last executing test programs: 3m33.276642736s ago: executing program 4 (id=51): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000100)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9867, &(0x7f00000097c0)="$eJzs3QW4ZXWhuP8zMEOXgIooioqCSUqIKCEg0qWggCAtHUooJSKhKAgoAtIoIYKS0t3d3d3d8X+GmVEcX0bu/3fvhcv7vs8zM2evvfY63/397LX2nLPO2XuZ+Zace2BgrIFhTTkwctffMvcim+0y98X77brPCVOOM9EUwxcPv8Fkwy9ONmj4v6MNDAyMNnw7w5eN+8Cxx402MPiN5f9s3LHHGTT+wMAMwy/OOfzfWYb9M8mDI9Z7faRGHuigf1wctNOwP2804dBPMfSD5a475/SBgYGJ3nT7oTeZ7t/uqLRl5pp/vn9a/cNtqNWQ4R+/+c8Yw/5McvfAwCR3DPDj483rDnoH7tLQzznRLveMtcE78Ln/z7XMXPMvMJL/0H1x9OHLZhm6j4+8Dxob+XF+3eqz7zV8Ct94vA0MDD3E/cu+8n+iZeaab6GBtz7OD9w3zgQnv/7GcXPcJwYGxn1yYGDcpwYGxn16YGDcZwYGxn32nXap/7fmmnvGuYfu7yMuD2cf8VieiB4X+631zL4DAwNjDltn3NeGPV+MN+WI54Sqqqp6dzfX3DPOA8//Y43q+X/b7ea6oef/qqqq/7stMNfcMw59Hh/p+X+8UT3/f/Oaa9Ye9r3/OWcZdqvX3tk7UVVVVf+l5lsAn/8nGtXz/4Q7X3Vgz/9VVVX/d1ti4Tee/8cb6fl/0lE9/6+94C0XDl9vxP8bXn3TJt/4+bHhy19+0/LR37T8pTctH/Km7bx5/THetPyFNy0fa2Bg3AeGL3/ln4vHfWLobf59O+M+98+fx5ls8JuWP/+m5WO8afkLw8c0dPmYb1r+6pvWH+ufy8cb+teUwz/vi6OY6qqqqndNS8w43zwDb/o5++GLR/xgP/5c6FFHbXfrOzXeqqqqqqqqqvqv99qjJ532z9/5/ujAm3539R+/wzr8+wKDjj7jiivesYG+Oxr0798P2fqdHtP/a0Odxzp8yoGBdZd+p4dS70D/Z35Xvf5Hyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3F+f9//P7/wB2f3Xn4qrNNfsudS/7zlpMNrDn8o+tvmXuRNd+Bsb8DvVfP/w+sOWhgYLjvREMtF5lriaWmGRgYWPLOWyafeeAf18069LrZJx79jV/mHBiY5o2/h0z2Flse/i4Lb7y5w6T/2MbRb2x/gdcPGH3QSIN4U3Ocftchayzz/Ewj/zv1W9+Pf7y/xLLPHTDViN9lGW2klcZ6ixuP2P6I+zKy8/CxTzN07NNuvM7602602eZfWHOdlVZfdfVV151hhulnmnHmmWb40mzTrrbm2qtON+zvt5izYW9dMfrbmbPxRp6zR+d685yNfN/ed/whOGf//q4e/7KJN7Z45hz3XTRizga/zTkb8flGH/WcTbnm8E802cCQgRXfmJpBAwOTDR4ysOnQC9OPOTAw2ZDh6042dN2vTDzawMAu/7yjg4a/2OiwdQZtPXSdd9n7lsw2fEa2GLHeyK+zPvJA/9P7lhwz3u63jPS+Jf9T/f96/v83r1kH/WOiRrwBwvB1hnm9w+8z8W/jnXLwG09ybzXeUbwuzhvR42udNR5c+r/rdXFovOONYryjeB2/txzvNNM/vvewTf23jXekY91Cw658O8e6gVEf60an26966RQjH+sWfOsh/st+PGKOxhxppbc61u2y4JlbDd3+wKiPdQutOfzFA/55rBttYGCy0Ucc64Ye+MYYMrDL0AszDL0w5pCBQ4demPGNC2MPnDH0whdXXm/tVQa98TIDw7c73dDtzjnxoGE70LWHrDHm7q+/Pnj4WJ4b91/HOvzxMeWbn8/nmnj4ZA6/7YjtDl11xHZf2H7YdWMM3+7z/4XtjrgtjXeyU4ddN+bw7b4w0naHjGK7I277b/vDNIP+5QdV4Xjzjr6vEe2/Y41ivKN4HW58vL3hPtUK9/03vA73oLca7+BRj/et3jfkLcf70EUP7//f9brh9Di7Y79hj5Wxhj/OXv0vPH5H3Hbk49iwFwIZdtgf6+0cx6b8t+PYNqOPNtJkv6m3+n/uKrD+8D3iH1tb5eDn1xwx90NG2u5/+n/um+7LIDiOTTTS13ODttp/YBDN+QNrP73Ja7uNes6HDPzr1xYj5nzEbUc152O+nTn/yKjnfOT/J7/VnE/zyWHXDxlp/G+e88X3nPPaEXM+xkjb/U9zPuaonzv+fc4HBobQnO8y+bB5G9Xx9K3mfMRtR8z50M8z+8SDB+YdGBiYavicj/F25nyy/57H+Tiw/rCPV/3HoidmXuzzI+Z85Dn+T3M+xn9xzre84x+P86neuO4Tow2MMcbApittvPGG0w/7e8TFGYb9zceiJ1YZNs+jei59K6MRtx3VfjH47RhN9LaMBv0no8kHv5XRP3et0Q9Z4sn/v8eiwf9VozP4WHTi/MPmbVT/L3qrOR9xW3oenPRNtx/569BRvH4W3qc35mfBHUZ8vfdueP2sEV/v/p98/awR35Ncc+SDfL3d+v6/u/zd5e8uf3f5i3uL8/9Tjjj///p4B31g+BedQy6d9YY53+nx/i838unm9/T5/+G+/3L+f84bZr106JdWw68b5fnZYeu8K8/PzjLsn0keHLHeyOcHRx7ofzo/u98eG1/6v3R+9v9XI/bVt/F1ccd/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7i3OP8/3YifA7h3qUUWHX4idMgW0x+5xTs93ne49/T5/+G+/3L+f4sjp99itIF/XDfK8//D1nGc/79r4a2Wfzef/x+xr3b+v/5D+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uLc4/z/niJ8DOGKOeT814ucBrt7xgL3f6fG+w71Xz//3/v/eOv67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ0//z8w0tskLtbjAoPz//+3ewv/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4v+t/DGL/7fzxyz+y+SPWfyXzR+z+H8nf8zi/938MYv/cvljFv/l88cs/ivkj1n8v5c/ZvFfMX/M4r9S/pjF//v5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/D/LHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/j/MH/M4v+j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/zh/zOL/k/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/2n+mMV/2/wxi//P8scs/tvlj1n8f54/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv9f5I9Z/H+ZP2bx3zl/zOL/q/wxi/+v88cs/rvkj1n8d80fs/j/Jn/M4r9b/pjFf/f8MYv/HvljFv/f5o9Z/H+XP2bx3zN/zOL/+/wxi/9e+WMW/73zxyz+++SPWfz/kD9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bx/2P+mMX/T/ljFv9D88cs/oflj1n8D88fs/gfkT9m8f9z/pjF/8j8MYv/X/LHLP5H5Y9Z/I/OH7P4/zV/zOL/t/wxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/9/wxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f0ziP2ggf8ziPyh/zOI/Wv6YxX/0/DGL/+D8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/N+XP2bxnzh/zOI/Sf6YxX/S/DGL//vzxyz+H8gfs/h/MH/M4j9Z/pjF/0P5Yxb/yfPHLP4fzh+z+H9k1P6vj/4/PrB3Zxb/Kdr/MYv/R/PHLP4fyx+z+E+ZP2bx/3j+mMX/E/ljFv9P5o9Z/KfKH7P4fyp/zOL/6fwxi//U+WMW/2nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/h/KX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/l/OH7P4z54/ZvH/Sv6YxX+O/DGL/1fzxyz+X8sfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi//X88cs/vPmj1n858sfs/jPnz9m8f9G/pjFf4H8MYv/N/PHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8f9W/pjF/9v5Yxb/ZfLHLP7L5o9Z/L+TP2bx/27+mMV/ufwxi//y+WMW/xXyxyz+38sfs/ivmD9m8V8pf8zi//38MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/B/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/mD9m8f9R/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8f5w/ZvH/Sf6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4/zR/zOK/bf6Yxf9n+WMW/+3yxyz+P88fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/8v8scs/r/MH7P475w/Nuj6OQcGBt77/r/KH7Ps/7/OH7P475I/ZvHfNX/M4v+b/DGL/275Yxb/3fPHLP575I9Z/H+bP2bx/13+mMV/z/wxi//v88cs/nvlj1n8984fs/jvkz9m8f9D/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/j/ljFv8/5Y9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8/5Yxb/I/PHLP5/yR+z+B+VP2bxPzp/zOL/1/wxi//f8scs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi//f88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/m9umxEfWPwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+T+L/xYf7/nsV/UP6YxX+0/DGL/+j5Yxb/wfljFv8h+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4vy9/zOI/cf6YxX+S/DGL/6T5Yxb/9+ePWfw/kD9m8f9g/pjFf7L8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/h/LH7P4T5k/ZvH/eP6Yxf8T+WMW/0/mj1n8p8ofs/h/Kn/M4v/p/DGL/9T5Yxb/afLHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+H8xf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+H8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+X84fs/jPnj9m8f9K/pjFf478MYv/V/PHLP5fyx+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/9fzxyz+8+aPWfznyx+z+M+fP2bx/0b+mMV/gfwxi/8388cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMS/3qLJP6jLdn+j1n8l8ofs/gvnT9m8f9W/pjF/9v5Yxb/ZfLHLP7L5o9Z/L+TP2bx/27+mMV/ufwxi//y+WMW/xXyxyz+38sfs/ivmD9m8V8pf8zi//38MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/B/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/mD9m8f9R/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8f5w/ZvH/Sf6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4/zR/zOK/bf6Yxf9n+WMW/+3yxyz+P88fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/8v8scs/r/MH7P475w/ZvH/Vf6Yxf/X+WMW/13yxyz+u+aPWfx/kz9m8d8tf8ziv3v+mMV/j/wxi/9v88cs/r/LH7P475k/ZvH/ff6YxX+v/DGL/975Yxb/ffLHLP5/yB+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4/zF/zOL/p/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+P85f8zif2T+mMX/L/ljFv+j8scs/kfnj1n8/5o/ZvH/W/6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvH/e/6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPveE/aOA97/9a/phl/389f0ziP/pA/pjFf1D+mMV/tPwxi//o+WMW/8H5Yxb/IfljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+L8vf8ziP3H+mMV/kvwxi/+k+WMW//fnj1n8P5A/ZvH/YP6YxX+y/DGL/4fyxyz+k+ePWfw/nD9m8f9I/pjFf4r8MYv/R/PHLP4fyx+z+E+ZP2bx/3j+mMX/E/ljFv9P5o9Z/KfKH7P4fyp/zOL/6fwxi//U+WMW/2nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/h/KX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/l/OH7P4z54/ZvH/Sv6YxX+O/DGL/1fzxyz+X8sfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi//X88cs/vPmj1n858sfs/jPnz9m8f9G/pjFf4H8MYv/N/PHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8f9W/pjF/9v5Yxb/ZfLHLP7L5o+N7H/Y197pEf0/9hb+38kfs+z/380fs/gvlz9m8V8+f8ziv0L+mMX/e/ljFv8V88cs/ivlj1n8v58/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/j/IH/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/8P88cs/j/KH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/PHLP4/yR+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/n+aPWfy3zR+z+P8sf8ziv13+mMX/5/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9F/pjF/5f5Yxb/nfPHLP6/yh+z+P86f8ziv0v+mMV/1/wxi/9v8scs/rvlj1n8d88fs/jvkT9m8f9t/pjF/3f5Yxb/PfPHLP6/zx+z+O+VP2bx3zt/zOK/T/6Yxf8P+WMW/33zxyz+++WPWfz3zx+z+B+QP2bxP/Df/M8f/L87sHdnI/wHBr23/Q9q/8cs+//B+WMW/0Pyxyz+f8wfs/j/KX/M4n9o/pjF/7D8MYv/4Sr/1yd8u2ta/I9Q+b/9LP5/zh+z+B+ZP2bx/0v+mMX/qPwxi//R+WMW/7/mj1n8/5Y/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8/54/ZvE/KX/M4n/yW/rP9b8zrndpFv9T2v8xi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj0n8Bw/kj1n8B+WPWfxHyx+z+I+eP2bxH5w/ZvEfkj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL//vyxyz+E+ePWfwnyR+z+E+aP2bxf3/+mMX/A/ljFv8P5o9Z/CfLH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8p8gfs/h/NH/M4v+x/DGL/5T5Yxb/j+ePWfw/kT9m8f9k/pjFf6r8MYv/p/LHLP6fzh+z+E+dP2bxnyZ/zOL/mfwxi/9n39J/jP+dcb1Ls/h/rv0fe2/7jzNi6eDP54+9t/3/0eAv5I9Z/L+YP2bxnzZ/zOI/Xf7Ye9l/yD+XDp4+f+y97P/m/X+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/5fzxyz+s+ePWfy/kj9m8Z8jf8zi/9X8MYv/1/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v/1/DGL/7z5Yxb/+fLHLP7z549Z/L+RP2bxXyB/zOL/zfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+VP2bx/3b+mMV/mfwxi/+y+WMW/+/kj1n8v5s/ZvFfLn/M4r98/pjFf4X8MYv/9/LHLP4r5o9Z/FfKH7P4fz9/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/Qf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv8f5o9Z/H+UP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+ePWfx/kj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+P80fs/hvmz9m8f9Z/pjFf7v8MYv/z/PHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+L/DGL/y/zxyz+O+ePWfx/lT9m8f91/pjFf5f8MYv/rvljFv/f5I9Z/HfLH7P4754/ZvHfI3/M4v/b/DGL/+/yxyz+e+aPWfx/nz9m8d8rf8ziv3f+mMV/n/wxi/8f8scs/vvmj1n898sfs/jvnz9m8T9A6j/mf7je4n+g1P8/ZfE/KH/M4n9w/pjF/5D8MYv/H/PHLP5/yh+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5/zxyz+R+aPWfz/kj9m8T8qf8zif3T+mMX/r/ljFv+/5Y9Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+/549Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5XDr2vO7xTg3r3ZvG/qv0fs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljEv8hA/ljFv9B+WMW/9Hyxyz+o+ePWfwH549Z/Ifkj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOL/vvwxi//E+WMW/0nyxyz+k+aPWfzfnz9m8f9A/pjF/4P5Yxb/yfLHLP4fyh+z+E+eP2bx/3D+mMX/I/ljFv8p8scs/h/NH7P4fyx/zOI/Zf6Yxf/j+WMW/0/kj1n8P5k/ZvGfKn/M4v+p/DGL/6fzxyz+U+ePWfynyR+z+H/mzf6LvgPjepdm8f9s+z9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z82f+wN/zHf+/7T5Y9Z9v/p88cs/jPkj1n8Z8wfs/jPlD9m8f9S/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8v5w/ZvGfPX/M4v+V/DGL/xz5Yxb/r+aPWfy/lj9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/6/nj1n8580fs/jPlz9m8Z8/f8zi/438MYv/AvljFv9v5o9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/638MYv/t/PHLP7L5I9Z/JfNH7P4fyd/zOL/3fwxi/9y+WMW/+Xzxyz+K+SPWfy/lz9m8V8xf8ziv1L+mMX/+/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/8P8scs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+P8wf8zi/6P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/OH/M4v+T/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/af6YxX/b/DGL/8/yxyz+2+WPWfx/nj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/1/kj1n8f5k/ZvHfOX/M4v+r/DGL/6/zxyz+u+SPWfx3zR+z+P8mf8ziv1v+mMV/9/wxi/8e+WMW/9/mj1n8f5c/ZvHfM3/M4v/7/DGL/175Yxb/vfPHLP775I9Z/P+QP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvH/Y/6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bx/3P+mMX/yPwxi/9f8scs/kflj1n8j84fs/j/NX/M4v+3/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4v/3/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/hwd6AFAW/0fixyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj8m8R9jIH/M4j8of8ziP1r+mMV/9Pwxi//g/DGL/5D8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfzflz9m8Z84f8ziP0n+mMV/0vwxi//788cs/h/IH7P4fzB/zOI/Wf6Yxf9D+WMW/8nzxyz+H84fs/h/JH/M4j9F/pjF/6P5Yxb/j+WPWfynzB+z+H88f8zi/4n8MYv/J/PHLP5T5Y9Z/D+VP2bx/3T+mMV/6vwxi/80+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8v5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv8v549Z/GfPH7P4fyV/zOI/R/6Yxf+r+WMW/6/lj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/6/ljFv9588cs/vPlj1n8588fs/h/I3/M4r9A/pjF/5v5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/h/K3/M4v/t/DGL/zL5Yxb/ZfPHLP7fyR+z+H83f8ziv1z+mMV/+fwxi/8K+WMW/+/lj1n8V8wfs/ivlD9m8f9+/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/4P8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+P8wfs/j/KH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/OH7P4/yR/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/H+aP2bx3zZ/zOL/s/wxi/92+WMW/5/nj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/F/ljFv9f5o9Z/HfOH7P4/yp/zOL/6/wxi/8u+WMW/13zxyz+v8kfs/jvlj9m8d89f8ziv0f+mMX/t/ljFv/f5Y9Z/PfMH7P4/z5/zOK/V/6YxX/v/DGL/z75Yxb/P+SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/P+YP2bx/1P+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfz/nD9m8T8yf8zi/5f8MYv/UfljFv+j88cs/n/NH7P4/y1/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4/z1/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+T+I85kD9m8R+UP2bxHy1/zOI/ev6YxX9w/pjFf0j+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP7vyx+z+E+cP2bxnyR/zOI/af6Yxf/9+WMW/w/kj1n8P5g/ZvGfLH/M4v+h/DGL/+T5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/x/LHLP5T5o9Z/D+eP2bx/0T+mMX/k/ljFv+p8scs/p/KH7P4fzp/zOI/df6YxX+a/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+X8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/+X88cs/rPnj1n8v5I/ZvGfI3/M4v/V/DGL/9fyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOL/9fwxi/+8+WMW//nyxyz+8+ePWfy/kT9m8V8gf8zi/838MYv/gvljFv+F8scs/gvnj1n8F8l/WFP/60WL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjF/1v5Yxb/b+ePWfyXyR+z+C+bP2bx/07+mMX/u/ljFv/l8scs/svnj1n8V8gfs/h/L3/M4r9i/pjFf6X8MYv/9/PHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv8f5I9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/hvnD9m8f9h/pjF/0f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvH/cf6Yxf8n+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOL/0/wxi/+2+WMW/5/lj1n8t8sfs/j/PH/M4r99/pjFf4f8MYv/jvljFv+d8scs/r/IH7P4/zJ/zOK/c/6Yxf9X+WMW/1/nj1n8d8kfs/jvmj9m8f9N/pjFf7f8MYv/7vljFv898scs/r/NH7P4/y5/zOK/Z/6Yxf/3+WMW/73yxyz+e+ePWfz3yR+z+P8hf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOL/x/wxi/+f8scs/ofmj1n8D8sfs/gfnj9m8T8if8zi/+f8MYv/kfljFv+/5I9Z/I/KH7P4H50/ZvH/a/6Yxf9v+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf/v+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMR/rIH8MYv/oPwxi/9o+WMW/9Hzxyz+g/PHLP5D8scs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxf1/+mMV/YrH/61u99XUW/0nE/qPK4j9p/pjF//35Yxb/D+SPWfw/mD9m8Z8sf8zi/6H8MYv/5PljFv8P549Z/D+SP2bxnyJ/zOL/0fwxi//H8scs/lPmj1n8P54/ZvH/RP6Yxf+T+WMW/6nyxyz+n8ofs/h/On/M4j91/pjFf5r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/5fzxyz+s+ePWfy/kj9m8Z8jf8zi/9X8MYv/1/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v/1/DGL/7z5Yxb/+fLHLP7z549Z/L+RP2bxXyB/zOL/zfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+VP2bx/3b+mMV/mfwxi/+y+WMW/+/kj1n8v5s/ZvFfLn/M4r98/pjFf4X8MYv/9/LHLP4r5o9Z/FfKH7P4fz9/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/Qf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv8f5o9Z/H+UP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+ePWfx/kj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+P80fs/hvmz9m8f9Z/pjFf7v8MYv/z/PHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+L/DGL/y/zxyz+O+ePWfx/lT9m8f91/pjFf5f8MYv/rvljFv/f5I9Z/HfLH7P4754/ZvHfI3/M4v/b/DGL/+/yxyz+e+aPWfx/nz9m8d8rf8ziv3f+mMV/n/wxi/8f8scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+f8wfs/j/KX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/n/OH7P4H5k/ZvH/S/6Yxf+o/DGL/9H5Yxb/v+aPWfz/lj9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfz/nj9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj0n8xx7IH7P4D8ofs/iPlj9m8R89f8ziPzh/zOI/JH/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW//flj1n8J84fs/hPkj9m8Z80f8zi//78MYv/B/LHLP4fzB+z+E+WP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4T5E/ZvH/aP6Yxf9j+WMW/ynzxyz+H88fs/h/In/M4v/J/DGL/1T5Yxb/T+WPWfw/nT9m8Z86f8ziP03+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8v5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/8v5Yxb/2fPHLP5fyR+z+M+RP2bx/2r+mMX/a/ljFv8588cs/nPlj1n8584fs/jPkz9m8f96/pjFf978MYv/fPljFv/588cs/t/IH7P4L5A/ZvH/Zv6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/t/KH7P4fzt/zOK/TP6YxX/Z/DGL/3fyxyz+380fs/gvlz9m8V8+f8ziv0L+mMX/e/ljFv8V88cs/ivlj1n8v58/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/j/IH/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n81//P/kP+R8f1Ls3iv0H7P2bx3zB/zOK/Uf6YxX/j/DGL/w/zxyz+P8ofs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P88cs/j/JH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv+f5o9Z/LfNH7P4/yx/zOK/Xf6Yxf/n+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx/0X+mMX/l/ljFv+d88cs/r/KH7P4/zp/zOK/S/6YxX/X/DGL/2/yxyz+u+WPWfx3zx+z+O+RP2bx/23+mMX/d/ljFv8988cs/r/PH7P475U/ZvHfO3/M4r9P/pjF/w/5Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv8/5o9Z/P+UP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/P+ePWfyPzB+z+P8lf8zif1T+mMX/6Pwxi/9f88cs/n/LH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/n/PH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHJP7jDOSPWfwH5Y9Z/EfLH7P4j54/ZvEfnD9m8R+SP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/+/LHLP4T549Z/CfJH7P4T5o/ZvF/f/6Yxf8D+WMW/w/mj1n8J8sfs/h/KH/M4j95/pjF/8P5Yxb/j+SPWfynyB+z+H80f8zi/7H8MYv/lPljFv+P549Z/D+RP2bx/2T+mMV/qvwxi/+n8scs/p/OH7P4T50/ZvGfJn/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/5fyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOL/5fwxi//s+WMW/6/kj1n858gfs/h/NX/M4v+1/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4fz1/zOI/b/6YxX++/DGL//z5Yxb/b+SPWfwXyB+z+H8zf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/b+WPWfy/nT9m8V8mf8ziv2z+mMX/O/ljFv/v5o9Z/JfLH7P4L58/ZvFfIX/M4v+9/DGL/4r5Yxb/lfLHLP7fzx+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/H+QP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjF/4f5Yxb/H+WPWfw3yR+z+G8q8x/zba5n8d9M5v92s/hvnj9m8f9x/pjF/yf5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4v/T/DGL/7b5Yxb/n+WPWfy3yx+z+P88f8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v8gfs/j/Mn/M4r9z/pjF/1f5Yxb/X+ePWfx3yR+z+O+aP2bx/03+mMV/t/wxi//u+WMW/z3yxyz+v80fs/j/Ln/M4r9n/pjF//f5Yxb/vfLHLP57549Z/PfJH7P4/yF/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4v/H/DGL/5/yxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOL/5/wxi/+R+WMW/7/kj1n8j8ofs/gfnT9m8f9r/pjF/2/5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