last executing test programs: 10.52744843s ago: executing program 1 (id=469): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.466388986s ago: executing program 1 (id=484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 8.112467735s ago: executing program 1 (id=487): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x4) 7.728652556s ago: executing program 1 (id=491): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000180)={[{@nolazytime}]}, 0x4, 0x982a, &(0x7f0000009b80)="$eJzs3QW8ZXWhuP0zMMDQoQgWICUmKSGKdCiipCAtLSkgAkqHEiooAioooCAi3d0tDdLd3Z3vZ5gBYXxA7v+99+LleZ4Pc3ats8/av+/6Lc4+65y9l55/8bkHBsYbGNYbp//s3D1vX2GJsRfe8LjdB1+37y6LPDT86lGHnYw/5/DTuYafzj0wMDBo+P0MGnbd4DmOPW6kgcEDQ//7Z2ONPsZIYw0MjDH84vD7GZhl2MmYB72x3GsjxCs62dAvt/Owf6839tA7GXpmuZVeWW9gYGDIWz5/6HpN9y8PVNr8C829xD+t3nQbafjNg/552+ung4f9G/OAgYEx9xt45+1j6LKjvOVz/zcb+jXHm2Jgydvfh6/9f66l51pgoRH8h87FkYdfN8vQOT7iHDQ24na+y+JrPzB8CAcNH7jBb5kv78d2///U0nPNv/DAO8/jgUXm2+L+117fbw6ed2Bg8HwDA4PnHxgYvMD77VH/Pb2vG19VVVW9L80194xDn7OPNML3A0Pe+L6Wvi+88OXp7x4YGLzIsOeJg1d647lgVVVVVVVVVf1nNtfcM84Dz//He7fn/5Odsv34Pf+vqqqqqqqq+r/TQnPNPePQ5/ojPP+f+N2e/z/+4GEHDvvd/zlnGfZZr76/D6Kqqqqqqqqq3rX5F8Ln/5O92/P/i4+d7LKe/1dVVVVVVVX932mxGeefZ+Atr7M3/Opp3ridnv+fdt+ty79f61tVVVVVVVVV//VefeTk0//5mu+TDIzweu+vN/znAoOOPPOKK963Ff3PaNC//jxk6/d7nf7/NtR5yCGTDQyst+T7vSr1PvR/5rXq63+k/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Dsc/3/z9f9PO3qVN94L/tNTzXj9yf/8zNff+3/wIgs9ss37tOrvRx/U4/8Daw0aGBjuO95aAwMDi8y12BLTDAwMnHz9jFNNOfDmbbMOvW32CUZ+/Q3i3/gzkfnG5zveevJhp0M3lIEPv3kfR75+/wu9tv/Ig0ZYibc0/vEHHrjm0s/NNOLp1O/8OEZ689zYxz34xt+yjDTCQkPe4ZPfuP83HsuIzsPXfZqh6z7txutuMO1Gm23+hbXWXXmN1dZYbb3ZZph5+plmm23mmaddfa11Vptu2Md3GrPJXv84z3sZs7FGHLNH5nrrmI342N5pzCZ79zF7/R73uGjI194Ys8H/xTGb593HbLK1hn+h8eccZWCl18dm0MDA+POOMrDp0AvTjzYwMP58w5edeOiyX5lgpIGB3f75QIeeG+3NbXDQ1kOXWXr+xecetpsaGPjn6T97h/ezH3X4ms85/HSu4adzD/sy4w38c1McPMexx400dCzeNhxjjT7GSGMNDIwx/OLw+xmYbdjJGKe8sdw7vM/6CCv6+sus7Dzs3+uNPTAwMObQM5OsfNoOQ4f+f+F92v+f/v//L16zDnpzexw0/N/wZYZ5zbXAQv/8Wq8Pw9CxG3n4dbMMNflvfmv7t/Uv6zvZkIHJ3mV93+V1cV6Ptq91Tp5w2/+u18Wh9Z34Xdb3XV7H9x3Xd6m7935g2F39t63vCPu6hV//OOd72dcNvPu+bmS6g9Uu/eSI+7pvvPMqvm13+cYYjTbCQu+0r5t4n0m3Hnr/c777vm7hoes+ytv2dSMNDIw/zxv7uqE7vvlHGdht6IUZhl5YYJSBg4demPH1C6MPnDn0whdXWX+dVYdeseC/bgfTDHrbL2jCPJt/hHk26C2PfdAIv985eNjpmAe88R5O77DfHDT8Yf3bfQVtt+O9y/q+y/tP4TgPvW7Vo4ZM+N/1/lO0vkPefX3f6f2y33F9d332tNv/m9f3zXk2yluGa8H3Ms8me/s8G/oQR37LzHiv34etCssPOz/xm/e2yZYPvvk9xSgj3O+/+55iwXefZ+OtNcLn7bTfwKB3G5sF3svYfOJf9kHbvHVs3uv3W9NMMez2kd9lbEabbYWp3xibUf+LY7PAf3Vs5hwY+e1jM3hgvoGBgSmH7x/mfy9jM/G7j8173W7GgOWHnV/tzavm3eWQ898YmxHH4t+Nzfz/1bGZ7M3tZsrXb5t8pIFRRx3YdOWNN95w+mEf37g4w7CP7z4H530vYznef89YfmzwO43lPzfVse6+7IB/Mwf/ZZ/+xv3P+18dy4E3x3JgrREnS/2n1s//3OXvLn93+bvL313+7vIX9w7H/998/f+9xpt99+E/3Bjlskkn2vH9Xt/3uQ/08f/hvm87/r/jRJNeNtLAm7e96/HZYcv8Rx6fnWXYyZgHvbHciMcHeUXf+fjsfrPNsv3/0vHZ/6femKvv4edw7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7h+P90b/wewH3TL/rk8AOhozy03bKLvt/r+z73gT7+P9z3bcf/F112u4dGGnjztnc9/j9sGcfx/ztfmn/X/+Tj/2/M1Y7/178pf3foP+JrgNQHtua/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7h2O/8/5xu8BHHbY3pu/8fsA14y/88nv9/q+z31Qj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb1+/H/Y3wi/9S+Fv912gcHx///bDf/9j4ER/BfNH7P4L5Y/NdLAgMN/8fwxy/xfIn/M4r9k/pjFf6n8MYv/d/LHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvH/Xv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4v/9/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+D/DGL/4b5Yxb/jfLHLP4b549Z/H+YP2bx3yR/zOL/o/wxi/+m+WMW/83yxyz+m+ePWfx/nD9m8f9J/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/5/mj1n8f5Y/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv+f549Z/H+RP2bx/2X+mMV/t/wxi//u+WMW/1/lj1n8f50/ZvHfI3/M4v+b/DGL/575Yxb/vfLHLP57549Z/H+bP2bx/13+mMX/9/ljFv998scs/vvmj1n8/5A/ZvH/Y/6YxX+//DGL//75Yxb/A/LHLP5/yh+z+P85f8zif2D+mMX/oPwxi/9f8scs/gfnj1n8/5o/ZvE/JH/M4v+3/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/+/5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/v/IH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/TOI/aCB/zOI/KH/M4j9S/pjFf+T8MYv/4Pwxi/8o+WMW/1Hzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8f9Q/pjF/8P5Yxb/CfPHLP4fyR+z+E+UP2bxnzh/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfw/lT9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+n84fs/hPkz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/0v5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvH/cv6YxX/2/DGL/1fyxyz+X80fs/jPkT9m8f9a/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/6/nj1n8v5E/ZvFfOH/M4v/N/DGL/yL5Yxb/b+WPWfy/nT9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfy/kz9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi//38scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/+/nj1n8184fs/ivkz9m8V9X5z/6e1rK4r+ezv+9ZfFfP3/M4r9B/pjF/wf5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zB/zOK/Sf6Yxf9H+WMW/03zxyz+m+WPWfw3zx+z+P84f8zi/5P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+P80fs/j/LH/M4r9T/pjFf+f8MYv/LvljFv9d88cs/j/PH7P4/yJ/zOL/y/wxi/9u+WMW/93zxyz+v8ofs/j/On/M4r9H/pjF/zf5Yxb/PfPHLP575Y9Z/PfOH7P4/zZ/zOL/u/wxi//v88cs/vvkj1n8980fs/j/IX/M4v/H/DGL/375Yxb//fPHLP4H5I9Z/P+UP2bx/3P+mMX/wPwxi/9B+WMW/7+83f/e//X1+g/N4n9w8x+z+P81f8zif0j+mMX/b/ljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxif/r5f+vSfwHXZI/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8f9H/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflP8IDR5+6vC/OX/MMv9vyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX9M4v/62fz/NYv/oPwxi/9I+WMW/5Hzxyz+g/PHLP6j5I9Z/EfNH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf9D+WMW/w/nj1n8J8wfs/h/JH/M4j9R/pjFf+L8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvH/VP6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4fzp/zOI/Tf6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8p80fs/hPlz826Nw9RxkYGPjA+0+fP2aZ/zPkj1n8Z8wfs/jPlD9m8f9S/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8v5w/ZvGfPX/M4v+V/DGL/1fzxyz+c+SPWfy/lj9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/r+WMW/2/kj1n8F84fs/h/M3/M4r9I/pjF/1v5Yxb/b+ePWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/7+SPWfyXzh+z+C+TP2bx/27+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/vfwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf/7+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf8H+WMW/w3zxyz+G+WPWfw3zh+z+P8wf8ziv0n+mMX/R/ljFv9N88cs/pvlj1n8N88fs/j/OH/M4v+T/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/NH7P4/yx/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP4/zx+z+P8if8zi/8v8MYv/bvljFv/d88cs/r/KH7P4/zp/zOK/R/6Yxf83+WMW/z3zxyz+e+WPWfz3zh+z+P82f8zi/7v8MYv/7/PHLP775I9Z/PfNH7P4/yF/zOL/x/wxi/9++WMW//3zxyz+B+SPWfz/lD9m8f9z/pjF/8D8MYv/QfljFv+/5I9Z/A/OH7P4/zV/zOJ/SP6Yxf9v+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/9/zxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/P+RP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+g/PHLP6j5I9Z/EfNH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf9D+WMW/w/nj1n8J8wfs/h/JH/M4j9R/pjFf+L8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvH/VP6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4fzp/zOI/Tf6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/y+9u/9o/+Pr9R+axX/m5j9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n8v5I/ZvH/av6YxX+O/DGL/9fyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz1/zOL/jfwxi//C+WMW/2/mj1n8F8kfs/h/K3/M4v/t/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+d/DGL/9L5Yxb/ZfLHLP7fzR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/L+XP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4fz9/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/yB/zOK/Yf6YxX+j/DGL/8b5Yxb/H+aPWfw3yR+z+P8of8ziv2n+mMV/s/wxi//m+WMW/x/nj1n8f5I/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/p/ljFv+f5Y9Z/HfKH7P475w/ZvHfJX/M4r9r/pjF/+f5Yxb/X+SPWfx/mT9m8d8tf8ziv3v+mMX/V/ljFv9f549Z/PfIH7P4/yZ/zOK/Z/6YxX+v/DGL/975Yxb/3+aPWfx/lz9m8f99/pjFf5/8MYv/vvljFv8/5I9Z/P+YP2bx3y9/zOK/f/6Yxf+A/DGL/5/yxyz+f84fs/gfmD9m8T8of8zi/5f8MYv/wfljFv+/5o9Z/A/JH7P4/y1/zOJ/aP6Yxf+w/DGL/+H5Yx94/yGvnx35iPyxD7z/sEY+Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/3/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8/5E/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv/B+WMW/1Hyxyz+o+aPWfxHyx+z+A/JH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/6H8MYv/h/PHLP4T5o9Z/D+SP2bxnyh/zOI/cf6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0nyxyz+k+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfw/nT9m8Z8mf8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/l/LHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/l/DGL/+z5Yxb/r+SPWfy/mj9m8Z8jf8zi/7X8MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+X88fs/h/4138zduFxX9hufM7ZfH/Zv6YxX+R/DGL/7fyxyz+384fs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+38kfs/gvnT9m8V8mf8zi/938MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/e/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//388cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/8P8scs/hvmj1n8N8ofs/hvnD9m8f9h/pjFf5P8MYv/j/LHLP6b5o9Z/DfLH7P4b54/ZvH/cf6Yxf8n+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+aP2bx/1n+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx/nj9m8f9F/pjF/5f5Yxb/3fLHLP67549Z/H+VP2bx/3X+mMV/j/wxi/9v8scs/nvmj1n898ofs/jvnT9m8f9t/pjF/3f5Yxb/3+ePWfz3yR+z+O+bP2bx/0P+mMX/j/ljFv/98scs/vvnj1n8D8gfs/j/KX/M4v/n/DGL/4H5Yxb/g/LHLP5/yR+z+B+cP2bx/2v+mMX/kPwxi//f8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/7/nj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+P8jf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYn/KAP5Yxb/QfljFv+R8scs/iPnj1n8B+ePWfxHyR+z+I+aP2bxHy1/zOI/JH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+H8scs/h/OH7P4T5g/ZvH/SP6YxX+i/DGL/8T5Yxb/j+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOL/qfwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bx/3T+mMV/mvwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+Z8scs/l/KH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/l/PHLP6z549Z/L+SP2bx/2r+mMV/jvwxi//X8scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H89f8zi/438MYv/wvljFv9v5o9Z/BfJH7P4fyt/zOL/7fwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOL/nfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfy/lz9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+H8/f8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8gf8ziv2H+mMV/o/wxi//G+WMW/x/mj1n8N8kfs/j/KH/M4r9p/pjFf7P8MYv/5vljFv8f549Z/H+SP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/6f5Yxb/n+WPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf/n+WMW/1/kj1n8f5k/ZvHfLX/M4r97/pjF/1f5Yxb/X+ePWfz3yB+z+P8mf8ziv2f+mMV/r/wxi//e+WMW/9/mj1n8f5c/ZvH/ff6YxX+f/DGL/775Yxb/P+SPWfz/mD9m8d8vf8ziv3/+mMX/gPwxi/+f8scs/n/OH7P4H5g/ZvE/KH/M4v+X/DGL/8H5Yxb/v+aPWfwPyR+z+P8tf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bx/3v+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/z/yxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfk/iPOpA/ZvEflD9m8R8pf8ziP3L+mMV/cP6YxX+U/DGL/6j5Yxb/0fLHLP5D8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8of8zi/+H8MYv/hPljFv+P5I9Z/CfKH7P4T5w/ZvH/6HvwH/w/uV7/oVn8P9b8xyz+H88fs/h/In/M4v/J/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+VP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP6fzh+z+E+TP2bx/0z+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMX/S/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8f9y/pjFf/b8MYv/V/LHLP5fzR+z+M+RP2bx/1r+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/r+ePWfy/kT9m8V84f8zi/838MYv/IvljFv9v5Y9Z/L+dP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/L+TP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxz6g/oNGsB51ufyxD6j/6711/i+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/7+WPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP7fzx+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/yB+z+G+YP2bx3yh/zOK/cf6Yxf+H+WMW/03yxyz+P8ofs/hvmj9m8d8sf8ziv3n+mMX/x/ljFv+f5I9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9p/pjF/2f5Yxb/nfLHLP47549Z/HfJH7P475o/ZvH/ef6Yxf8X+WMW/1/mj1n8d8sfs/jvnj9m8f9V/pjF/9f5Yxb/PfLHLP6/yR+z+O+ZP2bx3yt/zOK/d/6Yxf+3+WMW/9/lj1n8f58/ZvHfJ3/M4r9v/pjF/w/5Yxb/P+aPWfz3yx+z+O+fP2bxPyB/zOL/p/wxi/+f88cs/gfmj1n8D8ofs/j/JX/M4n9w/pjF/6/5Yxb/Q/LHLP5/yx+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/iT7/rd7LQhb/k3z+7ymL/8n5Yxb/U/LHLP6nOv0f+3cLWPxPc/r/2yz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/+/5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/v/IH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8sde9x8Y+MD7P53/wOhwnWX+P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/tIH8MYv/oPwxi/9I+WMW/5Hzxyz+g/PHLP6j5I9Z/EfNH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz//4Q152yWL/wT5Yxb/D+WPWfw/nD9m8Z8wf8zi/5H8MYv/RPljFv+J88cs/h/NH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4T5I/ZvGfNH/M4j9Z/pjF/1P5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4v/p/DGL/zT5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfy/lD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/y/nj1n8Z88fs/h/JX/M4v/V/DGL/xz5Yxb/r+WPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/ev6Yxf8b+WMW/4Xzxyz+38wfs/gvkj9m8f9W/pjF/9v5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjF/zv5Yxb/pfPHLP7L5I9Z/L+bP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4fy9/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/fv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Qf6YxX/D/DGL/0b5Yxb/jfPHLP4/zB+z+G+SP2bx/1H+mMV/0/wxi/9m+WMW/83zxyz+P84fs/j/JH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8zivwP6t0VY/HdMG7P4/zR/zOL/s/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+P88f8zi/4v8MYv/L/PHLP67Gf1H+/eLWPx3N/q/hyz+v8ofs/j/On/M4r9H/pjF/zf5Yxb/PfPHLP575Y9Z/PfOH7P4/zZ/zOL/u/wxi//v88cs/vvkj1n8980fs/j/IX/M4v/H/DGL/375Yxb//fPHLP4H5I9Z/P+UP2bx/3P+mMX/wPwxi/9B+WMW/7/kj1n8D84fs/j/NX/M4n9I/pjF/2/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/3/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8/5E/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6YxH/IQP6YxX9Q/pjFf6T8MYv/yPljFv/B+WMW/1Hyxyz+o+aPWfxHyx+z+A/JH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/6H8MYv/h/PHLP4T5o9Z/D+SP2bxnyh/zOI/cf6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0nyxyz+k+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfw/nT9m8Z8mf8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/l/LHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/l/DGL/+z5Yxb/r+SPWfy/mj9m8Z8jf8zi/7X8MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+X383/wlffe21/4VV+0/M4v+N5j9m8V84f8zi/838MYv/IvljFv9v5Y9Z/L+dP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/L+TP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL//fyxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/7+ePWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/H+SPWfw3zB+z+G+UP2bx3zh/zOL/w/wxi/8m+WMW/x/lj1n8N80fs/hvlj9m8d88f8zi/+P8MYv/T/LHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/NH/M4v+z/DGL/075Yxb/nfPHLP675I9Z/HfNH7P4/zx/zOL/i/wxi/8v88cs/rvlj1n8d88fs/j/Kn/M4v/r/DGL/x75Yxb/3+SPWfz3zB+z+O+VP2bx3zt/zOL/2/wxi//v8scs/r/PH7P475M/ZvHfN3/M4v+H/DGL/x/zxyz+++WPWfz3zx+z+B+QP2bx/1P+mMX/z/ljFv8D88cs/gflj1n8/5I/ZvE/OH/M4v/X/DGL/yH5Yxb/v+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP5/zx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvH/R/6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+Q/rCFvv2jxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfxHH8gfs/gPyh+z+I+UP2bxHzl/zOI/OH/M4j9K/pjFf9T8MYv/aPljFv8h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/D+UP2bx/3D+mMV/wvwxi/9H8scs/hPlj1n8J84fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9J/pjFf9L8MYv/ZPljFv9P5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/p/PHLP7T5I9Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB973X/SgYGBD7j/TPljlvn/pfwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+H85f8ziP3v+mMX/K/ljFv+v5o9Z/OfIH7P4fy1/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/1/PHLP7fyB+z+C+cP2bx/2b+mMV/kfwxi/+38scs/t/OH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/t/JH7P4L50/ZvFfJn/M4v/d/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/3v5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/9/PHLP5r549Z/NfJH7P4r5s/ZvEfNX/M4r9+/pjFf4P8MYv/D/LHLP4b5o9Z/DfKH7P4b5w/ZvH/Yf6YxX+T/DGL/4/yxyz+m+aPWfw3yx+z+G+eP2bx/3H+mMX/J/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/mj9m8f9Z/pjFf6f8sUHn7vns8LMfaP+d88cs83+X/DGL/675Yxb/n+ePWfx/kT9m8f9l/pjFf7f8MYv/7vljFv9f5Y9Z/H+dP2bx3yN/zOL/m/wxi/+e+WMW/73yxyz+e+ePWfx/mz9m8f9d/pjF//f5Yxb/ffLHLP775o9Z/P+QP2bx/2P+mMV/v/wxi//++WMW/wPyxyz+f8ofs/j/OX/M4n9g/pjF/6D8MYv/X/LHLP4H549Z/P+aP2bxPyR/zOL/t/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf/v+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7/yB+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP8ZA/pjFf1D+mMV/pPwxi//I+WMW/8H5Yxb/UfLHLP6j5o9Z/EfLH7P4D8kfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOL/ofwxi/+H88cs/hPmj1n8P5I/ZvGfKH/M4j9x/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/SfLHLP6T5o9Z/CfLH7P4fyp/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/D+dP2bxnyZ/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi/+X8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8zi/+X8MYv/7PljFv+v5I9Z/L+aP2bxnyN/zOL/tfwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP5fzx+z+H8jf8ziv3D+mMX/m/ljFv9F8scs/t/KH7P4fzt/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4fyd/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/7+WPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP7fzx+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/yB+z+G+YP2bx3yh/zOK/cf6Yxf+H+WMW/03yxyz+P8ofs/hvmj9m8d8sf8ziv3n+mMX/x/ljFv+f5I9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9p/pjF/2f5Yxb/nfLHLP47549Z/HfJH7P475o/ZvH/ef6Yxf8X+WMW/1/mj1n8d8sfs/jvnj9m8f9V/pjF/9f5Yxb/PfLHLP6/yR+z+O+ZP2bx3yt/zOK/d/6Yxf+3+WMW/9/lj1n8f58/ZvHfJ3/M4r9v/pjF/w/5Yxb/P+aPWfz3yx+z+O+fP2bxPyB/zOL/p/wxi/+f88cs/gfmj1n8D8ofs/j/JX/M4n9w/pjF/6/5Yxb/Q/LHLP5/yx+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/P+eP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v+P/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+AwMj/+tVFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxz7o/isOOzvGo/ljH3T/4Y3xWP6Yxf/x/DGL/xP5Yx9k/9H+ee0YT+aPfZD93zr/n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/5gD+WMW/0H5Yxb/kfLHLP4j549Z/Afnj1n8R8kfs/iPmj9m8R8tf8ziPyR/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/h/LHLP4fzh+z+E+YP2bx/0j+mMV/ovwxi//E+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8zi/6n8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8f90/pjFf5r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/5fzxyz+s+ePWfy/kj9m8f9q/pjFf478MYv/1/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/h/PX/M4v+N/DGL/8L5Yxb/b+aPWfwXyR+z+H8rf8zi/+38MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8zi/538MYv/0vljFv9l8scs/t/NH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8v5c/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/h/P3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/IH/M4r9h/pjFf6P8MYv/xvljFv8f5o9Z/DfJH7P4/yh/zOK/af6YxX+z/LEPrv/Vr73Vf/P8sQ+u/9vn/4/zxyz+P8kfs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/0/wxi//P8scs/jvlj1n8d84fs/jvkj9m8d81f8zi//P8MYv/L/LHLP6/zB+z+O+WP2bx3z1/zOL/q/wxi/+v88cs/nvkj1n8f5M/ZvHfM3/M4r9X/pjFf+/8MYv/b/PHLP6/yx+z+P8+f8ziv0/+mMV/3/wxi/8f8scs/n/MH7P475c/ZvHfP3/M4n9A/pjF/0/5Yxb/P+ePWfwPzB+z+B+UP2bx/0v+mMX/4Pwxi/9f88cs/ofkj1n8/5Y/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP/aG/8CQgYEPsv+p+WOW+X9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+P89f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf8f/+rf5iDyvzZwzOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nfljw3zHxgY2PqD7X93/phl/t+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6YxH+sgfwxi/+g/DGL/0j5Yxb/kfPHLP6D88cs/qO8g/9114+84v/Wqv0nZvEftfmPWfxHyx+z+A/JH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2Pn/S1uL/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/h/LHLP4fzh+z+E+YP2