last executing test programs: 2m11.31977859s ago: executing program 4 (id=330): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000001c0)) 2m11.214426281s ago: executing program 4 (id=333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x80}, {0x6}]}, 0x10) 2m11.062253015s ago: executing program 4 (id=336): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040fe1e000004fb00"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) 2m10.935481639s ago: executing program 4 (id=341): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000300)={[{@gid}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3}}, {@zero_size_dir}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_remount}, {@umask}, {@umask={'umask', 0x3d, 0x80}}]}, 0x5, 0x1518, &(0x7f0000002280)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35iGHZZIkhyQ5JEmSJDklJE3ySl4khpCkIQnJYUgOQ0gOE5PG+Xw+JknSJElITsn6rgl/b2/1vf++t+/1v/5z/65rX8+6n7XX2ms9937stbeZ+bbr0FpNaldvRETwb8GLL0kAEAsAAwHgOgAIAKB8XPm4rPqcEpP+vYOwv9bDqVd7BOxq4vxnb5z/7I3zn71x/rM3zn/2xvnP3jj/2Rvnn7HsbPP0gtfzln03fv6fnfH1/3+RzDJjv1xb5sZuf6IJ5z974/z/rxX8d3bi/GdvnP/sjfOfvXH+s4Mcf1jD+c+uLp4TnH/GsrOr/fyZt6u7Xe3zjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY9nDGX6EA4HL5ao+LMcYYY4wxxhhjfx2f42qPgDHGGGOMMcYYY///IQiQoCCAGMgBsZATcoEAgGshD1wHEbge4uAGyAs3Qj7IDwWgIMRDISgMGgxYIAihCBSFKBSD4nATlICSUApKg4MykAA3Q1m4BcrBrVAeboMKcDtUhEpQGarAHVAV7oRqcBdUh7uhBtSEWlAb7oE6cC/UhfugHtwP9eEBaAAPQkN4CBrBw9AYHoEm8Cg0hcegGTSHFtASWv0/tX8BesKL0At6QxL0gb7wEvSD/v/1iQyCV2EwvAbJMASGwuswDN6A4fAmjICRMAregtHwNoyBsTAOxkMKTICJ8A5MgndhMkyBqTANUmE6zID3YCbMgtnwPsyBD2AuzIP5sADS4ENYCIsgHT6CxfAxZMASWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnbALdsMnsAc+hb3wGeyDz/9k+9P/1L4bAgIKFKhQYQzGYCzGYi7MhbkxN+bBPBjBCMZhHObFvJgP82EBLIDxGI+FsTAaNEhIWASLYBSjWByLYwksgaWwFDp0mIAJWBZvwXJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIX34D3YB+tiXayH9bA+1r/8eAobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AETMRE7YkfshJ2wM3bGLtgFu2JX7IbdsTu+kAPwRXwRe2MN0Qf7Yl/sh8k5BuDL+DK+goPwVXwVX8NkHIJD8XV8Hd/A4XgKR+BIHIWjsKp4G8fgWCQxHlMwBSfiRJyEk3AyTsEpOA1TcTrOwBk4E2fhLHwf5+AH+AHOw3m4ANMwDRfiIkzHdFyMpzEDl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7AXagA8BP8FD/FZNyH+3A/7scDeAAP4kHMxEw8hIfwMB7GI3gEj+JRPIbH8QQex5N4Ek/haTyDZ/AcnsPz+Hz81413lVyTDCKLEkrEiBgRK2JFLpFL5Ba5RR6RR0RERMSJOJFX5BX5RD5RQBQQ8SJeFBaFhRFGkAhjAEBERVQUF8VFCVFClBKlhBNOJIgEUVaUFeVEOVFe3CYqiNtFRVFJtHVVRBVRVbRz1cRdorqoLmqImqKWqC1qizqijqgr6op6op6oL+qLBuJB0VD0wQH4sMjKTBMxBJuKodhMNBfy0ve1tRiObURb0U48KUbiCOwgWrtE8YzoKMZgJ/E3MRafE13EeOwq/i66ie6ih3hB9BRtXC/RW0zGPqKvmIb9RH8xQLwsZmJN8T7OyVlLvCaSxRAxVLwuFuAbYrh4U4wQI8Uo8ZYYLd4WY8RYMU6MFyligpgo3hGTxLtispgipoppIlVMFzPEe2KmmCVmi/fFHPGBmCvmifligUgTH4qFYpFIFx+JxeJjkSGWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaInWKX2C0+EXvEp2Kv+EzsE5+L/eILcUB8KQ6Kr0Sm+FocEt+Iw+JbcUR8J46K78UxcVycED+Ik+JHcUqcFmfEWXFO/CTOi5/FBeEFSJRCSqlkIGNkDhkrc8pc8hqZWwaXPt3rZZy8QeaVN8p8Mr8sIAvKeFlIFpZaGmklyVAWkUVlVBaTxeVNsoQsKUvJ0tLJMjJB3izLyltkOXmrLC9vkxXk7bKirCQryyryDllV3ikhcvEYNWRNWUvWlvfIOvJeWVfeJ+vJ+2V9+YBsIB+UDeVDspF8WDaWj8gm8lHZVD4mm8nmsoVsKVvJx2Vr+YRsI9vKdvJJ2V4+JTvIp2WifEZ2lP7SKfKc7CKfl13l32U32V32kD/LC9LLXrK3BOgj+8qXZD/ZXw6QL8uB8hU5SL4qB8vXZLIcIofK1+Uw+YYcLt+UI+RIOUq+JUfLt+UYOVaOk+NlipwgJ8p35CT5rpwsp8ipcppMldPlgEs9zZbyX7Z/53faD/7l6JvkZrlFbpXb5Ha5Q+6Uu+RuuVvukXvkXrlX7pP75H65Xx6QB+RBeVBmykx5SB6Sh+VheUQekUflUXlMHpdn5Q/ypPxRnpKn5Wl5Vp6T5+T5S58BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqoqoYXjphVClVWjlVRiWom/9Me1Vc3aRKqJK/an95fEl/ML5WqpVqrVqrNqqNaqfaqfaqveqgOqhElag6qo6qk+qkOqvOqovqorqqrqqb6qZ6qB6qp+qpeqleKkklqb7qJdVP9VcD1MtqoHpFDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuJT0aFAuKBzcFJYKSQamgdOCCMkFCcHNQNrglKBfcGpQPbgsqBLcHFYNKQeWgSnBHUDW4M6gW3BVUD+4OagQ1g1pB7eCeoE5wb1A3uC+oF9wf1A8eCBoEDwYNg4eCRsHDQePgkaBJ8GjQNHgsaBY0D1oELYNWf2n/3p/K/4TrpXvrJN1H99Uv6X66vx6gX9YD9St6kH5VD9av6WQ9RA/Vr+th+g09XL+pR+iRepR+S4/Wb+sxeqwep8frFD1BT9Tv6En6XT1ZT9FT9TSdqqfrGfo9PVPP0rP1+3qO/kDP1fP0fL1Ap+kP9UK9SKfrj/Ri/bHO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/oPfpTvVd/pvfpz/V+/YU+oL/UB/VXOlN/rQ/pb/Rh/a0+or/TR/X3+pg+rk/oH/RJ/aM+pU/rM/qsPqd/0uf1z/qC9lmL+6zLu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDfFTQlTwpQypYwzziSYBFPWlDXlTDlT3pQ3FUwFU9FUNJVNZXOHucPcae40d5m7zN3mblPT1DS1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0MU1NU9PMNDMtTAvTyrQyrU1r08a0Me1MO9PetDcdTAeTaBJNR9PRdDKdTGfT2XQxXUxX09V0M91MD9PD9DQ9TS/TyySZJNPX9DX9TD8zwAwwA81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap524wxY804M96kmBQz0Uw0k8wkM9lMNlONN6km1cwwM8xMM9PMNrPNHDPHzDVzzXwz36SZNLPQLDTpJt0sNotNhskwS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZbXabPWaP2Wv2mn1mn9lv9psD5oA5aA6aTJNpDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyX/peulNrM1pc9lrbG57rc1jr7P/HBewBW28LWQLW23z2fy/io21toQtaUvZ0tbZMjbB3vybuKKtZCvbKvYOW9Xeaav9Jq5j77V17X22nr3f1rb3/Cqubx+wDeyjtiEigG1uG9uWtol91Da1j9lmtrltYVva9vYp28E+bRPtM7ajffY38UK7yK62a+xau87usZ/aM/asPWy/tefsT7aX7W0H2lfsIPuqHWxfs8l2yG/iUfYtO9q+bcfYsXacHf+beKqdZlPtdDvDvmdn2lm/idPsh3aOTbdz7Tw73y74Jc4aU7r9yC62H9sMu8QutcvscrvCrrSr/musy+wGu9FusrvtJ3ar3Wa32x12p931S5w1j732M7vPfm4P2W/sAfulPWiP2Ez79S9x1vyO2O/sUfu9PWaP2xP2B3vS/mhP2dO/zD9r7j/Yn+0F6y0QEpAkRQHFUA6KpZyUi66h3HQt5aHrKELXUxzdQHnpRspH+akAFaR4KkSFSZMhS0QhFaGiFKVidHmdXopKk6MylEA3U1m6hcrRrVSebqMKdDtVpEpUmarQHVSV7qRqdBdVp7upBtWkWlSb7qE6dC/VpfuoHt1P9ekBakAPUkN6iBrRw9SYHqEm9Cg1pceoGTWnFtSSWtHj1JqeoDbUltrRk9SenqIO9DQl0jPUkZ6lTvQ36kzPURd6nrrS36kbdace9AL1pBepF/WmJOpDfekl6kf9aQC9TAPpFRpEr9Jgeo2SaQgNpddpGL1Bw+lNGkEjaRS9RaPpbRpDY2kcjacUmkAT6R2aRO/SZJpCU2kapdJ0mkHv0UyaRbPpfZpDH9BcmkfzaQGl0Ye0kBZROn1Ei+ljyqAltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBO2kX7aZPaA99SnvpM9pHn9N++oIO0Jd0kL6iTPqaDtE3dJi+pSP0ne9N39MxOk4n6Ac6ST/SKTpNZ+gsnaOf6Dz9TBfIE4QYilCGKgzCmDBHGBvmDHOF14S5w2vDPOF1YSS8PowLbwjzhjeG+cL8YYGwYBgfFgoLhzo0oQ0pDMMiYdEwGhYLi4c3hSXCkmGpsHTowjJhQnhzWDa8JSwX3hqWD28LK4S3hxXDSuGj91cJ7wirhneG1cK7wurh3WGNsGZYK6wd3hPWCe8N64b3hfXC+8Ny4QNhg/DBsGH4UNgofDhsHD4SNgkfDZuGj4XNwuZhi7Bl2Cp8PGwdPhG2CduG7cInw/bhU2GH8OkwMXwm7Bg++0v9A4v+uD4p7BP2DV8KXwq9v0/Ojy6IpkU/jC6MLoqmRz+KLo5+HM2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel87Bzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qKumCvubnIlXElXypV2zpVxCa6la+VaudbuCdfGtXXt3JPuSfeUe8o97Z52z7iO7lnXyf3NdXbPuS7ueRUD4Lq57q6He8H1dBPyXPxOJrm+rq/r5/q5AW6AG+gGukFukBvsBrtkl+yGuqFumBvmhrvhboTLCQCj3Gg32o1xY9w4N86luBQ30U10k9wkN9lNdlPdVJfqUt0MN8PNdDNd1VkXjzLXzXXz3XyX5tLcQpe1Zkx3i91il+Ey3FK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdTrfT7Xa73R5/3cVO3T633+13B9wBd9B95TLd1+6Q+8Yddt+6I+47d9R974654+6E+8GddD+6U+60O+POunPuJ3fe/ewuOO9SIhMiEyPvRCZF3o1MjkyJTI1Mi6RGpkdmRN6LzIzMisyOvB+ZE/kgMjcyLzI/siCSFvkwsjCyKJIe+SiyOPJxJCOyJLI0siyyPLIi4n2hraEv4ov6qC/mi/ubfAlf0pfypb3zZXyCv9mX9bf4cv5WX97f5iv4231FX8lX9o/5Zr65b+Fb+lb+cd/aP+Hb+La+nX/St/dP+Q7+aZ/on/Ed/bO+k/+b7+yf8138876r/7vv5rv7Hv4F39O/6Hv53j7J9/F9/Uu+n+/vB/iX/UD/ih/kX/WD/Ws+2Q/xQ/3rfph/ww/3b/oRfqQfFfOWH335FhnG+xQ/wU/07/hJ/l0/2U/xU/00n+qn+xn+PT/Tz/Kz/ft+jv8Akvw8P98v8Gn+Q7/QL/Lp/iO/2H/sM/ySy49Q/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9p/4Pf5Tv9d/5vf5z/1+/4U/4L/0B/1XPtN/7Q/5b/xh/60/4r/zR/33/pg/7k/4H/xJ/6M/5U/7M/6sP+d/8uf9z/4C/84aY4wxxth/y4QrRfF79X1+5z3xDzv3BYBrtxXM/Mf6rBXl+nwXy/1FfPsIADzTu+vDl7caNZKSki7tmyEhKDoP4PL/BGWJgSvxEmgHT0EitIWyvzv+/qL7OfoX/UdvA8j1D21i4Up8pf8v/qD/x58ctbBCeCbu/9L/PIASRa+0ybpPuhwvgXYq67UtlPuD/vO3/hfjz/llCkCbf2iTG67EV8afAE/As5D4qz0ZY4wxxhhjjLGL+ovKnS/ff17+ic/fuz+PV1fa5IAr8b+6P2eMMcYYY4wxxtjV91z3Hk8/fk2xtp1/KSQm/olCtT+zMxd+r+Dhf8QwLha8B7j8jgKAf7NDgP/4LLb8R46VfOmr889Vy8/6AP5npPKvKFzlf5gYY4wxxhhjf7kri/5fv6+u1oAYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFs6D/x58Su9hwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+3/BAAA///vPAgR") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m10.566432338s ago: executing program 4 (id=347): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xfff) 2m10.202630645s ago: executing program 4 (id=352): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m10.091835159s ago: executing program 32 (id=352): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1m37.58051069s ago: executing program 2 (id=835): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 1m34.754350179s ago: executing program 2 (id=864): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040fe1e000004fb00"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) 1m34.005076256s ago: executing program 2 (id=871): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000880)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty=0x3000000}, 0x10, 0x0}}], 0x2, 0x0) 1m33.924536419s ago: executing program 2 (id=872): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000300)={[{@gid}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3}}, {@zero_size_dir}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_remount}, {@umask}, {@umask={'umask', 0x3d, 0x80}}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m33.663725214s ago: executing program 2 (id=874): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x11, 0x5fbc, &(0x7f0000003100)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7ptzjHseeru45v580rvr6dE1/5f/UdPdUVVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv463XAw4jMxiOhHrNb1kahnzuf7DyPiUGwNx3MRMViOqJff+ueZiDMR8dGBiDt3b6zXN5/aZR9nT1y/+sn3v/OP3/3p1qGfvvmTD9rjP/rs6Q9/fzPi4A9f+/CTm09m3QEAAKAUVVVVvfQ2/3B6f9/vuikAYCby83+V5NvVarVa/UTrP/bnq5/d1ysxX/2oH6tuqia72SwiYrO5TP2awe54AFgwm/Fx1y3QIfkXbRgRT3XdBDDXel03wJ64c/fGei/l22s+HxwZj+e/U27Lf7N37/yOnabTtI8xmdXP160YxLM79LM6ox7mSc6/387/4nh8lO631/nPyk75j8anPhUn5z9o59+yLf8/R8TC5t+fmH+pcv7DR8l/c7DA27/8AQAAAADY//Lf/w92vP93+fFXZVcetv/3yIx6AAAAAAAAAIAn7XGv/3eP6/8BAADA3Krfq9f+cuD+bc1j/dvzF3oRT7fuDxQmnSyz1nUfAAAAAAAAAAAAAFCS4fgY3gu9iKWIeHptraqq+qupXT+qx11+0ZW+/lCyrn/JAwDA2EcHWufy9yJWIuJC+qy/pbW1tapaWV2r1qrV5fx6drS8Uq023tfmaX3b8mgXL4iHo6r+ZiuN5ZqmvV+eNt7+fvVjjarBLhqbjQ4DB4CIGD8b3fGMtM9U1TPR9ascFoPtf/+x/bMbXf+cAgAAAHuvqqqqlz7O+3Da59/vuikAYBZW8vN/e7+AWq1Wq9Xq/Vc3VZPdbBYRsdlcpn7N4HL8ALBgNuPjrlugQ/Iv2jAiDnXdBDDXel03wJ64c/fGei/l22s+H6Tru+djQbblv9nbWi4vP2k6TfsYk1n9fN2KQTy7Qz/PzaiHeZLz77fzvzgeH6X77XX+s7JT/vV6Huygn67l/Aft/Fv2T/79ifmXKuc/fKT8B/IHAAAAAIA5lv/+f9D+37zKAAAAAAAAALBw7ty9sZ7Pe837/z8/4X695pzzP/eNnH9v1/k7/3c/yfn32/m3DsgZNOZvv3E//3/fvbH+wfV/fS5P5z7/pcGofuylXn8wTMf8VEtvxeW4Ehtx4oH7D7eNn3xgfGnb+Kkp46cfGB/V46t5/Fisxy/iSrx5b3x5yoFRK1PGqynjOf+B7b9IOf9h46vOfy2N91rT2u33+w9s983ppMc5/7f/vvjg1jV7t2Jwb92a6vU72kE/W/8nT43iV9c2rh77zaXr16+ejDTZduupSJMnLOe/lL5y/i+9MB7Pv/eb2+vt90ePnP+8uBXDHfN/oTFfr+/LM+6tCzn/UfrK+ednoMnb/yLnv/P2/0oH/QAAAAAAAAAAAAAAAMDDVFW1dYro+Yg4l87/6ercTABgpv7wgzRTJaEe172Yr37UarVarX4CdVM12evNIla2L3MuIn476ZsBAPPsfxHxz66boDPyL1j+vL96+oWumwFm6tq77/3s0pUrG1evdd0JAAAAAAAAAPBp5et/Hmlc/3nrOKDWdaO3Xf/1jTiysNf/7I8GW9c6Tyv0fDz8+t9H4+HX/x5OebylKeOjKePLU8ZXpoxPPNGjIef/fMo45384rVhJ1399qYN+upbzP5qu9Zzz/1Lrfs38q78ucv79bfkfv/7OL49fe/e9Vy+/c+ntjbc3fn7yxLkzp8+eOX327PG3Ll/ZODH+t8OO91bOP1/72nGgZcn558zlX5ac/xdTLf+y5PxfTLX8y5Lzz6/35F+WnH9+7yP/suT8X061/MuS8/9yquVflpz/K6mWf1ly/l9JtfzLkvN/NdXyL0vO/1iq5V+WnP/xVMu/LDn/vIdL/mXJ+ecjG+Rflpz/qVTLvyw5/9Opln9Zcv5nUi3/suT8z6Za/mXJ+Z9LtfzLkvP/aqrlX5ac/9dSLf+y5PxfS7X8y5Lz/3qq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+eavmX5f7n/5uZ8cx//h4xB22YMTNppuvfTAAAAAAAAAAAAABA2ywOJ+56HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxnfT/ws69eO4H4T0IIwZC14wRDNt5dvyUmGMzrPw0tTQOhpYU6xl6/gN/qXUOCULM0aRtEpEZtL9KLUkAUIbVVIoRUKqUoUpHau+YKlBvUSpFqqUllIqhES7LVmfM8z87Mzs7s2t74zDmfTxT/vDtnZp45c2Z2vmt9ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLb5AzN/PJBlWf5/44+NWXZ1/vf12f78y/k9V3qFAAAAwKV6pfHn316TvrF/BWdq2uaf3/av31tYWFjIPvPy+Vf/bGEhnTCeZUPrsqxxWvQvv/j5QvM2wSPZ2MBg09eDPa5+qMfpwz1OH+lx+miP09f1OH2sx+lLdsAS64vfxzQubGvjrxuLXZpdl400Ttva4VyPDKwbHIy/y2kYaJxnYeRIdjw7kc1kU0vOM9D4L8ue2Zxf191ZvK7BpuvalGXZhZ9+6VBcw0DYx1uzlitraL7vXnpfNv7yT7906NtzL7650+y5G5asNMu2bcnX+WiWLf66KhvI1qV9Etc52LTOTR3WOdSyzoHG+fK/t6/zwgrXGW/3WFjnc13WuSl878Gbsyybz5bdpt0j2WC2oe1a0/4eK46I/DLyu/IN2fCqjpPNKzhO8vO8cHPrcdJ+TMb9vznsk+Fl1tB8d7z05dEl+/1ij5P8VpfhWM0v+978SsfGmn+12nKs5tt86Zblj4GO912HYyAdy03HwJZex8Dg6FDjGBhcXPOWlmNgesl5BrOBxnWdv6X7MTA5d/LM5OxDX7z9+MmDR2eOzpyantqza+fuXTt37548cvzEzFTx5+p2aR/ZkA2mY3BLeK6Jx+Db27ZtPiQXvnH5HgdjJXkc5Lf947fmC7p6MFvmGM+3eXTbpT8O0s/9psfBcNPjoONzaofHwfAKHgf5Nhe2rexn5nDT/53WsFbPhRubjoEr+fMwv85PvWP558JNYV2PvXO1Pw+HlhwD8WYNhMde/p30em/szrBflh4XN+YnXDXaeG23/cGDc3Nnp7MwXhPXNt1X7cfLhqbblC05XgZXfbzs/5tf3npjh+9vDPtq7Lbu91W+za6J7vdV49n9qtHs3OzM2bA/R7Nif7Z8d0cWxmX2Wu/PTj/N8v2ZskSX/Zlv8+jtl/5aMOWSpue/kV7Pf0Mjw8Xz31DaGyMtz39L75qhxsqy7MLtK3v+Gwn/v9bPf9eV5Pkv31ef2t79GMi3eWxytcfAcNfnv5vDHAjreUdIDGNNuf/VxunzxWHadF/2PG6Gh0fCcTMcr7H1uNm55Dz5peXXvW3q4o6bbTe33lctr1tWftz0+vVBaY6bfF/9+VT34ybf5tnpS3/uWB//2vTcMdrrGBgZGs3XO5IOguL5bmF9PAa2Z4ey09mJ7HA6T34v59c1sWNlx8Bo+P+1fu64oSTHQL6vntzR/RjIt/nhzsv72mlb+E7apum1U/vvF5bL/DcOL15e+2673Jk/X+cHf/TR9L1OGSLf5sVdq80Z3ffTbeE7V3XYT+2Pn+WO6cPZa7OfbgjrPLG7+++m8m2u27PC42l/lmXPTz/f+H1X+P3ud8/96Hstv/ft9Dvl56efv2fyvh+vZv0AAFy8Vxt/zo8WrzWb/sV6Jf/+DwAAAPSFmPsHw0zkfwAAAKiMmPuHwkzkfwAAAKiMmPuHw0xqkv+P3bn3qVceztK7AS4E8fS4G+59T7Fd7HjPh6/HFxbl33//t0ae+srDK7vuwSzLfnnPWzpuf+w9cV2FM3Gd72r9/hI33LSi63/g/sXtmt8/4cLe4vLj7VnpYRC7ys9M7mhc7vhD04357D1ZY943/9gjxeUXX8ftz+8stv/L8KYl+48MtJx/W1jP1jDHw3vK3Lt/cT/kM57vqU1v+6drP7F4ffF8A1te37iZT/5+cbnxPaKeuLbYPt7u5db/j1/9zlP59g/e0nn9Dw92Xv/5cLkvhPmLfcX2zfv8K03r/8Ow/nh98Xzbv/mDjut/+k3F9k+H4+LrYbav/31/8tZXOt1f8Xr231WcL17/1H/vapwvXl68/Pb1jz083bI/2i//2ZeLy9n3+Z8NNW8fvx+vJ3rgrtbjeyDcvy098izLvvNHWct+zt5dnO8f2tYfL+/MXZ3Xf1vbOs8M3NQ4/+Lt2dhyu7721zs63t64nv1/t7Hl9jzxobD/Xp78YX655+8Lx2M4/X+eKy6v/c1Inv5Q6/NN3P7rG4vHbby8ybb1P9G2/vmb8n3Xe/13v1ys/+n3rmtZ//4Ph+Pp7mL2Wv/Rv7qm5fzf+HZxf5z9wsSp07Pnjh9u2qvNj+N1Y+s3XHX1615/TXgubf/6wOm5YzNnx6fGp7JsvA/fMnCt1//NMP+rGPOX/xoKP/5Zcdw9/pHi59bbf158/UT4/gPh/ow/H7/2FyMtx2v7/T7/3mJe6vrfGdaxUm/66r/ftKINz3/6mXN//wcvtr8uiLfnzBvHGrfvyc3XN04beLY4vf35qpd/e2Pr4/onw1ON+f2wXxfCOzNvub64vvbLj+9N8vjHisdvfCUXz5+1vZ/IxqHW23Gp6/9JeB3zgxtan//i8fH9h9vezXljNpAvYT48P2Tzxelxq7i/H79wfcfri+/Dk82/eTXLXNbsQ7OTJ46fOvfg5NzM7Nzk7ENfPHDy9LlTcwca71164LO9zr/4+N7QeHwfntmzK2s82k8XY41d6fWfuf/Q4Tumbj08c+TguSNz95+ZOXv00OzsoZnDs7cePHJk5gu9zn/88L7pHXt33rFj4ujxw/vu3Lt3596J46dO58soFtXDnqnPTZw6e6Bxltl9u/ZO7969a2ri5OnDM/vumJqaONfr/I2fTRP5uT8/cXbmxMG54ydnJmaPf3Fm3/TePXt29Hz3x5NnjsyOT549d2ry3OzM2cnitozPNb6d/+zrdX7qYfZ0eL5rMxBenX/ytj3p/XFz3/ryshdVbNL68jR7KbwXVPz51uvrmPtHwkxqkv8BAACgDmLuD2/8v3iC/A8AAACVEXP/ujAT+R8AAAAqI+b+IvmPpY9/r0v+v1z9/y/r/zfo/+v/Z/r/if6//n+m/6//34P+fyn6/8f0//X/9f9ZK2Xr/4fcn63PMv/+DwAAABUVc/+GMBP5HwAAACoj5v6rwkzkfwAAAKiMmPuvDjOpSf73+f/6//r/3fr/cVv9/0z/vwz9/63/qf+/hP6//n+m/3/RrnR/vt/XX8L+/3r9f8qmbP3/mPtfF2ZSk/wPAAAAdRBz/+vDTOR/AAAAKLV1q9g25v5rwkzkfwAAAKiMmPs3hpnUJP9fuf7/qP6//n9Dufv/Pv+/mf7/Fe//+/z/DvT/9f+z2vT/ixcL+v/lWf/a9///tOv5ff4//aBs/f+Y+/9fmElN8j8AAADUQcz9bwgzkf8BAACgMmLuvzbMRP4HAACAyoi5/7owk5rk/3p+/v8LWZbp/2f6//r/bevU/9f/Xwv6//r/3VzZ/n/+2qef+v8+/79s6y/h5//r/1M6Zev/x9z/xjCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7n9TmIn8DwAAAJURc/8NYSY1yf/17P/7/H/9/8Ia9P8HhvX/E/1//f9M/1//vwef/6//38/r1//X/6e3svX/Y+5/c5hJTfI/AAAA1EHM/TeGmcj/AAAAUBkx978lzET+BwAAgMqIuX9TmElN8r/+v/6//r/P/9f/1/9fS/3V/x9c9hT9/4L+f6vL1/+fX1yA/n/frF//X/+f3srW/4+5/61hJjXJ/wAAAFAHMfe/LcxE/gcAAIDKiLn/pjAT+R8AAAAqI+b+8TCTmuR//X/9f/1//X/9f/3/tdRf/f/l6f8X9P9b+fx//X/9f/1/uitb/z/m/s1hJjXJ/wAAAFAHMfdvCTOR/wEAAKAyYu6/OcxE/gcAAIDKiLl/a5hJTfK//r/+v/6//r/+v/7/WtL/1//vRv9f/7+f16//r/9Pb2Xr/8fcf0uYSU3yPwAAANRBzP23hpnI/wAAAFAZMfe/PcxE/gcAAIDKiLl/W5hJTfK//r/+v/5/H/f/h/T/M/3/0uux/v9t+7Gzavr/+v+Z/v9Fu9L9+X5fv/6//j+9la3/H3P/O8JMapL/AQAAoA5i7n9nmIn8DwAAAJURc/9tYSbyPwAAAFRGzP0TYSY1yf8V7/+/+B/LbKb/X9D/7/P+v8//b1m//n85+fx//f9u9P/1//t5/fr/+v/0Vrb+f8z9t4eZ1CT/AwAAQB3E3L89zET+BwAAgMqIuX8yzET+BwAAgMqIuX8qzKQm+b/i/f9l6f8X9P/1/zP9f/3/Nab/r//fjf6//n8/r1//X/+f3srW/4+5fzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP07w0zkfwAAAKiMmPt3hZnUJP/3Sf9/eypA6f/r/+v/6//r//cV/f+K9v/zJxL9f/3/03NpB+v/6//r/zPY4Xtl6//H3L87zKQm+R8AAADqIOb+PWEm8j8AAABURsz9d4SZyP8AAABQGTH33xlmUpP83yf9f5//r/+v/99E/1//v5/o/1e0/+/z/xv0/33+v/6//j/dla3/H3P/3jCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3H9XmIn8DwAAAH2l0+cQRjH3vzvMpCb5X/+/6v3/hXX6//r/+v/d16//v7b0//X/u9H/1//v5/Xr/+v/01vZ+v8x9+8LM6lJ/gcAAIA6iLn/PWEm8j8AAABURsz97w0zkf8BAACgMmLu3x9mUpP8r/9f9f6/z//X/9f/77V+/f+1pf+v/99NJfv/66rf/w8vW/T/S9T/z48h/X/KqGz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPs/EGYi/wMAAEBlxNz/wTCTmuR//X/9f/1//X/9f/3/taT/v2b9/8ZTof5/oVT9f5//r//v8//1/0nK1v+Puf9DYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5//+Hmcj/AAAAUBkx998dZlKT/K//r/+v/6//r/+v/7+W9P99/n83+v/6//28fv1//X96K1v/P+b+XwkzqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6PhJnI/wAAANBnRpc9Jeb+Xw0zqUn+77/+/3hf9v8H0+Xr/+v/6//r/+v/X076//r/mf7/RbvS/fl+X7/+v/4/vZWt/x9z/6+FmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+Xw8zkf8BAACgMmLuvzfMpCb5/3L3/9vP343P/9f/z/T/9f/1//X/L5H+v/5/pv9/0a50f77f16//r/9Pb2Xr/8fc/xthJjXJ/wAAAFAHMfffF2Yi/wMAAEBJHVv1OWLu/1iYifwPAAAAlRFz/8fDTGqS//vv8//1//X/9f/1//X/+4n+v/5/N/r/+v/9vH79f/1/eitb/z/m/vvDTGqS/wEAAKAOYu7/RJiJ/A8AAACVEXP/b4aZyP8AAABQGTH3/1aYSU3yv/6//r/+v/6//r/+/1rS/1/a/8+fw/T/C/r/+v/9vH79f/1/eitb/z/m/k+GmdQk/wMAAEAdxNz/22Em8j8AAABURsz9vxNmIv8DAABAZcTc/6kwk5rkf/1//X/9f/1//X/9/7Wk/+/z/7vR/9f/7+f16//r/9Nb2fr/Mfd/OsykJvkfAAAA6iDm/t8NM5H/AQAAoDJi7j8QZiL/AwAAQGXE3P9AmElN8r/+v/6//r/+v/6//v9a0v/X/+9G/1//v5/Xr/+v/09vZev/x9x/MMxkf+vVAAAAAP0r5v7PhJnU5N//AQAAoA5i7j8UZiL/AwAAQGXE3H84zKQm+V//X/9f/1//X/9f/38t6f/r/3ej/6//38/r1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5/0iYifwPAAAAlRFz/9EwE/kfAAAAKiPm/mNhJjXJ//r/+v/6/7Xt/z/33bZ16v/r/68F/X/9/270//X/+3n9+v/6//RWtv5/zP3Hw0xqkv8BAACgDmLu/2yYifwPAAAAlRFz/+fCTOR/AAAAqIyY+0+EmdQk/+v/6//r/9e2/7+yz/9fv3i9+v/6/xdD/1//vxv9f/3/fl6//r/+P72Vrf8fc//JMJOa5H8AAACog5j7T4WZyP8AAABQGTH3nw4zkf8BAACgMmLuPxNmUpP8r/+/uv7/wDLdQP3/zuvX/69A/7+J/r/+/8XQ/9f/70b/X/+/n9ev/6//T29l6//H3P97YSY1yf8AAABQBzH3nw0zkf8BAACgMmLunw0zkf8BAACgMmLun/s/9u47WbOy2uP4e5vbfZu65RyYgiNwCI7BKqdgTmAEs2LOCXPCrJhzzjnnjGKOVVp0r7WgD332Pk2ft8+zn/X5/MGSAxYPgmX9Cr+145Ym+1//7/v/+n/9v/5f/79P+n/9/xL9v/5/y+/X/+v/WTda/5+7/35xS5P9DwAAAB3k7r9/3GL/AwAAwDRy9z8gbrH/AQAAYBq5+x8YtzTZ//p//b/+X/+v/9f/75P+f6P9/26n/z8C/b/+X/+v/2fZaP1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADTyN3/kLjF/gcAAIBp5O5/aNzSZP/r//X/+n/9v/5f/79P+v+N9v++/38k+n/9v/5f/8+y0fr/3P0Pi1ua7H8AAADoIHf/w+MW+x8AAACmkbv/EXGL/Q8AAADTyN1/bdzSZP/r//X/+v8N9v//q//X/2+H/l//v0T/r//f8vv1//p/1o3W/+fuvy5uabL/AQAAoIPc/Y+MW+x/AAAAmEbu/kfFLfY/AAAATCN3/6Pjlib7X/+v/9f/b7D/9/1//f+G6P/1/0v0//r/Lb9f/6//Z91o/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAANPI3f+4uMX+BwAAgGnk7r8+bmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+s23v/f+8bzt2j9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v6P//8z/6f/2//v+On+v/j4f+X/+/RP+v/9/y+/X/+n/W7b3/X+n9D/567v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADTyN3/lLjF/gcAAIDhnT3i75e7/6kH/11N9r/+X//v+//6f/2//n+f9P/D9v8H/6t3of31/2fu/Cv6f/3/lt+/1P/f6wjv1//TwWj9f+7+