last executing test programs: 1m26.807106873s ago: executing program 1 (id=407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x3, 0x8, 0x0) 1m26.693040885s ago: executing program 1 (id=409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000500)="1b", 0x1, 0x80c0c5d) 1m26.146072473s ago: executing program 1 (id=416): socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x28002) syz_usb_disconnect(r0) 1m23.921218097s ago: executing program 1 (id=436): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x6235, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 1m23.15433044s ago: executing program 1 (id=444): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m22.533061369s ago: executing program 1 (id=448): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 1m22.184696424s ago: executing program 32 (id=448): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 3.8814539s ago: executing program 4 (id=942): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="25a5c6ba0e84b763", 0x8}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400000c0) 3.679410523s ago: executing program 4 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 3.491988046s ago: executing program 2 (id=946): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, r0, 0x801, 0x40eca, 0x8000000000000001, 0x10003}) 3.22584396s ago: executing program 2 (id=950): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff08b) 3.22453334s ago: executing program 4 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) 3.096742832s ago: executing program 4 (id=952): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x5505, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.997590404s ago: executing program 2 (id=953): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) 2.864731986s ago: executing program 2 (id=954): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@nolargeio}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8aa, &(0x7f000000b880)="$eJzs3XtsnWUdwPGnXdu1kMEwdFwUGZMBA9nWbVAKwbUd6yiXymVgB0yorMCk4zIKblxLCAmoGMB4IWZRIl6jRHEQiYLTiHJxGGOA+AeRgDFgsuhfoMZQ8/acU9pDaehTnqeBfT7J+p73Pf29Oz3f87wnLKSnt+vszhDqQslQqPb869se++L6rsd//qV7dzx4x7MPlY62N5bvbi9vO8rbzjByspHDtaVDdV/f/nBtsVM79rx7NDXV7BXCxVXnaS1tbmipfN9wlfLh+ZX7a0d3az5f+jNqz+LLH9rX94UQ5o6ZrwkhLH3bD7qb6u1Y01V+TsKYbrPKd9e8dd/Itq70Z+XTIazcEd7x9TGjisc5t2vOxw+c6QfyftDbsaa7qn97uXNNeT22V6/B3VH16/yVBxbfXn4KR15vM5hwWno7uk4Lk6zjY/53wcLh0nWzPoTQEEKYHUJonOkevDc6OpcX79m1lf1y9sr6nzvR6+LwZa/8J4Qwr3gbL10vSu8FwPtLR+fyVROs/4bJ1n/bbdtfs/7h/a+7o3N5sdar1n/jZOt/Y9u650rrvr21NPXmzP4QAAAAAMCErtl6/eV9AwP9m91www03Rm/M9JUJSO2tRT/TjwQAAAAAAAAAAAB4t3L878Qz/TMCAAAAAAAAAAAAwAdFd0/Hrlk14w7NGrtz0M7+ke2KN3ov+95dwxsq2/Ldp05wynGf8z88PDzctmtl5bPYZ1d9XnZj9XBx/qG6N54s77ZXf/5g/cjR+nDRJRsH+pcWf9Wq+rCl2GkpzttVH+4udpYVO2vqw/eLneUjO01hR7Gz+OIrBzYUB06OfMY+WLp7hsKsccXCuFfD2P5D9Qt2VLaTnLJytrpQ7r/vvudsrrqvYuL+b52/450+l5z3xtT6L95S2U5yyret/wNeXfvLie575/6j5+/UP60Jrv/jGlVf96uu//MnOOXo/Lznn7ys6P/I43esLR+qezfX/zHnX1Xdf+Tko9f/4lQnVa7/xXvL6mk9Gbuh7p5bd022/ifvX1d5X68dMzt6ttNOeLat6L/Xou1/Lh+qn2L/kyZb/zXz33Y9YYq6e+4frlr/U+gfDpvglKNNvvbCKU8X/X/y5NrmMfdNpf/q6v5LBjddteSardcfvXFT36X9l/Zf0bp0xXHHtrSuaFkyckUofZ3ec7I7md76H/n8/7EzNSEsHJ1feOyb5xX95327q7d8qHGK/bsmXf8XjX+sjLGgNjQ0hC19g4ObW0pfK7vLSl9L3zZB/ym8/3/siPK3NZW3NSHsPzrful/z/kX/5lmrP1I+1DDF/msm7T80+vcSaZrrf0PVzLj+Q8/c/7Oi/4Ifnlv5N4Wpvv+fPFn/2m9Z/9PV3VP1Dz7vsaL/3+oWHR853u2//9LK0f9X+y48O3L8FP3TytH/ug8fMhg5fqr+aeXo37TixFsjx0/TP60c/Xec0PbdyPHT9U8rR/9vHHXMHyPHe/RPK0f/sw5teTVy/JP6p5Wj/98/tPX8yPEz9E8rR/8lB910Y+T4mfqnlaP/4JyrmyPHz9I/rRz9H6u9dlnk+Nn6p5Wj/2+O3vj7yPG1+qeVo/+eCza9FDl+jv5p5eh/xrK+OyPHz9U/rRz97zux/8HI8U/pn1aO/hce+PAlkeO9+qeVo/9Xm3/aETm+Tv+0cvTfWf/YEZHj5+mfVo7+dXs8unfk+Pn6p5Wj/w0Lv/PfyPEL9E8rR/+Hjrz/xcjx9fqnlaP/a8f/eHvk+Kf1TytH//nH/ODLkeMX6p9Wjv5XHfKnFyLHL9I/rRz9H1383L8ix/v0TytH/5c/8Zf7Isc/o39aOfof1fLi45HjF+ufVo7+az/664l+T9C7sUH/tHL037bPEwOR4/36p5Wj/+9qnqqPHL9E/7Ry9N97r50LIscv1T+tHP2fWnTQPyLHL9M/rRz9w2EH7Iwc36h/Wjn6n39s8wOR45/VP60c/e9t2+e2yPHL9U8rR/9d8+ZcFzk+oH9aOfofekDTmZHjm/RPK0f/W5rqj4scv0L/tHL0f6Sh5uDI8Sv1TytH/9ql3T+KHL9K/7Ry9H9m5elfiBy/Wv+0cvS/e0nHy5Hjm/VPK0f/dfNXPxE5fo3+aeXof9je62J/I/ug/mnl6P/PsH6/yPFr9U8rR//tc8+8OXL8Ov3TytH/poPPWRc5/rnnX982O+ifTI7+vzju9nsix7dY/2nl6L+59dZHIse36p9Wjv6LDr/rr5Hj1+ufVo7+Lx1x578jx2/QP60c/b85+ytzIsdv1D+tHP3PbbznyMjxm/RPK0f/OftvWxU5frP+aeXo/9v97tsQOX6L/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHcn4JrOhf/Hz4wZe0hZi2Qv2WVJYdCgtFiT7LusoayFqJAtKUrKmq0kS0lIu53KUkkp+77v2/8as8T4jNTl/1Pzeb2ua855tvPM9/m+7+9znjn3ee4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABee2sNX23ZgYEho87t9bLrr3vs6AsOXHf4hecefNhFp+935ZkjL11m4lFXL/P8WAZeuLNlRlw3eORNhhx59omDR5wZ/OL7nXSSSQZNMTBo4zyq3df7F8OeZfSJwWPODjpg5J8xJnvhb59qwzMGBgam+hf3V2utYSsMHzF5I/+M6TbBqKtHXT7m9JCRf5Zcf2BgyXUGxrl9vP6eXWP4Kq/3GP4XrDVshZXG6j8wqvML3cde363G3s4n2HedQa9ruNfIWsOGrzyi9bjW8S47H/zCNjAwMOSYgYEhxw4MDDluYGDI8a93D14bw5ZdeNkRz/mjz4+svtfoFwTp+X3QUx86e8T3jKEjv08MOWH09wLgf8uwZRdeLqz/CUdfn9b/Lc/cvKb1D//7Vhq27MIDL3qdP/LSvUb/+z6u/6VmOv/G12/EAAAAwL/ruXvPu3DUvr7BAwMzD4y1v/cFo34uMOiMi66++nUb6H+HsJ/s5b8z8T9mROeJT51lYGDbNV7vofA6GC/2Y/Mf07+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9i41j//9Uoz/vMcE5y4+66RzXHL7V6mN//YjLJv4/H/XrZnzd/z+w5aCRLUc033JgYODDw1Zdfe6BgYHVtzr8mlkHxly3+Ijrlpx6glEHCJj7hY/vH8cdj343+QsHa5h0zH2c8cL9r/T8sRMMGmsQL7LJ8wedtMVajy8y9uc5x/04xhxf4tIPXH/E6PeyDB7rRuPaVkff/+jHMnbnUWOfe8TY599pm+3n33HX3ebdcpsNN9908023XWyBRRZfdMHFFllw/s223HrTBUZ+HNecjTx0xXKvZs4mHHvO7h324jkb+7GNa85meeU5e+Eet7j4umlHz9mQf3POlnvlOZtly9FjXWbowAYvzM2Iv3L5oQO7jDiz4EQjNqFRt51+xG3fO/XggYFD//lAR5yaaMw2OGivLV+D45aM+jxs1Odl43FLzhnXcUsGNh7rfpYY+WmnC0bfbuz3WY+6+FUft2Sp4fvMNWItjvX1/z/8R9//X9Zr8UFjJmr0QUNG3WZkr38eZ2L0tC3zouNMLJaOJfNaetl4Zxk8ZrtO4x31vrhBY83/K70vbmDuWzY4beTjWmaxkV/13H8cJT93rPzP2Qte8twx8MrPHRP88+Q/L930ipnGfu744LiH+JJ1MXqOJhrrRuN67rj48SF7jbj/0WMex3PHyluOeqPxP587Rvy1y41+7hgx9uFDBw4dcWahEWdWGDpw8ogzC79wZpKBi0acmW/j7bbeZMQFK758u5170Et+4TFst8PH2m5fxfFxlr50YGDpi9LjGvd0Zmm7nfAVxpvfzz3wiu/nnmv/Z1YbGBiYduR36REPcuTY/xNpvENeebzh+BMDr3T8iYElFj9tudd4vGPW2Qvb2qjDRa04jq95yTqb6mXrbO8JXrQyXu3rmk3C7Ueenn7MvZ117GV7jZ6joWPd77/6Hj36saT+o1/zvdjgYwYGvdLcrPBq5maKV56bV/v6Ze7ZRl4/ySvMzfTTTLfY6LmZ8N+cmxXGMTcvfj38YoP2GpjkpXMz5IXXwLOPmpvhr2ZuJn9ttptJw+1Hnp5jzEVrP7foHKPnJsxF/P4/+v6H/7tzs8GY7Wb2F66bdfDAhBMO7LLhTjvtsODIj6PPLjTy4yuvweVfzVxO/NrM5YyjnnUGv3xyxly0xJVLrvyfrsHl/925nGVg8Oh/c2859mJ57fj5Tzf9u+nfTf9u+nfTv5v+3fQvNo79/7OM/rngPFfMffWoH8YMveS0NTd5vcf7Ohuv9/+P6vuS/f+brHnaJYMHxlz3ivtnR97mv3L/7GIjP+2+4Ojbjb1/cNTFr3r/7PmHnLvO/9H+2f/I6LX6Kn5u6Pm/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvpX2wc+/8XGP17AM/ds9NNo3aEDt1o2Az/8fusxhPj9f7/UX1fsv//ohmGbTR4YMx1r7j/f+RtOvb/73DDbfv8N+//H71W7f/nX9C/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/YuNY///MqN/D2Dr5669f/TvA1x11LLbvd7jfZ2Nr/v//f//vTz/d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/YuN2v8/MNZ/e/hR20UU9v//bxtH/1X0j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry39P6Z/1NJ/Lf2jlv4f1z9q6b+2/lFL/0/oH7X0X0f/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry/tPx7M0Dj6b6Z/1LL+N9c/aum/hf5RS/8t9Y9a+n9S/6il/1b6Ry39t9Y/aum/jf5RS/9t9Y9a+m+nf9TSf3v9o5b+n9I/aum/g/5RS/8d9Y9a+u+kf9TS/9P6Ry39P6N/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS//P6h+19P+c/lFL/z31j1r676V/1NJ/b/2jlv6f1z9q6b+P/lFL/331j1r6f0H/qKX/F/WPWvp/Sf+opf9++kct/ffXP2rpf4D+UUv/L+sftfQ/UP+opf9B+kct/Q/WP2rpf4j+UUv/Q1/Wf5L/02H9t2rp/xXrP2rpf5j+UUv/r+oftfQ/XP+opf/X9I9a+n9d/6il/xH6Ry39j9Q/aun/Df2jlv7f1D9q6X+U/lFL/2/pH7X0P1r/qKX/t/WPWvp/R/+opf8x+kct/Y/VP2rpf5z+UUv/4/WPWvqfoH/U0v9E/aOW/t/VP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0/57+UUv/7+sftfQ/Xf+opf8P9I9a+p+hf9TS/4f6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/0f6Ry39f6x/1NL/XP2jlv4/0T9q6X+e/lFL/5/qH7X0P1//qKX/BfpHLf0v1D9q6f8z/aOW/hfpH7X0/7n+UUv/X+gftfT/pf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6/07/qKX/7/WPWvr/Qf+opf81+kct/a/VP2rpf53+UUv/6/WPWvr/Uf+opf+f9I9a+v9Z/6il/w36Ry39/6J/1NL/Rv2jlv5/1T9q6f83/aOW/jfpH7X0/7v+UUv/f+gftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v9O/aOW/nfpH7X0v1v/qKX/PfpHLf3v1T9q6X+f/lFL//v1j1r6P6B/1NL/Qf2jlv4P6R+19H9Y/6il/yP6Ry39H9U/aun/mP5RS//H9Y9a+j+hf9TS/0n9o5b+T+kftfR/Wv+opf8z+kct/Z/VP2rp/5z+UUv/5/WPSvoPGtA/auk/SP+opf9g/aOW/hPoH7X0H6J/1NJ/qP5RS/8J9Y9a+k+kf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rp/wb9o5b+U+gftfSfUv+opf9U+kct/d+of9TSf2r9o5b+b9I/aun/Zv2jlv7T6B+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+r9F/6il/1v1j1r6z6R/1NJ/Zv2jlv5v0z9q6T+L/lFL/7frH7X0n1X/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6z6V/1NJ/bv2jlv7v0D9q6f9O/aOW/vPoH7X0f5f+UUv/efWPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/3frH7X0X1T/qKX/YvpHLf0X1z9q6b+E/lFL//foH7X0X1L/qKX/e/WPWvq/T/+opf9S+kct/ZfWP2rpv4z+UUv/YfpHLf2X1T9q6b+c/lFL/+X1j1r6v1//qKX/cP2jlv4r6B+19F9R/6il/0r6Ry39P6B/1NL/g/pHLf1X1j9q6f8h/aOW/h/WP2rp/xH9o5b+H9U/aum/iv5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf/H9I9a+q+lf9TS/+P6Ry3919Y/aun/Cf2jlv7r6B+19F9X/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvp/Uv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/p/SPxp/+w96Sf8d9I/G3/4vXf876h+19N9J/6il/6f1j1r6f0b/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv6f1T9q6f85/aOW/nvqH7X030v/qKX/3vpHLf0/r3/U0n8f/aOW/vvW9H9+pD1f3a1b+n+hpv+/p6X/F/WPWvp/Sf+opf9++kct/ffXP2rpf4D+UUv/L+sftfQ/UP+opf9B+kct/Q/WP2rpf4j+UUv/Q/WPWvp/Rf+opf9h+kct/b+qf9TS/3D9o5b+X9M/aun/df2jlv5H6B+Nv/0Hv/jSQUfqH42//V+6/r+hf9TS/5v6Ry39j9I/aun/Lf2jlv5H6x+19P+2/lFL/+/oH7X0P0b/qKX/sfpHLf2P0z9q6X+8/lFL/xP0j1r6n6h/1NL/u/pHLf1P0j9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv7f0z9q6f99/aOW/qfrH7X0/4H+UUv/M/SPWvr/UP+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvr/SP+opf+PX0X/Uf9zyvP/P4f336al/7nWf9TS/yf6Ry39z9M/aun/U/2jlv7n6x+19L9A/6il/4X6Ry39f6Z/1NL/Iv2jlv4/1z9q6f8L/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X9/V/Vb/I2tL/ir7+r0pL/yv1j1r6X6V/1NL/av2jlv6/0z9q6f97/aOW/n/QP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/n/UP2rp/yf9o5b+f9Y/aul/g/5RS/+/6B+19L9R/6il/1/1j1r6/03/qKX/TfpHLf3/rn/U0v8f+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOS/i+c1P/lWvoP0j9q6T9Y/6il/wT6Ry39h+gftfQfqn/U0n9C/aOW/hPpH7X0n1j/qKX/JPpHLf0n1T9q6T+Z/lFL/8n1j1r6v0H/qKX/FPpHLf2n1D9q6T+V/lFL/zfqH7X0n1r/qKX/m/SPWvq/Wf+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0n9G/aOW/m/RP2rp/1b9o5b+M+kftfSfWf+opf/b9I9a+s+if9TS/+36Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf879I9a+r9T/6il/zz6Ry3936V/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TS/936Ry39F9U/aum/mP5RS//F9Y9a+i/R3n9wvril/3va+49DS/8l9Y9a+r9X/6il//v0j1r6L6V/1NJ/af2jlv7L6B+19B+mf9TSf1n9o5b+y+kftfRfXv+opf/79Y9a+g/XP2rpv4L+UUv/FfWPWvqvpH/U0v8D+kct/T+of9TSf2X9o5b+H9I/aun/Yf2jlv4f0T9q6f9R/aOW/qvoH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/zX1j1r6f0z/qKX/WvpHLf0/rn/U0n9t/aOW/p/QP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/yf1j1r6b6V/1NJ/a/2jlv7b6B+19N9W/6il/3b6Ry39t9c/aun/Kf2jlv476B+19N9R/6il/076Ry39P61/1NL/M/pHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19P+s/lFL/8/pH7X031P/qKX/XvpHLf331j9q6f95/aOW/vvoH7X031f/qKX/F/SPWvp/Uf+opf+X9I9a+u+nf9TSf3/9o5b+B+gftfT/sv5RS/8D9Y9a+h+kf9TS/2D9o5b+h+gftfQ/VP+opf9X9I9a+h+mf9TS/6v6Ry39D9c/aun/Nf2jlv5f1z9q6X+E/lFL/yP1j1r6f0P/qKX/N/WPWvofpX/U0v9b+kct/Y/WP2rp/239o5b+39E/aul/jP5RS/9j9Y9a+h+nf9TS/3j9o5b+J+gftfQ/Uf+opf939Y9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/b+nf9TS//v6Ry39T9c/aun/A/2j8a//JGNOvrj/GfpH41//vP5/qH/U0v9M/aOW/mfpH7X0P1v/qKX/OfpHLf1/pH/U0v/H+kct/c/VP2rp/xP9o5b+5+kftfT/qf5RS//z9Y9a+l+gf9TS/0L9o5b+P9M/aul/kf5RS/+f6x+19P+F/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf/v9I9a+v9e/6il/x/0j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/x/1j1r6/0n/qKX/n/WPWvrfoH/U0v8v+kct/W/UP2rp/1f9o5b+f9M/aul/k/5RS/+/6x+19P+H/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/1NL/Wf2jlv7P6R+19H9e/6ik/wQD+kct/QfpH7X0H6x/1NJ/Av2jlv5D9I9a+g/VP2rpP6H+UUv/ifSPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf3foH/U0n8K/aOW/lPqH7X0n0r/qKX/G/WPWvpPrX/U0v9N+kct/d+sf9TSfxr9o5b+0+oftfSfTv+opf/0+kct/WfQP2rpP6P+UUv/t+gftfR/q/5RS/+Z9I9a+s+sf9TS/236Ry39Z9E/aun/dv2jlv6z6h+19J9N/6il/+z6Ry3959A/auk/p/5RS/+59I9a+s+tf9TS/x36Ry3936l/1NJ/Hv2jlv7v0j9q6T+v/lFL//n0j1r6z69/1NJ/Af2jlv4Ljuw/0es1rP9WLf0Xsv6jlv4L6x+19F9E/6il/7v1j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/3v0j1r6L6l/1NL/vfpHLf3fp3/U0n8p/aOW/kvrH7X0X0b/qKX/MP2jlv7L6h+19F9O/6il//L6Ry39369/1NJ/uP5RS/8V9I9a+q+of9TSfyX9o5b+H9A/aun/Qf2jlv4r6x+19P+Q/lFL/w/rH7X0/4j+UUv/j+oftfRfRf+opf+q+kct/VfTP2rpv7r+UUv/NfSPWvqvqX/U0v9j+kct/dfSP2rp/3H9o5b+a+sftfT/hP5RS/919I9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvpvqn/U0n8z/aOW/pvrH7X030L/qKX/lvpHLf0/qX/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf230z9q6b+9/lFL/0/pH7X030H/qKX/jvpHLf130j9q6f9p/aOW/p/RP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/Z/WPWvp/Tv+opf+e+kct/ffSP2rpv7f+UUv/z+sftfTfR/+opf+++kct/b+gf9TS/4v6Ry39v6R/1NJ/P/2jlv776x+19D9A/6il/5f1j1r6H6h/1NL/IP2jlv4H6x+19D9E/6il/6H6Ry39v6J/1NL/MP2jlv5f1T9q6X+4/lFL/6/pH7X0/7r+UUv/I/SPWvofqX/U0v8b+kct/b+pf9TS/yj9o5b+39I/aul/tP5RS/9v6x+19P+O/lFL/2P0j1r6H6t/1NL/OP2jlv7H6x+19D9B/6il/4n6Ry39v6t/1NL/JP2jlv4n6x+19D9F/6il/6n6Ry39T9M/aun/Pf2jlv7f1z9q6X+6/lFL/x/oH7X0P0P/qKX/D/WPWvqfqX/U0v8s/aOW/mfrH7X0P0f/qKX/j/SPWvr/WP+opf+5+kct/X+if9TS/zz9o5b+P9U/aul/vv5RS/8L9I9a+l+of9TS/2f6Ry39L9I/aun/c/2jlv6/0D9q6f9L/aOW/r/SP2rp/2v9o5b+v9E/aun/W/2jlv4X6x+19L9E/6il/6X6v8yERf0v0z9q6X+5/lFL/yv0j1r6X6l/1NL/Kv2jlv5X6x+19P+d/lFL/9/rH7X0/4P+UUv/a/SPWvpfq3/U0v86/aOW/tfrH7X0/6P+UUv/P+kftfT/s/5RS/8b9I9a+v9F/6il/436Ry39/6p/1NL/b/pHLf1v0j9q6f93/aOW/v/QP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X/36zWe/3It/e+x/qOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kcl/YcM6B+19B+kf9TSf7D+UUv/CfSPWvoP0T9q6T9U/6il/4T6Ry39J9I/auk/sf5RS/9J9I9a+k+qf9TSfzL9o5b+k+sftfR/g/5RS/8p9I9a+k+pf9TSfyr9o5b+b9Q/auk/tf5RS/836R+19H+z/lFL/2n0j1r6T6t/1NJ/Ov2jlv7T6x+19J9B/6il/4z6Ry3936J/1NL/rfpHLf1n0j9q6T+z/lFL/7fpH7X0n0X/qKX/2/WPWvrPqn/U0n82/aOW/rPrH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3foH7X0f6f+UUv/efSPWvq/S/+opf+8+kct/efTP2rpP7/+UUv/BfSPWvovqH/U0n8h/aOW/gvrH7X0X0T/qKX/u/WPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/e/SPWvovqX/U0v+9+kct/d+nf9TSfyn9o5b+S+sftfRfRv+opf8w/aOW/svqH7X0X07/qKX/8vpHLf3fr3/U0n+4/lFL/xX0j1r6r6h/1NJ/Jf2jlv4f0D9q6f9B/aOW/ivrH7X0/5D+UUv/D+sftfT/iP5RS/+P6h+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TS/2P6Ry3919I/aun/cf2jlv5r6x+19P+E/lFL/3X0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/T+pf9TSfyv9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/T+kftfTfQf+opf+O+kct/XfSP2rp/2n9o5b+n9E/aum/s/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf9n9Y9a+n9O/6il/576Ry3999I/aum/t/5RS//P6x+19N9H/6il/776Ry39v6B/1NL/i/pHLf2/pH/U0n8//aOW/vvrH7X0P0D/qKX/l/WPWvofqH/U0v8g/aOW/gfrH7X0P0T/qKX/ofpHLf2/on/U0v8w/aOW/l/VP2rpf7j+UUv/r+kftfT/uv5RS/8j9I9a+h+pf9TS/xv6Ry39v6l/1NL/KP2jlv7f0j9q6X+0/lFL/2/rH7X0/47+UUv/Y/SPWvofq3/U0v84/aOW/sfrH7X0P0H/qKX/ifpHLf2/q3/U0v8k/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6f89/aOW/t/XP2rpf7r+UUv/H+gftfQ/Q/+opf8P9Y9a+p+pf9TS/yz9o5b+Z+sftfQ/R/+opf+P9I9a+v9Y/6il/7n6Ry39f6J/1NL/PP2jlv4/1T9q6X++/lFL/wv0j1r6X6h/1NL/Z/pHLf0v0j9q6f9z/aOW/r/QP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6f9b/aOW/hfrH7X0v0T/qKX/pfpHLf0v0z9q6X+5/lFL/yv0j1r6X6l/1NL/Kv2jlv5X6x+19P+d/lFL/9/rH7X0/4P+UUv/a/SPWvpfq3/U0v86/aOW/tfrH7X0/6P+UUv/P+kftfT/s/5RS/8b9I9a+v9F/6il/436Ry39/6p/1NL/b/pHLf1v0j9q6f93/aOW/v/QP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/ckpL//v0j1r6369/1NL/Af2jlv4P6h+19H9I/6il/8P6Ry39H9E/aun/qP5RS//H9I9a+j+uf9TS/wn9o5b+T7b2X+eVr27p/1Rr/3+hpf/T+kct/Z/RP2rp/6z+UUv/5/SPWvo/r39U0n/ogP5RS/9B+kct/QfrH7X0n0D/qKX/EP2jlv5D9Y9a+k+of9TSfyL9o5b+E+sftfSfRP+opf+k+kct/SfTP2rpP7n+UUv/N+gftfSfQv+opf+U+kct/afSP2rp/0b9o5b+U+sftfR/k/5RS/836x+19J9G/6il/7T6Ry39p9M/auk/vf5RS/8Z9I9a+s+of9TS/y36Ry3936p/1NJ/Jv2jlv4z6x+19H+b/lFL/1n0j1r6v13/qKX/rPpHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19H+H/lFL/3fqH7X0n0f/qKX/u/SPWvrPq3/U0n8+/aOW/vPrH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6v1v/qKX/ovpHLf0X0z9q6b+4/lFL/yX0j1r6v0f/qKX/kvpHLf3fq3/U0v99+kct/ZfSP2rpv7T+UUv/ZfSPWvoP0z9q6b+s/lFL/+X0j1r6L69/1NL//fpHLf2H6x+19F9B/6il/4r6Ry39V9I/aun/Af2jlv4f1D9q6b+y/lFL/w/pH7X0/7D+UUv/j+gftfT/qP5RS/9V9I/Gz/7PTzkwVv9V9Y/Gz/4jvbj/avpHLf1X1z9q6b+G/lFL/zX1j1r6f0z/qKX/WvpHLf0/rn/U0n9t/aOW/p/QP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/yf1j1r6b6V/1NJ/a/2jlv7b6B+19N9W/6il/3b6Ry39t9c/aun/Kf2jlv476B+19N9R/6il/076Ry39P61/1NL/M/pHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19P+s/lFL/8/pH7X031P/qKX/XvpHLf331j9q6f95/aOW/vvoH7X031f/qKX/F/SPWvp/Uf+opf+X9I9a+u+nf9TSf3/9o5b+B+gftfT/sv5RS/8D9Y9a+h+kf9TS/2D9o5b+h+gftfQ/VP+opf9X9I9a+h+mf9TS/6v6Ry39D9c/aun/Nf2jlv5f1z9q6X+E/lFL/yP1j1r6f0P/qKX/N/WPWvofpX/U0v9b+kct/Y/WP2rp/239o5b+39E/aul/jP5RS/9j9Y9a+h+nf9TS/3j9o5b+J+gftfQ/Uf+opf939Y9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/b+nf9TS//v6Ry39T9c/aun/A/2jlv5n6B+19P+h/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19P+R/lFL/x/rH7X0P1f/qKX/T/SPWvqfp3/U0v+n+kct/c/XP2rpf4H+UUv/C/WPWvr/TP+opf9F+kct/X+uf9TS/xf6Ry39f6l/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/2L9o5b+l+gftfS/VP+opf9l+kct/S/XP2rpf4X+UUv/K/WPWvpfpX/U0v9q/aOW/r/TP2rp/3v9o5b+f9A/aul/jf5RS/9r9Y9a+l+nf9TS/3r9o5b+f9Q/aun/J/2jlv5/1j9q6X+D/lFL/7/