bx/0j+mMV/ovwxi//E+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8zi/6n8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8f90/pjFf5r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/5fzxyz+s+ePWfy/kj9m8f9q/pjFf478sQ+m/zDpt/p/LX/sg+k/rLf6z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//X8MYv/N/LHLP4L549Z/L+ZP2bxXyR/zOL/rfwxi/+388cs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi/938scs/kvnj1n8l8kfs/h/N3/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9e/pjFf5X8MYv/qkb/9/CALf6rGf3fQxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/fv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Qf6YxX/D/DGL/0b5Yxb/jfPHLP4/zB+z+G+SP2bx/1H+mMV/0/wxi/9m+WMW/83zxyz+P84fs/j/JH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9P88cs/j/LH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/z/PHLP6/yB+z+P8yf8ziv1v+mMV/9/wxi/+v8scs/r/OH7P475E/ZvH/Tf6YxX/P/DGL/175Yxb/vfPHLP6/zR+z+P8uf8zi//v8MYv/PvljFv9988cs/n/IH7P4/zF/zOK/X/6YxX///DGL/wH5Yxb/P+WPWfz/nD9m8T8wf8zif1D+mMX/L/ljFv+D88cs/n/NH7P4H5I/ZvH/W/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/bAT/0d/v9fn/3Tv4n5M/Zpn/5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/v+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4/yN/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxif/YA/ljFv9B+WMW/5Hyxyz+I+ePWfwH549Z/EfJH7P4j5o/ZvEfLX/M4j8kf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4fyxyz+H84fs/hPmD9m8f9I/pjFf6L8MYv/xPljFv+P5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/CfJH7P4T5o/ZvGfLH/M4v+p/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvH/dP6YxX+a/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+X8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n8v5I/ZvH/av6YxX+O/DGL/9fyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz1/zOL/jfwxi//C+WMW/2/mj1n8F8kfs/h/K3/M4v/t/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+d/DGL/9L5Yxb/ZfLHLP7fzR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/L+XP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4fz9/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/yB/zOK/Yf6YxX+j/DGL/8b5Yxb/H+aPWfw3yR+z+P8of8ziv2n+mMV/s/wxi//mVv8h736zxf/HVv9/k8X/J/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/mj9m8f9Z/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8f54/ZvH/Rf6Yxf+X+WMW/93yxyz+u+ePfVD9h4zg/6v8sQ+q/8AI/r/OH7P475E/ZvH/Tf6YxX/P/DGL/175Yxb/vfPHLP6/zR+z+P8uf8zi//v8MYv/PvljFv9988cs/n/IH7P4/zF/zOK/X/6YxX///DGL/wH5Yxb/P+WPWfz/nD9m8T8wf8zif1D+mMX/L/ljFv+D88cs/n/NH7P4H5I/ZvH/W/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/VKX/kH+7hMX/NKX/v8/if3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/P+eP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v+P/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+Y/+tNNsJli/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R9nIH/M4j8of8ziP1L+mMV/5Pwxi//g/DGL/yj5Yxb/UfPHLP6j5Y9Z/Ifkj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bx/1D+mMX/w/ljFv8J88cs/h/JH7P4T5Q/ZvGfOH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+VP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP6fzh+z+E/zdv/XRv5fX7H/zCz+n2n+Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/L+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf/L+WMW/9nzxyz+X3nDv43gbVn8vxo9ZvGfI3/M4v+1/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/l/PH7P4fyN/zOK/cP6Yxf+b+WMW/0Xyxyz+38ofs/h/O3/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/h/J3/M4r90/pjFf5n8MYv/d/PHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv/v5Y9Z/FfJH7P4r5o/ZvFfLX/M4r96/tigc/dcZtxhZz/Q/mvkj1nm/5r5Yxb/tfLHLP7fzx+z+K+dP2bxXyd/zOK/bv6YxX89vf9WeK3Ff329P2fx3yB/zOL/g/wxi/+G+WMW/43yxyz+G+ePWfx/mD9m8d8kf8zi/6P8MYv/pvljFv/N8scs/pvnj1n8f5w/ZvH/Sf6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv+f5o9Z/H+WP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/n+ePWfx/kT9m8f9l/pjFf7f8MYv/7vljFv9f5Y9Z/H+dP2bx3yN/zOL/m/wxi/+e+WMW/73yxyz+e+ePWfx/mz9m8f9d/pjF//f5Yxb/ffLHLP775o9Z/P+QP2bx/2P+mMV/v/wxi//++WMW/wPyxyz+f8ofs/j/OX/M4n9g/pjF/6D8MYv/X/LHLP4H549Z/P+aP2bxPyR/zOL/t/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qWr/0d7xFov/aWr/d87if3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/P+eP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn9M4j9oYGDr/CGJ/zjXNv8xi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv9xB/LHLP6D8scs/iPlj1n8R84fs/gPzh+z+I+SP2bxHzV/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f+z/Y+f+w7Wu6zuO3/wmy+nHNnVpw6Ex12YkMhq1EBXF449TJpr5G/UIJIj8kARTcaOVOjZd6mbJJhaOOVu1xOHm+rWiYVmzNWJrlVNcC2PMwUJzxq4D5xDn7O25Ol/2/Vq+H48/4Nz38X2HPK+X983FdZWl/776h7L0L/qHsvTfT/9Qlv6v1D+Upf/P6h/K0v/n9A9l6b+//qEs/Q/QP5Sl/4H6h7L0/3n9Q1n6v0r/UJb+B+kfytL/YP1DWfq/Wv9Qlv6/oH8oS/8R+oey9D9E/1CW/r+ofyhL/5H6h7L0P1T/UJb+h+kfytL/NfqHsvQfpX8oS/9f0j+Upf/h+oey9P9l/UNZ+r9W/1CW/r+ifyhL/1/VP5Sl/xH6h7L0f53+oSz9R+sfytL/9fqHsvQ/Uv9Qlv5j9A9l6X+U/qEs/cfqH8rS/9f0D2XpP07/UJb+b9A/lKX/r+sfytJ/vP6hLP3fqH8oS/836R/K0v839A9l6f9m/UNZ+k/QP5Sl/9H6h7L0n6h/KEv/Y/QPZel/rP6hLP2P0z+Upf8k/UNZ+h+vfyhL/xP0D2XpP1n/UJb+J+ofytK/Tf9Qlv4n6R/K0v9k/UNZ+p+ifyhL/1P1D2Xp365/KEv/t+gfytL/rfqHsvQ/Tf9Qlv5v0z+Upf/p+oey9J+ifyhL/zP0D2Xpf6b+oSz9365/KEv/s/QPZen/Dv1DWfqfrX8oS/9z9A9l6X+u/qEs/c/TP5Sl//n6h7L0v0D/UJb+F+ofytJ/qv6hLP0v0j+Upf/F+oey9L9E/1CW/h36h7L0v1T/UJb+0/QPZek/Xf9Qlv4z9A9l6f9O/UNZ+l+mfyhL/5n6h7L0n6V/KEv/y/UPZek/W/9Qlv5X6B/K0n+O/qEs/efqH8rSf57+oSz95+sfytL/Sv1DWfov0D+Upf+79A9l6X+V/qEs/RfqH8rSf5H+oSz9r9Y/lKX/u/UPZel/jf6hLP2v1T+Upf91+oey9F+sfyhL/+v1D2Xp/5v6h7L0/y39Q1n6L9E/lKX/e/QPZen/2/qHsvR/r/6hLP3fp38oS/8b9A9l6X+j/qEs/W/SP5Sl/+/oH8rSf6n+oSz9f1f/UJb+v6d/KEv/m/UPZel/i/6hLP1/X/9Qlv7v1z+Upf+t+oey9L9N/1CW/rfrH8rS/w/0D2Xp/4f6h7L0v0P/UJb+H9A/lKX/B/UPZel/p/6hLP2X6R/K0v+P9A9l6f/H+oey9L9L/1CW/sv1D2Xpf7f+oSz9P6R/KEv/D+sfytJ/Re/+Ixr+df2EytL/HvsPZen/J/qHsvRfqX8oS/8/1T+Upf+9+oey9P8z/UNZ+t+nfyhL/4/oH8rS/8/1D2Xp/1H9Q1n6f0z/UJb+H9c/lKX/X+gfytL/E/qHsvS/X/9Qlv6r9A9l6f+A/qEs/f9S/1CW/qv1D2Xp/6D+oSz9/0r/UJb+f61/KEv/h/QPZen/N/qHsvT/pP6hLP0/pX8oS/9P6x/K0v8z+oey9P+s/qEs/f9W/1CW/p/TP5Sl/+f1D2Xpv0b/UJb+X9A/lKX/3+kfytJ/rf6hLP0f1j+Upf8X9Q9l6f8l/UNZ+j+ifyhL/y/rH8rS/yv6h7L0/3v9Q1n6P6p/KEv/r+ofytL/H/QPZen/Nf1DWfr/o/6hLP3X6R/K0v/r+oey9F+vfyhL/3/SP5Sl/z/rH8rS/xv6h7L0/xf9Q1n6f1P/UJb+39I/lKX/t/UPZen/mP6hLP3/Vf9Qlv6P6x/K0v8J/UNZ+m/QP5Sl/5P6h7L0/zf9Q1n6f0f/UJb+/65/KEv/7+ofytJ/o/6hLP2f0j+Upf/39A9l6b9J/1CW/v+hfyhL/836h7L0/0/9Q1n6P61/KEv//9I/lKX/Fv1DWfpv1T+Upf9/6x/K0v/7+oey9N+mfyhL/2f0D2Xp/6z+oSz9f6B/KEv/5/QPZen/P/qHsvR/Xv9Qlv4/1D+Upf92/UNJ+u/b0j+Upf8A/UNZ+g/UP5Sl/yD9Q1n6D9Y/lKX/EP1DWfoP1T+Upf8w/UNZ+g/XP5Sl/8v0D2Xpv5f+oSz9X65/KEv/V+gfytJ/b/1DWfr/jP6hLP330T/0kusPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk2bewkWXTZ05s2OuL3zhC1/s+uLF/i8TAADw/+1HH/pf7F8JAAAAAAAAAAAAAAAAAAAA5NXE/53Yi/3vCAAAAAAAAAAAAAAAP+3a2o/ZNGhAj6cG7f7g1Y907Ph57Lazpq9Y8UDp/rnr2ycHLzlw9wfbt2/fvuzpCZO6Hg5rtVqd/2v7dj0e3vu48/UXj7jzwJ2PysTP3f7Y+VP2PmXuqlsGf33ZTe1PDdnx7JDWhZfOmNnx+oGtVjluSOuqzgdHDmi1yglDWjd3PhjT+WDykNbKzgdH7XjwstanOx+87uLZMy/pfOLEyr9n8FLR1r64NajHYls9/muw+/4Xj3h8evfPfbxk96sNbnXtf+SqLx7Q63vdXmD/3a9fjum9/37/CwIvqH/7f3Z99899vOT/ef//0Npti6LvvfD+u1+/HGv/UJ/g83+Pjfb+3N/r8/8hwUvuuj96+NpbO/ffdsa9B3c9NfjH+fz/o9cvx/Xe/8Aen/87P8dP6v78P6zVKsfv4W8HpNLWfv2mvt7/+97/4Ff1uhmw+/7v/vKGV3Tu/57nWku6nhrSz/1P6uv9/4Zev1agf9ral2/v9f7fj/23RgUvuWv/G1ftvePz/4b7Lt5/t+/1Z//H997/6Pmzrhg9b+GiI2bMmjqtY1rH5ePHjDty7Pjx48aN3vGJYOePe/ibAkns2ft/a69eNwNarY5d92vuvWlS5/43P7jkw11PDe/n/k/o8/3/EO//EBo5sDV0aOuqqfPnzz1y54/dD8fs/HHnPxbsvx9//j/08K5/rPvvDAe0Wgfuuh91/vhhnfu/ek5Z3fXU0H7uf3Kf+5/Y8+8qgf7Zw/f/S3rd9Nj/0RuvXdC5/8O+v9+Grqf6++f/E/vc/13e/2FPtLW3an0T7dz/UcOuP6nadWnz939Qnyb2P2LLzVurXZeT7B/q08T+pyx900XVrsvJ9g/1aWL/D8y6YGm163KK/UN9mtj/86/celC163Kq/UN9mtj/o995ckW169Ju/1CfJvb/gTvaj6p2Xd5i/1CfJvZ/xJXPTKh2Xd5q/1CfJvZ/6ctPX1ntupxm/1CfJvZ/0vZj9692Xd5m/1CfJvY/4PrvLq52XU63f6hPE/t/YurS2dWuyxT7h/o0sf+VI0Y9W+26nGH/UJ8m9r/kqTdMrnZdzrR/qE8T+//KbXc+Wu26vN3+oT5N7P/j5+53Z7Xrcpb9Q32a2P8PRj64V7Xr8g77h/o0sf9161beX+26nG3/UJ8m9r9s5aCR1a7LOfYP9Wli/9edOO2RatflXPuH+jSx/7HjvnROtetynv1DfZrY/4Gf/eaT1a7L+fYP9Wli/6c/tGBetetygf1DfZrY/4KDPvbDatflQvuH+jSx/zd3HDS92nWZav9Qnyb2X27Za12163KR/UN9mtj/2ZuXT6x2XS62f6hPE/tfvc/nP1rtulxi/1CfJva/Zc7l46tdlw77h/o0sf9vv+e691a7LpfaP9Snif3f+tzXSrXrMs3+oT5N7H/jmLPPrXZdpts/1KeJ/S8/5emHq12XGfYP9Wli/0tXPza/2nV5p/1DfZrY/5o1Jz9e7bpcZv9Qnyb2f9io0Xv3fPaZH/O6zLR/qE8T+5991pIPVrsus+wf6tPE/o+777bXVLsul9s/1KeJ/Q//6oRPVLsus+0f6tPE/j814X2frHZdrrB/qE8T+9868dDDq12XOfYP9Wli/+vvH3N7tesy1/6hPk3s//0P31Hxusyzf6hPE/uf89rnN1e7LvPtH+rTxP7fOOXMhdWuy5X2D/VpYv/73zX5C9WuywL7h/o0sf/zvvW906pdl3fZP9Snif0fesBFB1e7LlfZP9Snif1Pn7H2xmrXZaH9Q32a2P+kZevHVrsui+wf6tPE/vd5Yt7d1a7L1fYP9Wli/5sGHXBqtevybvuH+jSx/3uueegb1a7LNfYP9Wli/zfe8JGOatflWvuH+jSx/89sG7ql2nW5zv4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1kH0bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD//5ta6m8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20100, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000002200)) 7.386879763s ago: executing program 4 (id=495): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.845230447s ago: executing program 0 (id=499): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"6cd4f1f99bbeacba29623ebb081d6a8892cb56d0bde42d2af9e14572d7f377b31b5a98e3f0673b5aa0a9adada488db9e876b9b46ef14d817f34e48c5961114393f58d8daa34308d961c9e12d72b7d1e46b62e0d5d55d7270d1e6d67195775b245d87fe79e316d92b17477da254abf1481ee1ace8561146f0f12a7066b719b8eeac22655d1dea0f97058f92e2fadc3344b6b8759fe9004a6e7dbac1afd11710a81d6cdff62a77888a048cb479bcadf29f6b50600462395479dd8372eccb775bea3fe931b3d3269136d5c154397d869206b008c64e30452f9e1d68579c25de31f8e7dc922cb724a252f93a4886b43d098abe5783406891177ef1c8224c817da9784146ac192aff880668d854d2e2161e6747ca781819df6234877341400481b1e67ff2870f2893091261209dd10ceaea522410f0e54a0da69632268d2e5129deba32ef041085518be13ffdf609741d98c10f8394d2b132c58387596bc7d236d08de53bde88e399423da783c300fa3ea010a9887d1c50fa5e56b3beed88dbd1fb1cf164c69fa7bdbdf0747bc7af16ba6e2b6566f0613fe11afea1347a03acbe7af5a4cff2d582079b6c8b19034b8aa03d7a211e72d80d8f30f075b77cef29b029888c648ffbc3f6e88b1bd2f9aa9c65145e4d1d0b391457a1c39641d9ca82d123876d0f7de0824c61486f39388af42d95c78491fbcbb8de7ecde2763428d7af98dc6eee082ce6543f1387c6b3fa08421c5818588a588c3af6095ff13ea21a097692738e89e78d26cff8aee491ebd891e2ac0cdc3550a49302c6a8056f28a307c2bc29b28a01d847ba6bc19439723e9f94ba93c2f22083e9e8115a2a08dbf51efd0495007c30905eedeee5c51573e43cbe63593b0b9b6c11c43c1eecf69bf472f2bb6b426c6d838c55ff00616c9211b76f83888daab6b47fd5b03fbc405ec12af4ad833d4193a548bb7bc88361edbb7ea3e65885a4c832f4786c53618a98c3e5c49a01209856efe6ba4738f259d19b1af94869394ce50d0ae7d9b68b38b1c35453c081b37a292424efa7532923d4a6b615d940e3af67e0ccbbde0330e90aa204d5b234638825424069825a96eff0d6c94e042dcef36b663bce1c96fab27e72642c5c414a0c5e7e1e70cbcbb42bbc28ad0f279b3addb92cbdc5ec600681b6ca0a89c9889f09ed7547e5fc00f18c2365ac918114acf3f393efc5ac34e3e0baefe818d6003fdb1d200cef50eaaffdebf2138544cf0e189610f3927462270619f496223d55e14b342f7623265dbcbd0286dec417cc5b28b67b2a2388268d90bdbbef71a2738c9d30073f6015ae35c5b47b59eb03311810f2c66acc42d5344a33238b0c8821370d886275321ff0176184d763f66e237f3ce9514e3d6e06257b34a29737ebac30d8f4a2cafb5b547e3b4e6b3280b8277115ba0a3e2391dbcd2dd09321acbaa833b9326f7b3946f7067c73aadf7ef7d1a73c95b57231de3ad78618a10052db68bcc9b7624fc7e9ee90a54fe387c27a794d8321b520e2070ca47fad8d4c357d37191a5f068e063426989076e35fd20d5b836ac1ccf315c872341a64d2fd88ff701dd9da47d2034d72e7dee9fc0c41312f8b97685716154f42285117f568a5f9d358f6a5bddfeb4159f313deabd7422f198b31f0c7313ccc2bcce46109499beeca565c00fd3595e51c5f00cf5d50a9046465ad2119ef50bb3fb711bbd3795e8103ad49a150b359b208eaa72e6fe1ef65c42dd37a9926b1510ce6b255f7c91f61b090ecc076a64d3ed072b88ceb121ac07857e68c74787b3a1895dcfc795fe004f66905ba02c5b9eb143dbae84f3607043f4dfbec26e7e88da7819e40596f7a801769fd2b7c70ba69d193a822339a49bc15b5a1d6c149297e75274169a43748432df476a845a5c7353130782663a3267560e680fb2bc16c09650fa3327bb9120771e3a9ac013576705e6225f02e2102b6cd6389401616ef9a472566504e2968827b3bea1686c8e1e0046de57ac5048f4033b012236382cc4c48dbaadde934a1cbce2378a738ac2d3dbdb7ef490d9bcab09abd4af0f0c2e2cac8fd19f0b77527aa433f83cd2d093f3b6b3ca203ce58be2e8f1b445a95e328bcd90e049cc4921e44470f6102f0bd4d0e0dc9e93834bce0ebbcd94667ea992f73cc6030737c5db48d4c1587edccd58d2970de4958566463111c065bcc25ce088f1f5e71dd745cbe283c4cd65e615906d9a4080676a44fdd9eff54534e79b9dec08f4cc74ab96b85f5ededaa44a0bca57dfcb076ad9b24f06fb543ae80e66836a3035e010b470f5ecfa91919ef776408630fe2834e12fab1e3aead795e1e3213b047e57ac7f080fd6b72971aeb8fddffde2aed7449d710a3e2d0ff5c9f3668cfee85831b73c7fa82c6594e0f19b169b7f2e5d9518e3dbb42fd4e38e4449b4d74a072d71cc247969b3bcd749891c2f30f54b2a6e616fcf8a75636dba8dae442598264bd54986b7452918685c10139802582b0ededaf7407c138d0790028342d8979dbf22bf381d0aaaa4219d9449d807e4cd3cc2f8dc4266118f3f936a1dc1d91cce181991cd1b5e666bf66a8ac7f7f801179c78ce0bf63c283550fc6708513aa12bf575efd40c4b08e2eec15c9f5c7f8af3347d9b35cd42bfe4dd47a1ebc1cf6bd13d8acef0d7c28e6d9bbfdb046a0544ae0be4750414f149d1ca5063fd760f1afe5ae22ddbd8c7ac94dacd9f5ced89ce543ef07ae623a3d1220146edc34b85c75056c5618812054d1d646a7a145fe9e001ffda97f16ed70e3adda493ada1d721c02880ccc4750c2b4e1f8e5e67a12bdd30298c84ae44a4c699f57b5aea7b28d577a18f7343f657b229220f12ea2c6235df04938199dfbb4854199a8248305cc6d5d5acbd7e415d2905b492038d5616a4731ca3c398e4c8045688d09c9067f4b4749ecbce703ecd1a55876c763aa1c58fc088385677590e3758203c03d8fa83b5a1f7e645173dda80993b612b72dd222b8dca89092ba21af6c6774530062253ac41064bb561010617713d4c247f44a45679b5c310354708d45ed3487237f4f2f74a9519cbbad007750eaf3036799de3995b8ec25c62c9b2b7a1ea0fa53afad992b320b3ac119e82f2bffcb590f98d93658257c1af23c71900a1484c78d0a7ba1a15f2109f18e74bc19fdc6c9c19fe28182ff85d61ec6f93471615a5703198ec305b87c5fb9cbe1b5bf00ba42448ca790b844ee62cf45e3474b21efc0289772b4a8e10bbcff141fc20ed451b25a8d3af7b246aee90992271220c83f8dbc864a02dd1e4d8d84cf29884eb9011fcbbc16d4fdee3003b8dfaa4307800051aba6039fbcba5c1cf1dcc82169fb4304fabeb52aec480d2dd8583416788293df46e4b74bfdaa089c116364ccf28541b8f181e1710d903ff17f7c722955714a759f64861626e8347903b83ad74dac95e107a20060a93b36325b1f6f83cd60b163887b43f0f8ed16ea658bdd2a5966336af01aa75dcd720bbf979544e67cff7aea162b8f974a31d26b276e655769c512350e2e5ec6815fa6724a40a312d8bf0306a12191926631226294ab41c2811d3b4f26dcb57306f4c02ac2f308f3d6d36e9676fde81c96259b07e3ef9ab51d92c99005263573d4a68b8ad3ec85026fe81e8c8d770057fa3a527b315955dbf319ae2607ce431e0475e79771ce1c9227a56eafc77e4a6e4e16e564421d5bccd528722ff471c9618f06f276b9ec914e6302a46888ff8b22874714e412ed2ac571c2a3cbb4a84ffe7dc8e6412a5ee4a9347f8f0bbf71cc29bafa4c27f46c4e1781cb39ad20bcbd821faa6d9cef939baf59506cd371afde5b8027a087a539c87816847268915b9efbcda17da9a4863b4991ceba34cd15556b6d312e61d0a8f7bcfa51c1c1de6071f632a662d5bf98fcaa459e4d36b55d5ed26fd3fc621f4bb8f4fcccc26b9f7f5a274a5356e98f2fd6bbe022188ffed476e1a5122f8144aa2333f3a12d7e2e50344042123f8d43547fa4caa159579a81c8d7d2f5af7c1948a89fff36b2df2b70f98257801071412a8dc63d4d70b13f959149d781d5a0625384dc93e1e8b33c6e0e02b33d78b4aa2664a7eec4e99bc7662672439bc2f18ad8ae9f22b4b5fef6c3f73d6936301d7739004b8eb14f5f51ffaa2c1dca566b1054e73263359f5ac8d646ca17eafe05079faf5598821de454245b793d7cc65e78b7b504aa9d55669126d9cba38d5578e0da4f41fbaa63b84d49a79ba5d53d8f0c08522dcfd387abb5ae8763fbac23adde42d14c2d44c76026647797df6720668dfa6f4956db7f54d9b5bd070ea60557818ece8554ae2f4be6e2705214613dbb746c593021148d08a9a5314354b1d2c6168891a0326e8b43a9bee77e72147e67fba9ace969dcd76785f94749377967fabdbd5a815e033d5300bc025fb379e3a41c83ec0fe3789d968ef509983e97ac97946b465ab002775eb1248ba4274e445ba444db8239b855eec2fcdafb18ce2595de0fdb1e8840404275f61bf177bbb16176cc15f3643cd8572e951daea20562c73a2de60ed8d2e566d8124595e0fc4f4123626c847e0ab111561e85eb7f2ff37f4b090519074f05dd661c486112b77267660a9fc1039e7518609c4824648c1668edf1b287ad5ede471d82d7415e48d417192c59521867f2e71ce3e796424c030ffa28a9c999c3aef004b8103d2fae2dab904907e50ac716c1a685de3df4910ae142afb6ebfedb485a1eff119e758213a26e0d448bf1f42f6aa31ab51a25d5e93efff753f287b7138cc5e3cbb71d33db864575b1574d206edcd35ae34db30a6272d4f33ecd32fb079b6a04d6aeab6d18f042b79e3afcdd80a6afe665cdb667dc88b024e8a523930ff0708ad4adf0c84b3fdd87afdb553b1f6cb36e797271882df38b04935241d5ed17edbfdff42f77a5c41bbe0979f0c08621d4e715f8d258b1fa6788095b4967a678787d90c98642217d58faa927cebd4dfba05e59b19742d5eaa166562d7353fec7180ac965eebaf827bcd52315bc4cb9a71e634cee2c5c4edbb7c982f1d5354c460b785c251309ab7cc6af2d5466ee2a4017dd83b4cb85270e86e08a028f6e80640a4d208413322017e994dd86bf8587fd09a5630c4a9830f1e43f5a72cfb85555cf1ab29481453b76386f41aacd060bec4182ebd95e238a5d1514fb06057d6b54bf43adf7aef0c5d7df2e235fe1bf04b1419b482a607d332f78d357d1a8882029659665d7e135ced7315c0d5282fbfa95e9b8d40b2658c208fc38080dde928f1f28b5ce2deb542d4a76781376cbde6c7c0cf7581d8cdb0f3a306219b97b681f3846608b3c4716b4553e430a42139f5668755278a998acd7008d341832670fffc2f2bb4fd16d49a44bb7b65abb694bab2c5d35b96b6b51823255a2e3fce8a2b292b963f82deb7b9d723d234e01fc8647a2649163dc540689f686ccc934a36ccc915c5f3f956c3eed8d1926a18da10586e000527185102a9a0e089b1b8be49ecda480e1e7c1551fb04a1e3e9272dac1a07138b7b1f4e18555359ee139da6e7cf70fa452c01b888cce1ba61cfa05ce1c3e11d99e81a289b9d10786951a223b2a1a23b15239bdac731fa23dbd5e49c6d8f3c4441ab18aadcb73cecf854f94099687c079b570f13e02df087ead8f562d4c6f627a0c0281374ec7013db4464672d279d681e3a6038aa5cb51f1cf9c1596fc0fce1eac2d42a3239f647927e92ed5228fc7f249006971e3ebb5873c106e6d877bb2316b2ec1599a3c30504a089b90576298ec3c2ae8e211159df05e1cd4bd", 0x1000}}, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r1, &(0x7f00000000c0)='#', 0x1, 0x709d) 6.756930054s ago: executing program 3 (id=500): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000003c0)=0x401000, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/17, 0x11}, 0x7}], 0x1, 0x100, 0x0) 6.533234882s ago: executing program 3 (id=501): r0 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 5.830853469s ago: executing program 3 (id=502): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0xeaff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000180)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000393000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) 5.830487069s ago: executing program 1 (id=503): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14b440, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x3, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffc}}) io_uring_enter(r1, 0x47ba, 0x0, 0x3, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 5.179840531s ago: executing program 4 (id=504): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20002009}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.692570891s ago: executing program 4 (id=506): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4.690966221s ago: executing program 0 (id=507): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r1, 0xfffffff8, 0x9, 0x5, 0xd, 0x9d9, 0x8, 0xff, {r1, @in={{0x2, 0x4e20, @local}}, 0x4, 0x1, 0x1, 0x100, 0x50}}, &(0x7f0000000040)=0xb0) 3.96278259s ago: executing program 1 (id=508): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.355961509s ago: executing program 32 (id=508): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.347214689s ago: executing program 0 (id=511): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) brk(0x101) 3.346664029s ago: executing program 2 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 3.34647211s ago: executing program 3 (id=513): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1) 3.109795218s ago: executing program 2 (id=514): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 2.686547043s ago: executing program 2 (id=515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0x400c1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x3], [0x5, 0x2, 0xd91, 0xb, 0x401, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x8, 0x8, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x5, 0xc, 0x9, 0xcb06, 0x1, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0x2, 0x2, 0x3, 0x2, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x8, 0x405, 0x9, 0xffff, 0x40, 0x80000000, 0x8000003, 