last executing test programs: 10m15.583432644s ago: executing program 1 (id=7384): syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001f40)='ns/time_for_children\x00') 10m15.284802633s ago: executing program 1 (id=7388): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 10m15.085797362s ago: executing program 1 (id=7390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac14140000000000000000000000000000f100000000000000000200ff010000000000000000000000000001"], 0xec}}, 0x0) 10m14.45908248s ago: executing program 32 (id=7393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}]}}}]}, 0x40}}, 0x0) 10m14.441904789s ago: executing program 1 (id=7397): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 10m14.078059348s ago: executing program 1 (id=7400): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x43403d0e, &(0x7f0000000800)) 10m13.524791886s ago: executing program 1 (id=7403): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8eca0faed", 0x78, 0x0, 0x0, 0x0) 10m13.014129964s ago: executing program 33 (id=7403): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8eca0faed", 0x78, 0x0, 0x0, 0x0) 10m13.004047744s ago: executing program 4 (id=7406): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create(0x8002) 10m12.774295073s ago: executing program 4 (id=7407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, 0x0) 10m12.456900652s ago: executing program 4 (id=7409): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2, &(0x7f0000000280)=ANY=[], 0xb, 0x2b2, &(0x7f0000000700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 10m11.83584167s ago: executing program 4 (id=7410): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 10m11.269121448s ago: executing program 4 (id=7413): syz_mount_image$xfs(&(0x7f000000cdc0), &(0x7f000000ce00)='./file0\x00', 0x0, &(0x7f000000ce40), 0x1, 0xcdaa, &(0x7f000000ce80)="$eJzs3M1uG1UfwOFjJ07f5hVS+CoVGyJYQBeQxBGNKja1kVqsShYSWWQHUZNWFWlBbZDawqIs2LCCS+ASEBVLroAFV4B6A5XKDWB0PB43mbiJQpOY5P88kj1zxvbYU+vnM1Flr1z6pJ3S/1LhYqr6/fvpia9qVz7+7daP59be/+7nYuvszODmcvniYPlSSqme0mwqltnEk4cP62lyOC78//R07YWUGpUnXioWHzwq79erGGyeLG+v9a8f5KerFxf2Y6V1+dLwn7F432pP37v+em3L+mRxeeOP4sJxt9K63Km8/7nFicG23ONMtcGIxvw2HZrBseWu82fxVErp1Lj/rTk6rfZyO7dejlNK8z7bAeBka7WXPzT/A0AsnVZ7uTL/z6SUlorR3+N+eQAAAAAAAAAAAMAInW7rcb22bdPElvXhLVe/+evPpV9/+bpcDjZfGbHLbd/B7/V6vf6X/Gcaaf7ajY31+Xzzy430UR4s5P2faaTP8qCZB6810t08WOwPTqcf8uC9q19srOUNZw/24CG4TvdB9VczaqPul7s/d+bT2XK5yy7LvfV/o6N3gr87D8fd/vq/9qRc7rLLHfP/Ab1U4ICNOP/f2m+tet5fOf8fcR5wdkf//Q3D8//8ZK+U5/+nUkqvHsZxAXvrdL99vMv8v0f/k69XHlMb1f/WceMZ5xfA0et0f+pV5v999J/eHrHLHf3Pbd78cu7Ovfvv3ri5en39+vqtxQvNxYXmheb583P9U4Li+jAOD9jF883/abrymDz/b/s02TH/zx7D+f/NepqaSndXNzdvLxTX5bBZXI/7BcK/M6L/ffz9/9Y7g/uVv+O99/n/xeF9gTF7zvl/rfKYvft/dAznfzihOt3KH+wHzP//wX+X/iEu/UNc+oe49A9x6R/i0j/EpX+IS/8Ql/4hLv1DXPqHuPQPcekf4tI/xKV/iEv/EJf+IS79Q1z6h7j0D3HpH+LSP8Slf4hL/xCX/iEu/UNc+oe49A9x6R/i0j/EpX+IS/8Ql/4hLv1DXPqHuPQPcekf4tI/xKV/iEv/EJf+IS79Q1z6h7j0D3HpH+LSP8Slf4hL/xCX/iEu/UNc+oe49A9x6R/i0j/Edefe/c9XNzbWb1uxYsXKcGXcn0zAYXsa/bhfCQAAAAAAAAAAAAAA8CxH8XWicR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJu/aM0E0QBAH+T5PtcI0IOkCKtB7CzcFMkiI2gRQ5gbWdvY2PnUYTUnsDDeANlnN0IqyCCuqC/H8zu/Cn27bydxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvF6TyiakaHb9YfbsbDy3R8cn9xu3e+f31XZmeTZnny1BERg4hZlHs2fFyvBzHajIud7XHajfTv/agOqg/CHrWd9HK9yo8blMZnrOrlotnG1OQtveaund/0R6VNq4hpf0HzZVb18qiT/2zY5r17vv+qXpP0jZp3y+c61+L/EbHV917zc+r52TzX+3Yc5WegKp+EGg8Av1H9zN5dR01aHYjW727cXUJIIECCBCdYIAnu7u7u7u7u7u7uDjFiJCEJ7u7uzrc6QGYms5kv6965i3tn771W1/M+VU9VnfP+TlU3/HPmWmbu/v6vqqpyteCccy0z4N/9f75vejxVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX/L/TZqzfd9m97vu824J/2e/97X+4LNPCKO+6++xsb6P8dDbzroOGH2HbgwkvcttmRk68z475XDhiwxzc9pv/dBjsPe9GEAwZstuw3PZT6Bhr4TQ+gvtHyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xX7P//xxfHbc79v6zv7x04tPvuencwT9s+OUdG35jo/7G+p+6//+ADQcOGPCl76iDXRebc6llJhswYMC5N91z+oQD/vHYLIMfm230IQYM8fenTvb327G+5oUn/PI46uCbMf/xGmv8/fUX/PzMQQP/aRD/rsfe3GXtna++buZ/Pk769fMY9O9PvnyvyQa/1zTbbLrFNFvvuNNUG2665vrrrr/uZjPMOv0M000/6/QzzTTNehtusu60X9x+zRy/mMUY/8ocR/znOb4657+f46B/cY4Tfu0Ux6U5TrjhV6896lADpv37VAa/6ZhDDVhg8Ml0wwwm+vLacQdfO/vogwYMmGXgV+MZOPDL3/+X1+wx+JoV5px/wX9j+fuIBn8nDPHlfTMPfrfP/w/2n8Y74ZCDf71fDBjGu+Cccy0z+O6vnv8lycxfnH329avmvyleO4v8/XbUr3nOf1g7A/7rtTPE17zGP6+dhb9+iLR2Bg9w4FAD/v3aGXzZGF+tncEjGHuoAWsMPpl+8Mk4Qw3YYfDJDH8/GW7AEYNPpl57803WGXzHuAP+k9tkA//x2f6adTbfP62zgf9urAP/3VfD4OOQX/yZ4O4v/vzvR+ts2P9ivHPOtczc/7TOpv3vGsv/6niH/K/HO9f/z3j/j/77758/F39fa1+u+HG/5jnTfnn8ms/FnoMGff3gv+47dR24/ouf8Tt11H/+t81QTwwY+F/NZZyvmct/+IyP/1/P5V/9+2Gyib8c0//qXOYYMNRXcxn81NlGH3LAvAMGDJjky7mM/a/MZdz/Hpfh4fov5zLwX5rLhP9wmeTvj000aMDQQw/YYc1tttlqui9uvzqd/ovb/3pNjvmvzH3U/565jzfk1879X3Mc8I+5D9jwnxfPv17//ecuf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xX7P//x5f7f+/xJTjfv7l3t9DfbjXoHu+6fF+w/2P3v//S9//sP//PYP2+nDQgH889m/7Th8x8D+8wDD/uGbgF/t6z7f0XAP+sZP2HP/pTf/z73FwE3615fNXx9G+PI7+xfr8+y68X+50O8Qb11wzaMCQ/7Rt8gjDDT9wpH/bGvmrN575i8NsT3x13T/vN//l3UP+h1/K320HDfriz/9bffVZ/Rf2Be77313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/ua/b/v+PL4x7PHj7FW19uhD7U2dfN//g3Pd5vuP/R+/9/6fsf9v9/fP7rzh404B+P/Zf7/39xTfv//9/QV5/V9v+v/5/yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xvP//wC+PA+5Ya+0Jphl8HHw+zp3jDvNNj/cb7n/q/v/DXjThgAGbLftND6W+gfr+d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7cv//AV/s//9VA+doXWCw////232N/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/r/PHLP535o9Z/H+TP2bx/23+mMX/d/ljFv/f549Z/P+QP2bxvyt/zOL/x/wxi/+f8scs/n/OH7P4350/ZvH/S/6Yxf+v+WMW/7/lj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/zOL/fv6Yxf+D/DGL/4f5Yxb/j/LHLP4f549Z/D/JH7P4f5o/ZvH/LH/M4v95/pjE/+8/5v+fs/gPzB+z+A/KH7P4D5E/ZvEfMn/M4j9U/pjFf+j8MYv/MPljFv9h88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7fyh+z+I+XP2bx/3b+mMV//Pwxi/938scs/t/NH7P4T5A/ZvGfMH/M4v+9/DGL/0T5Yxb/ifPHLP6T5I9Z/L+fP2bx/0H+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfx/mD9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1H+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+P84f8ziP1v+mMV/9vwxi/9P8scs/j/NH7P4/yx/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/O/PHLP6/yR+z+P82f8zi/7v8MYv/7/PHLP5/yB+z+N+VP2bx/2P+mMX/T/ljFv8/549Z/O/OH7P4/yV/zOL/1/wxi//f8scs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+z+L+XP2bxfz9/zOL/Qf6Yxf/D/DGL/0f5Yxb/j/PHLP6f5I9Z/D/NH7P4f5Y/ZvH/PH9M4j/EgPwxi//A/DGL/6D8MYv/EPljFv8h88cs/kPlj1n8h84fs/gPkz9m8R82f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+t/DGL/3j5Yxb/b+ePWfzHzx+z+H8nf8zi/938MYv/BPljFv8J88cs/t/LH7P4T5Q/ZvGfOH/M4j9J/pjF//v5Yxb/H+SPWfwnzR+z+E+WP2bxnzx/zOI/Rf6Yxf+H+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/H+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/4/zxyz+s+WPWfxnzx+z+P8kf8zi/9P8MYv/z/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/M3/M4v+b/DGL/2/zxyz+v8sfs/j/Pn/M4v+H/DGL/135Yxb/P+aPWfz/lD9m8f9z/pjF/+78MYv/X/LHLP5/zR+z+P8tf8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5Yxb/9/PHLP4f5I9Z/D/MH7P4f5Q/ZvH/OH/M4v9J/pjF/9P8MYv/Z/ljFv/P88ck/kMOyB+z+A/MH7P4D8ofs/gPkT9m8R8yf8ziP1T+mMV/6Pwxi/8w+WMW/2Hzxyz+w+WPWfyHzx+z+I+QP2bxHzF/zOI/Uv6YxX/k/DGL/yj5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/t/KH7P4j5c/ZvH/dv6YxX/8/DGL/3fyxyz+380fs/hPkD9m8Z8wf8zi/738MYv/RPljFv+J88cs/pPkj1n8v58/ZvH/Qf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/H+YP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/Uf6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4/zh/zOI/W/6YxX/2/DGL/0/yxyz+P80fs/j/LH/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv8788cs/r/JH7P4/zZ/zOL/u/wxi//v88cs/n/IH7P435U/ZvH/Y/6Yxf9P+WMW/z/nj1n8784fs/j/JX/M4v/X/DGL/9/yxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9Z/N/NH7P4v5c/ZvF/P3/M4v9B/pjF/8P8MYv/R/ljFv+P88cs/p/kj1n8P80fs/h/lj9m8f88f0ziP9SA/DGL/8D8MYv/oPwxi/8Q+WMW/yHzxyz+Q+WPWfyHzh+z+A+TP2bxHzZ/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8zi/638MYv/ePljFv9v549Z/MfPH7P4fyd/zOL/3fwxi/8E+WMW/wnzxyz+38sfs/hPlD9m8Z84f8ziP0n+mMX/+/ljFv8f5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/4f5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8f5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/j/PHLP6z5Y9Z/GfPH7P4/yR/zOL/0/wxi//P8scs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8zf8zi/5v8MYv/b/PHLP6/yx+z+P8+f8zi/4f8MYv/XfljFv8/5o9Z/P+UP2bx/3P+mMX/7vwxi/9f8scs/n/NH7P4/y1/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljFv/388cs/h/kj1n8P8wfs/h/lD9m8f84f8zi/0n+mMX/0/wxi/9n+WMW/8/zxyT+Qw/IH7P4D8wfs/gPyh+z+A+RP2bxHzJ/zOI/VP6YxX/o/DGL/zD5Yxb/YfPHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+38ofs/iPlz9m8f92/pjFf/z8MYv/d/LHLP7fzR+z+E+QP2bxnzB/zOL/vfwxi/9E+WMW/4nzxyz+k+SPWfy/nz9m8f9B/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8f5g/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9R/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/j/OH/M4j9b/pjFf/b8MYv/T/LHLP4/zR+z+P8sf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/X+WMW/zvzxyz+v8kfs/j/Nn/M4v+7/DGL/+/zxyz+f8gfs/jflT9m8f9j/pjF/0/5Yxb/P+ePWfzvzh+z+P8lf8zi/9f8MYv/3/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fs/i/lz9m8X8/f8zi/0H+mMX/w/wxi/9H+WMW/4/zxyz+n+SPWfw/zR+z+H+WP2bx/zx/TOI/zID8MYv/wPwxi/+g/DGL/xD5Yxb/IfPHLP5D5Y9Z/IfOH7P4D5M/ZvEfNn/M4j9c/pjFf/j8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOL/rfwxi/94+WMW/2/nj1n8x88fs/h/J3/M4v/d/DGL/wT5Yxb/CfPHLP7fyx+z+E+UP2bxnzh/zOI/Sf6Yxf/7+WMW/x/kj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/h/ljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/x/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/+P88cs/rPlj1n8Z88fs/j/JH/M4v/T/DGL/8/yxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bxvzN/zOL/m/wxi/9v88cs/r/LH7P4/z5/zOL/h/wxi/9d+WMW/z/mj1n8/5Q/ZvH/c/6Yxf/u/DGL/1/yxyz+f80fs/j/LX/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMW//fzxyz+H+SPWfw/zB+z+H+UP2bx/zh/zOL/Sf6Yxf/T/DGL/2f5Yxb/z/PHJP7DDsgfs/gPzB+z+A/KH7P4D5E/ZvEfMn/M4j9U/pjFf+j8MYv/MPljFv9h88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7fyh+z+I+XP2bx/3b+mMV//Pwxi/938scs/t/NH7P4T5A/ZvGfMH/M4v+9/DGL/0T5Yxb/ifPHLP6T5I9Z/L+fP2bx/0H+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfx/mD9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1H+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+P84f8ziP1v+mMV/9vwxi/9P8scs/j/NH7P4/yx/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/O/PHLP6/yR+z+P82f8zi/7v8MYv/7/PHLP5/yB+z+N+VP2bx/2P+mMX/T/ljFv8/549Z/O/OH7P4/yV/zOL/1/wxi//f8scs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+z+L+XP2bxfz9/zOL/Qf6Yxf/D/DGL/0f5Yxb/j/PHLP6f5I9Z/D/NH7P4f5Y/ZvH/PH9M4j/cgPwxi//A/DGL/6D8MYv/EPljFv8h88cs/kPlj1n8h84fs/gPkz9m8R82f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+t/DGL/3j5Yxb/b+ePWfzHzx+z+H8nf8zi/938MYv/BPljFv8J88cs/t/LH7P4T5Q/ZvGfOH/M4j9J/pjF//v5Yxb/H+SPWfwnzR+z+E+WP2bxnzx/zOI/Rf6Yxf+H+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/H+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/4/zxyz+s+WPWfxnzx+z+P8kf8zi/9P8MYv/z/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/M3/M4v+b/DGL/2/zxyz+v8sfs/j/Pn/M4v+H/DGL/135Yxb/P+aPWfz/lD9m8f9z/pjF/+78MYv/X/LHLP5/zR+z+P8tf8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5Yxb/9/PHLP4f5I9Z/D/MH7P4f5Q/ZvH/OH/M4v9J/pjF/9P8MYv/Z/ljFv/P88ck/sMPyB+z+A/MH7P4D8ofs/gPkT9m8R8yf8ziP1T+mMV/6Pwxi/8w+WMW/2Hzxyz+w+WPWfyHzx+z+I+QP2bxHzF/zOI/Uv6YxX/k/DGL/yj5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/t/KH7P4j5c/ZvH/dv6YxX/8/DGL/3fyxyz+380fs/hPkD9m8Z8wf8zi/738MYv/RPljFv+J88cs/pPkj1n8v58/ZvH/Qf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/H+YP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/Uf6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4/zh/zOI/W/6YxX/2/DGL/0/yxyz+P80fs/j/LH/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv8788cs/r/JH7P4/zZ/zOL/u/wxi//v88cs/n/IH7P435U/ZvH/Y/6Yxf9P+WMW/z/nj1n8784fs/j/JX/M4v/X/DGL/9/yxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9Z/N/NH7P4v5c/ZvF/P3/M4v9B/pjF/8P8MYv/R/ljFv+P88cs/p/kj1n8P80fs/h/lj9m8f88f0ziP8KA/DGL/8D8MYv/oPwxi/8Q+WMW/yHzxyz+Q+WPWfyHzh+z+A+TP2bxHzZ/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8zi/638MYv/ePljFv9v549Z/MfPH7P4fyd/zOL/3fwxi/8E+WMW/wnzxyz+38sfs/hPlD9m8Z84f8ziP0n+mMX/+/ljFv8f5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/4f5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8f5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/j/PHLP6z5Y9Z/GfPH7P4/yR/zOL/0/wxi//P8scs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8zf8zi/5v8MYv/b/PHLP6/yx+z+P8+f8zi/4f8MYv/XfljFv8/5o9Z/P+UP2bx/3P+mMX/7vwxi/9f8scs/n/NH7P4/y1/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljFv/388cs/h/kj1n8P8wfs/h/lD9m8f84f8zi/0n+mMX/0/wxi/9n+WMW/8/zxyT+Iw7IH7P4D8wfs/gPyh+z+A+RP2bxHzJ/zOI/VP6YxX/o/DGL/zD5Yxb/YfPHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+38ofs/iPlz9m8f92/pjFf/z8MYv/d/LHLP7fzR+z+E+QP2bxnzB/zOL/vfwxi/9E+WMW/4nzxyz+k+SPWfy/nz9m8f9B/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8f5g/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9R/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/j/OH/M4j9b/pjFf/b8MYv/T/LHLP4/zR+z+P8sf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/X+WMW/zvzxyz+v8kfs/j/Nn/M4v+7/DGL/+/zxyz+f8gfs/jflT9m8f9j/pjF/0/5Yxb/P+ePWfzvzh+z+P8lf8zi/9f8MYv/3/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fs/i/lz9m8X8/f8zi/0H+mMX/w/wxi/9H+WMW/4/zxyz+n+SPWfw/zR+z+H+WP2bx/zx/TOI/0oD8MYv/wPwxi/+g/DGL/xD5Yxb/IfPHLP5D5Y9Z/IfOH7P4D5M/ZvEfNn/M4j9c/pjFf/j8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOL/rfwxi/94+WMW/2/nj1n8x88fs/h/J3/M4v/d/DGL/wT5Yxb/CfPHLP7fyx+z+E+UP2bxnzh/zOI/Sf6Yxf/7+WMW/x/kj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/h/ljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/x/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/+P88cs/rPlj1n8Z88fs/j/JH/M4v/T/DGL/8/yxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bxvzN/zOL/m/wxi/9v88cs/r/LH7P4/z5/zOL/h/wxi/9d+WMW/z/mj1n8/5Q/ZvH/c/6Yxf/u/DGL/1/yxyz+f80fs/j/LX/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMW//fzxyz+H+SPWfw/zB+z+H+UP2bx/zh/zOL/Sf6Yxf/T/DGL/2f5Yxb/z/PHJP4jD8gfs/gPzB+z+A/KH7P4D5E/ZvEfMn/M4j9U/pjFf+j8MYv/MPljFv9h88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7fyh+z+I+XP2bx/3b+mMV//Pwxi/938scs/t/NH7P4T5A/ZvGfMH/M4v+9/DGL/0T5Yxb/ifPHLP6T5I9Z/L+fP2bx/0H+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfx/mD9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1H+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+P84f8ziP1v+mMV/9vwxi/9P8scs/j/NH7P4/yx/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/O/PHLP6/yR+z+P82f8zi/7v8MYv/7/PHLP5/yB+z+N+VP2bx/2P+mMX/T/ljFv8/549Z/O/OH7P4/yV/zOL/1/wxi//f8scs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+z+L+XP2bxfz9/zOL/Qf6Yxf/D/DGL/0f5Yxb/j/PHLP6f5I9Z/D/NH7P4f5Y/ZvH/PH9M4j/KgPwxi//A/DGL/6D8MYv/EPljFv8h88cs/kPlj1n8h84fs/gPkz9m8R82f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+t/DGL/3j5Yxb/b+ePWfzHzx+z+H8nf8zi/938MYv/BPljFv8J88cs/t/LH7P4T5Q/ZvGfOH/M4j9J/pjF//v5Yxb/H+SPWfwnzR+z+E+WP2bxnzx/zOI/Rf6Yxf+H+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/H+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/4/zxyz+s+WPWfxnzx+z+P8kf8zi/9P8MYv/z/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88f+x/lXVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV1f/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfAgAA//+NUdXs") 10m10.652843996s ago: executing program 4 (id=7417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="130000006800e9"], 0x1c}}, 0x0) 10m9.998573814s ago: executing program 34 (id=7417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="130000006800e9"], 0x1c}}, 0x0) 8m44.307588691s ago: executing program 2 (id=8239): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) 8m44.0229676s ago: executing program 2 (id=8242): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x3) 8m43.800593949s ago: executing program 2 (id=8246): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000001840)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d68f9", 0x1b}, {&(0x7f00000018c0)="527302587e0a4e47adc0ac2271cecd3b64741ae64d020282df390971b4a444b8f91154c4aac10a06647554a76f6f25d13eeff4ca222da2349d18a8c9d83b8565eb19ad11ad03000000000000001cd465f47b045480ad7b59413bcb50e00ab482f42f34453a36689bb7e96450e3f4f77154f8de760fa252cd1c9983347a2370420ca7c08dae2fe0f7fa703b873d85c170f236e2b154d9588f16", 0x99}], 0x3, 0x20000000, 0x0) 8m43.516852908s ago: executing program 2 (id=8250): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653d69759d7b2c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030352c6e6c733d63703835322c0003cbc07ba0a1136d4473bd2732cc9433380cd22dec53d0a6f1102a4eea5601100a9ad8b17df114bc4794e98d59b6e930d8b8f9647652dc225a077d8726a372a270"], 0x1, 0x6f8, &(0x7f0000002440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 8m43.127666357s ago: executing program 2 (id=8254): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 8m42.052674423s ago: executing program 2 (id=8264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6ffa80800030000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0x30) 8m41.521874761s ago: executing program 35 (id=8264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6ffa80800030000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0x30) 4m4.07908743s ago: executing program 0 (id=11868): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x34}], 0x1}, 0x0) 4m3.761234039s ago: executing program 0 (id=11871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xb0, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8f, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0x134}}, 0x0) 4m3.433890237s ago: executing program 0 (id=11876): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) 4m3.186982046s ago: executing program 0 (id=11881): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 4m2.672087495s ago: executing program 0 (id=11888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) 4m2.064344842s ago: executing program 0 (id=11897): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x1}) 4m1.602764001s ago: executing program 36 (id=11897): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x1}) 2m44.706043261s ago: executing program 5 (id=12772): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) 