oH7X0v1H/qKX/X/WPWvr/Tf+opf9N+kct/f+uf9TS/x/6Ry39b9Y/aul/i/5RS/9b9Y9a+t+mf9TS/3b9o5b+d+gftfS/U/+opf9d+kct/e/WP2rpf4/+UUv/e/WPWvrfp3/U0v9+/aOW/g/oH7X0f1D/qKX/Q/pHLf0f1j9q6f+I/lFL/0f1j1r6P6Z/1NL/cf2jlv5P6B+19H9S/6il/1P6Ry39n9Y/aun/jP5RS/9n9Y9a+j+nf9TS/3n9o5L+Ew7oH7X0H6R/1NJ/sP5RS/8J9I9a+g/RP2rpP1T/qKX/hPpHLf0n0j9q6T+x/lFL/0n0j1r6T6p/1NJ/Mv2jlv6T6x+19H+D/lFL/yn0j1r6T6l/1NJ/Kv2jlv5v1D9q6T+1/lFL/zfpH7X0f7P+UUv/afSPWvpPq3/U0n86/aOW/tPrH7X0n0H/qKX/jPpHLf3fon/U0v+t+kct/WfSP2rpP7P+UUv/t+kftfSfRf+opf/b9Y9a+s+qf9TSfzb9o5b+s+sftfSfQ/+opf+c+kct/efSP2rpP7f+UUv/d+gftfR/p/5RS/959I9a+r9L/6il/7z6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+79Y9a+i+qf9TSfzH9o5b+i+sftfRfQv+opf979I9a+i+pf9TS/736Ry3936d/1NJ/Kf2jlv5L6x+19F9G/6il/zD9o5b+y+oftfRfTv+opf/y+kct/d+vf9TSf7j+UUv/FfSPWvqvqH/U0n8l/aOW/h/QP2rp/0H9o5b+K+sftfT/kP5RS/8P6x+19P+I/lFL/4/qH7X0X0X/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NL/Y/pHLf3X0j9q6f9x/aOW/mvrH7X0/4T+UUv/dfSPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39P6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/9P6R+19N9B/6il/476Ry39d9I/aun/af2jlv6f0T9q6b+z/lFL/130j1r676p/1NJ/N/2jlv676x+19N9D/6il/2f1j1r6f07/qKX/nvpHLf330j9q6b+3/lFL/8/rH7X030f/qKX/vvpHLf2/oH/U0v+L+kct/b+kf9TSfz/9o5b+++sftfQ/QP+opf+X9Y9a+h+of9TS/yD9o5b+B+sftfQ/RP+opf+h+kct/b+if9TS/zD9o5b+X9U/aul/uP5RS/+v6R+19P+6/lFL/yP0j1r6H6l/1NL/G/pHLf2/qX/U0v8o/aOW/t/SP2rpf7T+UUv/b+sftfT/jv5RS/9j9I9a+h+rf9TS/zj9o5b+x+sftfQ/Qf+opf+J+kct/b+rf9TS/yT9o5b+J+sftfQ/Rf+opf+p+kct/U/TP2rp/z39o5b+39c/aul/uv5RS/8f6B+19D9D/6il/w/1j1r6n6l/1NL/LP2jlv5n6x+19D9H/6il/4/0j1r6/1j/qKX/ufpHLf1/on/U0v88/aOW/j/VP2rpf77+UUv/C/SPWvpfqH/U0v9n+kct/S/SP2rp/3P9o5b+v9A/aun/S/2jlv6/0j9q6f9r/aOW/r/RP2rp/1v9o5b+F+sftfS/RP+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvpfqX/U0v8q/aOW/lfrH7X0/53+UUv/3+sftfT/g/5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfT/o/5RS/8/6R+19P+z/lFL/xv0j1r6/0X/qKX/jfpHLf3/qn/U0v9v+kct/W/SP2rp/3f9o5b+/9A/aul/s/5RS/9b9I9a+t+qf9TS/zb9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/e/SPWvrfq3/U0v8+/aOW/vfrH7X0f0D/qKX/g/pHLf0f0j9q6f+w/lFL/0f0j1r6P6p/1NL/Mf2jlv6P6x+19H9C/6il/5P6Ry39n9I/aun/tP5RS/9n9I9a+j+rf9TS/zn9o5b+z+sflfSfaED/qKX/IP2jlv6D9Y9a+k+gf9TSf4j+UUv/ofpHLf0n1D9q6T+R/lFL/4n1j1r6T6J/1NJ/Uv2jlv6T6R+19J9c/6il/xv0j1r6T6F/1NJ/Sv2jlv5T6R+19H+j/lFL/6n1j1r6v0n/qKX/m/WPWvpPo3/U0n9a/aOW/tPpH7X0n17/qKX/DPpHLf1n1D9q6f8W/aOW/m/VP2rpP5P+UUv/mfWPWvq/Tf+opf8s+kct/d+uf9TSf1b9o5b+s+kftfSfXf+opf8c+kct/efUP2rpP5f+UUv/ufWPWvq/Q/+opf879Y9a+s+jf9TS/136Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/d+tf9TSf1H9o5b+i+kftfRfXP+opf8S+kct/d+jfzQ+939R74mW1D8an/u/eP2/V/+opf/79I9a+i+lf9TSf2n9o5b+y+gftfQfpn/U0n9Z/aOW/svpH7X0X17/qKX/+/WPWvoP1z9q6b+C/lFL/xX1j1r6r6R/1NL/A/pHLf0/qH/U0n9l/aOW/h/SP2rp/2H9o5b+H9E/aun/Uf2jlv6r6B+19F9V/6il/2r6Ry39V9c/aum/hv5RS/819Y9a+n9M/6il/1r6Ry39P65/1NJ/bf2jlv6f0D9q6b+O/lFL/3X1j1r6r6d/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf8n9Y9a+m+lf9TSf2v9o5b+2+gftfTfVv+opf92+kct/bfXP2rp/yn9o5b+O+gftfTfUf+opf9O+kct/T+tf9TS/zP6Ry39d9Y/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfT/rP5RS//P6R+19N9T/6il/176Ry3999Y/aun/ef2jlv776B+19N9X/6il/xf0j1r6f1H/qKX/l/SPWvrvp3/U0n9//aOW/gfoH7X0/7L+UUv/A/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/V/SPWvofpn/U0v+r+kct/Q/XP2rp/zX9o5b+X9c/aul/hP5RS/8j9Y9a+n9D/6il/zf1j1r6H6V/1NL/W/pHLf2P1j9q6f9t/aOW/t/RP2rpf4z+UUv/Y/WPWvofp3/U0v94/aOW/ifoH7X0P1H/qKX/d/WPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/afpHLf2/p3/U0v/7+kct/U/XP2rp/wP9o5b+Z+gftfT/of5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfT/kf5RS/8f6x+19D9X/6il/0/0j1r6n6d/1NL/p/pHLf3P1z9q6X+B/lFL/wv1j1r6/0z/qKX/RfpHLf1/rn/U0v8X+kct/X+pf9TS/1f6Ry39f61/1NL/N/pHLf1/q3/U0v9i/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1z9q6X+F/lFL/yv1j1r6X6V/1NL/av2jlv6/0z9q6f97/aOW/n/QP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/n/UP2rp/yf9o5b+f9Y/aul/g/5RS/+/6B+19L9R/6il/1/1j1r6/03/qKX/TfpHLf3/rn/U0v8f+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOS/hMP6B+19B+kf9TSf7D+UUv/CfSPWvoP0T9q6T9U/6il/4T6Ry39J9I/auk/sf5RS/9J9I9a+k+qf9TSfzL9o5b+k+sftfR/g/5RS/8p9I9a+k+pf9TSfyr9o5b+b9Q/auk/tf5RS/836R+19H+z/lFL/2n0j1r6T6t/1NJ/Ov2jlv7T6x+19J9B/6il/4z6Ry3936J/1NL/rfpHLf1n0j9q6T+z/lFL/7fpH7X0n0X/qKX/2/WPWvrPqn/U0n82/aOW/rPrH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3foH7X0f6f+UUv/efSPWvq/S/+opf+8+kct/efTP2rpP7/+UUv/BfSPWvovqH/U0n8h/aOW/gvrH7X0X0T/qKX/u/WPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/e/SPWvovqX/U0v+9+kct/d+nf9TSfyn9o5b+S+sftfRfRv+opf8w/aOW/svqH7X0X07/qKX/8vpHLf3fr3/U0n+4/lFL/xX0j1r6r6h/1NJ/Jf2jlv4f0D9q6f9B/aOW/ivrH7X0/5D+UUv/D+sftfT/iP5RS/+P6h+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TS/2P6Ry3919I/aun/cf2jlv5r6x+19P+E/lFL/3X0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/T+pf9TSfyv9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/T+kftfTfQf+opf+O+kct/XfSP2rp/2n9o5b+n9E/aum/s/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf9n9Y9a+n9O/6il/576Ry3999I/aum/t/5RS//P6x+19N9H/6il/776Ry39v6B/1NL/i/pHLf2/pH/U0n8//aOW/vvrH7X0P0D/qKX/l/WPWvofqH/U0v8g/aOW/gfrH7X0P0T/qKX/ofpHLf2/on/U0v8w/aOW/l/VP2rpf7j+UUv/r+kftfT/uv5RS/8j9I8a+l8+MDDxkfpHDf1HrP9v6B+19P+m/lFL/6P0j1r6f0v/qKX/0fpHLf2/rX/U0v87+kct/Y/RP2rpf6z+UUv/4/SPWvofr3/U0v8E/aOW/ifqH7X0/67+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/9/SPWvp/X/+opf/p+kct/X+gf9TS/wz9o5b+P9Q/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+P9I/aun/Y/2jlv7n6h+19P+J/lFL//P0j1r6/1T/qKX/+fpHLf0v0D9q6X+h/lFL/5/pH7X0v0j/qKX/z/WPWvr/Qv+opf8v9Y9a+v9K/6il/6/1j1r6/0b/qKX/b/WPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/d/pHLf1/r3/U0v8P+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v+P+kct/f80rv6D/4/G9V+qpf+frf+opf8N+kct/f+if9TS/0b9o5b+f9U/aun/N/2jlv436R+19P+7/lFL/3/oH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j0r6TzKgf9TSf5D+UUv/wfpHLf0n0D9q6T9E/6il/1D9o5b+E+oftfSfSP+opf/E+kct/SfRP2rpP6n+UUv/yfSPWvpPrn/U0v8N+kct/afQP2rpP6X+UUv/qfSPWvq/Uf+opf/U+kct/d+kf9TS/836Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+M+oftfR/i/5RS/+36h+19J9J/6il/8z6Ry3936Z/1NJ/Fv2jlv5v1z9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/9z6Ry3936F/1NL/nfpHLf3n0T9q6f8u/aOW/vPqH7X0n0//qKX//PpH411/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//8/ITR2") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x62042, 0x11b) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000840), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101, 0x1) 2.224797536s ago: executing program 0 (id=958): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f00000003c0)='./file1\x00', 0x44000, 0x1e8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x12) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/117, 0x75, 0x41) 1.865064161s ago: executing program 3 (id=960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38) 1.717954664s ago: executing program 3 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.508053657s ago: executing program 4 (id=962): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f000006b000)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000000c0)={0x40004000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r0, &(0x7f0000000000)) 1.507925717s ago: executing program 3 (id=963): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.402870019s ago: executing program 2 (id=964): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f00000078c0)=""/86, 0x56}], 0x1) 1.33007838s ago: executing program 3 (id=965): r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.092265024s ago: executing program 0 (id=966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 451.089053ms ago: executing program 4 (id=967): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x60, 0x4, 0xffffffff, 0x4, 0x7, 0x10006, 0x9, r2}, 0x20) 450.958913ms ago: executing program 3 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 450.272233ms ago: executing program 0 (id=975): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 281.678536ms ago: executing program 3 (id=969): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]}) 172.563968ms ago: executing program 0 (id=970): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x6b1, &(0x7f00000021c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 56.122069ms ago: executing program 0 (id=971): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) 0s ago: executing program 0 (id=972): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = dup(r0) write$FUSE_ENTRY(r1, &(0x7f0000002b40)={0x90, 0x0, 0x0, {0x4, 0x2, 0x4, 0x2e4, 0xe, 0x6, {0x2, 0x5, 0x6, 0x0, 0xfffffffffffffaee, 0x6, 0x80000001, 0x6, 0x4, 0x6000, 0x4, 0x0, 0x0, 0x192, 0x5}}}, 0x90) kernel console output (not intermixed with test programs): e number: 1 but max is 0 [ 108.458346][ T5810] usb 1-1: config 0 has no interface number 0 [ 108.491885][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.543796][ T5810] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.570548][ T5810] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 108.610994][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.662595][ T5810] usb 1-1: config 0 descriptor?? [ 108.816126][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.301353][ T5810] uclogic 0003:28BD:0094.0002: pen parameters not found [ 109.350002][ T5810] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 109.576297][ T23] usb 1-1: USB disconnect, device number 3 [ 109.800731][ T6230] loop2: detected capacity change from 0 to 4096 [ 109.905091][ T6230] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 110.199305][ T5775] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 110.370653][ T6249] process 'syz.2.122' launched './file2' with NULL argv: empty string added [ 110.962817][ T6263] syzkaller1: entered promiscuous mode [ 110.968377][ T6263] syzkaller1: entered allmulticast mode [ 111.081400][ T6268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.127'. [ 111.324289][ T6275] loop0: detected capacity change from 0 to 1024 [ 112.499491][ T6307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.507355][ T6307] IPv6: NLM_F_CREATE should be set when creating new route [ 113.167347][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 113.177734][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 113.454093][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 113.460229][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 113.721566][ T28] audit: type=1326 audit(1750125043.183:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.770259][ T28] audit: type=1326 audit(1750125043.213:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.799724][ T28] audit: type=1326 audit(1750125043.223:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.825335][ T28] audit: type=1326 audit(1750125043.223:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.859068][ T6337] loop3: detected capacity change from 0 to 256 [ 113.877280][ T6337] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.892064][ T28] audit: type=1326 audit(1750125043.223:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.934850][ T6337] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 113.943937][ T6320] ceph: No mds server is up or the cluster is laggy [ 113.968694][ T28] audit: type=1326 audit(1750125043.233:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 113.992351][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 113.998468][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 114.013109][ T6337] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d) [ 114.058040][ T28] audit: type=1326 audit(1750125043.233:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff671d2ab19 code=0x7ffc0000 [ 114.158854][ T28] audit: type=1326 audit(1750125043.233:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff671d2ab19 code=0x7ffc0000 [ 114.247735][ T28] audit: type=1326 audit(1750125043.233:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff671d2ab19 code=0x7ffc0000 [ 114.298824][ T28] audit: type=1326 audit(1750125043.233:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff671d2ab19 code=0x7ffc0000 [ 114.348560][ T6340] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.448579][ T6342] loop3: detected capacity change from 0 to 512 [ 114.515226][ T6342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.599212][ T6342] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.679988][ T6342] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.155: bg 0: block 248: padding at end of block bitmap is not set [ 114.786319][ T6342] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.155: Failed to acquire dquot type 1 [ 114.823183][ T6342] EXT4-fs (loop3): 1 truncate cleaned up [ 114.840973][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.117932][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.444787][ T6353] loop1: detected capacity change from 0 to 1024 [ 115.468361][ T6353] EXT4-fs: Ignoring removed oldalloc option [ 115.502079][ T6353] EXT4-fs: Ignoring removed orlov option [ 115.512704][ T6353] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 115.580770][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.862436][ T6353] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.160: Allocating blocks 257-513 which overlap fs metadata [ 116.016604][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.027983][ T6363] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 116.315301][ T6365] loop1: detected capacity change from 0 to 1024 [ 116.407308][ T6351] loop3: detected capacity change from 0 to 40427 [ 116.411806][ T6365] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.164: Failed to acquire dquot type 0 [ 116.449752][ T6351] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 116.534923][ T6365] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 116.563677][ T6351] F2FS-fs (loop3): invalid crc value [ 116.574701][ T6365] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.164: corrupted inode contents [ 116.599507][ T6351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.602259][ T6365] EXT4-fs error (device loop1): ext4_dirty_inode:6100: inode #13: comm syz.1.164: mark_inode_dirty error [ 116.625811][ T6365] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.164: corrupted inode contents [ 116.649540][ T6365] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.164: mark_inode_dirty error [ 116.681267][ T6365] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.164: corrupted inode contents [ 116.715075][ T6365] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 116.752278][ T6365] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.164: corrupted inode contents [ 116.791979][ T6365] EXT4-fs error (device loop1): ext4_truncate:4283: inode #13: comm syz.1.164: mark_inode_dirty error [ 116.813633][ T6365] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 116.834802][ T6365] EXT4-fs (loop1): 1 truncate cleaned up [ 116.856485][ T6365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.912220][ T6351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.010689][ T6365] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.071263][ T6365] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.094112][ T6365] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.164: Failed to acquire dquot type 0 [ 117.143942][ T5774] syz-executor: attempt to access beyond end of device [ 117.143942][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.170202][ T6365] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.179201][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.315569][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.692345][ T6386] input: syz0 as /devices/virtual/input/input5 [ 118.243427][ T6402] xt_bpf: check failed: parse error [ 118.292055][ T6403] loop3: detected capacity change from 0 to 1024 [ 118.328605][ T6403] EXT4-fs: Ignoring removed oldalloc option [ 118.356372][ T6403] EXT4-fs: Ignoring removed orlov option [ 118.386582][ T6403] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 118.429617][ T6403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.539059][ T6403] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.180: Allocating blocks 497-513 which overlap fs metadata [ 118.593867][ T6411] Invalid ELF header magic: != ELF [ 118.820195][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.243304][ T6407] loop1: detected capacity change from 0 to 32768 [ 119.297676][ T6407] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.551006][ T6407] XFS (loop1): Ending clean mount [ 119.813050][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.665175][ T6472] bridge0: entered promiscuous mode [ 120.681428][ T6472] macvlan2: entered promiscuous mode [ 120.706456][ T6472] bridge0: port 3(macvlan2) entered blocking state [ 120.720987][ T6472] bridge0: port 3(macvlan2) entered disabled state [ 120.734900][ T6472] macvlan2: entered allmulticast mode [ 120.740568][ T6472] bridge0: entered allmulticast mode [ 120.755765][ T6472] macvlan2: left allmulticast mode [ 120.761545][ T6472] bridge0: left allmulticast mode [ 120.767787][ T28] kauditd_printk_skb: 2628 callbacks suppressed [ 120.767801][ T28] audit: type=1326 