0xa, 0x7e, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xf7fffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0x1c4b5abf, 0x4, 0x9, 0x4, 0x2, 0x2, 0xa, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa5, 0x0, &(0x7f0000000080)) 2.310533933s ago: executing program 2 (id=516): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) getpriority(0x2, 0x0) 1.959160171s ago: executing program 3 (id=517): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 1.718188871s ago: executing program 0 (id=518): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobh}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.454920892s ago: executing program 4 (id=519): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 1.454683852s ago: executing program 2 (id=520): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa80, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) chdir(&(0x7f0000000080)='./file0\x00') 966.217591ms ago: executing program 4 (id=521): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0a7fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf23be71adb9485bb929248980fea57f1edcaaf2a0c97b11230f2e2f60d04c5933adcd7cc36ff9d88fae99b67693ca51042e4518646909d17c16e45095d539d51c5a022ac6f621c04a5d87de2a202ee2f7f473e78109e88929e87ff19609117d2726cf861d24942755f19caf178771ac9e501f417fa4188f"], 0x1, 0xa09, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x700, 0x42c0000000003f, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) 867.35982ms ago: executing program 3 (id=522): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$eJzs3b9vHFkdAPA3Y4fYIQE7pAgSEisRCQTIslMFHAnHceLYiQkKJEI0m7W9SQxrb2SvEUUK00WiQqJAFBFIdK4iF7ThT6ChzNWR7opr7nRSdD7tzqy9M96V96xd+5L7fIqdnfdrnvc78+ZNMX5xqvZkZaOwslEorRWqS482Lhf+WK1srpZDfEzaHv/U8R2f7vTjPDnpc+/r7O71m79+cDmE/y7//83u7u5uqBsMbU20fP/k42dLrdumOFen3m425Vb7xo/sdyGECwf6VTcQQvjtf0KIQgjX0rTpdDscQjgXkrwHz/7ysNCj3rx8Xb5afLvwfGfy0vz2i503HQtGIfyj8t2fPl798AcDkx/8uEeHBwAAAAAAAAAAAAAAAADgHTd77+79X41PhFdRGNyODr6vO5tuO70fu9sz3+//HwsAAAAAAAAAAAAAAAAAAABfUfvv/xei823e/59Jt1Md6u/+ov99pH/mfnl35sb4RLr+e3Qg/0qa9NG1gTDaZt33/Prv13L1D67/HtJV13vjShRlVqsfCVE81tKPkRDHY2Mh/Ctd+P1idCauVDdqP3lU3Vxb7lk33lnZ+Cer92eiky7o3238p3Ptt49/L33nwNlU33/Yu1PsvZaN/0DHcv/+c9RV/K/n6h1H/Dm6bPyToXS4tcBUMgDU4//XwcPjP5Nrvz/xP7X3bTgUMiNAfQ5TiDrPV8jKxj/5XTNDZ/pDdrr+P8vF/0au/ZMa/7fyNyLaysb/G420oUyJ/et/ND78+r+Za/8k4l/v/5b7f1ey8T+dJGZm1MnP2+34P5trvyX+n/ay3/fjtJ/fijJnwHaUpHf6f3VkZeM/dCB///kv7mr+dytXv//Pf9njNp//msP/j6Lk+Y/2svEf7liu2+t/Llev3+P/VGP+x1Fl43+mkdacOyd3/pHGZ7fxn8+136/4N/o21Iz//njy+ekk/Z/mf13Jxv+bSWLcWmKr8dmY/0WHz/9v59o/iflfvf9bcX+P+r7Ixv9sx3L1+P+vi/v/nVy9/sc/hHFz/SPLxv9cx3KN63/o8Pgv5Or1O/4/7GfjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+A6XQ7EqJ4LLMfx2NjIVxP9y+GM9Fiabm4WKku/WEjhJk0vRDOR48r1cVSpbiyVl0uF0uVSnUphBtp/oUwFG1UqrXiaunpzb22hqMn5dJ6bbFcqoUQZtP074VzzbYWV2qrpachhFt7ed+Oq+tPn5TWissr6z8fHx8fD3N7fRiNyn+qlddqydGT3BDm9+qORC2da2Tf3uvL2ej31c31tVKlkX6npU6lulSqtNRZSPP+Fkaj2vrm2lKpVi5Wqo+bxztJU+l2Zu7eb+7dmTiQ/zBKttPH2y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqRXkz/7ewhhMNmLQwhTzS9Ru/IvX5evFt8uPN+ZvDS//WLnzanj7S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZf+URoIojgAvxkL/1Qew2rZ7WxXFNHCFcET6DE8jB7FS3gHCwtbCwkkMyRsspAmKcL3NY/dHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgINz+zQ8P7ZdRIqT/+OIz9ev79X8vtT3q83nj/YwI7tz9zBc37Rdefe0ll+WXz99nqd/v28vsaxn9bv6GO3JeJ8Wap/Tybmm9m1qvtr3PFJuIqIv+UXKuWm2uwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA///+NR/5") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r1, &(0x7f00000000c0)='#', 0x1, 0x709d) 630.074329ms ago: executing program 2 (id=523): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4008a, &(0x7f00000001c0)={[{@dioread_nolock}, {@usrjquota, 0x22}, {@nogrpid}, {@noload}, {@acl}, {@grpjquota, 0x22}, {@errors_continue}, {@nodelalloc}, {@usrjquota}]}, 0xfe, 0x44e, &(0x7f0000000d80)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x80061, &(0x7f00000001c0)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000000)='./file0\x00') 531.595407ms ago: executing program 0 (id=524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.060099ms ago: executing program 4 (id=525): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x99, 0x6}, &(0x7f0000000340)=0x8) 0s ago: executing program 0 (id=534): r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 63.198304][ T4254] cgroup: Unknown subsys name 'net' [ 63.355335][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.913648][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.785141][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.789156][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.795178][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.801243][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.808094][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.821816][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.822651][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.829563][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.838102][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.843930][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.850935][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.865070][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.865123][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.872797][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.880763][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.887451][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.894917][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.900803][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.908845][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.914740][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.923212][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.929375][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.937122][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.943577][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.950794][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.959412][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.973265][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.982642][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.990894][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.041569][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.382247][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 67.554479][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 67.596568][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.605571][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.616407][ T4278] device bridge_slave_0 entered promiscuous mode [ 67.650644][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.657833][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.666082][ T4278] device bridge_slave_1 entered promiscuous mode [ 67.692114][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 67.709174][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 67.721813][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.753077][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.803874][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 67.851722][ T4278] team0: Port device team_slave_0 added [ 67.857827][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.865141][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.873168][ T4265] device bridge_slave_0 entered promiscuous mode [ 67.896978][ T4278] team0: Port device team_slave_1 added [ 67.903298][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.911094][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.920772][ T4265] device bridge_slave_1 entered promiscuous mode [ 68.008114][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.015496][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.023535][ T4275] device bridge_slave_0 entered promiscuous mode [ 68.032373][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.039612][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.065867][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.079801][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.089102][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.096741][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.104806][ T4266] device bridge_slave_0 entered promiscuous mode [ 68.121179][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.128381][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.136764][ T4275] device bridge_slave_1 entered promiscuous mode [ 68.153006][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.160211][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.186332][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.199067][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.208671][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.216114][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.224087][ T4266] device bridge_slave_1 entered promiscuous mode [ 68.265434][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.272662][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.281387][ T4268] device bridge_slave_0 entered promiscuous mode [ 68.291078][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.327084][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.334466][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.343075][ T4268] device bridge_slave_1 entered promiscuous mode [ 68.352530][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.370417][ T4265] team0: Port device team_slave_0 added [ 68.380686][ T4278] device hsr_slave_0 entered promiscuous mode [ 68.387692][ T4278] device hsr_slave_1 entered promiscuous mode [ 68.403077][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.427968][ T4265] team0: Port device team_slave_1 added [ 68.443755][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.493341][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.506121][ T4275] team0: Port device team_slave_0 added [ 68.524423][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.531646][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.557761][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.571626][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.578622][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.605056][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.618629][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.629035][ T4275] team0: Port device team_slave_1 added [ 68.646377][ T4266] team0: Port device team_slave_0 added [ 68.675037][ T4266] team0: Port device team_slave_1 added [ 68.729830][ T4268] team0: Port device team_slave_0 added [ 68.736186][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.743656][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.770043][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.795177][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.802371][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.829177][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.841777][ T4268] team0: Port device team_slave_1 added [ 68.848082][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.858071][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.885072][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.896728][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.904321][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.930638][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.952293][ T4265] device hsr_slave_0 entered promiscuous mode [ 68.959281][ T4265] device hsr_slave_1 entered promiscuous mode [ 68.966024][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.974141][ T4265] Cannot create hsr debugfs directory [ 69.009041][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.016910][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.043696][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.043731][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 69.060830][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 69.067568][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 69.099733][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.106713][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.120098][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 69.133376][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 69.146313][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.212853][ T4275] device hsr_slave_0 entered promiscuous mode [ 69.223247][ T4275] device hsr_slave_1 entered promiscuous mode [ 69.230476][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.238063][ T4275] Cannot create hsr debugfs directory [ 69.247597][ T4266] device hsr_slave_0 entered promiscuous mode [ 69.254835][ T4266] device hsr_slave_1 entered promiscuous mode [ 69.261949][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.270262][ T4266] Cannot create hsr debugfs directory [ 69.334252][ T4268] device hsr_slave_0 entered promiscuous mode [ 69.341739][ T4268] device hsr_slave_1 entered promiscuous mode [ 69.348493][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.356214][ T4268] Cannot create hsr debugfs directory [ 69.605834][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.628296][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.641501][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.651613][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.688224][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.702439][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.727584][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.742576][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.802685][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.813249][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.830890][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.842345][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.933286][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.946314][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.959273][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.984621][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.996296][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.031029][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.052781][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.063448][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.072270][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.082087][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.092232][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.099516][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.107886][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.145185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.154568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.164431][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.171596][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.189058][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.199183][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.212800][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.225401][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.235168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.261116][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.296300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.307885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.318502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.328017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.337237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.347030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.355737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.367295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.382221][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.397063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.408443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.417662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.427353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.440932][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.468730][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.477586][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.487974][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.495148][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.504792][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.513711][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.524130][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.531292][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.538990][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.561026][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.578150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.590395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.611765][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.628370][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.638106][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.656776][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.668301][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.685873][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.697260][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.743664][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.755481][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.778660][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.795079][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.827170][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.865514][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.881546][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.930397][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.941466][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.961463][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.968710][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.979302][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.988843][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.998706][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.005845][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.014651][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.022938][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.030930][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.048165][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.074316][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.083789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.122314][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 71.128485][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 71.135261][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 71.149896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.158884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.176916][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.184145][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.199707][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 71.200438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.214091][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 