2m44.414623199s ago: executing program 5 (id=12773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x413b}, 0x1c) 2m44.213592768s ago: executing program 5 (id=12775): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x181041) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x49, @time={0xffff, 0x8d}, 0xf8, {0x5, 0xe}, 0x8, 0x36d9e8a9c9c1abd5, 0x6}) 2m43.956482487s ago: executing program 5 (id=12776): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xffff000}]}) 2m43.677960436s ago: executing program 5 (id=12778): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m42.516587622s ago: executing program 5 (id=12791): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x3e, 0x2, 0x0, "bc3e099e006605ba895b6a00523a89ee8e00"}) 2m26.401415224s ago: executing program 37 (id=12791): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x3e, 0x2, 0x0, "bc3e099e006605ba895b6a00523a89ee8e00"}) 2.511723989s ago: executing program 3 (id=14787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) 2.370361168s ago: executing program 3 (id=14790): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a200900053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.080416168s ago: executing program 3 (id=14795): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076001f"], 0x20}], 0x1}, 0x0) 1.811483397s ago: executing program 3 (id=14800): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33}}) 1.653927286s ago: executing program 9 (id=14802): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') lseek(r0, 0x9, 0x0) 1.546806005s ago: executing program 3 (id=14805): syz_mount_image$erofs(&(0x7f0000000f40), &(0x7f0000000380)='./file1\x00', 0x800845, &(0x7f0000000200)=ANY=[], 0xc1, 0x20c, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 1.340747385s ago: executing program 7 (id=14807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.340295924s ago: executing program 9 (id=14808): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000880)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc9a406a1f", 0x6}], 0x2, &(0x7f0000000200)=[@ip_ttl={{0x14}}], 0x18}, 0x24008894) 1.229909224s ago: executing program 8 (id=14810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0) 1.076774884s ago: executing program 9 (id=14811): unshare(0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) 1.076233784s ago: executing program 3 (id=14812): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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") 1.075880894s ago: executing program 7 (id=14813): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x4, 0x0) 1.075608904s ago: executing program 6 (id=14814): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000012003c000203000000100000000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 958.892393ms ago: executing program 8 (id=14815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4090}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}}, 0x0) 896.184413ms ago: executing program 9 (id=14816): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) 840.760143ms ago: executing program 6 (id=14817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001240)=@newtaction={0x1c, 0x76, 0x1, 0xfffffffd, 0x0, {}, [{0x4}, {0x4}]}, 0x1c}}, 0x0) 828.044473ms ago: executing program 7 (id=14818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xd, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 709.365162ms ago: executing program 9 (id=14819): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000c40)={0xb, 0x1, 0x0, "f501095236779640450064eb00f700000000e2ffffff000000000e00", 0x30324c4a}) 644.767132ms ago: executing program 8 (id=14820): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x260, 0x1c8, 0x1c8, 0x130, 0x130, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfc}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'wlan0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 644.232852ms ago: executing program 6 (id=14821): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x523, 0x2, 0x20000000, 0xcc10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 563.927042ms ago: executing program 7 (id=14822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x168}}, 0x0) 476.349241ms ago: executing program 9 (id=14823): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x5549, &(0x7f0000003d80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 416.809631ms ago: executing program 8 (id=14824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x2, 0x4, 0x3, 0x9}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 416.353221ms ago: executing program 6 (id=14825): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000900), 0x4) 265.745881ms ago: executing program 8 (id=14826): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, 0x0, 0x0) 265.044801ms ago: executing program 7 (id=14827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 219.718101ms ago: executing program 6 (id=14828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'wg2\x00', 0x100}) 726.86µs ago: executing program 6 (id=14829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 163.65µs ago: executing program 7 (id=14830): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="9e1dfc88c541e94042f5ce8c61d7b8e042e3f677008a9445bb7b68af565b2306c65441e11b23e7c6bf0cbaa5a9a7cda151f391a724af94a3307185499bc3145f6e8b206b85caebb8f7633e"], 0xfe, 0xa27, &(0x7f0000000e80)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 0s ago: executing program 8 (id=14831): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) kernel console output (not intermixed with test programs): 419166][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1622.497865][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1622.506973][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1622.519966][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.527282][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.607385][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1622.643176][ T5606] loop9: detected capacity change from 0 to 32768 [ 1622.644507][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1622.680844][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1622.743588][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1622.827258][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1622.845206][ T5606] XFS (loop9): Mounting V5 Filesystem [ 1622.860476][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1622.890433][ T5632] loop6: detected capacity change from 0 to 32768 [ 1622.913898][ T5632] XFS: ikeep mount option is deprecated. [ 1622.946938][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1622.956361][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1622.968898][ T5632] XFS (loop6): Mounting V5 Filesystem [ 1622.969174][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1623.064597][ T5632] XFS (loop6): Ending clean mount [ 1623.084163][ T4942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1623.086399][ T5606] XFS (loop9): Ending clean mount [ 1623.107165][ T5632] XFS (loop6): Quotacheck needed: Please wait. [ 1623.236151][ T5632] XFS (loop6): Quotacheck: Done. [ 1623.248131][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1623.272582][T22459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1623.311156][T22459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1623.459831][ T947] XFS (loop9): Unmounting Filesystem [ 1623.635705][T22085] XFS (loop6): Unmounting Filesystem [ 1623.663639][ T4269] Bluetooth: hci5: command 0x0419 tx timeout [ 1624.075499][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1624.145094][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1624.159135][ T4942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.277015][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1624.341527][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1624.413351][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1624.453666][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1624.497942][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1624.516855][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1624.586116][ T4942] device veth0_vlan entered promiscuous mode [ 1624.640306][ T4942] device veth1_vlan entered promiscuous mode [ 1624.775684][T18834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1624.792544][ T5743] loop7: detected capacity change from 0 to 64 [ 1624.796510][T18834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1624.867578][ T4942] device veth0_macvtap entered promiscuous mode [ 1624.904200][ T4942] device veth1_macvtap entered promiscuous mode [ 1624.910909][ T5743] hfs: request for non-existent node 16777216 in B*Tree [ 1624.947473][ T5743] hfs: request for non-existent node 16777216 in B*Tree [ 1625.000345][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.051899][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.094706][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.128871][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.162177][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.182780][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1625.229410][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1625.267525][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1625.299382][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1625.345312][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.372617][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.408962][ T4942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.460160][ T4942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.505733][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.533877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1625.556207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1625.581716][ T4942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.616749][ T4942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.620398][ T5727] loop8: detected capacity change from 0 to 32768 [ 1625.664077][ T5727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.13146 (5727) [ 1625.684621][ T4942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.693426][ T4942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.737338][ T5727] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1625.803246][ T5727] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1625.866981][ T5727] BTRFS info (device loop8): use no compression [ 1625.873321][ T5727] BTRFS info (device loop8): turning on flush-on-commit [ 1625.950333][ T5727] BTRFS info (device loop8): turning on sync discard [ 1625.957091][ T5727] BTRFS info (device loop8): force clearing of disk cache [ 1626.030840][ T5727] BTRFS info (device loop8): enabling auto defrag [ 1626.050872][ T5780] loop7: detected capacity change from 0 to 4096 [ 1626.077935][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.087486][ T5727] BTRFS info (device loop8): using free space tree [ 1626.122572][ T5780] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 1626.142996][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.244747][T18834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.267657][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1626.301512][T18834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.357593][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13160'. [ 1626.366701][ T5825] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13160'. [ 1626.441804][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1626.564463][ T5727] BTRFS info (device loop8): enabling ssd optimizations [ 1626.613257][ T5727] BTRFS info (device loop8): rebuilding free space tree [ 1626.972275][T24650] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1627.419373][ T5877] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·$h®ÌÜf€ǹ”óW£FGr‚¥òqðςû~QV7¶·"qHâ—ÉdNn9µƒÝD0ª)g [ 1627.419373][ T5877] .j``~éäN@»Û€Ï žWâctéö\x•|êbÎEïVyS$’µPAXg¦8mRC“l†EtùTíTS_øm)ל- (pid: 5877 comm: syz.3.13170) [ 1627.586720][ T27] audit: type=1800 audit(14098799.107:263): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13170" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=125006 res=0 errno=0 [ 1627.858845][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13173'. [ 1627.892022][ T5896] loop7: detected capacity change from 0 to 256 [ 1627.906841][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13173'. [ 1627.954600][ T5896] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 1628.155612][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13177'. [ 1628.429435][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13181'. [ 1629.448079][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1629.661472][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.696681][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.745821][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.767015][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.938713][ T6020] loop8: detected capacity change from 0 to 4096 [ 1630.509151][ T6042] loop7: detected capacity change from 0 to 4096 [ 1630.549257][ T6042] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1630.616070][ T5997] loop9: detected capacity change from 0 to 32768 [ 1630.671120][ T5997] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 1630.729873][ T6042] ntfs3: loop7: failed to convert "c46c" to koi8-r [ 1630.909905][ T6070] loop6: detected capacity change from 0 to 2048 [ 1630.978282][ T6070] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1631.013338][ T6070] UDF-fs: Scanning with blocksize 512 failed [ 1631.067460][ T6070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1631.190443][ T6089] loop8: detected capacity change from 0 to 8 [ 1631.524015][ T6105] binder: BC_ATTEMPT_ACQUIRE not supported [ 1631.529910][ T6105] binder: 6104:6105 ioctl c0306201 20000380 returned -22 [ 1631.924538][ T6130] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 1631.924538][ T6130] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 1632.056667][ T6136] loop6: detected capacity change from 0 to 256 [ 1632.063757][ T6136] exfat: Deprecated parameter 'utf8' [ 1632.108411][ T6141] netlink: 'syz.9.13232': attribute type 15 has an invalid length. [ 1632.110511][ T6136] exfat: Deprecated parameter 'namecase' [ 1632.116357][ T6141] netlink: 25 bytes leftover after parsing attributes in process `syz.9.13232'. [ 1632.173911][ T6136] exfat: Deprecated parameter 'utf8' [ 1632.231952][ T6136] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1633.180931][ T6137] loop8: detected capacity change from 0 to 32768 [ 1633.264671][ T6137] find_entry called with index = 0 [ 1633.271198][ T6137] read_mapping_page failed! [ 1633.306585][ T6137] ERROR: (device loop8): txCommit: [ 1633.306585][ T6137] [ 1633.357072][ T6137] ERROR: (device loop8): diFree: numfree > numinos [ 1633.357072][ T6137] [ 1634.190652][ T27] audit: type=1326 audit(14098805.272:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1634.287011][ T27] audit: type=1326 audit(14098805.300:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1634.439434][ T27] audit: type=1326 audit(14098805.300:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1634.466566][T20165] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1634.475438][ T6265] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1634.534954][ T27] audit: type=1326 audit(14098805.300:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.3.