audit(1750125050.243:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 120.810789][ T6472] bridge0: left promiscuous mode [ 120.843080][ T28] audit: type=1326 audit(1750125050.243:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 120.929136][ T28] audit: type=1326 audit(1750125050.273:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 120.959377][ T28] audit: type=1326 audit(1750125050.273:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 120.986800][ T28] audit: type=1326 audit(1750125050.273:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 121.025691][ T28] audit: type=1326 audit(1750125050.283:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 121.058432][ T28] audit: type=1326 audit(1750125050.283:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 121.079186][ T6464] loop1: detected capacity change from 0 to 32768 [ 121.128954][ T6464] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.146049][ T28] audit: type=1326 audit(1750125050.283:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 121.168349][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.302181][ T6464] XFS (loop1): Ending clean mount [ 121.475474][ T6492] loop2: detected capacity change from 0 to 2048 [ 121.628191][ T6496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.682604][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.389870][ T6490] loop3: detected capacity change from 0 to 40427 [ 122.463663][ T6490] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 122.504933][ T6490] F2FS-fs (loop3): invalid crc value [ 122.560060][ T6490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.579719][ T6509] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 122.749562][ T6490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.962927][ T6518] loop1: detected capacity change from 0 to 128 [ 123.050348][ T5774] syz-executor: attempt to access beyond end of device [ 123.050348][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.094724][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 123.292195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.511345][ T6529] syz.0.230 (6529) used obsolete PPPIOCDETACH ioctl [ 124.204922][ T6527] loop1: detected capacity change from 0 to 32768 [ 124.228925][ T6527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.229 (6527) [ 124.307177][ T6527] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.328243][ T6527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.348517][ T6527] BTRFS info (device loop1): doing ref verification [ 124.363080][ T6527] BTRFS info (device loop1): turning on async discard [ 124.378801][ T6527] BTRFS info (device loop1): force clearing of disk cache [ 124.395731][ T6527] BTRFS info (device loop1): doing ref verification [ 124.419684][ T6527] BTRFS info (device loop1): disabling free space tree [ 124.456761][ T6527] BTRFS info (device loop1): max_inline at 4096 [ 124.641420][ T6527] BTRFS info (device loop1): rebuilding free space tree [ 124.677716][ T6527] BTRFS info (device loop1): disabling free space tree [ 124.691065][ T6527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.702856][ T6527] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.113712][ T5776] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.850660][ T6590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.245'. [ 127.007641][ T6629] loop1: detected capacity change from 0 to 128 [ 127.061931][ T5762] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.136723][ T28] audit: type=1800 audit(1750125056.603:2655): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 127.179632][ T6629] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 127.201921][ T6629] FAT-fs (loop1): Filesystem has been set read-only [ 127.213289][ T6629] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 127.230788][ T6633] loop2: detected capacity change from 0 to 128 [ 127.272001][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 127.293200][ T5762] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.316487][ T5762] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.338615][ T28] audit: type=1800 audit(1750125056.803:2656): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 127.370672][ T5762] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 127.390174][ T5762] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 127.423848][ T5762] usb 1-1: Product: syz [ 127.441136][ T5762] usb 1-1: Manufacturer: syz [ 127.465322][ T5762] hub 1-1:4.0: USB hub found [ 127.477420][ T12] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 127.490821][ T12] FAT-fs (loop2): Filesystem has been set read-only [ 127.499175][ T12] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 127.572270][ T6635] Zero length message leads to an empty skb [ 127.676578][ T5762] hub 1-1:4.0: 2 ports detected [ 128.220768][ T6652] veth1_to_bond: entered allmulticast mode [ 128.227909][ T6652] veth1_to_bond: entered promiscuous mode [ 128.236897][ T6651] veth1_to_bond: left promiscuous mode [ 128.244527][ T6651] veth1_to_bond: left allmulticast mode [ 128.291526][ T5762] usb 1-1: USB disconnect, device number 4 [ 128.525764][ T6658] program syz.1.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.685429][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 129.101611][ T6664] loop2: detected capacity change from 0 to 32768 [ 129.146716][ T6664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 129.296564][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 129.628680][ T6687] loop2: detected capacity change from 0 to 512 [ 129.679776][ T6687] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.287: bad orphan inode 11862016 [ 129.703201][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 129.721568][ T6687] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.774277][ T6687] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 129.881021][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.985218][ T6724] netlink: 'syz.2.303': attribute type 29 has an invalid length. [ 131.004285][ T6724] netlink: 'syz.2.303': attribute type 29 has an invalid length. [ 131.083887][ T6724] netlink: 'syz.2.303': attribute type 29 has an invalid length. [ 131.164563][ T6714] loop3: detected capacity change from 0 to 32768 [ 131.179444][ T6714] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.298 (6714) [ 131.232156][ T6714] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 131.262076][ T6714] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 131.271594][ T6714] BTRFS info (device loop3): using free space tree [ 131.381922][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.461934][ T6714] BTRFS info (device loop3): enabling ssd optimizations [ 131.486541][ T6714] BTRFS info (device loop3): auto enabling async discard [ 131.596315][ T5834] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.611034][ T5834] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.632063][ T5834] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.641173][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.682848][ T6727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.704276][ T5834] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 131.842024][ T5762] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.971352][ T5774] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 131.973082][ T5834] usb 1-1: USB disconnect, device number 5 [ 132.045451][ T5762] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.065695][ T5762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.076134][ T6741] loop1: detected capacity change from 0 to 32768 [ 132.104412][ T5762] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.118974][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.158206][ T5762] usb 3-1: Product: syz [ 132.164760][ T6741] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.306 (6741) [ 132.184094][ T5762] usb 3-1: Manufacturer: syz [ 132.200372][ T5762] usb 3-1: SerialNumber: syz [ 132.219903][ T5762] usb 3-1: config 0 descriptor?? [ 132.256085][ T6741] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.266475][ T5762] usb 3-1: selecting invalid altsetting 0 [ 132.289126][ T6741] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 132.299282][ T6741] BTRFS info (device loop1): enabling disk space caching [ 132.313536][ T6741] BTRFS info (device loop1): force clearing of disk cache [ 132.336155][ T6741] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.359188][ T6741] BTRFS info (device loop1): use zstd compression, level 3 [ 132.367179][ T6741] BTRFS info (device loop1): disk space caching is enabled [ 132.669817][ T6741] BTRFS info (device loop1): enabling ssd optimizations [ 132.682561][ T6741] BTRFS info (device loop1): auto enabling async discard [ 132.701046][ T6741] BTRFS info (device loop1): rebuilding free space tree [ 132.726523][ T5834] usb 3-1: USB disconnect, device number 2 [ 132.736443][ T6741] BTRFS info (device loop1): disabling free space tree [ 132.755082][ T6741] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.766603][ T6741] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.897043][ T5776] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 133.101471][ T6191] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop1 scanned by udevd (6191) [ 133.153454][ T6776] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 133.597518][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.604873][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.221302][ T6810] loop2: detected capacity change from 0 to 256 [ 134.322572][ T6810] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 134.355509][ T6810] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005) [ 134.385074][ T6810] exFAT-fs (loop2): failed to initialize root inode [ 134.472087][ T6816] input: syz1 as /devices/virtual/input/input6 [ 134.478448][ T6816] input: failed to attach handler leds to device input6, error: -6 [ 134.912025][ T6822] loop1: detected capacity change from 0 to 8 [ 135.208600][ T6834] tipc: Started in network mode [ 135.230098][ T6834] tipc: Node identity 2000007, cluster identity 4711 [ 135.259789][ T6834] tipc: Node number set to 33554439 [ 135.354629][ T6839] loop2: detected capacity change from 0 to 128 [ 135.418961][ T6839] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.491163][ T6839] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.761332][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.318101][ T6869] loop3: detected capacity change from 0 to 2048 [ 136.367417][ T6869] loop3: p1 < > p3 [ 136.372026][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 136.390895][ T6869] loop3: p3 size 134217728 extends beyond EOD, truncated [ 136.395248][ T6871] ipvlan2: entered promiscuous mode [ 137.538251][ T6900] loop1: detected capacity change from 0 to 4096 [ 138.210236][ T6902] loop2: detected capacity change from 0 to 32768 [ 138.277883][ T6902] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.331052][ T6928] Invalid ELF header len 8 [ 138.581579][ T6902] XFS (loop2): Ending clean mount [ 138.613475][ T6902] XFS (loop2): Quotacheck needed: Please wait. [ 138.726012][ T6902] XFS (loop2): Quotacheck: Done. [ 138.940710][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.526093][ T6964] loop2: detected capacity change from 0 to 1024 [ 139.669328][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 139.716329][ T12] hfsplus: b-tree write err: -5, ino 4 [ 139.935031][ T28] audit: type=1326 audit(1750125069.403:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 139.966426][ T28] audit: type=1326 audit(1750125069.423:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.011280][ T28] audit: type=1326 audit(1750125069.423:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.073971][ T28] audit: type=1326 audit(1750125069.433:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.128794][ T28] audit: type=1326 audit(1750125069.433:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.256543][ T28] audit: type=1326 audit(1750125069.433:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.363256][ T28] audit: type=1326 audit(1750125069.433:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.397291][ T6976] batadv_slave_0: entered promiscuous mode [ 140.422032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.440855][ T28] audit: type=1326 audit(1750125069.433:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 140.454001][ T6975] batadv_slave_0: left promiscuous mode [ 140.524755][ T28] audit: type=1326 audit(1750125069.463:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e75f2ab19 code=0x7ffc0000 [ 140.631004][ T28] audit: type=1326 audit(1750125069.463:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e75f2ab19 code=0x7ffc0000 [ 140.653870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 140.725811][ T6984] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 141.382951][ T7006] loop1: detected capacity change from 0 to 512 [ 141.426822][ T7006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.473417][ T7006] EXT4-fs (loop1): 1 truncate cleaned up [ 141.496445][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.752741][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.777382][ T7018] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 141.785494][ T7018] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.415'. [ 142.198011][ T7029] loop2: detected capacity change from 0 to 128 [ 142.251869][ T5762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.272643][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 142.283415][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.298471][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:6 Not tainted 6.6.93-syzkaller #0 [ 142.306712][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.316821][ T5785] Workqueue: hci1 hci_rx_work [ 142.321615][ T5785] Call Trace: [ 142.324928][ T5785] [ 142.327895][ T5785] dump_stack_lvl+0x16c/0x230 [ 142.332617][ T5785] ? show_regs_print_info+0x20/0x20 [ 142.337862][ T5785] ? load_image+0x3b0/0x3b0 [ 142.342401][ T5785] sysfs_create_dir_ns+0x256/0x280 [ 142.347534][ T5785] ? hci_rx_work+0x43a/0xd80 [ 142.352150][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 142.357067][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 142.362303][ T5785] kobject_add_internal+0x6b8/0xc70 [ 142.367566][ T5785] kobject_add+0x156/0x220 [ 142.372017][ T5785] ? __rwlock_init+0x150/0x150 [ 142.376826][ T5785] ? kobject_init+0x1e0/0x1e0 [ 142.381542][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 142.386428][ T5785] ? get_device_parent+0x366/0x390 [ 142.391654][ T5785] device_add+0x408/0xc20 [ 142.396023][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 142.401006][ T5785] le_conn_complete_evt+0xc37/0x1220 [ 142.406343][ T5785] ? hci_event_packet+0x4a7/0x1210 [ 142.411503][ T5785] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 142.417777][ T5785] ? __copy_skb_header+0xa7/0x550 [ 142.422833][ T5785] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 142.428510][ T5785] ? skb_pull_data+0xfb/0x200 [ 142.433226][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 142.438813][ T5785] ? hci_remote_host_features_evt+0x160/0x160 [ 142.444915][ T5785] hci_event_packet+0x795/0x1210 [ 142.449894][ T5785] ? bis_list+0x290/0x290 [ 142.454259][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 142.459488][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 142.464731][ T5785] hci_rx_work+0x43a/0xd80 [ 142.469202][ T5785] ? process_scheduled_works+0x957/0x15b0 [ 142.474959][ T5785] process_scheduled_works+0xa45/0x15b0 [ 142.480560][ T5785] ? assign_work+0x400/0x400 [ 142.485185][ T5785] ? assign_work+0x39e/0x400 [ 142.489804][ T5785] worker_thread+0xa55/0xfc0 [ 142.494419][ T5785] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 142.500372][ T5785] ? _raw_spin_unlock+0x40/0x40 [ 142.505266][ T5785] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 142.511232][ T5785] kthread+0x2fa/0x390 [ 142.515340][ T5785] ? pr_cont_work+0x560/0x560 [ 142.520051][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 142.524672][ T5785] ret_from_fork+0x48/0x80 [ 142.529214][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 142.533823][ T5785] ret_from_fork_asm+0x11/0x20 [ 142.538626][ T5785] [ 142.555732][ T5785] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.570754][ T5785] Bluetooth: hci1: failed to register connection device [ 142.588652][ T5762] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.598942][ T5762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.625108][ T5762] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.671909][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.718530][ T5762] usb 2-1: Product: syz [ 142.738728][ T5762] usb 2-1: Manufacturer: syz [ 142.752619][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 142.758227][ T5762] usb 2-1: SerialNumber: syz [ 142.766874][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.799892][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.809082][ T5762] usb 2-1: config 0 descriptor?? [ 