RBX: 00007f6831625fa0 RCX: 00007f683139e159 [ 696.079794][T18031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 696.087813][T18031] RBP: 00007f683143506b R08: 0000000000000000 R09: 0000000000000000 [ 696.095789][T18031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.103770][T18031] R13: 00007f6831626038 R14: 00007f6831625fa0 R15: 00007ffdc49bf3d8 [ 696.111790][T18031] [ 696.175631][T18034] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 696.249853][T18034] team0: Device ipvlan2 failed to register rx_handler [ 696.495591][T18004] BTRFS info (device loop3): enabling ssd optimizations [ 696.593602][T18004] BTRFS info (device loop3): rebuilding free space tree [ 696.708587][T18004] BTRFS info (device loop3): disabling free space tree [ 696.728857][T18004] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 696.779340][T18004] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 697.033368][T18064] FAULT_INJECTION: forcing a failure. [ 697.033368][T18064] name failslab, interval 1, probability 0, space 0, times 0 [ 697.092759][T18064] CPU: 0 PID: 18064 Comm: syz.0.3688 Not tainted syzkaller #0 [ 697.100392][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.110502][T18064] Call Trace: [ 697.113832][T18064] [ 697.116825][T18064] dump_stack_lvl+0x188/0x24e [ 697.121560][T18064] ? show_regs_print_info+0x12/0x12 [ 697.126811][T18064] ? load_image+0x410/0x410 [ 697.131382][T18064] ? __might_sleep+0xd0/0xd0 [ 697.136115][T18064] ? __lock_acquire+0x7c40/0x7c40 [ 697.141203][T18064] should_fail_ex+0x390/0x4c0 [ 697.145925][T18064] should_failslab+0x5/0x20 [ 697.150451][T18064] slab_pre_alloc_hook+0x59/0x300 [ 697.155498][T18064] kmem_cache_alloc+0x56/0x2f0 [ 697.160306][T18064] ? sk_prot_alloc+0x57/0x210 [ 697.165002][T18064] sk_prot_alloc+0x57/0x210 [ 697.169527][T18064] ? sk_alloc+0x20/0x330 [ 697.173800][T18064] sk_alloc+0x36/0x330 [ 697.177893][T18064] tipc_sk_create+0xe6/0x2930 [ 697.182591][T18064] ? rcu_read_unlock+0x8c/0xa0 [ 697.187381][T18064] ? __lock_acquire+0x7c40/0x7c40 [ 697.192517][T18064] __sock_create+0x49a/0x940 [ 697.197137][T18064] __sys_socketpair+0x1bd/0x540 [ 697.202011][T18064] __x64_sys_socketpair+0x97/0xb0 [ 697.207053][T18064] do_syscall_64+0x4c/0xa0 [ 697.211483][T18064] ? clear_bhb_loop+0x60/0xb0 [ 697.216169][T18064] ? clear_bhb_loop+0x60/0xb0 [ 697.220977][T18064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.227015][T18064] RIP: 0033:0x7fd8e559e159 [ 697.231486][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.251128][T18064] RSP: 002b:00007fd8e64b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 697.259591][T18064] RAX: ffffffffffffffda RBX: 00007fd8e5825fa0 RCX: 00007fd8e559e159 [ 697.267586][T18064] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 697.275570][T18064] RBP: 00007fd8e563506b R08: 0000000000000000 R09: 0000000000000000 [ 697.283552][T18064] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 697.291534][T18064] R13: 00007fd8e5826038 R14: 00007fd8e5825fa0 R15: 00007ffd9d49edd8 [ 697.299537][T18064] [ 697.543330][ T9560] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 699.204114][ T5713] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 699.428216][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.475790][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.527184][ T5713] usb 4-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 699.565500][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 699.614304][ T5713] usb 4-1: SerialNumber: syz [ 699.848774][ T5713] usb 4-1: 0:2 : does not exist [ 699.946432][ T5713] usb 4-1: USB disconnect, device number 22 [ 700.258011][T17417] udevd[17417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.554184][T18131] loop8: detected capacity change from 0 to 32768 [ 700.677020][T18131] XFS (loop8): Mounting V5 Filesystem [ 700.830452][T18131] XFS (loop8): Ending clean mount [ 