/+/5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6YxH/cgfwxi/+g/DGL/2j5Yxb/0fPHLP6D88cs/kPyxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvF/X/6YxX/i/DGL/yT5Yxb/SfPHLP7vzx+z+H8gf8zi/8H8MYv/ZPljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/8U+WMW/4/mj1n8P5Y/ZvGfMn/M4v/x/DGL/yfyxyz+n8wfs/hPlT9m8f9U/pjF/9P5Yxb/qfPHLP7T5I9Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/2vwxi/90o/K/6X9hXO/SLP7Tt/9jFv8Z8scs/jPmj1n8Z8ofs/h/KX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/l/OH7P4z54/ZvH/Sv6YxX+O/DGL/1fzxyz+X8sfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi//X88cs/vPmj1n858sfs/jPnz9m8f9G/pjFf4H8MYv/N/PHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8f9W/pjF/9v5Yxb/ZfLHLP7L5o9Z/L+TP2bx/27+mMV/ufwxi//y+WMW/xXyxyz+38sfs/ivmD9m8V8pf8zi//38MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/B/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/mD9m8f9R/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8f5w/ZvH/Sf6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4/zR/zOK/bf6Yxf9n+WMW/+3yxyz+P88fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/8v8scs/r/MH7P475w/ZvH/Vf6Yxf/X+WMW/13yxyz+u+aPWfx/kz9m8d8tf8ziv3v+mMV/j/wxi/9v88cs/r/LH7P475k/ZvH/ff6YxX+v/DGL/975Yxb/ffLHLP5/yB+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4/zF/zOL/p/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+P85f8zif2T+mMX/L/ljFv+j8scs/kfnj1n8/5o/ZvH/W/6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvH/e/6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+ePybxH28gf8ziPyh/zOI/Wv6YxX/0/DGL/+D8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/N+XP2bxnzh/zOI/Sf6YxX/S/DGL//vzxyz+H3hL/9def/31/52hvRuz+H+w/R+z+E+WP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4T5E/ZvH/aP6Yxf9j+WMW/ynzxyz+H88fs/h/In/M4v/J/DGL/1T5Yxb/T+WPWfw/nT9m8Z86f8ziP03+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8v5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/8v5Yxb/2fPHLP5fyR+z+M+RP2bx/2r+mMX/a/ljFv8588cs/nPlj1n8584fs/jPkz9m8f96/pjFf978MYv/fPljFv/588cs/t/IH7P4L5A/ZvH/Zv6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/t/KH7P4fzt/zOK/TP6YxX/Z/DGL/3fyxyz+380fs/gvlz9m8V8+f8ziv0L+mMX/e/ljFv8V88cs/ivlj1n8v58/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/j/IH/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/8P88cs/j/KH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/PHLP4/yR+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/n+aPWfy3zR+z+P8sf8ziv13+mMX/5/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9F/pjF/5f5Yxb/nfPHLP6/yh+z+P86f8ziv0v+mMV/1/wxi/9v8scs/rvlj1n8d88fs/jvkT9m8f9t/pjF/3f5Yxb/PfPHLP6/zx+z+O+VP2bx3zt/zOK/T/6Yxf8P+WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/P+aPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/z/nj1n8j8wfs/j/JX/M4n9U/pjF/+j8MYv/X/PHLP5/yx+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP5/zx+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vyHNmjkObD435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX9M4j/+QP6YxX9Q/pjFf7T8MYv/6PljFv/B+WMW/yH5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/i/L3/M4j9x/pjFf5L8MYv/pPljFv/3549Z/D+QP2bx/2D+mMV/svwxi/+H8scs/pPnj1n8P5w/ZvH/SP6YxX+K/DGL/0fzxyz+H8sfs/hPmT9m8f94/pjF/xP5Yxb/T+aPWfynyh+z+H8qf8zi/+n8MYv/1PljFv9p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4fyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP5fzh+z+M+eP2bx/0r+mMV/jvwxi/9X88cs/l/LH7P4z5k/ZvGfK3/sPek/6N+wx587f+w96T/8wzfv//Pkj1n8v54/ZvGfN3/M4j9f/pjFf/78MYv/N/LHLP4L5I9Z/L+ZP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/t/LHLP7fzh+z+C+TP2bxXzZ/zOL/nfwxi/9388cs/svlj1n8l88fs/ivkD9m8f9e/pjFf8X8MYv/SvljFv/v549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf3Wl/42j/ac1LP5rKP3/cxb/NfPHLP4/yB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v/D/DGL/4/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/4/wxi/9P8scs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMX/p/ljFv9t88cs/j/LH7P4b5c/ZvH/ef6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/H+RP2bx/2X+mMV/5/wxi/+v8scs/r/OH7P475I/ZvHfNX/M4v+b/DGL/275Yxb/3fPHLP575I9Z/H+bP2bx/13+mMV/z/wxi//v88cs/nvlj1n8984fs/jvkz9m8f9D/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/j/ljFv8/5Y9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8/5Yxb/I/PHLP5/yR+z+B+VP2bxPzp/zOL/1/wxi//f8scs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi//f88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYn/BAP5Yxb/QfljFv/R8scs/qPnj1n8B+ePWfyH5I9Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8zi/778MYv/xPljFv9J8scs/pPmj1n8358/ZvH/QP6Yxf+D+WMW/8nyxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/KfLHLP4fzR+z+H8sf8ziP2X+mMX/4/ljFv9P5I9Z/D+ZP2bxnyp/zOL/qfwxi/+n88cs/lPnj1n8p8kfs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvGfKX/M4v+l/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6Yxf8r+WMW/znyxyz+X80fs/h/LX/M4j9n/pjFf678MYv/3PljFv958scs/l/PH7P4z5s/ZvGfL3/M4j9//tgI/xGX36v+38gfs+z/C+SPWfy/mT9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/7fyxyz+384fs/gvkz9m8V82f8zi/538MYv/d/PHLP7L5Y9Z/JfPH7P4r5A/ZvH/Xv6YxX/F/DGL/0r5Yxb/7+ePWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v/D/DGL/4/yxyz+m+SPWfw3zR+z+G+m8h/zba9p8d9c5f/2s/j/OH/M4v+T/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/af6YxX/b/DGL/8/yxyz+2+WPWfx/nj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/1/kj1n8f5k/ZvHfOX/M4v+r/DGL/6/zxyz+u+SPWfx3zR+z+P8mf8ziv1v+mMV/9/wxi/8e+WMW/9/mj1n8f5c/ZvHfM3/M4v/7/DGL/175Yxb/vfPHLP775I9Z/P+QP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvH/Y/6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bx/3P+mMX/yPwxi/9f8scs/kflj1n8j84fs/j/NX/M4v+3/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4v/3/DGL/0n5Yxb/k8X+Q0ZxncX/FLH/qLL4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6YxH/Cgfwxi/+g/DGL/2j5Yxb/0fPHLP6D88cs/kPyxyz+Y+SPWfzHzB+z+I+VP/b/sUcPfWAgBhBH0zZFnNr22rZt27Zt22bWtm3btm3jvr/JF9h57zhz/Lf0H6R/1NJ/sP5RS/8h+kct/YfqH7X0H6Z/1NJ/uP5RS/8R+kct/UfqH7X0/7n+UUv/X+gftfT/pf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/3+kftfT/vf5RS/8/6B+19P+j/lFL/z/pH7X0/7P+UUv/v+gftfT/q/5RS/+/6R+19P+7/lFL/3/oH7X0/6f+UUv/f+kftfT/t/5RS///6B+19P+v/lFL///pH7X0/7/+UUv/MfSPWvqPqX/U0n8s/aOW/mPrH7X0H0f/qKX/uPpHLf3H0z9q6T++/lFL/wn0j1r6T6h/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1nq+4/cLRPS//Zq/uPXkv/OfSPWvrPqX/U0n8u/aOW/nPrH7X0n0f/qKX/vPpHLf3n0z9q6T+//lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TSfyn9o5b+S+sftfRfRv+opf+y+kct/ZfTP2rpv7z+UUv/FfSPWvqvqH/U0n8l/aOW/ivrH7X0X0X/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/676Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf+++kct/ffTP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/gfrH7X0P0T/qKX/ofpHLf0P0z9q6X+4/lFL/yP0j1r6H6l/1NL/KP2jlv5H6x+19D9G/6il/7H6Ry39j9M/aul/vP5RS/9R+kct/U/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/HP2jlv7n6h+19D9P/6il//n6Ry39L9A/aul/of5RS/+L9I9a+l+sf9TS/xL9o5b+l+oftfS/TP+opf/l+kct/a/QP2rpf6X+UUv/q/SPWvpfrX/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv636h+19L9N/6il/+36Ry3979A/aul/p/5RS/+79I9a+t+tf9TS/x79o5b+9+oftfS/T/+opf/9+kct/R/QP2rp/6D+UUv/h/SPWvo/rH/U0v8R/aOW/o/qH7X0f0z/qKX/4/pHLf2f0D9q6f+k/lFL/6f0j1r6P61/1NL/Gf2jlv7P6h+19H9O/6il//P6Ry39X9A/aun/ov5RS/+X9I9a+r+sf9TS/xX9o5b+r+oftfR/Tf+opf/r+kct/d/Q/7sGDijq/6b+UUv/t/SPWvq/rX/U0v8d/aOW/u/qH7X0f0//qKX/+/pHLf0/0D9q6f+h/lFL/4/0j1r6f6x/1NL/E/2jlv6f6h+19P9M/6il/+f6Ry39v9A/aun/pf5RS/+v9I9a+n+tf9TS/xv9o5L+IwfoH7X0/4H+UUv/H+oftfT/kf5RS/+B+kct/X+sf9TS/yf6Ry39f6p/1NL/Z/pHLf0H6T9gVNha+g/WP2rpP0T/qKX/UP2jlv7D9I9a+g/XP2rpP0L/6HvXHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG/Zu9vYvMrCj+Ona7unP/t3cw6vIYPBppu4srUrk8HmQ30smKpjMWAC2cLKqBTmHoIbqNWgxGAMk5Egom5TN4HEmPFimICwkqjEqWiciIY4BHURU8NERjQuNXfbu7T32ma96nXtxT6fF+19Tvmdbku+O6dszQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhp87Zbbljb0dG2yQsvvPBi4MWp/p0JSO216E/1jwQAAAAAAAAAAAAAABhJjm8nOtU/RwAAAAAAON20tL6ru7pqyKnqwQdzft7W+77p1Suv3/P84yvL7/s/fPkwl5ww+KCnp6fnpeaumf2Hk4qiKH226f3HkyvHpet3dl2+ve8oFL99trl12/bmgzu/8vWH506dPqe292xtsea69o62JROKIlTXFltLBw1VRREm1hbbSweNpYNJtcX9pYOlvQdTigOlgwuv3dCxrnTihE8Np52W1s8W1UOKLYb8bjC4/86uTbvK70e5ZPlqNUV//3XNP9xb8bGyEfovXz9UVfY/5p8gMKKx9X/7wvL7US55wv3/0fa6VcN9bOT+y9cPE/QP6Qzz/D+k0d7n/T37Z4zw/D93mEsO7H/6l5Vdpf5v+uUL9f2nak7m+b/0+fqOQnVl/xOGPP+XnuNrys//k4oi1I7zlwNOKy2tn+se7f5f2f3Q/mvOqthUDe7/6Ko91aX+D9/1wPv7T9WeVP8D1w81o9z/qz5zYOiPFRibltbdPRX3/zH0XywY5pID/c/ffeyqUv9n7Dyyb9DHxtJ/bWX/i7fc+InFm7fdUt9+49r1bevbbmpsbGhauqyp8aLli3sfCfrejvNXBU4P47v/F1MrNlVF0TawX/ThZS+V+j947j/+1n9q8hj7nzjq/f85938Y1vkTiokTi61rt2zZ1ND3tnzY2Pe27z8bpv8Tv/4fsf955f8PWP66u/QF+cD+N+/86kdK/d87adUD/acmjrH/SaP13/na5wUijPP+v65iM6T/9le/s67U/59eOX6o/9RYv/6fPGr/u9z/YTxaWiv+ws//WKn/1f86PNyfE5yEMMWf/0E6OfrfOu0X34xbh6n6h3Ry9L90c1vkX7YN/6d/SCdH/7/aUXUkbh3O0D+kk6P/r3U/uDFuHabpH9LJ0f/+2Y88FbcO/69/SCdH/8fXT78qbh3q9A/p5Oj/si/tXR23DtP1D+nk6L/qlWlPxK3DDP1DOjn6r686+1Nx6/A6/UM6Ofq/rvPhF+PWYab+IZ0c/X9+568jv08nvF7/kE6O/p/649YdceswS/+QTo7+X5jVXh+3DmfqH9LJ0f/9NzzxSNw6vEH/kE6O/p/+1gePxa1D0D+kk6P/bzx7ZE3cOszWP6STo/99C4/9IW4dztI/pJOj/39/9OoPxK3DG/UP6eToP+xf/t24dThb/5BOjv6vePKuhrh1mKN/SCdH/50rbrszbh3O0T+kk6P/puaFs+PW4Vz9Qzo5+p/x57/fHbcOc/UP6eTo/2P3vbfy3/0+SeE8/UM6Ofq/ecPqR+PW4Xz9Qzo5+l85o+eCuHWYp39IJ0f/h4/e96O4dZivf0gnR/9337nkirh1eJP+IZ0c/f/g1vO649bhzfqHdHL0/3LtHbfGrcMC/UM6Ofr/8s9qlsWtw0L9Qzo5+v/xQ9/fFbcOb9E/pJOj/xff99g5cetwgf4hnRz977541hfj1uGt+od0cvT/7mc2ro9bh0X6h3Ry9D957++Pxq1Dvf4hnRz9z1918ENx63Ch/iGdHP1vWLTmd3HrsFj/kE6O/p858PShuHVYon9IJ0f/Ox77dHPcOjToH9LJ0f/jl3X8J24dGvUP6eTo/59NP/l43Dos1T+kk6P/Mw99+wtx69Ckf0gnR/9XPzh5Ztw6XKR/SCdH/xuvmf29uHVYpn9IJ0f/l8x96NK4dXib/iGdHP2/568rbo5bh4v1D+nk6L/unnuei1uH5fqHdHL0P+/a26+JW4dL9A/p5Oj/+jn1T8atw6X6h3Ry9H/H8ZYFceuwQv+QTo7+u257fl/cOqzUP6STo//uT75cF7cOb9c/pJOj/71Trrw3bh3eoX8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7LDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAYAAABAmL91Hu0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCnAAAA//87o9CS") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 3m30.987916185s ago: executing program 4 (id=59): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x20ba, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) 3m26.319845235s ago: executing program 4 (id=72): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 3m25.154762577s ago: executing program 4 (id=78): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@errors_remount}, {@acl}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) stat(&(0x7f0000000240)='./file0/../file0/file0\x00', &(0x7f0000000800)) 3m23.250256548s ago: executing program 4 (id=84): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822f01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x55, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @rumble={0xa8, 0x5}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 3m22.24021986s ago: executing program 4 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0xa00454, &(0x7f0000005f80)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC], 0x1, 0x5552, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x4) write$cgroup_pid(r0, &(0x7f0000000500), 0x12) 3m19.494902899s ago: executing program 32 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0xa00454, &(0x7f0000005f80)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC], 0x1, 0x5552, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x4) write$cgroup_pid(r0, &(0x7f0000000500), 0x12) 2m19.930604813s ago: executing program 2 (id=224): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000200)=0x4, 0x4) 2m17.860853963s ago: executing program 2 (id=230): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x14, 0xf8, {{0x0, 0x5, 0x0, 0xfffffff7}, {0xffffff81, 0x7fffffff, 0x7, 0x8e}}}, 0x98300) 2m15.802511381s ago: executing program 2 (id=234): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)="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", 0x348}], 0x1}, 0x40000011) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x3f) 2m14.134422125s ago: executing program 2 (id=240): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x6, 0x229, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x2) 2m12.976389357s ago: executing program 2 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r0, 0x0, 0x0) 2m12.20403319s ago: executing program 2 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000006c0)='netlink_extack\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}]}, 0x34}}, 0x0) 2m9.324515985s ago: executing program 33 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000006c0)='netlink_extack\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}]}, 0x34}}, 0x0) 32.041469488s ago: executing program 6 (id=602): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x1f, 0x1c, 0x0, 0x20, 0x93a, 0x262c, 0xae31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xfa, 0x2, 0x2, 0xed, 0x7d, 0x32, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 28.696172166s ago: executing program 6 (id=615): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 27.681556748s ago: executing program 6 (id=618): r0 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 27.325289267s ago: executing program 6 (id=620): r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@keep_last_dots}, {@namecase}, {@fmask={'fmask', 0x3d, 0xc4}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@keep_last_dots}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@zero_size_dir}, {@errors_remount}]}, 0x1, 0x152c, &(0x7f0000000400)="$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") ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x430301, 0x78) 26.117419855s ago: executing program 6 (id=623): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 25.135483902s ago: executing program 6 (id=628): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(r1, r1) socket$inet(0x2, 0x2, 0x1) 23.889552671s ago: executing program 34 (id=628): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(r1, r1) socket$inet(0x2, 0x2, 0x1) 8.195364081s ago: executing program 5 (id=704): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000002400)="$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") statx(0xffffffffffffff9c, &(0x7f0000004d00)='./file0\x00', 0x0, 0xf11a02181cf31828, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) 7.394839192s ago: executing program 5 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") creat(&(0x7f0000000400)='./bus\x00', 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) 5.67570518s ago: executing program 1 (id=710): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 5.144451244s ago: executing program 5 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 4.797403982s ago: executing program 1 (id=715): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000008c0)={[{@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 4.193835769s ago: executing program 3 (id=717): mkdir(&(0x7f0000000440)='./file1\x00', 0x12) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1000000000000, 0x1, 0x2000200000a95c, 0x400000000009, 0x4000000201, 0x80000005, 0x48cd, 0xfffffffffffffffc, 0x800000e2}) 4.004060659s ago: executing program 1 (id=718): ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0xa63abe0d00000000}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.9220862s ago: executing program 0 (id=719): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 3.456007932s ago: executing program 3 (id=720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x0) 3.337934897s ago: executing program 1 (id=721): r0 = shmget$private(0x0, 0xf000, 0x1, &(0x7f0000ff1000/0xf000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 2.880202947s ago: executing program 3 (id=722): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 2.751387333s ago: executing program 0 (id=723): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x2c, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xa, [{@multicast2, 0x8}, {@multicast1, 0x8000}, {@broadcast, 0x2}]}]}}, {{0x4624, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0xfff7}}}}}}, 0x0) 2.734581567s ago: executing program 1 (id=724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x4, 0x1, 0x4}) 2.288034679s ago: executing program 3 (id=725): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.266923776s ago: executing program 0 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.973561133s ago: executing program 1 (id=727): r0 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0xe}, 0x0, 0x0}) 1.692032273s ago: executing program 5 (id=728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r0, 0x1) 1.526480957s ago: executing program 0 (id=729): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0x1}, 0x18) 1.07833871s ago: executing program 5 (id=730): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000940)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000b80)={r1, 0x1, 0x6, @remote}, 0x10) 902.193915ms ago: executing program 0 (id=731): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f00000006c0)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ecb688cc20bdbe", 0x69}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12", 0xe7}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591ff336d948", 0x59}], 0x6}, 0x20000004) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) close(r0) 788.189216ms ago: executing program 3 (id=732): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 374.58521ms ago: executing program 5 (id=733): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 180.73132ms ago: executing program 0 (id=734): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000280)={[{@utf8}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x4aa}}, {@fat=@tz_utc}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8no}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000900)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") openat$dir(0xffffffffffffff9c, 0x0, 0x208c1, 0x2) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20008004) 0s ago: executing program 3 (id=735): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) kernel console output (not intermixed with test programs): dow_origin+0x7a/0x110 [ 252.312232][ T5806] ? __pfx___cleanup_mnt+0x10/0x10 [ 252.312404][ T5806] __cleanup_mnt+0x22/0x30 [ 252.312565][ T5806] task_work_run+0x209/0x2b0 [ 252.312744][ T5806] exit_to_user_mode_loop+0x2d1/0x370 [ 252.312927][ T5806] do_syscall_64+0x1e3/0xfa0 [ 252.313121][ T5806] ? irqentry_exit+0x16/0x60 [ 252.313299][ T5806] ? clear_bhb_loop+0x40/0x90 [ 