p8UtTfY/AAAAdJC7/+lxi/0PAAAA08jdf2PcYv8DAADANHL3PyNuabL/9f/6f/2//v/C/v9Uy/7/9p/p//dD/z9s/7/M9/+PRP+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6/v/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/8vq/yf5/r/+f3/0//r/JUft/3f6//pzOdn+//QFv6b/1//r/1kzWv+fu/+FcUuT/Q8AAADzuf4uP8nd/6K4xf4HAACAaeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fJ/2//n+J7/9vrf+/kP5f/6//Z81o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HJw/5+6kq+6ck60/892Q/+v/9f/n6P/j7+u+n/9/yXQ/+v/dxP2/2cP+ePp/8d6v/5f/8+60fr/3P03xS3++T8AAABMI3f/K+MW+x8AAACmkbv/VXGL/Q8AAADTyN3/6rilyf4/rP+/7f/P/3bf/z8a/f/F36//1//r//X/+v/j6/8v9j9v+v/zZuv/ff9/G+/X/+v/WTda/5+7/zVxS5P9DwAAAB3k7n9t3GL/AwAAwDRy978ubrH/AQAAYBq5+18ftzTZ/8f//f9rTqL/vyOu0//r//X/+v/4+WH9/0H6//3S//v+/xL9v/5/y+/X/+v/WTda/5+7/w1xS5P9DwAAAB3k7n9j3GL/AwAAwDRy978pbrH/AQAAYBq5+98ctzTZ/8ff//v+v/7/Evv/U/r/pP+Pv66+/6//vwT6f/3/Tv9/t510P7/19+v/9f+sG63/z91/87mp12//AwAAQAc3n/vl2d1b4hb7HwAAAKaRu/+tcYv9DwAAANPI3f+2uKXJ/tf/6/9PvP/3/f+i/4+/rvp//f8l0P/r/3f6/7vtpPv5rb9f/6//Z91o/X/u/rfHLU32PwAAAHSQu/8dcYv9DwAAANOI3X/+//xu/wMAAMCU3nnul2d374pbmuz/xv3/NZfb/199p3+t/7/4+/X/x9L/33zw7z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Vv/PeEbr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAmEbu/lviFvsfAAAAppG7/71xS5P937j/n+T7//e5NV6g/5+3//f9/7j6f/3/xej/9f87/f/ddtL9/NbfP07/7/v/jGu0/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy//X/W+//ff9f/6//1/+PTf+v/1+i/9f/b/n9+n/9P+tG6/9z938obmmy/wEAAKCD3P0fjlvsfwAAAJhG7v6PxC32PwAAAEwjd/9H45Ym+1//r//fV/9/+x9E/9+k/79O/7/T/x9K/6//X6L/1/9v+f36f/0/60br/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAmEbu/k/ELfY/AAAATCN3/yfjhnve4+SedLxOH/Lz6M31//p/3//X//v+v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/+n4hb//B8AAACmkbv/03GL/Q8AAADTyN3/mbjF/gcAAIBp5O7/bNzSZP/r//X/+v/N9v9X6/8vfL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/c3FLk/0PAAAAHeTu/3zcYv8DAADANHL3fyFusf8BAABgGrn7vxi3NNn/+n/9v/5/s/2/7/8feL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/S3FLk/0PAAAAHeTu/3LcYv8DAADANHL3fyVusf8BAABgGrn7vxq3NNn/+n/9v/5f/6//1//v0xXv/08d/x9jp//X/x9C/6//1//r/1k2Wv+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMA0cvd/I26x/wEAAGAaufu/Gbc02f8z9/9Lv5v+/zz9v/5/p/8/2P+fyZ/r/4+H7//r/5fo/yfu/88cyxNP7v36f/0/x2K0/j93/7filib7HwAAADrI3f/tuMX+BwAAgGnk7v9O3GL/AwAAwDRy9383bmmy/2fu/5fo/8/T/+v/d/p/3//fM/2//n+J/n/i/t/3//X/cHL9/+ndIf1/7v7vxS1N9j8AAAB0kLv/+3GL/Q8AAADTyN3/g7jF/gcAAIBp5O7/Ydwyz/6/7y0Lv1H/f+z9/7m/ifT/+v+d/l//r/8/R/+v/1+i/9f/b/n9+n/9P+tG+/5/7v4fxS3z7H8AAABoL3f/j+MW+x8AAACmkbv/J3GL/Q8AAADTyN3/07ilyf7X//v+v/6/Vf9/1e5I/X/+J6z/1/9fPv2//n+J/l//v+X36//1/6wbrf/P3f+zuKXJ/gcAAIAOcvf/PG6x/wEAAGAauft/EbfY/wAAADCN3P2/jFua7H/9v/5f/9+q//f9f/3/Faf/1/8v0f/r/7f8/uz/8+87/b/+n7sarf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//1//r//dJ/6//X6L/1/9v+f2+/6//Z91o/X/u/lvjlib7HwAAADrI3f+7uMX+BwAAgGnk7v993GL/AwAAwDRy998WtzTZ//p//f+U/f//6f/1//r/Uej/9f9L9P/6/y2/X/+v/2fdaP1/7v4/xC1N9j8AAAB0kLv/j3GL/Q8AAADTyN3/p7jF/gcAAIBp5O7/c9zSZP/r//X/l97/n64/72H7f9//1//r/4cxb/9/Rv+v/7/s/v/Gm87/WP+/zffr//X/rBut/8/d/5e4pcn+BwAAgA5y9/81brH/AQAAYBq5+/8Wt9j/AAAAMI3c/X+PW5rsf/2//n/K7//r//X/+v9hzNv/+/6//t/3//X/+n/9P2tG6/9z9/8jbmmy/wEAAKCD3P3/jFvsfwAAAJhG7v5/xS32PwAAAEwjd/+/45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9/w0AAP//pQEwbw==") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b142, 0x0) 1m33.048514663s ago: executing program 2 (id=884): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 1m32.895279238s ago: executing program 33 (id=884): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 1m9.876257121s ago: executing program 1 (id=1194): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) 1m9.679419386s ago: executing program 1 (id=1197): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000bc0), 0x0, 0x55a3, &(0x7f0000005640)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDIj2OEfCmbYZVjGMn5sc4uxWUGpNEu2gZo1jhhdeu99Lveey22vzFmGrxdpz3nu5zzPfe7J+eO+L33OjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCKosOJ2e9P63r5yPCaLz/4jx+Pf3z9T8bu3Lf54G0PbHhw3ulht2yfsaR37ZSmuevWNxxufnbvrNujKJHul8j2v+P6b9XfffMd360OAy6dn9nW1pZ6ykzXE5nG0IIH+/oV/iyLoqgqNkBldvt6dqeiYIDcbmPxgP16r3VBdO/EORN2dT4zZlFyfnfxS6dP9WBPYLBkr6vuc9dSMv27InZErp136SUKLtFM//gF97m8CADgU5meSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gQmXGHlprnhHh9kOaZzESFYSXnGatnz3+unYr3j7VjUeNTzLPw0GykqS41z9Wx+mDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBiMvrYkVXLdj22+4Ffttccfv/DWVc/9KX2Q7sWHh9+7eLl21ZN+umMJb1rpzTNXbe+4XDzs3tn3R5Ftel+iUz3xPGWK3+bGj23a8+Ytxp3vlDTW5kdN2yH5B0cvRl2ZoyMouV5le4w7F9roihVWEg3o23FhXvSO98OBQAAAC4lX0n/rsi1M3GwqqCdSKfJRPpfkAmL77UuiO6dOGfCrs5nxixKzu++8PFSJcZLnne8XLs2/XMgM16UN17tecc7Vw+HNuaPE7r1Iz5iPM9fPmrUu+9MrJ/49Smzn7rpuRFdnf/39LRNqT/W1bx01Y099c/fUJT/a/vP/+HMyf8AAAD8Jy6J/B9dPPn/rsWTN735iyErft3a8NSB+m1/bv3Oc9sXnOy+6Ue9r05O3vn4tUX5f0LBUxbl/zDjkP8rogvL/wAAAHAx+2/n/2TROP0bKP83nO6d+YMDb9S1/33Wwt2/euSqhWdO/W3uyZ07hq66q2Vt3SNXF+X/6eXl/yH50w4P/i5MeOXIKJpe/kkFAAAACoT/dz/30ULI65lPDuJ5/fp/XtO899aPvvmNh+/709vv/ubo/pkT1mytm37g1VvqP6783tauovyfLC//V30+LxcAAAAow4tHls+ec6z77JNnXuo8cWhnz4lpT59e09R7qvWylpUrNhx9oyj/p8rL/8MG5+UAAAAA53H/3S8s2/j6K70P7btn9KTuimsaL0vctmXb5KZxn3Rc3nPl1s1F+X9pefl/eHabXfmQ6dQR/gqhdWQUVfftrM4UDkYt1+UKAAAAwGck5PTNHy1bMnr76J6xx049UXPwrUMz/7K6Y9b667qqujZ2LGm8ouh+ASGxl7r/f7jTQVj/X3D/v6L1/3mFzF3/ZroxAAAAAF9Exev5w+3xM99cUOr798td/7+obvzxxK53Pljx1bP7z46at+/7N25YU9/Tc9+4V37/wz9M/aS6KP83l5f/K/O3n+X3/wEAAMAF+F/7/r/FReP0b6D7/zdV9DasWLNn6spNqzfNTyzZX33y4ZV7Ppy36l+Tb32xqeaG/UX5v6W8/B+2I/JfXns4PxtGRtHYvp3s3QR/Hqa7MlZoq8orZE58rMfNoUe20DYsr5C2OtbjayOjaGLfTnOs8P+h0BIrnKnJFnbECkdDIXs95Aq7Y4X2cKVtqclON154ORSyCyzawgqKEbklEbEeH5Tq0Vc4b4/O3JMDAAB8oYTwnM2yVYXNKB5l2xIDHTB8oAMqBjqgcqADhsQOiB9Y6vFoaWEhPH5nx2PrNjRMSr726Ownfvb2843j9j55RV3Pxo9f23L/+O1TWyYX5f8d5eX/cCqGZjal1v9HYf1/9nsNc+v/l4ZCbazQFgqp+B0DUuE5MmH30fActalsjzNjcwUAAAC4pIXPBSoHeR4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwb/buPU6q6k4Q+OmmH3TTNG2ciGacpKMGNCNNY2sYBkdRYzQq0syq4yajgUCDSCOExyqI2oA64xA/42tnzURHUBDZVT/EuBoMRuIiZtRJFBMfgI91dF3X96jEaCbsp/vWKapuddmFgNLO9/tH16n6neetR9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAfwz3HvzySUMXzv6HDxvOvWR11dRF/6Nj9GV/uOpbX3zqH5ct+rcw/xcjztwy76ALj5u/YNq/dCxffcQZIbR2lStLipc9d8VXH2rd67hn7xi4ceaNt9ZvqcrUm4mHfp1/yjN3Lo6tvtg/hLvLQqhIB4bUJYHKzP26WN++dSHsEbYFsiXaapMS6YbDAzUhLAnbAtmqVteEUJcTOGXD/fdd3pm4piaEr4QQqtNtPFOdtFGTDgyqSgK16cD0iiTw262JbOAn5UkAdlh8M2Rf9Kta8zM0dF+uyOuvcqd17NOVHl6fmGgonu/1o3Zxp3JUpR9o3aGnraA6domCt8da77Ze8G4r2M5XeNpyv0hlvqFs3RaqDuUT2yaNn9M+Oz5SHpqa+hSraRc9z0+/PX/C9qR7zeswdqBhp7wOL31sxfR+y0ZfevXmX43ZcFbNATvazadyNmluelerDpnXXK95HqNRPk96wduv4FtSoy9dIYSt55494+tzJp59RJ9bnlz36oMP1m05e86CX5w58bxFF5+84d/nv1Qw/2/46Pl/fDnH2/K83LHVD+uTuXl8pC4m3qxP5uYAAADQa/SGvaYrz3/9r17//trWmYtO//ZbB5/74V6tvx5x/4CqA95Y19R6/sbPv1Iw/28s7fh/PORflzvatSGM6kosGhDC3l2PJ4GVsTvfHRDCl7tSrfmBo1KBtSHs05U4KFtVqkTfWKIxFXi5PhMYlQqsj4HWVGB5DFyRClwcA6tSgQkxsDYVODoGwpT8cXy1PjOOkgM1MTAu2Yir4lkI79TH1lLbalO2KgAAgJ0kMzuszL+bc67DjmaI08tVNT1liGdgF81QnaohPYPNTquK1lDRUw3lPdWQHXfHRw+/oOaynmouOA2jLD/DjWv+8r5FLx72hbF7Tfz84qEXTPnZ+HDW23dXPd685MW39j3i5nUF8//mj57/V3fTkbKC4/8hjO36G3OXZyLt2fi41rwMAAAAwA646I//Yo/al4cc0LDp/bJ756994tEVv9y8xymnvz/u+Nd/eHhN470F8/9RpZ3/H/eJ9MnJHB6JuyGmDgihOT+QVDuyMJAc9e6XCQAAAEBvkD0enz0WPiVzm5yinZ5PF+Zv3c788cD/qG7z//6e/1l7x9Z/fbHsgu+eO6JmwNJ/erVjwgknH33L8d96Z5+KA35ZXjD/by3t/P/a/NukE+tjL64eEELfnMCDsZedgS6NMfD8kfmBzPjXxw2wOFaVOTEhW9XiWGJcDDSnAkuKlXg0W2Lv/EDmyco2vig7jimZEjkBAAAA+MTF3QHxuHw8/7/ljBGn/fX3Zv3twlcePG/1BZf81fCO+SNPuv/pDxvmXrk0bHrziIL5/7jtO/+/ax5ccHp/e78QhlaE0Cf9w4BHapOFAWOgriyTuLc2qatPuqqFtSGM7BxYuqoXMuv/V6TXGHy8JqkqBvbe75a3B3UmltWEMDQ38MS3lx7WmZiTCmQbP60mhC91jjbd+F19k8Yr041f2zeEL+YEslVN6BtCZ2NV6ar+V3XmOgbpqlZVh7BnTiBb1fDqEOYGAHqr+L90Yu6Ds+bOmzq+vb1t5i5MxJ34NWHSlPa2pgnT2ydWF+nTxFSf89YxWlA4plIvfbMps0bR4pWTK0tJZ38o2JzbVmZHfsGZg5n78ctQZdc4D6nMu9uSHvKB+xc2EXK+ShUbcvkuHnJtbiXbnsSC+mP+qtAv9J0zq21m03njZ8+eOSz5W2r2Q5K/8ThTsq2GpbdVbXd9K+HlUXS5rJSPu60G5VYydPa0GUNnzZ03ZMq08ZPbJred03Lon7WMGD78ayOGdg6qOfnbw0gHdVdzaqRbl5Y4rJ040i9U5FTySXxoSEhI9LbEfv9l88Oj91x/zvU/e+3H5/f75mn37n3kzB8eetXUh6r3PXzx7UMOLJj/z/jo+X/81Ikf/Jn1GYod/2+Ih/mTx7cd5h8XA0tKPf7fUOxofvbEgMZUoCMGOhzmBwAA4LMh7o6MezPjTunNt6xft3FJy9wfNLzTcuua9qU33XTfqT+5c+AJXxoc9tpw3QmfK5j/d5T2+/+dtP5/dun6E4ot839QLNFcbP3/9DL/2fX/O4qt/59e5j+7/v+ST2H9/znZQGqTvGP9fwAA4LPgk1v/v8fl/dMXCCjI0OPy/ukLBBRk6HEZ/1IvELDd6/+vefCvv1LVb8wdf9Lym/pLXvu7ew5rPXLd5pl/8qWt6yfed93YW9YUzP+vKG3+b+F+AAAA2H3858uuqTj67LvvaFk3deO4Nwe/++RbSwb1+aDi6IfbR74w8I1bzyuY/y8pbf7/ya//F4qd/99YLNBabGFA6/8BAADQSxVb/++eoS2NfxjT/w9PD/vN8gdvHv3TR37+++X7/fzEn5Xvs+DY52deNqlg/r+qtPl/PO2iPC937M2H9cmadiG9pt2b9dmfDAAAAEDvUB6amipLzJu3MOpRH7/NpzNLgX5UOtf3Xrn27M0vTD/u8dPX/V3NCYP3nDDtglWNfzP8wDs/P+qSPZduOrVg/r+2tPl/3u8yLn1sxfR+y0Zf+uHVm381ZsNZNQdsO/4PAAAA7Dql7pcAAAAAAAAAAAAAAAA+fed2LL7wkWXHvvfN2/9i/yOWvDr4trsO/N2Qfi9dcdUDk1a9cebkrxf8/j+M7SpX7Pf/8bp/8fcFf5SXO7ba8/p/mfunnHj73K4lCx+pD2H/3MDUhVP3CJlr8w/ODdx3xkEDOxML0yXWPHv0S52J76QDxw/53JbOxOGpwLi4SOI+6UC8quKW/qlAXF7x8XQgbo9V6UBVJnBZ/2QcZelt9Updsq3K0ttqY10IA3IC2W11d13SRll6gNekAtkBfi8diAM8ORMoT/fq9n5Jr2KgLha9oV/SKwAAdlvxW2BlmDSlva05foWPt1+oyL+N8pYsW1BYbVmJzW/KLE22eOXkylLSfdLfRbdda7wyVHcOYVjB19XcLGVdo9w5tfSw6f6oyJB7Wu2tvEi5tO3ddFXFR1STjKhpwvT2iZU9Dryl5yyHVPSYZVjBZCc3S3nXJi2hlhL6UsKIStw2JXQ53i8PTU19Urn+PAYbQp6eXhGl/l4/d52/Yq+C3Dy3HXrlW18+5qfPffDPn3+i/zdOq7l91vffPfHXr99/4CFHXDehac2Wgvl/Q2nz/+rccW3JXAygI15Zb+SAEMaVOCIAAAD47LvtolvvOH36+lcmra148rHHppaPOb1y6/w758+7ZOO9i4+/7OAVOxo/7Kzffv83g/f/t2eveumnI/d54Iab/8+Thz3+579/+EcPvVO3ss/Y9wrm/42lzf/jHqzMoeBkb8faeP3/RQNC6Lq0fkMSWBmH+90BIXy5K9UaSyQX1D8hlmhOAivjDpODYolxrflV9Y2BVanAy/WZwNpUYH0MZPZS3BIyu3KurA/hsK7U2PwSM2KJhlRgTAw0pgJNMdCcCvSPgVGpwGv9M4HWVODhGAhT8rfVj/tnthUAAMD2yMyzKvPvhvQ8b1VFTxnKespQ21OG8p4yVPeUodgo4v07YobK1MkrZTmZKtO11qRqKcgQL4a/3f0qyBAezc+ZLljQdDz/IHu+QVl+hit/8Oyp6wdPf2j15mO+NvC2fxyy58HN0+veW3DDU78dc851z//poIL5f3Np8//a/Nuk9fVx/r/t+n9J4MHYvavjqeONMfD8kfmBzI6B9XGyuzhbVWumRGbSvjiWGBUDjanAjBgYlQqMG5sJLBmYH8jMtLONL8o2PiVTIicAAAAAn7i4gyDuponz/xuP+sHV7w+YuGXZvJn3j2154uTR37j6rh/du/+yO99dMXjAuPe+UzD/H1Xa/D+21y+3sYtjb17sH8LdZdt6kw0MqUsCcT9GXfx5/L51IeyRs4MjW6KtNilRlWo4PFCT/EK9Kl3V6ppkjYF4/5QN9993eWfimpoQvpKz9yXbxjPVSRs16cCgqiRQmw5Mr0gCcc9PNvCT8iQAOyy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SrV6Qcy+1Sztu9pK6iOXaLg7bHWu603vtsavNtyv0hlvqFs3RaqDuUT2yaNn9M+Oz6S+0vWArvoec79lWop6Z3wOuz4+L3tWXW6A82pj4/m7st1/zosi9Vd+tiK6f2Wjb706s2/GrPhrJoDSu5GEfGHwj/a8r8rn8rZvLtadci85nrd50mrz5Pe+G+g0dMWQrjs+mP2XfLur/d77obnTl1XduPYV/9y1j2blv9N5eGj1r3/5NDRlxfM/1tLm/9XpG67/C5uzFkDQjgwZ+M+Ejf/MQOSz8GcQPIpuWdhIDnk/q/1RT85AQAAYGfL7u7I7i+YkrlNTghPz5ML87duZ/64v2JUt/lL7fex6zauPGnoG9cd8LcXnPjG3197+FMPXX9Z2brl/33sB6vXXL74vScK5v/jPnr+3zfVTcf/Hf9nF3H8v1u7+67ovukHOnZoV3RBdewSjv93a3d/tzn+3y3H/x3/747j/z1w/L9bu/vTVvAtaYYvXZ2T4Ovv/PnvJt70wdzG/Q4+6alnDp143T9d1XL3Xae88t/OPW/aa9/aXDD/n1Ha/N/6f90v2pdd/29csfX/ZhRb/6/D+n8AAMAuVWShufQ8r2D1voIM6dX7CjL0uEBgj0sMWv9vu9f/Wzjy3y+68IfPt1z7zp3jLl+z6dgzX3163epnZq047tzz32q9667Wgvl/R2nz//hy6Jfbem9Z/69xbJGqroiBGRYGBAAAYHdUbAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn65DT3vn/Uu+/g9tg36x4ua/v/X//d9na9c+8M1v3DT8l1P+9IyyNRuuGXHmlnkHXXjc/AXT/qVj+eojzghhSle5sqR42XNXfPWh1r2Oe/aOgRtn3nhr/ZbqTL2Vmds/zssdW/2wPoQlOY/UxcSb9Z13tgVOOfH2uRWdiUfqQ9g/NzB14dQ9OhPL60MYnBu474yDBnYmFqZLrHn26Jc6E99JB44f8rktnYnDM4GydHev6590tyzd3cv7hzAgJ5Dt7tn986vKtnFcJlCebmNFXdJGDNTFotfWJW3EQHssMaVvCEMrQuiTruqfq5Oq+qSruqc6qapPuqqLqkMYGUKoSFf1XFVSVUV65I9WJVXFwN773fL2oM7E0qoQhuYGnvj20sM6EzNTgWzj/6kqhC91vmTSjf+4Mmm8Mt34f60M4YshhKp0ifcqkhJV6RIvVISwZ05g20asCGFu4LMhfvpMzH1w1tx5U8e3t7fN3IWJqkxbNWHSlPa2pgnT2ydWp/pUTFlOeuuCjz/2TW/Pn9B5u3jl5MpS0hWZcpVdXT6kMu9uy+7e+9iv2txKtj0fBfXH/FWhX+g7Z1bbzKbzxs+ePXNY8rfU7Ickf/tkosm2GtZbttWg3EqGzp42Y+isufOGTJk2fnLb5LZzWg79s5YRw4d/bcTQzkE1J393xkiXfvIj/UJFTiWfxPtfQkKityXK8z7dmnf3z/GCL/rbOloZqrs+oAumFblZyrpGuTMGfdTHHPHH+ZpS1reHEQ0rmDgUZDmk5ywtBZOJbVlqkixdX+sKJoe5NZV3bdJ4vzw0NfUpth0a8u/mbt7Xd2DzPp3ZdKWmAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqMng0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//9+JGl0=") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0x4, @inherit={0x48, &(0x7f0000000240)={0x1, 0x0, 0xa, 0x81, {0x1d, 0x0, 0x800, 0xee4a, 0x2c8f}}}, @subvolid}) 1m7.445116065s ago: executing program 1 (id=1226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 1m6.439446492s ago: executing program 1 (id=1238): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@creator={'creator', 0x3d, "ff54b274"}}]}, 0x9, 0x2d1, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m6.108448475s ago: executing program 1 (id=1240): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x891e, 0x0) 1m5.85678171s ago: executing program 5 (id=1242): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, &(0x7f0000000640)=""/89) 1m5.768473281s ago: executing program 1 (id=1243): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xe, @raw_data="4445493eeefad3514149a0e4e634bae1511bb56a966e294e59302c63334ac548f4f2123c2171495bac87579f70e65262adc4f5240eb72b440fc589297570c0f37368945c0dcf2449aab70ca9402a45fcd326d9fc87ffcca7019d13ee0776ea8b3b999d1614900bec2b1b1c68c075b0eaf9030f436e2ca7909cb20441cd026b0c6f21b634493e9dfd37601a00b68114946a1a32ee5da4cdab4dc3f6fb29dcb8241dfbea26ea742d52521c0d809da5bfe00a1ce3c75b3f9890f485a0f5c5974e4a5472840e0cf19879"}) 1m5.656998773s ago: executing program 34 (id=1243): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xe, @raw_data="4445493eeefad3514149a0e4e634bae1511bb56a966e294e59302c63334ac548f4f2123c2171495bac87579f70e65262adc4f5240eb72b440fc589297570c0f37368945c0dcf2449aab70ca9402a45fcd326d9fc87ffcca7019d13ee0776ea8b3b999d1614900bec2b1b1c68c075b0eaf9030f436e2ca7909cb20441cd026b0c6f21b634493e9dfd37601a00b68114946a1a32ee5da4cdab4dc3f6fb29dcb8241dfbea26ea742d52521c0d809da5bfe00a1ce3c75b3f9890f485a0f5c5974e4a5472840e0cf19879"}) 1m5.586171234s ago: executing program 5 (id=1247): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x211, &(0x7f0000000400)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m5.2233485s ago: executing program 5 (id=1248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1m4.987273711s ago: executing program 5 (id=1252): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@creator={'creator', 0x3d, "ff54b274"}}]}, 0x9, 0x2d1, &(0x7f0000000600)="$eJzs3T9v00AYx/HfOUmb/lExbRESC6hQCZaKAgNiCUJZ2ZkQ0KRSRVREWyRgoSBGxAtg5y3wIlhAvAGYmHgB3YzufHGdxnEaaOKm/X6kRM757vyczo7vsdRGAE6te/Wfn2/+ti8jlVSSdEcKJFWlsqRzOl99sbmzsdNqNvI6KrkW9mUUtzRdddY2m1lNbTvXwgvtp7Jm02UYjiiK7v4qOggUzl39GQJp0l+Hbn91xHENy650segYRi09wWZPe3qpuQLDAQAcA/7+H/jbxKwrMgoCadnf9k/U/X+v6ACO1q1WV1GU2yB1/3eru8jY+T3jdu3ney6Fs/uDdpZ4mGAqBz5PKD6zOhaYpl9W6WIJptY3ylpZe6tGoHeqealqi+69EZ+6bX2iXcrITXP07q2i+9PxaNyK8qB2SOsbreak3ciIf2GwI/4/89V8Nw9NqE9qJOu/cmTsNLmZCg/MVFCx8V/v3eOMa2Vryaf9tVot6Khy1h3kgj+C12eU1eyMJN1n+wHBbhJBXpzu2PPqfKwQj261T6uFrFZh8qlHq8WOViV/JqysPWvlPkoZjvYQzUfzwCzpj76onlr/Bza+ZaWuzLyveuNq+jMjHs9Eds2yqxl23Tn2L5dLSQTe5MBjgzTg07IPeqLbmtt+9fppqdVqbtmNxxkbz2e3jC+pvJcy6wx/o6ScOtrdL4msN1F02J6jYQZ/7Ug7tN8fSYm9fLIq26ssKQlGPU2nZaP+TXkn5PhsRJHUY9fQvqdwjGyb9qT7gqmCA8Ko2XWXifM/t5L3qzqXItm3MGednp9kqqPH1SSD61wKzrv36YEyuJneGVzqiDd65Iwu57p8VbqSKjTKPWLo4zwhTF0/9Ijn/wAAAAAAAAAAAAAAAAAAAONmFH9pUPQYAQAAAAAAAAAAAAAAAAAAAAAYd//0+79Z/yPe/f5vyO//AmPkbwAAAP//FSp4xw==") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m4.529056265s ago: executing program 5 (id=1254): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x891e, 0x0) 1m3.837099017s ago: executing program 5 (id=1260): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x8, 0xffff133a, 0x1], [{0x35, 0x0, 0x0, 0x1}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3df4, 0x9}, {}, {}, {0x1}, {0x4}, {0x0, 0x8}], 0xc}) 1m3.665754008s ago: executing program 35 (id=1260): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x8, 0xffff133a, 0x1], [{0x35, 0x0, 0x0, 0x1}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3df4, 0x9}, {}, {}, {0x1}, {0x4}, {0x0, 0x8}], 0xc}) 2.742219407s ago: executing program 0 (id=2202): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.245706191s ago: executing program 7 (id=2214): r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1O\xff\a\x00\x00\x00\x00\x00\x00\xeb\xf1\xd0\xce\x83h\x9f\xaa\xb8\xfe\x10\x9b\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xc0\x82\xe7&.