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1634.663404][T20165] usb 7-1: Using ep0 maxpacket: 32 [ 1634.670689][T20165] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.684682][T20165] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1634.698824][T20165] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1634.745650][T20165] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.766377][T20165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.775048][T20165] usb 7-1: SerialNumber: syz [ 1634.802268][ T6247] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1634.819948][T20165] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1635.053744][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.119505][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.162358][T20165] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1635.200963][T20165] usb 7-1: USB disconnect, device number 24 [ 1635.616532][ T6353] netlink: 'syz.9.13272': attribute type 21 has an invalid length. [ 1635.624582][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.9.13272'. [ 1635.886364][ T6364] loop8: detected capacity change from 0 to 256 [ 1636.013617][ T6364] FAT-fs (loop8): Directory bread(block 64) failed [ 1636.050938][ T6364] FAT-fs (loop8): Directory bread(block 65) failed [ 1636.090909][ T6364] FAT-fs (loop8): Directory bread(block 66) failed [ 1636.109106][ T6364] FAT-fs (loop8): Directory bread(block 67) failed [ 1636.115795][ T6364] FAT-fs (loop8): Directory bread(block 68) failed [ 1636.190301][ T6364] FAT-fs (loop8): Directory bread(block 69) failed [ 1636.224947][ T6364] FAT-fs (loop8): Directory bread(block 70) failed [ 1636.231835][ T6364] FAT-fs (loop8): Directory bread(block 71) failed [ 1636.287363][ T6364] FAT-fs (loop8): Directory bread(block 72) failed [ 1636.318656][ T6364] FAT-fs (loop8): Directory bread(block 73) failed [ 1636.349368][ T6386] loop9: detected capacity change from 0 to 16 [ 1636.406674][ T6386] erofs: (device loop9): mounted with root inode @ nid 36. [ 1636.465447][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1636.523749][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1636.584075][ T4269] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1636.609710][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 1636.684036][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 1636.716042][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 1636.725090][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 1636.886792][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 1636.907662][ T6409] loop7: detected capacity change from 0 to 256 [ 1636.930974][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 1636.982903][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 1637.012612][ T6386] erofs: (device loop9): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1637.038981][ T6386] erofs: (device loop9): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 1637.064024][ T6386] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1637.079813][ T6409] FAT-fs (loop7): Directory bread(block 64) failed [ 1637.089621][ T6409] FAT-fs (loop7): Directory bread(block 65) failed [ 1637.155002][ T27] audit: type=1800 audit(14098808.050:268): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.13279" name="file3" dev="loop9" ino=89 res=0 errno=0 [ 1637.216976][ T6409] FAT-fs (loop7): Directory bread(block 66) failed [ 1637.267178][ T6409] FAT-fs (loop7): Directory bread(block 67) failed [ 1637.335903][ T6409] FAT-fs (loop7): Directory bread(block 68) failed [ 1637.342511][ T6409] FAT-fs (loop7): Directory bread(block 69) failed [ 1637.405331][ T6409] FAT-fs (loop7): Directory bread(block 70) failed [ 1637.517923][ T6409] FAT-fs (loop7): Directory bread(block 71) failed [ 1637.524612][ T6409] FAT-fs (loop7): Directory bread(block 72) failed [ 1637.653120][ T6409] FAT-fs (loop7): Directory bread(block 73) failed [ 1638.307453][ T6476] bridge0: port 3(netdevsim0) entered blocking state [ 1638.383135][ T6476] bridge0: port 3(netdevsim0) entered disabled state [ 1638.442211][ T6476] device netdevsim0 entered promiscuous mode [ 1638.460239][ T6476] bridge0: port 3(netdevsim0) entered blocking state [ 1638.468140][ T6476] bridge0: port 3(netdevsim0) entered forwarding state [ 1638.582554][ T6482] loop6: detected capacity change from 0 to 4096 [ 1638.629108][ T6482] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1638.850872][ T6482] ntfs3: loop6: failed to convert "c46c" to koi8-u [ 1639.404081][ T6513] loop8: detected capacity change from 0 to 4096 [ 1639.493641][ T6513] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1639.509334][ T6467] loop9: detected capacity change from 0 to 32768 [ 1639.641030][ T6467] XFS (loop9): Mounting V5 Filesystem [ 1639.682317][ T6539] bridge0: port 3(netdevsim0) entered disabled state [ 1639.794805][ T6513] ntfs3: loop8: failed to convert "076c" to cp949 [ 1639.869516][ T6467] XFS (loop9): Ending clean mount [ 1639.891061][T20165] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1640.073581][ T947] XFS (loop9): Unmounting Filesystem [ 1640.104757][T20165] usb 8-1: Using ep0 maxpacket: 16 [ 1640.190249][T20165] usb 8-1: config 0 has an invalid interface number: 237 but max is 0 [ 1640.198491][T20165] usb 8-1: config 0 has no interface number 0 [ 1640.243940][T20165] usb 8-1: config 0 interface 237 has no altsetting 0 [ 1640.305250][T20165] usb 8-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1640.307763][ T6565] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13320'. [ 1640.329344][T20165] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.355526][T20165] usb 8-1: Product: syz [ 1640.381984][T20165] usb 8-1: Manufacturer: syz [ 1640.402984][T20165] usb 8-1: SerialNumber: syz [ 1640.424698][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13320'. [ 1640.432151][T20165] usb 8-1: config 0 descriptor?? [ 1640.480443][T20165] snd_usb_podhd 8-1:0.237: Line 6 POD HD300 found [ 1640.723639][T20165] snd_usb_podhd 8-1:0.237: cannot get proper max packet size [ 1640.741781][T20165] snd_usb_podhd 8-1:0.237: Line 6 POD HD300 now disconnected [ 1640.768971][T20165] snd_usb_podhd: probe of 8-1:0.237 failed with error -22 [ 1640.918903][ T6584] loop8: detected capacity change from 0 to 2048 [ 1640.985135][ T6584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1641.045093][T20165] usb 8-1: USB disconnect, device number 15 [ 1641.669251][ T6633] vivid-000: disconnect [ 1641.688078][ T6631] vivid-000: reconnect [ 1641.715935][ T6638] netlink: 'syz.6.13337': attribute type 13 has an invalid length. [ 1642.244594][ T6661] loop3: detected capacity change from 0 to 1024 [ 1642.328581][ T6668] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1642.493026][ T6676] loop8: detected capacity change from 0 to 128 [ 1642.549430][ T6676] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1642.628210][ T6676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1642.773999][ T6695] loop6: detected capacity change from 0 to 256 [ 1642.857538][ T6695] FAT-fs (loop6): Directory bread(block 64) failed [ 1642.898208][ T6695] FAT-fs (loop6): Directory bread(block 65) failed [ 1642.904913][ T6695] FAT-fs (loop6): Directory bread(block 66) failed [ 1642.959197][ T6695] FAT-fs (loop6): Directory bread(block 67) failed [ 1643.002748][ T6695] FAT-fs (loop6): Directory bread(block 68) failed [ 1643.013219][ T6695] FAT-fs (loop6): Directory bread(block 69) failed [ 1643.020928][ T27] audit: type=1326 audit(14098813.531:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1643.043093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.070502][ T6695] FAT-fs (loop6): Directory bread(block 70) failed [ 1643.106928][ T6695] FAT-fs (loop6): Directory bread(block 71) failed [ 1643.117825][ T6695] FAT-fs (loop6): Directory bread(block 72) failed [ 1643.140994][ T27] audit: type=1326 audit(14098813.587:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1643.173154][ T6695] FAT-fs (loop6): Directory bread(block 73) failed [ 1643.222900][ T27] audit: type=1326 audit(14098813.587:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1643.342239][ T27] audit: type=1326 audit(14098813.587:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035f8cda9 code=0x7ffc0000 [ 1643.364539][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.865960][ T6748] loop9: detected capacity change from 0 to 256 [ 1643.911005][ T6748] FAT-fs (loop9): Directory bread(block 64) failed [ 1643.953539][ T6748] FAT-fs (loop9): Directory bread(block 65) failed [ 1643.960239][ T6748] FAT-fs (loop9): Directory bread(block 66) failed [ 1643.994823][ T6748] FAT-fs (loop9): Directory bread(block 67) failed [ 1644.013892][ T6752] loop6: detected capacity change from 0 to 128 [ 1644.039739][ T6748] FAT-fs (loop9): Directory bread(block 68) failed [ 1644.046341][ T6748] FAT-fs (loop9): Directory bread(block 69) failed [ 1644.091642][ T6752] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1644.113540][ T6748] FAT-fs (loop9): Directory bread(block 70) failed [ 1644.120683][ T6748] FAT-fs (loop9): Directory bread(block 71) failed [ 1644.133025][ T6752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1644.178149][ T6748] FAT-fs (loop9): Directory bread(block 72) failed [ 1644.188570][ T6748] FAT-fs (loop9): Directory bread(block 73) failed [ 1644.733346][ T6790] loop3: detected capacity change from 0 to 1024 [ 1645.198121][ T6823] netlink: 'syz.9.13383': attribute type 11 has an invalid length. [ 1645.278469][ T6823] netlink: 216 bytes leftover after parsing attributes in process `syz.9.13383'. [ 1645.282083][ T6825] loop6: detected capacity change from 0 to 256 [ 1645.366181][ T6825] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1645.977331][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13391'. [ 1646.218879][ T6870] loop6: detected capacity change from 0 to 4096 [ 1646.272980][ T6870] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1646.295850][ T6882] netlink: 'syz.3.13396': attribute type 27 has an invalid length. [ 1646.449377][ T6870] ntfs3: loop6: failed to convert "076c" to cp949 [ 1646.673193][ T6882] bond0: (slave bond_slave_0): Releasing backup interface [ 1646.961492][ T6907] IPv6: sit1: Disabled Multicast RS [ 1647.260934][ T6925] loop6: detected capacity change from 0 to 256 [ 1647.262768][ T6922] loop8: detected capacity change from 0 to 1024 [ 1647.291467][ T6828] loop7: detected capacity change from 0 to 32768 [ 1647.339564][T22440] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (22440) [ 1647.358774][ T6922] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1647.374887][ T6925] FAT-fs (loop6): Directory bread(block 64) failed [ 1647.413916][ T6828] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1647.443553][ T6922] EXT4-fs error (device loop8): ext4_get_first_dir_block:3605: inode #11: comm syz.8.13402: directory missing '..' [ 1647.457458][ T6925] FAT-fs (loop6): Directory bread(block 65) failed [ 1647.488675][ T6828] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1647.499854][T24650] EXT4-fs (loop8): unmounting filesystem. [ 1647.516878][ T6925] FAT-fs (loop6): Directory bread(block 66) failed [ 1647.545520][ T6925] FAT-fs (loop6): Directory bread(block 67) failed [ 1647.552283][ T6925] FAT-fs (loop6): Directory bread(block 68) failed [ 1647.567354][ T6828] BTRFS info (device loop7): using free space tree [ 1647.599602][ T6925] FAT-fs (loop6): Directory bread(block 69) failed [ 1647.606692][ T6925] FAT-fs (loop6): Directory bread(block 70) failed [ 1647.631613][ T6925] FAT-fs (loop6): Directory bread(block 71) failed [ 1647.649244][ T6925] FAT-fs (loop6): Directory bread(block 72) failed [ 1647.661305][ T6925] FAT-fs (loop6): Directory bread(block 73) failed [ 1647.909467][ T6973] loop6: detected capacity change from 0 to 512 [ 1647.922044][ T6973] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1648.011143][ T6980] binder: 6979:6980 ioctl c018620c 20000080 returned -22 [ 1648.029783][ T6828] BTRFS info (device loop7): enabling ssd optimizations [ 1648.038323][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1648.230437][ T6993] netlink: 'syz.3.13412': attribute type 11 has an invalid length. [ 1648.281469][ T6993] netlink: 216 bytes leftover after parsing attributes in process `syz.3.13412'. [ 1648.404085][T22130] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1648.799231][ T7024] loop9: detected capacity change from 0 to 128 [ 1648.841755][ T7024] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1648.902271][ T7027] loop6: detected capacity change from 0 to 1764 [ 1648.930512][ T7024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1649.098560][ T7035] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1649.419175][ T7052] netlink: 44 bytes leftover after parsing attributes in process `syz.9.13423'. [ 1649.835774][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 1650.347560][ T7041] loop3: detected capacity change from 0 to 32768 [ 1650.402999][ T7041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13424 (7041) [ 1650.486961][ T7041] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1650.538873][ T7041] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1650.547936][ T7041] BTRFS info (device loop3): using free space tree [ 1650.560354][ T7109] netlink: 'syz.6.13437': attribute type 30 has an invalid length. [ 1650.624557][ T7109] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1650.916521][ T7139] netlink: 'syz.6.13441': attribute type 11 has an invalid length. [ 1650.925053][ T7139] netlink: 216 bytes leftover after parsing attributes in process `syz.6.13441'. [ 1651.009940][ T7041] BTRFS info (device loop3): enabling ssd optimizations [ 1651.220881][ T4942] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1651.465152][ T7172] loop8: detected capacity change from 0 to 256 [ 1652.434348][ T7217] loop9: detected capacity change from 0 to 8 [ 1652.627933][T22440] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1652.830553][ T7239] loop8: detected capacity change from 0 to 64 [ 1652.833696][ T7224] loop6: detected capacity change from 0 to 8192 [ 1652.912178][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 1652.926826][ T7224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1652.997657][ T7224] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1653.007030][ T7224] REISERFS (device loop6): using ordered data mode [ 1653.106090][ T7224] reiserfs: using flush barriers [ 1653.127239][ T7224] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1653.244159][ T7224] REISERFS (device loop6): checking transaction log (loop6) [ 1653.504610][ T7224] REISERFS (device loop6): Using tea hash to sort names [ 1653.532922][ T7224] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1653.834220][ T7316] netlink: 67 bytes leftover after parsing attributes in process `syz.9.13472'. [ 1654.149108][ T7327] libceph: resolve '0.0' (ret=-3): failed [ 1654.275716][ T7250] loop7: detected capacity change from 0 to 32768 [ 1654.347763][ T7250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.13466 (7250) [ 1654.398947][ T7250] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1654.451099][ T7250] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1654.480327][ T7250] BTRFS info (device loop7): using free space tree [ 1654.538452][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13482'. [ 1654.748186][ T7250] BTRFS info (device loop7): enabling ssd optimizations [ 1654.876495][T22130] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1655.283708][ T7399] loop3: detected capacity change from 0 to 128 [ 1655.383768][ T7399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1655.798014][ T7346] loop6: detected capacity change from 0 to 32768 [ 1655.839385][ T4942] EXT4-fs (loop3): unmounting filesystem. [ 1655.966454][ T7346] XFS (loop6): Mounting V5 Filesystem [ 1656.120567][T20168] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1656.168120][ T7444] netlink: 'syz.7.13485': attribute type 11 has an invalid length. [ 1656.176361][ T7444] netlink: 216 bytes leftover after parsing attributes in process `syz.7.13485'. [ 1656.192719][ T7346] XFS (loop6): Ending clean mount [ 1656.237418][ T7346] XFS (loop6): Quotacheck needed: Please wait. [ 1656.355249][T20168] usb 9-1: Using ep0 maxpacket: 32 [ 1656.367095][T20168] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1656.435979][T20168] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 1656.466191][T20168] usb 9-1: config 7 has no interface number 0 [ 1656.491626][T20168] usb 9-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 1656.531455][T20168] usb 9-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 1656.578042][T20168] usb 9-1: config 7 interface 187 has no altsetting 0 [ 1656.603013][ T7346] XFS (loop6): Quotacheck: Done. [ 1656.613171][T20168] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1656.653886][T20168] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.683769][T20168] usb 9-1: Product: syz [ 1656.694578][T20168] usb 9-1: Manufacturer: syz [ 1656.715689][T20168] usb 9-1: SerialNumber: syz [ 1656.720738][ T7474] netlink: 'syz.3.13498': attribute type 2 has an invalid length. [ 1656.759800][ T7404] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1656.771658][ T7404] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1656.778946][ T7474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1656.847276][T22085] XFS (loop6): Unmounting Filesystem [ 1656.874009][ T27] audit: type=1326 audit(14098826.496:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.9.13500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x0 [ 1656.937776][ T7487] SET target dimension over the limit! [ 1657.029054][T20168] usb 9-1: Limiting number of CPorts to U8_MAX [ 1657.088881][T20168] usb 9-1: Unused bulk OUT endpoint found: 0x03 [ 1657.103484][T20168] usb 9-1: Not enough endpoints found in device, aborting! [ 1657.283708][ T4808] usb 9-1: USB disconnect, device number 14 [ 1657.940387][ T7542] netlink: 'syz.6.13501': attribute type 27 has an invalid length. [ 1658.258760][ T7542] bond0: (slave bond_slave_0): Releasing backup interface [ 1659.318208][ T7622] loop9: detected capacity change from 0 to 64 [ 1659.366269][ T7625] loop7: detected capacity change from 0 to 256 [ 1659.434943][ T7625] exfat: Deprecated parameter 'namecase' [ 1659.482127][ T7625] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x364566b4, utbl_chksum : 0xe619d30d) [ 1659.592522][ T7647] netlink: 'syz.9.13540': attribute type 27 has an invalid length. [ 1659.711406][T20162] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1659.914432][T20162] usb 7-1: Using ep0 maxpacket: 32 [ 1659.923924][T20162] usb 7-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1659.967373][T20162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.989509][T20162] usb 7-1: Product: syz [ 1659.998556][T20162] usb 7-1: Manufacturer: syz [ 1660.017247][T20162] usb 7-1: SerialNumber: syz [ 1660.039066][T20162] usb 7-1: config 0 descriptor?? [ 1660.060163][T20162] hub 7-1:0.0: bad descriptor, ignoring hub [ 1660.082025][T20162] hub: probe of 7-1:0.0 failed with error -5 [ 1660.119866][ T7647] bond0: (slave bond_slave_0): Releasing backup interface [ 1660.127839][T20162] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1660.442792][ T7689] loop7: detected capacity change from 0 to 256 [ 1660.494080][T20162] gspca_vc032x: reg_w err -71 [ 1660.498831][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.515178][ T7689] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1660.530666][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.577274][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.587856][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.593243][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.645785][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.657008][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13552'. [ 1660.687688][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.697251][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.702600][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.773100][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.778549][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.833888][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.861183][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.862451][ T7709] loop9: detected capacity change from 0 to 1024 [ 1660.888259][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.909049][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.926294][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.943478][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.970661][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1660.999271][T20162] gspca_vc032x: I2c Bus Busy Wait 00 [ 1661.007559][ T7715] loop8: detected capacity change from 0 to 1764 [ 1661.024739][T20162] gspca_vc032x: Unknown sensor... [ 1661.059821][T20162] vc032x: probe of 7-1:0.0 failed with error -22 [ 1661.062060][ T7709] fuse: Bad value for 'fd' [ 1661.145590][T20162] usb 7-1: USB disconnect, device number 25 [ 1661.254726][ T7735] loop6: detected capacity change from 0 to 256 [ 1661.262393][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1661.346682][ T7735] FAT-fs (loop6): Directory bread(block 1285) failed [ 1661.358060][ T7735] FAT-fs (loop6): Directory bread(block 1286) failed [ 1661.365030][ T7735] FAT-fs (loop6): Directory bread(block 1287) failed [ 1661.408023][ T7735] FAT-fs (loop6): Directory bread(block 1288) failed [ 1661.440341][ T7735] FAT-fs (loop6): Directory bread(block 1289) failed [ 1661.456332][ T7735] FAT-fs (loop6): Directory bread(block 1290) failed [ 1661.484863][ T7735] FAT-fs (loop6): Directory bread(block 1291) failed [ 1661.508003][ T7735] FAT-fs (loop6): Directory bread(block 1292) failed [ 1661.551094][ T7735] FAT-fs (loop6): Directory bread(block 1293) failed [ 1661.558047][ T7735] FAT-fs (loop6): Directory bread(block 1294) failed [ 1661.675397][ T7758] MTD: Attempt to mount non-MTD device "/dev/nbd8" [ 1661.735340][ T93] block nbd8: Attempted send on invalid socket [ 1661.741892][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1661.768857][ T7754] loop3: detected capacity change from 0 to 4096 [ 1661.872349][ T7754] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1661.938867][ T7754] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1661.988365][ T7754] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1662.052753][ T7754] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1662.149479][ T7754] ntfs: volume version 3.1. [ 1662.650359][ T7809] loop7: detected capacity change from 0 to 2048 [ 1662.736910][ T7820] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1662.763096][ T7809] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12 [ 1662.804496][ T7809] Remounting filesystem read-only [ 1663.037016][ T7833] netlink: 'syz.6.13580': attribute type 10 has an invalid length. [ 1663.389263][ T7859] netlink: 'syz.8.13585': attribute type 11 has an invalid length. [ 1663.437014][ T7859] netlink: 216 bytes leftover after parsing attributes in process `syz.8.13585'. [ 1663.697224][ T7882] loop6: detected capacity change from 0 to 1764 [ 1663.864699][ T7889] netlink: 'syz.7.13592': attribute type 27 has an invalid length. [ 1664.863583][ T7878] loop9: detected capacity change from 0 to 32768 [ 1664.890026][ T7938] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1664.924735][ T7878] XFS: attr2 mount option is deprecated. [ 1664.939222][ T7938] overlayfs: overlapping lowerdir path [ 1665.008973][ T7878] XFS (loop9): Mounting V5 Filesystem [ 1665.122293][ T7878] XFS (loop9): Ending clean mount [ 1665.153547][ T7878] XFS (loop9): Quotacheck needed: Please wait. [ 1665.237713][ T7965] loop3: detected capacity change from 0 to 1024 [ 1665.311294][ T7878] XFS (loop9): Quotacheck: Done. [ 1665.503712][ T947] XFS (loop9): Unmounting Filesystem [ 1665.989267][ T8001] Unsupported ieee802154 address type: 0 [ 1666.393097][T20164] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1666.571286][ T7974] loop8: detected capacity change from 0 to 32768 [ 1666.606697][T20164] usb 8-1: Using ep0 maxpacket: 8 [ 1666.613750][T20164] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1666.635839][ T7974] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.13613 (7974) [ 1666.681010][T20164] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1666.712101][T20164] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.769677][ T7974] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1666.802872][ T7974] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1666.855514][ T7974] BTRFS info (device loop8): using free space tree [ 1666.900995][ T8051] netlink: 'syz.9.13629': attribute type 10 has an invalid length. [ 1666.946431][ T8051] netlink: 2 bytes leftover after parsing attributes in process `syz.9.13629'. [ 1666.970473][ T8051] device bridge0 entered promiscuous mode [ 1667.001925][T20164] usb 8-1: string descriptor 0 read error: -71 [ 1667.013988][T20164] hub 8-1:32.0: bad descriptor, ignoring hub [ 1667.027592][T20164] hub: probe of 8-1:32.0 failed with error -5 [ 1667.212410][T20164] usb 8-1: USB disconnect, device number 16 [ 1667.277830][ T7974] BTRFS info (device loop8): enabling ssd optimizations [ 1667.355979][ T8101] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1667.452786][T22623] udevd[22623]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1667.742445][T24650] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1667.828743][ T8117] loop6: detected capacity change from 0 to 512 [ 1667.884396][ T8117] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1667.956960][ T8117] EXT4-fs (loop6): 1 orphan inode deleted [ 1667.978584][ T8117] EXT4-fs (loop6): 1 truncate cleaned up [ 1668.037420][ T8117] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1668.147844][ T8134] loop9: detected capacity change from 0 to 128 [ 1668.262426][ T8127] loop3: detected capacity change from 0 to 4096 [ 1668.270222][ T8134] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1668.305227][ T8134] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 1668.312602][ T8127] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1668.640581][ T947] EXT4-fs (loop9): unmounting filesystem. [ 1668.647721][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1668.665678][ T8127] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1669.046209][ T8178] netlink: 'syz.7.13651': attribute type 10 has an invalid length. [ 1669.054326][ T8178] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13651'. [ 1669.140462][ T8178] bridge0: port 1(batadv0) entered blocking state [ 1669.236709][ T8178] bridge0: port 1(batadv0) entered disabled state [ 1669.254415][ T8178] device batadv0 entered promiscuous mode [ 1669.265762][ T8178] bridge0: port 1(batadv0) entered blocking state [ 1669.272406][ T8178] bridge0: port 1(batadv0) entered forwarding state [ 1669.329338][ T8191] netlink: 'syz.6.13654': attribute type 2 has an invalid length. [ 1669.532036][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1669.542507][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1670.030193][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13665'. [ 1670.101022][ T8233] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13665'. [ 1670.213558][ T8247] loop8: detected capacity change from 0 to 512 [ 1670.303863][ T8247] EXT4-fs error (device loop8): __ext4_fill_super:5388: inode #2: comm syz.8.13669: casefold flag without casefold feature [ 1670.327783][ T8247] EXT4-fs (loop8): get root inode failed [ 1670.336519][ T8247] EXT4-fs (loop8): mount failed [ 1670.990018][T20168] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1671.197827][T20168] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1671.229304][T20168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.276569][ T8316] loop3: detected capacity change from 0 to 8 [ 1671.278078][T20168] usb 7-1: Product: syz [ 1671.297282][ T8317] loop9: detected capacity change from 0 to 2048 [ 1671.303992][T20168] usb 7-1: Manufacturer: syz [ 1671.308624][T20168] usb 7-1: SerialNumber: syz [ 1671.354384][T20168] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1671.384351][ T8317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1671.507427][T20168] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1671.693267][ T8346] loop8: detected capacity change from 0 to 256 [ 1671.762111][ T8346] exfat: Deprecated parameter 'utf8' [ 1671.833000][ T8346] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1671.985752][T20166] usb 7-1: USB disconnect, device number 26 [ 1672.535251][ T8378] loop8: detected capacity change from 0 to 4096 [ 1672.609564][ T8385] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1672.668940][T20168] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1672.676522][T20168] ath9k_htc: Failed to initialize the device [ 1672.728359][T20166] usb 7-1: ath9k_htc: USB layer deinitialized [ 1673.004995][ T8409] loop8: detected capacity change from 0 to 1024 [ 1673.140624][ T8335] loop3: detected capacity change from 0 to 40427 [ 1673.227652][ T46] hfsplus: b-tree write err: -5, ino 4 [ 1673.235144][ T8335] F2FS-fs (loop3): invalid crc value [ 1673.280344][ T8335] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1673.459985][ T8335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1674.100911][T26144] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1674.318020][T26144] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1674.369093][T26144] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1674.411512][T26144] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1674.421261][T26144] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1674.454481][ T8481] loop8: detected capacity change from 0 to 4096 [ 1674.489531][ T8481] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1674.513526][T26144] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1674.525315][T26144] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.535120][T26144] usb 8-1: Product: syz [ 1674.539656][ T8481] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1674.561945][T26144] usb 8-1: Manufacturer: syz [ 1674.566628][T26144] usb 8-1: SerialNumber: syz [ 1674.605550][ T8481] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1674.619477][T26144] usb 8-1: config 0 descriptor?? [ 1674.631543][ T8481] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1674.650884][T26144] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 1674.674561][ T8481] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1674.694407][ T8502] loop6: detected capacity change from 0 to 256 [ 1674.719558][ T8481] ntfs: volume version 3.1. [ 1674.733236][ T8481] ntfs: (device loop8): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1674.765274][ T8502] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1674.796065][ T8481] ntfs: (device loop8): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1674.892467][ T8481] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1674.920188][ T8481] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1674.966935][T26144] ums-isd200: probe of 8-1:0.0 failed with error -22 [ 1674.989561][ T8481] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1675.125273][ T4305] usb 8-1: USB disconnect, device number 17 [ 1675.159538][T20168] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1675.383768][T20168] usb 7-1: Using ep0 maxpacket: 32 [ 1675.393941][T20168] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1675.426525][T20168] usb 7-1: config 0 has no interface number 0 [ 1675.457349][T20168] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1675.484516][T20168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.511984][T20168] usb 7-1: Product: syz [ 1675.522784][T20168] usb 7-1: Manufacturer: syz [ 1675.533366][T20168] usb 7-1: SerialNumber: syz [ 1675.572042][T20168] usb 7-1: config 0 descriptor?? [ 1675.595172][T20168] hub 7-1:0.89: bad descriptor, ignoring hub [ 1675.614123][T20168] hub: probe of 7-1:0.89 failed with error -5 [ 1675.653625][T20168] option 7-1:0.89: GSM modem (1-port) converter detected [ 1675.687522][T20168] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1675.776663][ T8561] loop3: detected capacity change from 0 to 164 [ 1676.014744][T20168] usb 7-1: USB disconnect, device number 27 [ 1676.037215][T20168] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1676.097632][T20168] option 7-1:0.89: device disconnected [ 1676.342010][ T8600] netlink: 19 bytes leftover after parsing attributes in process `syz.3.13736'. [ 1676.574138][ T8540] loop9: detected capacity change from 0 to 40427 [ 1676.622925][ T8540] F2FS-fs (loop9): invalid crc value [ 1676.690289][ T8540] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1676.893159][ T8540] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 1677.041239][ T8635] openvswitch: netlink: Flow actions attr not present in new flow. [ 1677.856703][ T8611] loop3: detected capacity change from 0 to 32768 [ 1678.065758][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.072166][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.163364][ T4305] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1678.343577][ T8696] loop9: detected capacity change from 0 to 1024 [ 1678.377231][ T4305] usb 9-1: Using ep0 maxpacket: 8 [ 1678.386104][ T4305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1678.472841][ T4305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1678.505896][ T4305] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1678.515631][ T4305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1678.610754][ T4305] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1678.653767][ T4305] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1678.707312][ T4305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.713362][ T8713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13762'. [ 1678.749855][ T4305] usb 9-1: config 0 descriptor?? [ 1678.762012][ T8713] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13762'. [ 1678.794415][ T8668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1678.839924][ T8720] netlink: 25 bytes leftover after parsing attributes in process `syz.6.13764'. [ 1678.910632][ T8724] device gre0 entered promiscuous mode [ 1679.257567][ T8745] netlink: 'syz.6.13768': attribute type 32 has an invalid length. [ 1679.296513][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13768'. [ 1679.313806][T20168] usb 9-1: USB disconnect, device number 15 [ 1679.318359][ T4272] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 1679.934114][ T8782] loop3: detected capacity change from 0 to 2048 [ 1679.941226][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13780'. [ 1679.989801][ T8791] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1680.129909][ T8795] loop8: detected capacity change from 0 to 764 [ 1680.177476][ T8795] rock: directory entry would overflow storage [ 1680.195576][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.215958][ T8795] rock: sig=0x4654, size=5, remaining=4 [ 1680.294987][ T8782] Remounting filesystem read-only [ 1680.313081][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.374878][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.387240][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.454779][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.485925][ T8813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1680.487826][ T8782] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1680.578421][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1680.578437][ T27] audit: type=1800 audit(14098848.665:274): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13778" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1680.771512][ T8827] loop6: detected capacity change from 0 to 64 [ 1681.024989][ T8839] loop9: detected capacity change from 0 to 256 [ 1681.095704][ T8846] loop8: detected capacity change from 0 to 128 [ 1681.147418][ T8846] FAT-fs (loop8): Directory bread(block 3236) failed [ 1681.154199][ T8846] FAT-fs (loop8): Directory bread(block 3237) failed [ 1681.242433][ T8846] FAT-fs (loop8): Directory bread(block 3238) failed [ 1681.249218][ T8846] FAT-fs (loop8): Directory bread(block 3239) failed [ 1681.307402][ T8846] FAT-fs (loop8): Directory bread(block 3240) failed [ 1681.348409][ T8846] FAT-fs (loop8): Directory bread(block 3241) failed [ 1681.360690][ T8846] FAT-fs (loop8): Directory bread(block 3242) failed [ 1681.367462][ T8846] FAT-fs (loop8): Directory bread(block 3243) failed [ 1681.476258][ T8846] FAT-fs (loop8): Directory bread(block 3236) failed [ 1681.515103][ T8846] FAT-fs (loop8): Directory bread(block 3237) failed [ 1681.841648][ T8888] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13801'. [ 1681.851102][ T8887] binfmt_misc: register: failed to install interpreter file ./file0 [ 1681.905117][ T8888] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13801'. [ 1682.080947][ T27] audit: type=1326 audit(14098850.077:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.9.13806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1682.184066][ T27] audit: type=1326 audit(14098850.077:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.9.13806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1682.316461][ T27] audit: type=1326 audit(14098850.105:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.9.13806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1682.340064][ T8914] openvswitch: netlink: EtherType 0 is less than min 600 [ 1682.414926][ T27] audit: type=1326 audit(14098850.105:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.9.13806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1682.500607][ T8925] netlink: 'syz.6.13813': attribute type 1 has an invalid length. [ 1682.509222][ T27] audit: type=1326 audit(14098850.105:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.9.13806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1682.532529][ T8925] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13813'. [ 1683.070015][ T8957] netlink: 'syz.6.13821': attribute type 21 has an invalid length. [ 1683.093792][ T8957] netlink: 'syz.6.13821': attribute type 20 has an invalid length. [ 1683.170394][ T8961] loop8: detected capacity change from 0 to 256 [ 1683.173128][ T8963] NILFS (nullb0): couldn't find nilfs on the device [ 1683.255780][ T8961] FAT-fs (loop8): Directory bread(block 64) failed [ 1683.262422][ T8961] FAT-fs (loop8): Directory bread(block 65) failed [ 1683.349013][ T27] audit: type=1326 audit(14098851.265:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.7.13827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1683.349201][ T8961] FAT-fs (loop8): Directory bread(block 66) failed [ 1683.445024][ T8961] FAT-fs (loop8): Directory bread(block 67) failed [ 1683.445429][ T27] audit: type=1326 audit(14098851.321:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.7.13827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1683.470951][ T8961] FAT-fs (loop8): Directory bread(block 68) failed [ 1683.539110][ T8961] FAT-fs (loop8): Directory bread(block 69) failed [ 1683.590587][ T8961] FAT-fs (loop8): Directory bread(block 70) failed [ 1683.594319][ T27] audit: type=1326 audit(14098851.321:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.7.13827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1683.637062][ T8961] FAT-fs (loop8): Directory bread(block 71) failed [ 1683.643753][ T8961] FAT-fs (loop8): Directory bread(block 72) failed [ 1683.698045][ T8961] FAT-fs (loop8): Directory bread(block 73) failed [ 1683.713103][ T27] audit: type=1326 audit(14098851.321:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.7.13827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1684.133973][ T9007] loop3: detected capacity change from 0 to 2048 [ 1684.182252][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13837'. [ 1684.313220][ T9020] loop9: detected capacity change from 0 to 1764 [ 1684.498830][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13843'. [ 1684.722373][ T9044] netlink: 1392 bytes leftover after parsing attributes in process `syz.6.13846'. [ 1684.787556][ T9051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13847'. [ 1684.817920][ T9053] sctp: [Deprecated]: syz.7.13848 (pid 9053) Use of int in maxseg socket option. [ 1684.817920][ T9053] Use struct sctp_assoc_value instead [ 1684.838235][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13847'. [ 1684.858571][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13847'. [ 1684.883593][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13847'. [ 1685.767131][ T9112] netlink: 'syz.3.13860': attribute type 2 has an invalid length. [ 1686.619911][ T4305] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1686.803196][ T9167] loop7: detected capacity change from 0 to 2048 [ 1686.829515][ T9167] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1686.840640][ T4305] usb 4-1: Using ep0 maxpacket: 32 [ 1686.850713][ T4305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.877902][ T4305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.898648][ T4305] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.912449][ T9167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1686.944646][ T27] audit: type=1800 audit(14098854.623:284): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13875" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 1686.951997][ T4305] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1687.002856][ T4305] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1687.013913][ T4305] usb 4-1: Product: syz [ 1687.018586][ T4305] usb 4-1: Manufacturer: syz [ 1687.023298][ T4305] usb 4-1: SerialNumber: syz [ 1687.041177][ T4305] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input115 [ 1687.404148][ T4305] usb 4-1: USB disconnect, device number 101 [ 1687.446187][ T4305] appletouch 4-1:1.0: input: appletouch disconnected [ 1687.560430][ T9219] __nla_validate_parse: 5 callbacks suppressed [ 1687.560452][ T9219] netlink: 476 bytes leftover after parsing attributes in process `syz.7.13882'. [ 1687.945335][T20164] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1688.149299][T20164] usb 9-1: Using ep0 maxpacket: 16 [ 1688.156544][T20164] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1688.189753][T20164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.214019][T20164] usb 9-1: config 0 descriptor?? [ 1688.279049][T20164] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1688.655133][T20164] gspca_sonixj: reg_r err -71 [ 1688.662903][T20164] sonixj: probe of 9-1:0.0 failed with error -71 [ 1688.704667][T20164] usb 9-1: USB disconnect, device number 16 [ 1689.152894][ T9234] loop6: detected capacity change from 0 to 32768 [ 1689.190883][ T9234] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 1689.238114][ T9234] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 1689.296792][ T9234] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 1689.318744][T20166] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 1689.345763][T20166] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 1689.464601][ T9320] netlink: 'syz.8.13900': attribute type 13 has an invalid length. [ 1689.472581][ T9320] netlink: 'syz.8.13900': attribute type 12 has an invalid length. [ 1689.508137][T20166] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 151ms [ 1689.550733][T20166] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 1689.580565][ T9234] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 1689.678796][ T27] audit: type=1326 audit(14098857.186:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.9.13901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1689.701079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.779653][ T27] audit: type=1326 audit(14098857.214:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.9.13901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1689.860000][ T27] audit: type=1326 audit(14098857.224:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.9.13901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1689.883202][ T27] audit: type=1326 audit(14098857.224:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.9.13901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1690.329352][ T9357] netlink: 'syz.6.13904': attribute type 21 has an invalid length. [ 1690.382100][ T9360] netlink: 'syz.9.13908': attribute type 21 has an invalid length. [ 1690.429099][ T9360] netlink: 156 bytes leftover after parsing attributes in process `syz.9.13908'. [ 1690.475048][ T9291] loop3: detected capacity change from 0 to 32768 [ 1690.543135][ T9291] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.13896 (9291) [ 1690.610595][ T9291] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1690.637528][ T9291] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1690.671360][ T9291] BTRFS info (device loop3): doing ref verification [ 1690.678084][ T9291] BTRFS info (device loop3): turning off barriers [ 1690.717356][ T9291] BTRFS info (device loop3): enabling auto defrag [ 1690.739049][ T9291] BTRFS info (device loop3): turning on sync discard [ 1690.745823][ T9291] BTRFS info (device loop3): enabling ssd optimizations [ 1690.820947][ T9291] BTRFS info (device loop3): using spread ssd allocation scheme [ 1690.842326][ T9291] BTRFS info (device loop3): using free space tree [ 1690.981458][ T9383] loop6: detected capacity change from 0 to 4096 [ 1691.514578][ T4942] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1691.697713][ T9433] kAFS: unable to lookup cell '/' [ 1692.019310][ T9376] loop7: detected capacity change from 0 to 32768 [ 1692.072706][ T9376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.13911 (9376) [ 1692.114178][ T9451] loop9: detected capacity change from 0 to 64 [ 1692.139028][ T9376] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1692.181185][ T9456] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13928'. [ 1692.199701][ T9376] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1692.232556][ T9456] netlink: 'syz.8.13928': attribute type 3 has an invalid length. [ 1692.244950][ T9376] BTRFS info (device loop7): using free space tree [ 1692.615737][ T9376] BTRFS info (device loop7): enabling ssd optimizations [ 1692.863247][T22130] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1693.995548][ T9537] loop3: detected capacity change from 0 to 1764 [ 1694.367210][ T9507] loop8: detected capacity change from 0 to 32768 [ 1694.393248][ T9507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.13935 (9507) [ 1694.479134][ T9518] loop9: detected capacity change from 0 to 32768 [ 1694.502363][ T9507] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1694.531951][ T9518] (syz.9.13937,9518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1694.534602][ T9507] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1694.604719][ T9560] misc userio: No port type given on /dev/userio [ 1694.622260][ T9507] BTRFS info (device loop8): using free space tree [ 1694.630923][ T9518] (syz.9.13937,9518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1694.770615][ T9518] JBD2: Ignoring recovery information on journal [ 1695.009887][ T9518] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1695.065316][ T9507] BTRFS info (device loop8): enabling ssd optimizations [ 1695.071324][ T9589] loop3: detected capacity change from 0 to 1764 [ 1695.282094][ T947] ocfs2: Unmounting device (7,9) on (node local) [ 1695.451337][T24650] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1696.490623][ T9649] xt_ecn: cannot match TCP bits for non-tcp packets [ 1696.705632][ T9663] netlink: 'syz.3.13965': attribute type 29 has an invalid length. [ 1696.724707][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1696.762967][ T9663] netlink: 'syz.3.13965': attribute type 29 has an invalid length. [ 1696.783021][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1697.022662][ T9679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1697.058889][ T9683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1697.264360][ T9691] netlink: 'syz.9.13974': attribute type 1 has an invalid length. [ 1697.319577][ T9697] netlink: 'syz.7.13975': attribute type 2 has an invalid length. [ 1697.355436][ T9697] netlink: 'syz.7.13975': attribute type 1 has an invalid length. [ 1697.357818][ T9700] loop8: detected capacity change from 0 to 256 [ 1697.447601][ T9700] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1697.503681][ T9704] loop6: detected capacity change from 0 to 256 [ 1697.544998][ T9704] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1697.583739][ T9707] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 1697.624591][ T9715] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13981'. [ 1697.917350][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13984'. [ 1698.113750][ T9735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1698.270376][ T9788] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 9788 comm: syz.7.13991) [ 1698.904884][ T9812] loop7: detected capacity change from 0 to 8192 [ 1698.945059][ T9812] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1699.022188][ T9812] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1699.068953][ T9812] REISERFS (device loop7): using ordered data mode [ 1699.110663][ T9812] reiserfs: using flush barriers [ 1699.135344][ T9812] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1699.223315][ T9812] REISERFS (device loop7): checking transaction log (loop7) [ 1699.335380][ T9845] netlink: 'syz.8.14009': attribute type 4 has an invalid length. [ 1699.598248][ T9812] REISERFS (device loop7): Using tea hash to sort names [ 1699.630548][ T9812] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1699.769590][ T9856] loop8: detected capacity change from 0 to 4096 [ 1699.789042][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1699.835140][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1699.848251][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1699.860633][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc0c00 [ 1699.893135][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc1c00 [ 1699.914282][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc2c00 [ 1699.952671][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc4c00 [ 1699.960624][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffc8c00 [ 1700.004567][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffd0c00 [ 1700.048944][ T9856] ntfs3: loop8: try to read out of volume at offset 0x3fffffe0c00 [ 1700.575932][ T9850] loop3: detected capacity change from 0 to 32768 [ 1700.626246][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14019'. [ 1700.646378][ T9850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14010 (9850) [ 1700.731086][ T9850] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1700.741345][ T9850] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1700.836221][ T9850] BTRFS info (device loop3): using free space tree [ 1701.155192][ T9925] loop7: detected capacity change from 0 to 736 [ 1701.172267][ T9850] BTRFS info (device loop3): enabling ssd optimizations [ 1701.335152][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.359755][ T9925] rock: directory entry would overflow storage [ 1701.405440][ T9923] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1701.436715][ T9925] rock: sig=0x3b10, size=4, remaining=3 [ 1701.469074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1701.480383][ T4942] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1701.840073][ T9908] loop6: detected capacity change from 0 to 32768 [ 1701.894595][ T9908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.14024 (9908) [ 1702.283972][ T9908] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1702.302778][ T9908] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1702.346736][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14035'. [ 1702.390338][ T9908] BTRFS info (device loop6): use no compression [ 1702.396722][ T9908] BTRFS info (device loop6): force clearing of disk cache [ 1702.457045][ T9908] BTRFS info (device loop6): turning on sync discard [ 1702.499384][ T9908] BTRFS info (device loop6): disabling free space tree [ 1702.525507][ T9908] BTRFS info (device loop6): force zlib compression, level 3 [ 1702.548863][ T9908] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1702.580858][T20160] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1702.607069][ T9908] BTRFS info (device loop6): use zstd compression, level 3 [ 1702.628716][ T9908] BTRFS info (device loop6): max_inline at 0 [ 1702.650319][ T9908] BTRFS info (device loop6): turning on async discard [ 1702.793155][ T9992] loop8: detected capacity change from 0 to 128 [ 1702.795273][T20160] usb 10-1: too many configurations: 241, using maximum allowed: 8 [ 1702.813844][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14040'. [ 1702.828933][T20160] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1702.838376][T20160] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.846570][T20160] usb 10-1: Product: syz [ 1702.851597][T20160] usb 10-1: Manufacturer: syz [ 1702.856324][T20160] usb 10-1: SerialNumber: syz [ 1702.867887][T20160] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1702.898466][T20160] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1702.945556][ T9908] BTRFS info (device loop6): enabling ssd optimizations [ 1702.974177][ T9908] BTRFS info (device loop6): rebuilding free space tree [ 1702.990376][T10014] loop7: detected capacity change from 0 to 65 [ 1703.004602][T10014] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1703.165387][ C0] usb 10-1: ath9k_htc: over RX MAX_PKT_NUM [ 1703.185594][ T9908] BTRFS info (device loop6): disabling free space tree [ 1703.232929][ T9908] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1703.274852][ T9908] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1703.381161][ T4305] usb 10-1: USB disconnect, device number 3 [ 1703.808374][T22085] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1704.003205][ T27] audit: type=1326 audit(14098870.581:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.7.14051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1704.056286][T20160] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1704.063522][T20160] ath9k_htc: Failed to initialize the device [ 1704.080405][T10067] program syz.3.14052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1704.091009][ T27] audit: type=1326 audit(14098870.609:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.7.14051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1704.114877][ T4305] usb 10-1: ath9k_htc: USB layer deinitialized [ 1704.205029][ T27] audit: type=1326 audit(14098870.609:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.7.14051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1704.323041][ T27] audit: type=1326 audit(14098870.609:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.7.14051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1704.451256][ T27] audit: type=1326 audit(14098870.609:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.7.14051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1704.733660][T10099] loop3: detected capacity change from 0 to 256 [ 1704.782138][T10101] netlink: 'syz.9.14059': attribute type 10 has an invalid length. [ 1704.986595][T27195] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1705.020744][T10115] loop3: detected capacity change from 0 to 64 [ 1705.210471][T27195] usb 9-1: Using ep0 maxpacket: 32 [ 1705.217532][T27195] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.270357][T27195] usb 9-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1705.310477][T27195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.361251][T27195] usb 9-1: config 0 descriptor?? [ 1705.372201][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14066'. [ 1705.395121][T27195] usb 9-1: bad CDC descriptors [ 1705.612130][ T4305] usb 9-1: USB disconnect, device number 17 [ 1707.174374][T10246] loop7: detected capacity change from 0 to 512 [ 1707.253145][T10246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1707.337120][T10246] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1707.341946][T10248] loop6: detected capacity change from 0 to 4096 [ 1707.371029][T10248] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1707.395227][T10246] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.14092: invalid indirect mapped block 2683928664 (level 1) [ 