252.313474][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.313646][ T5806] RIP: 0033:0x7f4e1b1902f7 [ 252.313781][ T5806] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 252.313913][ T5806] RSP: 002b:00007ffc5129f798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 252.314072][ T5806] RAX: 0000000000000000 RBX: 00007f4e1b211d7d RCX: 00007f4e1b1902f7 [ 252.314173][ T5806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5129f850 [ 252.314268][ T5806] RBP: 00007ffc5129f850 R08: 0000000000000000 R09: 0000000000000000 [ 252.314362][ T5806] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc512a08e0 [ 252.314460][ T5806] R13: 00007f4e1b211d7d R14: 000000000003d8d2 R15: 00007ffc512a0920 [ 252.314604][ T5806] [ 252.678335][ T5806] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 253.581048][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 253.591582][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 253.667533][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 253.678353][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 253.714941][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 253.726618][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 253.932162][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 253.943228][ T6175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 253.954705][ T6175] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 254.586981][ T6180] capability: warning: `syz.4.72' uses 32-bit capabilities (legacy support in use) [ 255.772623][ T6198] loop4: detected capacity change from 0 to 512 [ 255.933417][ T6198] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 255.947572][ T6198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.135024][ T6198] EXT4-fs (loop4): 1 truncate cleaned up [ 256.143321][ T6198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.498201][ T6198] evm: overlay not supported [ 256.964300][ T5800] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 257.056372][ T5800] EXT4-fs (loop4): Remounting filesystem read-only [ 257.166710][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.386624][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 257.448094][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.460090][ T11] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 257.471126][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.569839][ T11] usb 1-1: config 0 descriptor?? [ 257.800201][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.823359][ T4329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.131817][ T4329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.217279][ T11] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 3/5 [ 258.271217][ T11] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 258.278810][ T11] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 258.412817][ T4329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.591695][ T5427] usb 1-1: USB disconnect, device number 3 [ 258.662472][ T4329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.140042][ T4329] bridge_slave_1: left allmulticast mode [ 259.146471][ T4329] bridge_slave_1: left promiscuous mode [ 259.153139][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.203836][ T4329] bridge_slave_0: left allmulticast mode [ 259.210594][ T4329] bridge_slave_0: left promiscuous mode [ 259.217688][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.945634][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.969036][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.008807][ T4329] bond0 (unregistering): Released all slaves [ 260.589208][ T4329] hsr_slave_0: left promiscuous mode [ 260.599721][ T4329] hsr_slave_1: left promiscuous mode [ 260.608549][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.623081][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.670718][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.678544][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.748904][ T4329] veth1_macvtap: left promiscuous mode [ 260.755080][ T4329] veth0_macvtap: left promiscuous mode [ 260.761440][ T4329] veth1_vlan: left promiscuous mode [ 260.767419][ T4329] veth0_vlan: left promiscuous mode [ 261.839326][ T6233] loop0: detected capacity change from 0 to 4096 [ 261.866914][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 261.905245][ T6233] EXT4-fs (loop0): Test dummy encryption mode enabled [ 262.036536][ T6233] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 262.054545][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 262.078966][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 262.103917][ T11] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 262.114917][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.127304][ T11] usb 2-1: Product: syz [ 262.133939][ T11] usb 2-1: Manufacturer: syz [ 262.141481][ T11] usb 2-1: SerialNumber: syz [ 262.178180][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 262.219244][ T6233] System zones: 0-5 [ 262.337639][ T11] usb 2-1: config 0 descriptor?? [ 262.365589][ T11] gspca_main: se401-2.14.0 probing 047d:5003 [ 262.558153][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.011143][ T11] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 263.151539][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.227948][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.285722][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.304120][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.323926][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.332473][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 263.495060][ T5858] usb 2-1: USB disconnect, device number 2 [ 263.542770][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.642032][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 263.886268][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.933698][ T11] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 263.942258][ T11] usb 3-1: can't read configurations, error -71 [ 265.412241][ T6257] loop0: detected capacity change from 0 to 40427 [ 265.504445][ T6257] F2FS-fs (loop0): invalid crc value [ 265.748238][ T5095] Bluetooth: hci1: command tx timeout [ 265.870194][ T6257] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 265.884624][ T6257] F2FS-fs (loop0): Start checkpoint disabled! [ 265.899120][ T6257] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 265.917509][ T6257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 267.033473][ T6276] QAT: failed to copy from user cfg_data. [ 267.379600][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 267.856530][ T5095] Bluetooth: hci1: command tx timeout [ 269.494837][ T6286] loop2: detected capacity change from 0 to 65536 [ 269.582455][ T6286] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 269.615591][ T6286] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 269.623352][ T6304] loop0: detected capacity change from 0 to 64 [ 269.855662][ T6304] Trying to free block not in datazone [ 269.862411][ T6304] Trying to free block not in datazone [ 269.868918][ T6304] Trying to free block not in datazone [ 269.875608][ T6304] Trying to free block not in datazone [ 269.881753][ T6304] Trying to free block not in datazone [ 269.887981][ T6304] Trying to free block not in datazone [ 269.893644][ T6304] Trying to free block not in datazone [ 269.900027][ T6304] Trying to free block not in datazone [ 269.907029][ T6304] Trying to free block not in datazone [ 269.913153][ T6304] Trying to free block not in datazone [ 269.917708][ T5095] Bluetooth: hci1: command tx timeout [ 269.920174][ T6304] Trying to free block not in datazone [ 269.930488][ T6304] Trying to free block not in datazone [ 269.939541][ T6304] Trying to free block not in datazone [ 269.945401][ T6304] Trying to free block not in datazone [ 269.953207][ T6304] Trying to free block not in datazone [ 269.959267][ T6304] Trying to free block not in datazone [ 269.965100][ T6304] Trying to free block not in datazone [ 269.971749][ T6304] Trying to free block not in datazone [ 269.977870][ T6304] Trying to free block not in datazone [ 269.983873][ T6304] Trying to free block not in datazone [ 269.991981][ T6304] Trying to free block not in datazone [ 269.999046][ T6304] Trying to free block not in datazone [ 270.004890][ T6304] Trying to free block not in datazone [ 270.011012][ T6304] Trying to free block not in datazone [ 270.017515][ T6304] Trying to free block not in datazone [ 270.023382][ T6304] Trying to free block not in datazone [ 270.029296][ T6304] Trying to free block not in datazone [ 270.035098][ T6304] Trying to free block not in datazone [ 270.044221][ T6304] Trying to free block not in datazone [ 270.051137][ T6304] Trying to free block not in datazone [ 270.058170][ T6304] Trying to free block not in datazone [ 270.064067][ T6304] Trying to free block not in datazone [ 270.070678][ T6304] Trying to free block not in datazone [ 270.077150][ T6304] Trying to free block not in datazone [ 270.083706][ T6304] Trying to free block not in datazone [ 270.090064][ T6304] Trying to free block not in datazone [ 270.097559][ T6304] Trying to free block not in datazone [ 270.103347][ T6304] Trying to free block not in datazone [ 270.109628][ T6304] Trying to free block not in datazone [ 270.115365][ T6304] Trying to free block not in datazone [ 270.121353][ T6304] Trying to free block not in datazone [ 270.127484][ T6304] Trying to free block not in datazone [ 270.133910][ T6304] Trying to free block not in datazone [ 270.143169][ T6304] Trying to free block not in datazone [ 270.150091][ T6304] Trying to free block not in datazone [ 270.156458][ T6304] Trying to free block not in datazone [ 270.162105][ T6304] Trying to free block not in datazone [ 270.168022][ T6304] Trying to free block not in datazone [ 270.173759][ T6304] Trying to free block not in datazone [ 270.179699][ T6304] Trying to free block not in datazone [ 270.185549][ T6304] Trying to free block not in datazone [ 270.191389][ T6304] Trying to free block not in datazone [ 270.197992][ T6304] Trying to free block not in datazone [ 270.203990][ T6304] Trying to free block not in datazone [ 270.210233][ T6304] Trying to free block not in datazone [ 270.216621][ T6304] Trying to free block not in datazone [ 270.222275][ T6304] Trying to free block not in datazone [ 270.228580][ T6304] Trying to free block not in datazone [ 270.235458][ T6304] Trying to free block not in datazone [ 270.244739][ T6304] Trying to free block not in datazone [ 270.252118][ T6304] Trying to free block not in datazone [ 270.258401][ T6304] Trying to free block not in datazone [ 270.264226][ T6304] Trying to free block not in datazone [ 270.270608][ T6304] Trying to free block not in datazone [ 270.277020][ T6304] Trying to free block not in datazone [ 270.282939][ T6304] Trying to free block not in datazone [ 270.290208][ T6304] Trying to free block not in datazone [ 270.296236][ T6304] Trying to free block not in datazone [ 270.301876][ T6304] Trying to free block not in datazone [ 270.308040][ T6304] Trying to free block not in datazone [ 270.313679][ T6304] Trying to free block not in datazone [ 270.319743][ T6304] Trying to free block not in datazone [ 270.325579][ T6304] Trying to free block not in datazone [ 270.331512][ T6304] Trying to free block not in datazone [ 270.338286][ T6304] Trying to free block not in datazone [ 270.347462][ T6304] Trying to free block not in datazone [ 270.353551][ T6304] Trying to free block not in datazone [ 270.361169][ T6304] Trying to free block not in datazone [ 270.367726][ T6304] Trying to free block not in datazone [ 270.373378][ T6304] Trying to free block not in datazone [ 270.379575][ T6304] Trying to free block not in datazone [ 270.386437][ T6304] Trying to free block not in datazone [ 270.392245][ T6304] Trying to free block not in datazone [ 270.398118][ T6304] Trying to free block not in datazone [ 270.404803][ T6304] Trying to free block not in datazone [ 270.410908][ T6304] Trying to free block not in datazone [ 270.417017][ T6304] Trying to free block not in datazone [ 270.422744][ T6304] Trying to free block not in datazone [ 270.429766][ T6304] Trying to free block not in datazone [ 270.435854][ T6304] Trying to free block not in datazone [ 270.441722][ T6304] Trying to free block not in datazone [ 270.451272][ T6304] Trying to free block not in datazone [ 270.458429][ T6304] Trying to free block not in datazone [ 270.464186][ T6304] Trying to free block not in datazone [ 270.470222][ T6304] Trying to free block not in datazone [ 270.476562][ T6304] Trying to free block not in datazone [ 270.482357][ T6304] Trying to free block not in datazone [ 270.488171][ T6304] Trying to free block not in datazone [ 270.493980][ T6304] Trying to free block not in datazone [ 270.500327][ T6304] Trying to free block not in datazone [ 270.506656][ T6304] Trying to free block not in datazone [ 270.512016][ T6312] syz.0.112: attempt to access beyond end of device [ 270.512016][ T6312] loop0: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 270.512257][ T6304] Trying to free block not in datazone [ 270.512312][ T6304] Trying to free block not in datazone [ 270.527434][ T6312] Trying to free block not in datazone [ 270.532109][ T6304] Trying to free block not in datazone [ 270.532164][ T6304] Trying to free block not in datazone [ 270.537842][ T6312] Trying to free block not in datazone [ 270.537898][ T6312] Trying to free block not in datazone [ 270.543416][ T6304] Trying to free block not in datazone [ 270.543470][ T6304] Trying to free block not in datazone [ 270.581826][ T6304] Trying to free block not in datazone [ 270.588269][ T6304] Trying to free block not in datazone [ 270.593998][ T6304] Trying to free block not in datazone [ 270.600100][ T6304] Trying to free block not in datazone [ 270.605819][ T6304] Trying to free block not in datazone [ 270.611693][ T6304] Trying to free block not in datazone [ 270.617775][ T6304] Trying to free block not in datazone [ 270.623415][ T6304] Trying to free block not in datazone [ 270.630595][ T6304] Trying to free block not in datazone [ 270.636487][ T6304] Trying to free block not in datazone [ 270.642120][ T6304] Trying to free block not in datazone [ 270.648360][ T6304] Trying to free block not in datazone [ 270.657375][ T6304] Trying to free block not in datazone [ 270.663028][ T6304] Trying to free block not in datazone [ 270.669913][ T6304] Trying to free block not in datazone [ 270.676850][ T6304] Trying to free block not in datazone [ 270.682928][ T6304] Trying to free block not in datazone [ 270.690814][ T6304] Trying to free block not in datazone [ 270.697064][ T6304] Trying to free block not in datazone [ 270.703590][ T6304] Trying to free block not in datazone [ 270.710380][ T6304] Trying to free block not in datazone [ 270.716283][ T6304] Trying to free block not in datazone [ 270.721995][ T6304] Trying to free block not in datazone [ 270.727979][ T6304] Trying to free block not in datazone [ 270.733696][ T6304] Trying to free block not in datazone [ 270.739522][ T6304] Trying to free block not in datazone [ 270.745260][ T6304] Trying to free block not in datazone [ 270.751196][ T6304] Trying to free block not in datazone [ 270.760421][ T6304] Trying to free block not in datazone [ 270.767433][ T6304] Trying to free block not in datazone [ 270.773064][ T6304] Trying to free block not in datazone [ 270.778911][ T6304] Trying to free block not in datazone [ 270.784799][ T6304] Trying to free block not in datazone [ 270.790635][ T6304] Trying to free block not in datazone [ 270.796512][ T6304] Trying to free block not in datazone [ 270.802309][ T6304] Trying to free block not in datazone [ 270.808143][ T6304] Trying to free block not in datazone [ 270.813763][ T6304] Trying to free block not in datazone [ 270.820353][ T6304] Trying to free block not in datazone [ 270.826809][ T6304] Trying to free block not in datazone [ 270.833127][ T6304] Trying to free block not in datazone [ 270.839072][ T6304] Trying to free block not in datazone [ 270.845450][ T6304] Trying to free block not in datazone [ 270.851479][ T6304] Trying to free block not in datazone [ 270.861502][ T6304] Trying to free block not in datazone [ 270.869198][ T6304] Trying to free block not in datazone [ 270.875461][ T6304] Trying to free block not in datazone [ 270.882023][ T6304] Trying to free block not in datazone [ 270.888868][ T6304] Trying to free block not in datazone [ 270.894689][ T6304] Trying to free block not in datazone [ 270.901024][ T6304] Trying to free block not in datazone [ 270.908359][ T6304] Trying to free block not in datazone [ 270.916506][ T6304] Trying to free block not in datazone [ 270.922151][ T6304] Trying to free block not in datazone [ 270.928147][ T6304] Trying to free block not in datazone [ 270.933887][ T6304] Trying to free block not in datazone [ 270.939861][ T6304] Trying to free block not in datazone [ 270.945601][ T6304] Trying to free block not in datazone [ 270.951651][ T6304] Trying to free block not in datazone [ 270.957680][ T6304] Trying to free block not in datazone [ 270.966305][ T6308] loop1: detected capacity change from 0 to 2048 [ 270.973051][ T6304] Trying to free block not in datazone [ 270.980095][ T6304] Trying to free block not in datazone [ 270.985735][ T6304] Trying to free block not in datazone [ 270.991548][ T6304] Trying to free block not in datazone [ 270.997428][ T6304] Trying to free block not in datazone [ 271.003064][ T6304] Trying to free block not in datazone [ 271.009051][ T6304] Trying to free block not in datazone [ 271.014685][ T6304] Trying to free block not in datazone [ 271.020637][ T6304] Trying to free block not in datazone [ 271.026548][ T6304] Trying to free block not in datazone [ 271.032194][ T6304] Trying to free block not in datazone [ 271.038546][ T6304] Trying to free block not in datazone [ 271.044178][ T6304] Trying to free block not in datazone [ 271.050043][ T6304] Trying to free block not in datazone [ 271.055662][ T6304] Trying to free block not in datazone [ 271.064593][ T6304] Trying to free block not in datazone [ 271.071519][ T6304] Trying to free block not in datazone [ 271.077371][ T6304] Trying to free block not in datazone [ 271.083001][ T6304] Trying to free block not in datazone [ 271.088836][ T6304] Trying to free block not in datazone [ 271.094560][ T6304] Trying to free block not in datazone [ 271.100404][ T6304] Trying to free block not in datazone [ 271.106440][ T6304] Trying to free block not in datazone [ 271.112079][ T6304] Trying to free block not in datazone [ 271.117926][ T6304] Trying to free block not in datazone [ 271.123570][ T6304] Trying to free block not in datazone [ 271.129498][ T6304] Trying to free block not in datazone [ 271.135317][ T6304] Trying to free block not in datazone [ 271.141444][ T6304] Trying to free block not in datazone [ 271.148469][ T6304] Trying to free block not in datazone [ 271.154199][ T6304] Trying to free block not in datazone [ 271.160582][ T6304] Trying to free block not in datazone [ 271.169517][ T6304] Trying to free block not in datazone [ 271.175154][ T6304] Trying to free block not in datazone [ 271.182005][ T6304] Trying to free block not in datazone [ 271.188136][ T6304] Trying to free block not in datazone [ 271.193769][ T6304] Trying to free block not in datazone [ 271.199604][ T6304] Trying to free block not in datazone [ 271.205259][ T6304] Trying to free block not in datazone [ 271.211083][ T6304] Trying to free block not in datazone [ 271.217047][ T6304] Trying to free block not in datazone [ 271.222685][ T6304] Trying to free block not in datazone [ 271.228488][ T6304] Trying to free block not in datazone [ 271.234126][ T6304] Trying to free block not in datazone [ 271.240328][ T6304] Trying to free block not in datazone [ 271.246956][ T6304] Trying to free block not in datazone [ 271.252684][ T6304] Trying to free block not in datazone [ 271.258528][ T6304] Trying to free block not in datazone [ 271.264162][ T6304] Trying to free block not in datazone [ 271.273886][ T6304] Trying to free block not in datazone [ 271.281165][ T6304] Trying to free block not in datazone [ 271.287023][ T6304] Trying to free block not in datazone [ 271.292669][ T6304] Trying to free block not in datazone [ 271.298496][ T6304] Trying to free block not in datazone [ 271.304122][ T6304] Trying to free block not in datazone [ 271.309945][ T6304] Trying to free block not in datazone [ 271.315575][ T6304] Trying to free block not in datazone [ 271.321423][ T6304] Trying to free block not in datazone [ 271.327375][ T6304] Trying to free block not in datazone [ 271.332992][ T6304] Trying to free block not in datazone [ 271.339373][ T6304] Trying to free block not in datazone [ 271.345120][ T6304] Trying to free block not in datazone [ 271.351240][ T6304] Trying to free block not in datazone [ 271.357531][ T6304] Trying to free block not in datazone [ 271.364942][ T6304] Trying to free block not in datazone [ 271.376704][ T6304] Trying to free block not in datazone [ 271.382388][ T6304] Trying to free block not in datazone [ 271.389224][ T6304] Trying to free block not in datazone [ 271.395561][ T6304] Trying to free block not in datazone [ 271.401689][ T6304] Trying to free block not in datazone [ 271.408484][ T6304] Trying to free block not in datazone [ 271.414392][ T6304] Trying to free block not in datazone [ 271.420232][ T6304] Trying to free block not in datazone [ 271.425861][ T6304] Trying to free block not in datazone [ 271.431813][ T6304] Trying to free block not in datazone [ 271.438422][ T6304] Trying to free block not in datazone [ 271.444030][ T6304] Trying to free block not in datazone [ 271.449886][ T6304] Trying to free block not in datazone [ 271.455717][ T6304] Trying to free block not in datazone [ 271.461513][ T6304] Trying to free block not in datazone [ 271.467368][ T6304] Trying to free block not in datazone [ 271.476960][ T6304] Trying to free block not in datazone [ 271.482978][ T6304] Trying to free block not in datazone [ 271.489922][ T6304] Trying to free block not in datazone [ 271.496654][ T6304] Trying to free block not in datazone [ 271.502634][ T6304] Trying to free block not in datazone [ 271.508945][ T6304] Trying to free block not in datazone [ 271.514673][ T6304] Trying to free block not in datazone [ 271.520780][ T6304] Trying to free block not in datazone [ 271.532576][ T6304] Trying to free block not in datazone [ 271.623112][ T6286] XFS (loop2): Ending clean mount [ 271.647063][ T6286] XFS (loop2): Quotacheck needed: Please wait. [ 271.754899][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 271.781639][ T6286] XFS (loop2): Quotacheck: Done. [ 271.922305][ T5806] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 271.988106][ T5095] Bluetooth: hci1: command tx timeout [ 272.329266][ T6308] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 272.484995][ T6308] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28 [ 272.508308][ T6308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 272.508308][ T6308] [ 272.520651][ T6308] EXT4-fs (loop1): Total free blocks count 0 [ 272.527166][ T6308] EXT4-fs (loop1): Free/Dirty block details [ 272.533282][ T6308] EXT4-fs (loop1): free_blocks=2415919104 [ 272.539466][ T6308] EXT4-fs (loop1): dirty_blocks=176 [ 272.544919][ T6308] EXT4-fs (loop1): Block reservation details [ 272.552556][ T6308] EXT4-fs (loop1): i_reserved_data_blocks=11 [ 272.913758][ T6319] loop3: detected capacity change from 0 to 32768 [ 273.120321][ T6319] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.264298][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.272152][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.280146][ T6251] bridge_slave_0: entered allmulticast mode [ 273.290678][ T6251] bridge_slave_0: entered promiscuous mode [ 273.470851][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.482733][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.490824][ T6251] bridge_slave_1: entered allmulticast mode [ 273.501149][ T6251] bridge_slave_1: entered promiscuous mode [ 273.504814][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.116'. [ 273.585299][ T6319] XFS (loop3): Ending clean mount [ 273.620110][ T6319] XFS (loop3): Quotacheck needed: Please wait. [ 273.733983][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 273.745302][ T6319] XFS (loop3): Quotacheck: Done. [ 274.068294][ T5807] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.348406][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.438746][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.895415][ T6251] team0: Port device team_slave_0 added [ 274.968242][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 274.998031][ T6251] team0: Port device team_slave_1 added [ 275.368492][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 275.575177][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.582767][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.595083][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 275.611021][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.751123][ T5858] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 275.759717][ T5858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.770481][ T5858] usb 1-1: config 0 has no interface number 0 [ 275.917093][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 275.927875][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.935398][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.937105][ T5858] usb 1-1: Product: syz [ 275.944969][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.949954][ T5858] usb 1-1: Manufacturer: syz [ 275.950069][ T5858] usb 1-1: SerialNumber: syz [ 275.980634][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.626853][ T5858] usb 1-1: config 0 descriptor?? [ 276.646924][ T5858] uvcvideo 1-1:0.31: Found Unit with invalid ID 0 [ 276.654222][ T5858] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 276.662951][ T5858] uvcvideo 1-1:0.31: No valid video chain found. [ 276.890520][ T6251] hsr_slave_0: entered promiscuous mode [ 276.909967][ T6251] hsr_slave_1: entered promiscuous mode [ 276.919342][ T6251] debugfs: 'hsr0' already exists in 'hsr' [ 276.925296][ T6251] Cannot create hsr debugfs directory [ 277.096997][ T11] usb 1-1: USB disconnect, device number 4 [ 279.331748][ T6251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.441057][ T6251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.571248][ T6251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.637632][ T6251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.054733][ T6386] loop2: detected capacity change from 0 to 2048 [ 280.263763][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.970144][ T6381] loop3: detected capacity change from 0 to 8192 [ 281.072217][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.188003][ T1144] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 281.332113][ T1144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.344989][ T1144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 281.344989][ T1144] [ 281.355164][ T1144] EXT4-fs (loop2): Total free blocks count 0 [ 281.361534][ T1144] EXT4-fs (loop2): Free/Dirty block details [ 281.368293][ T1144] EXT4-fs (loop2): free_blocks=2415919504 [ 281.374233][ T1144] EXT4-fs (loop2): dirty_blocks=32 [ 281.379802][ T1144] EXT4-fs (loop2): Block reservation details [ 281.386157][ T1144] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 281.452527][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.552292][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.560006][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.677614][ T1144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 281.729592][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.737300][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.816409][ T5427] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 283.092988][ T5427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.105029][ T5427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.115584][ T5427] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.129034][ T5427] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.138454][ T5427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.320700][ T5427] usb 3-1: config 0 descriptor?? [ 283.909590][ T5427] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 284.182642][ T5427] usb 3-1: USB disconnect, device number 4 [ 284.594798][ T6426] loop0: detected capacity change from 0 to 512 [ 285.065833][ T6426] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.210373][ T6422] fido_id[6422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 285.239561][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.252011][ T6426] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.140: Directory hole found for htree leaf block 0 [ 285.336781][ T6426] EXT4-fs (loop0): Remounting filesystem read-only [ 285.914306][ T5801] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 287.389670][ T6451] loop0: detected capacity change from 0 to 32768 [ 287.490115][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 287.490206][ T30] audit: type=1800 audit(1761866393.641:111): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 288.222555][ T6460] loop3: detected capacity change from 0 to 1024 [ 288.507544][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.138830][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.398872][ T6251] veth0_vlan: entered promiscuous mode [ 289.574130][ T6251] veth1_vlan: entered promiscuous mode [ 290.058067][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 290.077117][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.198633][ T6486] loop2: detected capacity change from 0 to 128 [ 290.289688][ T6486] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 290.322557][ T6482] bridge_slave_1 (unregistering): left allmulticast mode [ 290.330901][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.562315][ T6486] netlink: 200 bytes leftover after parsing attributes in process `syz.2.155'. [ 290.574987][ T6486] netlink: 68 bytes leftover after parsing attributes in process `syz.2.155'. [ 290.594003][ T6251] veth0_macvtap: entered promiscuous mode [ 290.685788][ T6251] veth1_macvtap: entered promiscuous mode [ 291.008160][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.212112][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.341046][ T3634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.396492][ T3634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.405568][ T3634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.517111][ T4396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.823217][ T6519] loop2: detected capacity change from 0 to 256 [ 295.865405][ T6541] loop1: detected capacity change from 0 to 128 [ 295.974195][ T6541] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 296.158134][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.294770][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.305385][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.836765][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 297.057291][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 297.157395][ T5890] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 297.167886][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.179855][ T5890] usb 4-1: Product: syz [ 297.184253][ T5890] usb 4-1: Manufacturer: syz [ 297.190815][ T5890] usb 4-1: SerialNumber: syz [ 297.237996][ T5890] usb 4-1: config 0 descriptor?? [ 297.548014][ T6555] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 297.548014][ T6555] program syz.0.173 not setting count and/or reply_len properly [ 297.691834][ T5890] airspy 4-1:0.0: Board ID: 00 [ 297.697394][ T5890] airspy 4-1:0.0: Firmware version: [ 298.311516][ T5890] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 298.346696][ T5890] airspy 4-1:0.0: Registered as swradio24 [ 298.352808][ T5890] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 298.453446][ T5890] usb 4-1: USB disconnect, device number 3 [ 298.577492][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 298.652658][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 300.224186][ T6571] loop0: detected capacity change from 0 to 32768 [ 300.290724][ T6571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.178 (6571) [ 300.444431][ T6571] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.458840][ T6571] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 300.468824][ T6571] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 300.794966][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.803488][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.029120][ T6571] BTRFS info (device loop0): rebuilding free space tree [ 301.113138][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.121464][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.207593][ T6571] BTRFS info (device loop0): disabling free space tree [ 301.214874][ T6571] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.225200][ T6571] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.267053][ T6571] BTRFS info (device loop0): checking UUID tree [ 301.279833][ T6571] BTRFS info (device loop0): enabling ssd optimizations [ 301.287410][ T6571] BTRFS info (device loop0): turning off barriers [ 301.294077][ T6571] BTRFS info (device loop0): disabling tree log [ 301.301339][ T6571] BTRFS info (device loop0): turning on flush-on-commit [ 301.309099][ T6571] BTRFS info (device loop0): enabling disk space caching [ 301.316640][ T6571] BTRFS info (device loop0): force clearing of disk cache [ 301.324471][ T6571] BTRFS info (device loop0): use zstd compression, level 3 [ 301.332251][ T6571] BTRFS info (device loop0): max_inline set to 0 [ 301.760174][ T5801] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.342202][ T6608] Illegal XDP return value 1651700508 on prog (id 24) dev syz_tun, expect packet loss! [ 303.576157][ T6618] loop2: detected capacity change from 0 to 32768 [ 303.643429][ T6618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.187 (6618) [ 303.702765][ T6618] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.713843][ T6618] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 303.723644][ T6618] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 304.221947][ T6618] BTRFS info (device loop2): rebuilding free space tree [ 304.268935][ T6618] BTRFS info (device loop2): disabling free space tree [ 304.276441][ T6618] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 304.286953][ T6618] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 304.352205][ T6618] BTRFS info (device loop2): checking UUID tree [ 304.369497][ T6618] BTRFS info (device loop2): enabling ssd optimizations [ 304.377006][ T6618] BTRFS info (device loop2): turning off barriers [ 304.384530][ T6618] BTRFS info (device loop2): disabling tree log [ 304.391868][ T6618] BTRFS info (device loop2): enabling disk space caching [ 304.399931][ T6618] BTRFS info (device loop2): force clearing of disk cache [ 304.407704][ T6618] BTRFS info (device loop2): use zstd compression, level 3 [ 304.415534][ T6618] BTRFS info (device loop2): max_inline set to 0 [ 306.073070][ T5806] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.091240][ T6641] loop5: detected capacity change from 0 to 40427 [ 306.105550][ T6641] F2FS-fs (loop5): Image doesn't support compression [ 306.114149][ T6641] F2FS-fs (loop5): build fault injection rate: 690 [ 306.122750][ T6641] F2FS-fs (loop5): build fault injection type: 0x4 [ 306.153453][ T6641] F2FS-fs (loop5): invalid crc value [ 306.489905][ T6641] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 306.535369][ T6641] F2FS-fs (loop5): Start checkpoint disabled! [ 306.558027][ T6641] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 306.579407][ T6641] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 306.818381][ T4023] kworker/u8:18: attempt to access beyond end of device [ 306.818381][ T4023] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.837559][ T4023] CPU: 1 UID: 0 PID: 4023 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(none) [ 306.837799][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.837944][ T4023] Workqueue: writeback wb_workfn (flush-7:5) [ 306.838169][ T4023] Call Trace: [ 306.838223][ T4023] [ 306.838277][ T4023] __dump_stack+0x26/0x30 [ 306.838476][ T4023] dump_stack_lvl+0x1df/0x270 [ 306.838677][ T4023] dump_stack+0x1e/0x25 [ 306.838854][ T4023] f2fs_handle_critical_error+0xa6f/0xc20 [ 306.839068][ T4023] f2fs_stop_checkpoint+0x65/0x80 [ 306.839242][ T4023] f2fs_write_end_io+0x101c/0x1bc0 [ 306.839491][ T4023] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 306.839676][ T4023] bio_endio+0xeb4/0x1010 [ 306.839879][ T4023] submit_bio_noacct+0x2009/0x2930 [ 306.840124][ T4023] submit_bio+0x57c/0x630 [ 306.840314][ T4023] f2fs_submit_write_bio+0x92/0x250 [ 306.840555][ T4023] __submit_merged_bio+0x16f/0x6a0 [ 306.840780][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.840984][ T4023] __submit_merged_write_cond+0x458/0x9a0 [ 306.841236][ T4023] f2fs_write_data_pages+0x4bb2/0x5480 [ 306.841587][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.841758][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.841933][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.842120][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.842295][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.842480][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.842654][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.842834][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.843007][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.843182][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.843357][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.843545][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.843717][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.843897][ T4023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 306.844068][ T4023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 306.844236][ T4023] do_writepages+0x3f2/0x860 [ 306.844435][ T4023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 306.844648][ T4023] ? queue_io+0x771/0x790 [ 306.844829][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.845028][ T4023] __writeback_single_inode+0x101/0x1190 [ 306.845244][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.845436][ T4023] writeback_sb_inodes+0xac1/0x1cb0 [ 306.845729][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.845935][ T4023] wb_writeback+0x4ce/0xc00 [ 306.846139][ T4023] ? queue_io+0x471/0x790 [ 306.846528][ T4023] wb_workfn+0x397/0x1910 [ 306.846709][ T4023] ? kmsan_get_metadata+0xfb/0x160 [ 306.846918][ T4023] ? __pfx_wb_workfn+0x10/0x10 [ 306.847094][ T4023] process_scheduled_works+0xb91/0x1d80 [ 306.847389][ T4023] worker_thread+0xedf/0x1590 [ 306.847663][ T4023] kthread+0xd5c/0xf00 [ 306.847811][ T4023] ? __pfx_worker_thread+0x10/0x10 [ 306.848051][ T4023] ? __pfx_kthread+0x10/0x10 [ 306.848201][ T4023] ret_from_fork+0x1f5/0x4c0 [ 306.848446][ T4023] ? __pfx_kthread+0x10/0x10 [ 306.848603][ T4023] ret_from_fork_asm+0x1a/0x30 [ 306.848850][ T4023] [ 307.163497][ T4023] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 308.421253][ T6659] loop0: detected capacity change from 0 to 128 [ 309.047087][ T6665] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.885907][ T6680] loop5: detected capacity change from 0 to 128 [ 311.249102][ T6680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 311.466729][ T6680] hpfs: filesystem error: improperly stopped [ 311.473187][ T6680] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 311.481659][ T6680] hpfs: You really don't want any checks? You are crazy... [ 311.730285][ T6671] loop0: detected capacity change from 0 to 65536 [ 311.743865][ T6680] hpfs: hpfs_map_sector(): read error [ 311.749840][ T6680] hpfs: code page support is disabled [ 311.769152][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 311.796525][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 311.802682][ T6680] hpfs: filesystem error: unable to find root dir [ 311.835478][ T6671] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 312.183095][ T6671] XFS (loop0): Ending clean mount [ 312.278554][ T6671] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x1b9/0x300, xfs_agi block 0x8002 [ 312.291351][ T6671] XFS (loop0): Unmount and run xfs_repair [ 312.298521][ T6671] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 312.306443][ T6671] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 312.315909][ T6671] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 312.325549][ T6671] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.340715][ T6671] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.353295][ T6671] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.363905][ T6671] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.374872][ T6671] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.385066][ T6671] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 312.395498][ T6671] XFS (loop0): metadata I/O error in "xfs_read_agi+0x22f/0x580" at daddr 0x8002 len 1 error 74 [ 312.408598][ T6671] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 1 [ 312.527666][ T5801] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 312.651482][ T5801] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 314.565576][ T6701] loop1: detected capacity change from 0 to 40427 [ 314.597078][ T6701] F2FS-fs (loop1): invalid crc value [ 315.164559][ T6701] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 315.223553][ T6701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 315.420666][ T30] audit: type=1800 audit(1761866421.551:112): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.207" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 316.071716][ T5796] syz-executor: attempt to access beyond end of device [ 316.071716][ T5796] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.086620][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 316.086778][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.086872][ T5796] Call Trace: [ 316.086927][ T5796] [ 316.086981][ T5796] __dump_stack+0x26/0x30 [ 316.087172][ T5796] dump_stack_lvl+0x1df/0x270 [ 316.087371][ T5796] dump_stack+0x1e/0x25 [ 316.087552][ T5796] f2fs_handle_critical_error+0xa6f/0xc20 [ 316.087761][ T5796] f2fs_stop_checkpoint+0x65/0x80 [ 316.087933][ T5796] f2fs_write_end_io+0x101c/0x1bc0 [ 316.088157][ T5796] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 316.088448][ T5796] bio_endio+0xeb4/0x1010 [ 316.088714][ T5796] submit_bio_noacct+0x2009/0x2930 [ 316.088999][ T5796] submit_bio+0x57c/0x630 [ 316.089197][ T5796] f2fs_submit_write_bio+0x92/0x250 [ 316.089439][ T5796] __submit_merged_bio+0x16f/0x6a0 [ 316.089685][ T5796] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.089886][ T5796] __submit_merged_write_cond+0x458/0x9a0 [ 316.090143][ T5796] f2fs_write_data_pages+0x4bb2/0x5480 [ 316.090470][ T5796] ? kmsan_get_metadata+0xfb/0x160 [ 316.090656][ T5796] ? folio_batch_move_lru+0x6a6/0x6e0 [ 316.090847][ T5796] ? __msan_warning+0x1b/0x30 [ 316.090996][ T5796] ? filter_irq_stacks+0x13f/0x190 [ 316.091233][ T5796] ? stack_depot_save_flags+0x35/0x7b0 [ 316.091399][ T5796] ? lru_gen_add_folio+0xd66/0x1190 [ 316.091619][ T5796] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 316.091863][ T5796] ? kmsan_get_metadata+0xfb/0x160 [ 316.092035][ T5796] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.092213][ T5796] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.092386][ T5796] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.092561][ T5796] do_writepages+0x3f2/0x860 [ 316.092771][ T5796] ? _raw_spin_unlock+0x30/0x50 [ 316.092939][ T5796] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 316.093150][ T5796] filemap_fdatawrite+0x207/0x260 [ 316.093466][ T5796] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 316.093694][ T5796] f2fs_write_checkpoint+0x10a4/0x3730 [ 316.094031][ T5796] kill_f2fs_super+0x31b/0x990 [ 316.094257][ T5796] ? __pfx_kill_f2fs_super+0x10/0x10 [ 316.094444][ T5796] deactivate_locked_super+0xcb/0x3c0 [ 316.094684][ T5796] deactivate_super+0x12f/0x140 [ 316.094892][ T5796] cleanup_mnt+0x6fb/0x780 [ 316.095057][ T5796] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 316.095333][ T5796] ? __pfx___cleanup_mnt+0x10/0x10 [ 316.095514][ T5796] __cleanup_mnt+0x22/0x30 [ 316.095678][ T5796] task_work_run+0x209/0x2b0 [ 316.095863][ T5796] exit_to_user_mode_loop+0x2d1/0x370 [ 316.096047][ T5796] do_syscall_64+0x1e3/0xfa0 [ 316.096233][ T5796] ? irqentry_exit+0x16/0x60 [ 316.096410][ T5796] ? clear_bhb_loop+0x40/0x90 [ 316.096595][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.096779][ T5796] RIP: 0033:0x7f86c5b902f7 [ 316.096899][ T5796] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 316.097028][ T5796] RSP: 002b:00007fffc1435038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 316.097174][ T5796] RAX: 0000000000000000 RBX: 00007f86c5c11d7d RCX: 00007f86c5b902f7 [ 316.097422][ T5796] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc14350f0 [ 316.097531][ T5796] RBP: 00007fffc14350f0 R08: 0000000000000000 R09: 0000000000000000 [ 316.097629][ T5796] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1436180 [ 316.097731][ T5796] R13: 00007f86c5c11d7d R14: 000000000004cfee R15: 00007fffc14361c0 [ 316.097886][ T5796] [ 316.101268][ T6711] loop2: detected capacity change from 0 to 32768 [ 316.108364][ T5796] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 316.614801][ T6711] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 316.624438][ T6711] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 316.884961][ T6711] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 317.130609][ T6723] netlink: 52 bytes leftover after parsing attributes in process `syz.5.214'. [ 317.279071][ T6711] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 318.568334][ T6731] batman_adv: batadv0: Adding interface: geneve2 [ 318.580517][ T6731] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 318.925138][ T6734] loop2: detected capacity change from 0 to 128 [ 319.173725][ T6734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.237520][ T6738] netlink: 'syz.5.219': attribute type 4 has an invalid length. [ 319.287754][ T6734] hpfs: filesystem error: improperly stopped [ 319.298749][ T6734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 319.308688][ T6734] hpfs: You really don't want any checks? You are crazy... [ 319.439029][ T6734] hpfs: hpfs_map_sector(): read error [ 319.446880][ T6734] hpfs: code page support is disabled [ 319.527118][ T6734] hpfs: hpfs_map_4sectors(): unaligned read [ 319.534877][ T6734] hpfs: hpfs_map_4sectors(): unaligned read [ 319.541989][ T6734] hpfs: filesystem error: unable to find root dir [ 320.713598][ T6751] loop0: detected capacity change from 0 to 128 [ 320.876431][ T6751] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 320.978526][ T6751] hpfs: filesystem error: improperly stopped [ 320.984940][ T6751] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 320.993941][ T6751] hpfs: You really don't want any checks? You are crazy... [ 321.125918][ T6751] hpfs: hpfs_map_sector(): read error [ 321.133208][ T6751] hpfs: code page support is disabled [ 321.381335][ T6751] hpfs: hpfs_map_4sectors(): unaligned read [ 321.422418][ T6751] hpfs: hpfs_map_4sectors(): unaligned read [ 321.430323][ T6751] hpfs: filesystem error: unable to find root dir [ 321.693599][ T30] audit: type=1326 audit(1761866427.841:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 321.718402][ T30] audit: type=1326 audit(1761866427.841:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.118713][ T30] audit: type=1326 audit(1761866427.911:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.144754][ T30] audit: type=1326 audit(1761866427.911:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.173891][ T30] audit: type=1326 audit(1761866427.911:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.200462][ T30] audit: type=1326 audit(1761866427.911:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.229507][ T30] audit: type=1326 audit(1761866427.911:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.257115][ T30] audit: type=1326 audit(1761866427.911:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.284615][ T30] audit: type=1326 audit(1761866427.931:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 322.310238][ T30] audit: type=1326 audit(1761866427.931:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 323.567667][ T6773] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 323.582888][ T6769] loop0: detected capacity change from 0 to 32768 [ 323.609839][ T6769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.228 (6769) [ 323.655812][ T6769] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.666957][ T6769] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 323.675819][ T6769] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 324.034959][ T6769] BTRFS info (device loop0): rebuilding free space tree [ 324.065296][ T6769] BTRFS info (device loop0): disabling free space tree [ 324.073380][ T6769] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.084183][ T6769] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.161767][ T6769] BTRFS info (device loop0): checking UUID tree [ 324.171220][ T6769] BTRFS info (device loop0): enabling ssd optimizations [ 324.179726][ T6769] BTRFS info (device loop0): turning off barriers [ 324.187176][ T6769] BTRFS info (device loop0): disabling tree log [ 324.194218][ T6769] BTRFS info (device loop0): turning on flush-on-commit [ 324.201721][ T6769] BTRFS info (device loop0): enabling disk space caching [ 324.214150][ T6769] BTRFS info (device loop0): force clearing of disk cache [ 324.221794][ T6769] BTRFS info (device loop0): use zstd compression, level 3 [ 324.229397][ T6769] BTRFS info (device loop0): max_inline set to 0 [ 324.519638][ T5801] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.819384][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.829165][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.838846][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.848590][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.858176][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.867718][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.877402][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.887104][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.896708][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 325.906253][ T6813] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.641820][ T6823] loop2: detected capacity change from 0 to 16 [ 326.708287][ T6823] erofs (device loop2): mounted with root inode @ nid 36. [ 326.830708][ T6823] overlayfs: failed to get metacopy (-117) [ 327.836529][ T6841] netlink: 1212 bytes leftover after parsing attributes in process `syz.0.245'. [ 331.322188][ T6860] Zero length message leads to an empty skb [ 331.338717][ T6859] loop3: detected capacity change from 0 to 512 [ 331.444696][ T6859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.616898][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 331.630756][ T6859] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.856784][ T6859] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 331.870811][ T6859] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 331.881497][ T6859] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.251: Failed to acquire dquot type 0 [ 332.417345][ T6874] loop5: detected capacity change from 0 to 128 [ 332.493412][ T6874] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 332.592371][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 332.772257][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.792895][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.858490][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.882796][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.902392][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.165349][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 334.180279][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 334.200098][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 334.839702][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 335.048215][ T5804] Bluetooth: hci3: command tx timeout [ 336.592273][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.607695][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.615812][ T6876] bridge_slave_0: entered allmulticast mode [ 336.627690][ T6876] bridge_slave_0: entered promiscuous mode [ 336.749180][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.757345][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.766351][ T6876] bridge_slave_1: entered allmulticast mode [ 336.777427][ T6876] bridge_slave_1: entered promiscuous mode [ 337.107880][ T5804] Bluetooth: hci3: command tx timeout [ 337.439559][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.583605][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.938744][ T6876] team0: Port device team_slave_0 added [ 337.962061][ T6876] team0: Port device team_slave_1 added [ 338.299991][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.307444][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.334011][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.500896][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.508496][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.535038][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.656889][ T6938] loop1: detected capacity change from 0 to 256 [ 338.837213][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 339.068762][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 339.129555][ T5881] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.138977][ T5881] usb 4-1: config 179 has no interface number 0 [ 339.145486][ T5881] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 339.161094][ T5881] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 339.174026][ T5881] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.186183][ T5881] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 339.186481][ T5804] Bluetooth: hci3: command tx timeout [ 339.198291][ T5881] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.218312][ T5881] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.227737][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.274102][ T6876] hsr_slave_0: entered promiscuous mode [ 339.285050][ T6876] hsr_slave_1: entered promiscuous mode [ 339.294457][ T6876] debugfs: 'hsr0' already exists in 'hsr' [ 339.300580][ T6876] Cannot create hsr debugfs directory [ 339.571380][ T6937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.229209][ T6942] loop5: detected capacity change from 0 to 32768 [ 