last executing test programs: 5.364312461s ago: executing program 3 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000080027"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.903329272s ago: executing program 3 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x10003, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x3, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x6, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x1, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0xbf, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x9, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x804) 4.231270193s ago: executing program 3 (id=1302): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000017c0)={{0x2, 0x4e24, @loopback}, {0x306, @remote}, 0xa, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'pim6reg1\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, 0x0, 0x0, 0x1000000000fe, 0x0) 4.181663996s ago: executing program 3 (id=1303): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r0, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) syz_mount_image$xfs(&(0x7f000000c740), &(0x7f000000c780)='./file0\x00', 0x0, &(0x7f0000000100)={[{@gqnoenforce}]}, 0x1, 0xc746, &(0x7f0000018f40)="$eJzs3X1sXXX9wPFzu7ZrR37A4AeDITBBniTQdWW0QKC93WhXmEUdQhV0q6OMsY6HbcjGhEJQMYjTRNREjErIwoP+IShGYkxINEExRCJBFmTxj0X5g0yiCxlBXc3pvbe0d12zfrfvtxl7vZL13HNuP6e3932/54aH7PZ1LevMstqs5N6s2o3Lnru9+OMls369efnuRx5ufLZ0tGNe+e6O8rZY3nZmIycbOVxTOlS/4ufP1uQ7NWPPO6uxsXBklq2sOk9rabNpdeX7hquUD1d+fvmk+eMuPFj6M+qI/Msdux5+Icuyo8fMF7Ise36vX/Qw1Vfs7io/J9mYbjPKdxfev29kW1v60/5ilrWPPIcTvz6mVf44Oy46fvur0/1ADgV9xe6eqv4d5c6F8nrsqF6Dh6Pq1/mG4p6F5aewMOb6dcjpK3YtzSZZx9u+fvaZw6XrZl1+Mc+ybGaWZQ3T3YODo9jZkr9n11T2y9kr679jotfFW8sfvDbLsuPzt/HSa7/d+ykcgoqdLYsmWP/1k63/d/6xvdv6h0NfT7GzJV/rVeu/YbL1v/Xq+ZtL676jtTS1Z3p/CQAAAABgQus33bWmf3BwYJ0bbrjhxuiN6b4yAbG9v+in+5EAAAAAAAAAAAAA+yvF/0483b8jAAAAAAAAAAAAAHxQ9PQWd84ojDs0Y+zOyS8NjGwv2N1309atv5hd2ZbvvnKCU477nP/h4eHh3z/d1lfenVn1edkN1cP5+YeeebCtvLvX5w/WjRyty1bcuHpwYH7+oxbVZRvzneb8vF112TfznQX5Tndd9kS+0zKy05g9n++cv/LWwRvyA0sCn7EPlp7ee7MZ44pl414NY/sPPfPkxsp2klNWzlablfvvWHvdQ1X3Veyj/+j5i/v6XHIOjqn1f3Z+ZTvJKfda/6c2vNQw0X377j96/k7945rg+j+uUfV1v+r6P2+CU47O/+upwnF5//e2FCrvE7X7c/0fc/5F1f1HTj56/c9Ptbhy/c/fWy4/oCfjMNTTe9/Oydb/5P1r55a/rWbM7OjZau6Yd0Hef9nftuwoH6qbYv/Fk63/wry9ridMUU/vo8NV638K/bOzJjjlaJO+c387lPe/7NIT/z7mvqn0v7y6f9OGtbc1rd9013mr1/avGlg1cMuC5tbmhW0tbRe2NY1cEkpfD+xJOYwc2Pof+fz/sTOFLDtjdP78C+8+J++/fejIU8qHGqbYv2vS9b9i/GNljNNqsvr6bGP/hg3rmktfK7sLSl9L3zZB/ym8/59+dvnbGsvbQpadMDo/+553v5f3f3nOG+vKh+qn2L970v73jv5cAh3g+r+hamZc/7rF374k7//nnz7+y8qhKfZfMln/mh9Z/weqp7fqX/gcZHn/OZesWhw43uOf/+JK0X/puWvOCxy/Qv+4UvT/8kdunRU4fqX+caXo/94R64cDx5fqH1eK/i21d24LHP+Y/nGl6H/T/29+OnC8V/+4UvR/9KSh7wSOX6V/XCn6H3de6xmB4x/XP64U/d84rSX0v9N8Qv+4UvR/YEH7msDxT+ofV4r+vZdesjRwfJn+caXo33zMWc8Fjl+tf1wp+r978uk/CBz/lP5xpej/2P817Q4cv0b/uFL0v7nm3JcDx6/VP64U/X9yxr9PCBzv0z+uFP0HPjrcHjj+af3jStH/sot3XRM4/hn940rRf/fC3bcHjl+nf1wp+n917ltfChy/Xv+4UvQvHvf2Y4Hjn9U/rhT959bteDFw/HP6x5Wi/yuz3twZOL5c/7hS9L//lB8+GTi+Qv+4UvS/YvYjWwLH+/WPK0X/2YXvvhk4/nn940rRf9uR33o+cHyl/nGl6P/4h7+xMHD8Bv3jStH/lvO/dkzg+ID+caXov/CyBzYHjt+of1wp+v+n+f7rA8dX6R9Xiv4XH7/s4cDxm/SPK0X/XSde+7PA8dX6x5Wi/xON170eOH6z/nGl6N9fv/y/geNr9I8rRf9Tzlm019/zs58G9Y8rRf/XzuxuChxfq39cKfo/dOGVXYHjt+gfV4r+l190VX/g+K36x5Wi/z+PmvmnwPHb9I8rRf+2bMY7geO36x9Xiv4rjz7q+4Hj6/SPK0X/p0494leB4+v1jytF/1fnz+kNHN+gf1wp+n+o/djVgeN36B9Xiv7dTaeGjn9B/7hS9N8y76SJPidkf9ypf1wp+i+Z+Ye3A8c36h9Xiv73Nfzxd4Hjm/SPK0X/10/4zaOB43fpH1eK/sfOeeErgeOb9Y8rRf/Btr+sDxz/ov5xpei/tfWvVweO361/XCn67znrlUsDx+/RP64U/VvPfm1u4PiQ/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3l2Ha1YW+v/fMzC0CCiCgSIhINItKAzd3d3d3d3d3d3drSIqioItKgYoKAIKIij1u4aZ4eD4ga+ey9/hHD+v13Xt/ey1nmevuZ/7vdbaD/xzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL/f6ouutODAwOgjtvb/h+c3XemOHYZetfg49+y13stnnTz2LcP3LjD5iKcXeHMUA28dbIFhzw0e/pIx1r/5ksHDNga/87jjjD32oPEHBm2UR7XHqf+PYY/890ccdNi4Bx05/Ott4w779twk8z0zMDAwwf/jeLVWH7rYosMmb/jX291GG/H0iP1v/zz68K95ThsYmOetkyWfH++/pw+4aM/3ewz/F6w+dLElRuk/MKLzW91Hvb5bjXqe7/jm6je8r+H+TVYfuujSw1q/23U823y3bjXs/S8wMDBk2M18YGBgzIGBgbHe7x78ewxdcLYFh93zR24Pr77/yA8E6f4+6MX1X3tqYGBg7IGBgUkGBsbYf+TfAuD/lqELzrZQuP7HGPl8uv6fffSql13/8H/fEkMXnG3gHZ/zh+/df6yRz6fr/8kln5/0/RsxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M9749k77x2x1vfggYF9B0ZZ7/0tI9YFHHT9/Y888r4N9H+HsE72//mlT4d1HuvKyQcGtl3l/R4K74NB7/cAeF/p303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7F3mX9/wVGPj689gXjjnjp1GssseM//P6wfWP9Tw/6/fOfuv7/wBaDhrccGBiYYIuBgYFlh6648rTDtnZcYo0pBt5+bu5hz8070WgDo731q2+9YmCRdznwAiMeJx/2bZy3j3H9W8df4s0LRhs0yiDeYcJbL7lk89Vfnn3Ux2ne/X0MHvnDfg9Mv/qbb7755t/tHOHdztWRxx/5XkbtPGLs0w4b+0w7b7P9TDvtsecMW2yzwWabbLbJtrPOMtcsc8w929xzzj3TpltsvcnMw7+/y5y9NRsDC/0zczbGqHP27NB3ztmo7+3d5mzy956zt4448aArXxg5Z6P/i3O20HvP2eRbjBzrAkMG1n9raob9kwsPGdh92MYsYw47hUa8dtJhr51vosEDA8f/1xsd9tOYb5+Dg/Yf9prVF11pwf8a6T9eg/94nb41gMlHmeahIx4XHP62F3jHtI6x/s23DB628XfTPM7YYw8af2Bgo1GOM8/whx1fGvm6N0cxYvfk75z44eMedOTwr7e9db99c9VZlx52LY7y+/9/+G/9/f+HXnMPenuiBo34GvGa4b2GLrbEf/1bC4z8NvqIfXMN2x51zv6d/mG8kw9++7xO411i6IKzDds9yvy/fSmk8+uFm2bbdvj7WmCu4b/1xn+3ybvcO5b+r9kL/u7eMfDe947R/uvH/9q7ycOTjXrvWOrdh/h318XIORpzlBe9271j7iNv3G/Y8UeO+V3uHUsPG/uQgXfeO4b9swuNvHcMG/uiQwaOH7Yx67CNxYYMXD5sY7a3NsYeuH/Yxowbbbf1xsN2LP6P5+20g96egHc5bxcd5bwd/I7pG/SO+Rs04nwefWBg/ocGBua/P72vd5/OLJ23Y7zHeIcuONuw2/HgUc7bkb+SxjPo9cevO3VgYOAjw/9KD3uTw8f+35HGO/p7j3fBMN7R32O8A09s98qh/+bxvn2dvXWuDUzw1vfF3+V3/u46m+AfrrMDRnvHlfHPfq7ZOLx++M+Tvn20eU9ZeMjIORoyynH/X3+jR76X1H/kZ753Gnz+wKD3mpvF/pm5Gf+95+af/fwy7ZTDnx/7PebmzFf2nXDk3IzxL87NYu8yN+/8PPxOg/YfGPvv52b0tz4DTzVibhb9Z+ZmvH/PeTNOeP3wn6d+e9d0+8w548i5CXMR//6PPP6i/+rcrP/2eTPVW89NMXhgjDEGdt9g5513nGX495Gbsw7//t7X4ML/zFyO9e+Zy4+NuOsM/sfJeXvX7JPvMvi/ew0u/K/O5eQDg0f+N/cWo14s/z7+/083/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30L/Yu6//vP3L9/x32e+7CEcstDllnz3nnf7/H+z77j17/f0Tfv1v/f/5591xn8MDbz73n+uzDX/O/cn32uYY/7PH2Epujrg8+Yvc/vT779tOP9eD/0Prs/y0jr9V/Yt1Q9/9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/sXdZ///+EY/777HHzK+PWAh9yPavbnzK+z3e99l/9Pr/I/r+3fr/p2z86vaDB95+7j3X/x/+mo71/88dY9mF/jev/z/yWrX+P/8P+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/sbz+/6ARjwP3rz36ZHMMexy2/fSLjz72fo/3ffafuv7/WFdOPjCw7Srv91B4H7j/d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9K821/s9AN5frv9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YiPW/x8Yvv7/SIMWcF5EYf3//9vepf9Q/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv5L6h+19F9K/6il/9L6Ry39l9E/aum/rP5RS//l9I9a+i+vf9TSfwX9o5b+K+oftfRfSf+opf/K+kct/VfRP2rpv6r+UUv/1fSPWvqvrn/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL//X0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/976Ry3999E/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvofrn/U0v8I/aOW/kfqH7X0P0r/qKX/0fpHLf2P0T9q6X+s/lFL/+P0j1r6H69/1NL/BP2jlv4n6h+19D9J/6il/8n6Ry39T9E/aul/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/c/RP2rpf67+UUv/8/SPWvqfr3/U0v8C/aOW/hfqH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/Cv2jlv5X6h+19L9K/6il/9X6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/nfqH7X0v0v/qKX/3fpHLf3v0T9q6X+v/lFL//v0j1r6369/1NL/S/pHLf2/rH/U0v8r+kct/R/QP2rp/1X9o5b+D+oftfT/mv5RS/+v6x+19P+G/lFL/4f0j1r6f1P/qKX/t/SPWvo/rH/U0v/b+kct/b+jf9TS/xH9o5b+j+oftfT/rv5RS//v6R+19P++/lFL/x/oH7X0/6H+UUv/H+kftfT/sf5RS/+f6B+19H9M/6il/0/1j1r6/0z/qKX/z/WPWvo/rn/U0v8X+kct/X+pf9TS/1f6Ry39f61/1NL/Cf2jlv5P6h+19P+N/lFL/9/qH7X0f0r/qKX/0/pHLf1/p3/U0v/3+kct/Z/RP2rp/wf9o5b+z+oftfR/Tv+opf/z+kct/f+of9TS/0/6Ry39X9A/aun/ov5RS/8/6x+19H9J/6il/1/0j1r6v6x/1NL/Ff2jlv5/1T9q6f83/aOW/q/qH7X0f03/qKX/6/pHLf3f0D9q6f+m/lFJ/7d+1P8ftfQfpH/U0n+w/lFL/9H0j1r6j65/1NJ/iP5RS/8x9I9a+o+pf9TSfyz9o5b+Y+sftfQfR/+opf+4+kct/cfTP2rp/wH9o5b+4+sftfT/oP5RS/8J9I9a+k+of9TSfyL9o5b+H9I/aun/Yf2jlv4T6x+19P+I/lFL/0n0j1r6T6p/1NL/o/pHLf0/pv9w4//9Zkv/j+sftfT/hP5RS//J9I9a+n9S/6il/6f0j1r6T65/1NL/0/pHLf2n0D9q6T+l/lFL/6n0j1r6T61/1NL/M/pHLf2n0T9q6T+t/lFL/+n0j1r6f1b/qKX/9PpHLf0/p3/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/9z6Ry3959E/aun/ef2jlv7z6h+19J9P/6il/xf0j1r6f1H/qKX//PpHLf0X0D9q6T9U/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfRfQv+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1X0j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvpvqn/U0n8z/aOW/pvrH7X030L/qKX/lvpHLf230j9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/476Ry39d9I/aum/s/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf+e+kct/ffSP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6X+w/lFL/0P0j1r6H6p/1NL/MP2jlv6H6x+19D9C/6il/5H6Ry39j9I/aul/tP5RS/9j9I9a+h+rf9TS/zj9o5b+x+sftfQ/Qf+opf+J+kct/U/SP2rpf7L+UUv/U/SPWvqfqn/U0v80/aOW/qfrH7X0P0P/qKX/mfpHLf3P0j9q6X+2/lFL/3P0j1r6n6t/1NL/PP2jlv7n6x+19L9A/6il/4X6Ry39L9I/aul/sf5RS/9L9I9a+l+qf9TS/zL9o5b+l+sftfS/Qv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvpfq3/U0v86/aOW/tfrH7X0v0H/qKX/jfpHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv636x+19L9D/6il/536Ry3979I/aul/t/5RS/979I9a+t+rf9TS/z79o5b+9+sftfT/kv5RS/8v6x+19P+K/lFL/wf0j1r6f1X/qKX/g/pHLf2/pn/U0v/r+kct/b+hf9TS/yH9o5b+39Q/aun/Lf2jlv4P6x+19P+2/lFL/+/oH7X0f0T/qKX/o/pHLf2/q3/U0v97+kct/b+vf9TS/wf6Ry39f6h/1NL/R/pHLf1/rH/U0v8n+kct/R/TP2rp/1P9o5b+P9M/aun/c/2jlv6P6x+19P+F/lFL/1/qH7X0/5X+UUv/X+sftfR/Qv+opf+T+kct/X+jf9TS/7f6Ry39n9I/aun/tP5RS//f6R+19P+9/lFL/2f0j1r6/0H/qKX/s/pHLf2f0z9q6f+8/lFL/z/qH7X0/5P+UUv/F/SPWvq/qH/U0v/P+kct/V/SP2rp/xf9o5b+L+sftfR/Rf+opf9f9Y9a+v9N/6il/6v6Ry39X9M/aun/uv5RS/839I9a+r+pf1TSf7QB/aOW/oP0j1r6D9Y/auk/mv5RS//R9Y9a+g/RP2rpP4b+UUv/MfWPWvqPpX/U0n9s/aOW/uPoH7X0H1f/qKX/ePpHLf0/oH/U0n98/aOW/h/UP2rpP4H+UUv/CfWPWvpPpH/U0v9D+kct/T+sf9TSf2L9o5b+H9E/auk/if5RS/9J9Y9a+n9U/6il/8f0j1r6f1z/qKX/J/SPWvpPpn/U0v+T+kct/T+lf9TSf3L9o5b+n9Y/auk/hf5RS/8p9Y9a+k+lf9TSf2r9o5b+n9E/auk/jf5RS/9p9Y9a+k+nf9TS/7P6Ry39p9c/aun/Of2jlv4z6B+19J9R/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+s+mf9TSf3b9o5b+c+gftfSfU/+opf9c+kct/efWP2rpP4/+UUv/z+sftfSfV/+opf98+kct/b+gf9TS/4v6Ry3959c/aum/gP5RS/+h+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv7L6R+19F9e/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TSf1X9o5b+q+kftfRfXf+opf8a+kct/dfUP2rpv5b+UUv/tfWPWvqvo3/U0n9d/aOW/uvpH7X0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6b6J/1NJ/U/2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+t9Y9a+m+jf9TSf1v9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/731j1r676N/1NJ/X/2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/1D9o5b+h+kftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v9Y/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvrfo3/U0v9e/aOW/vfpH7X0v1//qKX/l/SPWvp/Wf+opf9X9I9a+j+gf9TS/6v6Ry39H9Q/aun/Nf2jlv5f1z9q6f8N/aOW/g/pH7X0/6b+UUv/b+kftfR/WP+opf+39Y9a+n9H/6il/yP6Ry39H9U/aun/Xf2jlv7f0z9q6f99/aOW/j/QP2rp/0P9o5b+P9I/aun/Y/2jlv4/0T9q6f+Y/lFL/5/qH7X0/5n+UUv/n+sftfR/XP+opf8v9I9a+v9S/6il/6/0j1r6/1r/qKX/E/pHLf2f1D9q6f8b/aOW/r/VP2rp/5T+UUv/p/WPWvr/Tv+opf/v9Y9a+j+jf9TS/w/6Ry39n9U/aun/nP5RS//n9Y9a+v9R/6il/5/0j1r6v6B/1NL/Rf2jlv5/1j9q6f+S/lFL/7/oH7X0f1n/qKX/K/pHLf3/qn/U0v9v+kct/V/VP2rp/5r+UUv/1/WPWvq/oX/U0v9N/aOS/qMP6B+19B+kf9TSf7D+UUv/0fSPWvqPrn/U0n+I/lFL/zH0j1r6j6l/1NJ/LP2jlv5j6x+19B9H/6il/7j6Ry39x9M/aun/Af2jlv7j6x+19P+g/lFL/wn0j1r6T6h/1NJ/Iv2jlv4f0j9q6f9h/aOW/hPrH7X0/4j+UUv/SfSPWvpPqn/U0v+j+kct/T+mf9TS/+P6Ry39P6F/1NJ/Mv2jlv6f1D9q6f8p/aOW/pPrH7X0/7T+UUv/KfSPWvpPqX/U0n8q/aOW/lPrH7X0/4z+UUv/afSPWvpPq3/U0n86/aOW/p/VP2rpP73+UUv/z+kftfSfQf+opf+M+kct/WfSP2rpP7P+UUv/WfSPWvrPqn/U0n82/aOW/rPrH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3n0j1r6f17/qKX/vPpHLf3n0z9q6f8F/aOW/l/UP2rpP7/+UUv/BfSPWvoP1T9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6L6h+19F9M/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/VfQP2rpv6L+UUv/lfSPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/bfQP2rpv6X+UUv/rfSPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvofrH/U0v8Q/aOW/ofqH7X0P0z/qKX/4fpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19D9O/6il//H6Ry39T9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6X+h/lFL/4v0j1r6X6x/1NL/Ev2jlv6X6h+19L9M/6il/+X6Ry39r9A/aul/pf5RS/+r9I9a+l+tf9TS/xr9o5b+1+oftfS/Tv+opf/1+kct/W/QP2rpf6P+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6X+n/lFL/7v0j1r6361/1NL/Hv2jlv736h+19L9P/6il//36Ry39v6R/1NL/y/pHLf2/on/U0v8B/aOW/l/VP2rp/6D+UUv/r+kftfT/uv5RS/9v6B+19H9I/6il/zf1j1r6f0v/qKX/w/pHLf2/rX/U0v87+kct/R/RP2rp/6j+UUv/7+oftfT/nv5RS//v6x+19P+B/lFL/x/qH7X0/5H+UUv/H+sftfT/if5RS//H9I9a+v9U/6il/8/0j1r6/1z/qKX/4/pHLf1/oX/U0v+X+kct/X+lf9TS/9f6Ry39n9A/aun/pP5RS//f6B+19P+t/lFL/6f0j1r6P61/1NL/d/pHLf1/r3/U0v8Z/aOW/n/QP2rp/6z+UUv/5/SPWvo/r3/U0v+P+kct/f+kf9TS/wX9o5b+L+oftfT/s/5RS/+X9I9a+v9F/6il/8v6Ry39X9E/aun/V/2jlv5/0z9q6f+q/lFL/9f0j1r6v65/1NL/Df2jlv5v6h+V9B8yoH/U0n+Q/lFL/8H6Ry39R9M/auk/uv5RS/8h+kct/cfQP2rpP6b+UUv/sfSPWvqPrX/U0n8c/aOW/uPqH7X0H0//qKX/B/SPWvqPr3/U0v+D+kct/SfQP2rpP6H+UUv/ifSPWvp/SP+opf+H9Y9a+k+sf9TS/yP6Ry39J9E/auk/qf5RS/+P6h+19P+Y/lFL/4/rH7X0/4T+UUv/yfSPWvp/Uv+opf+n9I9a+k+uf9TS/9P6Ry39p9A/auk/pf5RS/+p9I9a+k+tf9TS/zP6Ry39p9E/auk/rf5RS//p9I9a+n9W/6il//T6Ry39P6d/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+u/1smHmW7pf8c+kct/efUP2rpP5f+UUv/ufWPWvrPo3/U0v/z+kct/efVP2rpP5/+UUv/L+gftfT/ov5RS//59Y9a+i+gf9TSf6j+UUv/BfWPWvovpH/U0n9h/aOW/ovoH7X0X1T/qKX/YvpHLf0X1z/6z+0/5J17hyyhf/Sf2//vr/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rpv4L+UUv/FfWPWvqvpH/U0n9l/aOW/qvoH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvpvpX/U0n9r/aOW/tvoH7X031b/qKX/dvpHLf231z9q6b+D/lFL/x31j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+u+lf9TSf2/9o5b+++gftfTfV/+opf9++kct/ffXP2rpf4D+UUv/A/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/YfpHLf0P1z9q6X+E/lFL/yP1j1r6H6V/1NL/aP2jlv7H6B+19D9W/6il/3H6Ry39j9c/aul/gv5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/efpHLf3P1z9q6X+B/lFL/wv1j1r6X6R/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39L9c/aul/hf5RS/8r9Y9a+l+lf9TS/2r9o5b+1+gftfS/Vv+opf91+kct/a/XP2rpf4P+UUv/G/WPWvrfpH/U0v9m/aOW/rfoH7X0v1X/qKX/bfpHLf1v1z9q6X+H/lFL/zv1j1r636V/1NL/bv2jlv736B+19L9X/6il/336Ry3979c/aun/Jf2jlv5f1j9q6f8V/aOW/g/oH7X0/6r+UUv/B/WPWvp/Tf+opf/X9Y9a+n9D/6il/0P6Ry39v6l/1NL/W/pHLf0f1j9q6f9t/aOW/t/RP2rp/4j+UUv/R/WPWvp/V/+opf/39I9a+n9f/6il/w/0j1r6/1D/qKX/j/SPWvr/WP+opf9P9I9a+j+mf9TS/6f6Ry39f6Z/1NL/5/pHLf0f1z9q6f8L/aOW/r/UP2rp/yv9o5b+v9Y/aun/hP5RS/8n9Y9a+v9G/6il/2/1j1r6P6V/1NL/af2jlv6/0z9q6f97/aOW/s/oH7X0/4P+UUv/Z/WPWvo/p3/U0v95/aOW/n/UP2rp/yf9o5b+L+gftfR/Uf+opf+f9Y9a+r+kf9TS/y/6Ry39X9Y/aun/iv5RS/+/6h+19P+b/lFL/1f1j1r6v6Z/1NL/df2jlv5v6B+19H9T/6ik/xgD+kct/QfpH7X0H6x/1NJ/NP2jlv6j6z/M2KPuaOk/RP+opf8Y+kct/cfUP2rpP5b+UUv/sfWPWvqPo3/U0n9c/aOW/uPpH7X0/4D+UUv/8fWPWvp/UP+opf8E+kct/SfUP2rpP5H+UUv/D+kftfT/sP5RS/+J9Y9a+n9E/6il/yT6Ry39J9U/aun/Uf2jlv4f0z9q6f9x/aOW/p/QP2rpP5n+UUv/T+oftfT/lP5RS//J9Y9a+n9a/6il/xT6Ry39p9Q/auk/lf5RS/+p9Y9a+n9G/6il/zT6Ry39p9U/auk/nf5RS//P6h+19J9e/6il/+f0j1r6z6B/1NJ/Rv2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf88+kct/T+vf9TSf179o5b+8+kftfT/gv5RS/8v6h+19J9f/6il/wL6Ry39h+oftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19F9R/6il/0r6Ry39V9Y/aum/iv5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/dfWP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/1b6Ry39t9Y/aum/jf5RS/9t9Y9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf9O+kct/XfWP2rpv4v+UUv/XfWPWvrvpn/U0n93/aOW/nvoH7X031P/qKX/XvpHLf331j9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19D9Q/6il/0H6Ry39D9Y/aul/iP5RS/9D9Y9a+h+mf9TS/3D9o5b+R+gftfQ/Uv+opf9R+kct/Y/WP2rpf4z+UUv/Y/WPWvofp3/U0v94/aOW/ifoH7X0P1H/qKX/SfpHLf1P1j9q6X+K/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39z9Y/aul/jv5RS/9z9Y9a+p+nf9TS/3z9o5b+F+gftfS/UP+opf9F+kct/S/WP2rpf4n+UUv/S/WPWvpfpn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2v1j9q6X+N/lFL/2v1j1r6X6d/1NL/ev2jlv436B+19L9R/6il/036Ry39b9Y/aul/i/5RS/9b9Y9a+t+mf9TS/3b9o5b+d+gftfS/U/+opf9d+kct/e/WP2rpf4/+UUv/e/WPWvrfp3/U0v9+/aOW/l/SP2rp/2X9o5b+X9E/aun/gP5RS/+v6h+19H9Q/6il/9f0j1r6f13/qKX/N/SPWvo/pH/U0v+b+kct/b+lf9TS/2H9o5b+39Y/aun/Hf2jlv6P6B+19H9U/6il/3f1j1r6f0//qKX/9/WPWvr/QP+opf8P9Y9a+v9I/6il/4/1j1r6/0T/qKX/Y/pHLf1/qn/U0v9n+kct/X+uf9TS/3H9o5b+v9A/aun/S/2jlv6/0j9q6f9r/aOW/k/oH7X0f1L/qKX/b/SPWvr/Vv+opf9T+kct/Z/WP2rp/zv9o5b+v9c/aun/jP5RS/8/6B+19H9W/6il/3P6Ry39n9c/aun/R/2jlv5/0j9q6f+C/lFL/xf1j1r6/1n/qKX/S/pHLf3/on/U0v9l/aOW/q/oH7X0/6v+UUv/v+kftfR/Vf+opf9r+kct/V/XP2rp/4b+UUv/N/WPSvqPOaB/1NJ/kP5RS//B+kct/UfTP2rpP7r+UUv/IfpHLf3H0D9q6T+m/lFL/7H0j1r6j61/1NJ/HP2jlv7j6h+19B9P/6il/wf0j1r6j69/1NL/g/pHLf0n0D9q6T+h/lFL/4n0j1r6f0j/qKX/h/WPWvpPrH/U0v8j+kct/SfRP2rpP6n+UUv/j+oftfT/mP5RS/+P6x+19P+E/lFL/8n0j1r6f1L/qKX/p/SPWvpPrn/U0v/T+kct/afQP2rpP6X+UUv/qfSPWvpPrX/U0v8z+kct/afRP2rpP63+UUv/6fSPWvp/Vv+opf/0+kct/T+nf9TSfwb9o5b+M+oftfSfSf+opf/M+kct/WfRP2rpP6v+UUv/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/3PpHLf3n0T9q6f95/aOW/vPqH7X0n0//qKX/F/SPWvp/Uf+opf/8+kct/RfQP2rpP1T/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rf9TSfzn9o5b+y+sftfRfQf+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvqvqn/U0n81/aOW/qvrH7X0X0P/qKX/mvpHLf3X0j9q6b+2/lFL/3X0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/130j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rpf7D+UUv/Q/SPWvofqn/U0v8w/aOW/ofrH7X0P0L/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/OP2jlv7H6x+19D9B/6il/4n6Ry39T9I/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v88/aOW/ufrH7X0v0D/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/1NL/Pv2jlv736x+19P+S/lFL/y/rH7X0/4r+UUv/B/SPWvp/Vf+opf+D+kct/b+mf9TS/+v6Ry39v6F/1NL/If2jlv7f1D9q6f8t/aOW/g/rH7X0/7b+UUv/7+gftfR/RP+opf+j+kct/b+rf9TS/3v6Ry39v69/1NL/B/pHLf1/qH/U0v9H+kct/X+sf9TS/yf6Ry39H9M/aun/U/2jlv4/0z9q6f9z/aOW/o/rH7X0/4X+UUv/X+oftfT/lf5RS/9f6x+19H9C/6il/5P6Ry39f6N/1NL/t/pHLf2f0j9q6f+0/lFL/9/pH7X0/73+UUv/Z/SPWvr/Qf+opf+z+kct/Z/TP2rp/7z+UUv/P+oftfT/k/5RS/8X9I9a+r+of9TS/8/6Ry39X9I/aun/F/2jlv4v6x+19H9F/6il/1/1j1r6/03/qKX/q/pHLf1f0z9q6f+6/lFL/zf0j1r6v6l/VNJ/rAH9o5b+g/SPWvoP1j9q6T+a/lFL/9H1j1r6D9E/auk/hv5RS/8x9Y9a+o+lf9TSf2z9o5b+4+gftfQfV/+opf94+kct/T+gf9TSf3z9o5b+H9Q/auk/gf5RS/8J9Y9a+k+kf9TS/0P6Ry39P6x/1NJ/Yv2jlv4f0T9q6T+J/lFL/0n1j1r6f1T/qKX/x/SPWvp/XP+opf8n9I9a+k+mf9TS/5P6Ry39P6V/1NJ/cv2jlv6f1j9q6T+F/lFL/yn1j1r6T6V/1NJ/av2jlv6f0T9q6T+N/lFL/2n1j1r6T6d/1NL/s/pHLf2n1z9q6f85/aOW/jPoH7X0n1H/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry3959Y/auk/j/5RS//P6x+19J9X/6il/3z6Ry39v6B/1NL/i/pHLf3n1z9q6b+A/lFL/6H6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/FvpHLf231D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rpv5f+UUv/vfWPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qeNrn/S0v9013/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/0v6Ry39v6x/1NL/K/pHLf0f0D9q6f9V/aOW/g/qH7X0/5r+UUv/r+sftfT/hv5RS/+H9I9a+n9T/6il/7f0j1r6P6x/1NL/2/pHLf2/o3/U0v8R/aOW/o/qH7X0/67+UUv/7+kftfT/vv5RS/8f6B+19P+h/lFL/x/pH7X0/7H+UUv/n+gftfR/TP+opf9P9Y9a+v9M/6il/8/1j1r6P65/1NL/F/pHLf1/qX/U0v9X+kct/X+tf9TS/wn9o5b+T+oftfT/jf5RS//f6h+19H9K/6il/9P6Ry39f6d/1NL/9/pHLf2f0T9q6f8H/aOW/s/qH7X0f07/qKX/8/pHLf3/qH/U0v9P+kct/V/QP2rp/6L+UUv/P+sftfR/Sf+opf9f9I9a+r+sf9TS/xX9o5b+f9U/aun/N/2jlv6v6h+19H9N/6il/+v6Ry3939A/aun/pv5RSf+xB/SPWvoP0j9q6T9Y/6il/2j6Ry39R9c/auk/RP+opf8Y+kct/cfUP2rpP5b+UUv/sfWPWvqPo3/U0n9c/aOW/uPpH7X0/4D+UUv/8fWPWvp/UP+opf8E+kct/SfUP2rpP5H+UUv/D+kftfT/sP5RS/+J9Y9a+n9E/6il/yT6Ry39J9U/aun/Uf2jlv4f0z9q6f9x/aOW/p/QP2rpP5n+UUv/T+oftfT/lP5RS//J9Y9a+n9a/6il/xT6Ry39p9Q/auk/lf5RS/+p9Y9a+n9G/6il/zT6Ry39p9U/auk/nf5RS//P6h+19J9e/6il/+f0j1r6z6B/1NJ/Rv2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf88+kct/T+vf9TSf179o5b+8+kftfT/gv5RS/8v6h+19J9f/6il/wL6Ry39h+oftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19F9R/6il/0r6Ry39V9Y/aum/iv5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/dfWP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