\x95J\xd5\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\xdc\xa3\xe3\x9d\x12\x84\xb5\x82q\x19\xacS\x8a|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v_,\xfcl\x84>q\xbf\x01\x80\x00\x00\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x80\xb0\xd0n\x17\x94\x8d`\xb6S/\xa2\x9b\xd1\xfa\xe2\x1e\xf5lSi\xeb-\xcb\xbf)\xf6B&\xebZ4', 0x4) lseek(r0, 0xffffffffffffff7f, 0x4) 1.959403787s ago: executing program 7 (id=2219): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.918818896s ago: executing program 8 (id=2221): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61d, &(0x7f0000001680)="$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") 1.408724357s ago: executing program 7 (id=2227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b80)) 1.241036072s ago: executing program 7 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r0}, 0x38) 1.164377851s ago: executing program 3 (id=2231): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000c40)) 1.11216619s ago: executing program 7 (id=2232): set_mempolicy(0x4003, &(0x7f0000000180)=0x8000080100000003, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0xc0041, 0x0) 1.065509957s ago: executing program 6 (id=2233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) 1.042506411s ago: executing program 0 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x90, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x7c, 0x1, [@m_police={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x9}, 0x1000}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x90}}, 0x0) 1.041764124s ago: executing program 8 (id=2235): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x2fe, &(0x7f0000001100)="$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") chdir(&(0x7f0000000240)='./file0\x00') 973.26758ms ago: executing program 3 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f000001ff80)=ANY=[@ANYBLOB="240000001800210200000000000000001d01040008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}}, 0x0) 927.983812ms ago: executing program 0 (id=2237): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 868.683279ms ago: executing program 3 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 800.974544ms ago: executing program 6 (id=2239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x17, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 800.18278ms ago: executing program 8 (id=2240): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be"], 0x0) 778.569458ms ago: executing program 0 (id=2241): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)) 664.90762ms ago: executing program 3 (id=2242): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x80) 566.795429ms ago: executing program 8 (id=2243): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000002140)=0x30) 552.288807ms ago: executing program 0 (id=2244): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) 481.311601ms ago: executing program 6 (id=2245): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 481.114842ms ago: executing program 3 (id=2246): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 457.90797ms ago: executing program 6 (id=2247): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 400.672314ms ago: executing program 8 (id=2248): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x2000006, &(0x7f0000000000)={[{@longad}, {@gid}, {@uid_forget}, {@gid_forget}, {}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 321.181905ms ago: executing program 0 (id=2249): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200880, &(0x7f00000006c0), 0x3, 0x1509, &(0x7f0000003640)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000f40)='./bus\x00') 310.444109ms ago: executing program 3 (id=2250): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB='\f\b\x00N']) 301.83753ms ago: executing program 6 (id=2251): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x1401, 0x11, 0x70bd22, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000814}, 0x400d0) 77.034716ms ago: executing program 6 (id=2252): prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) 76.735331ms ago: executing program 8 (id=2253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 0s ago: executing program 7 (id=2254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 128.598193][ T767] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.631173][ T767] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.666000][ T767] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.675286][ T767] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 128.687405][ T3505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.693660][ T767] usb 6-1: Product: syz [ 128.701878][ T767] usb 6-1: Manufacturer: syz [ 128.734464][ T767] hub 6-1:4.0: USB hub found [ 128.882309][ T3505] bridge_slave_1: left allmulticast mode [ 128.893467][ T3505] bridge_slave_1: left promiscuous mode [ 128.899494][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.929008][ T3505] bridge_slave_0: left allmulticast mode [ 128.936244][ T3505] bridge_slave_0: left promiscuous mode [ 128.942029][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.967372][ T767] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 129.098395][ T8322] loop3: detected capacity change from 0 to 32768 [ 129.111885][ T8322] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.896 (8322) [ 129.183438][ T8322] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.218569][ T8322] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 129.240735][ T8322] BTRFS info (device loop3): using free-space-tree [ 129.334450][ T767] usb 6-1: USB disconnect, device number 3 [ 129.364603][ T8322] BTRFS info (device loop3): rebuilding free space tree [ 129.509642][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.519023][ T5837] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.664713][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.744581][ T3505] bond0 (unregistering): Released all slaves [ 129.832891][ T3505] bond1 (unregistering): Released all slaves [ 129.929574][ T3505] bond2 (unregistering): Released all slaves [ 129.991116][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 130.114981][ T8368] netlink: 'syz.3.897': attribute type 10 has an invalid length. [ 130.133563][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.897'. [ 130.371309][ T8368] bridge0: port 3(macvlan1) entered blocking state [ 130.393970][ T5836] Bluetooth: hci1: command tx timeout [ 130.423566][ T8368] bridge0: port 3(macvlan1) entered disabled state [ 130.430313][ T8368] macvlan1: entered allmulticast mode [ 130.463958][ T8368] macvlan1: entered promiscuous mode [ 130.551456][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.593576][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.600843][ T8310] bridge_slave_0: entered allmulticast mode [ 130.637294][ T8310] bridge_slave_0: entered promiscuous mode [ 130.706884][ T8379] loop3: detected capacity change from 0 to 4096 [ 130.817225][ T8385] loop1: detected capacity change from 0 to 8 [ 130.853006][ T8364] loop0: detected capacity change from 0 to 32768 [ 130.923764][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.930904][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.939350][ T8364] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.904 (8364) [ 131.003985][ T8310] bridge_slave_1: entered allmulticast mode [ 131.011025][ T8310] bridge_slave_1: entered promiscuous mode [ 131.050222][ T8364] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.093534][ T8364] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.191845][ T8376] loop5: detected capacity change from 0 to 32768 [ 131.216479][ T8376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.907 (8376) [ 131.259290][ T8376] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.279379][ T8376] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 131.289177][ T8376] BTRFS info (device loop5): using free-space-tree [ 131.298135][ T3505] hsr_slave_0: left promiscuous mode [ 131.335721][ T3505] hsr_slave_1: left promiscuous mode [ 131.469693][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.478048][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.503719][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.511733][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.530935][ T8364] BTRFS info (device loop0): rebuilding free space tree [ 131.568992][ T8364] BTRFS info (device loop0): disabling free space tree [ 131.585249][ T8364] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.595487][ T8364] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.617322][ T3505] veth1_macvtap: left promiscuous mode [ 131.623161][ T3505] veth0_macvtap: left promiscuous mode [ 131.629070][ T3505] veth1_vlan: left promiscuous mode [ 131.634795][ T3505] veth0_vlan: left promiscuous mode [ 131.731519][ T8364] BTRFS info (device loop0 state M): max_inline set to 0 [ 131.853430][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.012098][ T5842] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.022978][ T6763] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.085511][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 132.150088][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.203681][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.247076][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.274777][ T8] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.283398][ T8] usb 2-1: Product: syz [ 132.287601][ T8] usb 2-1: Manufacturer: syz [ 132.302942][ T8] hub 2-1:4.0: USB hub found [ 132.474182][ T5836] Bluetooth: hci1: command tx timeout [ 132.524115][ T8] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 132.835106][ T8] usb 2-1: USB disconnect, device number 5 [ 132.850514][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 132.895207][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 133.046405][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.052918][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.360835][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.397435][ T8457] loop1: detected capacity change from 0 to 512 [ 133.411197][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.451712][ T8457] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.523725][ T8457] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 133.563770][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.633534][ T8457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 133.641634][ T8457] System zones: 0-2, 18-18, 34-34 [ 133.660567][ T8457] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.683145][ T8310] team0: Port device team_slave_0 added [ 133.716260][ T8310] team0: Port device team_slave_1 added [ 133.726315][ T8457] EXT4-fs (loop1): 1 truncate cleaned up [ 133.752810][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.776789][ T8457] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.1.919: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 133.811631][ T8457] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 133.839055][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.853104][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 133.876374][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 133.890557][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.896264][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 133.911357][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.916589][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 133.964059][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.978894][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.098102][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.124498][ T8] usb 1-1: config 0 descriptor?? [ 134.160124][ T8480] loop5: detected capacity change from 0 to 4096 [ 134.192771][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.211439][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.243737][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.352820][ T8] hdpvr 1-1:0.0: firmware version 0x15 dated mÂÒR( ry|ŸÉA3j×Æe{¸£)”7}-SŠ¥8N¾¾¸¤¼† [ 134.457306][ T8310] hsr_slave_0: entered promiscuous mode [ 134.478567][ T8310] hsr_slave_1: entered promiscuous mode [ 134.501485][ T8310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.516012][ T8310] Cannot create hsr debugfs directory [ 134.553556][ T5836] Bluetooth: hci1: command tx timeout [ 134.563953][ T8] hdpvr 1-1:0.0: device init failed [ 134.569248][ T8] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 134.602978][ T8] usb 1-1: USB disconnect, device number 7 [ 134.968725][ T8522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.948'. [ 135.302361][ T8310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.355332][ T8310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.364398][ T8538] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 135.381829][ T8310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.448615][ T8310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.468450][ T8536] loop0: detected capacity change from 0 to 4096 [ 135.511809][ T8542] xt_hashlimit: max too large, truncated to 1048576 [ 135.814183][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.889504][ T8310] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.954486][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.961627][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.032035][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.039234][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.149235][ T8567] netlink: 128 bytes leftover after parsing attributes in process `syz.5.958'. [ 136.174446][ T8571] xt_connbytes: Forcing CT accounting to be enabled [ 136.211073][ T8310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.234129][ T8310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.444310][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.635971][ T5836] Bluetooth: hci1: command tx timeout [ 137.094583][ T8310] veth0_vlan: entered promiscuous mode [ 137.123229][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 137.179537][ T8310] veth1_vlan: entered promiscuous mode [ 137.226647][ T29] audit: type=1326 audit(1732087674.813:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 137.373474][ T29] audit: type=1326 audit(1732087674.813:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 137.410478][ T8310] veth0_macvtap: entered promiscuous mode [ 137.491558][ T8310] veth1_macvtap: entered promiscuous mode [ 137.508147][ T29] audit: type=1326 audit(1732087674.813:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 137.619575][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.633457][ T29] audit: type=1326 audit(1732087674.883:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 137.703377][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.748354][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.773380][ T29] audit: type=1326 audit(1732087674.883:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.1.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 137.812460][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.850735][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.885020][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.906265][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.951273][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.972617][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.018302][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.063341][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.073207][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.129800][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.142793][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.164746][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.180538][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.191592][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.209764][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.241787][ T8310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.283017][ T8310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.296569][ T8310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.313447][ T8310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.583724][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.591597][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.746206][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.754127][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.158680][ T8709] loop6: detected capacity change from 0 to 2048 [ 139.263165][ T8709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.397774][ T8723] loop1: detected capacity change from 0 to 256 [ 139.462430][ T8723] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 139.653348][ T29] audit: type=1326 audit(1732087677.233:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c4b7e759 code=0x7ffc0000 [ 139.723440][ T29] audit: type=1326 audit(1732087677.233:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c4b7e759 code=0x7ffc0000 [ 139.812128][ T29] audit: type=1326 audit(1732087677.233:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f97c4b7e759 code=0x7ffc0000 [ 139.935299][ T29] audit: type=1326 audit(1732087677.303:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c4b7e759 code=0x7ffc0000 [ 140.065702][ T29] audit: type=1326 audit(1732087677.303:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c4b7e759 code=0x7ffc0000 [ 140.176024][ T8760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.452200][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 141.035604][ T8817] loop3: detected capacity change from 0 to 256 [ 141.272146][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 141.463553][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1059'. [ 141.510414][ T8841] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1059'. [ 142.104928][ T8882] loop1: detected capacity change from 0 to 64 [ 142.357544][ T8892] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 142.708340][ T8897] loop1: detected capacity change from 0 to 4096 [ 142.933993][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 142.973471][ T8925] netlink: 'syz.6.1102': attribute type 1 has an invalid length. [ 143.092817][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 143.110119][ T8932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1093'. [ 144.120234][ T8975] loop5: detected capacity change from 0 to 4096 [ 144.466784][ T8990] loop5: detected capacity change from 0 to 512 [ 144.474155][ T8990] EXT4-fs: Ignoring removed orlov option [ 144.494668][ T8990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.570087][ T8990] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.593594][ T8990] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1118: bg 0: block 248: padding at end of block bitmap is not set [ 144.610854][ T8962] loop6: detected capacity change from 0 to 32768 [ 144.619914][ T8990] __quota_error: 5 callbacks suppressed [ 144.619930][ T8990] Quota error (device loop5): write_blk: dquota write failed [ 144.633079][ T8990] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 144.637008][ T8962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1106 (8962) [ 144.643469][ T8990] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1118: Failed to acquire dquot type 1 [ 144.751106][ T8965] loop3: detected capacity change from 0 to 32768 [ 144.777970][ T8990] EXT4-fs (loop5): 1 truncate cleaned up [ 144.859217][ T8962] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.898801][ T8965] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.913043][ T8962] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 145.006187][ T8990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.053692][ T8986] loop0: detected capacity change from 0 to 40427 [ 145.071771][ T8962] BTRFS info (device loop6): using free-space-tree [ 145.117971][ T8986] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 145.125632][ T8986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 145.160887][ T8965] XFS (loop3): Ending clean mount [ 145.179409][ T8986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.192211][ T8990] EXT4-fs: Ignoring removed orlov option [ 145.205810][ T8965] XFS (loop3): Quotacheck needed: Please wait. [ 145.231321][ T8990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.242003][ T8990] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 145.282226][ T8990] EXT4-fs error (device loop5): __ext4_remount:6749: comm syz.5.1118: Abort forced by user [ 145.285152][ T8965] XFS (loop3): Quotacheck: Done. [ 145.299617][ T8990] EXT4-fs (loop5): Remounting filesystem read-only [ 145.306865][ T8990] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 145.317871][ T8990] ext4 filesystem being remounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.367002][ T6763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.367366][ T8986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 145.403638][ T8986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.437970][ T5837] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.441465][ T8310] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.997657][ T9041] tmpfs: Bad value for 'nr_inodes' [ 146.547656][ T9033] loop1: detected capacity change