340.288850][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 340.308877][ T6942] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.278 (6942) [ 340.353808][ T6942] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 340.366627][ T6942] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 340.468776][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.479297][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.871008][ T6942] BTRFS info (device loop5): enabling ssd optimizations [ 340.879257][ T6942] BTRFS info (device loop5): turning on sync discard [ 340.886931][ T6942] BTRFS info (device loop5): enabling free space tree [ 340.971541][ T5890] usb 4-1: USB disconnect, device number 4 [ 340.971687][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 341.130662][ T6959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 341.266508][ T5804] Bluetooth: hci3: command tx timeout [ 341.379570][ T6251] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 342.408397][ T6968] sctp: [Deprecated]: syz.3.283 (pid 6968) Use of int in maxseg socket option. [ 342.408397][ T6968] Use struct sctp_assoc_value instead [ 342.443088][ T30] audit: type=1800 audit(1761866448.531:123): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.283" name="bus" dev="tmpfs" ino=354 res=0 errno=0 [ 342.622300][ T6876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.733905][ T6876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.891188][ T6876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.007887][ T6876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.223938][ T6983] loop1: detected capacity change from 0 to 256 [ 344.467034][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.749330][ T6983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 344.752195][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.835662][ T6988] loop0: detected capacity change from 0 to 256 [ 344.926946][ T6988] exfat: Deprecated parameter 'namecase' [ 344.935442][ T6988] exfat: Deprecated parameter 'namecase' [ 344.969774][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.978631][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.128510][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.137862][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.258877][ T6988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 345.696859][ T6992] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 346.319283][ T6991] loop5: detected capacity change from 0 to 32768 [ 346.514086][ T6991] (syz.5.293,6991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 346.550221][ T6991] (syz.5.293,6991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 346.645617][ T6991] JBD2: Ignoring recovery information on journal [ 346.981036][ T6991] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 347.407758][ T6251] ocfs2: Unmounting device (7,5) on (node local) [ 348.882633][ T7017] netlink: 80 bytes leftover after parsing attributes in process `syz.3.300'. [ 349.186891][ T7019] loop0: detected capacity change from 0 to 2048 [ 349.220031][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.277876][ T7019] EXT4-fs: Ignoring removed bh option [ 349.539078][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.689301][ T7019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.827585][ T7019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 349.841335][ T7019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 349.841335][ T7019] [ 349.852249][ T7019] EXT4-fs (loop0): Total free blocks count 0 [ 349.860173][ T7019] EXT4-fs (loop0): Free/Dirty block details [ 349.866506][ T7019] EXT4-fs (loop0): free_blocks=2415919104 [ 349.873076][ T7019] EXT4-fs (loop0): dirty_blocks=32 [ 349.878783][ T7019] EXT4-fs (loop0): Block reservation details [ 349.885151][ T7019] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 349.980312][ T7030] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 350.645064][ T7034] loop5: detected capacity change from 0 to 2048 [ 350.756634][ T7034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.025791][ T7034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.296: bg 0: block 234: padding at end of block bitmap is not set [ 351.088891][ T7034] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 117 [ 351.104047][ T7034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 351.104047][ T7034] [ 351.692202][ T6876] veth0_vlan: entered promiscuous mode [ 351.730106][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.954301][ T6876] veth1_vlan: entered promiscuous mode [ 352.218179][ T7052] loop0: detected capacity change from 0 to 1024 [ 352.451284][ T6876] veth0_macvtap: entered promiscuous mode [ 352.536770][ T6876] veth1_macvtap: entered promiscuous mode [ 352.626441][ T7056] loop5: detected capacity change from 0 to 512 [ 352.761709][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.874660][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.962765][ T5155] udevd[5155]: worker [5969] terminated by signal 33 (Unknown signal 33) [ 353.017251][ T88] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.222638][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.237433][ T7056] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.898660][ T7061] loop3: detected capacity change from 0 to 32768 [ 353.931583][ T7061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.311 (7061) [ 353.938586][ T4396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.974225][ T7061] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.979524][ T5155] udevd[5155]: worker [5969] failed while handling '/devices/virtual/block/loop0' [ 353.987269][ T7061] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 354.010842][ T7061] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 354.121410][ T5155] udevd[5155]: worker [6035] terminated by signal 33 (Unknown signal 33) [ 354.134269][ T5155] udevd[5155]: worker [6035] failed while handling '/devices/virtual/block/loop5' [ 354.507999][ T4396] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.665543][ T4192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.694274][ T7061] BTRFS info (device loop3): rebuilding free space tree [ 354.839477][ T7061] BTRFS info (device loop3): disabling free space tree [ 354.847114][ T7061] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.857295][ T7061] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.889034][ T7061] BTRFS info (device loop3): enabling ssd optimizations [ 354.896587][ T7061] BTRFS info (device loop3): turning off barriers [ 354.903269][ T7061] BTRFS info (device loop3): turning on flush-on-commit [ 354.910930][ T7061] BTRFS info (device loop3): enabling disk space caching [ 354.918368][ T7061] BTRFS info (device loop3): force clearing of disk cache [ 354.925731][ T7061] BTRFS info (device loop3): use zstd compression, level 3 [ 354.940082][ T7061] BTRFS info (device loop3): max_inline set to 0 [ 355.201256][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.316657][ T5807] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.154281][ T7106] loop5: detected capacity change from 0 to 1024 [ 357.218783][ T7106] EXT4-fs: Ignoring removed bh option [ 357.225041][ T7106] EXT4-fs: inline encryption not supported [ 357.289331][ T7106] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.360460][ T7106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 357.540729][ T7106] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.317: lblock 2 mapped to illegal pblock 2 (length 1) [ 357.570893][ T7106] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 357.580530][ T7106] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.317: lblock 0 mapped to illegal pblock 48 (length 1) [ 357.697636][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.704604][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.802871][ T7106] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 357.816229][ T7106] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.317: Failed to acquire dquot type 0 [ 357.907172][ T7106] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 357.958803][ T7106] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.317: mark_inode_dirty error [ 358.036840][ T7106] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 358.047683][ T7106] EXT4-fs (loop5): 1 orphan inode deleted [ 358.055819][ T7106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.088080][ T88] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.221627][ T88] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 358.231611][ T88] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 358.621379][ T7106] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.317: lblock 0 mapped to illegal pblock 48 (length 1) [ 358.678610][ T7106] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 359.157961][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.302555][ T7123] loop1: detected capacity change from 0 to 40427 [ 360.360411][ T7123] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 360.369283][ T7123] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 360.378552][ T7123] F2FS-fs (loop1): Image doesn't support compression [ 360.385450][ T7123] F2FS-fs (loop1): build fault injection type: 0x4 [ 360.432990][ T7123] F2FS-fs (loop1): invalid crc value [ 360.790491][ T7123] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 360.801362][ T7123] F2FS-fs (loop1): Start checkpoint disabled! [ 360.813339][ T7123] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 360.896994][ T7123] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 360.904558][ T7123] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 361.677940][ T3654] kworker/u8:14: attempt to access beyond end of device [ 361.677940][ T3654] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.705366][ T3654] CPU: 0 UID: 0 PID: 3654 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(none) [ 361.705524][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.705796][ T3654] Workqueue: writeback wb_workfn (flush-7:1) [ 361.706116][ T3654] Call Trace: [ 361.706174][ T3654] [ 361.706226][ T3654] __dump_stack+0x26/0x30 [ 361.706417][ T3654] dump_stack_lvl+0x1df/0x270 [ 361.706624][ T3654] dump_stack+0x1e/0x25 [ 361.706814][ T3654] f2fs_handle_critical_error+0xa6f/0xc20 [ 361.707029][ T3654] f2fs_stop_checkpoint+0x65/0x80 [ 361.707208][ T3654] f2fs_write_end_io+0x101c/0x1bc0 [ 361.707437][ T3654] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 361.707615][ T3654] bio_endio+0xeb4/0x1010 [ 361.707810][ T3654] submit_bio_noacct+0x2009/0x2930 [ 361.708059][ T3654] submit_bio+0x57c/0x630 [ 361.708252][ T3654] f2fs_submit_write_bio+0x92/0x250 [ 361.708488][ T3654] __submit_merged_bio+0x16f/0x6a0 [ 361.708722][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.708922][ T3654] __submit_merged_write_cond+0x458/0x9a0 [ 361.709175][ T3654] f2fs_write_data_pages+0x4bb2/0x5480 [ 361.709486][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.709665][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.709841][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.710021][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.710196][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.710372][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.710556][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.710754][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.710929][ T3654] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 361.711178][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.711348][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.711526][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.711713][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.711893][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.712068][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.712249][ T3654] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 361.712424][ T3654] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 361.712595][ T3654] do_writepages+0x3f2/0x860 [ 361.712799][ T3654] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.712993][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.713164][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.713363][ T3654] __writeback_single_inode+0x101/0x1190 [ 361.713584][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.713782][ T3654] writeback_sb_inodes+0xac1/0x1cb0 [ 361.714085][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.714311][ T3654] wb_writeback+0x4ce/0xc00 [ 361.714527][ T3654] ? queue_io+0x471/0x790 [ 361.714739][ T3654] wb_workfn+0x397/0x1910 [ 361.714916][ T3654] ? kmsan_get_metadata+0xfb/0x160 [ 361.715118][ T3654] ? __pfx_wb_workfn+0x10/0x10 [ 361.715290][ T3654] process_scheduled_works+0xb91/0x1d80 [ 361.715566][ T3654] worker_thread+0xedf/0x1590 [ 361.715820][ T3654] kthread+0xd5c/0xf00 [ 361.715958][ T3654] ? __pfx_worker_thread+0x10/0x10 [ 361.716183][ T3654] ? __pfx_kthread+0x10/0x10 [ 361.716331][ T3654] ret_from_fork+0x1f5/0x4c0 [ 361.716537][ T3654] ? __pfx_kthread+0x10/0x10 [ 361.716697][ T3654] ret_from_fork_asm+0x1a/0x30 [ 361.716938][ T3654] [ 362.064419][ T3654] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 362.157837][ T7134] loop5: detected capacity change from 0 to 32768 [ 362.450635][ T7134] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 362.452571][ T7146] loop3: detected capacity change from 0 to 256 [ 363.156475][ T7134] XFS (loop5): Ending clean mount [ 363.163759][ T7146] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 363.381011][ T7146] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 363.561438][ T6251] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.753051][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.766639][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.999159][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.008266][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.587477][ T7185] netlink: 566 bytes leftover after parsing attributes in process `syz.0.339'. [ 368.798762][ T7183] loop1: detected capacity change from 0 to 4096 [ 369.524983][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'. [ 369.782060][ T7204] loop8: detected capacity change from 0 to 8 [ 369.857332][ T7204] Dev loop8: unable to read RDB block 8 [ 369.863267][ T7204] loop8: unable to read partition table [ 369.927289][ T7204] loop8: partition table beyond EOD, truncated [ 369.934345][ T7204] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 370.437426][ T7183] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 370.623732][ T7210] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 370.660379][ T7210] team0: Port device dummy0 added [ 370.782317][ T7212] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 370.927461][ T7212] team0: Port device dummy0 removed [ 370.952809][ T7212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 372.071298][ T7216] loop5: detected capacity change from 0 to 256 [ 372.369677][ T7218] bridge1: entered promiscuous mode [ 372.375152][ T7218] bridge1: entered allmulticast mode [ 372.392485][ T7218] team0: Port device bridge1 added [ 372.877864][ T7214] loop6: detected capacity change from 0 to 65536 [ 372.913121][ T7218] bridge0: port 3(team0) entered blocking state [ 372.920324][ T7218] bridge0: port 3(team0) entered disabled state [ 372.927760][ T7218] team0: entered allmulticast mode [ 372.933107][ T7218] team_slave_0: entered allmulticast mode [ 372.937032][ T7216] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 372.939320][ T7218] team_slave_1: entered allmulticast mode [ 372.968614][ T7218] team0: entered promiscuous mode [ 372.973897][ T7218] team_slave_0: entered promiscuous mode [ 372.980922][ T7218] team_slave_1: entered promiscuous mode [ 372.991334][ T7218] bridge0: port 3(team0) entered blocking state [ 372.998276][ T7218] bridge0: port 3(team0) entered listening state [ 373.010621][ T30] audit: type=1326 audit(1761866479.151:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.123120][ T7214] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 373.267936][ T30] audit: type=1326 audit(1761866479.391:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.291055][ T30] audit: type=1326 audit(1761866479.391:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.316162][ T30] audit: type=1326 audit(1761866479.391:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.706695][ T30] audit: type=1326 audit(1761866479.491:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.729772][ T30] audit: type=1326 audit(1761866479.571:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.752873][ T30] audit: type=1326 audit(1761866479.571:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 373.802232][ T7214] XFS (loop6): Ending clean mount [ 374.335441][ T6876] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 376.109246][ T7247] loop3: detected capacity change from 0 to 32768 [ 376.255807][ T7247] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 376.720535][ T7247] XFS (loop3): Ending clean mount [ 376.782034][ T7247] XFS (loop3): Quotacheck needed: Please wait. [ 376.835845][ T7247] XFS (loop3): Quotacheck: Done. [ 377.157103][ T5807] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.486163][ T7328] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 382.529652][ T7328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 382.928579][ T7320] loop5: detected capacity change from 0 to 4096 [ 383.283608][ T7332] loop1: detected capacity change from 0 to 512 [ 383.457698][ T7330] loop6: detected capacity change from 0 to 32768 [ 383.485708][ T7332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c018, mo2=0102] [ 383.516670][ T7334] nbd0: detected capacity change from 0 to 127 [ 383.537224][ T5804] block nbd0: Receive control failed (result -32) [ 383.585251][ T7332] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 383.603629][ T7332] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 383.616591][ T7332] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 383.679723][ T7332] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 383.721581][ T7332] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.393: corrupted in-inode xattr: invalid ea_ino [ 383.756787][ T7332] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.393: couldn't read orphan inode 15 (err -117) [ 383.799386][ T7332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.940995][ T7332] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 383.953700][ T7332] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 383.964598][ T7332] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 384.003314][ T7332] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 384.022925][ T7332] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 384.035675][ T7332] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 384.246261][ T7341] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 384.259147][ T7341] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 384.270687][ T7341] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 384.404982][ T7332] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 384.798813][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.915090][ T7346] loop5: detected capacity change from 0 to 32768 [ 386.028611][ T7346] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.139902][ T7367] input: syz0 as /devices/virtual/input/input7 [ 386.203391][ T7370] binder: 7368:7370 ioctl 400c620e 200000000680 returned -22 [ 386.535703][ T7374] net_ratelimit: 310 callbacks suppressed [ 386.535796][ T7374] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 386.643896][ T7346] XFS (loop5): Ending clean mount [ 386.664602][ T7346] XFS (loop5): Quotacheck needed: Please wait. [ 386.761232][ T7346] XFS (loop5): Quotacheck: Done. [ 386.913565][ T6251] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.966945][ T7377] overlayfs: statfs failed on './file0' [ 387.946299][ T7381] loop0: detected capacity change from 0 to 32768 [ 388.679406][ T7391] warning: `syz.6.