/1b6Ry39t9Y/aum/jf5RS/9t9Y9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf9O+kct/XfWP2rpv4v+UUv/XfWPWvrvpn/U0n93/aOW/nvoH7X031P/qKX/XvpHLf331j9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19D9Q/6il/0H6Ry39D9Y/aul/iP5RS/9D9Y9a+h+mf9TS/3D9o5b+R+gftfQ/Uv+opf9R+kct/Y/WP2rpf4z+UUv/Y/WPWvofp3/U0v94/aOW/ifoH7X0P1H/qKX/SfpHLf1P1j9q6X+K/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39z9Y/aul/jv5RS/9z9Y9a+p+nf9TS/3z9o5b+F+gftfS/UP+opf9F+kct/S/WP2rpf4n+UUv/S/WPWvpfpn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2v1j9q6X+N/lFL/2v1j1r6X6d/1NL/ev2jlv436B+19L9R/6il/036Ry39b9Y/aul/i/5RS/9b9Y9a+t+mf9TS/3b9o5b+d+gftfS/U/+opf9d+kct/e/WP2rpf4/+UUv/e/WPWvrfp3/U0v9+/aOW/l/SP2rp/2X9o5b+X9E/aun/gP5RS/+v6h+19H9Q/6il/9f0j1r6f13/qKX/N/SPWvo/pH/U0v+b+kct/b+lf9TS/2H9o5b+39Y/aun/Hf2jlv6P6B+19H9U/6il/3f1j1r6f0//qKX/9/WPWvr/QP+opf8P9Y9a+v9I/6il/4/1j1r6/0T/qKX/Y/pHLf1/qn/U0v9n+kct/X+uf9TS/3H9o5b+v9A/aun/S/2jlv6/0j9q6f9r/aOW/k/oH7X0f1L/qKX/b/SPWvr/Vv+opf9T+kct/Z/WP2rp/zv9o5b+v9c/aun/jP5RS/8/6B+19H9W/6il/3P6Ry39n9c/aun/R/2jlv5/0j9q6f+C/lFL/xf1j1r6/1n/qKX/S/pHLf3/on/U0v9l/aOW/q/oH7X0/6v+UUv/v+kftfR/Vf+opf9r+kct/V/XP2rp/4b+UUv/N/WPSvqPM6B/1NJ/kP5RS//B+kct/UfTP2rpP7r+UUv/IfpHLf3H0D9q6T+m/lFL/7H0j1r6j61/1NJ/HP2jlv7j6h+19B9P/6il/wf0j1r6j69/1NL/g/pHLf0n0D9q6T+h/lFL/4n0j1r6f0j/qKX/h/WPWvpPrH/U0v8j+kct/SfRP2rpP6n+UUv/j+oftfT/mP5RS/+P6x+19P+E/lFL/8n0j1r6f1L/qKX/p/SPWvpPrn/U0v/T+kct/afQP2rpP6X+UUv/qfSPWvpPrX/U0v8z+kct/afRP2rpP63+UUv/6fSPWvp/Vv+opf/0+kct/T+nf9TSfwb9o5b+M+oftfSfSf+opf/M+kct/WfRP2rpP6v+UUv/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/3PpHLf3n0T9q6f95/aOW/vPqH7X0n0//qKX/F/SPWvp/Uf+opf/8+kct/RfQP2rpP1T/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rf9TSfzn9o5b+y+sftfRfQf+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvqvqn/U0n81/aOW/qvrH7X0X0P/qKX/mvpHLf3X0j9q6b+2/lFL/3X0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/130j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rpf7D+UUv/Q/SPWvofqn/U0v8w/aOW/ofrH7X0P0L/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/OP2jlv7H6x+19D9B/6il/4n6Ry39T9I/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v88/aOW/ufrH7X0v0D/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/1NL/Pv2jlv736x+19P+S/lFL/y/rH7X0/4r+UUv/B/SPWvp/Vf+opf+D+kct/b+mf9TS/+v6Ry39v6F/1NL/If2jlv7f1D9q6f8t/aOW/g/rH7X0/7b+UUv/7+gftfR/RP+opf+j+kct/b+rf9TS/3v6Ry39v69/1NL/B/pHLf1/qH/U0v9H+kct/X+sf9TS/yf6Ry39H9M/aun/U/2jlv4/0z9q6f9z/aOW/o/rH7X0/4X+UUv/X+oftfT/lf5RS/9f6x+19H9C/6il/5P6Ry39f6N/1NL/t/pHLf2f0j9q6f+0/lFL/9/pH7X0/73+UUv/Z/SPWvr/Qf+opf+z+kct/Z/TP2rp/7z+UUv/P+oftfT/k/5RS/8X9I9a+r+of9TS/8/6Ry39X9I/aun/F/2jlv4v6x+19H9F/6il/1/1j1r6/03/qKX/q/pHLf1f0z9q6f+6/lFL/zf0j1r6v6l/VNJ/3AH9o5b+g/SPWvoP1j9q6T+a/lFL/9H1j1r6D9E/auk/hv5RS/8x9Y9a+o+lf9TSf2z9o5b+4+gftfQfV/+opf94+kct/T+gf9TSf3z9o5b+H9Q/auk/gf5RS/8J9Y9a+k+kf9TS/0P6Ry39P6x/1NJ/Yv2jlv4f0T9q6T+J/lFL/0n1j1r6f1T/qKX/x/SPWvp/XP+opf8n9I9a+k+mf9TS/5P6Ry39P6V/1NJ/cv2jlv6f1j9q6T+F/lFL/yn1j1r6T6V/1NJ/av2jlv6f0T9q6T+N/lFL/2n1j1r6T6d/1NL/s/pHLf2n1z9q6f85/aOW/jPoH7X0n1H/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry3959Y/auk/j/5RS//P6x+19J9X/6il/3z6Ry39v6B/1NL/i/pHLf3n1z9q6b+A/lFL/6H6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/FvpHLf231D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfvaj/kH/htS399yjq/69o6b+n/lFL/730j1r6761/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+h+oftfQ/TP+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf2/pH/U0v/L+kct/b+if9TS/wH9o5b+X9U/aun/oP5RS/+v6R+19P+6/lFL/2/oH7X0f0j/qKX/N/WPWvp/S/+opf/D+kct/b+tf9TS/zv6Ry39H9E/aun/qP5RS//v6h+19P+e/lFL/+/rH7X0/4H+UUv/H+oftfT/kf5RS/8f6x+19P+J/lFL/8f0j1r6/1T/qKX/z/SPWvr/XP+opf/j+kct/X+hf9TS/5f6Ry39f6V/1NL/1/pHLf2f0D9q6f+k/lFL/9/oH7X0/63+UUv/p/SPWvo/rX/U0v93+kct/X+vf9TS/xn9o5b+f9A/aun/rP5RS//n9I9a+j+vf9TS/4/6Ry39/6R/1NL/Bf2jlv4v6h+19P+z/lFL/5f0j1r6/0X/qKX/y/pHLf1f0T9q6f9X/aOW/n/TP2rp/6r+UUv/1/SPWvq/rn/U0v8N/aOW/m/qH5X0H29A/6il/yD9o5b+g/WPWvqPpn/U0n90/aOW/kP0j1r6j6F/1NJ/TP2jlv5j6R+19B9b/6il/zj6Ry39x9U/auk/nv5RS/8P6B+19B9f/6il/wf1j1r6T6B/1NJ/Qv2jlv4T6R+19P+Q/lFL/w/rH7X0n1j/qKX/R/SPWvpPon/U0n9S/aOW/h/VP2rp/zH9o5b+H9c/aun/Cf2jlv6T6R+19P+k/lFL/0/pH7X0n1z/qKX/p/WPWvpPoX/U0n9K/aOW/lPpH7X0n1r/qKX/Z/SPWvpPo3/U0n9a/aOW/tPpH7X0/6z+UUv/6fWPWvp/Tv+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6z6N/1NL/8/pHLf3n1T9q6T+f/lFL/y/oH7X0/6L+UUv/+fWPWvovoH/U0n+o/lFL/wVD/0Gj/08O7H+nlv4Luf6jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TSfyn9o5b+S+sftfRfRv+opf+y+kct/ZfTP2rpv7z+UUv/FfSPWvqvqH/U0n8l/aOW/ivrH7X0X0X/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/676Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf+++kct/ffTP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/gfrH7X0P0T/qKX/ofpHLf0P0z9q6X+4/lFL/yP0j1r6H6l/1NL/KP2jlv5H6x+19D9G/6il/7H6Ry39j9M/aul/vP5RS/8T9I9a+p+of9TS/yT9o5b+J+sftfQ/Rf+opf+p+kct/U/TP2rpf7r+UUv/M/SPWvqfqX/U0v8s/aOW/mfrH7X0P0f/qKX/ufpHLf3P0z9q6X++/lFL/wv0j1r6X6h/1NL/Iv2jlv4X6x+19L9E/6il/6X6Ry39L9M/aul/uf5RS/8r9I9a+l+pf9TS/yr9o5b+V+sftfS/Rv+opf+1+kct/a/TP2rpf73+UUv/G/SPWvrfqH/U0v8m/aOW/jfrH7X0v0X/qKX/rfpHLf1v0z9q6X+7/lFL/zv0j1r636l/1NL/Lv2jlv536x+19L9H/6il/736Ry3979M/+o/rDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//9g+q80=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 4.08099178s ago: executing program 2 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x16, 0x1, '/dev/nvme-fabrics\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0xf4a3495a969326a3) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r3, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222', 0x6e) 3.682103329s ago: executing program 2 (id=1306): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x7ffffff7, 0x5, 0x200f, 0x0, 0x2, 0x8, 0x1, 0x3}}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.65848319s ago: executing program 2 (id=1307): execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000015c0)=0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0xfffd}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ad) prctl$PR_SVE_SET_VL(0x32, 0x39d13) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x980000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029c5d8f967e73e00a3a6390000002b00010600000000bf620ef433090864d0e942ce44e93ed27cc3b9311f902b84fd2ea0b9fed38ccb266caf800805b869f9736baf3a33e8174f984b84779188f3759a875190ab0d94ccdc74982aa63e7cab12e85e1eaf28b32be93e985d9f4f0d286d305bf5c78140dfb96ec40deb071f0f1f9b4b910ac8f0644966fda9e73ded40fde96066e2778a0841f5af7c500188342574cb96a6a27285343ddc8e7a7776dc8ccbba72fd760fb3f4"], 0x18}, 0x8040) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000040)}, 0x10) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) 2.556835641s ago: executing program 2 (id=1311): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) 2.331223892s ago: executing program 1 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 2.238589156s ago: executing program 3 (id=1325): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000020058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000b04fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x10b442, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) fallocate(r1, 0x0, 0x0, 0x8ffff) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x2000000000001, 0x3, 0x4, 0x1000000000001}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000002c0)={'vlan0\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x50) ioctl(r5, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000003801") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x2000) 1.771905828s ago: executing program 0 (id=1317): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x7ffffff7, 0x5, 0x200f, 0x0, 0x2, 0x8, 0x1, 0x3}}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.746873839s ago: executing program 1 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1ff]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x200, 0xb44, 0x8, 0x2, 0x7fff]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x28}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf641}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x825472ed}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xce}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x960c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.74327513s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, &(0x7f0000000640), 0x0) 1.683827122s ago: executing program 0 (id=1320): r0 = socket(0x10, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240480d0}, 0x4000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.666426133s ago: executing program 1 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf8}}, 0x0) 1.553019288s ago: executing program 1 (id=1322): execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000015c0)=0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0xfffd}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ad) prctl$PR_SVE_SET_VL(0x32, 0x39d13) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x980000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029c5d8f967e73e00a3a6390000002b00010600000000bf620ef433090864d0e942ce44e93ed27cc3b9311f902b84fd2ea0b9fed38ccb266caf800805b869f9736baf3a33e8174f984b84779188f3759a875190ab0d94ccdc74982aa63e7cab12e85e1eaf28b32be93e985d9f4f0d286d305bf5c78140dfb96ec40deb071f0f1f9b4b910ac8f0644966fda9e73ded40fde96066e2778a0841f5af7c500188342574cb96a6a27285343ddc8e7a7776dc8ccbba72fd760fb3f4"], 0x18}, 0x8040) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000040)}, 0x10) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) 1.552560578s ago: executing program 0 (id=1323): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000440)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@lastblock={'lastblock', 0x3d, 0xfffffffffffffff7}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) chdir(&(0x7f0000000980)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1832c1, 0x9c37611dc13d0da6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000040010000060a01040000000000000000010000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000005000300010000002c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a300000000008000b4000000000bc0007"], 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0x180, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=""/137, 0x89}, {&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000a80)=""/136, 0x88}], 0xa}, 0x10102) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000580), &(0x7f0000000700), 0x2, 0x3) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100a9bd7000fccbdf251200000008000300", @ANYRES32=r4, @ANYRESHEX=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) 1.068951931s ago: executing program 2 (id=1327): execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f00000015c0)=0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0xfffd}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) prctl$PR_SVE_SET_VL(0x32, 0x39d13) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x980000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029c5d8f967e73e00a3a6390000002b00010600000000bf620ef433090864d0e942ce44e93ed27cc3b9311f902b84fd2ea0b9fed38ccb266caf800805b869f9736baf3a33e8174f984b84779188f3759a875190ab0d94ccdc74982aa63e7cab12e85e1eaf28b32be93e985d9f4f0d286d305bf5c78140dfb96ec40deb071f0f1f9b4b910ac8f0644966fda9e73ded40fde96066e2778a0841f5af7c500188342574cb96a6a27285343ddc8e7a7776dc8ccbba72fd760fb3f4"], 0x18}, 0x8040) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000040)}, 0x10) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) 984.687915ms ago: executing program 0 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 951.073266ms ago: executing program 4 (id=1330): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x7ffffff7, 0x5, 0x200f, 0x0, 0x2, 0x8, 0x1, 0x3}}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 907.980808ms ago: executing program 4 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, &(0x7f0000000640), 0x0) 825.045112ms ago: executing program 4 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1ff]}]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x200, 0xb44, 0x8, 0x2, 0x7fff]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x28}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf641}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x825472ed}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xce}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x960c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x10) 501.473357ms ago: executing program 1 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 453.504069ms ago: executing program 3 (id=1334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) shutdown(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xeb30}}, './file0\x00'}) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)={0x525, 0x18, [{0x8, 0x1}, {0x1}, {0xd, 0x1}, {0xb, 0x1}, {0x3}, {0x1, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x8, 0x1}, {0x6}, {0x5, 0x1}, {0x1}, {0xf, 0x1}, {0xa}, {0x5}, {0xf, 0x1}, {0x9, 0x1}, {0x3}, {0xd, 0x1}, {0x9, 0x1}, {0xf, 0x1}, {0x3}, {0x9, 0x1}]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="010000000200000000000000"], 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000180)={0x1c, 0x1, 0x200, "00001d0004005600feff83aed1c4a048e4ec38be00", 0x32314d48}) sendmmsg$sock(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="9cfeac2e", 0x4}], 0x1}}, {{&(0x7f0000000680)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="e7612a5b11", 0x5}], 0x1}}], 0x2, 0x8015) 452.408279ms ago: executing program 1 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x19) write$binfmt_misc(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x398}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0xffffffff) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000300)=0xffff0001, 0x4) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x10800, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="0ee23976172c367d8d4ad304d2288839bb3e835bd3c3c19ada3304852e6bf19ec4c0eea7d8fb5205dc340a20e4f1e393d84207c849fae53c84937c5ccdd48b6d58178e33b6bc120d01bb6457e8be0177274139d37df9ee07907fdd5a95250898ace6b482e8725fa04fc328c069dfb3d014f601b920c58ab2422c3944fb6e3bf581dcfbf05ebed64d488d6973343ee051324407a54a9579d86b7b695f145493074fb8c45477f841d82c09da7a175af576c5d97a3e62e61f90606718692c378dbba62d7fee40e41c970b445e1657ca7714ea6cf953", @ANYRESOCT=r6, @ANYRESHEX=r3], 0x1, 0x191, &(0x7f0000000e00)="$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") chdir(&(0x7f0000000240)='./file0\x00') capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9}) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000001c0)={0x7, 0x65, 0xc4a}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r4) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0) 440.62023ms ago: executing program 4 (id=1336): syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x7fff, 0x3d, 0x500, 0x5, 0x19c003f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x210180, 0x108) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r2 = syz_ublk_setup_io_uring(0x2c06, &(0x7f00000001c0)={0x0, 0x8f25, 0x20000, 0x2, 0x33b}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x99}}, './file0\x00'}) getdents64(r0, &(0x7f00000000c0)=""/59, 0x3b) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$mouse(&(0x7f0000000100), 0xfffffffffffffbff, 0x200) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x144, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0xfffffffffffffffc, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x70bd25, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0xce}]}, 0x144}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000017c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/358], 0xa0}, 0x1, 0x0, 0x0, 0x4008850}, 0x0) 369.127773ms ago: executing program 4 (id=1337): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_win95}, {@numtail}, {@rodir}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_win95}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}]}, 0x1, 0x2a8, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000001380)={[{@rodir}, {@shortname_win95}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x3, 0x28f, &(0x7f0000001480)="$eJzs3c9qY1UYAPDvNkmT6CJZuBKhF3ThqrQ+QYtUEAuCkoW60GJTkCQUWgi0irErn8An8HnciC/gAygzq+limDuk9yZNZ25S+r/M/H6bfnzf+XLOubncru7JDx8Merv7h3snv/wbjUYSSxuxEadJtGMpJn6LUv/8X54HAB650yyLJ1munqeOLo6ozemsLt354gCAOzH7//+h1wIA3I+vv/n2i83t7a2v0rQRMfh92Eki/5vXN/fip+hHN9aiFc8jsqk8/uzz7a2opmPt+GgwGnbGnYPv/yo+f/O/iLP+9WhFu7x/Pc3N9I+GnVq8U8y/0Y/ul39GK94r7/+kpD86y/HxhzPrX41W/P1j7Ec/dou1Tfp/XU/TT7M/nv383Tg77k9Gw059Oq4YXbnXLwYAAAAAAAAAAAAAAAAAAAAAgDfaajrVvnj+zuTg/wX1BecDjWbO51lL0zRL8vHn/dV4vxrVh9w7AAAAAAAAAAAAAAAAAAAAPBaHR8e9nX6/e3B4dFyZBL2bBpPX+ktK8eJiph4R159r5fXS02Lu8q6oFOV+EnG1uWpRP+u8fHDlirtojtfTPUiqceMrPw2SaaY5W1qJfK5xppkHM5kbz96Is2Byd/V2ksu+3EbZTXILQVZy+1Xmdi2/mmkWOygZ3Fww+/K711pz1ppTSiKiNr2Yiz+ndrvXcP4zo3bLzyAAAAAAAAAAAAAAAAAAACB3/tJvSfFkXlf9bhcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfs/Pf/rxCMiuZ5Y7LKOKhGkXngLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAWeBkAAP//iF9lGA==") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xc97}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 16.72339ms ago: executing program 0 (id=1338): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000140)={0x5, 0xe}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 15.50778ms ago: executing program 2 (id=1339): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x840) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000040)={0x0, r3, r2}) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) 0s ago: executing program 4 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x16, 0x1, '/dev/nvme-fabrics\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,', 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0xf4a3495a969326a3) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r3, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222', 0x6e) kernel console output (not intermixed with test programs): [ T5350] __arm64_sys_futex+0x390/0x414 [ 84.051786][ T5350] invoke_syscall+0x98/0x290 [ 84.052576][ T5350] el0_svc_common+0x13c/0x258 [ 84.053398][ T5350] do_el0_svc+0x5c/0x134 [ 84.054164][ T5350] el0_svc+0x58/0x128 [ 84.054816][ T5350] el0t_64_sync_handler+0x84/0xf0 [ 84.055663][ T5350] el0t_64_sync+0x18c/0x190 [ 84.129330][ T5364] loop4: detected capacity change from 0 to 256 [ 84.156860][ T5317] BTRFS info (device loop3): enabling ssd optimizations [ 84.167499][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 84.172070][ T5364] device syzkaller0 entered promiscuous mode [ 84.272694][ T4328] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.453870][ T5403] X25: received unknown 00 with LCI 000 [ 84.521734][ T5400] loop4: detected capacity change from 0 to 32768 [ 84.652951][ T5422] FAULT_INJECTION: forcing a failure. [ 84.652951][ T5422] name fail_futex, interval 1, probability 0, space 0, times 0 [ 84.655860][ T5422] CPU: 0 PID: 5422 Comm: syz.4.231 Not tainted syzkaller #0 [ 84.657172][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.658857][ T5422] Call trace: [ 84.659382][ T5422] dump_backtrace+0x1c4/0x1f0 [ 84.660136][ T5422] show_stack+0x2c/0x3c [ 84.660865][ T5422] __dump_stack+0x30/0x40 [ 84.661586][ T5422] dump_stack_lvl+0xf4/0x15c [ 84.662345][ T5422] dump_stack+0x1c/0x5c [ 84.663093][ T5422] should_fail_ex+0x3cc/0x524 [ 84.663943][ T5422] should_fail+0x14/0x24 [ 84.664703][ T5422] get_futex_key+0x904/0xfb0 [ 84.665511][ T5422] futex_wake+0x10c/0x458 [ 84.666288][ T5422] do_futex+0x2c4/0x340 [ 84.667012][ T5422] __arm64_sys_futex+0x390/0x414 [ 84.667893][ T5422] invoke_syscall+0x98/0x290 [ 84.668710][ T5422] el0_svc_common+0x13c/0x258 [ 84.669491][ T5422] do_el0_svc+0x5c/0x134 [ 84.670219][ T5422] el0_svc+0x58/0x128 [ 84.670896][ T5422] el0t_64_sync_handler+0x84/0xf0 [ 84.671776][ T5422] el0t_64_sync+0x18c/0x190 [ 84.678145][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 84.718946][ T5433] device syzkaller0 entered promiscuous mode [ 84.790956][ T5441] loop4: detected capacity change from 0 to 256 [ 84.857118][ T5441] device syzkaller0 entered promiscuous mode [ 85.038574][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 85.055159][ T5468] FAULT_INJECTION: forcing a failure. [ 85.055159][ T5468] name fail_futex, interval 1, probability 0, space 0, times 0 [ 85.056629][ T5469] FAULT_INJECTION: forcing a failure. [ 85.056629][ T5469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.059922][ T5469] CPU: 0 PID: 5469 Comm: syz.1.245 Not tainted syzkaller #0 [ 85.061147][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.063010][ T5469] Call trace: [ 85.063624][ T5469] dump_backtrace+0x1c4/0x1f0 [ 85.064460][ T5469] show_stack+0x2c/0x3c [ 85.065211][ T5469] __dump_stack+0x30/0x40 [ 85.065953][ T5469] dump_stack_lvl+0xf4/0x15c [ 85.066767][ T5469] dump_stack+0x1c/0x5c [ 85.067503][ T5469] should_fail_ex+0x3cc/0x524 [ 85.068667][ T5469] should_fail+0x14/0x24 [ 85.070150][ T5469] should_fail_usercopy+0x20/0x30 [ 85.071054][ T5469] do_tcp_getsockopt+0x174/0x1d44 [ 85.071992][ T5469] tcp_getsockopt+0x6c/0xe8 [ 85.072857][ T5469] sock_common_getsockopt+0xa8/0xc4 [ 85.073805][ T5469] __sys_getsockopt+0x1e0/0x474 [ 85.074615][ T5469] __arm64_sys_getsockopt+0xc0/0xdc [ 85.075472][ T5469] invoke_syscall+0x98/0x290 [ 85.076221][ T5469] el0_svc_common+0x13c/0x258 [ 85.076996][ T5469] do_el0_svc+0x5c/0x134 [ 85.077719][ T5469] el0_svc+0x58/0x128 [ 85.078393][ T5469] el0t_64_sync_handler+0x84/0xf0 [ 85.079297][ T5469] el0t_64_sync+0x18c/0x190 [ 85.080113][ T5468] CPU: 1 PID: 5468 Comm: syz.0.246 Not tainted syzkaller #0 [ 85.081440][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.083252][ T5468] Call trace: [ 85.083872][ T5468] dump_backtrace+0x1c4/0x1f0 [ 85.084711][ T5468] show_stack+0x2c/0x3c [ 85.085442][ T5468] __dump_stack+0x30/0x40 [ 85.086232][ T5468] dump_stack_lvl+0xf4/0x15c [ 85.087053][ T5468] dump_stack+0x1c/0x5c [ 85.087812][ T5468] should_fail_ex+0x3cc/0x524 [ 85.088638][ T5468] should_fail+0x14/0x24 [ 85.089396][ T5468] get_futex_key+0x904/0xfb0 [ 85.090229][ T5468] futex_wait_setup+0xbc/0x320 [ 85.091088][ T5468] futex_wait+0x164/0x424 [ 85.091860][ T5468] do_futex+0x2e8/0x340 [ 85.092610][ T5468] __arm64_sys_futex+0x390/0x414 [ 85.093473][ T5468] invoke_syscall+0x98/0x290 [ 85.094286][ T5468] el0_svc_common+0x13c/0x258 [ 85.095134][ T5468] do_el0_svc+0x5c/0x134 [ 85.095887][ T5468] el0_svc+0x58/0x128 [ 85.096624][ T5468] el0t_64_sync_handler+0x84/0xf0 [ 85.097501][ T5468] el0t_64_sync+0x18c/0x190 [ 85.176538][ T5477] device syzkaller0 entered promiscuous mode [ 85.182600][ T5479] FAULT_INJECTION: forcing a failure. [ 85.182600][ T5479] name failslab, interval 1, probability 0, space 0, times 0 [ 85.185631][ T5479] CPU: 1 PID: 5479 Comm: syz.0.248 Not tainted syzkaller #0 [ 85.187023][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.188958][ T5479] Call trace: [ 85.189572][ T5479] dump_backtrace+0x1c4/0x1f0 [ 85.190366][ T5479] show_stack+0x2c/0x3c [ 85.191061][ T5479] __dump_stack+0x30/0x40 [ 85.191792][ T5479] dump_stack_lvl+0xf4/0x15c [ 85.192559][ T5479] dump_stack+0x1c/0x5c [ 85.193261][ T5479] should_fail_ex+0x3cc/0x524 [ 85.194081][ T5479] __should_failslab+0xc0/0x11c [ 85.194875][ T5479] should_failslab+0x10/0x28 [ 85.195668][ T5479] kmem_cache_alloc_node+0x8c/0x344 [ 85.196565][ T5479] __alloc_skb+0x128/0x728 [ 85.197331][ T5479] sock_wmalloc+0xac/0x130 [ 85.198086][ T5479] unix_stream_connect+0x1e0/0xb80 [ 85.198960][ T5479] p9_fd_create_unix+0x1d8/0x3a4 [ 85.199835][ T5479] p9_client_create+0x6c0/0xdd8 [ 85.200689][ T5479] v9fs_session_init+0x180/0x146c [ 85.201551][ T5479] v9fs_mount+0xd4/0x9e8 [ 85.202303][ T5479] legacy_get_tree+0xd8/0x174 [ 85.203140][ T5479] vfs_get_tree+0x90/0x278 [ 85.203937][ T5479] do_new_mount+0x228/0x804 [ 85.204733][ T5479] path_mount+0x5ac/0xe6c [ 85.205518][ T5479] __arm64_sys_mount+0x4a0/0x5a0 [ 85.206411][ T5479] invoke_syscall+0x98/0x290 [ 85.207208][ T5479] el0_svc_common+0x13c/0x258 [ 85.208032][ T5479] do_el0_svc+0x5c/0x134 [ 85.208800][ T5479] el0_svc+0x58/0x128 [ 85.209527][ T5479] el0t_64_sync_handler+0x84/0xf0 [ 85.210429][ T5479] el0t_64_sync+0x18c/0x190 [ 85.218508][ T5479] 9pnet_fd: p9_fd_create_unix (5479): problem connecting socket: ./proc: -12 [ 85.349596][ T5498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.351770][ T5498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.367402][ T5497] device syzkaller0 entered promiscuous mode [ 85.386517][ T5498] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.255: corrupted xattr entries [ 85.390874][ T5498] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.397897][ T5498] EXT4-fs (loop2): 1 truncate cleaned up [ 85.398961][ T5498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.419120][ T5498] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.255: corrupted in-inode xattr [ 85.479268][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 85.481699][ T5515] FAULT_INJECTION: forcing a failure. [ 85.481699][ T5515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 85.483707][ T5515] CPU: 0 PID: 5515 Comm: syz.3.258 Not tainted syzkaller #0 [ 85.484905][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.486643][ T5515] Call trace: [ 85.487216][ T5515] dump_backtrace+0x1c4/0x1f0 [ 85.487994][ T5515] show_stack+0x2c/0x3c [ 85.488692][ T5515] __dump_stack+0x30/0x40 [ 85.489430][ T5515] dump_stack_lvl+0xf4/0x15c [ 85.490215][ T5515] dump_stack+0x1c/0x5c [ 85.490933][ T5515] should_fail_ex+0x3cc/0x524 [ 85.491740][ T5515] should_fail+0x14/0x24 [ 85.492483][ T5515] get_futex_key+0x904/0xfb0 [ 85.493260][ T5515] futex_wake+0x10c/0x458 [ 85.494014][ T5515] do_futex+0x2c4/0x340 [ 85.494741][ T5515] __arm64_sys_futex+0x390/0x414 [ 85.495607][ T5515] invoke_syscall+0x98/0x290 [ 85.496420][ T5515] el0_svc_common+0x13c/0x258 [ 85.497247][ T5515] do_el0_svc+0x5c/0x134 [ 85.497966][ T5515] el0_svc+0x58/0x128 [ 85.498649][ T5515] el0t_64_sync_handler+0x84/0xf0 [ 85.499517][ T5515] el0t_64_sync+0x18c/0x190 [ 86.004973][ T5529] device syzkaller0 entered promiscuous mode [ 86.088259][ T5521] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 86.088259][ T5521] [ 86.090540][ T5521] xtLookup: xtSearch returned -5 [ 86.098040][ T5521] add_index: get/read_metapage failed! [ 86.099647][ T5521] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 86.099647][ T5521] [ 86.107735][ T5521] xtLookup: xtSearch returned -5 [ 86.110122][ T5521] add_index: get/read_metapage failed! [ 86.231153][ T5525] set_capacity_and_notify: 3 callbacks suppressed [ 86.231161][ T5525] loop1: detected capacity change from 0 to 40427 [ 86.250135][ T5525] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 86.256745][ T5525] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 86.266889][ T5525] F2FS-fs (loop1): invalid crc value [ 86.272400][ T5525] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.290852][ T5555] device syzkaller0 entered promiscuous mode [ 86.302755][ T5525] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 86.317236][ T5525] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.321761][ T5525] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c [ 86.329891][ T5525] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_create+0x748/0x8b0 [ 86.330039][ T5558] X25: received unknown 00 with LCI 000 [ 86.463996][ T5560] loop4: detected capacity change from 0 to 4096 [ 86.544467][ T4736] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.585636][ T5582] FAULT_INJECTION: forcing a failure. [ 86.585636][ T5582] name fail_futex, interval 1, probability 0, space 0, times 0 [ 86.587870][ T5582] CPU: 1 PID: 5582 Comm: syz.3.271 Not tainted syzkaller #0 [ 86.589089][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 86.590887][ T5582] Call trace: [ 86.591516][ T5582] dump_backtrace+0x1c4/0x1f0 [ 86.592364][ T5582] show_stack+0x2c/0x3c [ 86.593122][ T5582] __dump_stack+0x30/0x40 [ 86.593902][ T5582] dump_stack_lvl+0xf4/0x15c [ 86.594715][ T5582] dump_stack+0x1c/0x5c [ 86.595426][ T5582] should_fail_ex+0x3cc/0x524 [ 86.596269][ T5582] should_fail+0x14/0x24 [ 86.597098][ T5582] get_futex_key+0x904/0xfb0 [ 86.597947][ T5582] futex_wait_setup+0xbc/0x320 [ 86.598819][ T5582] futex_wait+0x164/0x424 [ 86.599598][ T5582] do_futex+0x2e8/0x340 [ 86.600475][ T5582] __arm64_sys_futex+0x390/0x414 [ 86.601348][ T5582] invoke_syscall+0x98/0x290 [ 86.602159][ T5582] el0_svc_common+0x13c/0x258 [ 86.602923][ T5582] do_el0_svc+0x5c/0x134 [ 86.603612][ T5582] el0_svc+0x58/0x128 [ 86.604257][ T5582] el0t_64_sync_handler+0x84/0xf0 [ 86.605093][ T5582] el0t_64_sync+0x18c/0x190 [ 86.628354][ T5584] loop1: detected capacity change from 0 to 256 [ 86.641453][ T5584] device syzkaller0 entered promiscuous mode [ 86.857582][ T5586] loop4: detected capacity change from 0 to 32768 [ 86.872331][ T5586] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 86.872331][ T5586] [ 86.877331][ T5586] xtLookup: xtSearch returned -5 [ 86.878180][ T5586] add_index: get/read_metapage failed! [ 86.890207][ T5586] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 86.890207][ T5586] [ 86.892184][ T5586] xtLookup: xtSearch returned -5 [ 86.893091][ T5586] add_index: get/read_metapage failed! [ 86.898937][ T5611] device syzkaller0 entered promiscuous mode [ 86.937507][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.939528][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.991138][ T5622] loop2: detected capacity change from 0 to 512 [ 87.027532][ T5622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.282: missing EA_INODE flag [ 87.030604][ T5622] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.282: error while reading EA inode 2 err=-117 [ 87.038799][ T5622] EXT4-fs (loop2): 1 orphan inode deleted [ 87.043150][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.095818][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 87.192597][ T5640] FAULT_INJECTION: forcing a failure. [ 87.192597][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 87.198154][ T5640] CPU: 1 PID: 5640 Comm: syz.3.287 Not tainted syzkaller #0 [ 87.199514][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.201430][ T5640] Call trace: [ 87.202047][ T5640] dump_backtrace+0x1c4/0x1f0 [ 87.202893][ T5640] show_stack+0x2c/0x3c [ 87.203628][ T5640] __dump_stack+0x30/0x40 [ 87.204426][ T5640] dump_stack_lvl+0xf4/0x15c [ 87.205164][ T5640] dump_stack+0x1c/0x5c [ 87.205846][ T5640] should_fail_ex+0x3cc/0x524 [ 87.206628][ T5640] __should_failslab+0xc0/0x11c [ 87.207428][ T5640] should_failslab+0x10/0x28 [ 87.208193][ T5640] __kmem_cache_alloc_node+0x7c/0x318 [ 87.209099][ T5640] __kmalloc+0xc4/0x180 [ 87.209822][ T5640] x509_get_sig_params+0x210/0x418 [ 87.210713][ T5640] x509_cert_parse+0x3fc/0x6e0 [ 87.211563][ T5640] x509_key_preparse+0x74/0x5c8 [ 87.212375][ T5640] asymmetric_key_preparse+0xcc/0x17c [ 87.213307][ T5640] key_create_or_update+0x394/0x868 [ 87.214228][ T5640] __arm64_sys_add_key+0x40c/0x520 [ 87.215133][ T5640] invoke_syscall+0x98/0x290 [ 87.215937][ T5640] el0_svc_common+0x13c/0x258 [ 87.216774][ T5640] do_el0_svc+0x5c/0x134 [ 87.217549][ T5640] el0_svc+0x58/0x128 [ 87.218258][ T5640] el0t_64_sync_handler+0x84/0xf0 [ 87.219157][ T5640] el0t_64_sync+0x18c/0x190 [ 87.265505][ T5646] loop1: detected capacity change from 0 to 256 [ 87.286922][ T5646] device syzkaller0 entered promiscuous mode [ 87.421245][ T5665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.293'. [ 87.453116][ T5668] device syzkaller0 entered promiscuous mode [ 87.518911][ T5653] loop3: detected capacity change from 0 to 32768 [ 87.535574][ T5653] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 87.535574][ T5653] [ 87.539216][ T5673] FAULT_INJECTION: forcing a failure. [ 87.539216][ T5673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.543723][ T5653] xtLookup: xtSearch returned -5 [ 87.545349][ T5653] add_index: get/read_metapage failed! [ 87.553848][ T5673] CPU: 1 PID: 5673 Comm: syz.1.296 Not tainted syzkaller #0 [ 87.555215][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.557083][ T5673] Call trace: [ 87.557703][ T5673] dump_backtrace+0x1c4/0x1f0 [ 87.558589][ T5673] show_stack+0x2c/0x3c [ 87.559393][ T5673] __dump_stack+0x30/0x40 [ 87.560169][ T5673] dump_stack_lvl+0xf4/0x15c [ 87.560969][ T5673] dump_stack+0x1c/0x5c [ 87.561717][ T5673] should_fail_ex+0x3cc/0x524 [ 87.562581][ T5673] should_fail+0x14/0x24 [ 87.563346][ T5673] should_fail_usercopy+0x20/0x30 [ 87.564258][ T5673] do_tcp_getsockopt+0x174/0x1d44 [ 87.565159][ T5673] tcp_getsockopt+0x6c/0xe8 [ 87.565963][ T5673] sock_common_getsockopt+0xa8/0xc4 [ 87.566878][ T5673] __sys_getsockopt+0x1e0/0x474 [ 87.567741][ T5673] __arm64_sys_getsockopt+0xc0/0xdc [ 87.568643][ T5673] invoke_syscall+0x98/0x290 [ 87.569446][ T5673] el0_svc_common+0x13c/0x258 [ 87.570263][ T5673] do_el0_svc+0x5c/0x134 [ 87.570997][ T5673] el0_svc+0x58/0x128 [ 87.571720][ T5673] el0t_64_sync_handler+0x84/0xf0 [ 87.572576][ T5673] el0t_64_sync+0x18c/0x190 [ 87.708794][ T5670] loop4: detected capacity change from 0 to 32768 [ 87.710229][ T5670] XFS: ikeep mount option is deprecated. [ 87.711250][ T5670] XFS: noattr2 mount option is deprecated. [ 87.741155][ T5670] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 87.862941][ T5709] loop0: detected capacity change from 0 to 164 [ 87.953528][ T5718] jffs2: notice: (5718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.037582][ T5725] loop0: detected capacity change from 0 to 256 [ 88.104019][ T5731] device syzkaller0 entered promiscuous mode [ 88.264515][ T5728] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 88.264515][ T5728] [ 88.270406][ T5728] xtLookup: xtSearch returned -5 [ 88.271260][ T5728] add_index: get/read_metapage failed! [ 88.776983][ T5783] FAULT_INJECTION: forcing a failure. [ 88.776983][ T5783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.792228][ T5783] CPU: 0 PID: 5783 Comm: syz.1.319 Not tainted syzkaller #0 [ 88.793583][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 88.795254][ T5783] Call trace: [ 88.795907][ T5783] dump_backtrace+0x1c4/0x1f0 [ 88.796734][ T5783] show_stack+0x2c/0x3c [ 88.797513][ T5783] __dump_stack+0x30/0x40 [ 88.798288][ T5783] dump_stack_lvl+0xf4/0x15c [ 88.799109][ T5783] dump_stack+0x1c/0x5c [ 88.799813][ T5783] should_fail_ex+0x3cc/0x524 [ 88.801127][ T5783] should_fail+0x14/0x24 [ 88.802417][ T5783] should_fail_usercopy+0x20/0x30 [ 88.803331][ T5783] do_tcp_getsockopt+0x174/0x1d44 [ 88.804276][ T5783] tcp_getsockopt+0x6c/0xe8 [ 88.805096][ T5783] sock_common_getsockopt+0xa8/0xc4 [ 88.806035][ T5783] __sys_getsockopt+0x1e0/0x474 [ 88.806880][ T5783] __arm64_sys_getsockopt+0xc0/0xdc [ 88.807814][ T5783] invoke_syscall+0x98/0x290 [ 88.808624][ T5783] el0_svc_common+0x13c/0x258 [ 88.809390][ T5783] do_el0_svc+0x5c/0x134 [ 88.810104][ T5783] el0_svc+0x58/0x128 [ 88.810781][ T5783] el0t_64_sync_handler+0x84/0xf0 [ 88.811672][ T5783] el0t_64_sync+0x18c/0x190 [ 89.397309][ T5806] device syzkaller0 entered promiscuous mode [ 89.486576][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.488233][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.561590][ T5797] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 89.561590][ T5797] [ 89.563781][ T5797] xtLookup: xtSearch returned -5 [ 89.565539][ T5797] add_index: get/read_metapage failed! [ 89.740682][ T5837] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.333: missing EA_INODE flag [ 89.743106][ T5837] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.333: error while reading EA inode 2 err=-117 [ 89.748161][ T5837] EXT4-fs (loop3): 1 orphan inode deleted [ 89.750364][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.888923][ T5826] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 89.898356][ T5826] JBD2: Ignoring recovery information on journal [ 89.938590][ T5826] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.017931][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 90.209761][ T5854] FAULT_INJECTION: forcing a failure. [ 90.209761][ T5854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.220676][ T5854] CPU: 0 PID: 5854 Comm: syz.1.336 Not tainted syzkaller #0 [ 90.221988][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 90.223894][ T5854] Call trace: [ 90.224514][ T5854] dump_backtrace+0x1c4/0x1f0 [ 90.225453][ T5854] show_stack+0x2c/0x3c [ 90.226188][ T5854] __dump_stack+0x30/0x40 [ 90.226969][ T5854] dump_stack_lvl+0xf4/0x15c [ 90.227782][ T5854] dump_stack+0x1c/0x5c [ 90.228505][ T5854] should_fail_ex+0x3cc/0x524 [ 90.229326][ T5854] should_fail+0x14/0x24 [ 90.230099][ T5854] should_fail_usercopy+0x20/0x30 [ 90.230941][ T5854] do_tcp_getsockopt+0x174/0x1d44 [ 90.231820][ T5854] tcp_getsockopt+0x6c/0xe8 [ 90.232620][ T5854] sock_common_getsockopt+0xa8/0xc4 [ 90.233513][ T5854] __sys_getsockopt+0x1e0/0x474 [ 90.234390][ T5854] __arm64_sys_getsockopt+0xc0/0xdc [ 90.235292][ T5854] invoke_syscall+0x98/0x290 [ 90.236115][ T5854] el0_svc_common+0x13c/0x258 [ 90.236922][ T5854] do_el0_svc+0x5c/0x134 [ 90.237758][ T5854] el0_svc+0x58/0x128 [ 90.238534][ T5854] el0t_64_sync_handler+0x84/0xf0 [ 90.239512][ T5854] el0t_64_sync+0x18c/0x190 [ 90.265245][ T5861] device syzkaller0 entered promiscuous mode [ 90.620277][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 90.759664][ T5913] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 90.825352][ T5922] device syzkaller0 entered promiscuous mode [ 90.942176][ T5929] device syzkaller0 entered promiscuous mode [ 91.017944][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.020165][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.236776][ T5956] set_capacity_and_notify: 8 callbacks suppressed [ 91.236786][ T5956] loop4: detected capacity change from 0 to 164 [ 91.321243][ T5966] loop4: detected capacity change from 0 to 1024 [ 91.328520][ T5958] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 91.343249][ T5966] syz.4.355: attempt to access beyond end of device [ 91.343249][ T5966] loop4: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 91.346625][ T5966] syz.4.355: attempt to access beyond end of device [ 91.346625][ T5966] loop4: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 91.349752][ T5966] syz.4.355: attempt to access beyond end of device [ 91.349752][ T5966] loop4: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 91.352030][ T5966] syz.4.355: attempt to access beyond end of device [ 91.352030][ T5966] loop4: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 91.353842][ T5969] loop0: detected capacity change from 0 to 1024 [ 91.366091][ T5966] syz.4.355: attempt to access beyond end of device [ 91.366091][ T5966] loop4: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 