71.232927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.241866][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.248976][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.257249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.266890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.276041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.285975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.294791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.305363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.313584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.324334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.332333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.353548][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.368648][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.380838][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.396313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.404963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.413581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.422979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.435746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.446044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.453605][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.455829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.460822][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.488252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.496391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.505497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.521146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.531513][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.549419][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.583681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.601864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.619846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.640013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.648731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.661030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.670658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.688514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.697735][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.705082][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.724207][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.743658][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.783176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.795039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.812890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.826079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.833512][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.842476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.851156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.859718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.868319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.877749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.887775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.896538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.958551][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.969332][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.991081][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.024994][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.044915][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.072546][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.107066][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.136471][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.145376][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.170708][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.190113][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.206292][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.220592][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.246431][ T4265] device veth0_vlan entered promiscuous mode [ 72.275634][ T4265] device veth1_vlan entered promiscuous mode [ 72.305117][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.351601][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.359196][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.405190][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.462638][ T4265] device veth0_macvtap entered promiscuous mode [ 72.476323][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.490636][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.530165][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.544476][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.553179][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.570068][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.581358][ T4265] device veth1_macvtap entered promiscuous mode [ 72.632027][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.643895][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.653526][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.668357][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.677628][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.691920][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.711618][ T4268] device veth0_vlan entered promiscuous mode [ 72.738239][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.757744][ T4268] device veth1_vlan entered promiscuous mode [ 72.775146][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.794489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.812460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.822552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.831536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.842878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.862724][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.890323][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.898666][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.907690][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.917213][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.924951][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.937137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.948135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.968577][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.978100][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988133][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.997968][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.014578][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.024951][ T4268] device veth0_macvtap entered promiscuous mode [ 73.039383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.048345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.058332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.069027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.078804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.087561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.097007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.125591][ T4268] device veth1_macvtap entered promiscuous mode [ 73.134519][ T4278] device veth0_vlan entered promiscuous mode [ 73.144525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.168771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.178116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.194182][ T4275] device veth0_vlan entered promiscuous mode [ 73.200326][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 73.210012][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 73.210054][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 73.233320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.241576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.251894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.260637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.280428][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 73.280464][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 73.305235][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.318026][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.331963][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.347738][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.356313][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.367562][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.376712][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.386085][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.394718][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.406784][ T4275] device veth1_vlan entered promiscuous mode [ 73.414348][ T4266] device veth0_vlan entered promiscuous mode [ 73.423336][ T4278] device veth1_vlan entered promiscuous mode [ 73.432389][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.443254][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.454725][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.483463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.494874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.506328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.516051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.525605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.536643][ T4266] device veth1_vlan entered promiscuous mode [ 73.554098][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563613][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.574418][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.583309][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.601182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.615556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.672845][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.685370][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.695162][ T4278] device veth0_macvtap entered promiscuous mode [ 73.715126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.716572][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.733897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.735274][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.742942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.780330][ T4266] device veth0_macvtap entered promiscuous mode [ 73.787607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.797865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.825733][ T4278] device veth1_macvtap entered promiscuous mode [ 73.852276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.863258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.872620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.884832][ T4266] device veth1_macvtap entered promiscuous mode [ 73.909972][ T4275] device veth0_macvtap entered promiscuous mode [ 73.937933][ T4275] device veth1_macvtap entered promiscuous mode [ 73.940325][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.953857][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.957088][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.965741][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.982189][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.993020][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.005262][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.028728][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.046990][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.052041][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.066674][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.070124][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.086274][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.097797][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.110016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.118525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.126708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.135843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.144538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.153488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.163426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.171713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.180865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.191897][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.202521][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.213525][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.224565][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.236133][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.247802][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.259221][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.289083][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298922][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.310596][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.319341][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.333502][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.343706][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.356240][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.373919][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.384324][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.395158][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.406652][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.417408][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.428983][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.442790][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.453449][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.464288][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.475048][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.485221][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.495834][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.507356][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.517972][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.529285][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.546595][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.556751][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.566294][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.575547][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.611166][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627256][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636557][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646807][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.663967][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.675186][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.696584][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.722228][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.733371][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.744182][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.755307][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.765994][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.776083][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.814661][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.827114][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.859159][ T4386] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 74.865748][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.874093][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.884303][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.897411][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912925][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923899][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933458][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.206999][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.216954][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.256776][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.264963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.279697][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 75.285858][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 75.289637][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 75.296336][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.319495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.360907][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 75.366996][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 75.379286][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.432040][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.441586][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.458727][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.486676][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.545512][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.615511][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.633244][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.648535][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.669083][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.705338][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.740357][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.321261][ T4342] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 76.479146][ T4402] loop0: detected capacity change from 0 to 32768 [ 76.508165][ T4402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (4402) [ 76.531204][ T4342] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 76.546551][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.566887][ T4342] usb 3-1: Product: syz [ 76.575879][ T4342] usb 3-1: Manufacturer: syz [ 76.583678][ T4342] usb 3-1: SerialNumber: syz [ 76.605569][ T4402] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.629239][ T4342] usb 3-1: config 0 descriptor?? [ 76.638835][ T4402] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 76.679025][ T4402] BTRFS info (device loop0): force clearing of disk cache [ 76.701203][ T4402] BTRFS info (device loop0): turning on sync discard [ 76.708354][ T4402] BTRFS info (device loop0): enabling auto defrag [ 76.723518][ T4402] BTRFS info (device loop0): max_inline at 0 [ 76.742899][ T4402] BTRFS info (device loop0): enabling disk space caching [ 76.755667][ T4402] BTRFS info (device loop0): disk space caching is enabled [ 76.894913][ T4431] loop4: detected capacity change from 0 to 1024 [ 76.931088][ T4342] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 77.091302][ T4402] BTRFS info (device loop0): enabling ssd optimizations [ 77.143849][ T4402] BTRFS info (device loop0): rebuilding free space tree [ 77.265479][ T4402] BTRFS info (device loop0): disabling free space tree [ 77.289574][ T4402] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.329776][ T4402] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.343377][ T4342] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 77.379276][ T4342] usb 3-1: USB disconnect, device number 2 [ 77.676055][ T9] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 77.842523][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'. [ 77.887895][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.165384][ T4477] loop4: detected capacity change from 0 to 1024 [ 78.202687][ T4477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.270660][ T4416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop0 scanned by udevd (4416) [ 78.748587][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.088520][ T4504] loop0: detected capacity change from 0 to 64 [ 79.129132][ T4506] loop6: detected capacity change from 0 to 524287999 [ 79.551132][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 79.816203][ T4518] 9pnet: p9_errstr2errno: server reported unknown error @câîŠÁ^ à³7» k^ [ 80.126323][ T4529] loop2: detected capacity change from 0 to 512 [ 80.151625][ T4529] ======================================================= [ 80.151625][ T4529] WARNING: The mand mount option has been deprecated and [ 80.151625][ T4529] and is ignored by this kernel. Remove the mand [ 80.151625][ T4529] option from the mount to silence this warning. [ 80.151625][ T4529] ======================================================= [ 80.209079][ T4529] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.235366][ T4532] loop3: detected capacity