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 389.042249][ T7397] loop1: detected capacity change from 0 to 128 [ 389.070096][ T7397] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.148000][ T7397] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.998214][ T4023] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.476794][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 391.846528][ T7440] loop1: detected capacity change from 0 to 2048 [ 391.944580][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.100984][ T7440] EXT4-fs (loop1): shut down requested (0) [ 392.362296][ T4329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.192460][ T7454] loop3: detected capacity change from 0 to 32768 [ 393.300168][ T7454] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 393.317420][ T7457] loop0: detected capacity change from 0 to 32768 [ 393.414022][ T7457] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 393.609972][ T4329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.813234][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.885798][ T4329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.976874][ T5801] ocfs2: Unmounting device (7,0) on (node local) [ 394.071647][ T7454] XFS (loop3): Ending clean mount [ 394.087102][ T7454] XFS (loop3): Quotacheck needed: Please wait. [ 394.102400][ T4329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.194640][ T7454] XFS (loop3): Quotacheck: Done. [ 394.377176][ T5807] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 394.617881][ T4329] bridge_slave_1: left allmulticast mode [ 394.623791][ T4329] bridge_slave_1: left promiscuous mode [ 394.631802][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.674797][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 394.723545][ T4329] bridge_slave_0: left allmulticast mode [ 394.730901][ T4329] bridge_slave_0: left promiscuous mode [ 394.738010][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.867249][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 395.189981][ T5890] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 395.198755][ T5890] usb 2-1: config 0 has no interface number 0 [ 395.205110][ T5890] usb 2-1: config 0 interface 182 has no altsetting 0 [ 395.231465][ T7477] loop6: detected capacity change from 0 to 128 [ 395.291050][ T5890] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 395.300876][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.309374][ T5890] usb 2-1: Product: syz [ 395.313748][ T5890] usb 2-1: Manufacturer: syz [ 395.318831][ T5890] usb 2-1: SerialNumber: syz [ 395.341171][ T7477] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.597725][ T7477] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.608361][ T5890] usb 2-1: config 0 descriptor?? [ 395.630501][ T5890] hub 2-1:0.182: bad descriptor, ignoring hub [ 395.639006][ T5890] hub 2-1:0.182: probe with driver hub failed with error -5 [ 395.695386][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.771845][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.817450][ T4329] bond0 (unregistering): Released all slaves [ 395.856779][ T7482] loop5: detected capacity change from 0 to 1024 [ 395.882548][ T5890] kaweth 2-1:0.182: Firmware present in device. [ 395.928883][ T7482] EXT4-fs: Ignoring removed bh option [ 395.955386][ T7482] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 396.057670][ T7482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0080] [ 396.106464][ T5890] kaweth 2-1:0.182: Statistics collection: 0 [ 396.113435][ T5890] kaweth 2-1:0.182: Multicast filter limit: 0 [ 396.120042][ T5890] kaweth 2-1:0.182: MTU: 0 [ 396.124710][ T5890] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 396.134709][ T7482] System zones: 0-1, 3-12 [ 396.161338][ T7482] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.448: lblock 1 mapped to illegal pblock 1 (length 1) [ 396.178468][ T6876] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.203622][ T7482] Quota error (device loop5): write_blk: dquota write failed [ 396.212112][ T7482] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 396.223781][ T7482] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.448: Failed to acquire dquot type 0 [ 396.271229][ T7482] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.448: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.316550][ T7482] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.448: Invalid inode bitmap blk 0 in block_group 0 [ 396.331285][ T4023] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 396.367280][ T7482] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 396.382831][ T4023] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 396.392581][ T4023] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:18: Failed to release dquot type 0 [ 396.439242][ T7482] EXT4-fs (loop5): 1 orphan inode deleted [ 396.469595][ T7482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.629364][ T7482] EXT4-fs (loop5): shut down requested (2) [ 396.755769][ T5890] kaweth 2-1:0.182: Error setting receive filter [ 396.764034][ T5890] kaweth 2-1:0.182: probe with driver kaweth failed with error -5 [ 396.877456][ T5890] usb 2-1: USB disconnect, device number 3 [ 396.898501][ T4329] hsr_slave_0: left promiscuous mode [ 396.930151][ T4329] hsr_slave_1: left promiscuous mode [ 396.938967][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.947692][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.967900][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 396.975336][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.991421][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.041039][ T4329] veth1_macvtap: left promiscuous mode [ 397.044090][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.047088][ T4329] veth0_macvtap: left promiscuous mode [ 397.047486][ T4329] veth1_vlan: left promiscuous mode [ 397.067862][ T4329] veth0_vlan: left promiscuous mode [ 398.596541][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 398.817657][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 398.954672][ T7495] loop1: detected capacity change from 0 to 40427 [ 399.019615][ T7495] F2FS-fs (loop1): build fault injection rate: 14 [ 399.028199][ T7495] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 399.042821][ T7495] F2FS-fs (loop1): invalid crc value [ 399.130509][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 399.156192][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 399.491292][ T7495] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 399.501167][ T7495] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 399.541306][ T7493] vlan2: entered allmulticast mode [ 399.546934][ T7493] batadv0: entered allmulticast mode [ 399.579384][ T7495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 400.425584][ T7502] loop3: detected capacity change from 0 to 4096 [ 401.639508][ T7507] loop0: detected capacity change from 0 to 40427 [ 401.706194][ T7507] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 401.715084][ T7507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 401.747670][ T7507] F2FS-fs (loop0): invalid crc value [ 402.101256][ T7507] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 402.139126][ T88] ntfs3(loop3): ino=5, mi_enum_attr [ 402.169365][ T7507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 402.178623][ T7507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 402.815530][ T7519] loop3: detected capacity change from 0 to 128 [ 402.895547][ T7519] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 402.970658][ T7519] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 402.979628][ T7519] FAT-fs (loop3): Filesystem has been set read-only [ 403.107760][ C1] bridge0: port 3(team0) entered learning state [ 403.474136][ T7527] netlink: 'syz.5.463': attribute type 9 has an invalid length. [ 403.564698][ T7527] netlink: 'syz.5.463': attribute type 9 has an invalid length. [ 403.942622][ T7529] loop3: detected capacity change from 0 to 1024 [ 403.988734][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 404.684302][ T7538] Bluetooth: MGMT ver 1.23 [ 404.923593][ T30] audit: type=1326 audit(1761866511.041:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 404.946706][ T30] audit: type=1326 audit(1761866511.041:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.183706][ T30] audit: type=1326 audit(1761866511.141:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.212080][ T30] audit: type=1326 audit(1761866511.141:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.236880][ T30] audit: type=1326 audit(1761866511.141:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.260007][ T30] audit: type=1326 audit(1761866511.171:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.283883][ T30] audit: type=1326 audit(1761866511.181:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.312258][ T30] audit: type=1326 audit(1761866511.181:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.336828][ T30] audit: type=1326 audit(1761866511.201:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.360559][ T30] audit: type=1326 audit(1761866511.201:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cd98efc9 code=0x7ffc0000 [ 405.785190][ T7541] loop5: detected capacity change from 0 to 32768 [ 405.966514][ T7541] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.096985][ T7565] loop6: detected capacity change from 0 to 64 [ 406.160684][ T7541] XFS (loop5): Ending clean mount [ 406.181657][ T7541] XFS (loop5): Quotacheck needed: Please wait. [ 406.222821][ T7541] XFS (loop5): Quotacheck: Done. [ 406.446973][ T6251] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.896960][ T5427] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 407.109369][ T5427] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 407.118674][ T5427] usb 4-1: config 1 has no interface number 0 [ 407.125264][ T5427] usb 4-1: config 1 interface 105 has no altsetting 0 [ 407.175402][ T5427] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 407.185794][ T5427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.197043][ T5427] usb 4-1: Product: syz [ 407.201832][ T5427] usb 4-1: Manufacturer: syz [ 407.208821][ T5427] usb 4-1: SerialNumber: syz [ 407.967684][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 407.984746][ T7588] netlink: 'syz.5.477': attribute type 30 has an invalid length. [ 408.115802][ T3654] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.184383][ T4192] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.198374][ T4192] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.235723][ T4192] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.340038][ T5427] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 408.367016][ T5427] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 408.403160][ T5427] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 408.506088][ T5427] usb 4-1: USB disconnect, device number 5 [ 408.514891][ T5427] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 408.637412][ T5427] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 408.647721][ T5427] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 408.658319][ T5427] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 409.343664][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 409.920196][ T7606] vlan2: entered allmulticast mode [ 409.925672][ T7606] dummy0: entered allmulticast mode [ 409.939400][ T7606] bridge0: port 4(vlan2) entered blocking state [ 409.946576][ T7606] bridge0: port 4(vlan2) entered disabled state [ 409.957907][ T7606] vlan2: entered promiscuous mode [ 409.963453][ T7606] dummy0: entered promiscuous mode [ 409.973223][ T7606] bridge0: port 4(vlan2) entered blocking state [ 409.981504][ T7606] bridge0: port 4(vlan2) entered listening state [ 411.768130][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.778386][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.193411][ T7633] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 412.212064][ T7633] overlayfs: overlapping lowerdir path [ 412.718353][ T7626] loop0: detected capacity change from 0 to 65536 [ 412.769214][ T7626] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 412.999376][ T7626] XFS (loop0): Ending clean mount [ 413.045124][ T7626] syz.0.503: attempt to access beyond end of device [ 413.045124][ T7626] loop0: rw=4096, sector=1443212090671103, nr_sectors = 1 limit=65536 [ 413.167263][ T5801] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 414.759096][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 414.762853][ T7672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'. [ 414.847763][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.6.520'. [ 415.513888][ T7681] loop6: detected capacity change from 0 to 128 [ 415.666624][ T7681] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.767883][ T7681] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 415.802599][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.832304][ T7687] loop3: detected capacity change from 0 to 128 [ 416.333318][ T6876] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.697206][ T7699] process 'syz.5.530' launched './file2' with NULL argv: empty string added [ 416.758932][ T7701] loop6: detected capacity change from 0 to 1024 [ 416.774579][ T7701] EXT4-fs: Ignoring removed oldalloc option [ 416.787857][ T7701] EXT4-fs: Ignoring removed bh option [ 416.950756][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.126946][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 417.127037][ T30] audit: type=1800 audit(1761866523.271:145): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.531" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 417.177623][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 417.372412][ T7701] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.531: Allocating blocks 449-513 which overlap fs metadata [ 417.415710][ T7701] EXT4-fs (loop6): pa ffff8881206441c0: logic 0, phys. 257, len 16 [ 417.424591][ T7701] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 8, pa_free 12 [ 418.129652][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.483383][ T7718] loop0: detected capacity change from 0 to 32768 [ 418.539884][ T7718] xfs: Deprecated parameter 'attr2' [ 418.547860][ T7718] XFS: attr2 mount option is deprecated. [ 418.607721][ T7718] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 418.968912][ T7718] XFS (loop0): Ending clean mount [ 418.981020][ T7718] XFS (loop0): Quotacheck needed: Please wait. [ 419.079989][ T7718] XFS (loop0): Quotacheck: Done. [ 419.139968][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.148486][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.272008][ T5801] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 420.042508][ T7755] loop6: detected capacity change from 0 to 128 [ 420.120321][ T7755] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.134347][ T7755] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.598191][ T7765] input: syz0 as /devices/virtual/input/input8 [ 420.687632][ T6876] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.140931][ T7771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 421.684304][ T7782] hsr0: entered promiscuous mode [ 421.726191][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 421.757702][ T7782] hsr_slave_0: left promiscuous mode [ 421.787458][ T7782] hsr_slave_1: left promiscuous mode [ 421.884049][ T7782] hsr0 (unregistering): left promiscuous mode [ 422.127652][ T5427] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 422.317211][ T5427] usb 6-1: Using ep0 maxpacket: 16 [ 422.338114][ T5427] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.348751][ T5427] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.424057][ T5427] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.433697][ T5427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.442901][ T5427] usb 6-1: Product: syz [ 422.447458][ T5427] usb 6-1: Manufacturer: syz [ 422.452850][ T5427] usb 6-1: SerialNumber: syz [ 422.814215][ T5427] usb 6-1: 0:2 : does not exist [ 422.893362][ T5427] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 423.038325][ T5427] usb 6-1: USB disconnect, device number 2 [ 423.107130][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 423.622085][ T7795] loop0: detected capacity change from 0 to 8192 [ 423.626307][ T5890] Process accounting resumed [ 424.815347][ T7824] loop1: detected capacity change from 0 to 2048 [ 424.935099][ T7824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.949154][ T7824] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.114645][ T7833] batadv_slave_1: entered promiscuous mode [ 425.167812][ T7831] batadv_slave_1: left promiscuous mode [ 