from 0 to 32768 [ 146.561940][ T9033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1136 (9033) [ 146.602406][ T9033] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.602485][ T9033] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.602538][ T9033] BTRFS info (device loop1): using free-space-tree [ 146.627698][ T9059] loop0: detected capacity change from 0 to 512 [ 146.628344][ T9059] EXT4-fs: Ignoring removed orlov option [ 146.646790][ T9059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.651069][ T9059] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.659484][ T9059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1135: bg 0: block 248: padding at end of block bitmap is not set [ 146.690874][ T9059] Quota error (device loop0): write_blk: dquota write failed [ 146.690957][ T9059] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 146.690988][ T9059] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1135: Failed to acquire dquot type 1 [ 146.723190][ T9059] EXT4-fs (loop0): 1 truncate cleaned up [ 146.757682][ T9059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.805604][ T9059] EXT4-fs: Ignoring removed orlov option [ 146.805721][ T9059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.813418][ T9059] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 146.835597][ T9059] EXT4-fs error (device loop0): __ext4_remount:6749: comm syz.0.1135: Abort forced by user [ 146.835956][ T9059] EXT4-fs (loop0): Remounting filesystem read-only [ 146.835976][ T9059] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 146.836027][ T9059] ext4 filesystem being remounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.917808][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.002965][ T5839] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.489072][ T9096] netlink: 'syz.0.1145': attribute type 10 has an invalid length. [ 147.489099][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1145'. [ 147.489127][ T9096] nlmon0: entered promiscuous mode [ 147.489145][ T9096] nlmon0: entered allmulticast mode [ 147.489903][ T9096] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 147.587242][ T9057] tty tty30: ldisc open failed (-12), clearing slot 29 [ 147.817927][ T9076] loop6: detected capacity change from 0 to 32768 [ 147.957065][ T9076] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.355832][ T9076] XFS (loop6): Ending clean mount [ 148.397934][ T9076] XFS (loop6): Quotacheck needed: Please wait. [ 148.504786][ T9076] XFS (loop6): Quotacheck: Done. [ 148.602449][ T9143] loop1: detected capacity change from 0 to 1764 [ 148.727649][ T8310] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.285879][ T29] audit: type=1326 audit(1732087686.873:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 149.378704][ T29] audit: type=1326 audit(1732087686.903:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 149.406405][ T9178] loop1: detected capacity change from 0 to 16 [ 149.472109][ T9178] erofs (device loop1): mounted with root inode @ nid 36. [ 149.513559][ T29] audit: type=1326 audit(1732087686.903:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 149.633530][ T29] audit: type=1326 audit(1732087686.903:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 149.805965][ T9186] netlink: 'syz.6.1165': attribute type 10 has an invalid length. [ 149.847942][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1165'. [ 149.862387][ T9186] nlmon0: entered promiscuous mode [ 149.870453][ T9186] nlmon0: entered allmulticast mode [ 149.881963][ T9186] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 150.023725][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'. [ 150.060792][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 150.121102][ T9146] loop5: detected capacity change from 0 to 40427 [ 150.156480][ T9146] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 150.178497][ T9146] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 150.240789][ T9146] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.271305][ T9201] loop0: detected capacity change from 0 to 1764 [ 150.472320][ T9146] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 150.491616][ T9146] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 150.650964][ T9183] loop3: detected capacity change from 0 to 32768 [ 150.703347][ T29] audit: type=1326 audit(1732087688.283:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 150.799221][ T29] audit: type=1326 audit(1732087688.283:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 150.893393][ T29] audit: type=1326 audit(1732087688.323:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 150.983365][ T29] audit: type=1326 audit(1732087688.323:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 151.029813][ T29] audit: type=1326 audit(1732087688.323:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.1.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd76b7e759 code=0x7ffc0000 [ 151.040121][ T9229] netlink: 'syz.0.1193': attribute type 39 has an invalid length. [ 151.103848][ T9229] netlink: 'syz.0.1193': attribute type 4 has an invalid length. [ 151.114461][ T9229] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1193'. [ 151.161972][ T9229] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 151.740288][ T29] audit: type=1326 audit(1732087689.323:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.6.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b77e759 code=0x7ffc0000 [ 151.857702][ T29] audit: type=1326 audit(1732087689.323:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.6.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b77e759 code=0x7ffc0000 [ 151.922486][ T29] audit: type=1326 audit(1732087689.353:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.6.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f968b77e759 code=0x7ffc0000 [ 151.972393][ T29] audit: type=1326 audit(1732087689.353:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.6.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968b77e759 code=0x7ffc0000 [ 152.278543][ T9235] loop1: detected capacity change from 0 to 32768 [ 152.358633][ T9235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1197 (9235) [ 152.563352][ T9235] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.581827][ T9242] loop3: detected capacity change from 0 to 40427 [ 152.603420][ T9235] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 152.612124][ T9235] BTRFS info (device loop1): using free-space-tree [ 152.646587][ T9275] loop6: detected capacity change from 0 to 16 [ 152.664305][ T9242] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 152.672306][ T9242] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.700710][ T9275] erofs (device loop6): mounted with root inode @ nid 36. [ 152.760743][ T9256] loop0: detected capacity change from 0 to 32768 [ 152.816969][ T9275] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 152.831391][ T9275] erofs (device loop6): failed to decompress -24 in[52, 4044] out[1851] [ 152.840378][ T9275] erofs (device loop6): read error -117 @ 43 of nid 36 [ 152.883875][ T9242] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.950984][ T9242] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.966666][ T9242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.349378][ T5839] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.337810][ T9342] loop6: detected capacity change from 0 to 40427 [ 154.405090][ T9342] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 154.413109][ T9342] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 154.458136][ T9357] loop1: detected capacity change from 0 to 64 [ 154.592602][ T9361] loop5: detected capacity change from 0 to 764 [ 154.629795][ T9361] Symlink component flag not implemented [ 154.650909][ T9361] Symlink component flag not implemented (129) [ 154.803169][ T9342] F2FS-fs (loop6): Found nat_bits in checkpoint [ 154.890103][ T9342] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 154.945706][ T9342] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 154.972094][ T9350] loop3: detected capacity change from 0 to 32768 [ 155.126447][ T9350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1223 (9350) [ 155.268277][ T9350] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.290774][ T9387] loop5: detected capacity change from 0 to 16 [ 155.313430][ T9350] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 155.322419][ T9350] BTRFS info (device loop3): using free-space-tree [ 155.354414][ T9387] erofs (device loop5): mounted with root inode @ nid 36. [ 155.394311][ T9387] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 155.403498][ T9387] erofs (device loop5): failed to decompress -24 in[52, 4044] out[1851] [ 155.473388][ T9387] erofs (device loop5): read error -117 @ 43 of nid 36 [ 155.793579][ T5837] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.986470][ T9422] loop5: detected capacity change from 0 to 64 [ 156.016353][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.033701][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.042515][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.061023][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.073589][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.081483][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.400177][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 156.835339][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.871364][ T9441] loop0: detected capacity change from 0 to 32768 [ 156.893248][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.900723][ T9421] bridge_slave_0: entered allmulticast mode [ 156.948020][ T9441] JBD2: Ignoring recovery information on journal [ 156.972033][ T9421] bridge_slave_0: entered promiscuous mode [ 157.017346][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.024740][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.032057][ T9421] bridge_slave_1: entered allmulticast mode [ 157.039251][ T9421] bridge_slave_1: entered promiscuous mode [ 157.127852][ T9441] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.146349][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.201045][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.230542][ T9463] loop6: detected capacity change from 0 to 764 [ 157.261630][ T9441] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 157.309189][ T9463] Symlink component flag not implemented [ 157.317817][ T9441] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.333213][ T9463] Symlink component flag not implemented (129) [ 157.340722][ T9441] OCFS2: File system is now read-only. [ 157.376996][ T9441] (syz.0.1265,9441,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 157.393111][ T9441] (syz.0.1265,9441,0):ocfs2_claim_metadata:2063 ERROR: status = -30 [ 157.402091][ T9441] (syz.0.1265,9441,0):ocfs2_claim_metadata:2076 ERROR: status = -30 [ 157.411362][ T9441] (syz.0.1265,9441,0):ocfs2_dx_dir_attach_index:2311 ERROR: status = -30 [ 157.418513][ T9421] team0: Port device team_slave_0 added [ 157.430026][ T9441] (syz.0.1265,9441,0):ocfs2_expand_inline_dir:3004 ERROR: status = -30 [ 157.449230][ T9441] (syz.0.1265,9441,0):ocfs2_extend_dir:3186 ERROR: status = -30 [ 157.473462][ T9441] (syz.0.1265,9441,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -30 [ 157.502774][ T9441] (syz.0.1265,9441,0):ocfs2_mknod:296 ERROR: status = -30 [ 157.529459][ T9441] (syz.0.1265,9441,0):ocfs2_mknod:500 ERROR: status = -30 [ 157.539163][ T9421] team0: Port device team_slave_1 added [ 157.555500][ T9441] (syz.0.1265,9441,0):ocfs2_create:674 ERROR: status = -30 [ 157.673513][ T9441] syz.0.1265 (9441) used greatest stack depth: 15864 bytes left [ 157.711723][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.711744][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.711769][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.733684][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.733706][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.733732][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.873240][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 157.904823][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.009982][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.057016][ T9421] hsr_slave_0: entered promiscuous mode [ 158.070960][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.086987][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.095997][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.104302][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.129492][ T9421] hsr_slave_1: entered promiscuous mode [ 158.136103][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.149233][ T9484] netlink: 'syz.0.1269': attribute type 11 has an invalid length. [ 158.157888][ T5146] Bluetooth: hci3: command tx timeout [ 158.167884][ T9421] Cannot create hsr debugfs directory [ 158.248629][ T9484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1269'. [ 158.575751][ T9498] @ÿ: renamed from vlan0 (while UP) [ 158.702203][ T9485] loop6: detected capacity change from 0 to 32768 [ 158.731918][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 158.782747][ T9509] loop3: detected capacity change from 0 to 764 [ 158.845858][ T9509] Symlink component flag not implemented [ 158.868076][ T9509] Symlink component flag not implemented (129) [ 158.870089][ T9485] JBD2: Ignoring recovery information on journal [ 158.951307][ T9485] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 159.017203][ T9485] OCFS2: ERROR (device loop6): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 159.038501][ T9485] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 159.049284][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.056918][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.064450][ T9479] bridge_slave_0: entered allmulticast mode [ 159.071496][ T9479] bridge_slave_0: entered promiscuous mode [ 159.085026][ T9485] OCFS2: File system is now read-only. [ 159.090536][ T9485] (syz.6.1278,9485,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 159.100933][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.113491][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.124274][ T9485] (syz.6.1278,9485,0):ocfs2_claim_metadata:2063 ERROR: status = -30 [ 159.132318][ T9485] (syz.6.1278,9485,0):ocfs2_claim_metadata:2076 ERROR: status = -30 [ 159.143236][ T9479] bridge_slave_1: entered allmulticast mode [ 159.150380][ T9479] bridge_slave_1: entered promiscuous mode [ 159.181898][ T9485] (syz.6.1278,9485,0):ocfs2_dx_dir_attach_index:2311 ERROR: status = -30 [ 159.240552][ T9485] (syz.6.1278,9485,0):ocfs2_expand_inline_dir:3004 ERROR: status = -30 [ 159.256946][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.273435][ T9485] (syz.6.1278,9485,0):ocfs2_extend_dir:3186 ERROR: status = -30 [ 159.309857][ T9421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.341520][ T9485] (syz.6.1278,9485,1):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -30 [ 159.362067][ T9485] (syz.6.1278,9485,1):ocfs2_mknod:296 ERROR: status = -30 [ 159.373812][ T9485] (syz.6.1278,9485,1):ocfs2_mknod:500 ERROR: status = -30 [ 159.386755][ T9485] (syz.6.1278,9485,1):ocfs2_create:674 ERROR: status = -30 [ 159.394796][ T9421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 159.417057][ T9421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.480782][ T9421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 159.523806][ T8310] ocfs2: Unmounting device (7,6) on (node local) [ 159.554455][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.570396][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.606329][ T9421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.616991][ T9421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.641592][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.147522][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.154675][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.172892][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.180094][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.234085][ T5836] Bluetooth: hci0: command tx timeout [ 160.240519][ T5836] Bluetooth: hci3: command tx timeout [ 160.258266][ T9479] team0: Port device team_slave_0 added [ 160.269124][ T9479] team0: Port device team_slave_1 added [ 160.300698][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.308320][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.335213][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.377869][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.385764][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.424041][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.509387][ T9479] hsr_slave_0: entered promiscuous mode [ 160.515980][ T9544] loop6: detected capacity change from 0 to 32768 [ 160.532070][ T9544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1281 (9544) [ 160.547262][ T9479] hsr_slave_1: entered promiscuous mode [ 160.559292][ T9479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.568923][ T9479] Cannot create hsr debugfs directory [ 160.605764][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.614628][ T9544] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.626371][ T9544] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 160.637769][ T9544] BTRFS info (device loop6): using free-space-tree [ 160.884347][ T8310] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.298373][ T9479] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 161.332890][ T9479] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 161.349650][ T9421] veth0_vlan: entered promiscuous mode [ 161.360924][ T9479] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 161.374432][ T9479] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 161.411558][ T9421] veth1_vlan: entered promiscuous mode [ 161.507988][ T9421] veth0_macvtap: entered promiscuous mode [ 161.568549][ T9421] veth1_macvtap: entered promiscuous mode [ 161.648115][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.666377][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.692166][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.719820][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.760133][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.781470][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.812380][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.834479][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.870357][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.891506][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.921976][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.960657][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.973783][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1298'. [ 