701.245621][T17730] XFS (loop8): Unmounting Filesystem [ 705.257868][T18275] loop3: detected capacity change from 0 to 32768 [ 705.337094][T18275] JBD2: Ignoring recovery information on journal [ 705.453658][T18275] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 705.768577][T18275] OCFS2: ERROR (device loop3): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1 [ 705.886898][T18275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 705.920399][T18275] OCFS2: File system is now read-only. [ 705.934820][T18275] (syz.3.3746,18275,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 705.981929][T18275] (syz.3.3746,18275,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 706.022310][T18275] (syz.3.3746,18275,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 706.072344][T18275] (syz.3.3746,18275,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 706.135619][T18275] (syz.3.3746,18275,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 706.185003][T18275] (syz.3.3746,18275,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 706.393963][ T9560] ocfs2: Unmounting device (7,3) on (node local) [ 707.185015][T18333] 9pnet_fd: Insufficient options for proto=fd [ 707.605559][ T22] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 707.805750][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 707.812854][ T22] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 707.874058][ T22] usb 4-1: config 2 has no interface number 0 [ 707.906290][ T22] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 707.947103][ T22] usb 4-1: config 2 interface 88 has no altsetting 0 [ 707.967559][ T22] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 708.007679][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 708.034967][ T22] usb 4-1: Product: syz [ 708.057081][ T22] usb 4-1: Manufacturer: syz [ 708.078832][ T22] usb 4-1: SerialNumber: syz [ 708.114357][T18338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 708.361271][T18338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 708.495462][T18366] device-mapper: table: 248:0: thin: Invalid argument count (-EINVAL) [ 708.503789][T18366] device-mapper: ioctl: error adding target to table [ 709.445000][ T22] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 709.495637][ T22] asix: probe of 4-1:2.88 failed with error -71 [ 709.518250][T18365] loop4: detected capacity change from 0 to 32768 [ 709.534628][ T22] usb 4-1: USB disconnect, device number 23 [ 709.618089][T18365] JBD2: Ignoring recovery information on journal [ 709.698400][T18365] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 709.773793][T18365] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1 [ 709.793070][T18365] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 709.815534][T18365] OCFS2: File system is now read-only. [ 709.835820][T18365] (syz.4.3770,18365,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 709.873644][T18365] (syz.4.3770,18365,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 709.935537][T18365] (syz.4.3770,18365,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 709.969244][T18365] (syz.4.3770,18365,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 710.051734][T18365] (syz.4.3770,18365,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 710.082448][T18365] (syz.4.3770,18365,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 710.527356][T12037] ocfs2: Unmounting device (7,4) on (node local) [ 710.815256][T18389] synth uevent: /bus/acpi: unknown uevent action string [ 711.196161][T18410] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3781'. [ 711.605717][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.749905][T18426] loop4: detected capacity change from 0 to 2048 [ 711.805926][T18426] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 711.904007][T18426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.484756][T18448] netlink: 