425.191784][ T7836] loop0: detected capacity change from 0 to 1024 [ 425.225673][ T7837] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.578: bg 0: block 345: padding at end of block bitmap is not set [ 425.295592][ T7837] EXT4-fs (loop1): Remounting filesystem read-only [ 425.396234][ T30] audit: type=1800 audit(1761866531.541:146): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 425.631620][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.980191][ T4023] hfsplus: b-tree write err: -5, ino 4 [ 426.132712][ T7849] netlink: 'syz.3.586': attribute type 39 has an invalid length. [ 426.161539][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.236936][ T7849] bridge_slave_0 (unregistering): left allmulticast mode [ 426.244341][ T7849] bridge_slave_0 (unregistering): left promiscuous mode [ 426.252267][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.358705][ T7851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 427.251513][ T7864] loop6: detected capacity change from 0 to 256 [ 427.397379][ T7864] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 427.691055][ T7871] loop3: detected capacity change from 0 to 512 [ 427.803339][ T7871] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.596: ea_inode with extended attributes [ 427.895581][ T7871] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.596: error while reading EA inode 11 err=-117 [ 427.970160][ T7871] EXT4-fs (loop3): 1 orphan inode deleted [ 427.982434][ T7871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.368992][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.766959][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.006048][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 429.082201][ T5890] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 429.091849][ T5890] usb 7-1: config 0 has no interface number 0 [ 429.099134][ T5890] usb 7-1: config 0 interface 250 has no altsetting 0 [ 429.305343][ T5890] usb 7-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 429.315547][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.324403][ T5890] usb 7-1: Product: syz [ 429.329022][ T5890] usb 7-1: Manufacturer: syz [ 429.335247][ T5890] usb 7-1: SerialNumber: syz [ 429.569039][ T5890] usb 7-1: config 0 descriptor?? [ 429.666352][ T7892] loop3: detected capacity change from 0 to 32768 [ 429.693369][ T5890] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 429.737565][ T7892] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 429.755354][ T7896] loop1: detected capacity change from 0 to 2048 [ 429.862502][ T7896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.898263][ T7892] XFS (loop3): Ending clean mount [ 429.918359][ T7892] XFS (loop3): Quotacheck needed: Please wait. [ 429.939856][ T30] audit: type=1800 audit(1761866536.091:147): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.608" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 429.967669][ T5881] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 430.005703][ T7892] XFS (loop3): Quotacheck: Done. [ 430.166308][ T5807] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.216620][ T5881] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 430.226684][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.298845][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.317974][ T5881] usb 1-1: config 0 descriptor?? [ 430.366735][ T5881] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 430.449551][ T5890] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 430.654691][ T5890] usb 7-1: USB disconnect, device number 2 [ 430.784529][ T5881] cpia1 1-1:0.0: unexpected state after lo power cmd: 1a [ 431.204409][ T7916] gretap0: entered promiscuous mode [ 431.394398][ T5881] gspca_cpia1: usb_control_msg 05, error -71 [ 431.407166][ T5881] cpia1 1-1:0.0: unexpected systemstate: 1a [ 431.474265][ T5881] usb 1-1: USB disconnect, device number 5 [ 432.669470][ T7920] loop1: detected capacity change from 0 to 32768 [ 433.136800][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 433.186488][ C1] bridge0: port 3(team0) entered forwarding state [ 433.194787][ C1] bridge0: topology change detected, propagating [ 433.242986][ T7935] loop6: detected capacity change from 0 to 256 [ 433.281911][ T7935] exfat: Deprecated parameter 'namecase' [ 433.291275][ T7935] exfat: Deprecated parameter 'namecase' [ 433.363805][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 433.516532][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.528887][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.540372][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.551522][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.587116][ T7937] sctp: [Deprecated]: syz.3.621 (pid 7937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.587116][ T7937] Use struct sctp_sack_info instead [ 433.659191][ T5890] usb 1-1: config 0 descriptor?? [ 433.665596][ T7935] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 433.699080][ T5890] hub 1-1:0.0: USB hub found [ 433.914873][ T5890] hub 1-1:0.0: 1 port detected [ 434.562436][ T5890] hub 1-1:0.0: activate --> -90 [ 434.624386][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.779811][ T11] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 434.789986][ T5881] usb 1-1: USB disconnect, device number 6 [ 435.092768][ T7947] loop3: detected capacity change from 0 to 512 [ 435.521575][ T7947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.537657][ T7947] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.902339][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.619031][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.651652][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.672159][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.695794][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.712660][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.411832][ T7960] loop0: detected capacity change from 0 to 65536 [ 438.470259][ T7960] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 438.584850][ T7983] loop5: detected capacity change from 0 to 256 [ 438.941267][ T7960] XFS (loop0): Ending clean mount [ 438.955508][ T7960] XFS (loop0): Quotacheck needed: Please wait. [ 439.008237][ T7960] XFS (loop0): Quotacheck: Done. [ 439.185833][ T5801] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 439.987668][ T7967] chnl_net:caif_netlink_parms(): no params data found [ 440.116470][ T5881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 440.228831][ C1] bridge0: port 4(vlan2) entered learning state [ 440.378634][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.389516][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.468862][ T5095] Bluetooth: hci3: command tx timeout [ 440.475576][ T5881] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 440.485357][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 440.494171][ T5881] usb 4-1: SerialNumber: syz [ 440.652926][ T8012] loop5: detected capacity change from 0 to 1024 [ 440.693623][ T8012] EXT4-fs: Ignoring removed orlov option [ 440.726778][ T8012] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 440.801990][ T5881] usb 4-1: 0:2 : does not exist [ 440.888034][ T5881] usb 4-1: USB disconnect, device number 6 [ 440.921061][ T8012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.050145][ T8019] loop1: detected capacity change from 0 to 256 [ 441.082992][ T8019] exfat: Deprecated parameter 'namecase' [ 441.089742][ T8019] exfat: Deprecated parameter 'utf8' [ 441.235145][ T8019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 441.327803][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.373247][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.381304][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.389414][ T7967] bridge_slave_0: entered allmulticast mode [ 441.399591][ T7967] bridge_slave_0: entered promiscuous mode [ 441.419460][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.431889][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.440532][ T7967] bridge_slave_1: entered allmulticast mode [ 441.450759][ T7967] bridge_slave_1: entered promiscuous mode [ 441.883498][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.949323][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.361974][ T7967] team0: Port device team_slave_0 added [ 442.398169][ T8027] vivid-000: disconnect [ 442.424022][ T8025] vivid-000: reconnect [ 442.440085][ T7967] team0: Port device team_slave_1 added [ 442.559991][ T5095] Bluetooth: hci3: command tx timeout [ 442.839835][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.847363][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.873882][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.947324][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.954508][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.980971][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.567303][ T7967] hsr_slave_0: entered promiscuous mode [ 443.578728][ T7967] hsr_slave_1: entered promiscuous mode [ 443.588474][ T7967] debugfs: 'hsr0' already exists in 'hsr' [ 443.594441][ T7967] Cannot create hsr debugfs directory [ 444.626751][ T5095] Bluetooth: hci3: command tx timeout [ 444.934271][ T7967] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.064307][ T7967] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 445.098044][ T7967] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 445.218475][ T7967] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 445.319965][ T8069] loop0: detected capacity change from 0 to 256 [ 445.555725][ T8069] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 446.318087][ T8083] input: syz1 as /devices/virtual/input/input10 [ 446.377662][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.606860][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.687477][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.695425][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.721688][ T5095] Bluetooth: hci3: command tx timeout [ 446.792968][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.801237][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.543407][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz.5.688'. [ 449.077054][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.387746][ T8121] netlink: 277 bytes leftover after parsing attributes in process `syz.5.690'. [ 449.766640][ T8130] loop1: detected capacity change from 0 to 512 [ 449.883020][ T8130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.896875][ T8130] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.938098][ T30] audit: type=1800 audit(1761866556.091:148): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 449.967798][ T30] audit: type=1800 audit(1761866556.091:149): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.693" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 450.150275][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.069321][ T8146] overlay: filesystem on ./bus is read-only [ 451.523740][ T7967] veth0_vlan: entered promiscuous mode [ 451.663936][ T7967] veth1_vlan: entered promiscuous mode [ 451.956082][ T7967] veth0_macvtap: entered promiscuous mode [ 451.997988][ T7967] veth1_macvtap: entered promiscuous mode [ 452.123629][ T30] audit: type=1800 audit(1761866558.271:150): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.703" name="nullb0" dev="tmpfs" ino=890 res=0 errno=0 [ 452.190129][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.272193][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.354358][ T4329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.402248][ T4329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.431577][ T8162] loop5: detected capacity change from 0 to 256 [ 452.496358][ T4329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.522559][ T4329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.578120][ T8162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 454.260802][ T8169] loop5: detected capacity change from 0 to 40427 [ 454.336705][ T8169] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 454.344967][ T8169] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 454.399827][ T8169] F2FS-fs (loop5): invalid crc value [ 454.770779][ T8169] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 454.840966][ T8169] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 454.849323][ T8169] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 455.698882][ T8195] loop1: detected capacity change from 0 to 256 [ 458.777377][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 459.003084][ T5890] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 459.014766][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.051356][ T5890] usb 2-1: config 0 descriptor?? [ 459.095290][ T5890] gspca_main: spca508-2.14.0 probing 8086:0110 [ 459.303553][ T5890] gspca_spca508: reg_read err -32 [ 459.323113][ T5890] gspca_spca508: reg_read err -32 [ 459.342548][ T5890] gspca_spca508: reg_read err -32 [ 459.567649][ T8241] veth0_to_hsr: entered promiscuous mode [ 459.584787][ T8241] veth0_to_hsr: entered allmulticast mode [ 459.607094][ T5890] gspca_spca508: reg_read err -71 [ 459.614343][ T8240] veth0_to_hsr: left allmulticast mode [ 459.621638][ T8240] veth0_to_hsr: left promiscuous mode [ 459.626640][ T5890] gspca_spca508: reg write: error -71 [ 459.633794][ T5890] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 459.695077][ T5890] usb 2-1: USB disconnect, device number 4 [ 459.727920][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.737147][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.877949][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.893272][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.277361][ T8248] ===================================================== [ 460.284876][ T8248] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xcc/0x120 [ 460.293765][ T8248] _copy_to_user+0xcc/0x120 [ 460.302091][ T8248] copy_siginfo_to_user+0x3f/0x140 [ 460.308362][ T8248] x64_setup_rt_frame+0x1392/0x2590 [ 460.313846][ T8248] arch_do_signal_or_restart+0x5db/0xb90 [ 460.320042][ T8248] exit_to_user_mode_loop+0xe7/0x370 [ 460.325560][ T8248] do_syscall_64+0x1e3/0xfa0 [ 460.330830][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.337846][ T8248] [ 460.340330][ T8248] Uninit was created at: [ 460.345110][ T8248] kmem_cache_free+0x2b0/0x1490 [ 460.350517][ T8248] __sigqueue_free+0x23a/0x270 [ 460.355524][ T8248] __dequeue_signal+0x66b/0x970 [ 460.360927][ T8248] dequeue_signal+0x1c0/0x840 [ 460.365832][ T8248] get_signal+0xbf6/0x2a20 [ 460.370852][ T8248] arch_do_signal_or_restart+0x53/0xb90 [ 460.377137][ T8248] exit_to_user_mode_loop+0xe7/0x370 [ 460.384755][ T8248] do_syscall_64+0x1e3/0xfa0 [ 460.391820][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.400869][ T8248] [ 460.403443][ T8248] Bytes 12-15 of 48 are uninitialized [ 460.409752][ T8248] Memory access of size 48 starts at ffff88806111fde0 [ 460.417429][ T8248] Data copied to user address 00007f904ceb9bb0 [ 460.423727][ T8248] [ 460.426412][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.5.733 Not tainted syzkaller #0 PREEMPT(none) [ 460.436169][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.447691][ T8248] ===================================================== [ 460.455101][ T8248] Disabling lock debugging due to kernel taint [ 460.461854][ T8248] Kernel panic - not syncing: kmsan.panic set ... [ 460.468549][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.5.733 Tainted: G B syzkaller #0 PREEMPT(none) [ 460.479739][ T8248] Tainted: [B]=BAD_PAGE [ 460.484096][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.494463][ T8248] Call Trace: [ 460.497848][ T8248] [ 460.500887][ T8248] __dump_stack+0x26/0x30 [ 460.507829][ T8248] dump_stack_lvl+0x53/0x270 [ 460.513214][ T8248] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.519450][ T8248] dump_stack+0x1e/0x25 [ 460.523840][ T8248] vpanic+0x435/0xd30 [ 460.528212][ T8248] panic+0x15d/0x160 [ 460.532738][ T8248] kmsan_report+0x31c/0x320 [ 460.537642][ T8248] ? copy_fpstate_to_sigframe+0x1121/0x13d0 [ 460.544009][ T8248] ? kmsan_internal_check_memory+0x16c/0x230 [ 460.550337][ T8248] ? kmsan_copy_to_user+0xf1/0x190 [ 460.555681][ T8248] ? _copy_to_user+0xcc/0x120 [ 460.560593][ T8248] ? copy_siginfo_to_user+0x3f/0x140 [ 460.566246][ T8248] ? x64_setup_rt_frame+0x1392/0x2590 [ 460.572171][ T8248] ? arch_do_signal_or_restart+0x5db/0xb90 [ 460.578218][ T8248] ? exit_to_user_mode_loop+0xe7/0x370 [ 460.583862][ T8248] ? do_syscall_64+0x1e3/0xfa0 [ 460.588910][ T8248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.595172][ T8248] ? stack_depot_save_flags+0x35/0x7b0 [ 460.600828][ T8248] ? kmsan_get_metadata+0xfb/0x160 [ 460.606180][ T8248] ? kmsan_internal_check_memory+0x9c/0x230 [ 460.612381][ T8248] ? copy_fpstate_to_sigframe+0x126f/0x13d0 [ 460.618504][ T8248] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.624798][ T8248] ? kmsan_get_metadata+0xfb/0x160 [ 460.630959][ T8248] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.636988][ T8248] kmsan_internal_check_memory+0x16c/0x230 [ 460.643105][ T8248] kmsan_copy_to_user+0xf1/0x190 [ 460.648287][ T8248] _copy_to_user+0xcc/0x120 [ 460.653365][ T8248] copy_siginfo_to_user+0x3f/0x140 [ 460.658658][ T8248] x64_setup_rt_frame+0x1392/0x2590 [ 460.664112][ T8248] arch_do_signal_or_restart+0x5db/0xb90 [ 460.670302][ T8248] exit_to_user_mode_loop+0xe7/0x370 [ 460.676508][ T8248] do_syscall_64+0x1e3/0xfa0 [ 460.681402][ T8248] ? irqentry_exit+0x16/0x60 [ 460.686746][ T8248] ? clear_bhb_loop+0x40/0x90 [ 460.692255][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.700277][ T8248] RIP: 0033:0x7f904bf8efc9 [ 460.706191][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.729786][ T8248] RSP: 002b:00007f904ceba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.741083][ T8248] RAX: 0000000000000004 RBX: 00007f904c1e5fa0 RCX: 00007f904bf8efc9 [ 460.752829][ T8248] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000011 [ 460.762222][ T8248] RBP: 00007f904c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.775350][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.785352][ T8248] R13: 00007f904c1e6038 R14: 00007f904c1e5fa0 R15: 00007ffe40350b48 [ 460.795583][ T8248] [ 460.799367][ T8248] Kernel Offset: disabled [ 460.804306][ T8248] Rebooting in 86400 seconds..