142.825836][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 142.826426][ T5762] usb 2-1: selecting invalid altsetting 0 [ 142.852041][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 142.888649][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 142.931825][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.957369][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 142.982054][ T9] hub: probe of 1-1:1.0 failed with error -5 [ 143.002491][ T7040] loop8: detected capacity change from 0 to 7 [ 143.011556][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 143.021798][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 143.053908][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 143.087754][ T7040] Dev loop8: unable to read RDB block 7 [ 143.097657][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 143.111956][ T7040] loop8: unable to read partition table [ 143.117895][ T7040] loop8: partition table beyond EOD, truncated [ 143.162421][ T7040] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 143.252271][ T5834] usb 2-1: USB disconnect, device number 2 [ 143.610116][ T9] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 143.664579][ T7057] loop3: detected capacity change from 0 to 256 [ 143.679455][ T7057] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.222145][ T9] usb 1-1: USB disconnect, device number 6 [ 144.586498][ T7068] loop1: detected capacity change from 0 to 32768 [ 144.739058][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 144.769829][ T5776] non-latin1 character 0x3ff found in JFS file name [ 144.788945][ T5776] mount with iocharset=utf8 to access [ 144.817666][ T5776] read_mapping_page failed! [ 144.838030][ T5776] ERROR: (device loop1): txCommit: [ 144.838030][ T5776] [ 144.850754][ T5776] ERROR: (device loop1): remounting filesystem as read-only [ 145.211971][ T2922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.400442][ T2922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.564577][ T2922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.695344][ T2922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.106667][ T7100] loop8: detected capacity change from 0 to 7 [ 146.193349][ T7100] Dev loop8: unable to read RDB block 7 [ 146.199008][ T7100] loop8: AHDI p1 p3 p4 [ 146.215877][ T7100] loop8: partition table partially beyond EOD, truncated [ 146.244596][ T7100] loop8: p1 start 975770946 is beyond EOD, truncated [ 146.263883][ T7100] loop8: p3 start 6514546 is beyond EOD, truncated [ 146.595273][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.612305][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.621028][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.641569][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.652382][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.659874][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.775954][ T7114] loop2: detected capacity change from 0 to 32768 [ 148.085098][ T7135] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 148.582329][ T2922] hsr_slave_0: left promiscuous mode [ 148.593532][ T2922] hsr_slave_1: left promiscuous mode [ 148.637519][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.647092][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.671887][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.703618][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.712077][ T5088] Bluetooth: hci3: command tx timeout [ 148.716203][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 148.756477][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.847301][ T2922] bridge_slave_1: left allmulticast mode [ 148.870427][ T2922] bridge_slave_1: left promiscuous mode [ 148.883994][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.891781][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.901751][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.930818][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.937575][ T2922] bridge_slave_0: left allmulticast mode [ 148.981075][ T2922] bridge_slave_0: left promiscuous mode [ 148.982037][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.997767][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.036419][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.082210][ T23] usb 4-1: config 0 descriptor?? [ 149.280604][ T2922] veth1_macvtap: left promiscuous mode [ 149.322543][ T2922] veth0_macvtap: left promiscuous mode [ 149.328309][ T2922] veth1_vlan: left promiscuous mode [ 149.344219][ T7159] loop2: detected capacity change from 0 to 1024 [ 149.362345][ T2922] veth0_vlan: left promiscuous mode [ 149.457016][ T7159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.544195][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 149.588767][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 149.846526][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.010798][ T23] usb 4-1: USB disconnect, device number 2 [ 150.597234][ T5773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 150.620782][ T5773] CPU: 0 PID: 5773 Comm: kworker/u5:2 Not tainted 6.6.93-syzkaller #0 [ 150.629031][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.639149][ T5773] Workqueue: hci2 hci_rx_work [ 150.643895][ T5773] Call Trace: [ 150.647208][ T5773] [ 150.650172][ T5773] dump_stack_lvl+0x16c/0x230 [ 150.654909][ T5773] ? show_regs_print_info+0x20/0x20 [ 150.660170][ T5773] ? load_image+0x3b0/0x3b0 [ 150.664740][ T5773] sysfs_create_dir_ns+0x256/0x280 [ 150.669896][ T5773] ? hci_rx_work+0x43a/0xd80 [ 150.674540][ T5773] ? sysfs_warn_dup+0xa0/0xa0 [ 150.679271][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 150.684550][ T5773] kobject_add_internal+0x6b8/0xc70 [ 150.689830][ T5773] kobject_add+0x156/0x220 [ 150.694294][ T5773] ? __rwlock_init+0x150/0x150 [ 150.699115][ T5773] ? kobject_init+0x1e0/0x1e0 [ 150.703898][ T5773] ? _raw_spin_unlock+0x28/0x40 [ 150.708825][ T5773] ? get_device_parent+0x366/0x390 [ 150.714089][ T5773] device_add+0x408/0xc20 [ 150.718494][ T5773] hci_conn_add_sysfs+0xd5/0x1e0 [ 150.723571][ T5773] le_conn_complete_evt+0xc37/0x1220 [ 150.728890][ T5773] ? hci_event_packet+0x4a7/0x1210 [ 150.734037][ T5773] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 150.740318][ T5773] ? __copy_skb_header+0xa7/0x550 [ 150.745376][ T5773] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 150.751042][ T5773] ? skb_pull_data+0xfb/0x200 [ 150.755763][ T5773] hci_le_conn_complete_evt+0x187/0x440 [ 150.761346][ T5773] ? hci_remote_host_features_evt+0x160/0x160 [ 150.767443][ T5773] hci_event_packet+0x795/0x1210 [ 150.772420][ T5773] ? bis_list+0x290/0x290 [ 150.776784][ T5773] ? lockdep_hardirqs_on+0x98/0x150 [ 150.782026][ T5773] ? hci_send_to_monitor+0xd7/0x4f0 [ 150.787259][ T5773] hci_rx_work+0x43a/0xd80 [ 150.791726][ T5773] ? process_scheduled_works+0x957/0x15b0 [ 150.797481][ T5773] process_scheduled_works+0xa45/0x15b0 [ 150.803098][ T5773] ? assign_work+0x400/0x400 [ 150.807727][ T5773] ? assign_work+0x39e/0x400 [ 150.812348][ T5773] worker_thread+0xa55/0xfc0 [ 150.816971][ T5773] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 150.822911][ T5773] ? _raw_spin_unlock+0x40/0x40 [ 150.827790][ T5773] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 150.833739][ T5773] kthread+0x2fa/0x390 [ 150.837828][ T5773] ? pr_cont_work+0x560/0x560 [ 150.842533][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 150.847142][ T5773] ret_from_fork+0x48/0x80 [ 150.851577][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 150.856188][ T5773] ret_from_fork_asm+0x11/0x20 [ 150.860994][ T5773] [ 150.867196][ T5773] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.883601][ T5773] Bluetooth: hci2: failed to register connection device [ 150.892431][ T5773] Bluetooth: hci3: command tx timeout [ 150.939633][ T7176] loop3: detected capacity change from 0 to 512 [ 150.952899][ T7176] EXT4-fs: Ignoring removed bh option [ 150.990331][ T7176] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.074687][ T7176] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 151.122989][ T7176] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.131269][ T7176] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.173555][ T7176] __quota_error: 264 callbacks suppressed [ 151.173572][ T7176] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 151.213064][ T7176] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 151.225506][ T7176] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.469: Failed to acquire dquot type 1 [ 151.260547][ T7176] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.469: Invalid block bitmap block 0 in block_group 0 [ 151.321654][ T7176] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.469: Invalid block bitmap block 0 in block_group 0 [ 151.405817][ T7176] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.469: Invalid block bitmap block 0 in block_group 0 [ 151.428466][ T7176] Quota error (device loop3): write_blk: dquota write failed [ 151.443244][ T7176] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 151.471854][ T7176] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.469: Failed to acquire dquot type 1 [ 151.507886][ T7176] Quota error (device loop3): write_blk: dquota write failed [ 151.533827][ T7176] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 151.547084][ T7176] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.469: Failed to acquire dquot type 1 [ 151.578766][ T7176] EXT4-fs (loop3): 1 orphan inode deleted [ 151.598839][ T7176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.638478][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 151.752919][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 151.813301][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.858613][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.970885][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.527784][ T2922] bond0 (unregistering): Released all slaves [ 152.953380][ T5088] Bluetooth: hci3: command tx timeout [ 153.044079][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 153.330231][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.351558][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.380025][ T7110] bridge_slave_0: entered allmulticast mode [ 153.409968][ T7110] bridge_slave_0: entered promiscuous mode [ 153.421145][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.437694][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.465765][ T7110] bridge_slave_1: entered allmulticast mode [ 153.491108][ T7110] bridge_slave_1: entered promiscuous mode [ 153.621062][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.651664][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.843603][ T7110] team0: Port device team_slave_0 added [ 153.872925][ T7110] team0: Port device team_slave_1 added [ 154.023307][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.047167][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.137724][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.146145][ T7237] loop3: detected capacity change from 0 to 4096 [ 154.184026][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.213965][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.264423][ T7237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.316834][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.442640][ T28] audit: type=1800 audit(1750125083.913:2931): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 154.604773][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.608332][ T7110] hsr_slave_0: entered promiscuous mode [ 154.624381][ T7110] hsr_slave_1: entered promiscuous mode [ 154.645624][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.666425][ T7110] Cannot create hsr debugfs directory [ 154.936653][ T7249] sit0: entered promiscuous mode [ 154.963834][ T7249] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 154.986229][ T7249] netlink: 1 bytes leftover after parsing attributes in process `syz.2.491'. [ 155.032003][ T5088] Bluetooth: hci3: command tx timeout [ 155.112089][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.304060][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.315612][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 155.330613][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.354673][ T9] usb 4-1: config 0 descriptor?? [ 155.385085][ T7110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.405383][ T7110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.419154][ T7110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.434601][ T7110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.541856][ T5762] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.642666][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.677368][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.707946][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.715250][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.753675][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.754217][ T5762] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 155.762147][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.774734][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.799684][ T5762] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 155.800228][ T9] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 155.815830][ T5762] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 155.849196][ T5762] usb 3-1: Manufacturer: syz [ 155.852089][ T9] uclogic 0003:5543:0003.0004: item fetching failed at offset 1/5 [ 155.867263][ T5762] usb 3-1: config 0 descriptor?? [ 155.873035][ T9] uclogic 0003:5543:0003.0004: parse failed [ 155.873231][ T5812] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.879070][ T9] uclogic: probe of 0003:5543:0003.0004 failed with error -22 [ 156.050717][ T23] usb 4-1: USB disconnect, device number 3 [ 156.102140][ T5762] rc_core: IR keymap rc-hauppauge not found [ 156.112757][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 156.132025][ T5762] Registered IR keymap rc-empty [ 156.142487][ T5812] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 156.151549][ T5762] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 156.166607][ T5812] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 156.196179][ T5812] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 156.208180][ T5762] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 156.232689][ T5812] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 156.257540][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 156.274815][ T5762] usb 3-1: USB disconnect, device number 3 [ 156.292044][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.308781][ T5812] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 156.320681][ T5812] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 156.335021][ T5812] usb 1-1: Product: syz [ 156.339609][ T5812] usb 1-1: Manufacturer: syz [ 156.345124][ T5812] usb 1-1: SerialNumber: syz [ 156.425298][ T5812] usb 1-1: config 0 descriptor?? [ 156.458795][ T5812] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 156.467873][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.512623][ T5812] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 156.878601][ T1187] usb 1-1: USB disconnect, device number 7 [ 156.878698][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 156.892730][ T7263] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 156.932744][ T1187] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 157.236836][ T7110] veth0_vlan: entered promiscuous mode [ 157.313847][ T7110] veth1_vlan: entered promiscuous mode [ 157.429735][ T7110] veth0_macvtap: entered promiscuous mode [ 157.472683][ T7110] veth1_macvtap: entered promiscuous mode [ 157.548160][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.566063][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.576487][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.587365][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.598287][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.628968][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.655631][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.687941][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.711806][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.731322][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.772750][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.793872][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.815698][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.829773][ T7285] loop3: detected capacity change from 0 to 32768 [ 157.848353][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.896765][ T7110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.929752][ T7110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.949123][ T7110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.971355][ T7110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.160427][ T7285] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 158.160427][ T7285] [ 