91.368370][ T5966] syz.4.355: attempt to access beyond end of device [ 91.368370][ T5966] loop4: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 91.373606][ T5966] syz.4.355: attempt to access beyond end of device [ 91.373606][ T5966] loop4: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 91.379146][ T5966] syz.4.355: attempt to access beyond end of device [ 91.379146][ T5966] loop4: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 91.384325][ T5966] syz.4.355: attempt to access beyond end of device [ 91.384325][ T5966] loop4: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 91.386580][ T5966] syz.4.355: attempt to access beyond end of device [ 91.386580][ T5966] loop4: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 91.397039][ T5969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.439809][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 91.548776][ T5986] loop0: detected capacity change from 0 to 1024 [ 91.574820][ T5986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.578919][ T5995] loop2: detected capacity change from 0 to 256 [ 91.581881][ T5971] loop3: detected capacity change from 0 to 32768 [ 91.647683][ T5995] device syzkaller0 entered promiscuous mode [ 91.781247][ T6002] device syzkaller0 entered promiscuous mode [ 92.110300][ T6030] loop2: detected capacity change from 0 to 40427 [ 92.118608][ T6030] F2FS-fs (loop2): invalid crc value [ 92.121132][ T6030] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.147119][ T6030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.481244][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 92.536542][ T6055] FAULT_INJECTION: forcing a failure. [ 92.536542][ T6055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.541849][ T6055] CPU: 0 PID: 6055 Comm: syz.0.370 Not tainted syzkaller #0 [ 92.543139][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 92.544911][ T6055] Call trace: [ 92.545538][ T6055] dump_backtrace+0x1c4/0x1f0 [ 92.546407][ T6055] show_stack+0x2c/0x3c [ 92.547110][ T6055] __dump_stack+0x30/0x40 [ 92.547875][ T6055] dump_stack_lvl+0xf4/0x15c [ 92.548685][ T6055] dump_stack+0x1c/0x5c [ 92.549396][ T6055] should_fail_ex+0x3cc/0x524 [ 92.550176][ T6055] should_fail+0x14/0x24 [ 92.550924][ T6055] should_fail_usercopy+0x20/0x30 [ 92.551751][ T6055] do_tcp_getsockopt+0x174/0x1d44 [ 92.552589][ T6055] tcp_getsockopt+0x6c/0xe8 [ 92.553344][ T6055] sock_common_getsockopt+0xa8/0xc4 [ 92.554216][ T6055] __sys_getsockopt+0x1e0/0x474 [ 92.555049][ T6055] __arm64_sys_getsockopt+0xc0/0xdc [ 92.555922][ T6055] invoke_syscall+0x98/0x290 [ 92.556671][ T6055] el0_svc_common+0x13c/0x258 [ 92.557484][ T6055] do_el0_svc+0x5c/0x134 [ 92.558186][ T6055] el0_svc+0x58/0x128 [ 92.558841][ T6055] el0t_64_sync_handler+0x84/0xf0 [ 92.559719][ T6055] el0t_64_sync+0x18c/0x190 [ 94.122256][ T6056] loop4: detected capacity change from 0 to 2048 [ 94.142320][ T6056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.207978][ T6061] loop0: detected capacity change from 0 to 256 [ 94.258351][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 94.267167][ T6061] device syzkaller0 entered promiscuous mode [ 94.420648][ T6059] loop3: detected capacity change from 0 to 32768 [ 94.669711][ T6067] F2FS-fs (loop2): invalid crc value [ 94.683033][ T6067] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.691539][ T6067] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 94.700685][ T6067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 95.436681][ T6101] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 95.559540][ T4338] ocfs2: Unmounting device (7,2) on (node local) [ 95.887989][ T6131] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 95.887989][ T6131] [ 95.894350][ T6131] xtLookup: xtSearch returned -5 [ 95.895261][ T6131] add_index: get/read_metapage failed! [ 96.461676][ T6177] device syzkaller0 entered promiscuous mode [ 96.489233][ T6180] device syzkaller0 entered promiscuous mode [ 96.493567][ T6185] FAULT_INJECTION: forcing a failure. [ 96.493567][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.498368][ T6185] CPU: 0 PID: 6185 Comm: syz.4.395 Not tainted syzkaller #0 [ 96.499584][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 96.501249][ T6185] Call trace: [ 96.501807][ T6185] dump_backtrace+0x1c4/0x1f0 [ 96.502785][ T6185] show_stack+0x2c/0x3c [ 96.503591][ T6185] __dump_stack+0x30/0x40 [ 96.504448][ T6185] dump_stack_lvl+0xf4/0x15c [ 96.505344][ T6185] dump_stack+0x1c/0x5c [ 96.506149][ T6185] should_fail_ex+0x3cc/0x524 [ 96.507028][ T6185] should_fail+0x14/0x24 [ 96.507818][ T6185] should_fail_usercopy+0x20/0x30 [ 96.508738][ T6185] do_tcp_getsockopt+0x174/0x1d44 [ 96.509695][ T6185] tcp_getsockopt+0x6c/0xe8 [ 96.510555][ T6185] sock_common_getsockopt+0xa8/0xc4 [ 96.511506][ T6185] __sys_getsockopt+0x1e0/0x474 [ 96.512399][ T6185] __arm64_sys_getsockopt+0xc0/0xdc [ 96.513471][ T6185] invoke_syscall+0x98/0x290 [ 96.514389][ T6185] el0_svc_common+0x13c/0x258 [ 96.515243][ T6185] do_el0_svc+0x5c/0x134 [ 96.516059][ T6185] el0_svc+0x58/0x128 [ 96.516844][ T6185] el0t_64_sync_handler+0x84/0xf0 [ 96.517822][ T6185] el0t_64_sync+0x18c/0x190 [ 96.825205][ T6190] syz.1.397 (6190): drop_caches: 2 [ 97.406742][ T6206] set_capacity_and_notify: 7 callbacks suppressed [ 97.406750][ T6206] loop1: detected capacity change from 0 to 512 [ 97.420668][ T6206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.446170][ T6206] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.448083][ T6206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.452784][ T6206] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 97.454993][ T6206] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 97.456798][ T6206] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.400: Failed to acquire dquot type 1 [ 97.459583][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.463623][ T6206] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.400: corrupted inode contents [ 97.468895][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.470123][ T6206] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.400: mark_inode_dirty error [ 97.472202][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.473634][ T6206] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.400: corrupted inode contents [ 97.476616][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.477942][ T6206] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.400: mark_inode_dirty error [ 97.480245][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.481529][ T6206] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.400: corrupted inode contents [ 97.487442][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.488763][ T6206] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 97.490578][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.491883][ T6206] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.400: corrupted inode contents [ 97.494954][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.496281][ T6206] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.400: mark_inode_dirty error [ 97.498654][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.499966][ T6206] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 97.501883][ T6206] EXT4-fs (loop1): Remounting filesystem read-only [ 97.503594][ T6206] EXT4-fs (loop1): 1 truncate cleaned up [ 97.514692][ T6206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.031526][ T6212] loop2: detected capacity change from 0 to 32768 [ 98.041692][ T6212] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 98.041692][ T6212] [ 98.043374][ T6212] xtLookup: xtSearch returned -5 [ 98.044488][ T6212] add_index: get/read_metapage failed! [ 98.261528][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 107.742140][ T6214] tipc: Failed to obtain node identity [ 107.745209][ T6214] tipc: Enabling of bearer rejected, failed to enable media [ 107.811834][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 107.882391][ T6239] loop1: detected capacity change from 0 to 1024 [ 107.921462][ T6239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.962937][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 108.143540][ T6255] loop3: detected capacity change from 0 to 32768 [ 108.160786][ T6255] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 108.160786][ T6255] [ 108.173348][ T6255] xtLookup: xtSearch returned -5 [ 108.180027][ T6255] add_index: get/read_metapage failed! [ 108.487609][ T6283] loop2: detected capacity change from 0 to 256 [ 108.513473][ T6283] device syzkaller0 entered promiscuous mode [ 108.568322][ T6286] device syzkaller0 entered promiscuous mode [ 108.762474][ T6304] process 'syz.2.421' launched '/dev/fd/3' with NULL argv: empty string added [ 108.988533][ T6322] loop4: detected capacity change from 0 to 256 [ 108.990006][ T6322] exfat: Deprecated parameter 'namecase' [ 108.991048][ T6322] exfat: Deprecated parameter 'utf8' [ 108.992014][ T6322] exfat: Deprecated parameter 'namecase' [ 109.366552][ T6322] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 109.776692][ T6352] loop4: detected capacity change from 0 to 256 [ 109.825303][ T6352] device syzkaller0 entered promiscuous mode [ 109.886526][ T6360] loop0: detected capacity change from 0 to 64 [ 109.903685][ T6360] hfs: unable to locate alternate MDB [ 109.908669][ T6360] hfs: continuing without an alternate MDB [ 110.061268][ T6376] loop3: detected capacity change from 0 to 256 [ 110.068681][ T6376] exfat: Deprecated parameter 'utf8' [ 110.072962][ T6376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 110.223875][ T6373] device syzkaller0 entered promiscuous mode [ 110.288923][ T6378] loop2: detected capacity change from 0 to 32768 [ 110.308022][ T6378] [ 110.308022][ T6378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.308022][ T6378] [ 110.315573][ T6378] ERROR: (device loop2): dbReAlloc: the block is outside the filesystem [ 110.315573][ T6378] [ 110.322471][ T6378] ERROR: (device loop2): remounting filesystem as read-only [ 110.339166][ T6378] jfs_create: dtInsert returned -EIO [ 110.340168][ T6378] ERROR: (device loop2): txAbort: [ 110.340168][ T6378] [ 120.886379][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.887928][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.096005][ T6425] loop3: detected capacity change from 0 to 256 [ 121.135315][ T6425] device syzkaller0 entered promiscuous mode [ 121.226870][ T6440] loop2: detected capacity change from 0 to 1024 [ 121.514958][ T6461] SET target dimension over the limit! [ 123.026035][ T6458] device syzkaller0 entered promiscuous mode [ 123.377275][ T6481] loop3: detected capacity change from 0 to 4096 [ 123.737787][ T6478] loop1: detected capacity change from 0 to 32768 [ 123.877266][ T6482] loop2: detected capacity change from 0 to 32768 [ 123.891552][ T6482] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.466 (6482) [ 123.913105][ T6482] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 123.923470][ T6482] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 123.932959][ T6482] BTRFS info (device loop2): turning on async discard [ 123.939583][ T6482] BTRFS info (device loop2): using free space tree [ 123.945460][ T6484] loop1: detected capacity change from 0 to 32768 [ 123.971185][ T6484] JBD2: Ignoring recovery information on journal [ 124.015262][ T6484] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.025760][ T6484] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 124.030230][ T6484] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.031812][ T6484] OCFS2: File system is now read-only. [ 124.032717][ T6484] (syz.1.467,6484,0):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 124.067513][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 124.135178][ T6482] BTRFS info (device loop2): enabling ssd optimizations [ 124.161828][ T4338] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 124.229243][ T6518] loop4: detected capacity change from 0 to 256 [ 124.566862][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.570072][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.409325][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.410930][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.924901][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926115][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.936201][ T6563] loop2: detected capacity change from 0 to 16 [ 125.940459][ T6563] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 134.328543][ T6582] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.410272][ T6591] FAULT_INJECTION: forcing a failure. [ 134.410272][ T6591] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.412584][ T6591] CPU: 0 PID: 6591 Comm: syz.3.493 Not tainted syzkaller #0 [ 134.413779][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 134.415505][ T6591] Call trace: [ 134.416087][ T6591] dump_backtrace+0x1c4/0x1f0 [ 134.416901][ T6591] show_stack+0x2c/0x3c [ 134.417661][ T6591] __dump_stack+0x30/0x40 [ 134.418378][ T6591] dump_stack_lvl+0xf4/0x15c [ 134.419149][ T6591] dump_stack+0x1c/0x5c [ 134.419876][ T6591] should_fail_ex+0x3cc/0x524 [ 134.420691][ T6591] should_fail+0x14/0x24 [ 134.421429][ T6591] get_futex_key+0x904/0xfb0 [ 134.422235][ T6591] futex_wake+0x10c/0x458 [ 134.422997][ T6591] do_futex+0x2c4/0x340 [ 134.423748][ T6591] __arm64_sys_futex+0x390/0x414 [ 134.424625][ T6591] invoke_syscall+0x98/0x290 [ 134.425443][ T6591] el0_svc_common+0x13c/0x258 [ 134.426252][ T6591] do_el0_svc+0x5c/0x134 [ 134.426989][ T6591] el0_svc+0x58/0x128 [ 134.427704][ T6591] el0t_64_sync_handler+0x84/0xf0 [ 134.428581][ T6591] el0t_64_sync+0x18c/0x190 [ 134.444643][ T6594] loop4: detected capacity change from 0 to 2048 [ 134.452876][ T6587] loop1: detected capacity change from 0 to 8192 [ 134.529219][ T6587] loop1: p1 < > p3 p4 < > [ 134.585418][ T6587] loop1: p3 start 986112 is beyond EOD, truncated [ 134.620673][ T6601] loop3: detected capacity change from 0 to 16 [ 134.633018][ T6601] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 134.672906][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.679419][ T6429] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.696646][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.698280][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.789021][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 134.981994][ T6438] udevd[6438]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 134.984523][ T6433] udevd[6433]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 135.506962][ T6613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.508467][ T6613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 135.513611][ T6613] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 135.525498][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.526582][ T6613] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.537730][ T6613] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 135.539009][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.539990][ T6613] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.548338][ T6634] loop1: detected capacity change from 0 to 256 [ 135.550688][ T6613] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 135.551959][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.553020][ T6613] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.564582][ T6613] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 135.566214][ T6613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.567257][ T6613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.573518][ T6613] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 135.579916][ T6612] FAULT_INJECTION: forcing a failure. [ 135.579916][ T6612] name failslab, interval 1, probability 0, space 0, times 0 [ 135.581989][ T6612] CPU: 0 PID: 6612 Comm: syz.3.502 Not tainted syzkaller #0 [ 135.583219][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 135.584956][ T6612] Call trace: [ 135.585519][ T6612] dump_backtrace+0x1c4/0x1f0 [ 135.586343][ T6612] show_stack+0x2c/0x3c [ 135.587044][ T6612] __dump_stack+0x30/0x40 [ 135.587792][ T6612] dump_stack_lvl+0xf4/0x15c [ 135.588565][ T6612] dump_stack+0x1c/0x5c [ 135.589284][ T6612] should_fail_ex+0x3cc/0x524 [ 135.590082][ T6612] __should_failslab+0xc0/0x11c [ 135.590924][ T6612] should_failslab+0x10/0x28 [ 135.591755][ T6612] __kmem_cache_alloc_node+0x7c/0x318 [ 135.592729][ T6612] kmalloc_trace+0x48/0x94 [ 135.593530][ T6612] kobject_uevent_env+0x258/0x88c [ 135.594415][ T6612] kobject_uevent+0x2c/0x3c [ 135.595211][ T6612] driver_register+0x2a0/0x37c [ 135.595983][ T6612] usb_gadget_register_driver_owner+0xf0/0x25c [ 135.597004][ T6612] raw_ioctl+0x1014/0x326c [ 135.597747][ T6612] __arm64_sys_ioctl+0x14c/0x1c8 [ 135.598582][ T6612] invoke_syscall+0x98/0x290 [ 135.599399][ T6612] el0_svc_common+0x13c/0x258 [ 135.600190][ T6612] do_el0_svc+0x5c/0x134 [ 135.601088][ T6612] el0_svc+0x58/0x128 [ 135.601881][ T6612] el0t_64_sync_handler+0x84/0xf0 [ 135.602811][ T6612] el0t_64_sync+0x18c/0x190 [ 135.616281][ T6634] device syzkaller0 entered promiscuous mode [ 135.631923][ T6640] loop0: detected capacity change from 0 to 512 [ 135.632167][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.639541][ T6640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.642528][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.647270][ T6640] EXT4-fs (loop0): 1 truncate cleaned up [ 135.648221][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.710317][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 135.886703][ T6657] loop1: detected capacity change from 0 to 4096 [ 135.934195][ T6667] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.109717][ T6680] device syzkaller0 entered promiscuous mode [ 136.639911][ T6692] FAULT_INJECTION: forcing a failure. [ 136.639911][ T6692] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.642375][ T6692] CPU: 1 PID: 6692 Comm: syz.0.525 Not tainted syzkaller #0 [ 136.643620][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 136.645589][ T6692] Call trace: [ 136.646201][ T6692] dump_backtrace+0x1c4/0x1f0 [ 136.647059][ T6692] show_stack+0x2c/0x3c [ 136.647786][ T6692] __dump_stack+0x30/0x40 [ 136.648588][ T6692] dump_stack_lvl+0xf4/0x15c [ 136.649415][ T6692] dump_stack+0x1c/0x5c [ 136.650132][ T6692] should_fail_ex+0x3cc/0x524 [ 136.651076][ T6692] should_fail+0x14/0x24 [ 136.651914][ T6692] get_futex_key+0x904/0xfb0 [ 136.652848][ T6692] futex_wake+0x10c/0x458 [ 136.653714][ T6692] do_futex+0x2c4/0x340 [ 136.654549][ T6692] __arm64_sys_futex+0x390/0x414 [ 136.655462][ T6692] invoke_syscall+0x98/0x290 [ 136.656290][ T6692] el0_svc_common+0x13c/0x258 [ 136.657148][ T6692] do_el0_svc+0x5c/0x134 [ 136.657955][ T6692] el0_svc+0x58/0x128 [ 136.658710][ T6692] el0t_64_sync_handler+0x84/0xf0 [ 136.659650][ T6692] el0t_64_sync+0x18c/0x190 [ 136.698844][ T6698] FAULT_INJECTION: forcing a failure. [ 136.698844][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 136.700953][ T6698] CPU: 0 PID: 6698 Comm: syz.4.528 Not tainted syzkaller #0 [ 136.702058][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 136.703759][ T6698] Call trace: [ 136.704366][ T6698] dump_backtrace+0x1c4/0x1f0 [ 136.705197][ T6698] show_stack+0x2c/0x3c [ 136.705912][ T6698] __dump_stack+0x30/0x40 [ 136.706681][ T6698] dump_stack_lvl+0xf4/0x15c [ 136.707524][ T6698] dump_stack+0x1c/0x5c [ 136.708256][ T6698] should_fail_ex+0x3cc/0x524 [ 136.709091][ T6698] __should_failslab+0xc0/0x11c [ 136.709940][ T6697] loop3: detected capacity change from 0 to 4096 [ 136.711083][ T6698] should_failslab+0x10/0x28 [ 136.711926][ T6698] slab_pre_alloc_hook+0x6c/0x31c [ 136.712982][ T6698] kmem_cache_alloc_lru+0x60/0x284 [ 136.713986][ T6698] __d_alloc+0x40/0x68c [ 136.714745][ T6698] d_alloc_name+0xbc/0x2a8 [ 136.715541][ T6698] proc_setup_thread_self+0xa8/0x280 [ 136.716464][ T6698] proc_fill_super+0x46c/0x6ac [ 136.717318][ T6698] get_tree_nodev+0xb4/0x16c [ 136.718106][ T6698] proc_get_tree+0x28/0x38 [ 136.718873][ T6698] vfs_get_tree+0x90/0x278 [ 136.719667][ T6698] do_new_mount+0x228/0x804 [ 136.720419][ T6698] path_mount+0x5ac/0xe6c [ 136.721126][ T6698] __arm64_sys_mount+0x4a0/0x5a0 [ 136.721972][ T6698] invoke_syscall+0x98/0x290 [ 136.722897][ T6698] el0_svc_common+0x13c/0x258 [ 136.723763][ T6698] do_el0_svc+0x5c/0x134 [ 136.724512][ T6698] el0_svc+0x58/0x128 [ 136.725218][ T6698] el0t_64_sync_handler+0x84/0xf0 [ 136.726116][ T6698] el0t_64_sync+0x18c/0x190 [ 136.726990][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.739716][ T6698] proc_fill_super: can't allocate /proc/thread-self [ 136.746419][ T5390] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.756782][ T6700] tap0: tun_chr_ioctl cmd 2147767506 [ 136.758100][ T6701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.924904][ T5390] usb 1-1: Dual-Role OTG device on HNP port [ 136.926243][ T5390] usb 1-1: New USB device found, idVendor=0012, idProduct=0000, bcdDevice= 6.01 [ 136.927876][ T5390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.931649][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 136.950203][ T5390] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0012 pid 0x0000 [ 137.013086][ T6726] device syzkaller0 entered promiscuous mode [ 137.044716][ T4332] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.078982][ T6731] loop0: detected capacity change from 0 to 4096 [ 137.134716][ T6735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.207476][ T6720] loop1: detected capacity change from 0 to 32768 [ 137.238448][ T6749] loop4: detected capacity change from 0 to 256 [ 137.274845][ T6749] device syzkaller0 entered promiscuous mode [ 137.604181][ T4332] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.605367][ T4332] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.606305][ T4332] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.607347][ T4332] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.718358][ T6799] netlink: 144 bytes leftover after parsing attributes in process `syz.4.567'. [ 137.768901][ T6801] device syzkaller0 entered promiscuous mode [ 138.507939][ T6843] device syzkaller0 entered promiscuous mode [ 139.114577][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 139.150876][ T6883] device syzkaller0 entered promiscuous mode [ 139.292586][ T6893] netlink: 144 bytes leftover after parsing attributes in process `syz.0.604'. [ 139.476466][ T6911] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 139.478152][ T6911] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 139.479655][ T6911] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 139.495004][ T6908] nvme_fabrics: missing parameter 'nqn=%s' [ 139.552151][ T6904] set_capacity_and_notify: 6 callbacks suppressed [ 139.552159][ T6904] loop1: detected capacity change from 0 to 32768 [ 139.600634][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/305.tmp-b7:1' failed: Read-only file system [ 139.603956][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 139.659877][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/305.tmp-b7:1' failed: Read-only file system [ 139.674226][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 139.675396][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 139.676374][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 139.677427][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/305.tmp-b7:1' failed: Read-only file system [ 139.677435][ T4332] Bluetooth: hci4: command 0x0406 tx timeout [ 139.680873][ T6924] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 139.683105][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 139.729094][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 139.769474][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 139.870397][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 139.913437][ T6936] nvme_fabrics: missing parameter 'nqn=%s' [ 139.977871][ T6941] loop1: detected capacity change from 0 to 32768 [ 140.026517][ T6953] binder: 6952:6953 ioctl c0306201 20000080 returned -14 [ 140.027315][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/307.tmp-b7:1' failed: Read-only file system [ 140.030533][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 140.064918][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/307.tmp-b7:1' failed: Read-only file system [ 140.070598][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/307.tmp-b7:1' failed: Read-only file system [ 140.076489][ T6429] udevd[6429]: symlink '../../loop1' '/dev/disk/by-diskseq/308.tmp-b7:1' failed: Read-only file system [ 140.515600][ T6972] loop1: detected capacity change from 0 to 4096 [ 140.531395][ T6973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.787358][ T6999] loop3: detected capacity change from 0 to 256 [ 140.803458][ T6995] loop1: detected capacity change from 0 to 4096 [ 140.819633][ T6999] device syzkaller0 entered promiscuous mode [ 140.836994][ T7005] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.840853][ T7006] device syzkaller0 entered promiscuous mode [ 140.901597][ T7012] nvmet: adding nsid 1 to subsystem testsubsys [ 140.903770][ T7012] nvmet: failed to open block device (null): (-22) [ 140.971756][ T7019] FAULT_INJECTION: forcing a failure. [ 140.971756][ T7019] name failslab, interval 1, probability 0, space 0, times 0 [ 140.974024][ T7019] CPU: 0 PID: 7019 Comm: syz.4.659 Not tainted syzkaller #0 [ 140.975316][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 140.977022][ T7019] Call trace: [ 140.977577][ T7019] dump_backtrace+0x1c4/0x1f0 [ 140.978381][ T7019] show_stack+0x2c/0x3c [ 140.979070][ T7019] __dump_stack+0x30/0x40 [ 140.979794][ T7019] dump_stack_lvl+0xf4/0x15c [ 140.980566][ T7019] dump_stack+0x1c/0x5c [ 140.981271][ T7019] should_fail_ex+0x3cc/0x524 [ 140.982072][ T7019] __should_failslab+0xc0/0x11c [ 140.982890][ T7019] should_failslab+0x10/0x28 [ 140.983663][ T7019] __kmem_cache_alloc_node+0x7c/0x318 [ 140.984569][ T7019] kmalloc_trace+0x48/0x94 [ 140.985349][ T7019] fuse_dev_alloc+0x58/0x1e4 [ 140.986133][ T7019] fuse_dev_alloc_install+0x1c/0x50 [ 140.987054][ T7019] cuse_channel_open+0xe8/0x5c0 [ 140.987929][ T7019] misc_open+0x310/0x388 [ 140.988715][ T7019] chrdev_open+0x3d0/0x51c [ 140.989511][ T7019] do_dentry_open+0x738/0xf8c [ 140.990346][ T7019] vfs_open+0x7c/0x90 [ 140.991032][ T7019] path_openat+0x1fc0/0x27a0 [ 140.991823][ T7019] do_filp_open+0x198/0x38c [ 140.992608][ T7019] do_sys_openat2+0x134/0x3fc [ 140.993443][ T7019] __arm64_sys_openat+0x11c/0x150 [ 140.994307][ T7019] invoke_syscall+0x98/0x290 [ 140.995143][ T7019] el0_svc_common+0x13c/0x258 [ 140.995989][ T7019] do_el0_svc+0x5c/0x134 [ 140.996744][ T7019] el0_svc+0x58/0x128 [ 140.997451][ T7019] el0t_64_sync_handler+0x84/0xf0 [ 140.998295][ T7019] el0t_64_sync+0x18c/0x190 [ 140.999122][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.077466][ T7027] binder: 7026:7027 unknown command 1074553620 [ 141.078648][ T7027] binder: 7026:7027 ioctl c0306201 200001c0 returned -22 [ 141.113996][ T7029] loop4: detected capacity change from 0 to 4096 [ 141.122063][ T7031] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.211611][ T7039] input: syz0 as /devices/virtual/input/input2 [ 141.900158][ T7055] netlink: 'syz.3.674': attribute type 29 has an invalid length. [ 141.901915][ T7055] netlink: 'syz.3.674': attribute type 29 has an invalid length. [ 141.903975][ T7055] netlink: 'syz.3.674': attribute type 29 has an invalid length. [ 141.959789][ T7059] loop3: detected capacity change from 0 to 4096 [ 141.967331][ T7060] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.141247][ T7068] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 142.390482][ T7083] loop3: detected capacity change from 0 to 4096 [ 142.399406][ T7084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.600125][ T7092] futex_wake_op: syz.3.691 tries to shift op by -1; fix this program [ 142.977933][ T6947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.042364][ T7101] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 143.333748][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.384212][ T7130] net_ratelimit: 11 callbacks suppressed [ 143.384217][ T7130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.825462][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.828085][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.993654][ T7167] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 144.232255][ T7194] loop4: detected capacity change from 0 to 256 [ 144.255921][ T7194] device syzkaller0 entered promiscuous mode [ 144.648190][ T7229] netlink: 'syz.3.751': attribute type 29 has an invalid length. [ 144.654642][ T7229] netlink: 'syz.3.751': attribute type 29 has an invalid length. [ 144.669900][ T7229] netlink: 'syz.3.751': attribute type 29 has an invalid length. [ 144.736346][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.753'. [ 144.955105][ T7248] FAULT_INJECTION: forcing a failure. [ 144.955105][ T7248] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.971416][ T7248] CPU: 0 PID: 7248 Comm: syz.4.760 Not tainted syzkaller #0 [ 144.972655][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 144.974368][ T7248] Call trace: [ 144.974927][ T7248] dump_backtrace+0x1c4/0x1f0 [ 144.975743][ T7248] show_stack+0x2c/0x3c [ 144.976462][ T7248] __dump_stack+0x30/0x40 [ 144.977168][ T7248] dump_stack_lvl+0xf4/0x15c [ 144.977919][ T7248] dump_stack+0x1c/0x5c [ 144.978631][ T7248] should_fail_ex+0x3cc/0x524 [ 144.979448][ T7248] should_fail+0x14/0x24 [ 144.980198][ T7248] get_futex_key+0x904/0xfb0 [ 144.980982][ T7248] futex_wait_setup+0xbc/0x320 [ 144.981788][ T7248] futex_wait+0x164/0x424 [ 144.982561][ T7248] do_futex+0x2e8/0x340 [ 144.983260][ T7248] __arm64_sys_futex+0x390/0x414 [ 144.984097][ T7248] invoke_syscall+0x98/0x290 [ 144.984851][ T7248] el0_svc_common+0x13c/0x258 [ 144.985658][ T7248] do_el0_svc+0x5c/0x134 [ 144.986368][ T7248] el0_svc+0x58/0x128 [ 144.987046][ T7248] el0t_64_sync_handler+0x84/0xf0 [ 144.987919][ T7248] el0t_64_sync+0x18c/0x190 [ 145.075753][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 145.095308][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 145.096903][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 145.462516][ T7285] FAULT_INJECTION: forcing a failure. [ 145.462516][ T7285] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.469201][ T7285] CPU: 0 PID: 7285 Comm: syz.3.779 Not tainted syzkaller #0 [ 145.470478][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 145.472272][ T7285] Call trace: [ 145.472816][ T7285] dump_backtrace+0x1c4/0x1f0 [ 145.473637][ T7285] show_stack+0x2c/0x3c [ 145.474336][ T7285] __dump_stack+0x30/0x40 [ 145.475087][ T7285] dump_stack_lvl+0xf4/0x15c [ 145.475875][ T7285] dump_stack+0x1c/0x5c [ 145.476612][ T7285] should_fail_ex+0x3cc/0x524 [ 145.477414][ T7285] should_fail+0x14/0x24 [ 145.478162][ T7285] get_futex_key+0x904/0xfb0 [ 145.478949][ T7285] futex_wait_setup+0xbc/0x320 [ 145.479761][ T7285] futex_wait+0x164/0x424 [ 145.480671][ T7285] do_futex+0x2e8/0x340 [ 145.481504][ T7285] __arm64_sys_futex+0x390/0x414 [ 145.482412][ T7285] invoke_syscall+0x98/0x290 [ 145.483290][ T7285] el0_svc_common+0x13c/0x258 [ 145.484154][ T7285] do_el0_svc+0x5c/0x134 [ 145.484952][ T7285] el0_svc+0x58/0x128 [ 145.485364][ T7289] device syzkaller0 entered promiscuous mode [ 145.485673][ T7285] el0t_64_sync_handler+0x84/0xf0 [ 145.487668][ T7285] el0t_64_sync+0x18c/0x190 [ 145.612105][ T7291] fuse: Bad value for 'fd' [ 145.826826][ T7290] netlink: 830 bytes leftover after parsing attributes in process `syz.4.777'. [ 145.933260][ T7294] loop2: detected capacity change from 0 to 40427 [ 145.939069][ T7294] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 145.940380][ T7294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.943272][ T7294] F2FS-fs (loop2): invalid crc value [ 145.946379][ T7294] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 145.962720][ T7294] F2FS-fs (loop2): Start checkpoint disabled! [ 145.973033][ T7294] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.977313][ T7294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 146.181628][ T7302] fuse: Bad value for 'fd' [ 146.187146][ T7306] bio_check_eod: 24 callbacks suppressed [ 146.187154][ T7306] syz.2.781: attempt to access beyond end of device [ 146.187154][ T7306] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 146.197238][ T7304] netlink: 830 bytes leftover after parsing attributes in process `syz.3.784'. [ 146.269464][ T7308] loop4: detected capacity change from 0 to 512 [ 146.291822][ T7308] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.785: bad orphan inode 11862016 [ 146.296051][ T7308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.326771][ T7315] loop0: detected capacity change from 0 to 512 [ 146.337033][ T7315] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.787: inode has both inline data and extents flags [ 146.343729][ T7315] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.787: couldn't read orphan inode 15 (err -117) [ 146.348724][ T7315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.376591][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 146.468673][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 146.534022][ T7321] loop4: detected capacity change from 0 to 512 [ 146.747392][ T775] kworker/u4:3: attempt to access beyond end of device [ 146.747392][ T775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.849027][ T7327] netlink: 830 bytes leftover after parsing attributes in process `syz.1.790'. [ 146.852953][ T7327] fuse: Bad value for 'fd' [ 147.062797][ T7329] FAULT_INJECTION: forcing a failure. [ 147.062797][ T7329] name fail_futex, interval 1, probability 0, space 0, times 0 [ 147.074791][ T7329] CPU: 1 PID: 7329 Comm: syz.3.792 Not tainted syzkaller #0 [ 147.076158][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 147.078052][ T7329] Call trace: [ 147.078637][ T7329] dump_backtrace+0x1c4/0x1f0 [ 147.079466][ T7329] show_stack+0x2c/0x3c [ 147.080230][ T7329] __dump_stack+0x30/0x40 [ 147.080957][ T7329] dump_stack_lvl+0xf4/0x15c [ 147.081740][ T7329] dump_stack+0x1c/0x5c [ 147.082473][ T7329] should_fail_ex+0x3cc/0x524 [ 147.083323][ T7329] should_fail+0x14/0x24 [ 147.084079][ T7329] get_futex_key+0x904/0xfb0 [ 147.084923][ T7329] futex_wait_setup+0xbc/0x320 [ 147.085909][ T7329] futex_wait+0x164/0x424 [ 147.086754][ T7329] do_futex+0x2e8/0x340 [ 147.087573][ T7329] __arm64_sys_futex+0x390/0x414 [ 147.088488][ T7329] invoke_syscall+0x98/0x290 [ 147.089283][ T7329] el0_svc_common+0x13c/0x258 [ 147.090140][ T7329] do_el0_svc+0x5c/0x134 [ 147.090923][ T7329] el0_svc+0x58/0x128 [ 147.091634][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 147.092568][ T7329] el0t_64_sync+0x18c/0x190 [ 147.195983][ T7337] nvme_fabrics: missing parameter 'nqn=%s' [ 147.210096][ T7340] device syzkaller0 entered promiscuous mode [ 147.244237][ T7346] loop3: detected capacity change from 0 to 512 [ 147.251765][ T7345] loop2: detected capacity change from 0 to 512 [ 147.261461][ T7346] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.799: inode has both inline data and extents flags [ 147.271384][ T7346] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.799: couldn't read orphan inode 15 (err -117) [ 147.275926][ T7346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.291642][ T7345] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.798: inode has both inline data and extents flags [ 147.294808][ T7345] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.798: couldn't read orphan inode 15 (err -117) [ 147.296876][ T7345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.321600][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 147.352355][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 147.486202][ T7353] loop3: detected capacity change from 0 to 40427 [ 147.575562][ T7358] netlink: 830 bytes leftover after parsing attributes in process `syz.2.802'. [ 147.579079][ T7358] fuse: Bad value for 'fd' [ 147.758851][ T7353] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 147.760227][ T7353] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.771982][ T7353] F2FS-fs (loop3): invalid crc value [ 147.779451][ T7353] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 147.801077][ T7362] FAULT_INJECTION: forcing a failure. [ 147.801077][ T7362] name fail_futex, interval 1, probability 0, space 0, times 0 [ 147.805269][ T7353] F2FS-fs (loop3): Start checkpoint disabled! [ 147.809283][ T7362] CPU: 0 PID: 7362 Comm: syz.4.804 Not tainted syzkaller #0 [ 147.810454][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 147.812084][ T7362] Call trace: [ 147.812658][ T7362] dump_backtrace+0x1c4/0x1f0 [ 147.813482][ T7362] show_stack+0x2c/0x3c [ 147.814141][ T7362] __dump_stack+0x30/0x40 [ 147.814836][ T7362] dump_stack_lvl+0xf4/0x15c [ 147.815574][ T7362] dump_stack+0x1c/0x5c [ 147.816264][ T7362] should_fail_ex+0x3cc/0x524 [ 147.817046][ T7362] should_fail+0x14/0x24 [ 147.817740][ T7362] get_futex_key+0x904/0xfb0 [ 147.818551][ T7362] futex_wait_setup+0xbc/0x320 [ 147.819439][ T7362] futex_wait+0x164/0x424 [ 147.820236][ T7362] do_futex+0x2e8/0x340 [ 147.820985][ T7362] __arm64_sys_futex+0x390/0x414 [ 147.821854][ T7362] invoke_syscall+0x98/0x290 [ 147.822645][ T7362] el0_svc_common+0x13c/0x258 [ 147.823479][ T7362] do_el0_svc+0x5c/0x134 [ 147.824258][ T7362] el0_svc+0x58/0x128 [ 147.824971][ T7362] el0t_64_sync_handler+0x84/0xf0 [ 147.825876][ T7362] el0t_64_sync+0x18c/0x190 [ 147.829066][ T7353] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.831454][ T7353] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.903906][ T7353] syz.3.801: attempt to access beyond end of device [ 147.903906][ T7353] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 147.939728][ T4560] kworker/u4:10: attempt to access beyond end of device [ 147.939728][ T4560] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.072759][ T7378] nvme_fabrics: missing parameter 'nqn=%s' [ 148.178840][ T7385] loop0: detected capacity change from 0 to 512 [ 148.188481][ T7385] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.812: inode has both inline data and extents flags [ 148.189552][ T7387] FAULT_INJECTION: forcing a failure. [ 148.189552][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 148.190835][ T7385] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.812: couldn't read orphan inode 15 (err -117) [ 148.193143][ T7387] CPU: 0 PID: 7387 Comm: syz.1.813 Not tainted syzkaller #0 [ 148.196278][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.196381][ T7385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.197963][ T7387] Call trace: [ 148.197971][ T7387] dump_backtrace+0x1c4/0x1f0 [ 148.197992][ T7387] show_stack+0x2c/0x3c [ 148.201366][ T7387] __dump_stack+0x30/0x40 [ 148.202152][ T7387] dump_stack_lvl+0xf4/0x15c [ 148.202920][ T7387] dump_stack+0x1c/0x5c [ 148.203636][ T7387] should_fail_ex+0x3cc/0x524 [ 148.204435][ T7387] __should_failslab+0xc0/0x11c [ 148.205257][ T7387] should_failslab+0x10/0x28 [ 148.206069][ T7387] kmem_cache_alloc+0x88/0x310 [ 148.206893][ T7387] __kernfs_new_node+0xec/0x5fc [ 148.207745][ T7387] kernfs_new_node+0x120/0x230 [ 148.208594][ T7387] __kernfs_create_file+0x60/0x2e0 [ 148.209480][ T7387] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 148.210438][ T7387] internal_create_group+0x3e8/0xb24 [ 148.211323][ T7387] sysfs_create_groups+0x60/0x134 [ 148.212213][ T7387] device_add_attrs+0xdc/0x6f8 [ 148.213054][ T7387] device_add+0x5ac/0xe4c [ 148.213900][ T7387] netdev_register_kobject+0x170/0x2f4 [ 148.215034][ T7387] register_netdevice+0xf28/0x1650 [ 148.216042][ T7387] ip6_tnl_create2+0x80/0x138 [ 148.216908][ T7387] ip6_tnl_locate+0x5e4/0x6d4 [ 148.217777][ T7387] ip6_tnl_siocdevprivate+0x4c0/0xc38 [ 148.218806][ T7387] dev_ifsioc+0x810/0xc04 [ 148.219604][ T7387] dev_ioctl+0x530/0xc78 [ 148.220391][ T7387] sock_ioctl+0x778/0x828 [ 148.221178][ T7387] __arm64_sys_ioctl+0x14c/0x1c8 [ 148.222233][ T7387] invoke_syscall+0x98/0x290 [ 148.223175][ T7387] el0_svc_common+0x13c/0x258 [ 148.224128][ T7387] do_el0_svc+0x5c/0x134 [ 148.224994][ T7387] el0_svc+0x58/0x128 [ 148.225818][ T7387] el0t_64_sync_handler+0x84/0xf0 [ 148.226787][ T7387] el0t_64_sync+0x18c/0x190 [ 148.268307][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 148.341168][ T7392] FAULT_INJECTION: forcing a failure. [ 148.341168][ T7392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.362517][ T7392] CPU: 0 PID: 7392 Comm: syz.2.815 Not tainted syzkaller #0 [ 148.363944][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.365768][ T7392] Call trace: [ 148.366363][ T7392] dump_backtrace+0x1c4/0x1f0 [ 148.367221][ T7392] show_stack+0x2c/0x3c [ 148.367980][ T7392] __dump_stack+0x30/0x40 [ 148.368747][ T7392] dump_stack_lvl+0xf4/0x15c [ 148.369554][ T7392] dump_stack+0x1c/0x5c [ 148.370404][ T7392] should_fail_ex+0x3cc/0x524 [ 148.371273][ T7392] should_fail+0x14/0x24 [ 148.372057][ T7392] get_futex_key+0x904/0xfb0 [ 148.372955][ T7392] futex_wait_setup+0xbc/0x320 [ 148.373870][ T7392] futex_wait+0x164/0x424 [ 148.374716][ T7392] do_futex+0x2e8/0x340 [ 148.375516][ T7392] __arm64_sys_futex+0x390/0x414 [ 148.376412][ T7392] invoke_syscall+0x98/0x290 [ 148.377255][ T7392] el0_svc_common+0x13c/0x258 [ 148.378065][ T7392] do_el0_svc+0x5c/0x134 [ 148.378820][ T7392] el0_svc+0x58/0x128 [ 148.379507][ T7392] el0t_64_sync_handler+0x84/0xf0 [ 148.380337][ T7392] el0t_64_sync+0x18c/0x190 [ 148.400411][ T7393] device syzkaller0 entered promiscuous mode [ 148.602423][ T7407] nvme_fabrics: missing parameter 'nqn=%s' [ 148.616246][ T7403] loop1: detected capacity change from 0 to 32768 [ 148.627735][ T7403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.818 (7403) [ 148.637179][ T7403] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.642268][ T7403] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 148.647137][ T7403] BTRFS info (device loop1): force clearing of disk cache [ 148.651690][ T7403] BTRFS info (device loop1): use zlib compression, level 3 [ 148.662702][ T7403] BTRFS info (device loop1): enabling ssd optimizations [ 148.670332][ T7403] BTRFS info (device loop1): using spread ssd allocation scheme [ 148.678083][ T7403] BTRFS info (device loop1): using free space tree [ 148.749754][ T7405] loop4: detected capacity change from 0 to 40427 [ 148.759282][ T7405] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 148.760738][ T7405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.762583][ T7405] F2FS-fs (loop4): invalid crc value [ 148.765626][ T7405] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 148.777990][ T7403] BTRFS info (device loop1): rebuilding free space tree [ 148.778193][ T7405] F2FS-fs (loop4): Start checkpoint disabled! [ 148.784948][ T7405] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.786260][ T7405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 148.802782][ T7403] BTRFS info (device loop1): checking UUID tree [ 148.850641][ T7405] syz.4.820: attempt to access beyond end of device [ 148.850641][ T7405] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 148.879316][ T4560] kworker/u4:10: attempt to access beyond end of device [ 148.879316][ T4560] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.091776][ T7446] FAULT_INJECTION: forcing a failure. [ 149.091776][ T7446] name fail_futex, interval 1, probability 0, space 0, times 0 [ 149.099894][ T7446] CPU: 0 PID: 7446 Comm: syz.3.829 Not tainted syzkaller #0 [ 149.101167][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 149.103071][ T7446] Call trace: [ 149.103665][ T7446] dump_backtrace+0x1c4/0x1f0 [ 149.104539][ T7446] show_stack+0x2c/0x3c [ 149.105384][ T7446] __dump_stack+0x30/0x40 [ 149.106161][ T7446] dump_stack_lvl+0xf4/0x15c [ 149.106969][ T7446] dump_stack+0x1c/0x5c [ 149.107679][ T7446] should_fail_ex+0x3cc/0x524 [ 149.108525][ T7446] should_fail+0x14/0x24 [ 149.109288][ T7446] get_futex_key+0x904/0xfb0 [ 149.110094][ T7446] futex_wake+0x10c/0x458 [ 149.110907][ T7446] do_futex+0x2c4/0x340 [ 149.111682][ T7446] __arm64_sys_futex+0x390/0x414 [ 149.112535][ T7446] invoke_syscall+0x98/0x290 [ 149.113306][ T7446] el0_svc_common+0x13c/0x258 [ 149.114121][ T7446] do_el0_svc+0x5c/0x134 [ 149.114852][ T7446] el0_svc+0x58/0x128 [ 149.115571][ T7446] el0t_64_sync_handler+0x84/0xf0 [ 149.116430][ T7446] el0t_64_sync+0x18c/0x190 [ 149.201818][ T7449] netlink: 830 bytes leftover after parsing attributes in process `syz.2.827'. [ 149.205570][ T7449] fuse: Bad value for 'fd' [ 149.390013][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.825: inode has both inline data and extents flags [ 149.394247][ T7403] BTRFS info (device loop1): balance: start -d -m [ 149.406372][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.825: couldn't read orphan inode 15 (err -117) [ 149.410553][ T7444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.413146][ T7403] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 149.429639][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 149.470450][ T7403] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 149.527901][ T7403] BTRFS info (device loop1): found 13 extents, stage: move data extents [ 149.540373][ T7403] BTRFS info (device loop1): found 2 extents, stage: update data pointers [ 149.551751][ T7403] BTRFS info (device loop1): balance: ended with status: 0 [ 149.595558][ T7459] nvme_fabrics: missing parameter 'nqn=%s' [ 149.689128][ T7466] netlink: 830 bytes leftover after parsing attributes in process `syz.3.832'. [ 149.910734][ T7463] device syzkaller0 entered promiscuous mode [ 149.943933][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.092169][ T7468] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 150.094344][ T7468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.112635][ T7468] F2FS-fs (loop2): invalid crc value [ 150.116719][ T7468] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.141480][ T7468] F2FS-fs (loop2): Start checkpoint disabled! [ 150.159082][ T7468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.160464][ T7468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 150.224675][ T7468] syz.2.836: attempt to access beyond end of device [ 150.224675][ T7468] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 150.266973][ T4475] kworker/u4:7: attempt to access beyond end of device [ 150.266973][ T4475] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.424263][ T7489] nvme_fabrics: missing parameter 'nqn=%s' [ 150.487216][ T7498] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.841: inode has both inline data and extents flags [ 150.489554][ T7498] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.841: couldn't read orphan inode 15 (err -117) [ 150.492860][ T7498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.575345][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 150.761821][ T7510] fuse: Bad value for 'fd' [ 150.956718][ T7509] netlink: 830 bytes leftover after parsing attributes in process `syz.3.848'. [ 151.037177][ T7513] FAULT_INJECTION: forcing a failure. [ 151.037177][ T7513] name fail_futex, interval 1, probability 0, space 0, times 0 [ 151.039812][ T7513] CPU: 1 PID: 7513 Comm: syz.2.852 Not tainted syzkaller #0 [ 151.041171][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 151.043102][ T7513] Call trace: [ 151.043733][ T7513] dump_backtrace+0x1c4/0x1f0 [ 151.044661][ T7513] show_stack+0x2c/0x3c [ 151.045483][ T7513] __dump_stack+0x30/0x40 [ 151.046345][ T7513] dump_stack_lvl+0xf4/0x15c [ 151.047273][ T7513] dump_stack+0x1c/0x5c [ 151.048056][ T7513] should_fail_ex+0x3cc/0x524 [ 151.048944][ T7513] should_fail+0x14/0x24 [ 151.049762][ T7513] get_futex_key+0x904/0xfb0 [ 151.050622][ T7513] futex_wake+0x10c/0x458 [ 151.051448][ T7513] do_futex+0x2c4/0x340 [ 151.052212][ T7513] __arm64_sys_futex+0x390/0x414 [ 151.053109][ T7513] invoke_syscall+0x98/0x290 [ 151.053885][ T7513] el0_svc_common+0x13c/0x258 [ 151.054679][ T7513] do_el0_svc+0x5c/0x134 [ 151.055405][ T7513] el0_svc+0x58/0x128 [ 151.056070][ T7513] el0t_64_sync_handler+0x84/0xf0 [ 151.056891][ T7513] el0t_64_sync+0x18c/0x190 [ 151.074800][ T7508] set_capacity_and_notify: 3 callbacks suppressed [ 151.074807][ T7508] loop4: detected capacity change from 0 to 40427 [ 151.084385][ T7508] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 151.086706][ T7508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 151.090910][ T7508] F2FS-fs (loop4): invalid crc value [ 151.096688][ T7508] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.127270][ T7508] F2FS-fs (loop4): Start checkpoint disabled! [ 151.156246][ T7508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.157554][ T7508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 151.164370][ T7508] syz.4.851: attempt to access beyond end of device [ 151.164370][ T7508] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 151.179558][ T7520] device syzkaller0 entered promiscuous mode [ 151.181024][ T39] kworker/u4:2: attempt to access beyond end of device [ 151.181024][ T39] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.700627][ T7529] nvme_fabrics: missing parameter 'nqn=%s' [ 151.710007][ T7526] netlink: 830 bytes leftover after parsing attributes in process `syz.1.857'. [ 151.716930][ T7540] loop2: detected capacity change from 0 to 512 [ 151.741527][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.861: inode has both inline data and extents flags [ 151.745704][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.861: couldn't read orphan inode 15 (err -117) [ 151.748304][ T7540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.769365][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 151.893958][ T7554] loop4: detected capacity change from 0 to 64 [ 152.001441][ T7548] loop0: detected capacity change from 0 to 40427 [ 152.017525][ T7548] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 152.019397][ T7548] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.025255][ T7548] F2FS-fs (loop0): invalid crc value [ 152.029384][ T7548] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 152.379752][ T7548] F2FS-fs (loop0): Start checkpoint disabled! [ 152.390867][ T7548] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 152.392250][ T7548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 152.406461][ T7548] syz.0.866: attempt to access beyond end of device [ 152.406461][ T7548] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 152.423999][ T4475] kworker/u4:7: attempt to access beyond end of device [ 152.423999][ T4475] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.557384][ T7568] loop3: detected capacity change from 0 to 64 [ 152.677486][ T7572] nvme_fabrics: missing parameter 'nqn=%s' [ 152.709598][ T7576] device syzkaller0 entered promiscuous mode [ 153.075575][ T7580] FAULT_INJECTION: forcing a failure. [ 153.075575][ T7580] name fail_futex, interval 1, probability 0, space 0, times 0 [ 153.081834][ T7580] CPU: 0 PID: 7580 Comm: syz.0.876 Not tainted syzkaller #0 [ 153.083144][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.084974][ T7580] Call trace: [ 153.085556][ T7580] dump_backtrace+0x1c4/0x1f0 [ 153.086394][ T7580] show_stack+0x2c/0x3c [ 153.087170][ T7580] __dump_stack+0x30/0x40 [ 153.088078][ T7580] dump_stack_lvl+0xf4/0x15c [ 153.088876][ T7580] dump_stack+0x1c/0x5c [ 153.089608][ T7580] should_fail_ex+0x3cc/0x524 [ 153.090482][ T7580] should_fail+0x14/0x24 [ 153.091259][ T7580] get_futex_key+0x904/0xfb0 [ 153.092091][ T7580] futex_wake+0x10c/0x458 [ 153.092880][ T7580] do_futex+0x2c4/0x340 [ 153.093601][ T7580] __arm64_sys_futex+0x390/0x414 [ 153.094435][ T7580] invoke_syscall+0x98/0x290 [ 153.095225][ T7580] el0_svc_common+0x13c/0x258 [ 153.096039][ T7580] do_el0_svc+0x5c/0x134 [ 153.096802][ T7580] el0_svc+0x58/0x128 [ 153.097513][ T7580] el0t_64_sync_handler+0x84/0xf0 [ 153.098351][ T7580] el0t_64_sync+0x18c/0x190 [ 153.106909][ T7582] loop4: detected capacity change from 0 to 512 [ 153.135764][ T7582] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.875: inode has both inline data and extents flags [ 153.138876][ T7582] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.875: couldn't read orphan inode 15 (err -117) [ 153.143705][ T7582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.189192][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 153.454963][ T7598] fuse: Bad value for 'fd' [ 153.632976][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 153.635029][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 153.636399][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 153.637758][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 153.637773][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 153.666543][ T7590] loop0: detected capacity change from 0 to 40427 [ 153.669703][ T7590] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 153.670990][ T7590] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 153.676267][ T7590] F2FS-fs (loop0): invalid crc value [ 153.680263][ T7590] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 153.708310][ T7597] netlink: 830 bytes leftover after parsing attributes in process `syz.4.879'. [ 153.719601][ T7590] F2FS-fs (loop0): Start checkpoint disabled! [ 153.732056][ T7590] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 153.733406][ T7590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 153.739775][ T7590] syz.0.880: attempt to access beyond end of device [ 153.739775][ T7590] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 153.761797][ T775] kworker/u4:3: attempt to access beyond end of device [ 153.761797][ T775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.781146][ T7608] nvme_fabrics: missing parameter 'nqn=%s' [ 153.796720][ T7611] loop2: detected capacity change from 0 to 64 [ 153.817942][ T7613] FAULT_INJECTION: forcing a failure. [ 153.817942][ T7613] name fail_futex, interval 1, probability 0, space 0, times 0 [ 153.821410][ T7613] CPU: 1 PID: 7613 Comm: syz.1.888 Not tainted syzkaller #0 [ 153.822662][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.824358][ T7613] Call trace: [ 153.824925][ T7613] dump_backtrace+0x1c4/0x1f0 [ 153.825754][ T7613] show_stack+0x2c/0x3c [ 153.826476][ T7613] __dump_stack+0x30/0x40 [ 153.827247][ T7613] dump_stack_lvl+0xf4/0x15c [ 153.828053][ T7613] dump_stack+0x1c/0x5c [ 153.828790][ T7613] should_fail_ex+0x3cc/0x524 [ 153.829628][ T7613] should_fail+0x14/0x24 [ 153.830396][ T7613] get_futex_key+0x904/0xfb0 [ 153.831226][ T7613] futex_wake+0x10c/0x458 [ 153.832000][ T7613] do_futex+0x2c4/0x340 [ 153.832762][ T7613] __arm64_sys_futex+0x390/0x414 [ 153.833650][ T7613] invoke_syscall+0x98/0x290 [ 153.834487][ T7613] el0_svc_common+0x13c/0x258 [ 153.835327][ T7613] do_el0_svc+0x5c/0x134 [ 153.836108][ T7613] el0_svc+0x58/0x128 [ 153.836840][ T7613] el0t_64_sync_handler+0x84/0xf0 [ 153.837744][ T7613] el0t_64_sync+0x18c/0x190 [ 153.939223][ T7618] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28 [ 154.038663][ T7618] loop0: detected capacity change from 0 to 16 [ 154.042837][ T7618] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.370348][ T7623] loop4: detected capacity change from 0 to 512 [ 154.373916][ T7623] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.890: inode has both inline data and extents flags [ 154.377142][ T7623] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.890: couldn't read orphan inode 15 (err -117) [ 154.379616][ T7623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.397860][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 154.483057][ T7633] device syzkaller0 entered promiscuous mode [ 154.759929][ T7637] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 154.761268][ T7637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.768076][ T7637] F2FS-fs (loop3): invalid crc value [ 154.771384][ T7637] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 154.795872][ T7642] nvme_fabrics: missing parameter 'nqn=%s' [ 154.812108][ T7637] F2FS-fs (loop3): Start checkpoint disabled! [ 154.858540][ T7637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.859910][ T7637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 154.997710][ T7648] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.901: inode has both inline data and extents flags [ 155.008031][ T7648] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.901: couldn't read orphan inode 15 (err -117) [ 155.010338][ T7648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.379146][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 155.399623][ T7656] syz.3.896: attempt to access beyond end of device [ 155.399623][ T7656] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 155.491008][ T7662] netlink: 830 bytes leftover after parsing attributes in process `syz.0.900'. [ 155.494527][ T7662] fuse: Bad value for 'fd' [ 155.783969][ T7659] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.903: bad orphan inode 11862016 [ 155.787600][ T7659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.838338][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 155.905563][ T7677] device syzkaller0 entered promiscuous mode [ 155.923644][ T7675] nvme_fabrics: missing parameter 'nqn=%s' [ 156.457482][ T4480] kworker/u4:8: attempt to access beyond end of device [ 156.457482][ T4480] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.877283][ T7697] set_capacity_and_notify: 5 callbacks suppressed [ 156.877295][ T7697] loop2: detected capacity change from 0 to 64 [ 156.920248][ T7702] loop0: detected capacity change from 0 to 512 [ 157.015504][ T7707] loop4: detected capacity change from 0 to 64 [ 157.020682][ T7702] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.918: bad orphan inode 11862016 [ 157.026882][ T7702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.348840][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 157.383501][ T7714] nvme_fabrics: missing parameter 'nqn=%s' [ 