'syz.4.3792': attribute type 4 has an invalid length. [ 712.515969][T18451] "syz.3.3794" (18451) uses obsolete ecb(arc4) skcipher [ 712.592007][T18452] netlink: 'syz.4.3792': attribute type 4 has an invalid length. [ 712.846667][T18459] loop3: detected capacity change from 0 to 256 [ 713.354247][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.396171][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.718043][T18416] overlayfs: failed to clone upperpath [ 714.668408][T18494] loop4: detected capacity change from 0 to 512 [ 714.731097][T18494] EXT4-fs: Ignoring removed nobh option [ 714.799322][T18494] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3809: invalid indirect mapped block 256 (level 2) [ 714.805542][ T4282] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 714.876610][T18494] EXT4-fs (loop4): 2 truncates cleaned up [ 714.882527][T18494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 715.035646][ T4282] usb 9-1: Using ep0 maxpacket: 8 [ 715.042764][ T4282] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 715.105046][ T4282] usb 9-1: config 0 interface 0 has no altsetting 0 [ 715.125530][ T4282] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 715.134733][ T4282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.244677][ T4282] usb 9-1: config 0 descriptor?? [ 715.253381][T12037] EXT4-fs (loop4): unmounting filesystem. [ 715.662689][ T4282] hid-multitouch 0003:1FD2:6007.001E: hidraw0: USB HID v10.01 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 715.903012][T18492] loop8: detected capacity change from 0 to 128 [ 715.943021][T18492] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 716.038678][ T5722] usb 9-1: USB disconnect, device number 5 [ 716.934413][T18519] loop4: detected capacity change from 0 to 32768 [ 717.048361][T18519] XFS (loop4): Mounting V5 Filesystem [ 717.208984][T18519] XFS (loop4): Ending clean mount [ 717.566906][T12037] XFS (loop4): Unmounting Filesystem [ 717.721496][T18528] loop8: detected capacity change from 0 to 40427 [ 717.761319][T18528] F2FS-fs (loop8): invalid crc value [ 717.801457][T18528] F2FS-fs (loop8): Found nat_bits in checkpoint [ 718.031715][T18528] F2FS-fs (loop8): Start checkpoint disabled! [ 718.199521][T18528] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 718.239171][ T58] team0 (unregistering): Port device team_slave_1 removed [ 718.406102][T18528] syz.8.3817: attempt to access beyond end of device [ 718.406102][T18528] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 718.631426][ T58] team0 (unregistering): Port device team_slave_0 removed [ 718.803956][ T46] kworker/u4:3: attempt to access beyond end of device [ 718.803956][ T46] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 718.859165][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.150618][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.488049][T18573] FAULT_INJECTION: forcing a failure. [ 720.488049][T18573] name failslab, interval 1, probability 0, space 0, times 0 [ 720.541666][T18573] CPU: 1 PID: 18573 Comm: syz.4.3826 Not tainted syzkaller #0 [ 720.549197][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.559286][T18573] Call Trace: [ 720.562597][T18573] [ 720.565563][T18573] dump_stack_lvl+0x188/0x24e [ 720.570276][T18573] ? show_regs_print_info+0x12/0x12 [ 720.575509][T18573] ? load_image+0x410/0x410 [ 720.580049][T18573] ? __might_sleep+0xd0/0xd0 [ 720.584671][T18573] ? __lock_acquire+0x7c40/0x7c40 [ 720.589822][T18573] ? __lock_acquire+0x138a/0x7c40 [ 720.595088][T18573] should_fail_ex+0x390/0x4c0 [ 720.599818][T18573] should_failslab+0x5/0x20 [ 720.604368][T18573] slab_pre_alloc_hook+0x59/0x300 [ 720.609442][T18573] kmem_cache_alloc+0x56/0x2f0 [ 720.614241][T18573] ? fcntl_setlk+0xa5/0x10e0 [ 720.618930][T18573] fcntl_setlk+0xa5/0x10e0 [ 720.623487][T18573] ? __might_fault+0xa6/0x120 [ 720.628223][T18573] ? __lock_acquire+0x7c40/0x7c40 [ 720.633308][T18573] ? vfs_lock_file+0xd0/0xd0 [ 720.638037][T18573] ? __might_fault+0xa6/0x120 [ 720.642858][T18573] ? __might_fault+0xc2/0x120 [ 720.647591][T18573] ? __might_fault+0xa6/0x120 [ 720.652393][T18573] do_fcntl+0x543/0x1280 [ 720.656657][T18573] ? __ia32_sys_get_robust_list+0x100/0x100 [ 720.662568][T18573] ? kill_fasync+0x4b0/0x4b0 [ 720.667260][T18573] ? __fget_files+0x28/0x460 [ 720.671865][T18573] ? __fget_files+0x3fc/0x460 [ 720.676559][T18573] ? tomoyo_file_fcntl+0x74/0x210 [ 720.681739][T18573] ? bpf_lsm_file_fcntl+0x5/0x10 [ 720.686690][T18573] ? security_file_fcntl+0x7c/0xa0 [ 720.691819][T18573] __se_sys_fcntl+0xc9/0x190 [ 720.696433][T18573] do_syscall_64+0x4c/0xa0 [ 720.700970][T18573] ? clear_bhb_loop+0x60/0xb0 [ 720.705854][T18573] ? clear_bhb_loop+0x60/0xb0 [ 720.710565][T18573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.716481][T18573] RIP: 0033:0x7fcc9739e159 [ 720.720910][T18573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.740530][T18573] RSP: 002b:00007fcc981cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 720.748960][T18573] RAX: ffffffffffffffda RBX: 00007fcc97625fa0 RCX: 00007fcc9739e159 [ 720.756945][T18573] RDX: 0000200000004240 RSI: 0000000000000006 RDI: 0000000000000003 [ 720.764924][T18573] RBP: 00007fcc9743506b R08: 0000000000000000 R09: 0000000000000000 [ 720.772921][T18573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.780918][T18573] R13: 00007fcc97626038 R14: 00007fcc97625fa0 R15: 00007fffeb75c9f8 [ 720.788917][T18573] [ 721.391345][ T58] bond0 (unregistering): Released all slaves [ 721.808373][T18583] netlink: 'syz.0.3829': attribute type 1 has an invalid length. [ 721.849377][T18583] netlink: 'syz.0.3829': attribute type 2 has an invalid length. [ 722.794822][T18614] FAULT_INJECTION: forcing a failure. [ 722.794822][T18614] name failslab, interval 1, probability 0, space 0, times 0 [ 722.815801][T18614] CPU: 0 PID: 18614 Comm: syz.8.3841 Not tainted syzkaller #0 [ 722.823336][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.833430][T18614] Call Trace: [ 722.836746][T18614] [ 722.839709][T18614] dump_stack_lvl+0x188/0x24e [ 722.844527][T18614] ? show_regs_print_info+0x12/0x12 [ 722.849762][T18614] ? load_image+0x410/0x410 [ 722.854298][T18614] ? __lock_acquire+0x7c40/0x7c40 [ 722.859371][T18614] should_fail_ex+0x390/0x4c0 [ 722.864114][T18614] should_failslab+0x5/0x20 [ 722.868659][T18614] slab_pre_alloc_hook+0x59/0x300 [ 722.873740][T18614] kmem_cache_alloc+0x56/0x2f0 [ 722.878552][T18614] ? vm_area_alloc+0x20/0xe0 [ 722.883463][T18614] vm_area_alloc+0x20/0xe0 [ 722.887925][T18614] mmap_region+0xcbc/0x1c50 [ 722.892498][T18614] ? file_mmap_ok+0x170/0x170 [ 722.897236][T18614] ? vma_expand+0x850/0x850 [ 722.901789][T18614] ? cap_mmap_addr+0x206/0x2c0 [ 722.906616][T18614] do_mmap+0x9ce/0x10d0 [ 722.910878][T18614] ? mlock_future_check+0x100/0x100 [ 722.916132][T18614] ? ima_file_mmap+0xf7/0x140 [ 722.920930][T18614] ? ima_file_free+0x3e0/0x3e0 [ 722.925778][T18614] vm_mmap_pgoff+0x1c1/0x2d0 [ 722.930523][T18614] ? account_locked_vm+0xe0/0xe0 [ 722.935520][T18614] ? ksys_mmap_pgoff+0xef/0x720 [ 722.940425][T18614] ? lockdep_hardirqs_on+0x94/0x140 [ 722.945679][T18614] do_syscall_64+0x4c/0xa0 [ 722.950141][T18614] ? clear_bhb_loop+0x60/0xb0 [ 722.954862][T18614] ? clear_bhb_loop+0x60/0xb0 [ 722.959598][T18614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.965544][T18614] RIP: 0033:0x7f683139e159 [ 722.970040][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3842'. [ 722.970237][T18614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.998933][T18614] RSP: 002b:00007f6832341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 723.007404][T18614] RAX: ffffffffffffffda RBX: 00007f6831625fa0 RCX: 00007f683139e159 [ 723.015426][T18614] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 723.023711][T18614] RBP: 00007f683143506b