161.990583][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.002829][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.027921][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.042286][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.072213][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.084677][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.103049][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.114475][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.138507][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.153224][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.212454][ T9421] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.226972][ T9421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.243395][ T9421] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.252125][ T9421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.276501][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.294518][ T9612] loop3: detected capacity change from 0 to 32768 [ 162.323226][ T5836] Bluetooth: hci3: command tx timeout [ 162.329014][ T5836] Bluetooth: hci0: command tx timeout [ 162.331441][ T9612] XFS: noikeep mount option is deprecated. [ 162.359081][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.383253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.390411][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.431824][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.438975][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.448807][ T9612] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 162.460791][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.470235][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.535593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.544235][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.548033][ T9612] XFS (loop3): Ending clean mount [ 162.570815][ T9612] XFS (loop3): Quotacheck needed: Please wait. [ 162.831122][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.853683][ T9612] XFS (loop3): Quotacheck: Done. [ 163.020687][ T5837] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 163.202192][ T9657] @ÿ: renamed from vlan0 (while UP) [ 163.509096][ T9479] veth0_vlan: entered promiscuous mode [ 163.543478][ T9479] veth1_vlan: entered promiscuous mode [ 163.625267][ T9479] veth0_macvtap: entered promiscuous mode [ 163.683586][ T9479] veth1_macvtap: entered promiscuous mode [ 163.723253][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745393][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.745413][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745430][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.745444][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745458][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.745483][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745498][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.745513][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745528][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.745543][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.745557][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.746613][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.790742][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790768][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.790780][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790794][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.790806][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790820][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.790833][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790848][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.790860][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790874][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.790886][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.790900][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.791766][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.814651][ T9479] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.814726][ T9479] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.814755][ T9479] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.814783][ T9479] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.982418][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.982443][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.053871][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.053896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.057265][ T9649] loop7: detected capacity change from 0 to 32768 [ 164.243956][ T9649] JBD2: Ignoring recovery information on journal [ 164.308667][ T9683] loop8: detected capacity change from 0 to 1764 [ 164.411958][ T5836] Bluetooth: hci0: command tx timeout [ 164.417564][ T5836] Bluetooth: hci3: command tx timeout [ 164.494497][ T9649] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 164.601731][ T9649] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 164.643817][ T9649] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 164.692946][ T9649] OCFS2: File system is now read-only. [ 164.723488][ T9649] (syz.7.1300,9649,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 164.790408][ T9649] (syz.7.1300,9649,0):ocfs2_claim_metadata:2063 ERROR: status = -30 [ 164.827865][ T9649] (syz.7.1300,9649,0):ocfs2_claim_metadata:2076 ERROR: status = -30 [ 164.875440][ T9649] (syz.7.1300,9649,0):ocfs2_dx_dir_attach_index:2311 ERROR: status = -30 [ 164.912885][ T9649] (syz.7.1300,9649,0):ocfs2_expand_inline_dir:3004 ERROR: status = -30 [ 164.924994][ T9649] (syz.7.1300,9649,0):ocfs2_extend_dir:3186 ERROR: status = -30 [ 164.967992][ T9649] (syz.7.1300,9649,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -30 [ 165.013841][ T9649] (syz.7.1300,9649,0):ocfs2_mknod:296 ERROR: status = -30 [ 165.021033][ T9649] (syz.7.1300,9649,0):ocfs2_mknod:500 ERROR: status = -30 [ 165.069030][ T9668] loop0: detected capacity change from 0 to 32768 [ 165.095315][ T9649] (syz.7.1300,9649,0):ocfs2_create:674 ERROR: status = -30 [ 165.186837][ T9668] JBD2: Ignoring recovery information on journal [ 165.335745][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 165.335763][ T29] audit: type=1326 audit(1732087702.913:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.8.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 165.365655][ T29] audit: type=1326 audit(1732087702.913:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.8.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 165.388453][ T29] audit: type=1326 audit(1732087702.923:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.8.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 165.410921][ T29] audit: type=1326 audit(1732087702.923:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.8.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 165.418270][ T9421] ocfs2: Unmounting device (7,7) on (node local) [ 165.433496][ T29] audit: type=1326 audit(1732087702.923:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.8.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 165.494834][ T9715] loop6: detected capacity change from 0 to 1764 [ 165.511166][ T9668] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 165.579434][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1337'. [ 165.700761][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 166.182639][ T9736] loop0: detected capacity change from 0 to 32768 [ 166.195209][ T9736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1339 (9736) [ 166.237193][ T9736] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.250960][ T9736] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 166.293603][ T9736] BTRFS info (device loop0): using free-space-tree [ 166.324929][ T9744] netlink: 'syz.3.1347': attribute type 8 has an invalid length. [ 166.483450][ T5146] Bluetooth: hci0: command tx timeout [ 166.548193][ T9764] loop3: detected capacity change from 0 to 1764 [ 166.698147][ T9733] loop8: detected capacity change from 0 to 32768 [ 166.787813][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.835310][ T9733] JBD2: Ignoring recovery information on journal [ 167.025149][ T9733] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 167.219928][ T9733] OCFS2: ERROR (device loop8): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 167.328352][ T9733] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 167.343997][ T9733] OCFS2: File system is now read-only. [ 167.349515][ T9733] (syz.8.1343,9733,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 167.366379][ T9733] (syz.8.1343,9733,0):ocfs2_claim_metadata:2063 ERROR: status = -30 [ 167.385467][ T9733] (syz.8.1343,9733,0):ocfs2_claim_metadata:2076 ERROR: status = -30 [ 167.393781][ T9733] (syz.8.1343,9733,0):ocfs2_dx_dir_attach_index:2311 ERROR: status = -30 [ 167.402614][ T9733] (syz.8.1343,9733,0):ocfs2_expand_inline_dir:3004 ERROR: status = -30 [ 167.411190][ T9733] (syz.8.1343,9733,0):ocfs2_extend_dir:3186 ERROR: status = -30 [ 167.433593][ T9733] (syz.8.1343,9733,0):ocfs2_prepare_dir_for_insert:4291 ERROR: status = -30 [ 167.442333][ T9733] (syz.8.1343,9733,0):ocfs2_mknod:296 ERROR: status = -30 [ 167.463571][ T9733] (syz.8.1343,9733,0):ocfs2_mknod:500 ERROR: status = -30 [ 167.470757][ T9733] (syz.8.1343,9733,0):ocfs2_create:674 ERROR: status = -30 [ 167.715827][ T9479] ocfs2: Unmounting device (7,8) on (node local) [ 167.738375][ T9794] loop0: detected capacity change from 0 to 16 [ 167.769417][ T9794] erofs (device loop0): mounted with root inode @ nid 36. [ 167.863053][ T9796] loop8: detected capacity change from 0 to 64 [ 167.944998][ T9771] loop7: detected capacity change from 0 to 32768 [ 168.060704][ T9771] JBD2: Ignoring recovery information on journal [ 168.157976][ T9760] loop6: detected capacity change from 0 to 32768 [ 168.199317][ T9771] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 168.209455][ T9760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1348 (9760) [ 168.231251][ T9760] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.241551][ T9760] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 168.251689][ T9760] BTRFS info (device loop6): using free-space-tree [ 168.569137][ T9421] ocfs2: Unmounting device (7,7) on (node local) [ 168.741585][ T8310] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.013495][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.047001][ T5919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.183514][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 169.191198][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.200272][ T5885] usb 4-1: config 0 has no interface number 0 [ 169.212087][ T5885] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 169.223117][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.223566][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.251772][ T5885] usb 4-1: Product: syz [ 169.256991][ T5885] usb 4-1: Manufacturer: syz [ 169.261627][ T5885] usb 4-1: SerialNumber: syz [ 169.268972][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.285816][ T5919] usb 1-1: Product: syz [ 169.290027][ T5919] usb 1-1: Manufacturer: syz [ 169.305105][ T5919] usb 1-1: SerialNumber: syz [ 169.315834][ T5885] usb 4-1: config 0 descriptor?? [ 169.328549][ T5885] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 169.353899][ T5885] usb 4-1: selecting invalid altsetting 1 [ 169.370721][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 169.383104][ T5919] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.412052][ T46] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.447423][ T5885] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.499230][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 169.517690][ T5885] usb 4-1: media controller created [ 169.580296][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.676915][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 169.687396][ T5885] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 169.789749][ T5885] DVB: Unable to find symbol mxl5005s_attach() [ 169.845873][ T3077] usb 1-1: USB disconnect, device number 8 [ 169.876812][ T5885] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 169.973844][ T5885] usb 4-1: USB disconnect, device number 10 [ 170.265700][ T9854] loop8: detected capacity change from 0 to 32768 [ 170.308984][ T9854] JBD2: Ignoring recovery information on journal [ 170.352461][ T9854] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 170.473642][ T46] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 170.508158][ T46] ath9k_htc: Failed to initialize the device [ 170.547229][ T3077] usb 1-1: ath9k_htc: USB layer deinitialized [ 170.605435][ T9479] ocfs2: Unmounting device (7,8) on (node local) [ 170.655864][ T9888] netlink: 'syz.0.1397': attribute type 8 has an invalid length. [ 170.667379][ T9864] loop7: detected capacity change from 0 to 32768 [ 170.733773][ T9864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1386 (9864) [ 170.823377][ T9864] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.874096][ T9864] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 170.894780][ T9864] BTRFS info (device loop7): using free-space-tree [ 171.221236][ T9421] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.245430][ T9924] loop6: detected capacity change from 0 to 64 [ 171.374596][ T9925] loop3: detected capacity change from 0 to 16 [ 171.493608][ T9925] erofs (device loop3): mounted with root inode @ nid 36. [ 171.767975][ T9937] netlink: 'syz.8.1412': attribute type 8 has an invalid length. [ 172.161182][ T9929] loop6: detected capacity change from 0 to 32768 [ 172.216617][ T9895] loop0: detected capacity change from 0 to 32768 [ 172.235995][ T9895] XFS: noikeep mount option is deprecated. [ 172.248920][ T9929] JBD2: Ignoring recovery information on journal [ 172.338878][ T9929] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 172.385698][ T9895] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.503677][ T29] audit: type=1326 audit(1732087710.083:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 172.526244][ T29] audit: type=1326 audit(1732087710.083:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 172.604901][ T8310] ocfs2: Unmounting device (7,6) on (node local) [ 172.607354][ T29] audit: type=1326 audit(1732087710.183:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 172.648530][ T29] audit: type=1326 audit(1732087710.183:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 172.681505][ T29] audit: type=1326 audit(1732087710.183:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3358b7e759 code=0x7ffc0000 [ 172.806961][ T9895] XFS (loop0): Ending clean mount [ 172.814781][ T9895] XFS (loop0): Quotacheck needed: Please wait. [ 172.897906][ T9895] XFS (loop0): Quotacheck: Done. [ 173.191435][ T5842] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 173.275487][ T29] audit: type=1326 audit(1732087710.833:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.7.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 173.298052][ T29] audit: type=1326 audit(1732087710.853:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.7.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 173.320589][ T29] audit: type=1326 audit(1732087710.853:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.7.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 173.354058][ T29] audit: type=1326 audit(1732087710.853:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.7.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 173.613595][ T9991] loop6: detected capacity change from 0 to 32768 [ 173.653540][ T9991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1436 (9991) [ 173.713467][ T9991] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.724045][ T9991] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 173.732723][ T9991] BTRFS info (device loop6): using free-space-tree [ 173.952223][ T9997] loop3: detected capacity change from 0 to 32768 [ 174.006389][T10014] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1446'. [ 174.019917][T10014] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.029242][T10014] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.038204][T10014] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.047322][T10014] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.079156][T10006] loop8: detected capacity change from 0 to 32768 [ 174.230097][T10032] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1457'. [ 174.255300][T10032] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 174.271654][ T9997] JBD2: Ignoring recovery information on journal [ 174.381201][ T9997] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 174.534018][ T8310] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.781755][T10033] loop7: detected capacity change from 0 to 32768 [ 174.789340][T10033] XFS: noikeep mount option is deprecated. [ 174.802924][ T5837] ocfs2: Unmounting device (7,3) on (node local) [ 174.858644][T10050] syz.8.1453 uses obsolete (PF_INET,SOCK_PACKET) [ 174.893209][T10033] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.070164][T10033] XFS (loop7): Ending clean mount [ 175.139955][T10033] XFS (loop7): Quotacheck needed: Please wait. [ 175.405398][T10033] XFS (loop7): Quotacheck: Done. [ 175.520176][ T9421] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.582537][T10070] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1461'. [ 175.618651][T10070] netlink: 'syz.8.1461': attribute type 1 has an invalid length. [ 175.780575][T10057] loop0: detected capacity change from 0 to 32768 [ 175.817753][T10057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1454 (10057) [ 175.823007][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1462'. [ 175.887150][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1462'. [ 176.018395][T10057] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.034470][T10057] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 176.080095][T10065] loop3: detected capacity change from 0 to 32768 [ 176.085895][T10057] BTRFS info (device loop0): using free-space-tree [ 176.328761][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 176.335293][T10065] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 176.356355][T10065] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 176.453149][T10102] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1469'. [ 176.488243][T10065] XFS (loop3): Quotacheck needed: Please wait. [ 176.545609][T10065] XFS (loop3): Quotacheck: Done. [ 176.555022][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 176.587651][ T46] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.595820][ T46] usb 7-1: config 0 has no interface number 0 [ 176.607512][ T46] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 176.626774][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.651545][ T46] usb 7-1: Product: syz [ 176.656166][ T46] usb 7-1: Manufacturer: syz [ 176.660789][ T46] usb 7-1: SerialNumber: syz [ 176.673478][ T5837] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.768710][ T46] usb 7-1: config 0 descriptor?? [ 176.791359][T10124] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1473'. [ 176.826884][T10124] netlink: 'syz.7.1473': attribute type 1 has an invalid length. [ 176.858251][ T46] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 176.884259][ T46] usb 7-1: selecting invalid altsetting 1 [ 176.894557][ T46] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 176.937850][ T46] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.948693][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.989072][ T46] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 176.998544][ T46] usb 7-1: media controller created [ 177.016223][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.088149][ T46] usb 7-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 177.099314][ T46] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 177.230636][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 177.253034][ T46] DVB: Unable to find symbol mxl5005s_attach() [ 177.263594][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 177.324517][ T46] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 177.460935][ T46] usb 7-1: USB disconnect, device number 2 [ 177.537911][T10149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1483'. [ 177.644980][T10153] netlink: 'syz.8.1486': attribute type 2 has an invalid length. [ 178.379652][T10169] nfs: Deprecated parameter 'nointr' [ 178.512543][T10147] loop7: detected capacity change from 0 to 32768 [ 178.728015][T10152] loop3: detected capacity change from 0 to 32768 [ 178.802625][T10152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1485 (10152) [ 178.832158][T10179] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 178.845934][T10152] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.887083][T10152] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 178.913919][T10152] BTRFS info (device loop3): using free-space-tree [ 179.064739][T10157] loop8: detected capacity change from 0 to 32768 [ 179.079469][T10157] BTRFS: device /dev/loop8 (7:8) using temp-fsid 9eccc0fd-3c99-4999-a592-6bdcabef5c75 [ 179.103536][T10157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1488 (10157) [ 179.189744][T10157] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.201176][ T5837] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.212417][T10157] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 179.228467][T10157] BTRFS info (device loop8): using free-space-tree [ 179.253462][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 179.274612][ T767] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.463425][ T767] usb 1-1: Using ep0 maxpacket: 32 [ 179.471801][ T767] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.481099][ T5884] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.504198][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.515481][ T767] usb 1-1: config 0 has no interface number 0 [ 179.521902][T10157] BTRFS error (device loop8): device add not supported on cloned temp-fsid mount [ 179.544482][ T5884] usb 8-1: Product: syz [ 179.548826][ T767] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 179.558528][ T767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.568019][ T5884] usb 8-1: Manufacturer: syz [ 179.588573][ T767] usb 1-1: Product: syz [ 179.593004][ T767] usb 1-1: Manufacturer: syz [ 179.597974][ T5884] usb 8-1: SerialNumber: syz [ 179.612912][ T767] usb 1-1: SerialNumber: syz [ 179.627021][ T5884] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.646701][ T767] usb 1-1: config 0 descriptor?? [ 179.657485][ T9479] BTRFS info (device loop8): last unmount of filesystem 9eccc0fd-3c99-4999-a592-6bdcabef5c75 [ 179.660282][ T8] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.681578][T10223] netlink: 'syz.6.1516': attribute type 13 has an invalid length. [ 179.689917][ T767] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 179.734721][ T767] usb 1-1: selecting invalid altsetting 1 [ 179.777655][ T767] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 179.808420][ T767] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.819678][ T767] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 179.828646][ T767] usb 1-1: media controller created [ 179.847482][ T767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.904145][ T767] usb 1-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 179.923152][ T767] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 180.073811][ T767] DVB: Unable to find symbol mxl5005s_attach() [ 180.124730][ T767] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 180.145272][ T46] usb 8-1: USB disconnect, device number 2 [ 180.271652][ T767] usb 1-1: USB disconnect, device number 9 [ 180.793501][ T8] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 180.810865][ T8] ath9k_htc: Failed to initialize the device [ 180.814034][T10230] loop3: detected capacity change from 0 to 32768 [ 180.835766][ T46] usb 8-1: ath9k_htc: USB layer deinitialized [ 180.847272][T10232] loop6: detected capacity change from 0 to 32768 [ 180.879821][T10230] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.315836][ T5837] ocfs2: Unmounting device (7,3) on (node local) [ 181.612531][T10265] netlink: 'syz.0.1534': attribute type 3 has an invalid length. [ 181.620800][T10265] __nla_validate_parse: 2 callbacks suppressed [ 181.620815][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1534'. [ 181.704676][T10271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1519'. [ 181.761443][T10247] loop7: detected capacity change from 0 to 32768 [ 181.792007][T10247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1514 (10247) [ 181.826452][T10247] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.837203][T10247] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 181.846758][T10247] BTRFS info (device loop7): using free-space-tree [ 181.863138][T10273] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1538'. [ 181.913698][ T5919] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 182.035446][T10293] netlink: 'syz.0.1529': attribute type 9 has an invalid length. [ 182.056145][T10293] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1529'. [ 182.070092][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 182.076152][ T9421] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.081994][ T5919] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.103367][ T5919] usb 9-1: config 0 has no interface number 0 [ 182.122354][ T5919] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 182.171751][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.193861][ T5919] usb 9-1: Product: syz [ 182.198353][ T5919] usb 9-1: Manufacturer: syz [ 182.203172][ T5919] usb 9-1: SerialNumber: syz [ 182.211795][ T5919] usb 9-1: config 0 descriptor?? [ 182.225948][ T5919] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 182.237484][ T5919] usb 9-1: selecting invalid altsetting 1 [ 182.255990][ T5919] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 182.285216][ T5919] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.331419][ T5919] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 182.352634][ T5919] usb 9-1: media controller created [ 182.435688][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.490511][ T5919] usb 9-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 182.523451][ T5919] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 182.533558][T10309] netlink: 'syz.3.1537': attribute type 13 has an invalid length. [ 182.622104][T10312] netlink: 'syz.6.1539': attribute type 3 has an invalid length. [ 182.652312][T10312] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1539'. [ 182.675151][ T5919] DVB: Unable to find symbol mxl5005s_attach() [ 182.708240][ T5919] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 182.815529][ T5919] usb 9-1: USB disconnect, device number 2 [ 182.874134][T10322] nfs: Deprecated parameter 'nointr' [ 183.207054][T10340] netlink: 'syz.7.1553': attribute type 9 has an invalid length. [ 183.214984][T10340] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1553'. [ 183.308768][T10346] netlink: 'syz.3.1565': attribute type 9 has an invalid length. [ 183.317079][T10346] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1565'. [ 183.334634][T10344] netlink: 'syz.7.1554': attribute type 3 has an invalid length. [ 183.352739][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1554'. [ 184.504145][T10413] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1588'. [ 184.565593][T10413] netlink: zone id is out of range [ 184.565621][T10413] netlink: zone id is out of range [ 184.677134][ T3077] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.754851][T10423] loop0: detected capacity change from 0 to 1024 [ 184.816614][T10428] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1596'. [ 184.825914][T10423] fuse: Bad value for 'fd' [ 184.915922][ T1105] hfsplus: b-tree write err: -5, ino 4 [ 184.983583][ T3077] usb 4-1: Using ep0 maxpacket: 16 [ 185.021057][ T3077] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 185.032959][ T3077] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 185.053367][ T3077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.061444][ T3077] usb 4-1: Product: syz [ 185.078959][ T3077] usb 4-1: Manufacturer: syz [ 185.090807][ T3077] usb 4-1: SerialNumber: syz [ 185.121125][ T3077] usb 4-1: config 0 descriptor?? [ 185.140869][ T3077] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 185.195447][ T3077] usb 4-1: Detected FT232R [ 185.356097][ T3077] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 185.373501][ T3077] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 185.383030][ T3077] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 185.420355][ T3077] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 185.499573][T10451] loop8: detected capacity change from 0 to 1024 [ 185.500348][ T3077] usb 4-1: USB disconnect, device number 11 [ 185.547100][ T3077] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.587734][ T3077] ftdi_sio 4-1:0.0: device disconnected [ 185.786889][T10459] xt_hashlimit: size too large, truncated to 1048576 [ 186.207353][T10476] bond1: entered promiscuous mode [ 186.212562][T10476] bond1: entered allmulticast mode [ 186.219718][T10476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.393900][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 186.395633][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 186.796608][T10445] loop7: detected capacity change from 0 to 32768 [ 186.893689][T10445] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 187.080139][T10478] loop0: detected capacity change from 0 to 32768 [ 187.134782][T10519] Device name cannot be null; rc = [-22] [ 187.138930][T10522] __nla_validate_parse: 2 callbacks suppressed [ 187.138946][T10522] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1637'. [ 187.161562][ T9421] ocfs2: Unmounting device (7,7) on (node local) [ 187.287570][T10478] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 187.302759][T10478] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 187.470552][T10478] XFS (loop0): Quotacheck needed: Please wait. [ 187.692550][T10478] XFS (loop0): Quotacheck: Done. [ 187.864592][ T5842] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.375166][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 188.495440][T10574] loop7: detected capacity change from 0 to 1024 [ 188.612366][T10547] loop6: detected capacity change from 0 to 32768 [ 188.737678][T10547] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 189.166208][T10599] xt_hashlimit: size too large, truncated to 1048576 [ 189.206187][ T8310] ocfs2: Unmounting device (7,6) on (node local) [ 189.264161][T10607] loop0: detected capacity change from 0 to 1024 [ 189.889095][T10621] loop6: detected capacity change from 0 to 32768 [ 190.121779][T10643] loop7: detected capacity change from 0 to 256 [ 190.128904][T10643] exfat: Bad value for 'uid' [ 190.138458][T10643] exfat: Bad value for 'uid' [ 190.251891][T10621] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 190.342352][T10621] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 190.366702][T10621] bcachefs (loop6): Version upgrade required: [ 190.366702][T10621] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 190.366702][T10621] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 190.366702][T10621] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 190.438103][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.502084][T10621] bcachefs (loop6): dropping and reconstructing all alloc info [ 190.538345][T10621] bcachefs (loop6): accounting_read... [ 190.584063][ T5919] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 190.602627][T10621] done [ 190.606317][T10621] bcachefs (loop6): alloc_read... done [ 190.611887][T10621] bcachefs (loop6): stripes_read... done [ 190.618432][T10661] syz.0.1699: attempt to access beyond end of device [ 190.618432][T10661] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 190.632829][T10621] bcachefs (loop6): snapshots_read... done [ 190.640516][T10661] EXT4-fs (loop0): unable to read superblock [ 190.648397][T10621] bcachefs (loop6): done starting filesystem [ 190.705380][T10625] loop3: detected capacity change from 0 to 32768 [ 190.776666][T10625] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 190.814586][ T5919] usb 9-1: Using ep0 maxpacket: 16 [ 190.825693][ T5919] usb 9-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 190.826294][T10671] loop0: detected capacity change from 0 to 512 [ 190.849173][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.900017][T10625] XFS (loop3): Starting recovery (logdev: internal) [ 190.902084][T10675] loop7: detected capacity change from 0 to 64 [ 190.928405][ T5919] usb 9-1: Product: syz [ 190.932636][ T5919] usb 9-1: Manufacturer: syz [ 190.937466][ T5919] usb 9-1: SerialNumber: syz [ 190.938171][ T8310] bcachefs (loop6): shutting down [ 190.969663][ T5919] usb 9-1: config 0 descriptor?? [ 190.982450][T10625] XFS (loop3): Ending recovery (logdev: internal) [ 190.985834][ T5919] ipheth 9-1:0.0: Unable to find alternate settings interface [ 190.998325][ T8310] bcachefs (loop6): shutdown complete [ 191.016291][T10671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.021200][T10675] Trying to free block not in datazone [ 191.034212][T10671] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.067721][T10625] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 191.077898][T10625] overlayfs: conflicting options: metacopy=off,verity=require [ 191.086148][T10675] minix_free_block (loop7:21): bit already cleared [ 191.103766][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.188687][ T5837] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 191.377582][ T5919] usb 9-1: USB disconnect, device number 3 [ 191.848297][T10694] loop0: detected capacity change from 0 to 32768 [ 191.901741][T10694] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 192.031007][T10712] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.137846][T10694] XFS (loop0): Ending clean mount [ 192.163489][T10718] loop7: detected capacity change from 0 to 16 [ 192.191091][T10718] erofs (device loop7): mounted with root inode @ nid 36. [ 192.376923][T10726] xt_hashlimit: overflow, try lower: 35184372088832/511 [ 192.414124][ T5842] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 192.792376][T10738] loop3: detected capacity change from 0 to 128 [ 192.926955][T10744] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.009265][T10746] netlink: 'syz.7.1733': attribute type 1 has an invalid length. [ 193.017905][T10746] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1733'. [ 193.197679][T10758] loop0: detected capacity change from 0 to 64 [ 193.219940][T10758] hfs: Bad value for 'gid' [ 193.424864][T10765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.904016][ T3077] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 194.104136][ T3077] usb 9-1: Using ep0 maxpacket: 16 [ 194.128537][ T3077] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 194.137984][ T3077] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.154322][ T3077] usb 9-1: Product: syz [ 194.163630][ T3077] usb 9-1: Manufacturer: syz [ 194.176936][ T767] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 194.178499][ T3077] usb 9-1: SerialNumber: syz [ 194.195323][ T3077] usb 9-1: config 0 descriptor?? [ 194.201076][T10806] cgroup: Invalid name [ 194.217297][ T3077] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 194.250050][T10808] netlink: 'syz.6.1762': attribute type 1 has an invalid length. [ 194.256785][T10804] loop0: detected capacity change from 0 to 2048 [ 194.277993][T10804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.357561][ T767] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.380017][ T767] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.406717][ T767] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 194.451300][ T767] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 194.481081][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487759][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.520179][ T767] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.566019][T10790] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 194.626314][ T3077] usb 9-1: clie_3_5_startup: get interface number failed: -71 [ 194.644670][ T3077] visor 9-1:0.0: probe with driver visor failed with error -71 [ 194.655860][ T3077] usb 9-1: USB disconnect, device number 4 [ 194.887557][T10831] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1772'. [ 194.896829][T10831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1772'. [ 195.019579][ T767] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 195.040047][ T767] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input14 [ 195.127126][ T767] usb 8-1: USB disconnect, device number 3 [ 195.127185][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 195.200892][T10843] loop0: detected capacity change from 0 to 1764 [ 195.215955][T10843] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.921953][T10874] ubi0: attaching mtd0 [ 195.958588][T10874] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 196.215447][T10880] loop6: detected capacity change from 0 to 4096 [ 196.248271][T10880] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 196.267357][T10888] binder: 10887:10888 ioctl c00c620f 0 returned -14 [ 196.409237][T10894] netlink: 'syz.0.1804': attribute type 2 has an invalid length. [ 196.542054][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1805'. [ 196.874770][T10901] loop7: detected capacity change from 0 to 4096 [ 196.908261][T10901] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 196.926051][T10911] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1812'. [ 196.948304][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1812'. [ 197.016002][T10911] netlink: 31 bytes leftover after parsing attributes in process `syz.8.1812'. [ 197.038236][T10911] netlink: 'syz.8.1812': attribute type 2 has an invalid length. [ 197.048525][T10911] netlink: 31 bytes leftover after parsing attributes in process `syz.8.1812'. [ 197.075793][T10901] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 197.103425][T10901] ntfs3(loop7): Failed to load $Extend (-22). [ 197.110291][T10901] ntfs3(loop7): Failed to initialize $Extend. [ 197.228902][T10923] netlink: 'syz.6.1817': attribute type 39 has an invalid length. [ 197.319403][T10923] veth0_macvtap: left promiscuous mode [ 197.665906][T10945] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1840'. [ 197.675486][T10945] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1840'. [ 198.171665][T10971] cgroup: Invalid name [ 198.316250][T10979] bond4: entered promiscuous mode [ 198.321498][T10979] bond4: entered allmulticast mode [ 198.333894][T10979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.364418][T10982] loop7: detected capacity change from 0 to 1024 [ 198.366335][T10977] loop6: detected capacity change from 0 to 2048 [ 198.492812][T10977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.520698][T10977] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.573001][T10995] loop3: detected capacity change from 0 to 2048 [ 198.601564][T10995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.669053][T10982] fuse: Bad value for 'fd' [ 198.736847][ T8310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.753046][ T3490] hfsplus: b-tree write err: -5, ino 4 [ 199.155940][T11022] loop3: detected capacity change from 0 to 1024 [ 199.224701][T11024] bond1: entered promiscuous mode [ 199.240690][ T5884] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 199.253720][T11024] bond1: entered allmulticast mode [ 199.288520][T11024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.318052][T11031] netlink: 'syz.8.1868': attribute type 2 has an invalid length. [ 199.393389][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 199.406753][ T5884] usb 8-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 199.420225][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.445992][ T5884] usb 8-1: Product: syz [ 199.461681][ T29] audit: type=1326 audit(1732087737.043:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.8.1871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b32f7e759 code=0x0 [ 199.486362][T11038] syz.0.1870 uses old SIOCAX25GETINFO [ 199.492456][ T5884] usb 8-1: Manufacturer: syz [ 199.520743][ T5884] usb 8-1: SerialNumber: syz [ 199.544315][ T5884] usb 8-1: config 0 descriptor?? [ 199.568186][ T5884] ipheth 8-1:0.0: Unable to find alternate settings interface [ 199.815045][ T767] usb 8-1: USB disconnect, device number 4 [ 200.234462][ T5836] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 200.244825][ T5836] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 200.323989][T11065] overlayfs: conflicting options: userxattr,verity=require [ 200.748660][T11069] loop8: detected capacity change from 0 to 4096 [ 200.766503][T11069] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 200.982929][T11069] ntfs3(loop8): failed to convert "c46c" to cp860 [ 200.998232][T11049] loop6: detected capacity change from 0 to 32768 [ 201.262618][T11098] netlink: 'syz.7.1900': attribute type 23 has an invalid length. [ 201.271092][T11098] netlink: 'syz.7.1900': attribute type 11 has an invalid length. [ 201.279380][T11098] __nla_validate_parse: 2 callbacks suppressed [ 201.279397][T11098] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1900'. [ 201.445630][T11049] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.497349][T11114] loop8: detected capacity change from 0 to 164 [ 201.552255][T11114] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 201.706271][T11122] loop8: detected capacity change from 0 to 256 [ 201.713233][T11122] exfat: Deprecated parameter 'utf8' [ 201.730339][T11122] exfat: Deprecated parameter 'utf8' [ 201.742859][T11122] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 201.822459][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1913'. [ 201.938646][T11049] XFS (loop6): Ending clean mount [ 202.047759][ T8310] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.192809][T11139] loop8: detected capacity change from 0 to 1024 [ 202.439581][T11147] loop0: detected capacity change from 0 to 1024 [ 202.474759][T11149] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 202.482549][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1923'. [ 202.534769][T11151] sit0: entered promiscuous mode [ 202.589776][T11151] netlink: 'syz.6.1918': attribute type 1 has an invalid length. [ 202.601588][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 202.623713][T11151] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1918'. [ 202.786912][T11160] loop3: detected capacity change from 0 to 256 [ 203.016678][ T29] audit: type=1326 audit(1732087740.583:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.7.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 203.099300][ T29] audit: type=1326 audit(1732087740.593:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.7.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 203.183524][ T29] audit: type=1326 audit(1732087740.593:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.7.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 203.252284][ T29] audit: type=1326 audit(1732087740.593:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11170 comm="syz.7.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 203.409618][ T29] audit: type=1400 audit(1732087740.993:91): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11187 comm="syz.8.1943" [ 203.459476][T11191] loop7: detected capacity change from 0 to 4096 [ 203.504243][T11191] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 203.581251][T11197] loop6: detected capacity change from 0 to 512 [ 203.646427][T11197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.716801][T11203] loop0: detected capacity change from 0 to 4096 [ 203.724422][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 203.748329][T11203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.785396][T11191] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 203.820114][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1951'. [ 203.829391][T11197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.845123][T11191] ntfs3(loop7): ino=5, "/" directory corrupted [ 203.873466][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 203.874839][T11197] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.919895][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.963468][ T46] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 203.973390][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.981441][ T46] usb 4-1: Product: syz [ 203.985724][ T46] usb 4-1: Manufacturer: syz [ 203.990355][ T46] usb 4-1: SerialNumber: syz [ 204.024318][ T8310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.034068][ T46] usb 4-1: config 0 descriptor?? [ 204.349544][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 204.358683][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 204.368491][ T5836] Bluetooth: hci4: hardware error 0x00 [ 204.369905][T11229] loop8: detected capacity change from 0 to 2048 [ 204.400851][T11229] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.521415][T11223] loop0: detected capacity change from 0 to 4096 [ 204.533524][T11223] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 204.554802][T11234] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.607777][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.635913][ T46] usb 4-1: MIDIStreaming interface descriptor not found [ 204.651551][T11229] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 204.668258][T11229] Remounting filesystem read-only [ 204.672692][T11223] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 204.684118][T11229] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 204.695991][T11229] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 204.725013][ T29] audit: type=1800 audit(1732087742.313:92): pid=11229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1961" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 204.785581][T11223] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 204.987322][ T46] usb 4-1: USB disconnect, device number 12 [ 205.327646][ T6436] udevd[6436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.464820][T11265] netlink: 'syz.8.1976': attribute type 1 has an invalid length. [ 205.497707][T11265] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1976'. [ 205.504304][T11270] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 205.766377][T11276] loop8: detected capacity change from 0 to 1024 [ 205.819307][T11276] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 205.819442][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 205.937092][T11284] loop7: detected capacity change from 0 to 1024 [ 206.067828][T11276] JBD2: no valid journal superblock found [ 206.078436][T11276] EXT4-fs (loop8): Could not load journal inode [ 206.106229][T11285] loop6: detected capacity change from 0 to 1024 [ 206.217582][T11285] hfsplus: keylen 65060 too large [ 206.225002][T11253] loop0: detected capacity change from 0 to 32768 [ 206.243499][T11285] hfsplus: cannot replace xattr [ 206.392149][T11291] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 206.473473][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 206.542707][T11297] loop3: detected capacity change from 0 to 256 [ 206.571291][T11297] FAT-fs (loop3): Directory bread(block 64) failed [ 206.613674][T11297] FAT-fs (loop3): Directory bread(block 65) failed [ 206.620572][T11297] FAT-fs (loop3): Directory bread(block 66) failed [ 206.676109][T11297] FAT-fs (loop3): Directory bread(block 67) failed [ 206.682767][T11297] FAT-fs (loop3): Directory bread(block 68) failed [ 206.711087][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1994'. [ 206.759524][T11297] FAT-fs (loop3): Directory bread(block 69) failed [ 206.768222][T11297] FAT-fs (loop3): Directory bread(block 70) failed [ 206.779557][T11297] FAT-fs (loop3): Directory bread(block 71) failed [ 206.815441][T11297] FAT-fs (loop3): Directory bread(block 72) failed [ 206.883434][T11297] FAT-fs (loop3): Directory bread(block 73) failed [ 206.931374][T11307] netlink: 'syz.6.1997': attribute type 1 has an invalid length. [ 206.993616][T11307] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1997'. [ 207.012226][T11313] netlink: 'syz.0.1999': attribute type 7 has an invalid length. [ 207.024282][T11313] netlink: 'syz.0.1999': attribute type 8 has an invalid length. [ 207.068019][T11315] binder: 11314:11315 ioctl 40046210 0 returned -14 [ 207.484960][ T29] audit: type=1326 audit(1732087745.073:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 207.554722][T11339] loop0: detected capacity change from 0 to 2048 [ 207.562965][ T29] audit: type=1326 audit(1732087745.103:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 207.648143][T11344] netlink: 'syz.8.2015': attribute type 12 has an invalid length. [ 207.669468][T11345] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.680856][ T29] audit: type=1326 audit(1732087745.103:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 207.754849][T11350] netlink: 'syz.6.2014': attribute type 32 has an invalid length. [ 207.790476][ T29] audit: type=1326 audit(1732087745.103:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 207.848274][ T29] audit: type=1326 audit(1732087745.103:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 207.933852][T11358] xt_TCPMSS: Only works on TCP SYN packets [ 208.196216][T11369] loop3: detected capacity change from 0 to 256 [ 208.292264][T11369] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 208.443186][T11378] warning: `syz.7.2030' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 208.651827][T11387] loop3: detected capacity change from 0 to 128 [ 208.715330][T11387] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 208.917889][T11365] loop0: detected capacity change from 0 to 32768 [ 208.934265][T11365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2019 (11365) [ 208.971633][T11395] loop8: detected capacity change from 0 to 64 [ 208.983390][T11365] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.006014][T11365] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 209.014855][T11365] BTRFS info (device loop0): using free-space-tree [ 209.097034][T11387] EXT4-fs error (device loop3): __ext4_remount:6749: comm syz.3.2033: Abort forced by user [ 209.164634][T11387] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 209.324263][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.520104][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.617383][T11442] loop8: detected capacity change from 0 to 512 [ 209.777044][T11453] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.792918][T11442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.805965][ T5884] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 209.817966][T11442] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.003098][ T9479] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.006102][ T5884] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 210.026355][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.072853][ T5884] usb 8-1: config 0 has no interface number 0 [ 210.079205][ T5884] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 210.089459][ T5884] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.256204][ T5884] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 210.266253][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.283362][ T5884] usb 8-1: Product: syz [ 210.291786][ T5884] usb 8-1: Manufacturer: syz [ 210.303086][ T5884] usb 8-1: SerialNumber: syz [ 210.426378][T11471] No control pipe specified [ 210.429166][ T5884] usb 8-1: config 0 descriptor?? [ 210.803418][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.871954][ T5884] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 210.905997][ T5884] usb 8-1: USB disconnect, device number 5 [ 210.963474][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 210.970371][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 210.981331][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 210.993504][ T767] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 211.008622][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 134, changing to 11 [ 211.063765][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59360, setting to 1024 [ 211.088297][T11498] loop6: detected capacity change from 0 to 512 [ 211.096511][ T46] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 211.106481][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.117429][T11498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.125102][ T46] usb 1-1: Product: syz [ 211.129518][T11498] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.149498][ T767] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 211.150604][ T46] usb 1-1: Manufacturer: syz [ 211.161977][ T767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.173953][T11498] EXT4-fs (loop6): 1 truncate cleaned up [ 211.180470][T11498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.192858][ T46] usb 1-1: SerialNumber: syz [ 211.196795][ T767] usb 4-1: config 0 descriptor?? [ 211.204595][T11475] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 211.215974][ T46] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 211.223629][ T767] gspca_main: spca508-2.14.0 probing 8086:0110 [ 211.280087][T11498] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2076: corrupted in-inode xattr: overlapping e_value [ 211.316467][T11498] EXT4-fs (loop6): Remounting filesystem read-only [ 211.324453][T11498] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1772: inode #15: comm syz.6.2076: unable to update i_inline_off [ 211.346392][T11498] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.447046][ T8310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.496128][ T8] usb 1-1: USB disconnect, device number 10 [ 211.621053][ T767] gspca_spca508: reg_read err -71 [ 211.636942][ T767] gspca_spca508: reg_read err -71 [ 211.652238][ T767] gspca_spca508: reg_read err -71 [ 211.662661][ T767] gspca_spca508: reg_read err -71 [ 211.675977][ T767] gspca_spca508: reg write: error -71 [ 211.684832][ T767] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 211.736269][ T767] usb 4-1: USB disconnect, device number 13 [ 211.845621][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2086'. [ 212.099372][T11534] loop8: detected capacity change from 0 to 47 [ 212.276182][T11538] loop0: detected capacity change from 0 to 2048 [ 212.304389][T11538] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.432108][T11538] syz.0.2095: attempt to access beyond end of device [ 212.432108][T11538] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 212.447427][T11548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.521477][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'. [ 212.559198][T11538] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 16777227 [ 212.591265][T11538] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 212.622406][T11555] netlink: 'syz.8.2103': attribute type 39 has an invalid length. [ 212.632627][T11538] Remounting filesystem read-only [ 212.641023][T11538] NILFS (loop0): error -5 truncating bmap (ino=16) [ 212.708355][T11555] veth0_macvtap: left promiscuous mode [ 212.741978][T11561] loop3: detected capacity change from 0 to 2048 [ 212.795444][ T5842] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 212.810608][T11565] netlink: 'syz.7.2118': attribute type 3 has an invalid length. [ 212.849551][T11561] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 212.878543][T11561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.046914][T11568] loop6: detected capacity change from 0 to 4096 [ 213.057094][T11571] bridge1: entered promiscuous mode [ 213.064344][T11568] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 213.106293][T11571] bridge1: entered allmulticast mode [ 213.112888][ T5837] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 120777) has inode size 81 different from extent length 512. Filesystem need not be standards compliant. [ 213.212933][T11568] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 213.240502][T11568] ntfs3(loop6): Failed to load $Extend (-22). [ 213.247952][T11568] ntfs3(loop6): Failed to initialize $Extend. [ 213.559339][T11591] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2120'. [ 213.779735][T11604] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2126'. [ 213.789271][T11604] netlink: 'syz.8.2126': attribute type 1 has an invalid length. [ 213.799455][T11602] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2127'. [ 213.860185][T11591] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2120'. [ 213.927098][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 214.012851][ T29] audit: type=1326 audit(1732087751.593:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.8.