1707.410279][T10248] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1707.410560][T10248] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1707.431455][T10248] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1707.441600][T10248] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1707.471340][T10248] ntfs: volume version 3.1. [ 1707.521799][T10246] EXT4-fs (loop7): Remounting filesystem read-only [ 1707.528800][T10246] EXT4-fs (loop7): 1 truncate cleaned up [ 1707.551354][T10246] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1707.645471][T10259] loop9: detected capacity change from 0 to 764 [ 1707.778062][T22130] EXT4-fs (loop7): unmounting filesystem. [ 1708.069288][T10233] loop8: detected capacity change from 0 to 32768 [ 1708.156180][T10233] JBD2: Ignoring recovery information on journal [ 1708.276062][T10233] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1708.622982][T24650] ocfs2: Unmounting device (7,8) on (node local) [ 1708.635097][T10312] device team_slave_1 entered promiscuous mode [ 1709.166538][T10336] loop9: detected capacity change from 0 to 512 [ 1709.195267][T10336] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1709.251140][T10336] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #17: comm syz.9.14115: iget: bad i_size value: -6917529027641081756 [ 1709.287799][T10336] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.14115: couldn't read orphan inode 17 (err -117) [ 1709.302748][T10336] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1709.429028][ T947] EXT4-fs (loop9): unmounting filesystem. [ 1709.965406][T10369] loop3: detected capacity change from 0 to 2048 [ 1709.977953][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1709.977973][ T27] audit: type=1326 audit(14098876.166:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.9.14126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1709.990065][ T27] audit: type=1326 audit(14098876.184:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.9.14126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1710.000422][ T27] audit: type=1326 audit(14098876.194:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.9.14126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1710.000752][ T27] audit: type=1326 audit(14098876.194:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10371 comm="syz.9.14126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1710.014099][T10369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1710.192968][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14127'. [ 1710.221811][T10380] netlink: 'syz.8.14128': attribute type 12 has an invalid length. [ 1710.221841][T10380] netlink: 120 bytes leftover after parsing attributes in process `syz.8.14128'. [ 1710.530258][T10394] dlm: no locking on control device [ 1710.906365][T10414] loop7: detected capacity change from 0 to 1024 [ 1711.154631][ T4305] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1711.232891][T10437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1711.368718][ T4305] usb 4-1: Using ep0 maxpacket: 16 [ 1711.376334][ T4305] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1711.411548][ T4305] usb 4-1: config 0 has no interface number 0 [ 1711.417722][ T4305] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1711.457282][ T4305] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1711.478885][ T4305] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1711.499719][ T4305] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1711.528607][ T4305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.550434][ T4305] usb 4-1: Product: syz [ 1711.554676][ T4305] usb 4-1: Manufacturer: syz [ 1711.559303][ T4305] usb 4-1: SerialNumber: syz [ 1711.598926][ T4305] usb 4-1: config 0 descriptor?? [ 1711.615571][T10412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1711.622081][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14150'. [ 1711.622893][T10412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1711.701260][T10461] relay: one or more items not logged [item size (48) > sub-buffer size (3)] [ 1711.726257][T10464] netlink: 'syz.8.14153': attribute type 6 has an invalid length. [ 1711.979038][ T4305] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1712.003692][ T4305] usb 4-1: USB disconnect, device number 102 [ 1712.508183][T10505] netlink: 'syz.9.14163': attribute type 1 has an invalid length. [ 1712.533824][T10505] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14163'. [ 1712.990942][T10534] loop8: detected capacity change from 0 to 256 [ 1713.073042][T10534] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1713.198476][T10534] exFAT-fs (loop8): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1713.249814][T10534] exFAT-fs (loop8): Filesystem has been set read-only [ 1713.695546][T10574] autofs4:pid:10574:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1714.169742][T10553] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1714.299999][T10557] loop3: detected capacity change from 0 to 32768 [ 1714.360490][T10557] [ 1714.360490][T10557] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1714.360490][T10557] [ 1714.432386][T10557] ERROR: (device loop3): ea_get: invalid ea.flag [ 1714.432386][T10557] [ 1714.471861][T10610] netlink: 'syz.6.14191': attribute type 4 has an invalid length. [ 1714.541555][T10557] ERROR: (device loop3): remounting filesystem as read-only [ 1714.749086][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14194'. [ 1714.834656][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14194'. [ 1715.129203][T10644] netlink: 'syz.7.14201': attribute type 5 has an invalid length. [ 1715.541585][T10665] binder: 10664:10665 ioctl c018620c 20000700 returned -22 [ 1715.756248][T10675] loop6: detected capacity change from 0 to 2048 [ 1715.830118][T10675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1716.056399][T10693] affs: No valid root block on device nullb0 [ 1716.209135][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14217'. [ 1716.696987][T10724] loop9: detected capacity change from 0 to 512 [ 1716.833800][T10724] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1717.009984][T10685] loop8: detected capacity change from 0 to 32768 [ 1717.068566][T10685] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 scanned by syz.8.14212 (10685) [ 1717.136040][T10685] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1717.184539][T10685] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1717.193289][T10685] BTRFS info (device loop8): enabling ssd optimizations [ 1717.202552][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14226'. [ 1717.222234][ T947] EXT4-fs (loop9): unmounting filesystem. [ 1717.322948][T10685] BTRFS info (device loop8): not using ssd optimizations [ 1717.330101][T10685] BTRFS info (device loop8): turning off barriers [ 1717.372730][T10685] BTRFS info (device loop8): using free space tree [ 1717.863458][T10783] befs: (nullb0): No write support. Marking filesystem read-only [ 1717.864937][T10775] loop3: detected capacity change from 0 to 4096 [ 1717.900605][T10783] befs: (nullb0): invalid magic header [ 1717.944677][T10775] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1717.973294][T10775] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1718.028858][T10775] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1718.079043][T10775] ntfs: volume version 3.1. [ 1718.380299][ T4942] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1718.557188][T24650] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1719.084121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.212214][T10840] loop9: detected capacity change from 0 to 4096 [ 1719.279865][T10840] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 1719.637633][T10840] ntfs3: loop9: mft corrupted [ 1719.642424][T10840] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1719.660652][T10840] ntfs3: loop9: Failed to load $MFT. [ 1719.899926][T10876] loop3: detected capacity change from 0 to 256 [ 1720.122694][T10884] loop7: detected capacity change from 0 to 256 [ 1720.323669][T10896] netlink: 'syz.3.14255': attribute type 6 has an invalid length. [ 1720.359324][T10896] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14255'. [ 1720.395936][T10901] device sit0 entered promiscuous mode [ 1720.462037][T10901] netlink: 'syz.6.14256': attribute type 1 has an invalid length. [ 1720.519693][T10901] netlink: 1 bytes leftover after parsing attributes in process `syz.6.14256'. [ 1721.467510][T10969] loop3: detected capacity change from 0 to 256 [ 1721.797277][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14278'. [ 1721.831447][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14278'. [ 1722.307628][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14288'. [ 1722.810841][T11050] ip6t_srh: unknown srh match flags FDC7 [ 1722.899271][ T27] audit: type=1326 audit(14098888.251:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.7.14301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1723.015963][ T27] audit: type=1326 audit(14098888.288:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.7.14301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1723.101808][ T27] audit: type=1326 audit(14098888.288:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.7.14301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1723.208550][ T27] audit: type=1326 audit(14098888.288:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.7.14301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1723.268724][T11062] loop9: detected capacity change from 0 to 4096 [ 1723.290132][T11062] ntfs3: loop9: ino=3, Correct links count -> 2. [ 1723.373806][ T27] audit: type=1326 audit(14098888.288:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11057 comm="syz.7.14301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7638cda9 code=0x7ffc0000 [ 1723.396127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1723.678237][T11094] loop6: detected capacity change from 0 to 1024 [ 1723.941429][T11096] loop9: detected capacity change from 0 to 4096 [ 1724.063572][T11113] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1724.446561][T11136] loop6: detected capacity change from 0 to 256 [ 1724.578161][T11126] block device autoloading is deprecated and will be removed. [ 1725.502702][T11200] netlink: 'syz.7.14342': attribute type 21 has an invalid length. [ 1725.510699][T11200] netlink: 100 bytes leftover after parsing attributes in process `syz.7.14342'. [ 1726.157088][T11230] loop7: detected capacity change from 0 to 4096 [ 1726.187699][T11230] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1726.262157][T11230] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1726.313981][T11230] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1726.379913][T11230] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1726.399969][T11230] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1726.459775][T11230] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1726.490686][T11230] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1726.559840][T11230] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1726.602144][T11230] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1726.622148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.698175][T11230] ntfs: volume version 3.1. [ 1726.972150][T11224] loop3: detected capacity change from 0 to 32768 [ 1727.020614][T11224] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.14349 (11224) [ 1727.036452][T11223] loop9: detected capacity change from 0 to 32768 [ 1727.077700][T11223] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 scanned by syz.9.14350 (11223) [ 1727.101212][T11224] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1727.140597][T11223] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1727.144714][T11224] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1727.183580][T11223] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm [ 1727.201371][T11223] BTRFS info (device loop9): force zlib compression, level 3 [ 1727.220179][T11224] BTRFS info (device loop3): enabling ssd optimizations [ 1727.233110][T11223] BTRFS info (device loop9): force clearing of disk cache [ 1727.240302][T11223] BTRFS info (device loop9): setting nodatasum [ 1727.280891][T11224] BTRFS info (device loop3): not using ssd optimizations [ 1727.299568][T11224] BTRFS info (device loop3): turning off barriers [ 1727.361764][T11223] BTRFS info (device loop9): use zlib compression, level 3 [ 1727.361841][T11224] BTRFS info (device loop3): using free space tree [ 1727.369410][T11223] BTRFS info (device loop9): allowing degraded mounts [ 1727.454281][T11223] BTRFS info (device loop9): enabling disk space caching [ 1727.494026][T11223] BTRFS info (device loop9): disk space caching is enabled [ 1727.867892][T11333] loop6: detected capacity change from 0 to 4096 [ 1727.897451][T11333] ntfs3: loop6: ino=3, Correct links count -> 2. [ 1727.963743][T11347] xt_bpf: check failed: parse error [ 1727.963787][T11223] BTRFS info (device loop9): enabling ssd optimizations [ 1727.999678][ T4942] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1728.011286][T11223] BTRFS info (device loop9): rebuilding free space tree [ 1728.103244][T11223] BTRFS info (device loop9): disabling free space tree [ 1728.174463][T11223] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1728.184198][T11223] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1729.239075][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1729.273057][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1729.297838][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1729.331577][ T947] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1729.439716][T11411] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14388'. [ 1730.065914][T11434] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1731.405520][T11495] nvme_fabrics: missing parameter 'transport=%s' [ 1731.424378][T11495] nvme_fabrics: missing parameter 'nqn=%s' [ 1731.727089][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14425'. [ 1731.767101][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14425'. [ 1731.821182][T11526] netlink: 5 bytes leftover after parsing attributes in process `syz.8.14425'. [ 1731.853357][T11536] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1732.188508][T11557] ip6t_rpfilter: unknown options [ 1733.409252][T11635] netlink: 'syz.3.14461': attribute type 21 has an invalid length. [ 1733.466778][T11635] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14461'. [ 1733.669648][T17207] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1733.803925][T11661] loop9: detected capacity change from 0 to 256 [ 1733.901347][T17207] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1733.914771][T17207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.934045][T17207] usb 7-1: Product: syz [ 1733.950486][T17207] usb 7-1: Manufacturer: syz [ 1733.955207][T17207] usb 7-1: SerialNumber: syz [ 1734.002728][T17207] usb 7-1: config 0 descriptor?? [ 1734.012156][T17207] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1734.023353][ T4808] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 1734.074369][T11676] AppArmor: change_hat: Invalid input '0' [ 1734.075496][T11677] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14473'. [ 1734.240642][ T4808] usb 9-1: string descriptor 0 read error: -22 [ 1734.275194][ T4808] usb 9-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1734.310589][ T4808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.339455][ T4808] usb 9-1: config 0 descriptor?? [ 1734.365050][ T4808] usbtest 9-1:0.0: FX2 device [ 1734.374508][ T4808] usbtest 9-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1734.415920][T11684] loop7: detected capacity change from 0 to 4096 [ 1734.480946][T11684] ntfs: volume version 3.1. [ 1734.516415][T17207] usb 7-1: USB disconnect, device number 28 [ 1734.598379][ T4808] usb 9-1: USB disconnect, device number 18 [ 1734.984842][T11680] loop9: detected capacity change from 0 to 32768 [ 1735.012212][T11680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.14471 (11680) [ 1735.033091][T11680] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1735.048598][T11680] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1735.069484][T11680] BTRFS info (device loop9): using free space tree [ 1735.400255][T11680] BTRFS info (device loop9): enabling ssd optimizations [ 1735.677997][ T947] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1735.799490][T11777] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14491'. [ 1736.060342][T11782] loop8: detected capacity change from 0 to 4096 [ 1736.090650][T11782] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1736.525481][T11802] loop3: detected capacity change from 0 to 2048 [ 1736.558593][T11802] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1736.631100][T11811] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1736.691645][T11802] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 1736.705403][T11815] loop7: detected capacity change from 0 to 512 [ 1736.750663][T11802] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1736.819087][T11815] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1736.839297][T11815] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #4: comm syz.7.14499: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 32767, max 0(0), depth 0(0) [ 1736.844266][T11802] Remounting filesystem read-only [ 1736.874190][T11802] NILFS (loop3): error -5 truncating bmap (ino=15) [ 1736.903787][T11802] syz.3.14497: attempt to access beyond end of device [ 1736.903787][T11802] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1736.923875][T11815] EXT4-fs error (device loop7): ext4_quota_enable:6988: comm syz.7.14499: Bad quota inode: 4, type: 1 [ 1736.938247][T11802] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 1736.952215][T11815] EXT4-fs warning (device loop7): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1737.005253][T11815] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1737.023720][T11815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1737.193170][T22130] EXT4-fs (loop7): unmounting