R08: ffffffffffffffff R09: 0000000000000000 [ 723.031735][T18614] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 723.039850][T18614] R13: 00007f6831626038 R14: 00007f6831625fa0 R15: 00007ffdc49bf3d8 [ 723.047895][T18614] [ 723.216069][T18624] fuse: Bad value for 'fd' [ 723.447407][T18628] device dummy0 entered promiscuous mode [ 723.485149][T18628] device gretap0 entered promiscuous mode [ 723.523576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 723.773567][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 723.806228][T18636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.963194][T18631] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 724.950507][T18636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.995597][ T4296] Bluetooth: hci0: command 0x0c1a tx timeout [ 727.697853][T18763] netlink: 'syz.8.3871': attribute type 1 has an invalid length. [ 728.059272][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.232263][T18772] loop4: detected capacity change from 0 to 512 [ 728.334660][T18772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 728.555637][T18778] loop3: detected capacity change from 0 to 1024 [ 728.690892][ T4296] Bluetooth: hci0: Malformed Event: 0x13 [ 729.121373][T18795] loop8: detected capacity change from 0 to 128 [ 729.152799][T12037] EXT4-fs (loop4): unmounting filesystem. [ 729.189868][T18795] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 729.300862][T18795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.515537][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 729.523521][ T28] Not tainted syzkaller #0 [ 729.544313][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.601119][ T28] task:rcu_tasks_kthre state:D stack:28256 pid:12 ppid:2 flags:0x00004000 [ 729.629599][ T28] Call Trace: [ 729.641971][ T28] [ 729.651802][ T28] __schedule+0x107f/0x4030 [ 729.680813][ T28] ? release_firmware_map_entry+0x187/0x187 [ 729.702256][ T28] schedule+0xb9/0x180 [ 729.717087][ T28] schedule_timeout+0xbd/0x2d0 [ 729.733162][ T28] ? console_conditional_schedule+0x40/0x40 [ 729.753822][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 729.771689][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 729.791154][ T28] ? lock_chain_count+0x20/0x20 [ 729.801892][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 729.812860][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 729.825576][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 729.841063][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 729.857667][ T28] ? wait_for_completion+0x26f/0x590 [ 729.870764][ T28] wait_for_completion+0x2c2/0x590 [ 729.883069][ T28] ? io_schedule+0xd0/0xd0 [ 729.890737][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 729.897820][ T28] ? debug_object_active_state+0x6b/0x380 [ 729.903808][ T28] __synchronize_srcu+0x2b3/0x350 [ 729.909607][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 729.915878][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 729.921671][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 729.937875][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 729.943920][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 729.965480][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 729.970602][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 729.990887][ T28] ? lock_chain_count+0x20/0x20 [ 729.997061][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 730.005639][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 730.011278][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 730.036995][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 730.053462][ T28] ? _raw_spin_unlock+0x40/0x40 [ 730.058684][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 730.074228][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 730.079687][ T28] rcu_tasks_kthread+0x6e/0x90 [ 730.094990][ T28] kthread+0x29d/0x330 [ 730.099583][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 730.104530][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.119480][ T28] ret_from_fork+0x1f/0x30 [ 730.123994][ T28] [ 730.137743][ T28] [ 730.137743][ T28] Showing all locks held in the system: [ 730.170853][ T28] 1 lock held by rcu_tasks_kthre/12: [ 730.188259][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 730.209780][ T28] 1 lock held by rcu_tasks_trace/13: [ 730.215229][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 730.261950][ T28] 1 lock held by khungtaskd/28: [ 730.285553][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 730.314142][ T28] 3 locks held by syz.9.2093/11629: [ 730.320002][ T28] #0: ffff88807d6f60e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 730.352469][ T28] #1: ffff88807f290460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 730.362160][ T28] #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 730.372236][ T28] 1 lock held by dhcpcd-run-hook/18813: [ 730.378238][ T28] [ 730.380674][ T28] ============================================= [ 730.380674][ T28] [ 730.389987][ T28] NMI backtrace for cpu 0 [ 730.394340][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 730.401577][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.411674][ T28] Call Trace: [ 730.414990][ T28] [ 730.417966][ T28] dump_stack_lvl+0x188/0x24e [ 730.422690][ T28] ? irq_work_queue+0xb8/0x140 [ 730.427578][ T28] ? show_regs_print_info+0x12/0x12 [ 730.432819][ T28] ? load_image+0x410/0x410 [ 730.437364][ T28] ? vprintk_emit+0x59f/0x6a0 [ 730.442129][ T28] ? printk_sprint+0x460/0x460 [ 730.446953][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 730.451928][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 730.458195][ T28] ? _printk+0xda/0x130 [ 730.462366][ T28] ? load_image+0x410/0x410 [ 730.466888][ T28] ? load_image+0x410/0x410 [ 730.471494][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 730.477667][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 730.483813][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 730.489908][ T28] watchdog+0xf0e/0xf50 [ 730.494095][ T28] ? watchdog+0x1ed/0xf50 [ 730.498617][ T28] kthread+0x29d/0x330 [ 730.502814][ T28] ? hungtask_pm_notify+0x40/0x40 [ 730.507855][ T28] ? kthread_blkcg+0xd0/0xd0 [ 730.512468][ T28] ret_from_fork+0x1f/0x30 [ 730.516996][ T28] [ 730.520975][ T28] Sending NMI from CPU 0 to CPUs 1: [ 730.526559][ C1] NMI backtrace for cpu 1 [ 730.526570][ C1] CPU: 1 PID: 4838 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 730.526585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.526595][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 730.526616][ C1] RIP: 0010:unwind_next_frame+0x62e/0x1fd0 [ 730.526638][ C1] Code: e8 03 0f b6 04 28 84 c0 0f 85 ea 14 00 00 49 0f bf 04 24 49 01 c6 e9 a8 08 00 00 4c 8d 73 40 4c 89 f0 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 f7 e8 c8 76 9a 00 49 8b 16 4d 8d 74 24 01 4c 89 e0 48 [ 730.526650][ C1] RSP: 0018:ffffc90003977200 EFLAGS: 00000246 [ 730.526663][ C1] RAX: 1ffff9200072ee5d RBX: ffffc900039772a8 RCX: ffffffff8e90c75c [ 730.526675][ C1] RDX: ffffffff8f30da22 RSI: ffffffff8e90c758 RDI: ffffffff8138fb37 [ 730.526686][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 [ 730.526696][ C1] R10: dffffc0000000000 R11: fffff5200072ee61 R12: ffffffff8f30da22 [ 730.526707][ C1] R13: ffffffff8f30da26 R14: ffffc900039772e8 R15: 1ffffffff1e61b44 [ 730.526718][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 730.526731][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.526741][ C1] CR2: 00007f6b3f7bb000 CR3: 000000007e0df000 CR4: 00000000003506e0 [ 730.526757][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.526765][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 730.526775][ C1] Call Trace: [ 730.526781][ C1] [ 730.526790][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 