change from 0 to 16 [ 80.314547][ T4532] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.337436][ T4534] loop4: detected capacity change from 0 to 128 [ 80.376036][ T4534] EXT4-fs: Ignoring removed nobh option [ 80.382767][ T4334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.416010][ T4532] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 80.432650][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.477161][ T4534] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.593290][ T4334] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.630200][ T4334] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.693216][ T4334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.723657][ T4334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 80.744270][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 80.765199][ T4334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 80.802857][ T4334] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.832915][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.854169][ T4334] usb 1-1: Product: syz [ 80.858398][ T4334] usb 1-1: Manufacturer: syz [ 80.866391][ T4544] loop3: detected capacity change from 0 to 2048 [ 80.908117][ T4334] cdc_wdm 1-1:1.0: skipping garbage [ 80.912888][ T4544] EXT4-fs: Ignoring removed bh option [ 80.925414][ T4334] cdc_wdm 1-1:1.0: skipping garbage [ 80.952836][ T4334] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 80.979374][ T4334] cdc_wdm 1-1:1.0: Unknown control protocol [ 81.062925][ T4544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.125193][ T4544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.204087][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 81.210941][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 81.212921][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 81.218808][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 81.229625][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 81.236746][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 81.243408][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 81.251311][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 81.257974][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 81.264520][ T4349] usb 1-1: USB disconnect, device number 2 [ 81.479106][ T4561] process 'syz.4.66' launched '/dev/fd/3/./file2' with NULL argv: empty string added [ 81.696566][ T26] cfg80211: failed to load regulatory.db [ 82.149635][ T4382] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.170763][ T4581] loop1: detected capacity change from 0 to 1024 [ 82.185843][ T4580] loop8: detected capacity change from 0 to 5 [ 82.214409][ T4581] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.248761][ T4581] EXT4-fs: Ignoring removed bh option [ 82.283718][ T4584] loop0: detected capacity change from 0 to 2048 [ 82.290721][ T4581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.372282][ T4382] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.390137][ T4382] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.390932][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.485782][ T27] audit: type=1800 audit(1756408171.261:2): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.77" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 82.509332][ T4588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.530454][ T4382] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.582090][ T4382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 82.664841][ T4382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 82.683693][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 82.714806][ T4382] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.739757][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.769539][ T4382] usb 5-1: Product: syz [ 82.780210][ T4382] usb 5-1: Manufacturer: syz [ 82.854273][ T4382] cdc_wdm 5-1:1.0: skipping garbage [ 82.869484][ T4382] cdc_wdm 5-1:1.0: skipping garbage [ 82.890491][ T4382] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 82.918932][ T4382] cdc_wdm 5-1:1.0: Unknown control protocol [ 82.952408][ T4582] loop3: detected capacity change from 0 to 32768 [ 83.009826][ T4334] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.108219][ T27] audit: type=1800 audit(1756408171.881:3): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 83.133754][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.140434][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.147585][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.154403][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.161059][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.167957][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.179668][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.186334][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.193137][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.199775][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.209750][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 83.209862][ T4284] Bluetooth: hci4: command 0x0411 tx timeout [ 83.216551][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 83.217081][ T26] usb 5-1: USB disconnect, device number 2 [ 83.239718][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 83.299774][ T4334] usb 3-1: Using ep0 maxpacket: 32 [ 83.307452][ T4334] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.342253][ T4334] usb 3-1: config 0 has no interface number 0 [ 83.384946][ T4334] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 83.414953][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.452369][ T4334] usb 3-1: Product: syz [ 83.456601][ T4334] usb 3-1: Manufacturer: syz [ 83.486121][ T4334] usb 3-1: SerialNumber: syz [ 83.526882][ T4334] usb 3-1: config 0 descriptor?? [ 83.557075][ T4334] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.724927][ T4601] loop1: detected capacity change from 0 to 4096 [ 83.814954][ T4397] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.130268][ T4334] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 84.174587][ T4610] loop4: detected capacity change from 0 to 128 [ 84.200327][ T4334] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 84.251093][ T4610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.377135][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 84.385466][ T126] usb 3-1: USB disconnect, device number 3 [ 84.416837][ T4610] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.485073][ T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 84.537023][ T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 84.584753][ T126] quatech2 3-1:0.51: device disconnected [ 84.646318][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 85.072830][ T4634] Bluetooth: MGMT ver 1.22 [ 85.372980][ T4642] loop3: detected capacity change from 0 to 512 [ 85.406742][ T4642] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.442863][ T4641] loop1: detected capacity change from 0 to 4096 [ 85.555874][ T4648] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.650519][ T4642] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 85.650627][ T4622] loop0: detected capacity change from 0 to 32768 [ 85.714506][ T4646] loop4: detected capacity change from 0 to 8192 [ 85.729168][ T4622] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (4622) [ 85.835597][ T4622] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 85.899635][ T4622] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 85.961551][ T4622] BTRFS info (device loop0): using free space tree [ 86.360156][ T4622] BTRFS info (device loop0): enabling ssd optimizations [ 86.955253][ T4681] loop4: detected capacity change from 0 to 4096 [ 87.066707][ T4268] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 87.070066][ T4689] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.123820][ T27] audit: type=1800 audit(1756408175.891:4): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.109" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 87.255527][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.460816][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 87.471561][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 87.556766][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.651311][ T126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.680085][ T126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.718967][ T126] usb 3-1: Product: syz [ 87.739836][ T126] usb 3-1: Manufacturer: syz [ 87.754664][ T126] usb 3-1: SerialNumber: syz [ 87.795753][ T4700] loop4: detected capacity change from 0 to 512 [ 87.803248][ T126] usb 3-1: config 0 descriptor?? [ 87.810014][ T4684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.899158][ T4700] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.115: casefold flag without casefold feature [ 87.956885][ T4688] loop1: detected capacity change from 0 to 40427 [ 87.984303][ T4688] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 87.998269][ T4700] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.115: couldn't read orphan inode 15 (err -117) [ 88.012478][ T4688] F2FS-fs (loop1): invalid crc value [ 88.051056][ T4688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.087716][ T126] usb 3-1: USB disconnect, device number 4 [ 88.103958][ T4700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.260246][ T4688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.517057][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 88.718651][ T4713] loop4: detected capacity change from 0 to 512 [ 88.757195][ T4713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.888328][ T4713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.958132][ T4713] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.995593][ T4706] loop0: detected capacity change from 0 to 32768 [ 89.055218][ T4706] XFS (loop0): Mounting V5 Filesystem [ 89.161559][ T4734] loop1: detected capacity change from 0 to 512 [ 89.179675][ T4734] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.238871][ T4734] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #17: comm syz.1.119: iget: bad i_size value: -6917529027641081756 [ 89.301112][ T4734] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.119: couldn't read orphan inode 17 (err -117) [ 89.310694][ T4706] XFS (loop0): Ending clean mount [ 89.341989][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.353703][ T4706] XFS (loop0): Quotacheck needed: Please wait. [ 89.452189][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 89.524674][ T4706] XFS (loop0): Quotacheck: Done. [ 89.610957][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 90.052892][ T4268] XFS (loop0): Unmounting Filesystem [ 90.179340][ T4757] loop3: detected capacity change from 0 to 4096 [ 90.256817][ T4757] NILFS (loop3): invalid segment: Inconsistency found [ 90.282655][ T4757] NILFS (loop3): trying rollback from an earlier position [ 90.340728][ T4757] NILFS (loop3): recovery complete [ 90.362803][ T4763] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.421991][ T27] audit: type=1800 audit(1756408179.201:5): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 90.792993][ T4767] loop0: detected capacity change from 0 to 256 [ 90.827254][ T4768] loop3: detected capacity change from 0 to 512 [ 90.851480][ T4768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.916824][ T4767] FAT-fs (loop0): Directory bread(block 64) failed [ 90.937702][ T4767] FAT-fs (loop0): Directory bread(block 65) failed [ 90.981949][ T4768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.991612][ T4768] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.994226][ T4767] FAT-fs (loop0): Directory bread(block 66) failed [ 91.010864][ T4768] EXT4-fs (loop3): shut down requested (1) [ 91.052300][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 91.099698][ T4767] FAT-fs (loop0): Directory bread(block 67) failed [ 91.106394][ T4767] FAT-fs (loop0): Directory bread(block 68) failed [ 91.142686][ T4767] FAT-fs (loop0): Directory bread(block 69) failed [ 91.158985][ T4772] netlink: 'syz.4.138': attribute type 12 has an invalid length. [ 91.169861][ T4767] FAT-fs (loop0): Directory bread(block 70) failed [ 91.176456][ T4767] FAT-fs (loop0): Directory bread(block 71) failed [ 91.249797][ T4767] FAT-fs (loop0): Directory bread(block 72) failed [ 91.274504][ T4767] FAT-fs (loop0): Directory bread(block 73) failed [ 91.289885][ T4759] loop2: detected capacity change from 0 to 32768 [ 91.399385][ T27] audit: type=1800 audit(1756408180.171:6): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.135" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 91.792154][ T4783] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.312661][ T4801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.146'. [ 92.862152][ T4818] loop1: detected capacity change from 0 to 2048 [ 92.888823][ T4808] loop4: detected capacity change from 0 to 32768 [ 92.919036][ T4808] [ 92.919036][ T4808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.919036][ T4808] [ 92.936388][ T4819] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.971637][ T27] audit: type=1800 audit(1756408181.751:7): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 92.997913][ T4818] NILFS error (device loop1): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 93.037455][ T4818] Remounting filesystem read-only [ 93.058286][ T4808] read_mapping_page failed! [ 93.064914][ T4808] ERROR: (device loop4): txCommit: [ 93.064914][ T4808] [ 93.095009][ T4808] ERROR: (device loop4): remounting filesystem as read-only [ 93.159209][ T4818] syz.1.157 (4818) used greatest stack depth: 19816 bytes left [ 93.185674][ T4266] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 93.241159][ T4821] loop3: detected capacity change from 0 to 128 [ 93.453919][ T4334] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 93.728220][ T4829] loop4: detected capacity change from 0 to 4096 [ 93.875767][ T4831] fido_id[4831]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 94.212881][ T4846] loop1: detected capacity change from 0 to 512 [ 94.258670][ T4846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.372054][ T4846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 94.392909][ T4846] System zones: 0-2, 18-18, 34-34 [ 94.452555][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.470915][ T4846] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.633370][ T4846] EXT4-fs: Cannot change journaled quota options when quota turned on [ 94.830421][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 95.050673][ T4869] loop0: detected capacity change from 0 to 8 [ 95.056903][ T4475] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.132799][ T4869] SQUASHFS error: Unable to read inode 0xa7 [ 95.280390][ T4475] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 95.319483][ T4475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.352821][ T4475] usb 5-1: config 0 descriptor?? [ 95.375548][ T4475] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 95.453637][ T4879] loop3: detected capacity change from 0 to 2048 [ 95.460560][ T4334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.486761][ T4879] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.528424][ T4879] NILFS (loop3): mounting unchecked fs [ 95.589919][ T4879] NILFS (loop3): recovery complete [ 95.628582][ T4886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.649514][ T4334] usb 2-1: Using ep0 maxpacket: 16 [ 95.656695][ T4334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.667156][ T4887] loop0: detected capacity change from 0 to 2048 [ 95.709560][ T4334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.721792][ T4334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.769603][ T4334] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.792290][ T4475] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 95.806125][ T4887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.822307][ T4890] loop2: detected capacity change from 0 to 128 [ 95.835078][ T4334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.860649][ T4887] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.872778][ T4890] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 95.888369][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.897980][ T4334] usb 2-1: SerialNumber: syz [ 95.938269][ T4334] hub 2-1:1.0: bad descriptor, ignoring hub [ 95.957760][ T4334] hub: probe of 2-1:1.0 failed with error -5 [ 95.983361][ T4334] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 95.997756][ T4887] EXT4-fs (loop0): shut down requested (1) [ 96.024028][ T4887] fs-verity: sha256 using implementation "sha256-avx2" [ 96.164766][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 96.200324][ T4475] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 96.340749][ T4898] loop0: detected capacity change from 0 to 2048 [ 96.354934][ T4896] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.364076][ T4896] use the actual size instead. [ 96.392798][ T4900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.409493][ T4867] raw-gadget.1 gadget.1: fail, usb_ep_set_wedge returned -11 [ 96.411435][ T4475] usb 5-1: USB disconnect, device number 3 [ 96.526680][ T27] audit: type=1800 audit(1756408185.301:8): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.189" name="file1" dev="loop0" ino=2097152 res=0 errno=0 [ 96.539983][ T126] usb 2-1: USB disconnect, device number 2 [ 96.630467][ T4904] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 96.692185][ T4906] loop3: detected capacity change from 0 to 64 [ 96.711018][ T4906] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 96.758565][ T4904] Remounting filesystem read-only [ 96.927383][ T4910] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 97.034085][ T4268] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 97.089088][ T4913] loop1: detected capacity change from 0 to 512 [ 97.098686][ T4913] EXT4-fs: Ignoring removed nobh option [ 97.150074][ T4913] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.204603][ T4913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.229652][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 97.285701][ T4913] EXT4-fs (loop1): 1 truncate cleaned up [ 97.298395][ T4921] loop0: detected capacity change from 0 to 512 [ 97.344517][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.483447][ T27] audit: type=1800 audit(1756408186.261:9): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.197" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 97.510109][ T4921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.533777][ T4921] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.703556][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 97.818088][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 98.271360][ T4947] loop0: detected capacity change from 0 to 512 [ 98.305066][ T4947] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.345723][ T4925] loop2: detected capacity change from 0 to 32768 [ 98.377161][ T4947] EXT4-fs (loop0): 1 truncate cleaned up [ 98.389605][ T4925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.202 (4925) [ 98.405696][ T4949] device syzkaller1 entered promiscuous mode [ 98.408786][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.433242][ T4925] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.444043][ T4925] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 98.487480][ T4925] BTRFS info (device loop2): using free space tree [ 98.523507][ T4953] loop3: detected capacity change from 0 to 512 [ 98.543248][ T4947] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.210: Logical block already allocated [ 98.647187][ T4953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.688288][ T4953] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.763296][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 98.884210][ T4925] BTRFS info (device loop2): enabling ssd optimizations [ 98.971196][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 99.005379][ T4978] loop1: detected capacity change from 0 to 128 [ 99.051450][ T4979] loop0: detected capacity change from 0 to 1024 [ 99.103597][ T4978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.160158][ T4982] loop3: detected capacity change from 0 to 128 [ 99.173202][ T4978] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.282929][ T4978] syz.1.215 (pid 4978) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 99.286368][ T4275] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.667827][ T4958] loop4: detected capacity change from 0 to 32768 [ 99.681706][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 99.694274][ T11] hfsplus: b-tree write err: -5, ino 4 [ 99.820849][ T4958] XFS (loop4): Mounting V5 Filesystem [ 100.070762][ T4958] XFS (loop4): Ending clean mount [ 100.206711][ T5004] loop2: detected capacity change from 0 to 4096 [ 100.303575][ T4278] XFS (loop4): Unmounting Filesystem [ 100.333876][ T5004] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.419979][ T5004] ntfs3: loop2: Failed to load $Extend. [ 100.794202][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 101.445222][ T5040] loop4: detected capacity change from 0 to 512 [ 101.491088][ T5040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.545401][ T5040] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.607737][ T5040] EXT4-fs (loop4): 1 truncate cleaned up [ 101.614051][ T5040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.747825][ T5050] loop2: detected capacity change from 0 to 128 [ 101.888274][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 101.938475][ T5056] loop1: detected capacity change from 0 to 1024 [ 102.027988][ T5056] EXT4-fs: Ignoring removed nobh option [ 102.067905][ T5056] EXT4-fs: inline encryption not supported [ 102.074420][ T5054] loop3: detected capacity change from 0 to 8192 [ 102.143844][ T5062] loop4: detected capacity change from 0 to 2048 [ 102.165719][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.303653][ T5050] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.333604][ T5062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.348670][ T5050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.409995][ T5050] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.585859][ T5056] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.241: Allocating blocks 497-513 which overlap fs metadata [ 102.692523][ T5056] EXT4-fs (loop1): pa ffff888071db92a0: logic 256, phys. 385, len 8 [ 102.701988][ T5056] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 102.851818][ T5050] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 102.893819][ T5077] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 102.947778][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 103.156492][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 103.407167][ T5102] loop2: detected capacity change from 0 to 1024 [ 103.433549][ T5102] EXT4-fs: Ignoring removed bh option [ 103.489728][ T5107] input: syz1 as /devices/virtual/input/input5 [ 103.615438][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.693529][ T5118] loop3: detected capacity change from 0 to 512 [ 103.710643][ T5118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.740263][ T5118] EXT4-fs: Ignoring removed i_version option [ 103.787995][ T5118] EXT4-fs (loop3): 1 orphan inode deleted [ 103.806584][ T5118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.901243][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 103.901497][ T5124] binder: 5123:5124 ioctl c0306201 0 returned -14 [ 103.918344][ T5124] binder: 5123:5124 ioctl 541b 0 returned -22 [ 103.925864][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 103.930763][ T27] audit: type=1326 audit(1756408192.701:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5122 comm="syz.1.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d238ebe9 code=0x0 [ 104.133507][ T5133] loop2: detected capacity change from 0 to 128 [ 104.206943][ T5133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.233819][ T5136] PID 5136 killed due to inadequate hugepage pool [ 104.264533][ T5133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.279361][ T5138] netlink: 176 bytes leftover after parsing attributes in process `syz.3.264'. [ 104.298755][ T5136] PID 5136 killed due to inadequate hugepage pool [ 104.335684][ T5138] netlink: 176 bytes leftover after parsing attributes in process `syz.3.264'. [ 104.367048][ T5136] PID 5136 killed due to inadequate hugepage pool [ 104.400973][ T5138] Zero length message leads to an empty skb [ 104.621512][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 104.971649][ T5147] loop0: detected capacity change from 0 to 2048 [ 105.136070][ T5151] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿD†üB€|˜Ü‘…–0xffffffffffffffff [ 105.158037][ T5152] device syzkaller1 entered promiscuous mode [ 105.499438][ C0] sched: RT throttling activated [ 105.598224][ T5140] loop2: detected capacity change from 0 to 131072 [ 105.610203][ T5140] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 105.618356][ T5140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.631311][ T5140] F2FS-fs (loop2): invalid crc value [ 105.706259][ T5140] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.775049][ T5140] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.782396][ T5140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 106.169499][ T4379] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.225467][ T5172] loop1: detected capacity change from 0 to 256 [ 106.285421][ T5172] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 106.369856][ T4379] usb 5-1: Using ep0 maxpacket: 16 [ 106.377656][ T4379] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.433258][ T4379] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.454674][ T5148] loop3: detected capacity change from 0 to 32768 [ 106.477888][ T4379] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.550764][ T4379] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 106.585922][ T4379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.609836][ T5148] XFS (loop3): Mounting V5 Filesystem [ 106.628932][ T4379] usb 5-1: config 0 descriptor?? [ 106.778534][ T5148] XFS (loop3): Ending clean mount [ 106.857739][ T5148] XFS (loop3): Quotacheck needed: Please wait. [ 106.955948][ T5148] XFS (loop3): Quotacheck: Done. [ 107.059925][ T4379] apple 0003:05AC:0247.0002: unexpected long global item [ 107.067630][ T4379] apple 0003:05AC:0247.0002: parse failed [ 107.100642][ T4379] apple: probe of 0003:05AC:0247.0002 failed with error -22 [ 107.221218][ T4265] XFS (loop3): Unmounting Filesystem [ 107.288146][ T4379] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.307267][ T4985] usb 5-1: USB disconnect, device number 4 [ 107.342175][ T5183] loop1: detected capacity change from 0 to 32768 [ 107.515812][ T4379] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 107.556657][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.590505][ T4379] usb 1-1: Product: syz [ 107.594796][ T4379] usb 1-1: Manufacturer: syz [ 107.614763][ T4379] usb 1-1: SerialNumber: syz [ 107.622471][ T5183] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 107.633053][ T4379] usb 1-1: config 0 descriptor?? [ 107.675842][ T5183] XFS (loop1): Quotacheck needed: Please wait. [ 107.850283][ T5183] XFS (loop1): Quotacheck: Done. [ 107.996897][ T4266] XFS (loop1): Unmounting Filesystem [ 108.064237][ T4379] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 108.087420][ T4379] usb 1-1: Firmware version (0.0) predates our first public release. [ 108.107678][ T4379] usb 1-1: Please update to version 0.2 or newer [ 108.367015][ T4379] usb 1-1: USB disconnect, device number 3 [ 108.705759][ T5225] loop1: detected capacity change from 0 to 512 [ 108.794779][ T5225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.841322][ T5209] loop2: detected capacity change from 0 to 40427 [ 108.860596][ T5209] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 108.870215][ T5209] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.888114][ T5209] F2FS-fs (loop2): invalid crc value [ 108.935260][ T5209] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.960337][ T5233] EXT4-fs (loop1): shut down requested (1) [ 109.000130][ T5225] fs-verity: sha512 using implementation "sha512-avx2" [ 109.113772][ T5209] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.142104][ T5209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.228525][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 109.334373][ T5209] F2FS-fs (loop2): Corrupted max_depth of 3: 255 [ 109.365421][ T5209] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 109.767235][ T5248] TCP: TCP_TX_DELAY enabled [ 110.017433][ T5229] syz.4.292 (5229): drop_caches: 2 [ 110.219560][ T4985] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.340451][ T5252] loop4: detected capacity change from 0 to 8192 [ 110.374873][ T5246] loop0: detected capacity change from 0 to 40427 [ 110.383350][ T5252] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.413714][ T5246] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.419523][ T4985] usb 2-1: Using ep0 maxpacket: 32 [ 110.436540][ T5246] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.437500][ T4985] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.468632][ T4985] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 110.483024][ T4985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.509198][ T4985] usb 2-1: Product: syz [ 110.516366][ T4985] usb 2-1: Manufacturer: syz [ 110.524057][ T5246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.534798][ T4985] usb 2-1: SerialNumber: syz [ 110.568086][ T4985] usb 2-1: config 0 descriptor?? [ 110.731671][ T5246] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.738784][ T5246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.000967][ T4985] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 111.189643][ T5264] loop2: detected capacity change from 0 to 32768 [ 111.205893][ T5264] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.209572][ T4285] Bluetooth: hci5: command 0xfc11 tx timeout [ 111.214609][ T5264] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.223650][ T4284] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 111.291512][ T5264] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 111.306620][ T26] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.319759][ T26] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.418491][ T26] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 111.432530][ T26] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.454686][ T4985] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 111.461645][ T5264] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 111.574757][ T4985] usb 2-1: USB disconnect, device number 3 [ 112.006706][ T5277] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 112.443813][ T4985] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.665599][ T4985] usb 2-1: Using ep0 maxpacket: 16 [ 112.678964][ T4985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.703803][ T4985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.744449][ T4985] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 112.770911][ T4985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.799220][ T4985] usb 2-1: config 0 descriptor?? [ 112.887356][ T5300] loop3: detected capacity change from 0 to 2048 [ 112.994106][ T5305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.226480][ T4985] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0003/input/input6 [ 113.370604][ T4985] creative-sb0540 0003:041E:3100.0003: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 113.468786][ T4985] usb 2-1: USB disconnect, device number 4 [ 113.785852][ T5315] fido_id[5315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.109023][ T5297] loop0: detected capacity change from 0 to 32768 [ 114.157799][ T5297] XFS: attr2 mount option is deprecated. [ 114.289734][ T5297] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 114.306300][ T5338] loop3: detected capacity change from 0 to 1024 [ 114.313423][ T5297] XFS (loop0): Mounting V5 Filesystem [ 114.416807][ T5297] XFS (loop0): Ending clean mount [ 114.501208][ T5297] XFS (loop0): Quotacheck needed: Please wait. [ 114.598981][ T5297] XFS (loop0): Quotacheck: Done. [ 114.618234][ T5297] XFS (loop0): User initiated shutdown received. [ 114.653389][ T5297] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 114.753323][ T5297] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 114.913166][ T5313] loop2: detected capacity change from 0 to 32768 [ 114.957896][ T4268] XFS (loop0): Unmounting Filesystem [ 115.552535][ T5371] loop4: detected capacity change from 0 to 128 [ 115.661863][ T5371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.715007][ T5371] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.093365][ T5385] loop1: detected capacity change from 0 to 256 [ 116.460856][ T5395] tun0: tun_chr_ioctl cmd 1074025675 [ 116.466220][ T5395] tun0: persist disabled [ 116.496445][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 116.788570][ T5397] loop3: detected capacity change from 0 to 32768 [ 116.798463][ T5397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.344 (5397) [ 116.827058][ T5397] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.838340][ T5397] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.847322][ T5397] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.856014][ T5397] BTRFS info (device loop3): force clearing of disk cache [ 116.863236][ T5397] BTRFS info (device loop3): setting datacow [ 116.869279][ T5397] BTRFS info (device loop3): doing ref verification [ 116.876114][ T5397] BTRFS info (device loop3): disabling free space tree [ 116.883187][ T5397] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.893107][ T5397] BTRFS info (device loop3): use zstd compression, level 3 [ 116.900515][ T5397] BTRFS info (device loop3): enabling ssd optimizations [ 116.907613][ T5397] BTRFS info (device loop3): using spread ssd allocation scheme [ 116.915440][ T5397] BTRFS info (device loop3): not using ssd optimizations [ 116.922645][ T5397] BTRFS info (device loop3): not using spread ssd allocation scheme [ 117.252290][ T5397] BTRFS info (device loop3): rebuilding free space tree [ 117.271905][ T5397] BTRFS info (device loop3): disabling free space tree [ 117.278913][ T5397] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.288743][ T5397] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.695742][ T5397] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.707410][ T5397] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 117.717827][ T5397] BTRFS info (device loop3: state M): enabling auto defrag [ 117.725154][ T5397] BTRFS info (device loop3: state M): turning on sync discard [ 117.732699][ T5397] BTRFS info (device loop3: state M): enabling free space tree [ 117.740449][ T5397] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.751919][ T5397] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 117.761840][ T5397] BTRFS warning (device loop3: state M): remount supports changing free space tree only from ro to rw [ 117.946897][ T4265] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.009181][ T5436] loop4: detected capacity change from 0 to 512 [ 118.081179][ T5436] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.353: casefold flag without casefold feature [ 118.170542][ T5436] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 118.218827][ T5400] loop1: detected capacity change from 0 to 32768 [ 118.241892][ T5400] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.346 (5400) [ 118.330862][ T5436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.360855][ T5400] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 118.422956][ T5400] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 118.461599][ T5400] BTRFS info (device loop1): using free space tree [ 118.474532][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 118.979611][ T5400] BTRFS info (device loop1): enabling ssd optimizations [ 119.044565][ T5429] loop2: detected capacity change from 0 to 32768 [ 119.262615][ T5429] XFS (loop2): Mounting V5 Filesystem [ 119.547435][ T5429] XFS (loop2): Ending clean mount [ 119.577812][ T5429] XFS (loop2): Quotacheck needed: Please wait. [ 119.700715][ T5429] XFS (loop2): Quotacheck: Done. [ 119.788537][ T4266] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 119.855573][ T4275] XFS (loop2): Unmounting Filesystem [ 119.911155][ T4693] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 120.148659][ T4693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.203050][ T4693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.227616][ T4693] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 120.245792][ T4693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.287709][ T4693] usb 5-1: config 0 descriptor?? [ 120.539191][ T5486] loop1: detected capacity change from 0 to 512 [ 120.636586][ T5486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.727945][ T5486] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.761700][ T4693] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 121.004352][ T4693] usb 5-1: USB disconnect, device number 5 [ 121.017392][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 121.042058][ T5496] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 121.148222][ T5494] fido_id[5494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 121.358660][ T5503] loop0: detected capacity change from 0 to 512 [ 121.412076][ T5503] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.366: casefold flag without casefold feature [ 121.559579][ T5503] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.366: couldn't read orphan inode 15 (err -117) [ 121.620162][ T5503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.755839][ T5514] loop3: detected capacity change from 0 to 256 [ 121.853226][ T5515] overlayfs: failed to resolve './file2': -2 [ 121.989826][ T5511] loop2: detected capacity change from 0 to 32768 [ 122.150416][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 122.183178][ T5500] loop1: detected capacity change from 0 to 32768 [ 122.207564][ T5511] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.265390][ T5511] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 122.281213][ T5511] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 122.291138][ T5511] OCFS2: File system is now read-only. [ 122.296644][ T5511] (syz.2.368,5511,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 122.305186][ T5511] (syz.2.368,5511,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 122.313029][ T5511] (syz.2.368,5511,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 122.321695][ T5511] (syz.2.368,5511,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 122.330325][ T5511] (syz.2.368,5511,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 122.338455][ T5511] (syz.2.368,5511,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 122.346778][ T5511] (syz.2.368,5511,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 122.355887][ T5511] (syz.2.368,5511,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 122.365195][ T5511] (syz.2.368,5511,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 122.374384][ T5511] (syz.2.368,5511,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 122.383680][ T5511] (syz.2.368,5511,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 122.392915][ T5511] (syz.2.368,5511,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 