158.251504][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.275708][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.343807][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.358400][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.377059][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.382738][ T1187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.581915][ T5762] usb 1-1: Using ep0 maxpacket: 16 [ 158.600594][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.602760][ T1187] usb 3-1: Using ep0 maxpacket: 8 [ 158.632874][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.644759][ T1187] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.667643][ T1187] usb 3-1: config 179 has no interface number 0 [ 158.677900][ T5762] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.691850][ T1187] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.701753][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.721876][ T1187] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.741567][ T5762] usb 1-1: Product: syz [ 158.742150][ T1187] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.762210][ T5762] usb 1-1: Manufacturer: syz [ 158.766893][ T5762] usb 1-1: SerialNumber: syz [ 158.777798][ T1187] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.823471][ T1187] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.873508][ T1187] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.901435][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.947968][ T7336] batadv0: entered promiscuous mode [ 158.954177][ T7317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.982232][ T7336] batadv_slave_1: entered promiscuous mode [ 158.992965][ T7333] batadv_slave_1: left promiscuous mode [ 158.999380][ T7333] batadv0: left promiscuous mode [ 159.069155][ T5762] usb 1-1: cannot find UAC_HEADER [ 159.094461][ T7331] loop4: detected capacity change from 0 to 1024 [ 159.143504][ T7331] ext4: Unknown parameter 'uid<00000000000000000000' [ 159.247537][ T5762] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 159.295977][ T5762] usb 1-1: USB disconnect, device number 8 [ 159.371648][ T7043] udevd[7043]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.578815][ T1187] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 159.915960][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.945069][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.322102][ T5762] usb 3-1: USB disconnect, device number 4 [ 160.322157][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.339166][ T5762] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 160.340388][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 160.982414][ T1187] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 161.087310][ T7379] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 161.214075][ T1187] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.223766][ T1187] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.239862][ T1187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.267667][ T1187] usb 1-1: Product: syz [ 161.283800][ T28] audit: type=1326 audit(1750125090.743:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.311784][ T1187] usb 1-1: Manufacturer: syz [ 161.324182][ T1187] usb 1-1: SerialNumber: syz [ 161.347933][ T28] audit: type=1326 audit(1750125090.783:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.410932][ T28] audit: type=1326 audit(1750125090.793:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.441167][ T28] audit: type=1326 audit(1750125090.793:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.472079][ T28] audit: type=1326 audit(1750125090.793:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.500114][ T28] audit: type=1326 audit(1750125090.793:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.535676][ T28] audit: type=1326 audit(1750125090.793:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.596452][ T28] audit: type=1326 audit(1750125090.793:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.617403][ T1187] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 161.660325][ T28] audit: type=1326 audit(1750125090.793:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff671d8e929 code=0x7ffc0000 [ 161.671601][ T1187] usb 1-1: USB disconnect, device number 9 [ 161.741830][ T1187] usblp0: removed [ 161.765035][ T28] audit: type=1326 audit(1750125090.803:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff671d8d3df code=0x7ffc0000 [ 163.863692][ T7442] loop9: detected capacity change from 0 to 7 [ 163.914571][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.924121][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.945713][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.955006][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.991142][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.000416][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.010118][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.019415][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.033563][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.042829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.052276][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.061491][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.071955][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.081205][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.089443][ T7442] ldm_validate_partition_table(): Disk read failed. [ 164.101730][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.110961][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.127225][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.136504][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.156826][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.166114][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.181896][ T7442] Dev loop9: unable to read RDB block 0 [ 164.227112][ T7442] loop9: unable to read partition table [ 164.240687][ T7442] loop9: partition table beyond EOD, truncated [ 164.272191][ T7442] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 164.272191][ T7442] ) failed (rc=-5) [ 164.713258][ T7461] syzkaller1: entered promiscuous mode [ 164.719320][ T7461] syzkaller1: entered allmulticast mode [ 165.660924][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 165.714988][ T7498] loop4: detected capacity change from 0 to 512 [ 165.788096][ T7498] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.558: corrupted in-inode xattr: invalid ea_ino [ 165.833078][ T7498] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.558: couldn't read orphan inode 15 (err -117) [ 165.868608][ T7498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.133707][ T7110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.184696][ T7510] syz.2.563 (7510) used greatest stack depth: 17960 bytes left [ 166.301911][ T5811] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.318551][ T7519] loop2: detected capacity change from 0 to 512 [ 166.376854][ T7519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.412354][ T7519] EXT4-fs (loop2): 1 truncate cleaned up [ 166.419679][ T7519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.517702][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 166.523960][ T7519] syz.2.566 (pid 7519) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 166.556583][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.580452][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.618952][ T5811] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.634188][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.655142][ T5811] usb 1-1: config 0 descriptor?? [ 166.678034][ T5811] hub 1-1:0.0: USB hub found [ 166.753863][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.765106][ T7532] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 166.918813][ T5811] hub 1-1:0.0: 1 port detected [ 167.596542][ T5811] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 167.847481][ T7569] loop3: detected capacity change from 0 to 256 [ 167.923973][ T1187] usb 1-1: USB disconnect, device number 10 [ 167.942346][ T7569] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 169.965421][ T7589] loop2: detected capacity change from 0 to 32768 [ 170.102513][ T7589] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.353814][ T7589] XFS (loop2): Ending clean mount [ 170.388293][ T7617] loop3: detected capacity change from 0 to 64 [ 170.402311][ T7589] XFS (loop2): Quotacheck needed: Please wait. [ 170.580856][ T7589] XFS (loop2): Quotacheck: Done. [ 170.643880][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 170.643898][ T28] audit: type=1800 audit(1750125100.103:2954): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.599" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 170.950197][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.444966][ T7631] loop3: detected capacity change from 0 to 8 [ 172.444544][ T7654] vlan2: entered promiscuous mode [ 172.450038][ T7654] bond0: entered promiscuous mode [ 172.456265][ T7654] bond_slave_0: entered promiscuous mode [ 172.462900][ T7654] bond_slave_1: entered promiscuous mode [ 173.667080][ T7664] loop2: detected capacity change from 0 to 40427 [ 173.676543][ T7664] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 173.708428][ T7664] F2FS-fs (loop2): invalid crc value [ 173.724998][ T7664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.808147][ T7664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.039678][ T5775] syz-executor: attempt to access beyond end of device [ 174.039678][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.060708][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 174.848714][ T7702] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 175.412250][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.529393][ T7713] loop8: detected capacity change from 0 to 7 [ 175.545650][ T7713] Dev loop8: unable to read RDB block 7 [ 175.551395][ T7713] loop8: unable to read partition table [ 175.561516][ T7713] loop8: partition table beyond EOD, truncated [ 175.569709][ T7713] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 175.661580][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.691769][ T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 175.721116][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.750598][ T23] usb 3-1: config 0 descriptor?? [ 176.202783][ T23] uclogic 0003:5543:0003.0005: unknown main item tag 0x0 [ 176.225000][ T23] uclogic 0003:5543:0003.0005: item fetching failed at offset 1/5 [ 176.254079][ T23] uclogic 0003:5543:0003.0005: parse failed [ 176.260164][ T23] uclogic: probe of 0003:5543:0003.0005 failed with error -22 [ 176.443609][ T7724] loop3: detected capacity change from 0 to 32768 [ 176.460837][ T9] usb 3-1: USB disconnect, device number 5 [ 176.479580][ T7724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.630 (7724) [ 176.508004][ T7724] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.523786][ T7724] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 176.535388][ T7724] BTRFS info (device loop3): enabling auto defrag [ 176.547099][ T7724] BTRFS info (device loop3): doing ref verification [ 176.567892][ T7724] BTRFS info (device loop3): use no compression [ 176.575096][ T7724] BTRFS info (device loop3): force clearing of disk cache [ 176.587792][ T7724] BTRFS info (device loop3): setting nodatacow, compression disabled [ 176.596839][ T7724] BTRFS info (device loop3): disabling free space tree [ 176.656689][ T7724] BTRFS info (device loop3): enabling ssd optimizations [ 176.668436][ T7724] BTRFS info (device loop3): auto enabling async discard [ 176.684802][ T7724] BTRFS info (device loop3): rebuilding free space tree [ 176.726111][ T7724] BTRFS info (device loop3): disabling free space tree [ 176.733270][ T7724] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.744850][ T7724] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.879577][ T28] audit: type=1800 audit(1750125106.343:2955): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.630" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 177.304386][ T7762] loop4: detected capacity change from 0 to 4096 [ 177.400751][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.441464][ T7768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.746374][ T7798] loop2: detected capacity change from 0 to 8 [ 179.804363][ T7825] Invalid ELF header len 8 [ 179.844567][ T7828] loop3: detected capacity change from 0 to 1024 [ 179.949548][ T5088] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 179.961486][ T5088] CPU: 0 PID: 5088 Comm: kworker/u5:1 Not tainted 6.6.93-syzkaller #0 [ 179.969735][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.979838][ T5088] Workqueue: hci0 hci_rx_work [ 179.984609][ T5088] Call Trace: [ 179.987934][ T5088] [ 179.990907][ T5088] dump_stack_lvl+0x16c/0x230 [ 179.995656][ T5088] ? show_regs_print_info+0x20/0x20 [ 180.000929][ T5088] ? load_image+0x3b0/0x3b0 [ 180.005507][ T5088] sysfs_create_dir_ns+0x256/0x280 [ 180.010677][ T5088] ? hci_rx_work+0x43a/0xd80 [ 180.015332][ T5088] ? sysfs_warn_dup+0xa0/0xa0 [ 180.020086][ T5088] ? do_raw_spin_unlock+0x121/0x230 [ 180.025357][ T5088] kobject_add_internal+0x6b8/0xc70 [ 180.030616][ T5088] kobject_add+0x156/0x220 [ 180.035085][ T5088] ? __rwlock_init+0x150/0x150 [ 180.039914][ T5088] ? kobject_init+0x1e0/0x1e0 [ 180.044624][ T5088] ? _raw_spin_unlock+0x28/0x40 [ 180.049510][ T5088] ? get_device_parent+0x366/0x390 [ 180.054652][ T5088] device_add+0x408/0xc20 [ 180.059054][ T5088] hci_conn_add_sysfs+0xd5/0x1e0 [ 180.064023][ T5088] le_conn_complete_evt+0xc37/0x1220 [ 180.069338][ T5088] ? hci_event_packet+0x4a7/0x1210 [ 180.074491][ T5088] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 180.080761][ T5088] ? __copy_skb_header+0xa7/0x550 [ 180.085820][ T5088] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 180.091490][ T5088] ? skb_pull_data+0xfb/0x200 [ 180.096210][ T5088] hci_le_conn_complete_evt+0x187/0x440 [ 180.101800][ T5088] ? hci_remote_host_features_evt+0x160/0x160 [ 180.107899][ T5088] hci_event_packet+0x795/0x1210 [ 180.112875][ T5088] ? bis_list+0x290/0x290 [ 180.117237][ T5088] ? lockdep_hardirqs_on+0x98/0x150 [ 180.122466][ T5088] ? hci_send_to_monitor+0xd7/0x4f0 [ 180.127693][ T5088] hci_rx_work+0x43a/0xd80 [ 180.132165][ T5088] ? process_scheduled_works+0x957/0x15b0 [ 180.137913][ T5088] process_scheduled_works+0xa45/0x15b0 [ 180.143511][ T5088] ? assign_work+0x400/0x400 [ 180.148134][ T5088] ? assign_work+0x39e/0x400 [ 180.152757][ T5088] worker_thread+0xa55/0xfc0 [ 180.157404][ T5088] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 180.163337][ T5088] ? _raw_spin_unlock+0x40/0x40 [ 180.168221][ T5088] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 180.174168][ T5088] kthread+0x2fa/0x390 [ 180.178257][ T5088] ? pr_cont_work+0x560/0x560 [ 180.182962][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 180.187622][ T5088] ret_from_fork+0x48/0x80 [ 180.192070][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 180.196681][ T5088] ret_from_fork_asm+0x11/0x20 [ 180.201493][ T5088] [ 180.206688][ T5088] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.221276][ T5088] Bluetooth: hci0: failed to register connection device [ 180.453624][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 181.237861][ T7866] loop3: detected capacity change from 0 to 128 [ 181.359846][ T7866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.461839][ T7866] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.690749][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.979637][ T7874] loop3: detected capacity change from 0 to 2048 [ 182.070256][ T7875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.793544][ T5088] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 182.809644][ T5088] CPU: 0 PID: 5088 Comm: kworker/u5:1 Not tainted 6.6.93-syzkaller #0 [ 182.817884][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.827995][ T5088] Workqueue: hci2 hci_rx_work [ 182.832746][ T5088] Call Trace: [ 182.836061][ T5088] [ 182.839029][ T5088] dump_stack_lvl+0x16c/0x230 [ 182.843779][ T5088] ? show_regs_print_info+0x20/0x20 [ 182.849046][ T5088] ? load_image+0x3b0/0x3b0 [ 182.853611][ T5088] sysfs_create_dir_ns+0x256/0x280 [ 182.858767][ T5088] ? hci_rx_work+0x43a/0xd80 [ 182.863417][ T5088] ? sysfs_warn_dup+0xa0/0xa0 [ 182.868122][ T5088] ? do_raw_spin_unlock+0x121/0x230 [ 182.873348][ T5088] kobject_add_internal+0x6b8/0xc70 [ 182.878577][ T5088] kobject_add+0x156/0x220 [ 182.883039][ T5088] ? __rwlock_init+0x150/0x150 [ 182.887834][ T5088] ? kobject_init+0x1e0/0x1e0 [ 182.892546][ T5088] ? _raw_spin_unlock+0x28/0x40 [ 182.897432][ T5088] ? get_device_parent+0x366/0x390 [ 182.902568][ T5088] device_add+0x408/0xc20 [ 182.906925][ T5088] hci_conn_add_sysfs+0xd5/0x1e0 [ 182.911907][ T5088] le_conn_complete_evt+0xc37/0x1220 [ 182.917224][ T5088] ? hci_event_packet+0x4a7/0x1210 [ 182.922369][ T5088] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 182.928629][ T5088] ? __copy_skb_header+0xa7/0x550 [ 182.933688][ T5088] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 