filesystem. [ 1737.207292][ T4942] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1737.250302][ T4942] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1737.257070][ T4942] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1737.330240][ T4942] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1737.367863][ T4942] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1737.396526][ T4942] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1737.410424][T11835] netlink: 1080 bytes leftover after parsing attributes in process `syz.8.14505'. [ 1737.423817][ T4942] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1737.467567][ T4942] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 1737.489320][ T4942] NILFS (loop3): discard dirty block: blocknr=131108, size=1024 [ 1737.518642][ T4942] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1737.534607][ T4942] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1737.552591][T11838] loop7: detected capacity change from 0 to 1024 [ 1737.671475][T11808] loop9: detected capacity change from 0 to 32768 [ 1737.771486][T11808] JBD2: Ignoring recovery information on journal [ 1737.778728][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1737.814480][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14509'. [ 1737.934586][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14510'. [ 1737.945410][T11808] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 1737.993907][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14510'. [ 1738.030700][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14510'. [ 1738.131327][ T947] ocfs2: Unmounting device (7,9) on (node local) [ 1738.319931][T11877] netlink: 108 bytes leftover after parsing attributes in process `syz.7.14514'. [ 1738.375539][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14514'. [ 1738.404847][T11877] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14514'. [ 1738.414258][T11877] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14514'. [ 1738.494262][T11879] loop8: detected capacity change from 0 to 4096 [ 1738.535304][T11879] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1738.684247][T11887] loop9: detected capacity change from 0 to 256 [ 1738.691318][T11887] exfat: Deprecated parameter 'namecase' [ 1738.708846][T11890] loop7: detected capacity change from 0 to 1024 [ 1738.715968][T11887] exfat: Deprecated parameter 'utf8' [ 1738.737808][T11887] exfat: Deprecated parameter 'namecase' [ 1738.823010][T11887] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1739.216509][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1739.216527][ T27] audit: type=1326 audit(14098903.517:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.9.14522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1739.292567][ T27] audit: type=1326 audit(14098903.554:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.9.14522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1739.369339][T11868] loop3: detected capacity change from 0 to 32768 [ 1739.388413][ T27] audit: type=1326 audit(14098903.564:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.9.14522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1739.517674][ T27] audit: type=1326 audit(14098903.564:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.9.14522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1739.580209][T11928] loop6: detected capacity change from 0 to 2048 [ 1739.623621][ T27] audit: type=1326 audit(14098903.564:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.9.14522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d78cda9 code=0x7ffc0000 [ 1739.731929][T11928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1739.827660][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1740.012873][T11955] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1740.213646][ T27] audit: type=1326 audit(14098904.452:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.6.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4023b8cda9 code=0x7ffc0000 [ 1740.307079][ T27] audit: type=1326 audit(14098904.480:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.6.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f4023b8cda9 code=0x7ffc0000 [ 1740.401072][ T27] audit: type=1326 audit(14098904.480:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.6.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4023b8cda9 code=0x7ffc0000 [ 1740.518953][ T27] audit: type=1326 audit(14098904.480:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.6.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4023b8cda9 code=0x7ffc0000 [ 1740.940487][T12006] loop7: detected capacity change from 0 to 1024 [ 1740.992632][T12015] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1741.024935][T12006] fuse: Bad value for 'fd' [ 1741.206439][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 1741.455910][T12039] loop8: detected capacity change from 0 to 256 [ 1741.738777][T12056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14565'. [ 1741.779445][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14565'. [ 1741.964322][T12072] loop6: detected capacity change from 0 to 512 [ 1742.041924][T12072] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1742.236721][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14573'. [ 1742.281636][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1742.349372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1742.372621][T12098] loop9: detected capacity change from 0 to 256 [ 1742.420632][T12098] FAT-fs (loop9): Directory bread(block 64) failed [ 1742.427912][T12098] FAT-fs (loop9): Directory bread(block 65) failed [ 1742.434678][T12098] FAT-fs (loop9): Directory bread(block 66) failed [ 1742.468734][T12098] FAT-fs (loop9): Directory bread(block 67) failed [ 1742.475557][T12098] FAT-fs (loop9): Directory bread(block 68) failed [ 1742.499407][T12098] FAT-fs (loop9): Directory bread(block 69) failed [ 1742.520984][T12098] FAT-fs (loop9): Directory bread(block 70) failed [ 1742.542263][T12098] FAT-fs (loop9): Directory bread(block 71) failed [ 1742.549007][T12098] FAT-fs (loop9): Directory bread(block 72) failed [ 1742.568510][T12114] loop7: detected capacity change from 0 to 256 [ 1742.597401][T12098] FAT-fs (loop9): Directory bread(block 73) failed [ 1742.622865][T12114] exfat: Deprecated parameter 'utf8' [ 1742.672085][T26144] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1742.715952][T12114] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1742.907523][T26144] usb 4-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 1742.940740][T26144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.983051][T26144] usb 4-1: config 0 descriptor?? [ 1743.026988][T26144] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 1743.425458][T26144] gspca_sn9c20x: Write register 1001 failed -71 [ 1743.437738][T26144] gspca_sn9c20x: Device initialization failed [ 1743.472450][T26144] gspca_sn9c20x: probe of 4-1:0.0 failed with error -71 [ 1743.523677][T26144] usb 4-1: USB disconnect, device number 103 [ 1743.646430][T12177] netlink: 92 bytes leftover after parsing attributes in process `syz.7.14596'. [ 1743.656313][T12177] netlink: 92 bytes leftover after parsing attributes in process `syz.7.14596'. [ 1743.749368][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1743.755804][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.782487][T28577] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1743.985394][T28577] usb 9-1: Using ep0 maxpacket: 8 [ 1743.993287][T28577] usb 9-1: config 0 has an invalid interface number: 6 but max is 2 [ 1744.004409][T12152] loop6: detected capacity change from 0 to 32768 [ 1744.015526][T28577] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.051300][T12152] XFS: ikeep mount option is deprecated. [ 1744.057028][T12152] XFS: noikeep mount option is deprecated. [ 1744.077243][T28577] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1744.124775][T28577] usb 9-1: config 0 has no interface number 1 [ 1744.141635][T28577] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1744.151308][T28577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.169953][T28577] usb 9-1: config 0 descriptor?? [ 1744.177511][T12152] XFS (loop6): Mounting V5 Filesystem [ 1744.185411][T12199] netlink: 'syz.3.14601': attribute type 9 has an invalid length. [ 1744.191832][T28577] usb 9-1: unknown number of interfaces: 2 [ 1744.352743][T12152] XFS (loop6): Ending clean mount [ 1744.395757][T12152] XFS (loop6): Quotacheck needed: Please wait. [ 1744.413543][T28577] usb 9-1: USB disconnect, device number 19 [ 1744.582817][T12152] XFS (loop6): Quotacheck: Done. [ 1744.763874][T22085] XFS (loop6): Unmounting Filesystem [ 1745.548247][T12273] loop8: detected capacity change from 0 to 4096 [ 1745.585403][T12273] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1745.599649][T12273] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1745.632372][T12273] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1745.653017][ T6154] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1745.696185][T12273] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1745.745015][T12273] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1745.776520][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14620'. [ 1745.795030][T12273] ntfs: volume version 3.1. [ 1745.801650][T12273] ntfs: (device loop8): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1745.825825][T12273] ntfs: (device loop8): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1745.878240][T12273] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1745.879417][ T6154] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1745.912519][T12273] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1745.956966][T12273] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1745.963045][ T6154] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1745.972465][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 1746.033824][ T6154] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1746.088053][ T6154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.118473][T12261] loop7: detected capacity change from 0 to 32768 [ 1746.123834][T12291] loop9: detected capacity change from 0 to 512 [ 1746.125297][ T6154] usb 4-1: Product: syz [ 1746.142557][T12291] EXT4-fs: Ignoring removed i_version option [ 1746.165022][T12291] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1746.165625][T12261] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.14615 (12261) [ 1746.189879][ T6154] usb 4-1: Manufacturer: syz [ 1746.194537][ T6154] usb 4-1: SerialNumber: syz [ 1746.233762][T12291] EXT4-fs (loop9): 1 truncate cleaned up [ 1746.239485][T12291] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1746.261194][T12261] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1746.268117][ T6154] usb 4-1: config 0 descriptor?? [ 1746.272451][T12261] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1746.286758][T12261] BTRFS info (device loop7): turning on flush-on-commit [ 1746.293774][T12261] BTRFS info (device loop7): turning off barriers [ 1746.301698][T12261] BTRFS info (device loop7): turning on sync discard [ 1746.309045][T12261] BTRFS info (device loop7): using free space tree [ 1746.340318][ T6154] usb 4-1: selecting invalid altsetting 0 [ 1746.437233][T12291] EXT4-fs error (device loop9): ext4_find_extent:900: inode #15: comm syz.9.14623: inode has invalid extent depth: 25964 [ 1746.559014][T12291] fs-verity (loop9, inode 15): Error -117 getting verity descriptor size [ 1746.579523][ T6154] usb 4-1: USB disconnect, device number 104 [ 1746.653395][T12322] loop8: detected capacity change from 0 to 4096 [ 1746.680750][T12322] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1746.698937][ T947] EXT4-fs (loop9): unmounting filesystem. [ 1746.788832][T12322] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1746.893628][T22130] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1747.056230][T22442] udevd[22442]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.476424][T12385] loop6: detected capacity change from 0 to 4096 [ 1747.589444][T12385] ntfs: volume version 3.1. [ 1748.149205][T12427] netlink: 252 bytes leftover after parsing attributes in process `syz.8.14646'. [ 1748.345247][ T52] block nbd3: Attempted send on invalid socket [ 1748.351652][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1748.382955][T12439] hpfs: hpfs_map_sector(): read error [ 1749.301039][T12501] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1749.309607][T28577] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1749.340981][T12501] overlayfs: missing 'lowerdir' [ 1749.373611][T12506] netlink: 'syz.8.14672': attribute type 21 has an invalid length. [ 1749.381651][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.8.14672'. [ 1749.512531][T28577] usb 7-1: Using ep0 maxpacket: 16 [ 1749.522313][T28577] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1749.548942][T12513] loop7: detected capacity change from 0 to 64 [ 1749.558797][T28577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.595621][T28577] usb 7-1: Product: syz [ 1749.608607][T28577] usb 7-1: Manufacturer: syz [ 1749.616443][T28577] usb 7-1: SerialNumber: syz [ 1749.636029][T28577] usb 7-1: config 0 descriptor?? [ 1749.676740][T12525] loop3: detected capacity change from 0 to 256 [ 1749.815905][T12525] FAT-fs (loop3): Directory bread(block 64) failed [ 1749.836774][T12525] FAT-fs (loop3): Directory bread(block 65) failed [ 1749.844372][T12525] FAT-fs (loop3): Directory bread(block 66) failed [ 1749.857357][T12525] FAT-fs (loop3): Directory bread(block 67) failed [ 1749.870560][T12525] FAT-fs (loop3): Directory bread(block 68) failed [ 1749.879560][T12535] tmpfs: Bad value for 'mpol' [ 1749.887171][T12525] FAT-fs (loop3): Directory bread(block 69) failed [ 1749.888127][T28577] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 1749.898334][T12525] FAT-fs (loop3): Directory bread(block 70) failed [ 1749.913961][T12525] FAT-fs (loop3): Directory bread(block 71) failed [ 1749.917926][T28577] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1749.923957][T12525] FAT-fs (loop3): Directory bread(block 72) failed [ 1749.972263][ T6154] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1749.994064][T12525] FAT-fs (loop3): Directory bread(block 73) failed [ 1750.143489][T12545] loop9: detected capacity change from 0 to 256 [ 1750.157162][T12545] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1750.187391][T28577] usb 7-1: USB disconnect, device number 29 [ 1750.196969][ T6154] usb 9-1: Using ep0 maxpacket: 32 [ 1750.256834][ T6154] usb 9-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1750.299758][ T6154] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1750.326994][ T6154] usb 9-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.40 [ 1750.346747][ T6154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.354922][ T6154] usb 9-1: Product: syz [ 1750.360004][ T6154] usb 9-1: Manufacturer: syz [ 1750.364642][ T6154] usb 9-1: SerialNumber: syz [ 1750.845015][ T6154] usbhid 9-1:1.0: can't add hid device: -71 [ 1750.854403][ T6154] usbhid: probe of 9-1:1.0 failed with error -71 [ 1750.894493][ T6154] usb 9-1: USB disconnect, device number 20 [ 1751.404291][T12585] loop7: detected capacity change from 0 to 32768 [ 1751.429118][T12616] loop6: detected capacity change from 0 to 1024 [ 1751.436396][T12616] EXT4-fs: Ignoring removed orlov option [ 1751.456220][T12616] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1751.482550][T12585] (syz.7.14689,12585,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.514136][T12616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1751.544318][T12585] (syz.7.14689,12585,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.639347][T12585] JBD2: Ignoring recovery information on journal [ 1751.840813][T12585] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1751.860471][T12627] loop8: detected capacity change from 0 to 2048 [ 1751.871176][T12627] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1751.902367][T12627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1751.963090][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1752.104838][T22130] ocfs2: Unmounting device (7,7) on (node local) [ 1752.171427][T12641] loop3: detected capacity change from 0 to 64 [ 1752.409947][T12654] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1752.689380][T12668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1752.760927][T12660] loop9: detected capacity change from 0 to 4096 [ 1752.774887][T12668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1752.793559][T12668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1752.805535][T12660] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 1752.874703][T12668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1752.895696][T12660] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1752.909400][T12668] IPv6: ADDRCONF(NETDEV_CHANGE): gretap3: link becomes ready [ 1753.124853][T12682] netlink: 'syz.3.14714': attribute type 32 has an invalid length. [ 1753.367850][T12692] loop3: detected capacity change from 0 to 256 [ 1753.432176][T12698] loop9: detected capacity change from 0 to 64 [ 1753.457415][T12692] FAT-fs (loop3): Directory bread(block 64) failed [ 1753.464051][T12692] FAT-fs (loop3): Directory bread(block 65) failed [ 1753.525929][T12692] FAT-fs (loop3): Directory bread(block 66) failed [ 1753.542833][T12692] FAT-fs (loop3): Directory bread(block 67) failed [ 1753.549606][T12692] FAT-fs (loop3): Directory bread(block 68) failed [ 1753.585809][T12692] FAT-fs (loop3): Directory bread(block 69) failed [ 1753.592842][T12692] FAT-fs (loop3): Directory bread(block 70) failed [ 1753.622952][T12692] FAT-fs (loop3): Directory bread(block 71) failed [ 1753.660940][T12692] FAT-fs (loop3): Directory bread(block 72) failed [ 1753.682706][T12692] FAT-fs (loop3): Directory bread(block 73) failed [ 1753.848542][T12711] loop9: detected capacity change from 0 to 2048 [ 