157.722659][ T7722] loop1: detected capacity change from 0 to 1024 [ 157.724202][ T7722] EXT4-fs: Ignoring removed oldalloc option [ 157.725203][ T7722] EXT4-fs: Ignoring removed orlov option [ 157.732302][ T7721] loop0: detected capacity change from 0 to 1024 [ 157.733685][ T7721] EXT4-fs: Ignoring removed oldalloc option [ 157.734847][ T7721] EXT4-fs: Ignoring removed orlov option [ 157.756720][ T7721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.788927][ T7722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.789206][ T7726] FAULT_INJECTION: forcing a failure. [ 157.789206][ T7726] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.793021][ T7726] CPU: 0 PID: 7726 Comm: syz.3.924 Not tainted syzkaller #0 [ 157.794236][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 157.796051][ T7726] Call trace: [ 157.796727][ T7726] dump_backtrace+0x1c4/0x1f0 [ 157.797663][ T7726] show_stack+0x2c/0x3c [ 157.798476][ T7726] __dump_stack+0x30/0x40 [ 157.799292][ T7726] dump_stack_lvl+0xf4/0x15c [ 157.800121][ T7726] dump_stack+0x1c/0x5c [ 157.800908][ T7726] should_fail_ex+0x3cc/0x524 [ 157.801804][ T7726] should_fail+0x14/0x24 [ 157.802581][ T7726] get_futex_key+0x904/0xfb0 [ 157.803335][ T7726] futex_wake+0x10c/0x458 [ 157.804098][ T7726] do_futex+0x2c4/0x340 [ 157.804837][ T7726] __arm64_sys_futex+0x390/0x414 [ 157.805720][ T7726] invoke_syscall+0x98/0x290 [ 157.806543][ T7726] el0_svc_common+0x13c/0x258 [ 157.807363][ T7726] do_el0_svc+0x5c/0x134 [ 157.808090][ T7726] el0_svc+0x58/0x128 [ 157.808816][ T7726] el0t_64_sync_handler+0x84/0xf0 [ 157.809692][ T7726] el0t_64_sync+0x18c/0x190 [ 157.811965][ T7720] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.845268][ T7720] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz.1.923: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 157.853578][ T7720] overlayfs: failed to look up (205) for ino (-117) [ 157.863819][ T7728] loop2: detected capacity change from 0 to 64 [ 158.051705][ T7730] loop4: detected capacity change from 0 to 40427 [ 158.058835][ T7730] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 158.060264][ T7730] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.063051][ T7730] F2FS-fs (loop4): invalid crc value [ 158.072879][ T7730] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 158.092809][ T7730] F2FS-fs (loop4): Start checkpoint disabled! [ 158.097431][ T7730] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.098873][ T7730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 158.230296][ T7745] loop3: detected capacity change from 0 to 512 [ 158.262268][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 158.286806][ T4329] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /205/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 158.295143][ T4329] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /205/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 158.311650][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 158.313357][ T7747] syz.4.926: attempt to access beyond end of device [ 158.313357][ T7747] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 158.329117][ T7745] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.932: bad orphan inode 11862016 [ 158.331286][ T7745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.423018][ T7750] nvme_fabrics: missing parameter 'nqn=%s' [ 158.458223][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 158.810458][ T7764] loop0: detected capacity change from 0 to 64 [ 159.037521][ T7774] loop2: detected capacity change from 0 to 64 [ 159.461681][ T4394] kworker/u4:6: attempt to access beyond end of device [ 159.461681][ T4394] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.704590][ T7784] EXT4-fs: Ignoring removed oldalloc option [ 159.705664][ T7784] EXT4-fs: Ignoring removed orlov option [ 160.008486][ T7784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.070408][ T7793] nvme_fabrics: missing parameter 'nqn=%s' [ 160.177341][ T7802] EXT4-fs: Ignoring removed oldalloc option [ 160.178641][ T7802] EXT4-fs: Ignoring removed orlov option [ 160.386271][ T7802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.405859][ T7795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.410173][ T7795] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz.0.946: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 160.413776][ T7795] overlayfs: failed to look up (182) for ino (-117) [ 160.415717][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 160.520317][ T7812] FAULT_INJECTION: forcing a failure. [ 160.520317][ T7812] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.533020][ T7812] CPU: 0 PID: 7812 Comm: syz.2.953 Not tainted syzkaller #0 [ 160.534324][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 160.536142][ T7812] Call trace: [ 160.536768][ T7812] dump_backtrace+0x1c4/0x1f0 [ 160.537618][ T7812] show_stack+0x2c/0x3c [ 160.538341][ T7812] __dump_stack+0x30/0x40 [ 160.539218][ T7812] dump_stack_lvl+0xf4/0x15c [ 160.540079][ T7812] dump_stack+0x1c/0x5c [ 160.540845][ T7812] should_fail_ex+0x3cc/0x524 [ 160.541722][ T7812] should_fail+0x14/0x24 [ 160.542499][ T7812] get_futex_key+0x904/0xfb0 [ 160.543306][ T7812] futex_wake+0x10c/0x458 [ 160.544079][ T7812] do_futex+0x2c4/0x340 [ 160.544816][ T7812] __arm64_sys_futex+0x390/0x414 [ 160.545676][ T7812] invoke_syscall+0x98/0x290 [ 160.546479][ T7812] el0_svc_common+0x13c/0x258 [ 160.547301][ T7812] do_el0_svc+0x5c/0x134 [ 160.548041][ T7812] el0_svc+0x58/0x128 [ 160.548747][ T7812] el0t_64_sync_handler+0x84/0xf0 [ 160.549625][ T7812] el0t_64_sync+0x18c/0x190 [ 160.857436][ T4334] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /182/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 160.867423][ T4334] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /182/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 160.880176][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 160.904886][ T7809] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 160.906181][ T7809] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.908068][ T7809] F2FS-fs (loop4): invalid crc value [ 160.909551][ T7809] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.928140][ T7809] F2FS-fs (loop4): Start checkpoint disabled! [ 160.940664][ T7809] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.942086][ T7809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.271087][ T7829] EXT4-fs: Ignoring removed oldalloc option [ 161.271099][ T7829] EXT4-fs: Ignoring removed orlov option [ 161.320119][ T7829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.325951][ T7826] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.331028][ T7826] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz.3.968: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 161.336409][ T7826] overlayfs: failed to look up (193) for ino (-117) [ 161.767751][ T7836] syz.4.954: attempt to access beyond end of device [ 161.767751][ T7836] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 161.771213][ T4328] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /193/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 161.884363][ T4328] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /193/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 161.923441][ T7841] nvme_fabrics: missing parameter 'nqn=%s' [ 161.934007][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 161.997251][ T7850] set_capacity_and_notify: 7 callbacks suppressed [ 161.997259][ T7850] loop3: detected capacity change from 0 to 512 [ 162.012806][ T7850] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.964: inode has both inline data and extents flags [ 162.017372][ T7850] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.964: couldn't read orphan inode 15 (err -117) [ 162.026963][ T7850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.031061][ T7853] device syzkaller0 entered promiscuous mode [ 162.071364][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 162.357676][ T7865] loop3: detected capacity change from 0 to 1024 [ 162.361304][ T7865] EXT4-fs: Ignoring removed oldalloc option [ 162.362358][ T7865] EXT4-fs: Ignoring removed orlov option [ 162.598391][ T7865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.599157][ T39] kworker/u4:2: attempt to access beyond end of device [ 162.599157][ T39] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.646475][ T7871] gadgetfs expected dummy_udc controller not usbip-vudc [ 162.648303][ T7871] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 162.651459][ T7871] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 162.682657][ T7873] loop2: detected capacity change from 0 to 64 [ 163.178901][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 163.185583][ T7880] nvme_fabrics: missing parameter 'nqn=%s' [ 163.234245][ T7891] loop4: detected capacity change from 0 to 512 [ 163.253494][ T7891] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.979: inode has both inline data and extents flags [ 163.267519][ T7891] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.979: couldn't read orphan inode 15 (err -117) [ 163.269835][ T7891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.284170][ T7898] device syzkaller0 entered promiscuous mode [ 163.331276][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 164.625087][ T7930] nvme_fabrics: missing parameter 'nqn=%s' [ 164.779073][ T7942] loop4: detected capacity change from 0 to 1024 [ 164.782319][ T7942] EXT4-fs: Ignoring removed oldalloc option [ 164.783654][ T7942] EXT4-fs: Ignoring removed orlov option [ 164.972184][ T7942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.043246][ T7950] loop2: detected capacity change from 0 to 512 [ 165.072464][ T7953] loop0: detected capacity change from 0 to 64 [ 165.073444][ T7950] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.995: inode has both inline data and extents flags [ 165.081101][ T7950] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.995: couldn't read orphan inode 15 (err -117) [ 165.145176][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 165.148979][ T7950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.792654][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 165.835362][ T7966] gadgetfs expected dummy_udc controller not usbip-vudc [ 165.840813][ T7966] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 165.842530][ T7966] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 165.848709][ T7964] device syzkaller0 entered promiscuous mode [ 165.853073][ T7965] nvme_fabrics: missing parameter 'nqn=%s' [ 165.885921][ T7969] loop3: detected capacity change from 0 to 512 [ 165.889536][ T7969] EXT4-fs (loop3): unable to read superblock [ 166.480185][ T7992] loop0: detected capacity change from 0 to 512 [ 166.482344][ T7992] EXT4-fs (loop0): unable to read superblock [ 166.499288][ T7971] loop2: detected capacity change from 0 to 40427 [ 166.510587][ T7971] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 166.512229][ T7971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 167.031320][ T7971] F2FS-fs (loop2): invalid crc value [ 167.038307][ T7971] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 167.058647][ T7971] F2FS-fs (loop2): Start checkpoint disabled! [ 167.073896][ T8000] loop3: detected capacity change from 0 to 512 [ 167.076861][ T7971] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.078367][ T7971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 167.082792][ T8000] EXT4-fs (loop3): unable to read superblock [ 167.708628][ T8004] syz.2.1003: attempt to access beyond end of device [ 167.708628][ T8004] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 168.031028][ T8008] loop1: detected capacity change from 0 to 512 [ 168.033284][ T8008] EXT4-fs (loop1): unable to read superblock [ 168.035788][ T1620] kworker/u4:4: attempt to access beyond end of device [ 168.035788][ T1620] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.075830][ T8010] loop0: detected capacity change from 0 to 512 [ 168.081747][ T8010] EXT4-fs (loop0): unable to read superblock [ 168.093904][ T8012] loop4: detected capacity change from 0 to 512 [ 168.096343][ T8012] EXT4-fs (loop4): unable to read superblock [ 169.342477][ T6429] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.505714][ T8028] loop2: detected capacity change from 0 to 512 [ 169.507369][ T8028] EXT4-fs (loop2): unable to read superblock [ 169.521343][ T8032] device syzkaller0 entered promiscuous mode [ 169.631246][ T8039] loop0: detected capacity change from 0 to 64 [ 171.224935][ T8075] loop4: detected capacity change from 0 to 512 [ 171.228928][ T8075] EXT4-fs (loop4): unable to read superblock [ 171.252614][ T8079] gadgetfs expected dummy_udc controller not usbip-vudc [ 171.257085][ T8079] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 171.287195][ T8079] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 171.324728][ T6429] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.358339][ T8083] loop0: detected capacity change from 0 to 64 [ 172.011285][ T8099] loop3: detected capacity change from 0 to 512 [ 172.013141][ T8099] EXT4-fs (loop3): unable to read superblock [ 172.563803][ T8116] loop4: detected capacity change from 0 to 512 [ 172.571771][ T8116] EXT4-fs (loop4): unable to read superblock [ 173.006034][ T8121] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1050'. [ 173.009116][ T8121] fuse: Bad value for 'fd' [ 173.132836][ T6433] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.209122][ T8127] loop3: detected capacity change from 0 to 512 [ 173.210735][ T8127] EXT4-fs (loop3): unable to read superblock [ 173.258998][ T6429] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.733076][ T8136] loop0: detected capacity change from 0 to 512 [ 173.743673][ T8136] EXT4-fs (loop0): unable to read superblock [ 174.336560][ T8145] loop1: detected capacity change from 0 to 64 [ 175.144149][ T8164] loop0: detected capacity change from 0 to 512 [ 175.146247][ T8164] EXT4-fs (loop0): unable to read superblock [ 175.300709][ T8170] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1063'. [ 175.301931][ T8170] fuse: Bad value for 'fd' [ 175.708231][ T8175] gadgetfs expected dummy_udc controller not usbip-vudc [ 175.713865][ T8175] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 175.719870][ T8175] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 175.770171][ T8179] loop1: detected capacity change from 0 to 512 [ 175.774023][ T8179] EXT4-fs (loop1): unable to read superblock [ 175.785466][ T6433] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.249674][ T8183] loop2: detected capacity change from 0 to 512 [ 176.270788][ T8183] EXT4-fs (loop2): unable to read superblock [ 177.341429][ T8208] loop1: detected capacity change from 0 to 512 [ 177.451686][ T8208] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1078: inode has both inline data and extents flags [ 177.460921][ T8208] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1078: couldn't read orphan inode 15 (err -117) [ 177.476815][ T8208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.510011][ T8219] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1079'. [ 177.512020][ T8219] fuse: Bad value for 'fd' [ 178.128714][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 178.272975][ T8228] fuse: Bad value for 'fd' [ 178.566967][ T8226] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1082'. [ 179.847791][ T8261] loop4: detected capacity change from 0 to 512 [ 179.849852][ T8261] EXT4-fs (loop4): unable to read superblock [ 179.934988][ T8267] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 179.944648][ T6429] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.439733][ T8277] gadgetfs expected dummy_udc controller not usbip-vudc [ 180.441256][ T8277] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 180.446659][ T8277] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 180.573296][ T8281] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1094'. [ 180.575968][ T8281] fuse: Bad value for 'fd' [ 180.796723][ T8286] loop0: detected capacity change from 0 to 512 [ 180.798517][ T8286] EXT4-fs (loop0): unable to read superblock [ 180.973126][ T8290] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1098'. [ 180.976497][ T8290] fuse: Bad value for 'fd' [ 183.345143][ T8334] loop3: detected capacity change from 0 to 512 [ 183.346799][ T8334] EXT4-fs (loop3): unable to read superblock [ 183.424441][ T8335] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1110'. [ 183.426847][ T8335] fuse: Bad value for 'fd' [ 183.627597][ T8340] nvme_fcloop: unknown parameter or missing value 'roles=' [ 183.743401][ T8350] loop1: detected capacity change from 0 to 512 [ 183.753778][ T8350] EXT4-fs (loop1): unable to read superblock [ 183.850413][ T8354] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1115'. [ 183.853600][ T8354] fuse: Bad value for 'fd' [ 184.568081][ T8367] loop0: detected capacity change from 0 to 512 [ 184.582277][ T8367] EXT4-fs (loop0): unable to read superblock [ 185.041314][ T8376] loop2: detected capacity change from 0 to 512 [ 185.050535][ T8376] EXT4-fs (loop2): unable to read superblock [ 185.501535][ T8383] nvme_fcloop: unknown parameter or missing value 'roles=' [ 185.539109][ T8386] loop4: detected capacity change from 0 to 512 [ 185.553534][ T8386] EXT4-fs (loop4): unable to read superblock [ 185.683985][ T8388] loop0: detected capacity change from 0 to 32768 [ 185.692057][ T8388] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1138 (8388) [ 185.711798][ T8388] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.716002][ T8388] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 185.718922][ T8388] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.723419][ T8388] BTRFS info (device loop0): use zstd compression, level 3 [ 185.727425][ T8388] BTRFS info (device loop0): using free space tree [ 185.920747][ T8388] BTRFS info (device loop0): enabling ssd optimizations [ 186.292897][ T8421] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1131'. [ 186.295480][ T8421] fuse: Bad value for 'fd' [ 186.516326][ T8430] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1132'. [ 186.519667][ T8430] fuse: Bad value for 'fd' [ 186.747849][ T4334] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.863056][ T8434] gadgetfs expected dummy_udc controller not usbip-vudc [ 186.864577][ T8434] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 186.866610][ T8434] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 186.931541][ T8437] device syzkaller0 entered promiscuous mode [ 187.355189][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.364267][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.175008][ T8457] loop2: detected capacity change from 0 to 32768 [ 188.218145][ T8457] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1141 (8457) [ 188.227593][ T8466] device syzkaller0 entered promiscuous mode [ 188.230215][ T8457] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.238523][ T8457] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 188.242462][ T8457] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.247997][ T8457] BTRFS info (device loop2): use zstd compression, level 3 [ 188.250991][ T8457] BTRFS info (device loop2): using free space tree [ 188.290694][ T8457] BTRFS info (device loop2): enabling ssd optimizations [ 188.626730][ T4338] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.687336][ T8490] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1147'. [ 188.689547][ T8490] fuse: Bad value for 'fd' [ 188.745399][ T8496] gadgetfs expected dummy_udc controller not usbip-vudc [ 188.746634][ T8496] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 188.750832][ T8496] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 188.833910][ T8500] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1149'. [ 188.837014][ T8500] fuse: Bad value for 'fd' [ 189.182770][ T8509] loop2: detected capacity change from 0 to 512 [ 189.185196][ T8509] EXT4-fs (loop2): unable to read superblock [ 189.226109][ T6429] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.639586][ T8520] device syzkaller0 entered promiscuous mode [ 190.098876][ T8526] loop4: detected capacity change from 0 to 32768 [ 190.121458][ T8526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1159 (8526) [ 190.158081][ T8526] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 190.160093][ T8526] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 190.161664][ T8526] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.173655][ T8526] BTRFS info (device loop4): use zstd compression, level 3 [ 190.180593][ T8526] BTRFS info (device loop4): using free space tree [ 190.658758][ T8526] BTRFS info (device loop4): enabling ssd optimizations [ 190.880213][ T8559] gadgetfs expected dummy_udc controller not usbip-vudc [ 190.881505][ T8559] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 190.893783][ T8559] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 191.078345][ T4335] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.219959][ T8568] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1166'. [ 191.223110][ T8568] fuse: Bad value for 'fd' [ 191.576627][ T8576] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1167'. [ 191.578994][ T8576] fuse: Bad value for 'fd' [ 192.721257][ T8600] device syzkaller0 entered promiscuous mode [ 193.457598][ T8620] loop3: detected capacity change from 0 to 256 [ 193.878484][ T8620] device syzkaller0 entered promiscuous mode [ 194.944591][ T8658] device syzkaller0 entered promiscuous mode [ 195.031387][ T8656] loop4: detected capacity change from 0 to 32768 [ 195.043582][ T8654] loop1: detected capacity change from 0 to 32768 [ 195.054415][ T8656] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1194 (8656) [ 195.062553][ T8656] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 195.064776][ T8656] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 195.066657][ T8656] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.068287][ T8656] BTRFS info (device loop4): use zstd compression, level 3 [ 195.069572][ T8656] BTRFS info (device loop4): using free space tree [ 195.071353][ T8654] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1191 (8654) [ 195.148932][ T6433] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (6433) [ 195.154927][ T8656] BTRFS info (device loop4): enabling ssd optimizations [ 196.419196][ T4335] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 197.111056][ T8721] loop0: detected capacity change from 0 to 32768 [ 197.465264][ T8728] capability: warning: `syz.0.1208' uses deprecated v2 capabilities in a way that may be insecure [ 198.049970][ T8739] nvme_fabrics: missing parameter 'nqn=%s' [ 198.127456][ T8750] loop2: detected capacity change from 0 to 256 [ 198.693605][ T8750] device syzkaller0 entered promiscuous mode [ 199.257507][ T8777] loop3: detected capacity change from 0 to 32768 [ 199.943991][ T8791] FAULT_INJECTION: forcing a failure. [ 199.943991][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.965885][ T8791] CPU: 1 PID: 8791 Comm: syz.4.1231 Not tainted syzkaller #0 [ 199.967213][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 199.968876][ T8791] Call trace: [ 199.969442][ T8791] dump_backtrace+0x1c4/0x1f0 [ 199.970311][ T8791] show_stack+0x2c/0x3c [ 199.971066][ T8791] __dump_stack+0x30/0x40 [ 199.971847][ T8791] dump_stack_lvl+0xf4/0x15c [ 199.972599][ T8791] dump_stack+0x1c/0x5c [ 199.973308][ T8791] should_fail_ex+0x3cc/0x524 [ 199.974128][ T8791] should_fail+0x14/0x24 [ 199.974843][ T8791] should_fail_usercopy+0x20/0x30 [ 199.975695][ T8791] do_tcp_getsockopt+0x174/0x1d44 [ 199.976531][ T8791] tcp_getsockopt+0x6c/0xe8 [ 199.977278][ T8791] sock_common_getsockopt+0xa8/0xc4 [ 199.978190][ T8791] __sys_getsockopt+0x1e0/0x474 [ 199.979016][ T8791] __arm64_sys_getsockopt+0xc0/0xdc [ 199.979917][ T8791] invoke_syscall+0x98/0x290 [ 199.980698][ T8791] el0_svc_common+0x13c/0x258 [ 199.981578][ T8791] do_el0_svc+0x5c/0x134 [ 199.982318][ T8791] el0_svc+0x58/0x128 [ 199.983040][ T8791] el0t_64_sync_handler+0x84/0xf0 [ 199.983948][ T8791] el0t_64_sync+0x18c/0x190 [ 200.016345][ T8795] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1233'. [ 200.018739][ T8793] device syzkaller0 entered promiscuous mode [ 200.353530][ T8798] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1235'. [ 200.355981][ T8798] fuse: Bad value for 'fd' [ 200.385294][ T8806] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1236'. [ 200.700029][ T8818] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1240'. [ 200.705590][ T8818] fuse: Bad value for 'fd' [ 200.993240][ T8826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1247'. [ 201.510966][ T8844] loop4: detected capacity change from 0 to 32768 [ 201.692593][ T8856] FAULT_INJECTION: forcing a failure. [ 201.692593][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.704375][ T8856] CPU: 1 PID: 8856 Comm: syz.1.1255 Not tainted syzkaller #0 [ 201.705880][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 201.707696][ T8856] Call trace: [ 201.708280][ T8856] dump_backtrace+0x1c4/0x1f0 [ 201.709107][ T8856] show_stack+0x2c/0x3c [ 201.709838][ T8856] __dump_stack+0x30/0x40 [ 201.710596][ T8856] dump_stack_lvl+0xf4/0x15c [ 201.711356][ T8856] dump_stack+0x1c/0x5c [ 201.712061][ T8856] should_fail_ex+0x3cc/0x524 [ 201.712865][ T8856] should_fail+0x14/0x24 [ 201.713617][ T8856] should_fail_usercopy+0x20/0x30 [ 201.714493][ T8856] do_tcp_getsockopt+0x174/0x1d44 [ 201.715406][ T8856] tcp_getsockopt+0x6c/0xe8 [ 201.716114][ T8856] sock_common_getsockopt+0xa8/0xc4 [ 201.716958][ T8856] __sys_getsockopt+0x1e0/0x474 [ 201.717762][ T8856] __arm64_sys_getsockopt+0xc0/0xdc [ 201.718637][ T8856] invoke_syscall+0x98/0x290 [ 201.719397][ T8856] el0_svc_common+0x13c/0x258 [ 201.720195][ T8856] do_el0_svc+0x5c/0x134 [ 201.720898][ T8856] el0_svc+0x58/0x128 [ 201.721574][ T8856] el0t_64_sync_handler+0x84/0xf0 [ 201.722423][ T8856] el0t_64_sync+0x18c/0x190 [ 201.941325][ T8863] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1258'. [ 201.953642][ T8861] device syzkaller0 entered promiscuous mode [ 202.700396][ T8870] device syzkaller0 entered promiscuous mode [ 202.702102][ T8878] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1261'. [ 202.925803][ T8893] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1267'. [ 202.930998][ T8893] fuse: Bad value for 'fd' [ 203.065850][ T8895] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1270'. [ 203.239204][ T8898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 203.616857][ T8906] fuse: Bad value for 'fd' [ 203.792789][ T8908] device syzkaller0 entered promiscuous mode [ 203.838754][ T8912] netlink: 'syz.2.1276': attribute type 53 has an invalid length. [ 203.849433][ T8910] device syzkaller0 entered promiscuous mode [ 204.177591][ T8922] fuse: Bad value for 'fd' [ 204.296599][ T8930] fuse: Bad value for 'fd' [ 204.516024][ T8934] device syzkaller0 entered promiscuous mode [ 204.864984][ T8938] fuse: Bad value for 'fd' [ 205.171534][ T8947] __nla_validate_parse: 6 callbacks suppressed [ 205.171554][ T8947] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1286'. [ 205.500204][ T8946] loop1: detected capacity change from 0 to 40427 [ 205.502121][ T8946] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 205.503563][ T8946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 205.509808][ T8946] F2FS-fs (loop1): invalid crc value [ 205.516560][ T8946] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 205.568695][ T8946] F2FS-fs (loop1): Start checkpoint disabled! [ 205.579751][ T8955] nvme_fabrics: missing parameter 'nqn=%s' [ 205.594704][ T8946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 205.595980][ T8946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 205.721234][ T8963] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1292'. [ 205.725297][ T8963] fuse: Bad value for 'fd' [ 205.957132][ T8967] loop4: detected capacity change from 0 to 512 [ 205.958626][ T8967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.959999][ T8966] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1294'. [ 205.993522][ T8967] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #11: comm syz.4.1295: unexpected EA_INODE flag [ 205.998807][ T8967] EXT4-fs (loop4): Remounting filesystem read-only [ 206.002015][ T8967] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1295: couldn't read orphan inode 11 (err -117) [ 206.015293][ T8967] EXT4-fs (loop4): Remounting filesystem read-only [ 206.016605][ T8967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.126542][ T8971] syz.1.1297: attempt to access beyond end of device [ 206.126542][ T8971] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 206.221882][ T8950] loop2: detected capacity change from 0 to 131072 [ 206.230087][ T8950] F2FS-fs (loop2): invalid crc value [ 206.251588][ T8950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.273523][ T8950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 206.330094][ T8950] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.331712][ T8950] overlayfs: missing 'lowerdir' [ 206.494508][ T8977] device syzkaller0 entered promiscuous mode [ 206.665356][ T8982] fuse: Bad value for 'fd' [ 206.824326][ T8981] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1296'. [ 206.854396][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 206.919946][ T27] audit: type=1326 audit(206.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.926830][ T27] audit: type=1326 audit(206.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.930979][ T27] audit: type=1326 audit(206.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.954552][ T27] audit: type=1326 audit(206.910:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.961335][ T27] audit: type=1326 audit(206.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.969006][ T27] audit: type=1326 audit(206.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.972706][ T27] audit: type=1326 audit(206.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.994149][ T27] audit: type=1326 audit(206.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 206.998530][ T27] audit: type=1326 audit(206.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 207.024160][ T27] audit: type=1326 audit(206.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.2.1287" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb782e8 code=0x7ffc0000 [ 207.064248][ T5159] kworker/u4:13: attempt to access beyond end of device [ 207.064248][ T5159] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.230352][ T8995] nvme_fabrics: missing parameter 'nqn=%s' [ 207.426903][ T9003] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1300'. [ 207.850872][ T9012] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1307'. [ 207.854981][ T9012] fuse: Bad value for 'fd' [ 208.108715][ T9014] loop1: detected capacity change from 0 to 512 [ 208.165792][ T9014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.343137][ T8993] loop3: detected capacity change from 0 to 65536 [ 208.390987][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 208.429694][ T9026] loop1: detected capacity change from 0 to 512 [ 208.448353][ T8993] XFS (loop3): Mounting V5 Filesystem [ 208.512592][ T9029] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1310'. [ 208.797589][ T9035] loop1: detected capacity change from 0 to 128 [ 208.798555][ T8993] XFS (loop3): Ending clean mount [ 208.832977][ T8993] XFS (loop3): Quotacheck needed: Please wait. [ 208.866328][ T8993] XFS (loop3): Quotacheck: Done. [ 208.889476][ T8993] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x8003 [ 208.898382][ T8993] XFS (loop3): Unmount and run xfs_repair [ 208.902638][ T8993] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 208.910304][ T8993] 00000000: 58 41 46 4c 00 00 00 01 66 53 b9 71 41 ab 48 0a XAFL....fS.qA.H. [ 208.915016][ T8993] 00000010: bd 7b 5f f7 9b 94 09 b5 00 00 00 00 00 00 00 00 .{_............. [ 208.921801][ T8993] 00000020: 33 3c b6 6b ff ff ff ff 40 00 00 05 00 00 00 06 3<.k....@....... [ 208.928676][ T8993] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 208.931338][ T8993] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.934042][ T8993] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.939030][ T8993] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.942726][ T8993] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.948239][ T8993] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1a0/0x358" at daddr 0x8003 len 1 error 74 [ 208.953935][ T8993] overlayfs: failed to create directory ./bus/work (errno: 117); mounting read-only [ 208.995166][ T9040] device syzkaller0 entered promiscuous mode [ 209.068644][ T4328] XFS (loop3): Unmounting Filesystem [ 209.089827][ T9033] loop2: detected capacity change from 0 to 40427 [ 209.101236][ T9033] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 209.105290][ T9033] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 209.110100][ T9033] F2FS-fs (loop2): invalid crc value [ 209.113970][ T9033] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 209.163753][ T9033] F2FS-fs (loop2): Start checkpoint disabled! [ 209.171888][ T9033] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 209.173059][ T9033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 209.326745][ T9046] fuse: Bad value for 'fd' [ 209.500304][ T9048] nvme_fabrics: missing parameter 'nqn=%s' [ 209.511073][ T9045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1315'. [ 209.688000][ T9061] syz.2.1311: attempt to access beyond end of device [ 209.688000][ T9061] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 209.859296][ T9065] loop0: detected capacity change from 0 to 2048 [ 209.865432][ T9065] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 209.869081][ T9065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.969367][ T9067] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1322'. [ 209.973125][ T9067] fuse: Bad value for 'fd' [ 210.218269][ T4747] kworker/u4:11: attempt to access beyond end of device [ 210.218269][ T4747] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.234986][ T9065] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 210.236417][ T9065] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 210.247620][ T9065] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 210.256635][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'. [ 210.316833][ T9079] device syzkaller0 entered promiscuous mode [ 210.328150][ T9076] nvme_fabrics: missing parameter 'nqn=%s' [ 210.420709][ T9072] loop3: detected capacity change from 0 to 32768 [ 210.438403][ T9072] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 210.478928][ T9072] device-mapper: ioctl: Invalid data size in the ioctl structure: 1684406584 [ 210.811655][ T4328] VFS: Lookup of '' in ocfs2 loop3 would have caused loop [ 210.816995][ T4328] VFS: Lookup of '' in ocfs2 loop3 would have caused loop [ 210.869156][ T9099] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1336'. [ 210.890486][ T9101] loop4: detected capacity change from 0 to 256 [ 210.935907][ T9092] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1327'. [ 211.050974][ T9103] loop1: detected capacity change from 0 to 8 [ 211.202718][ T9103] SQUASHFS error: Failed to read block 0x200008f: -5 [ 211.204162][ T9103] SQUASHFS error: Unable to read metadata cache entry [200008f] [ 211.205640][ T9103] SQUASHFS error: Unable to read inode 0x20000000087 [ 211.211222][ T9103] SQUASHFS error: Unable to read metadata cache entry [200008f] [ 211.212718][ T9103] SQUASHFS error: Unable to read inode 0x20000000087 [ 211.333950][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 211.340497][ T9109] nvme_fabrics: missing parameter 'nqn=%s' [ 211.341926][ T4328] VFS: Busy inodes after unmount of loop3 (ocfs2) [ 211.341976][ T4328] ------------[ cut here ]------------ [ 211.343943][ T4328] kernel BUG at fs/super.c:505! [ 211.344918][ T4328] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 211.346227][ T4328] Modules linked in: [ 211.346914][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 211.348276][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 211.349946][ T4328] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 211.351268][ T4328] pc : generic_shutdown_super+0x328/0x32c [ 211.352204][ T4328] lr : generic_shutdown_super+0x328/0x32c [ 211.353166][ T4328] sp : ffff800020fa79d0 [ 211.353890][ T4328] x29: ffff800020fa79d0 x28: ffff0000df01db00 x27: ffff0000df01db00 [ 211.355283][ T4328] x26: dfff800000000000 x25: 0000000000000002 x24: 1fffe000194848fb [ 211.356720][ T4328] x23: ffff0000ca4247d8 x22: dfff800000000000 x21: ffff8000120dd340 [ 211.358139][ T4328] x20: ffff800015a5c0e0 x19: ffff0000ca424000 x18: 1fffe00033e6df7e [ 211.359470][ T4328] x17: ffff80001539d000 x16: ffff800011ba0e90 x15: 0000000000000000 [ 211.360886][ T4328] x14: 0000000000000001 x13: 1fffe00033e6dfa3 x12: 0000000000000000 [ 211.362332][ T4328] x11: ff00800008315498 x10: 0000000000000000 x9 : 27a7c46219296900 [ 211.363787][ T4328] x8 : 27a7c46219296900 x7 : 0000000000000001 x6 : 0000000000000001 [ 211.365218][ T4328] x5 : ffff800020fa7498 x4 : ffff800015484e80 x3 : ffff800008540dd8 [ 211.366617][ T4328] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002f [ 211.368065][ T4328] Call trace: [ 211.368607][ T4328] generic_shutdown_super+0x328/0x32c [ 211.369549][ T4328] kill_block_super+0x78/0xe0 [ 211.370366][ T4328] deactivate_locked_super+0xb4/0x128 [ 211.371335][ T4328] deactivate_super+0xe4/0x104 [ 211.372174][ T4328] cleanup_mnt+0x3a8/0x430 [ 211.372872][ T4328] __cleanup_mnt+0x20/0x30 [ 211.373645][ T4328] task_work_run+0x1f4/0x280 [ 211.374431][ T4328] do_exit+0x54c/0x19ac [ 211.375142][ T4328] do_group_exit+0x198/0x238 [ 211.375922][ T4328] __wake_up_parent+0x0/0x60 [ 211.376703][ T4328] invoke_syscall+0x98/0x290 [ 211.377494][ T4328] el0_svc_common+0x13c/0x258 [ 211.378288][ T4328] do_el0_svc+0x5c/0x134 [ 211.378987][ T4328] el0_svc+0x58/0x128 [ 211.379673][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 211.380478][ T4328] el0t_64_sync+0x18c/0x190 [ 211.381231][ T4328] Code: b0049fc0 91068000 911aa261 97d981af (d4210000) [ 211.382382][ T4328] ---[ end trace 0000000000000000 ]--- [ 211.657771][ T4328] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 211.659025][ T4328] SMP: stopping secondary CPUs [ 211.659824][ T4328] Kernel Offset: disabled [ 211.660576][ T4328] CPU features: 0x0a0000,000f0097,a65bfea7 [ 211.661650][ T4328] Memory Limit: none [ 211.938059][ T4328] Rebooting in 86400 seconds..