182.939349][ T5088] ? skb_pull_data+0xfb/0x200 [ 182.944052][ T5088] hci_le_conn_complete_evt+0x187/0x440 [ 182.949633][ T5088] ? hci_remote_host_features_evt+0x160/0x160 [ 182.955730][ T5088] hci_event_packet+0x795/0x1210 [ 182.960701][ T5088] ? bis_list+0x290/0x290 [ 182.965059][ T5088] ? lockdep_hardirqs_on+0x98/0x150 [ 182.970285][ T5088] ? hci_send_to_monitor+0xd7/0x4f0 [ 182.975505][ T5088] hci_rx_work+0x43a/0xd80 [ 182.979955][ T5088] ? process_scheduled_works+0x957/0x15b0 [ 182.985698][ T5088] process_scheduled_works+0xa45/0x15b0 [ 182.991291][ T5088] ? assign_work+0x400/0x400 [ 182.995908][ T5088] ? assign_work+0x39e/0x400 [ 183.000522][ T5088] worker_thread+0xa55/0xfc0 [ 183.005139][ T5088] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 183.011068][ T5088] ? _raw_spin_unlock+0x40/0x40 [ 183.015948][ T5088] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 183.021883][ T5088] kthread+0x2fa/0x390 [ 183.025970][ T5088] ? pr_cont_work+0x560/0x560 [ 183.030668][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 183.035277][ T5088] ret_from_fork+0x48/0x80 [ 183.039715][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 183.044326][ T5088] ret_from_fork_asm+0x11/0x20 [ 183.049129][ T5088] [ 183.054446][ T5088] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.068666][ T5088] Bluetooth: hci2: failed to register connection device [ 183.149967][ T7892] loop3: detected capacity change from 0 to 1024 [ 183.196956][ T7892] ext4: Unknown parameter 'uid<00000000000000000000' [ 183.325316][ T7902] loop2: detected capacity change from 0 to 128 [ 183.484800][ T7902] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.568658][ T7907] loop4: detected capacity change from 0 to 1024 [ 183.640590][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.332567][ T7922] bridge0: entered promiscuous mode [ 184.341558][ T7922] macvlan2: entered promiscuous mode [ 184.375597][ T7922] bridge0: port 3(macvlan2) entered blocking state [ 184.413609][ T7922] bridge0: port 3(macvlan2) entered disabled state [ 184.455791][ T7922] macvlan2: entered allmulticast mode [ 184.481896][ T7922] bridge0: entered allmulticast mode [ 184.525508][ T7922] macvlan2: left allmulticast mode [ 184.543450][ T7922] bridge0: left allmulticast mode [ 184.574281][ T7922] bridge0: left promiscuous mode [ 184.758140][ T7931] loop3: detected capacity change from 0 to 4096 [ 185.110365][ T7938] loop4: detected capacity change from 0 to 2048 [ 185.187379][ T7942] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.492583][ T7945] bridge0: entered promiscuous mode [ 185.507884][ T7945] macvlan2: entered promiscuous mode [ 185.515374][ T7945] bridge0: port 3(macvlan2) entered blocking state [ 185.522681][ T7945] bridge0: port 3(macvlan2) entered disabled state [ 185.529525][ T7945] macvlan2: entered allmulticast mode [ 185.535480][ T7945] bridge0: entered allmulticast mode [ 185.551061][ T7945] macvlan2: left allmulticast mode [ 185.558768][ T7945] bridge0: left allmulticast mode [ 185.577309][ T7945] bridge0: left promiscuous mode [ 185.727701][ T5088] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 185.737875][ T5088] CPU: 1 PID: 5088 Comm: kworker/u5:1 Not tainted 6.6.93-syzkaller #0 [ 185.746085][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.756181][ T5088] Workqueue: hci3 hci_rx_work [ 185.760920][ T5088] Call Trace: [ 185.764234][ T5088] [ 185.767203][ T5088] dump_stack_lvl+0x16c/0x230 [ 185.771937][ T5088] ? show_regs_print_info+0x20/0x20 [ 185.777194][ T5088] ? load_image+0x3b0/0x3b0 [ 185.781758][ T5088] sysfs_create_dir_ns+0x256/0x280 [ 185.786918][ T5088] ? hci_rx_work+0x43a/0xd80 [ 185.791566][ T5088] ? sysfs_warn_dup+0xa0/0xa0 [ 185.796304][ T5088] ? do_raw_spin_unlock+0x121/0x230 [ 185.801588][ T5088] kobject_add_internal+0x6b8/0xc70 [ 185.806852][ T5088] kobject_add+0x156/0x220 [ 185.811318][ T5088] ? __rwlock_init+0x150/0x150 [ 185.816143][ T5088] ? kobject_init+0x1e0/0x1e0 [ 185.820878][ T5088] ? _raw_spin_unlock+0x28/0x40 [ 185.825798][ T5088] ? get_device_parent+0x366/0x390 [ 185.830966][ T5088] device_add+0x408/0xc20 [ 185.835345][ T5088] hci_conn_add_sysfs+0xd5/0x1e0 [ 185.840320][ T5088] le_conn_complete_evt+0xc37/0x1220 [ 185.845628][ T5088] ? hci_event_packet+0x4a7/0x1210 [ 185.850774][ T5088] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 185.857057][ T5088] ? __copy_skb_header+0xa7/0x550 [ 185.862105][ T5088] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 185.867766][ T5088] ? skb_pull_data+0xfb/0x200 [ 185.872470][ T5088] hci_le_conn_complete_evt+0x187/0x440 [ 185.878053][ T5088] ? hci_remote_host_features_evt+0x160/0x160 [ 185.884154][ T5088] hci_event_packet+0x795/0x1210 [ 185.889124][ T5088] ? bis_list+0x290/0x290 [ 185.893482][ T5088] ? lockdep_hardirqs_on+0x98/0x150 [ 185.898703][ T5088] ? hci_send_to_monitor+0xd7/0x4f0 [ 185.903924][ T5088] hci_rx_work+0x43a/0xd80 [ 185.908384][ T5088] ? process_scheduled_works+0x957/0x15b0 [ 185.914131][ T5088] process_scheduled_works+0xa45/0x15b0 [ 185.919747][ T5088] ? assign_work+0x400/0x400 [ 185.924377][ T5088] ? assign_work+0x39e/0x400 [ 185.928998][ T5088] worker_thread+0xa55/0xfc0 [ 185.933639][ T5088] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 185.939594][ T5088] ? _raw_spin_unlock+0x40/0x40 [ 185.944483][ T5088] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 185.950426][ T5088] kthread+0x2fa/0x390 [ 185.954519][ T5088] ? pr_cont_work+0x560/0x560 [ 185.959230][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 185.963849][ T5088] ret_from_fork+0x48/0x80 [ 185.968338][ T5088] ? kthread_blkcg+0xd0/0xd0 [ 185.972967][ T5088] ret_from_fork_asm+0x11/0x20 [ 185.977788][ T5088] [ 185.983015][ T5088] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.997308][ T5088] Bluetooth: hci3: failed to register connection device [ 186.224960][ T7961] loop3: detected capacity change from 0 to 1024 [ 186.392176][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 186.422758][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.621771][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 186.637158][ T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 186.656014][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.682133][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.700821][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.730241][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.760027][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.821366][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.861539][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.881879][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 186.910378][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.939234][ T9] usb 5-1: config 179 has no interface number 0 [ 186.963349][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 187.033587][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 187.054635][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.086117][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 187.110496][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 187.121915][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.135349][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 187.144905][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.146547][ T23] usbtmc 3-1:16.0: can't read capabilities [ 187.176334][ T7967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.512877][ T23] usb 3-1: USB disconnect, device number 6 [ 187.523541][ T7956] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 187.724801][ T1187] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 187.976953][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.998076][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.293161][ T1187] usb 5-1: USB disconnect, device number 2 [ 188.293231][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 188.307517][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 188.318172][ T1187] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.487711][ T28] audit: type=1326 audit(1750125117.953:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.3.692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e75f8e929 code=0x0 [ 188.519949][ T7994] loop2: detected capacity change from 0 to 1024 [ 188.532392][ T7994] EXT4-fs: Ignoring removed oldalloc option [ 188.546845][ T7994] EXT4-fs: Ignoring removed orlov option [ 188.563129][ T7994] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.591128][ T7994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.683231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 188.692064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.714420][ T28] audit: type=1326 audit(1750125118.183:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedded8e929 code=0x7ffc0000 [ 188.768934][ T28] audit: type=1326 audit(1750125118.213:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 188.791854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 188.800388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 188.811320][ T28] audit: type=1326 audit(1750125118.213:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 188.852116][ T28] audit: type=1326 audit(1750125118.213:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 188.894540][ T7994] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.693: Allocating blocks 497-513 which overlap fs metadata [ 188.968058][ T28] audit: type=1326 audit(1750125118.213:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 189.079789][ T28] audit: type=1326 audit(1750125118.213:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 189.107523][ T28] audit: type=1326 audit(1750125118.213:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 189.140195][ T28] audit: type=1326 audit(1750125118.213:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 189.192726][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 189.208362][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.217868][ T28] audit: type=1326 audit(1750125118.213:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.0.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedded2ab19 code=0x7ffc0000 [ 189.262577][ T8001] loop4: detected capacity change from 0 to 1024 [ 189.323253][ T8001] EXT4-fs: Ignoring removed oldalloc option [ 189.329350][ T8001] EXT4-fs: Ignoring removed orlov option [ 189.366070][ T8001] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 189.437227][ T8001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.579609][ T8006] loop2: detected capacity change from 0 to 1024 [ 189.714151][ T8001] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.703: Allocating blocks 497-513 which overlap fs metadata [ 189.931115][ T7110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.171755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 190.203385][ T8022] syzkaller1: entered promiscuous mode [ 190.215355][ T8022] syzkaller1: entered allmulticast mode [ 190.566297][ T8028] loop3: detected capacity change from 0 to 512 [ 190.588692][ T8028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.713695][ T8028] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.821930][ T5812] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.995659][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.052546][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 191.066462][ T5812] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 191.086091][ T5812] usb 1-1: config 179 has no interface number 0 [ 191.121778][ T5812] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 191.157352][ T5812] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 191.190530][ T5812] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.232064][ T5812] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 191.261837][ T5812] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 191.284216][ T8038] loop4: detected capacity change from 0 to 1024 [ 191.300942][ T5812] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 191.311920][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.335403][ T8026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.344176][ T8038] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.403890][ T8038] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #3: block 1: comm syz.4.709: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.426688][ T8038] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.709: Failed to acquire dquot type 0 [ 191.501810][ T8038] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.709: Freeing blocks not in datazone - block = 0, count = 4096 [ 191.590204][ T8038] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.709: Invalid inode bitmap blk 0 in block_group 0 [ 191.603650][ T48] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.654138][ T8038] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 191.688197][ T48] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 191.713780][ T8038] EXT4-fs (loop4): 1 orphan inode deleted [ 191.720935][ T8038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.860925][ T5762] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 191.969645][ T8038] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.107160][ T8037] loop3: detected capacity change from 0 to 32768 [ 192.152816][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 192.213772][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.241637][ T8034] loop2: detected capacity change from 0 to 32768 [ 192.255080][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.271103][ T8034] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.707 (8034) [ 192.288559][ T8037] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 192.315379][ T8034] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 192.317363][ T59] (kworker/u4:4,59,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 192.342090][ T8034] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 192.358955][ T8034] BTRFS info (device loop2): using free space tree [ 192.394479][ T8037] (syz.3.708,8037,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 192.449839][ T8034] BTRFS info (device loop2): enabling ssd optimizations [ 192.468268][ T8034] BTRFS info (device loop2): auto enabling async discard [ 192.532783][ T8059] loop4: detected capacity change from 0 to 256 [ 192.584333][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 192.655662][ T8059] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 192.723052][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 192.731464][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 192.750985][ T23] usb 1-1: USB disconnect, device number 11 [ 192.762790][ T23] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 192.863254][ T8061] loop3: detected capacity change from 0 to 128 [ 192.878310][ T8061] FAT-fs (loop3): bogus logical sector size 65535 [ 192.888927][ T8061] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 192.922070][ T8061] FAT-fs (loop3): Can't find a valid FAT filesystem [ 192.935877][ T5775] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 193.895082][ T8086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.721'. [ 194.239681][ T8088] loop2: detected capacity change from 0 to 256 [ 194.269066][ T8088] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.287826][ T8088] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.310747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 194.321056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 194.340810][ T8088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.035310][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.043414][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.046643][ T8110] @: renamed from vlan0 (while UP) [ 195.258394][ T8118] loop3: detected capacity change from 0 to 64 [ 195.331920][ T8118] hfs: request for non-existent node 24 in B*Tree [ 195.344989][ T8118] hfs: request for non-existent node 24 in B*Tree [ 195.370690][ T8118] hfs: request for non-existent node 25 in B*Tree [ 195.381784][ T8118] hfs: request for non-existent node 25 in B*Tree [ 195.404823][ T8118] hfs: request for non-existent node 26 in B*Tree [ 195.422059][ T8118] hfs: request for non-existent node 26 in B*Tree [ 195.592443][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.781847][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 195.801341][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 195.820386][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.843620][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.866742][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.895679][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.951415][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.968832][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.177632][ T8137] sit0: entered promiscuous mode [ 196.211808][ T23] usb 1-1: GET_CAPABILITIES returned 0 [ 196.217420][ T23] usbtmc 1-1:16.0: can't read capabilities [ 196.233983][ T8137] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 196.276458][ T8137] netlink: 1 bytes leftover after parsing attributes in process `syz.3.743'. [ 196.447975][ T5812] usb 1-1: USB disconnect, device number 12 [ 196.633450][ T5762] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.814287][ T8149] loop3: detected capacity change from 0 to 512 [ 196.826168][ T8149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 196.834495][ T8149] System zones: 1-12 [ 196.839586][ T8149] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.749: corrupted in-inode xattr: invalid ea_ino [ 196.858582][ T8149] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.749: couldn't read orphan inode 15 (err -117) [ 196.864614][ T5762] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.881188][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.889409][ T8149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.918462][ T5762] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.930312][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.940131][ T5762] usb 5-1: Product: syz [ 196.944478][ T5762] usb 5-1: Manufacturer: syz [ 196.949120][ T5762] usb 5-1: SerialNumber: syz [ 196.957249][ T5762] usb 5-1: config 0 descriptor?? [ 196.967963][ T8149] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.749: invalid indirect mapped block 234881024 (level 0) [ 196.988114][ T5762] usb 5-1: selecting invalid altsetting 0 [ 197.044247][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.306906][ T9] usb 5-1: USB disconnect, device number 3 [ 197.917546][ T8167] loop3: detected capacity change from 0 to 32768 [ 197.952242][ T8167] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.040405][ T8167] XFS (loop3): Ending clean mount [ 198.514099][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.799933][ T8188] loop4: detected capacity change from 0 to 32768 [ 199.806791][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.063233][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.092070][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.121839][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.161904][ T5812] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.171022][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.204107][ T5812] usb 3-1: config 0 descriptor?? [ 200.659743][ T5812] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 200.689194][ T5812] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 200.734606][ T8199] loop4: detected capacity change from 0 to 32768 [ 200.749118][ T8199] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.764 (8199) [ 200.772401][ T8199] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 200.799875][ T8199] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 200.828226][ T8199] BTRFS info (device loop4): using free space tree [ 200.893178][ T8199] BTRFS info (device loop4): enabling ssd optimizations [ 200.911885][ T8199] BTRFS info (device loop4): auto enabling async discard [ 201.089932][ T5810] usb 3-1: USB disconnect, device number 7 [ 201.154801][ T7110] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 201.894130][ T8237] sit0: entered promiscuous mode [ 201.923856][ T8237] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 201.931590][ T8237] netlink: 1 bytes leftover after parsing attributes in process `syz.4.775'. [ 201.953666][ T8239] loop2: detected capacity change from 0 to 1024 [ 202.006206][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.121889][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 202.121906][ T28] audit: type=1800 audit(1750125131.593:3092): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.776" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 202.224228][ T28] audit: type=1800 audit(1750125131.633:3093): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.776" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 202.324862][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.397191][ T8233] loop3: detected capacity change from 0 to 32768 [ 202.618809][ T8252] loop4: detected capacity change from 0 to 512 [ 202.700105][ T8252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.720362][ T8252] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.897882][ T7110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.601803][ T5812] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.788188][ T5812] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.800900][ T5812] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.819854][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.828072][ T5812] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 203.838444][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.850489][ T5812] usb 3-1: config 0 descriptor?? [ 204.271343][ T5812] apple 0003:05AC:0262.0007: bogus close delimiter [ 204.293287][ T5812] apple 0003:05AC:0262.0007: item 0 1 2 10 parsing failed [ 204.322827][ T5812] apple 0003:05AC:0262.0007: parse failed [ 204.328745][ T5812] apple: probe of 0003:05AC:0262.0007 failed with error -22 [ 204.545768][ T5812] usb 3-1: USB disconnect, device number 8 [ 204.749575][ T8285] loop3: detected capacity change from 0 to 32768 [ 204.797598][ T8285] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.870081][ T8285] XFS (loop3): Ending clean mount [ 205.159608][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.158142][ T8308] loop2: detected capacity change from 0 to 32768 [ 206.169073][ T8308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.801 (8308) [ 206.191051][ T8308] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.201510][ T8308] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 206.216088][ T8308] BTRFS info (device loop2): setting nodatasum [ 206.222591][ T8308] BTRFS info (device loop2): doing ref verification [ 206.229244][ T8308] BTRFS info (device loop2): use zlib compression, level 3 [ 206.243790][ T8308] BTRFS info (device loop2): force clearing of disk cache [ 206.251004][ T8308] BTRFS info (device loop2): doing ref verification [ 206.257819][ T8308] BTRFS info (device loop2): using free space tree [ 206.299001][ T8308] BTRFS info (device loop2): enabling ssd optimizations [ 206.309649][ T8308] BTRFS info (device loop2): auto enabling async discard [ 206.320574][ T8308] BTRFS info (device loop2): rebuilding free space tree [ 206.475868][ T5775] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.003992][ T8334] loop3: detected capacity change from 0 to 32768 [ 207.842158][ T8343] loop3: detected capacity change from 0 to 1024 [ 207.860685][ T8343] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.906188][ T8343] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #3: block 1: comm syz.3.808: lblock 1 mapped to illegal pblock 1 (length 1) [ 207.962231][ T8343] Quota error (device loop3): write_blk: dquota write failed [ 208.012161][ T8343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 208.051890][ T8343] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.808: Failed to acquire dquot type 0 [ 208.113663][ T8343] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.808: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.133619][ T8343] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.808: Invalid inode bitmap blk 0 in block_group 0 [ 208.171939][ T59] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.188218][ T8343] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 208.204060][ T8343] EXT4-fs (loop3): 1 orphan inode deleted [ 208.215933][ T59] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 208.231636][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.231731][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 0 [ 208.375999][ T8343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.390683][ T8382] loop2: detected capacity change from 0 to 512 [ 209.415605][ T8382] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.427775][ T8382] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.455604][ T8382] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 209.504385][ T8382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 209.530656][ T8382] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.825: corrupted in-inode xattr: e_value size too large [ 209.552135][ T8382] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.825: couldn't read orphan inode 15 (err -117) [ 209.571101][ T8382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.590792][ T28] audit: type=1326 audit(1750125139.053:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.665755][ T28] audit: type=1326 audit(1750125139.083:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.713728][ T28] audit: type=1326 audit(1750125139.093:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.743486][ T28] audit: type=1326 audit(1750125139.093:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.763794][ T8382] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.825: Unrecognised inode hash code 4 [ 209.798046][ T8382] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.825: Corrupt directory, running e2fsck is recommended [ 209.816901][ T28] audit: type=1326 audit(1750125139.093:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.867548][ T8390] vlan0: entered promiscuous mode [ 209.874318][ T28] audit: type=1326 audit(1750125139.093:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.897788][ T8390] bond0: entered promiscuous mode [ 209.905680][ T8390] bond_slave_0: entered promiscuous mode [ 209.918029][ T8390] bond_slave_1: entered promiscuous mode [ 209.930286][ T28] audit: type=1326 audit(1750125139.103:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e75f8e929 code=0x7ffc0000 [ 209.985012][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.304915][ T8418] vlan2: entered promiscuous mode [ 211.310306][ T8418] bond0: entered promiscuous mode [ 211.342804][ T8418] bond_slave_0: entered promiscuous mode [ 211.352296][ T8418] bond_slave_1: entered promiscuous mode [ 211.493181][ T8406] loop3: detected capacity change from 0 to 32768 [ 211.518014][ T8406] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.835 (8406) [ 211.551232][ T8406] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.586150][ T8406] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 211.605392][ T8406] BTRFS info (device loop3): setting nodatasum [ 211.627558][ T8406] BTRFS info (device loop3): doing ref verification [ 211.645906][ T8406] BTRFS info (device loop3): use zlib compression, level 3 [ 211.661957][ T8406] BTRFS info (device loop3): force clearing of disk cache [ 211.706513][ T8406] BTRFS info (device loop3): doing ref verification [ 211.718882][ T8406] BTRFS info (device loop3): using free space tree [ 211.760378][ T8420] loop4: detected capacity change from 0 to 256 [ 211.782111][ T8420] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 211.837475][ T8406] BTRFS info (device loop3): enabling ssd optimizations [ 211.851989][ T8406] BTRFS info (device loop3): auto enabling async discard [ 211.882973][ T8406] BTRFS info (device loop3): rebuilding free space tree [ 211.945863][ T8439] loop4: detected capacity change from 0 to 512 [ 211.984943][ T8439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.003253][ T8439] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.114048][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.131856][ T8439] EXT4-fs error (device loop4): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.4.844: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 212.168706][ T8439] EXT4-fs (loop4): Remounting filesystem read-only [ 212.202900][ T8448] loop2: detected capacity change from 0 to 256 [ 212.210552][ T8448] exfat: Deprecated parameter 'utf8' [ 212.216557][ T8448] exfat: Deprecated parameter 'namecase' [ 212.275878][ T7110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.295744][ T8448] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 212.427254][ T8450] loop4: detected capacity change from 0 to 512 [ 212.432744][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 212.453432][ T8450] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.472647][ T8450] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.476799][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.480127][ T8450] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 212.492821][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 212.497237][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 212.551166][ T8450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 212.572087][ T8450] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.849: corrupted in-inode xattr: e_value size too large [ 212.610299][ T8450] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.849: couldn't read orphan inode 15 (err -117) [ 212.629333][ T8450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.641962][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 212.649294][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 212.660906][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.670808][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.683800][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.693863][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.707191][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.717070][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.749145][ T8450] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.849: Unrecognised inode hash code 4 [ 212.760535][ T8450] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.849: Corrupt directory, running e2fsck is recommended [ 212.803922][ T7110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.938445][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 212.944139][ T9] usbtmc 1-1:16.0: can't read capabilities [ 213.021844][ T5762] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.157414][ T9] usb 1-1: USB disconnect, device number 13 [ 213.215543][ T5762] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 213.224171][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.237231][ T5762] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 213.246360][ T5762] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 213.254737][ T5762] usb 4-1: Manufacturer: syz [ 213.261184][ T5762] usb 4-1: config 0 descriptor?? [ 213.332642][ T5762] rc_core: IR keymap rc-hauppauge not found [ 213.338660][ T5762] Registered IR keymap rc-empty [ 213.344727][ T5762] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 213.358408][ T5762] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 213.494154][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 213.495572][ T9] usb 4-1: USB disconnect, device number 4 [ 213.500373][ C1] igorplugusb 4-1:0.0: submit urb failed: -19 [ 213.967009][ T8458] loop2: detected capacity change from 0 to 2048 [ 214.138576][ T8463] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.268376][ T8459] loop4: detected capacity change from 0 to 32768 [ 214.680946][ T8472] binder: 8471:8472 ioctl c0306201 0 returned -14 [ 214.827350][ T8477] loop2: detected capacity change from 0 to 512 [ 214.886544][ T8477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.904807][ T8477] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.018572][ T8477] EXT4-fs error (device loop2): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.2.857: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 215.069208][ T8477] EXT4-fs (loop2): Remounting filesystem read-only [ 215.130888][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 215.154047][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.214031][ T5811] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 215.271045][ T8489] loop2: detected capacity change from 0 to 1024 [ 215.396437][ T8476] loop4: detected capacity change from 0 to 32768 [ 215.419480][ T8476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.855 (8476) [ 215.425545][ T8489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 215.439020][ T8489] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 215.449722][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 215.450027][ T8476] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.465832][ T8476] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 215.468996][ T8489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.478573][ T8476] BTRFS info (device loop4): setting nodatasum [ 215.492245][ T5811] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 215.493904][ T8476] BTRFS info (device loop4): doing ref verification [ 215.509534][ T8476] BTRFS info (device loop4): use zlib compression, level 3 [ 215.513763][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.531730][ T8476] BTRFS info (device loop4): force clearing of disk cache [ 215.539188][ T8476] BTRFS info (device loop4): doing ref verification [ 215.546215][ T8476] BTRFS info (device loop4): using free space tree [ 215.561450][ T5811] usb 1-1: config 0 descriptor?? [ 215.600170][ T8476] BTRFS info (device loop4): enabling ssd optimizations [ 215.611301][ T8476] BTRFS info (device loop4): auto enabling async discard [ 215.628182][ T8476] BTRFS info (device loop4): rebuilding free