730.526810][ C1] ? stack_trace_save+0xf0/0xf0 [ 730.526828][ C1] arch_stack_walk+0x10c/0x140 [ 730.526872][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 730.526889][ C1] stack_trace_save+0xa6/0xf0 [ 730.526906][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 730.526922][ C1] ? mark_lock+0x94/0x320 [ 730.526946][ C1] kasan_set_track+0x4b/0x70 [ 730.526972][ C1] ? kasan_set_track+0x4b/0x70 [ 730.526989][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 730.527007][ C1] ? __kmalloc+0xb3/0x240 [ 730.527026][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 730.527062][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 730.527080][ C1] __kasan_kmalloc+0x8e/0xa0 [ 730.527099][ C1] ? ieee802_11_parse_elems_full+0xb4/0x1240 [ 730.527112][ C1] __kmalloc+0xb3/0x240 [ 730.527134][ C1] ieee802_11_parse_elems_full+0xb4/0x1240 [ 730.527148][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 730.527169][ C1] ? trace_contention_end+0x5f/0x170 [ 730.527187][ C1] ? __mutex_lock+0x1ab/0xae0 [ 730.527207][ C1] ? __lock_acquire+0x1465/0x7c40 [ 730.527225][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11c/0x2eb0 [ 730.527243][ C1] ? mutex_lock_nested+0x10/0x10 [ 730.527261][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 730.527280][ C1] ieee80211_ibss_rx_queued_mgmt+0x3f9/0x2eb0 [ 730.527296][ C1] ? verify_lock_unused+0x140/0x140 [ 730.527315][ C1] ? verify_lock_unused+0x140/0x140 [ 730.527336][ C1] ? verify_lock_unused+0x140/0x140 [ 730.527361][ C1] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 730.527381][ C1] ? mark_lock+0x94/0x320 [ 730.527401][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 730.527420][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 730.527438][ C1] ? lock_chain_count+0x20/0x20 [ 730.527455][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 730.527479][ C1] ? kcov_remote_start+0x87/0x810 [ 730.527496][ C1] ? skb_dequeue+0x120/0x150 [ 730.527514][ C1] ieee80211_iface_work+0x72c/0xc70 [ 730.527534][ C1] cfg80211_wiphy_work+0x224/0x260 [ 730.527549][ C1] ? process_one_work+0x7b4/0x1160 [ 730.527567][ C1] process_one_work+0x8ab/0x1160 [ 730.527590][ C1] ? worker_detach_from_pool+0x240/0x240 [ 730.527608][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 730.527627][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 730.527647][ C1] ? wq_worker_running+0x97/0x190 [ 730.527661][ C1] worker_thread+0xaf5/0x12a0 [ 730.527685][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 730.527710][ C1] kthread+0x29d/0x330 [ 730.527722][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 730.527737][ C1] ? kthread_blkcg+0xd0/0xd0 [ 730.527751][ C1] ret_from_fork+0x1f/0x30 [ 730.527776][ C1] [ 730.986924][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 730.993844][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 731.001069][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.011154][ T28] Call Trace: [ 731.014461][ T28] [ 731.017508][ T28] dump_stack_lvl+0x188/0x24e [ 731.022220][ T28] ? memcpy+0x3c/0x60 [ 731.026245][ T28] ? show_regs_print_info+0x12/0x12 [ 731.031491][ T28] ? load_image+0x410/0x410 [ 731.036133][ T28] panic+0x2d3/0x710 [ 731.040064][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 731.045759][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 731.050303][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 731.055892][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 731.062176][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 731.068369][ T28] watchdog+0xf4d/0xf50 [ 731.072558][ T28] ? watchdog+0x1ed/0xf50 [ 731.076910][ T28] kthread+0x29d/0x330 [ 731.081178][ T28] ? hungtask_pm_notify+0x40/0x40 [ 731.086222][ T28] ? kthread_blkcg+0xd0/0xd0 [ 731.090999][ T28] ret_from_fork+0x1f/0x30 [ 731.095447][ T28] [ 731.098806][ T28] Kernel Offset: disabled [ 731.103764][ T28] Rebooting in 86400 seconds..