1753.907624][T12711] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1753.981960][T12723] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1754.023172][T12711] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 147 [ 1754.044914][T12711] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1754.072035][T12711] Remounting filesystem read-only [ 1754.077570][T12711] NILFS (loop9): error -5 truncating bmap (ino=15) [ 1754.081733][T12727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1754.113858][T12727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1754.122078][T12727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1754.142569][T12711] syz.9.14723: attempt to access beyond end of device [ 1754.142569][T12711] loop9: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1754.189076][T12711] NILFS (loop9): I/O error reading meta-data file (ino=6, block-offset=1) [ 1754.231922][T12727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1754.452036][ T947] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 1754.486702][ T947] NILFS (loop9): discard dirty page: offset=0, ino=2 [ 1754.493464][ T947] NILFS (loop9): discard dirty block: blocknr=18, size=1024 [ 1754.529689][ T947] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1754.545829][ T947] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1754.593992][ T947] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1754.643027][ T947] NILFS (loop9): discard dirty page: offset=0, ino=6 [ 1754.662674][ T947] NILFS (loop9): discard dirty block: blocknr=35, size=1024 [ 1754.697450][ T947] NILFS (loop9): discard dirty block: blocknr=131108, size=1024 [ 1754.705164][ T947] NILFS (loop9): discard dirty block: blocknr=37, size=1024 [ 1754.747679][ T947] NILFS (loop9): discard dirty block: blocknr=38, size=1024 [ 1754.922117][T12769] ieee802154 phy0 wpan0: encryption failed: -90 [ 1754.954291][T12771] netlink: 'syz.6.14741': attribute type 10 has an invalid length. [ 1755.308707][T12789] infiniband syz1: set active [ 1755.318562][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1755.378814][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1755.419500][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1755.492321][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1755.547484][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1755.564727][T12789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1755.608158][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14754'. [ 1756.038093][T12825] loop6: detected capacity change from 0 to 1024 [ 1756.125239][T12825] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1756.229153][T22085] EXT4-fs (loop6): unmounting filesystem. [ 1756.366818][T12850] netlink: 'syz.3.14768': attribute type 10 has an invalid length. [ 1756.389103][T12836] loop9: detected capacity change from 0 to 4096 [ 1756.412061][T12850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.429484][T12836] __ntfs_error: 10 callbacks suppressed [ 1756.429506][T12836] ntfs: (device loop9): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1756.480791][T12850] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1756.489958][T12855] netlink: zone id is out of range [ 1756.496687][T12836] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1756.510460][T12855] netlink: get zone limit has 4 unknown bytes [ 1756.524324][T12836] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1756.554774][T12836] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1756.575054][ T6154] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1756.595399][T12836] ntfs: volume version 3.1. [ 1756.640941][T12836] ntfs: (device loop9): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1756.804939][ T6154] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1756.813207][ T6154] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1756.867682][ T6154] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1756.898824][ T6154] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1756.943247][ T6154] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1756.985517][ T6154] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1757.011415][ T6154] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1757.041560][ T6154] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1757.082316][ T6154] usb 8-1: Product: syz [ 1757.086608][ T6154] usb 8-1: Manufacturer: syz [ 1757.120363][ T6154] usb 8-1: SerialNumber: syz [ 1757.148164][ T6154] usb 8-1: config 0 descriptor?? [ 1757.153860][T12838] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1757.179953][ T6154] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1757.244490][ T6154] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1757.459644][T20168] usb 8-1: USB disconnect, device number 18 [ 1757.483785][T20168] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1757.558381][T12921] loop8: detected capacity change from 0 to 256 [ 1757.621297][T12921] FAT-fs (loop8): Directory bread(block 64) failed [ 1757.653115][T12921] FAT-fs (loop8): Directory bread(block 65) failed [ 1757.680920][T12921] FAT-fs (loop8): Directory bread(block 66) failed [ 1757.704097][T12921] FAT-fs (loop8): Directory bread(block 67) failed [ 1757.732948][T12921] FAT-fs (loop8): Directory bread(block 68) failed [ 1757.754433][T12921] FAT-fs (loop8): Directory bread(block 69) failed [ 1757.781619][T12921] FAT-fs (loop8): Directory bread(block 70) failed [ 1757.799452][T12921] FAT-fs (loop8): Directory bread(block 71) failed [ 1757.821177][T12921] FAT-fs (loop8): Directory bread(block 72) failed [ 1757.839127][T12921] FAT-fs (loop8): Directory bread(block 73) failed [ 1757.990778][T12941] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1758.250345][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14795'. [ 1758.765074][T12987] loop3: detected capacity change from 0 to 16 [ 1758.816750][T12987] erofs: (device loop3): mounted with root inode @ nid 36. [ 1758.851150][T12987] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1758.915143][T12987] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[1851] [ 1758.969561][T12987] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1760.161783][ T28] INFO: task syz-executor:22049 blocked for more than 143 seconds. [ 1760.169791][ T28] Not tainted 6.1.127-syzkaller #0 [ 1760.196317][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.243514][ T28] task:syz-executor state:D stack:21736 pid:22049 ppid:1 flags:0x00004004 [ 1760.266004][T13017] loop3: detected capacity change from 0 to 32768 [ 1760.274812][ T28] Call Trace: [ 1760.290282][ T28] [ 1760.304118][ T28] __schedule+0x143f/0x4570 [ 1760.325898][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1760.337561][T13017] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1760.359895][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1760.391769][ T28] ? print_irqtrace_events+0x210/0x210 [ 1760.411975][T13067] loop7: detected capacity change from 0 to 1764 [ 1760.412049][T13017] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1760.425810][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1760.459044][T13067] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 1760.466857][ T28] schedule+0xbf/0x180 [ 1760.490888][ T28] io_schedule+0x88/0x100 [ 1760.494505][T13017] ocfs2: Unmounting device (7,3) on (node local) [ 1760.557250][ T28] folio_wait_bit_common+0x878/0x1290 [ 1760.562727][ T28] ? folio_wait_bit+0x20/0x20 [ 1760.578026][ T28] ? find_get_entries+0x188/0x710 [ 1760.588092][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 1760.605669][ T28] ? __lock_acquire+0x125b/0x1f80 [ 1760.614659][ T28] truncate_inode_pages_range+0xbb5/0x1340 [ 1760.622335][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1760.627809][ T28] ? mapping_evict_folio+0x5b0/0x5b0 [ 1760.641389][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1760.651458][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1760.673406][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.678691][ T28] evict+0x53c/0x930 [ 1760.693510][ T28] ? proc_nr_inodes+0x310/0x310 [ 1760.699355][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.712599][ T28] evict_inodes+0x668/0x700 [ 1760.722777][ T28] ? clear_inode+0x150/0x150 [ 1760.735589][ T28] ? sync_filesystem+0x103/0x220 [ 1760.741113][ T28] generic_shutdown_super+0x94/0x340 [ 1760.747078][ T28] kill_block_super+0x7a/0xe0 [ 1760.754299][ T28] deactivate_locked_super+0xa0/0x110 [ 1760.761431][ T28] cleanup_mnt+0x490/0x520 [ 1760.765999][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.771750][ T28] task_work_run+0x246/0x300 [ 1760.776422][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 1760.782308][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1760.787916][ T28] exit_to_user_mode_loop+0xde/0x100 [ 1760.793822][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1760.799520][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1760.805677][ T28] do_syscall_64+0x47/0xb0 [ 1760.810699][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1760.816103][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.822139][ T28] RIP: 0033:0x7f6c1338e0d7 [ 1760.822299][T13051] loop9: detected capacity change from 0 to 40427 [ 1760.827167][ T28] RSP: 002b:00007ffe5ed44638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1760.842941][ T28] RAX: 0000000000000000 RBX: 00007f6c1340e08c RCX: 00007f6c1338e0d7 [ 1760.851674][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5ed446f0 [ 1760.861064][ T28] RBP: 00007ffe5ed446f0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.865592][T13051] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1760.872466][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5ed45780 [ 1760.885224][T13051] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1760.896695][ T28] R13: 00007f6c1340e08c R14: 0000000000177741 R15: 00007ffe5ed457c0 [ 1760.905921][ T28] [ 1760.909381][ T28] [ 1760.909381][ T28] Showing all locks held in the system: [ 1760.917233][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1760.953492][ T28] #0: ffffffff8d32b290 [ 1760.953540][T13051] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1760.965067][ T28] (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1760.974130][ T28] 1 lock held by rcu_tasks_trace/13: [ 1760.979544][ T28] #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1760.991117][ T28] 1 lock held by khungtaskd/28: [ 1760.996342][ T28] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1761.007005][ T28] 2 locks held by kworker/u4:4/62: [ 1761.012292][ T28] 2 locks held by getty/4009: [ 1761.017843][ T28] #0: ffff8880304ea098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1761.029286][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1761.040392][ T28] 2 locks held by kworker/u4:7/4315: [ 1761.045718][ T28] 1 lock held by syz-executor/22049: [ 1761.047338][T13051] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1761.066290][ T28] #0: ffff888065a8e0e0 (&type->s_umount_key#64){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 1761.077839][ T28] 2 locks held by syz.9.14823/13051: [ 1761.083719][ T28] #0: ffff88803073e0e0 (&type->s_umount_key#73/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 1761.095078][T13051] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1761.099207][ T28] #1: [ 1761.104896][T13051] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1761.108137][ T28] ffffffff8d2072e0 (console_lock){+.+.}-{0:0}, at: psi_task_switch+0x419/0x790 [ 1761.125706][ T28] 2 locks held by dhcpcd/13084: [ 1761.130728][ T28] #0: ffff88807aae2130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd00 [ 1761.140955][ T28] #1: ffffffff8d3306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1761.152364][ T28] [ 1761.202280][ T28] ============================================= [ 1761.202280][ T28] [ 1761.225018][ T28] NMI backtrace for cpu 1 [ 1761.229409][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0 [ 1761.237334][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1761.247423][ T28] Call Trace: [ 1761.250732][ T28] [ 1761.253691][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1761.258417][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1761.263918][ T28] ? panic+0x764/0x764 [ 1761.268029][ T28] ? vprintk_emit+0x622/0x740 [ 1761.272747][ T28] ? printk_sprint+0x490/0x490 [ 1761.277538][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1761.282668][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1761.287642][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1761.293808][ T28] ? _printk+0xd1/0x111 [ 1761.297986][ T28] ? panic+0x764/0x764 [ 1761.302098][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1761.306957][ T28] ? panic+0x764/0x764 [ 1761.311049][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1761.317134][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1761.323211][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1761.329229][ T28] watchdog+0xf88/0xfd0 [ 1761.333406][ T28] ? watchdog+0x1f8/0xfd0 [ 1761.337763][ T28] kthread+0x28d/0x320 [ 1761.341850][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1761.346892][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1761.351495][ T28] ret_from_fork+0x1f/0x30 [ 1761.355950][ T28] [ 1761.359774][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1761.365027][ C0] NMI backtrace for cpu 0 [ 1761.365051][ C0] CPU: 0 PID: 4315 Comm: kworker/u4:7 Not tainted 6.1.127-syzkaller #0 [ 1761.365069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1761.365080][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1761.365109][ C0] RIP: 0010:kasan_check_range+0x1ac/0x290 [ 1761.365130][ C0] Code: 4c 89 d5 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 39 00 0f 85 a2 00 00 00 49 ff c1 48 ff cd 75 ee 5b <41> 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d 41 f7 [ 1761.365145][ C0] RSP: 0018:ffffc90004337820 EFLAGS: 00000056 [ 1761.365158][ C0] RAX: ffffffff84c12a01 RBX: 0000000000000040 RCX: ffffffff84c12a46 [ 1761.365171][ C0] RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffffc900043378c0 [ 1761.365183][ C0] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffff52000866f20 [ 1761.365195][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000027 [ 1761.365206][ C0] R13: 0000000000000027 R14: fffff52000866f20 R15: 1ffff110171c6f0e [ 1761.365218][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1761.365233][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1761.365245][ C0] CR2: 000055cdb17ac600 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 1761.365260][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1761.365270][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1761.365280][ C0] Call Trace: [ 1761.365286][ C0] [ 1761.365293][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1761.365310][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1761.365338][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1761.365355][ C0] ? nmi_handle+0x25/0x440 [ 1761.365389][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1761.365405][ C0] ? nmi_handle+0x12e/0x440 [ 1761.365431][ C0] ? nmi_handle+0x25/0x440 [ 1761.365456][ C0] ? kasan_check_range+0x1ac/0x290 [ 1761.365473][ C0] ? default_do_nmi+0x62/0x150 [ 1761.365491][ C0] ? exc_nmi+0xa8/0x100 [ 1761.365507][ C0] ? end_repeat_nmi+0x16/0x31 [ 1761.365528][ C0] ? crng_make_state+0x2f1/0xb50 [ 1761.365554][ C0] ? crng_make_state+0x336/0xb50 [ 1761.365580][ C0] ? kasan_check_range+0x1ac/0x290 [ 1761.365598][ C0] ? kasan_check_range+0x1ac/0x290 [ 1761.365617][ C0] ? kasan_check_range+0x1ac/0x290 [ 1761.365634][ C0] [ 1761.365639][ C0] [ 1761.365645][ C0] memset+0x1f/0x40 [ 1761.365664][ C0] crng_make_state+0x336/0xb50 [ 1761.365692][ C0] ? crng_make_state+0x209/0xb50 [ 1761.365718][ C0] ? urandom_read_iter+0x140/0x140 [ 1761.365765][ C0] ? process_one_work+0x8a9/0x11d0 [ 1761.365801][ C0] _get_random_bytes+0xd3/0x2b0 [ 1761.365828][ C0] ? get_random_bytes+0x20/0x20 [ 1761.365862][ C0] ? in_aton+0x39b/0x430 [ 1761.365886][ C0] ? skb_put+0x110/0x1f0 [ 1761.365913][ C0] nsim_dev_trap_report_work+0x61a/0xab0 [ 1761.365944][ C0] ? process_one_work+0x7a9/0x11d0 [ 1761.365963][ C0] process_one_work+0x8a9/0x11d0 [ 1761.365991][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1761.366014][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1761.366038][ C0] ? kthread_data+0x4e/0xc0 [ 1761.366066][ C0] ? wq_worker_running+0x97/0x190 [ 1761.366083][ C0] worker_thread+0xa47/0x1200 [ 1761.366113][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1761.366143][ C0] kthread+0x28d/0x320 [ 1761.366158][ C0] ? worker_clr_flags+0x190/0x190 [ 1761.366177][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1761.366194][ C0] ret_from_fork+0x1f/0x30 [ 1761.366224][ C0] [ 1761.726766][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1761.733677][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0 [ 1761.741595][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1761.751677][ T28] Call Trace: [ 1761.754980][ T28] [ 1761.757989][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1761.762721][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1761.768230][ T28] ? panic+0x764/0x764 [ 1761.772331][ T28] ? llist_add_batch+0x160/0x1d0 [ 1761.777317][ T28] ? vscnprintf+0x59/0x80 [ 1761.781685][ T28] panic+0x318/0x764 [ 1761.785615][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1761.791810][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1761.797224][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1761.803494][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1761.809704][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1761.815874][ T28] watchdog+0xfc7/0xfd0 [ 1761.820047][ T28] ? watchdog+0x1f8/0xfd0 [ 1761.824393][ T28] kthread+0x28d/0x320 [ 1761.828491][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1761.833534][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1761.838130][ T28] ret_from_fork+0x1f/0x30 [ 1761.842568][ T28] [ 1761.845903][ T28] Kernel Offset: disabled [ 1761.850259][ T28] Rebooting in 86400 seconds..