space tree [ 215.709002][ T8489] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 215.747419][ T7110] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.784521][ T5811] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 215.802564][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.837769][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.864773][ T5811] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 215.900574][ T5811] usb 1-1: media controller created [ 215.971599][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.293567][ T8518] loop2: detected capacity change from 0 to 32768 [ 216.324144][ T5811] az6027: usb out operation failed. (-71) [ 216.343174][ T5811] az6027: usb out operation failed. (-71) [ 216.349316][ T5811] stb0899_attach: Driver disabled by Kconfig [ 216.355900][ T5811] az6027: no front-end attached [ 216.355900][ T5811] [ 216.365457][ T5811] az6027: usb out operation failed. (-71) [ 216.371245][ T5811] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 216.392598][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 216.406686][ T5811] dvb-usb: schedule remote query interval to 400 msecs. [ 216.414028][ T5811] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 216.430952][ T5811] usb 1-1: USB disconnect, device number 14 [ 216.478363][ T5811] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 216.878989][ T8522] loop3: detected capacity change from 0 to 32768 [ 216.896454][ T8522] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.868 (8522) [ 216.946550][ T8522] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.979980][ T8522] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 216.996093][ T8522] BTRFS info (device loop3): enabling auto defrag [ 217.008109][ T8522] BTRFS info (device loop3): doing ref verification [ 217.021767][ T8522] BTRFS info (device loop3): use no compression [ 217.033967][ T8534] batadv0: entered promiscuous mode [ 217.039791][ T8522] BTRFS info (device loop3): force clearing of disk cache [ 217.049669][ T8522] BTRFS info (device loop3): setting nodatacow, compression disabled [ 217.062077][ T8522] BTRFS info (device loop3): disabling free space tree [ 217.069881][ T8534] batadv0: left promiscuous mode [ 217.175404][ T8522] BTRFS info (device loop3): enabling ssd optimizations [ 217.192486][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 217.207812][ T8522] BTRFS info (device loop3): auto enabling async discard [ 217.259052][ T8522] BTRFS info (device loop3): rebuilding free space tree [ 217.296824][ T8522] BTRFS info (device loop3): disabling free space tree [ 217.307885][ T8522] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.317975][ T8522] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.643141][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.094738][ T8580] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 218.273503][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 218.694522][ T8602] loop3: detected capacity change from 0 to 2048 [ 218.721623][ T8606] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.241944][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 219.390697][ T8605] loop2: detected capacity change from 0 to 32768 [ 219.428359][ T8605] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.459675][ T8625] loop3: detected capacity change from 0 to 1024 [ 219.468272][ T8625] EXT4-fs: Ignoring removed orlov option [ 219.482251][ T8625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.538927][ T8625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.642167][ T8605] XFS (loop2): Ending clean mount [ 219.670484][ T8605] XFS (loop2): Quotacheck needed: Please wait. [ 219.774357][ T8605] XFS (loop2): Quotacheck: Done. [ 219.784729][ T8614] loop4: detected capacity change from 0 to 40427 [ 219.806998][ T8614] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 219.823473][ T8614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 219.856375][ T8614] F2FS-fs (loop4): invalid crc value [ 219.902019][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.995034][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.031554][ T8614] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.116063][ T8614] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.127861][ T8614] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.281599][ T8614] syz.4.899: attempt to access beyond end of device [ 220.281599][ T8614] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 220.389522][ T3491] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 220.411594][ T3491] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 220.614809][ T8651] loop3: detected capacity change from 0 to 1024 [ 221.561871][ T8670] batadv0: entered promiscuous mode [ 221.573575][ T8670] batadv0: left promiscuous mode [ 221.782677][ T8666] loop4: detected capacity change from 0 to 40427 [ 221.804569][ T8666] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 221.825887][ T8666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.838964][ T8666] F2FS-fs (loop4): invalid crc value [ 221.860862][ T8666] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.907313][ T8675] Bluetooth: MGMT ver 1.22 [ 221.976916][ T8666] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.989395][ T8666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.516783][ T8687] tipc: Started in network mode [ 222.524205][ T8687] tipc: Node identity 7f000001, cluster identity 4711 [ 222.537715][ T8687] tipc: Enabled bearer , priority 10 [ 223.350840][ T8713] program syz.4.934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.654786][ T8] tipc: Node number set to 2130706433 [ 224.365480][ T8738] batadv0: entered promiscuous mode [ 224.407426][ T8738] batadv0: left promiscuous mode [ 224.478515][ T8741] loop2: detected capacity change from 0 to 512 [ 224.499774][ T8741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.548565][ T8741] EXT4-fs (loop2): 1 truncate cleaned up [ 224.559341][ T8741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.714067][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.593661][ T8756] loop4: detected capacity change from 0 to 40427 [ 225.635829][ T8756] F2FS-fs (loop4): invalid crc value [ 225.681846][ T8756] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.820582][ T8774] loop3: detected capacity change from 0 to 1024 [ 225.834726][ T8756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.171621][ T8761] loop2: detected capacity change from 0 to 65536 [ 226.215514][ T8761] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 226.280453][ T8761] XFS (loop2): Ending clean mount [ 226.285994][ T8791] tipc: Enabled bearer , priority 10 [ 226.293407][ T8761] XFS (loop2): Quotacheck needed: Please wait. [ 226.326696][ T8779] syz.4.952: attempt to access beyond end of device [ 226.326696][ T8779] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.367863][ T8779] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 226.372517][ T8761] XFS (loop2): Quotacheck: Done. [ 226.495415][ T8793] netlink: 96 bytes leftover after parsing attributes in process `syz.3.963'. [ 226.525223][ T5775] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 228.231800][ C0] ------------[ cut here ]------------ [ 228.231883][ T5762] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.245713][ C0] refcount_t: addition on 0; use-after-free. [ 228.252292][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xf3/0x1b0 [ 228.261393][ C0] Modules linked in: [ 228.265337][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.93-syzkaller #0 [ 228.273027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.283617][ C0] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 228.290349][ C0] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 228.310030][ C0] RSP: 0018:ffffc90000007848 EFLAGS: 00010246 [ 228.316167][ C0] RAX: ad53234c60400f00 RBX: 0000000000000002 RCX: ffffffff8ca93380 [ 228.324223][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 228.332287][ C0] RBP: ffffc900000079d0 R08: ffffc90000007447 R09: 1ffff92000000e88 [ 228.340394][ C0] R10: dffffc0000000000 R11: fffff52000000e89 R12: ffff8880780f9d40 [ 228.348411][ C0] R13: dffffc0000000000 R14: ffff8880780f9e94 R15: ffff888026408c00 [ 228.356465][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 228.365496][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.372165][ C0] CR2: 00007f34587b2060 CR3: 0000000031185000 CR4: 00000000003506f0 [ 228.380212][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.388258][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.396281][ C0] Call Trace: [ 228.399572][ C0] [ 228.402469][ C0] tipc_crypto_xmit+0x17cf/0x2250 [ 228.407573][ C0] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 228.412886][ C0] tipc_bearer_xmit_skb+0x246/0x3f0 [ 228.418148][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 228.422003][ T5762] usb 1-1: Using ep0 maxpacket: 8 [ 228.423512][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 228.433942][ C0] tipc_disc_timeout+0x581/0x6d0 [ 228.438939][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 228.444088][ T5762] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.444240][ C0] call_timer_fn+0x16e/0x530 [ 228.456852][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 228.462144][ C0] ? call_timer_fn+0xbf/0x530 [ 228.463880][ T5762] usb 1-1: config 0 has no interface number 0 [ 228.466859][ C0] ? __run_timers+0x7d0/0x7d0 [ 228.477732][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.483047][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 228.485886][ T5762] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.488274][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 228.503265][ T5762] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.504461][ C0] __run_timers+0x52d/0x7d0 [ 228.518083][ C0] ? detach_timer+0x2b0/0x2b0 [ 228.520652][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.522842][ C0] ? lock_chain_count+0x20/0x20 [ 228.522881][ C0] run_timer_softirq+0x67/0xf0 [ 228.522904][ C0] handle_softirqs+0x280/0x820 [ 228.522931][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 228.522960][ C0] ? do_softirq+0x180/0x180 [ 228.522987][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 228.534672][ T5762] usb 1-1: config 0 descriptor?? [ 228.535874][ C0] __irq_exit_rcu+0xc7/0x190 [ 228.548960][ T5762] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 228.550190][ C0] ? irq_exit_rcu+0x20/0x20 [ 228.584556][ C0] irq_exit_rcu+0x9/0x20 [ 228.588853][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 228.594611][ C0] [ 228.597586][ C0] [ 228.600555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.606637][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 228.612446][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 10 42 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 228.632160][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 228.638290][ C0] RAX: ad53234c60400f00 RBX: ffffffff81618a7b RCX: ad53234c60400f00 [ 228.646368][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 228.654442][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 228.662519][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e49a768 [ 228.670636][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 228.678721][ C0] ? do_idle+0x1eb/0x510 [ 228.683081][ C0] default_idle+0x13/0x20 [ 228.687463][ C0] default_idle_call+0x6c/0xa0 [ 228.692328][ C0] do_idle+0x1eb/0x510 [ 228.696451][ C0] ? asan.module_dtor+0x20/0x20 [ 228.701367][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 228.706668][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 228.712673][ C0] ? _raw_spin_unlock+0x40/0x40 [ 228.717600][ C0] cpu_startup_entry+0x43/0x60 [ 228.722471][ C0] rest_init+0x2e2/0x300 [ 228.726766][ C0] ? time_init+0x40/0x40 [ 228.731066][ C0] arch_call_rest_init+0xe/0x10 [ 228.736034][ C0] start_kernel+0x459/0x4e0 [ 228.740602][ C0] x86_64_start_reservations+0x2a/0x30 [ 228.746175][ C0] x86_64_start_kernel+0x60/0x60 [ 228.751171][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 228.757366][ C0] [ 228.760430][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.767751][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.93-syzkaller #0 [ 228.775428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.785537][ C0] Call Trace: [ 228.788857][ C0] [ 228.791744][ C0] dump_stack_lvl+0x16c/0x230 [ 228.796477][ C0] ? show_regs_print_info+0x20/0x20 [ 228.801729][ C0] ? load_image+0x3b0/0x3b0 [ 228.806292][ C0] panic+0x2c0/0x710 [ 228.810243][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 228.814806][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 228.821111][ C0] __warn+0x2e0/0x470 [ 228.825162][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 228.830680][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 228.831038][ T5762] usb 1-1: USB disconnect, device number 15 [ 228.842115][ C0] report_bug+0x2be/0x4f0 [ 228.846507][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 228.852024][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 228.857533][ C0] ? refcount_warn_saturate+0xf5/0x1b0 [ 228.863042][ C0] handle_bug+0xcf/0x120 [ 228.867343][ C0] exc_invalid_op+0x1a/0x50 [ 228.871914][ C0] asm_exc_invalid_op+0x1a/0x20 [ 228.876824][ C0] RIP: 0010:refcount_warn_saturate+0xf3/0x1b0 [ 228.882948][ C0] Code: 15 0a 01 0f 85 98 00 00 00 e8 39 41 66 fd 5b 41 5e c3 e8 30 41 66 fd c6 05 e1 00 15 0a 01 48 c7 c7 40 0f fc 8a e8 0d a5 30 fd <0f> 0b eb e0 e8 14 41 66 fd c6 05 c6 00 15 0a 01 48 c7 c7 a0 0f fc [ 228.902602][ C0] RSP: 0018:ffffc90000007848 EFLAGS: 00010246 [ 228.908722][ C0] RAX: ad53234c60400f00 RBX: 0000000000000002 RCX: ffffffff8ca93380 [ 228.916741][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 228.924754][ C0] RBP: ffffc900000079d0 R08: ffffc90000007447 R09: 1ffff92000000e88 [ 228.932774][ C0] R10: dffffc0000000000 R11: fffff52000000e89 R12: ffff8880780f9d40 [ 228.940800][ C0] R13: dffffc0000000000 R14: ffff8880780f9e94 R15: ffff888026408c00 [ 228.948872][ C0] ? refcount_warn_saturate+0xf3/0x1b0 [ 228.954396][ C0] tipc_crypto_xmit+0x17cf/0x2250 [ 228.959490][ C0] ? tipc_crypto_do_cmd+0xd40/0xd40 [ 228.964752][ C0] tipc_bearer_xmit_skb+0x246/0x3f0 [ 228.970007][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 228.975355][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 228.980710][ C0] tipc_disc_timeout+0x581/0x6d0 [ 228.985707][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 228.990973][ C0] call_timer_fn+0x16e/0x530 [ 228.995606][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 229.000853][ C0] ? call_timer_fn+0xbf/0x530 [ 229.005598][ C0] ? __run_timers+0x7d0/0x7d0 [ 229.010343][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.015580][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 229.020804][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 229.026031][ C0] __run_timers+0x52d/0x7d0 [ 229.030566][ C0] ? detach_timer+0x2b0/0x2b0 [ 229.035265][ C0] ? lock_chain_count+0x20/0x20 [ 229.040143][ C0] run_timer_softirq+0x67/0xf0 [ 229.044927][ C0] handle_softirqs+0x280/0x820 [ 229.049710][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 229.054501][ C0] ? do_softirq+0x180/0x180 [ 229.059029][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 229.064252][ C0] __irq_exit_rcu+0xc7/0x190 [ 229.068868][ C0] ? irq_exit_rcu+0x20/0x20 [ 229.073392][ C0] irq_exit_rcu+0x9/0x20 [ 229.077650][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 229.083305][ C0] [ 229.086250][ C0] [ 229.089196][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.095193][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 229.100944][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 10 42 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 229.120574][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 229.126663][ C0] RAX: ad53234c60400f00 RBX: ffffffff81618a7b RCX: ad53234c60400f00 [ 229.134739][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 229.142725][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 229.150713][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e49a768 [ 229.158698][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 229.166691][ C0] ? do_idle+0x1eb/0x510 [ 229.170965][ C0] default_idle+0x13/0x20 [ 229.175314][ C0] default_idle_call+0x6c/0xa0 [ 229.180100][ C0] do_idle+0x1eb/0x510 [ 229.184191][ C0] ? asan.module_dtor+0x20/0x20 [ 229.189065][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 229.194282][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 229.200327][ C0] ? _raw_spin_unlock+0x40/0x40 [ 229.205211][ C0] cpu_startup_entry+0x43/0x60 [ 229.209995][ C0] rest_init+0x2e2/0x300 [ 229.214259][ C0] ? time_init+0x40/0x40 [ 229.218521][ C0] arch_call_rest_init+0xe/0x10 [ 229.223397][ C0] start_kernel+0x459/0x4e0 [ 229.227930][ C0] x86_64_start_reservations+0x2a/0x30 [ 229.233411][ C0] x86_64_start_kernel+0x60/0x60 [ 229.238373][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 229.244477][ C0] [ 229.248446][ C0] Kernel Offset: disabled [ 229.252863][ C0] Rebooting in 86400 seconds..