122.402619][ T5511] (syz.2.368,5511,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 122.404029][ T5500] XFS (loop1): Mounting V5 Filesystem [ 122.411830][ T5511] (syz.2.368,5511,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 122.411888][ T5511] (syz.2.368,5511,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 122.411910][ T5511] (syz.2.368,5511,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 122.411945][ T5511] (syz.2.368,5511,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 122.705492][ T4275] (syz-executor,4275,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 122.747758][ T5500] XFS (loop1): Ending clean mount [ 122.767967][ T5500] XFS (loop1): Quotacheck needed: Please wait. [ 122.828470][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 122.919692][ T5500] XFS (loop1): Quotacheck: Done. [ 122.970352][ T5500] XFS (loop1): User initiated shutdown received. [ 123.012085][ T5500] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 123.096997][ T5500] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 123.239562][ T5484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.269871][ T4266] XFS (loop1): Unmounting Filesystem [ 123.446641][ T5484] usb 4-1: Using ep0 maxpacket: 16 [ 123.472617][ T5484] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 123.502735][ T5484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.522314][ T5484] usb 4-1: Product: syz [ 123.532328][ T5484] usb 4-1: Manufacturer: syz [ 123.543119][ T5484] usb 4-1: SerialNumber: syz [ 123.727228][ T5560] loop0: detected capacity change from 0 to 1024 [ 123.765493][ T5560] EXT4-fs: Ignoring removed bh option [ 123.866916][ T5560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.049888][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 124.068560][ T5569] loop1: detected capacity change from 0 to 256 [ 124.076956][ T5569] FAT-fs (loop1): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 124.159875][ T4378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.379704][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.410572][ T5441] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 124.451463][ T5484] snd-usb-audio: probe of 4-1:222.0 failed with error -2 [ 124.534058][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.579547][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 124.586995][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.598666][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.608861][ T126] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 124.625986][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.636327][ T126] usb 5-1: config 0 descriptor?? [ 124.645545][ T5440] usb 4-1: USB disconnect, device number 2 [ 124.653644][ T5441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.667209][ T5586] all (unregistering): Released all slaves [ 124.671305][ T5441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.693489][ T5441] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 124.702755][ T5441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.713915][ T5441] usb 3-1: config 0 descriptor?? [ 124.895699][ T5591] loop0: detected capacity change from 0 to 512 [ 124.907389][ T5591] EXT4-fs: Ignoring removed i_version option [ 124.913975][ T5591] EXT4-fs: Ignoring removed nobh option [ 124.923720][ T5591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.944460][ T5591] EXT4-fs (loop0): 1 truncate cleaned up [ 124.950806][ T5591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.004086][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 125.062637][ T126] waltop 0003:172F:0032.0005: item fetching failed at offset 0/2 [ 125.073578][ T126] waltop: probe of 0003:172F:0032.0005 failed with error -22 [ 125.145656][ T5441] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 125.170318][ T5596] netlink: 84 bytes leftover after parsing attributes in process `syz.0.400'. [ 125.266350][ T5441] usb 5-1: USB disconnect, device number 6 [ 125.427045][ T126] usb 3-1: USB disconnect, device number 5 [ 125.498394][ T5598] fido_id[5598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 125.776596][ T5615] loop0: detected capacity change from 0 to 1024 [ 125.850671][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.859350][ T5615] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.916085][ T5620] loop4: detected capacity change from 0 to 64 [ 126.105055][ T5625] loop1: detected capacity change from 0 to 2048 [ 126.208304][ T4366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 126.237379][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.255692][ T4366] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 126.279285][ T5631] loop2: detected capacity change from 0 to 512 [ 126.287591][ T5625] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.307866][ T4366] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.307866][ T4366] [ 126.336438][ T4366] EXT4-fs (loop0): Total free blocks count 0 [ 126.361437][ T5631] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 126.366960][ T4366] EXT4-fs (loop0): Free/Dirty block details [ 126.378915][ T4366] EXT4-fs (loop0): free_blocks=4293918720 [ 126.385061][ T4366] EXT4-fs (loop0): dirty_blocks=16 [ 126.390669][ T4366] EXT4-fs (loop0): Block reservation details [ 126.397055][ T4366] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 126.406810][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 126.422714][ T5631] System zones: 0-2, 18-18, 34-35 [ 126.510882][ T5631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.522602][ T5631] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.565224][ T5625] overlayfs: Failed to create volatile/dirty file. [ 126.606455][ T5638] loop0: detected capacity change from 0 to 512 [ 126.658995][ T5635] loop4: detected capacity change from 0 to 4096 [ 126.674221][ T5638] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.746814][ T5638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.758281][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 126.762661][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 126.774316][ T5641] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.978088][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 127.019076][ T5646] loop3: detected capacity change from 0 to 512 [ 127.090138][ T5646] EXT4-fs: Ignoring removed i_version option [ 127.096209][ T5646] EXT4-fs: Ignoring removed nobh option [ 127.106034][ T5650] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 127.121361][ T5646] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.128200][ T5646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.204316][ T5650] Remounting filesystem read-only [ 127.253532][ T5646] EXT4-fs (loop3): 1 truncate cleaned up [ 127.341484][ T5646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.487144][ T5662] loop2: detected capacity change from 0 to 64 [ 127.916172][ T5646] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 127.999995][ T5674] device syzkaller1 entered promiscuous mode [ 128.044294][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 128.225617][ T5682] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 128.447035][ T5656] loop1: detected capacity change from 0 to 32768 [ 128.460659][ T5686] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 128.569909][ T5656] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 128.604073][ T5696] capability: warning: `syz.2.438' uses deprecated v2 capabilities in a way that may be insecure [ 128.822494][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 128.959974][ T4693] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.179640][ T4693] usb 4-1: Using ep0 maxpacket: 8 [ 129.189917][ T4693] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.219540][ T4693] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.269492][ T4693] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.289547][ T4693] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.319483][ T4693] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.365268][ T4693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.396873][ T5715] loop2: detected capacity change from 0 to 512 [ 129.545309][ T5715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.584844][ T5715] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.609250][ T4693] usb 4-1: GET_CAPABILITIES returned 0 [ 129.615004][ T4693] usbtmc 4-1:16.0: can't read capabilities [ 129.752284][ T5711] loop4: detected capacity change from 0 to 32768 [ 129.796511][ T5711] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.444 (5711) [ 129.815590][ T5484] usb 4-1: USB disconnect, device number 3 [ 129.879210][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 129.888872][ T5711] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.928834][ T5711] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 129.956692][ T5711] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.971345][ T5711] BTRFS info (device loop4): use lzo compression, level 0 [ 129.978668][ T5711] BTRFS info (device loop4): using free space tree [ 130.302902][ T5711] BTRFS info (device loop4): enabling ssd optimizations [ 131.017717][ T4278] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 131.400874][ T5762] loop0: detected capacity change from 0 to 4096 [ 131.454377][ T5762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.469795][ T5483] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.584472][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 131.679771][ T5483] usb 3-1: Using ep0 maxpacket: 32 [ 131.698423][ T5483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.745766][ T5483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.778724][ T5483] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 131.816217][ T5483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.843697][ T5483] usb 3-1: config 0 descriptor?? [ 132.314360][ T5483] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 132.349238][ T5786] loop3: detected capacity change from 0 to 2048 [ 132.491426][ T5786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.545249][ T5483] usb 3-1: USB disconnect, device number 6 [ 132.777120][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 132.870866][ T5483] kernel write not supported for file bpf-prog (pid: 5483 comm: kworker/0:17) [ 132.886437][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892817][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.925110][ T5787] fido_id[5787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.159549][ T5483] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.369691][ T5483] usb 2-1: Using ep0 maxpacket: 8 [ 133.381801][ T5483] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 133.429085][ T5483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.439537][ T5800] block nbd3: NBD_DISCONNECT [ 133.445267][ T5800] block nbd3: Send disconnect failed -32 [ 133.484381][ T5483] usb 2-1: Product: syz [ 133.495040][ T5795] block nbd3: Disconnected due to user request. [ 133.520821][ T5483] usb 2-1: Manufacturer: syz [ 133.541776][ T5795] block nbd3: shutting down sockets [ 133.547804][ T5483] usb 2-1: SerialNumber: syz [ 133.578998][ T5483] usb 2-1: config 0 descriptor?? [ 133.635646][ T5483] gspca_main: se401-2.14.0 probing 047d:5003 [ 134.027377][ T5483] gspca_se401: ExtraFeatures: 11 [ 134.034034][ T5483] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.229370][ T5784] loop4: detected capacity change from 0 to 262144 [ 134.230974][ T5483] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 134.248980][ T5784] F2FS-fs (loop4): invalid crc value [ 134.271746][ T5784] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.328938][ T5784] F2FS-fs (loop4): Start checkpoint disabled! [ 134.375811][ T5784] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.418328][ T5483] usb 2-1: USB disconnect, device number 5 [ 134.450890][ T27] audit: type=1800 audit(1756408223.231:11): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.466" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 134.703058][ T5813] loop2: detected capacity change from 0 to 4096 [ 134.727720][ T5813] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 134.834357][ T5813] ntfs: volume version 3.1. [ 134.878230][ T5813] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-15. You might want to try to use the mount option nls=utf8. [ 134.999380][ T5813] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 135.142809][ T5829] loop3: detected capacity change from 0 to 64 [ 135.176337][ T5827] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 135.543131][ T5839] device macvtap0 entered promiscuous mode [ 135.608144][ T5839] device macvtap0 left promiscuous mode [ 135.943759][ T5850] loop0: detected capacity change from 0 to 2048 [ 136.030343][ T5850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.530828][ T4475] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.591334][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 136.643221][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.710506][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.710506][ T11] [ 136.739022][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 136.749557][ T11] EXT4-fs (loop0): Free/Dirty block details [ 136.749581][ T4475] usb 5-1: Using ep0 maxpacket: 8 [ 136.769272][ T5849] loop1: detected capacity change from 0 to 32768 [ 136.774552][ T11] EXT4-fs (loop0): free_blocks=4096 [ 136.785500][ T4475] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 136.791433][ T11] EXT4-fs (loop0): dirty_blocks=864 [ 136.823437][ T4475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.829014][ T11] EXT4-fs (loop0): Block reservation details [ 136.852184][ T4475] usb 5-1: Product: syz [ 136.858518][ T4475] usb 5-1: Manufacturer: syz [ 136.863441][ T11] EXT4-fs (loop0): i_reserved_data_blocks=54 [ 136.877397][ T4475] usb 5-1: SerialNumber: syz [ 136.900356][ T4475] usb 5-1: config 0 descriptor?? [ 136.915928][ T4475] gspca_main: se401-2.14.0 probing 047d:5003 [ 136.930828][ T5849] XFS (loop1): Mounting V5 Filesystem [ 136.940266][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 832 with error 28 [ 137.068861][ T5849] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 137.192607][ T5878] kernel read not supported for file /z¿ (pid: 5878 comm: syz.3.501) [ 137.226669][ T5849] XFS (loop1): Starting recovery (logdev: internal) [ 137.245771][ T5880] 9pnet_fd: Insufficient options for proto=fd [ 137.292644][ T27] audit: type=1800 audit(1756408226.071:12): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.501" name=7ABF17 dev="mqueue" ino=38317 res=0 errno=0 [ 137.298185][ T5849] XFS (loop1): Ending recovery (logdev: internal) [ 137.319291][ T4475] gspca_se401: ExtraFeatures: 11 [ 137.325062][ T4475] gspca_se401: Frame size: 0x0 1/16th janggu [ 137.525144][ T4475] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 137.570451][ T4475] usb 5-1: USB disconnect, device number 7 [ 137.783441][ T5864] loop2: detected capacity change from 0 to 32768 [ 137.960581][ T5864] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 138.018703][ T5881] loop0: detected capacity change from 0 to 32768 [ 138.155726][ T5881] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 138.222537][ T5881] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 138.467048][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 138.470940][ T4266] XFS (loop1): Unmounting Filesystem [ 138.712182][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.812001][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 138.842535][ T5884] loop3: detected capacity change from 0 to 40427 [ 138.936168][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.962173][ T5884] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.177878][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.209289][ T5884] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.342250][ T27] audit: type=1804 audit(1756408228.121:13): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.502" name="/newroot/125/file0/file1" dev="loop3" ino=10 res=1 errno=0 [ 139.393230][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.085798][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.097497][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.109187][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.122108][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.130684][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.138164][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.831249][ T5941] loop0: detected capacity change from 0 to 512 [ 141.856026][ T5941] EXT4-fs: Ignoring removed nobh option [ 141.878885][ T5941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.987805][ T5941] EXT4-fs (loop0): 1 truncate cleaned up [ 141.993830][ T5941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.031657][ T27] audit: type=1800 audit(1756408230.811:14): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.518" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 142.036935][ T5941] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.076293][ T5941] EXT4-fs (loop0): Remounting filesystem read-only [ 142.093324][ T5947] loop2: detected capacity change from 0 to 2048 [ 142.110372][ T5941] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.518: unable to update i_inline_off [ 142.128765][ T5949] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.141192][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.174865][ T27] audit: type=1800 audit(1756408230.951:15): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.520" name="file1" dev="loop2" ino=2097152 res=0 errno=0 [ 142.178040][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.237084][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.252206][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.284161][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.304867][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.329194][ T5951] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 142.338158][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.350749][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.357456][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.376845][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.386946][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.427594][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.464543][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.509851][ T5951] Remounting filesystem read-only [ 142.515556][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.535967][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.614585][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 142.632486][ T5940] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.518: corrupted in-inode xattr [ 142.692935][ T5954] loop4: detected capacity change from 0 to 2048 [ 142.726041][ T5954] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.775201][ T5954] NILFS (loop4): mounting unchecked fs [ 142.808323][ T4275] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 142.870602][ T5954] NILFS (loop4): recovery complete [ 142.884857][ T11] device hsr_slave_0 left promiscuous mode [ 142.946078][ T5960] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.012183][ T11] device hsr_slave_1 left promiscuous mode [ 143.025683][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.074552][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.116671][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.134583][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.152174][ T5966] loop2: detected capacity change from 0 to 512 [ 143.176321][ T11] device bridge_slave_1 left promiscuous mode [ 143.199577][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 143.225653][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.258111][ T5966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.325395][ T5966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 143.364813][ T5966] System zones: 0-2, 18-18, 34-34 [ 143.371257][ T11] device bridge_slave_0 left promiscuous mode [ 143.377903][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.412001][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.459711][ T5966] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.506863][ T5957] loop3: detected capacity change from 0 to 32768 [ 143.620750][ T5957] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 143.710696][ T5957] [ 143.713104][ T5957] ====================================================== [ 143.720235][ T5957] WARNING: possible circular locking dependency detected [ 143.727273][ T5957] syzkaller #0 Not tainted [ 143.731740][ T5957] ------------------------------------------------------ [ 143.738781][ T5957] syz.3.522/5957 is trying to acquire lock: [ 143.744689][ T5957] ffff88807bddd488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 143.755705][ T5957] [ 143.755705][ T5957] but task is already holding lock: [ 143.763105][ T5957] ffff888017926a20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x195/0x300 [ 143.773687][ T5957] [ 143.773687][ T5957] which lock already depends on the new lock. [ 143.773687][ T5957] [ 143.784378][ T5957] [ 143.784378][ T5957] the existing dependency chain (in reverse order) is: [ 143.793507][ T5957] [ 143.793507][ T5957] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 143.802325][ T5957] down_read+0x42/0x2d0 [ 143.807049][ T5957] ocfs2_read_virt_blocks+0x265/0x950 [ 143.809796][ T5966] EXT4-fs: Cannot change journaled quota options when quota turned on [ 143.812963][ T5957] ocfs2_find_entry+0x3d1/0x20c0 [ 143.826605][ T5957] ocfs2_find_files_on_disk+0x102/0x390 [ 143.832709][ T5957] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 143.838814][ T5957] ocfs2_get_system_file_inode+0x332/0x7b0 [ 143.845184][ T5957] ocfs2_init_global_system_inodes+0x316/0x650 [ 143.851900][ T5957] ocfs2_fill_super+0x2a32/0x4d00 [ 143.857490][ T5957] mount_bdev+0x287/0x3c0 [ 143.862369][ T5957] legacy_get_tree+0xe6/0x180 [ 143.867701][ T5957] vfs_get_tree+0x88/0x270 [ 143.872677][ T5957] do_new_mount+0x24a/0xa40 [ 143.877814][ T5957] __se_sys_mount+0x2d6/0x3c0 [ 143.883127][ T5957] do_syscall_64+0x4c/0xa0 [ 143.884288][ T5983] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 143.888093][ T5957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.902343][ T5957] [ 143.902343][ T5957] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 143.910712][ T5957] __lock_acquire+0x2cf8/0x7c50 [ 143.916113][ T5957] lock_acquire+0x1b4/0x490 [ 143.921163][ T5957] __mutex_lock+0x120/0xaf0 [ 143.926232][ T5957] ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 143.932782][ T5957] ocfs2_reserve_local_alloc_bits+0xfc/0x2670 [ 143.939406][ T5957] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 143.946288][ T5957] ocfs2_lock_allocators+0x2f7/0x5b0 [ 143.952136][ T5957] ocfs2_write_begin_nolock+0x2286/0x4270 [ 143.958418][ T5957] ocfs2_write_begin+0x1b8/0x300 [ 143.964006][ T5957] generic_perform_write+0x2db/0x560 [ 143.969949][ T5957] __generic_file_write_iter+0x172/0x430 [ 143.976142][ T5957] ocfs2_file_write_iter+0x1593/0x1df0 [ 143.982251][ T5957] vfs_write+0x44c/0x960 [ 143.987046][ T5957] ksys_write+0x143/0x240 [ 143.991932][ T5957] do_syscall_64+0x4c/0xa0 [ 143.996910][ T5957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.003362][ T5957] [ 144.003362][ T5957] other info that might help us debug this: [ 144.003362][ T5957] [ 144.013718][ T5957] Possible unsafe locking scenario: [ 144.013718][ T5957] [ 144.021207][ T5957] CPU0 CPU1 [ 144.026773][ T5957] ---- ---- [ 144.032177][ T5957] lock(&ocfs2_file_ip_alloc_sem_key); [ 144.037749][ T5957] lock(&osb->system_file_mutex); [ 144.045407][ T5957] lock(&ocfs2_file_ip_alloc_sem_key); [ 144.053515][ T5957] lock(&osb->system_file_mutex); [ 144.058654][ T5957] [ 144.058654][ T5957] *** DEADLOCK *** [ 144.058654][ T5957] [ 144.066832][ T5957] 4 locks held by syz.3.522/5957: [ 144.071888][ T5957] #0: ffff888078b86368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 144.081445][ T5957] #1: ffff8880184ca460 (sb_writers#28){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 144.090563][ T5957] #2: ffff888017926d88 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x438/0x1df0 [ 144.102053][ T5957] #3: ffff888017926a20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x195/0x300 [ 144.113073][ T5957] [ 144.113073][ T5957] stack backtrace: [ 144.118986][ T5957] CPU: 1 PID: 5957 Comm: syz.3.522 Not tainted syzkaller #0 [ 144.126303][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 144.136564][ T5957] Call Trace: [ 144.139870][ T5957] [ 144.142821][ T5957] dump_stack_lvl+0x168/0x22e [ 144.147534][ T5957] ? load_image+0x3b0/0x3b0 [ 144.152071][ T5957] ? show_regs_print_info+0x12/0x12 [ 144.157300][ T5957] ? print_circular_bug+0x12b/0x1a0 [ 144.162538][ T5957] check_noncircular+0x274/0x310 [ 144.167522][ T5957] ? add_chain_block+0x940/0x940 [ 144.172507][ T5957] ? lockdep_lock+0xdc/0x1e0 [ 144.177139][ T5957] ? stack_trace_save+0x98/0xe0 [ 144.182039][ T5957] ? _find_first_zero_bit+0xcf/0x100 [ 144.187376][ T5957] __lock_acquire+0x2cf8/0x7c50 [ 144.191958][ T5984] loop0: detected capacity change from 0 to 2048 [ 144.192255][ T5957] ? add_chain_block+0x940/0x940 [ 144.203568][ T5957] ? lockdep_unlock+0x133/0x2d0 [ 144.208454][ T5957] ? mark_lock+0x94/0x320 [ 144.212812][ T5957] ? verify_lock_unused+0x140/0x140 [ 144.218114][ T5957] ? __lock_acquire+0x13c0/0x7c50 [ 144.223151][ T5957] ? hlock_conflict+0x59/0x1f0 [ 144.228023][ T5957] ? rcu_is_watching+0x11/0xa0 [ 144.232896][ T5957] lock_acquire+0x1b4/0x490 [ 144.237409][ T5957] ? ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 144.243491][ T5957] ? __might_sleep+0xd0/0xd0 [ 144.248091][ T5957] ? read_lock_is_recursive+0x10/0x10 [ 144.253472][ T5957] __mutex_lock+0x120/0xaf0 [ 144.257979][ T5957] ? ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 144.263980][ T5957] ? ocfs2_get_system_file_inode+0x149/0x7b0 [ 144.270061][ T5957] ? ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 144.276055][ T5957] ? mutex_lock_nested+0x10/0x10 [ 144.281437][ T5957] ? do_raw_spin_lock+0x11d/0x280 [ 144.286561][ T5957] ? __rwlock_init+0x140/0x140 [ 144.291339][ T5957] ? do_raw_spin_unlock+0x11d/0x230 [ 144.296546][ T5957] ocfs2_get_system_file_inode+0x1a2/0x7b0 [ 144.302503][ T5957] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 144.308691][ T5957] ? lockdep_unlock+0x133/0x2d0 [ 144.313640][ T5957] ? lockdep_lock+0x1e0/0x1e0 [ 144.318325][ T5957] ? add_lock_to_list+0x191/0x280 [ 144.323355][ T5957] ? __lock_acquire+0x28b5/0x7c50 [ 144.328386][ T5957] ? kernel_text_address+0x9c/0xd0 [ 144.333509][ T5957] ocfs2_reserve_local_alloc_bits+0xfc/0x2670 [ 144.339586][ T5957] ? stack_trace_save+0x98/0xe0 [ 144.344444][ T5957] ? verify_lock_unused+0x140/0x140 [ 144.350182][ T5957] ? __mutex_lock+0x19e/0xaf0 [ 144.354862][ T5957] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 144.361545][ T5957] ? kasan_set_track+0x60/0x70 [ 144.366341][ T5957] ? __generic_file_write_iter+0x172/0x430 [ 144.372238][ T5957] ? ocfs2_file_write_iter+0x1593/0x1df0 [ 144.377880][ T5957] ? vfs_write+0x44c/0x960 [ 144.382446][ T5957] ? ksys_write+0x143/0x240 [ 144.386953][ T5957] ? do_syscall_64+0x4c/0xa0 [ 144.391548][ T5957] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 144.397633][ T5957] ? __lock_acquire+0x7c50/0x7c50 [ 144.402661][ T5957] ? do_raw_spin_lock+0x11d/0x280 [ 144.407692][ T5957] ? __rwlock_init+0x140/0x140 [ 144.412468][ T5957] ? do_raw_spin_unlock+0x11d/0x230 [ 144.417677][ T5957] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 144.423752][ T5957] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 144.430099][ T5957] ? ocfs2_reserve_clusters+0x30/0x30 [ 144.435913][ T5957] ? ocfs2_read_inode_block+0x11a/0x180 [ 144.441476][ T5957] ? rcu_is_watching+0x11/0xa0 [ 144.446244][ T5957] ? ocfs2_num_free_extents+0x2fa/0x620 [ 144.451791][ T5957] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 144.457783][ T5957] ? ocfs2_get_clusters+0x2b5/0xa60 [ 144.462989][ T5957] ocfs2_lock_allocators+0x2f7/0x5b0 [ 144.468292][ T5957] ? _ocfs2_clear_bit+0x30/0x30 [ 144.473150][ T5957] ? do_raw_spin_lock+0x11d/0x280 [ 144.478185][ T5957] ? __rwlock_init+0x140/0x140 [ 144.482962][ T5957] ? ocfs2_write_begin_nolock+0xf62/0x4270 [ 144.488791][ T5957] ocfs2_write_begin_nolock+0x2286/0x4270 [ 144.494534][ T5957] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 144.500348][ T5957] ? __lock_acquire+0x28b5/0x7c50 [ 144.505386][ T5957] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 144.511381][ T5957] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 144.517283][ T5957] ? mark_lock+0x94/0x320 [ 144.521621][ T5957] ? __might_sleep+0xd0/0xd0 [ 144.526244][ T5957] ? preempt_count_add+0x8d/0x190 [ 144.531274][ T5957] ? rwsem_write_trylock+0x12f/0x1b0 [ 144.536563][ T5957] ? clear_nonspinnable+0x60/0x60 [ 144.541597][ T5957] ? lock_chain_count+0x20/0x20 [ 144.546454][ T5957] ocfs2_write_begin+0x1b8/0x300 [ 144.551398][ T5957] ? ktime_get_real_ts64+0x420/0x420 [ 144.556700][ T5957] ? ocfs2_readahead+0x190/0x190 [ 144.561643][ T5957] ? __vfs_getxattr+0x395/0x3d0 [ 144.566642][ T5957] ? fault_in_readable+0x15d/0x1f0 [ 144.571939][ T5957] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 144.577765][ T5957] generic_perform_write+0x2db/0x560 [ 144.583065][ T5957] ? atime_needs_update+0x780/0x780 [ 144.588360][ T5957] ? generic_file_direct_write+0x660/0x660 [ 144.594261][ T5957] ? __file_remove_privs+0x5b0/0x5b0 [ 144.599552][ T5957] ? __rwlock_init+0x140/0x140 [ 144.604414][ T5957] ? __up_read+0x27c/0x660 [ 144.608834][ T5957] __generic_file_write_iter+0x172/0x430 [ 144.614564][ T5957] ? ocfs2_inode_unlock+0x11a/0x140 [ 144.619767][ T5957] ocfs2_file_write_iter+0x1593/0x1df0 [ 144.625234][ T5957] ? verify_lock_unused+0x140/0x140 [ 144.630446][ T5957] ? ocfs2_file_read_iter+0xb50/0xb50 [ 144.635827][ T5957] ? aa_file_perm+0x3ef/0xec0 [ 144.640609][ T5957] ? rcu_read_lock_any_held+0xb0/0x120 [ 144.646070][ T5957] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 144.651357][ T5957] ? end_current_label_crit_section+0x14b/0x170 [ 144.657605][ T5957] ? common_file_perm+0x171/0x1c0 [ 144.662641][ T5957] vfs_write+0x44c/0x960 [ 144.666899][ T5957] ? file_end_write+0x250/0x250 [ 144.671756][ T5957] ? __fget_files+0x44a/0x4d0 [ 144.676446][ T5957] ? __fdget_pos+0x2ae/0x360 [ 144.681043][ T5957] ? ksys_write+0x71/0x240 [ 144.685551][ T5957] ksys_write+0x143/0x240 [ 144.689891][ T5957] ? __ia32_sys_read+0x80/0x80 [ 144.694662][ T5957] ? lockdep_hardirqs_on+0x94/0x140 [ 144.699958][ T5957] do_syscall_64+0x4c/0xa0 [ 144.704379][ T5957] ? clear_bhb_loop+0x60/0xb0 [ 144.709504][ T5957] ? clear_bhb_loop+0x60/0xb0 [ 144.714207][ T5957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.720124][ T5957] RIP: 0033:0x7f983838ebe9 [ 144.724631][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.744332][ T5957] RSP: 002b:00007f98391e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.752751][ T5957] RAX: ffffffffffffffda RBX: 00007f98385b5fa0 RCX: 00007f983838ebe9 [ 144.760733][ T5957] RDX: 0000000000001006 RSI: 0000200000000740 RDI: 0000000000000004 [ 144.768716][ T5957] RBP: 00007f9838411e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.776697][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.784669][ T5957] R13: 00007f98385b6038 R14: 00007f98385b5fa0 R15: 00007fff91ec8f88 [ 144.792659][ T5957] [ 144.808861][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 144.822461][ T11] device veth1_macvtap left promiscuous mode [ 144.828533][ T11] device veth0_macvtap left promiscuous mode [ 144.890871][ T11] device veth1_vlan left promiscuous mode [ 144.908811][ T11] device veth0_vlan left promiscuous mode [ 144.915038][ T5990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.259214][ T4265] ocfs2: Unmounting device (7,3) on (node local) [ 145.289265][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 145.343441][ T27] audit: type=1800 audit(1756408234.121:16): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.527" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 145.347440][ T5984] NILFS error (device loop0): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 145.375185][ T5984] Remounting filesystem read-only [ 145.403127][ T5984] syz.0.527 (5984) used greatest stack depth: 19664 bytes left [ 145.425973][ T4268] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 145.520768][ T5993] loop2: detected capacity change from 0 to 32768 [ 145.554014][ T5993] [ 145.554014][ T5993] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.554014][ T5993] [ 145.589087][ T5993] read_mapping_page failed! [ 145.607063][ T5993] ERROR: (device loop2): txCommit: [ 145.607063][ T5993] [ 145.615802][ T5993] ERROR: (device loop2): remounting filesystem as read-only [ 145.925176][ T11] team0 (unregistering): Port device team_slave_1 removed [ 145.978110][ T11] team0 (unregistering): Port device team_slave_0 removed [ 146.025719][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.077060][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.592524][ T11] bond0 (unregistering): Released all slaves [ 146.676450][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 146.745230][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.756843][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.773973][ T5929] device bridge_slave_0 entered promiscuous mode [ 146.786477][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.795973][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.805429][ T5929] device bridge_slave_1 entered promiscuous mode [ 146.860791][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.872026][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.915669][ T5929] team0: Port device team_slave_0 added [ 146.935353][ T5929] team0: Port device team_slave_1 added [ 146.970326][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.977388][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.007604][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.019651][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.026896][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.053712][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.124858][ T5929] device hsr_slave_0 entered promiscuous mode [ 147.132062][ T5929] device hsr_slave_1 entered promiscuous mode [ 147.138785][ T5929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.147316][ T5929] Cannot create hsr debugfs directory [ 147.247551][ T5929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.256970][ T5929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.266186][ T5929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.275521][ T5929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.297122][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.304330][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.311931][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.319055][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.359765][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 147.365514][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.378463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.387492][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.396952][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.406212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 147.422217][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.435289][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.444784][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.451934][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.470889][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.480134][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.487287][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.504245][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.525344][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.534801][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.543967][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.553778][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.565598][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.767431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.777900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.791354][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.092239][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.102409][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.123334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.132083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.142526][ T5929] device veth0_vlan entered promiscuous mode [ 148.150212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.157971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.172529][ T5929] device veth1_vlan entered promiscuous mode [ 148.194466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.203397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.213219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.222670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.233795][ T5929] device veth0_macvtap entered promiscuous mode [ 148.244501][ T5929] device veth1_macvtap entered promiscuous mode [ 148.261738][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.273581][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.284110][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.295231][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.305278][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.316014][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.326471][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.337188][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.348304][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.357952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.367708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.376550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.386980][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.401657][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.412958][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.423796][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.434306][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.445817][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.456815][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.468356][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.481198][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.492530][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.505393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.514883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.527173][ T5929] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.536374][ T5929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.547247][ T5929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.556628][ T5929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.590906][ T5929] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 148.615656][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.616961][ T5929] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 148.636353][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.649066][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.659371][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.660635][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.675171][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.439581][ T4284] Bluetooth: hci1: command 0x0419 tx timeout