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 214.093906][ T29] audit: type=1326 audit(1732087751.633:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.8.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 214.100554][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 214.163698][T11617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2133'. [ 214.171500][T11618] ip6t_srh: unknown srh invflags 4000 [ 214.180197][T11617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2133'. [ 214.194459][ T29] audit: type=1326 audit(1732087751.633:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.8.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 214.201537][ T25] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 214.262462][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.287646][ T29] audit: type=1326 audit(1732087751.633:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.8.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b32f7e759 code=0x7ffc0000 [ 214.299342][ T25] usb 7-1: Product: syz [ 214.372709][ T25] usb 7-1: Manufacturer: syz [ 214.400241][ T25] usb 7-1: SerialNumber: syz [ 214.419311][ T25] usb 7-1: config 0 descriptor?? [ 214.432605][ T25] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 214.536377][T11629] loop0: detected capacity change from 0 to 128 [ 214.842303][ T25] usb 7-1: clie_3_5_startup: get interface number failed: -71 [ 214.850677][ T25] visor 7-1:0.0: probe with driver visor failed with error -71 [ 214.903628][ T25] usb 7-1: USB disconnect, device number 3 [ 215.348500][T11614] loop7: detected capacity change from 0 to 32768 [ 215.444234][T11614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.452862][T11614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 215.507855][T11614] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 215.524391][ T3077] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 215.540183][ T3077] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 215.709414][T11636] loop0: detected capacity change from 0 to 32768 [ 215.728409][ T3077] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 215.737041][ T3077] gfs2: fsid=syz:syz.0: jid=0: Done [ 215.744415][T11614] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 215.754250][T11636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2143 (11636) [ 215.858524][T11636] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.868848][T11636] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 215.877631][T11636] BTRFS info (device loop0): using free-space-tree [ 215.972066][T11675] netlink: 'syz.6.2161': attribute type 29 has an invalid length. [ 216.075267][T11689] netlink: 'syz.6.2163': attribute type 1 has an invalid length. [ 216.087572][T11689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2163'. [ 216.244817][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.580362][T11705] loop7: detected capacity change from 0 to 1024 [ 216.589539][T11706] loop6: detected capacity change from 0 to 64 [ 216.640077][ T767] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 216.780054][T11705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.827931][T11705] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: inode #11: comm syz.7.2170: missing EA_INODE flag [ 216.855312][T11705] EXT4-fs (loop7): Remounting filesystem read-only [ 216.876648][T11717] netlink: 'syz.8.2173': attribute type 28 has an invalid length. [ 216.889929][T11717] netlink: 160 bytes leftover after parsing attributes in process `syz.8.2173'. [ 216.927030][ T9421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.959457][ T767] usb 4-1: Using ep0 maxpacket: 32 [ 216.980020][ T767] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.001750][ T767] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.012562][ T767] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.096710][ T767] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.124003][ T767] usb 4-1: config 1 has no interface number 0 [ 217.130162][ T767] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.173402][ T767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.199760][ T767] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 217.403481][ T767] snd_usb_pod 4-1:1.1: set_interface failed [ 217.411442][ T767] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 217.464367][ T767] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 217.534895][ T767] usb 4-1: USB disconnect, device number 14 [ 217.631702][T11749] : entered promiscuous mode [ 217.966693][T11765] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2198'. [ 218.358437][T11787] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.393434][ T3077] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 218.555029][ T3077] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 218.589645][ T3077] usb 1-1: config 0 has no interface number 0 [ 218.597024][ T3077] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 218.682362][ T3077] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 218.693510][ T3077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.701536][ T3077] usb 1-1: Product: syz [ 218.713501][ T3077] usb 1-1: Manufacturer: syz [ 218.719155][ T3077] usb 1-1: SerialNumber: syz [ 218.727134][ T3077] usb 1-1: config 0 descriptor?? [ 218.732904][T11777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.741945][ T3077] usb-storage 1-1:0.20: USB Mass Storage device detected [ 218.757429][ T3077] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 218.946776][T11815] loop8: detected capacity change from 0 to 1024 [ 218.966399][T11813] loop7: detected capacity change from 0 to 2048 [ 218.993215][ T3077] scsi host1: usb-storage 1-1:0.20 [ 219.014928][T11813] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 219.025515][T11815] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.089384][T11822] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.090131][T11815] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 219.149353][T11815] EXT4-fs (loop8): orphan cleanup on readonly fs [ 219.169376][ T5919] usb 1-1: USB disconnect, device number 11 [ 219.201008][T11815] EXT4-fs error (device loop8): ext4_map_blocks:705: inode #3: block 3: comm syz.8.2221: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.222069][T11813] syz.7.2219: attempt to access beyond end of device [ 219.222069][T11813] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 219.252859][T11813] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 219.273663][T11815] Quota error (device loop8): write_blk: dquota write failed [ 219.299127][T11815] Quota error (device loop8): find_free_dqentry: Can't write quota data block 3 [ 219.336930][T11815] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 219.347968][T11815] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2221: Failed to acquire dquot type 0 [ 219.390572][T11830] tipc: Trying to set illegal importance in message [ 219.403839][T11815] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 3: comm syz.8.2221: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.439163][T11815] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 219.479404][T11815] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2221: Failed to acquire dquot type 0 [ 219.513627][T11815] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.2221: Freeing blocks not in datazone - block = 0, count = 4096 [ 219.556410][T11815] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 3: comm syz.8.2221: lblock 3 mapped to illegal pblock 3 (length 1) [ 219.580248][T11815] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 219.600653][T11815] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2221: Failed to acquire dquot type 0 [ 219.622492][T11815] EXT4-fs (loop8): 1 orphan inode deleted [ 219.631631][T11815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.758981][ T9479] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.825381][T11843] random: crng reseeded on system resumption [ 219.896418][T11850] loop8: detected capacity change from 0 to 64 [ 220.498521][T11876] loop0: detected capacity change from 0 to 256 [ 220.521545][T11875] loop8: detected capacity change from 0 to 2048 [ 220.574109][T11876] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 220.591963][T11875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.673598][T11876] exFAT-fs (loop0): error, in sector 160, dentry 12 should be unused, but 0x85 [ 220.690912][T11876] exFAT-fs (loop0): Filesystem has been set read-only [ 220.750661][T11876] ------------[ cut here ]------------ [ 220.756382][T11876] VFS: brelse: Trying to free free buffer [ 220.798832][T11876] WARNING: CPU: 0 PID: 11876 at fs/buffer.c:1229 __brelse+0x71/0xa0 [ 220.807055][T11876] Modules linked in: [ 220.811006][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.0.2249 Not tainted 6.12.0-next-20241120-syzkaller #0 [ 220.822438][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.832659][T11876] RIP: 0010:__brelse+0x71/0xa0 [ 220.833675][ T29] audit: type=1326 audit(1732087758.413:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 220.837524][T11876] Code: e8 64 0b 70 ff 48 89 df be 04 00 00 00 e8 d7 fe da ff f0 ff 0b eb 17 e8 4d 0b 70 ff 90 48 c7 c7 20 e1 18 8c e8 20 a9 30 ff 90 <0f> 0b 90 90 5b 5d c3 cc cc cc cc 89 d9 80 e1 07 80 c1 03 38 c1 7c [ 220.880130][T11876] RSP: 0018:ffffc90002e7f3f8 EFLAGS: 00010246 [ 220.886906][T11876] RAX: 33d871841ca98500 RBX: ffff88805dfde148 RCX: 0000000000040000 [ 220.890058][T11882] mmap: syz.6.2252 (11882): VmData 41648128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 220.895701][T11876] RDX: ffffc90004b4a000 RSI: 000000000000bfd6 RDI: 000000000000bfd7 [ 220.916570][T11876] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170c519a [ 220.924799][T11876] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 220.932814][T11876] R13: 0000000000000001 R14: 1ffff920005cfeb9 R15: 0000000000000000 [ 220.940957][T11876] FS: 00007fac7e13b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 220.950124][T11876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.956904][T11876] CR2: 0000555569e82588 CR3: 000000007a592000 CR4: 00000000003526f0 [ 220.965179][T11876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.973623][T11876] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.981900][T11876] Call Trace: [ 220.985305][T11876] [ 220.988275][T11876] ? __warn+0x168/0x4e0 [ 220.992489][T11876] ? __brelse+0x71/0xa0 [ 220.996786][T11876] ? report_bug+0x2b3/0x500 [ 221.001331][T11876] ? __brelse+0x71/0xa0 [ 221.005632][T11876] ? handle_bug+0x60/0x90 [ 221.010009][T11876] ? exc_invalid_op+0x1a/0x50 [ 221.014826][T11876] ? asm_exc_invalid_op+0x1a/0x20 [ 221.019895][T11876] ? __warn_printk+0x292/0x360 [ 221.024797][T11876] ? __brelse+0x71/0xa0 [ 221.029002][T11876] ? __brelse+0x70/0xa0 [ 221.033201][T11876] exfat_put_dentry_set+0x182/0x2b0 [ 221.038677][T11876] exfat_rename+0xf40/0x2160 [ 221.043407][T11876] ? __pfx_exfat_rename+0x10/0x10 [ 221.048652][T11876] ? stack_trace_save+0x118/0x1d0 [ 221.053941][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 221.059526][T11876] ? lockdep_unlock+0x16a/0x300 [ 221.064725][T11876] ? __pfx___might_resched+0x10/0x10 [ 221.070072][T11876] ? vfs_rename+0x5ee/0xf00 [ 221.075203][T11876] ? do_raw_spin_lock+0x14f/0x370 [ 221.080283][T11876] ? __pfx_lock_release+0x10/0x10 [ 221.085457][T11876] ? down_write_nested+0x195/0x220 [ 221.090616][T11876] ? __pfx_down_write_nested+0x10/0x10 [ 221.096208][T11876] ? do_raw_spin_unlock+0x13c/0x8b0 [ 221.101469][T11876] ? __asan_memcpy+0x40/0x70 [ 221.106228][T11876] ? __pfx_exfat_rename+0x10/0x10 [ 221.111308][T11876] vfs_rename+0xbdb/0xf00 [ 221.116020][T11876] ? __pfx_vfs_rename+0x10/0x10 [ 221.120987][T11876] ? bpf_lsm_path_rename+0x9/0x10 [ 221.126150][T11876] do_renameat2+0xd94/0x13f0 [ 221.128800][ T29] audit: type=1326 audit(1732087758.413:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 221.130785][T11876] ? __pfx_do_renameat2+0x10/0x10 [ 221.158424][T11876] ? __virt_addr_valid+0x183/0x530 [ 221.163949][T11876] ? __check_object_size+0x48e/0x900 [ 221.169293][T11876] ? strncpy_from_user+0x152/0x270 [ 221.174868][T11876] ? getname_flags+0x1e3/0x540 [ 221.177100][ T29] audit: type=1326 audit(1732087758.413:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 221.179831][T11876] __x64_sys_rename+0x82/0x90 [ 221.179867][T11876] do_syscall_64+0xf3/0x230 [ 221.211799][T11876] ? clear_bhb_loop+0x35/0x90 [ 221.212564][ T29] audit: type=1326 audit(1732087758.413:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 221.216521][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.216556][T11876] RIP: 0033:0x7fac7d37e759 [ 221.216589][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.216606][T11876] RSP: 002b:00007fac7e13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 221.216631][T11876] RAX: ffffffffffffffda RBX: 00007fac7d535f80 RCX: 00007fac7d37e759 [ 221.241336][ T29] audit: type=1326 audit(1732087758.413:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.7.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a1f7e759 code=0x7ffc0000 [ 221.245008][T11876] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000000 [ 221.245029][T11876] RBP: 00007fac7d3f175e R08: 0000000000000000 R09: 0000000000000000 [ 221.245043][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.245057][T11876] R13: 0000000000000000 R14: 00007fac7d535f80 R15: 00007ffdec998c48 [ 221.245090][T11876] [ 221.344341][T11876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.351653][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.0.2249 Not tainted 6.12.0-next-20241120-syzkaller #0 [ 221.361565][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 221.371624][T11876] Call Trace: [ 221.374911][T11876] [ 221.377863][T11876] dump_stack_lvl+0x241/0x360 [ 221.382574][T11876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.387790][T11876] ? __pfx__printk+0x10/0x10 [ 221.392400][T11876] ? _printk+0xd5/0x120 [ 221.396574][T11876] ? __init_begin+0x41000/0x41000 [ 221.401598][T11876] ? vscnprintf+0x5d/0x90 [ 221.405936][T11876] panic+0x349/0x880 [ 221.409845][T11876] ? __warn+0x177/0x4e0 [ 221.414005][T11876] ? __pfx_panic+0x10/0x10 [ 221.418434][T11876] ? show_trace_log_lvl+0x3b2/0x410 [ 221.423661][T11876] __warn+0x34b/0x4e0 [ 221.427666][T11876] ? __brelse+0x71/0xa0 [ 221.431842][T11876] report_bug+0x2b3/0x500 [ 221.436173][T11876] ? __brelse+0x71/0xa0 [ 221.440337][T11876] handle_bug+0x60/0x90 [ 221.444493][T11876] exc_invalid_op+0x1a/0x50 [ 221.448993][T11876] asm_exc_invalid_op+0x1a/0x20 [ 221.453838][T11876] RIP: 0010:__brelse+0x71/0xa0 [ 221.458607][T11876] Code: e8 64 0b 70 ff 48 89 df be 04 00 00 00 e8 d7 fe da ff f0 ff 0b eb 17 e8 4d 0b 70 ff 90 48 c7 c7 20 e1 18 8c e8 20 a9 30 ff 90 <0f> 0b 90 90 5b 5d c3 cc cc cc cc 89 d9 80 e1 07 80 c1 03 38 c1 7c [ 221.478217][T11876] RSP: 0018:ffffc90002e7f3f8 EFLAGS: 00010246 [ 221.484294][T11876] RAX: 33d871841ca98500 RBX: ffff88805dfde148 RCX: 0000000000040000 [ 221.492263][T11876] RDX: ffffc90004b4a000 RSI: 000000000000bfd6 RDI: 000000000000bfd7 [ 221.500232][T11876] RBP: 0000000000000000 R08: ffffffff81601b32 R09: 1ffff110170c519a [ 221.508202][T11876] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 221.516172][T11876] R13: 0000000000000001 R14: 1ffff920005cfeb9 R15: 0000000000000000 [ 221.524149][T11876] ? __warn_printk+0x292/0x360 [ 221.528924][T11876] ? __brelse+0x70/0xa0 [ 221.533079][T11876] exfat_put_dentry_set+0x182/0x2b0 [ 221.538283][T11876] exfat_rename+0xf40/0x2160 [ 221.542890][T11876] ? __pfx_exfat_rename+0x10/0x10 [ 221.547928][T11876] ? stack_trace_save+0x118/0x1d0 [ 221.552957][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 221.558349][T11876] ? lockdep_unlock+0x16a/0x300 [ 221.563243][T11876] ? __pfx___might_resched+0x10/0x10 [ 221.568541][T11876] ? vfs_rename+0x5ee/0xf00 [ 221.573045][T11876] ? do_raw_spin_lock+0x14f/0x370 [ 221.578073][T11876] ? __pfx_lock_release+0x10/0x10 [ 221.583101][T11876] ? down_write_nested+0x195/0x220 [ 221.588218][T11876] ? __pfx_down_write_nested+0x10/0x10 [ 221.593687][T11876] ? do_raw_spin_unlock+0x13c/0x8b0 [ 221.598888][T11876] ? __asan_memcpy+0x40/0x70 [ 221.603479][T11876] ? __pfx_exfat_rename+0x10/0x10 [ 221.608508][T11876] vfs_rename+0xbdb/0xf00 [ 221.612854][T11876] ? __pfx_vfs_rename+0x10/0x10 [ 221.617712][T11876] ? bpf_lsm_path_rename+0x9/0x10 [ 221.622741][T11876] do_renameat2+0xd94/0x13f0 [ 221.627352][T11876] ? __pfx_do_renameat2+0x10/0x10 [ 221.632382][T11876] ? __virt_addr_valid+0x183/0x530 [ 221.637496][T11876] ? __check_object_size+0x48e/0x900 [ 221.642783][T11876] ? strncpy_from_user+0x152/0x270 [ 221.647894][T11876] ? getname_flags+0x1e3/0x540 [ 221.652663][T11876] __x64_sys_rename+0x82/0x90 [ 221.657340][T11876] do_syscall_64+0xf3/0x230 [ 221.661846][T11876] ? clear_bhb_loop+0x35/0x90 [ 221.666530][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.672446][T11876] RIP: 0033:0x7fac7d37e759 [ 221.676860][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.696469][T11876] RSP: 002b:00007fac7e13b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 221.704890][T11876] RAX: ffffffffffffffda RBX: 00007fac7d535f80 RCX: 00007fac7d37e759 [ 221.712856][T11876] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000000 [ 221.720822][T11876] RBP: 00007fac7d3f175e R08: 0000000000000000 R09: 0000000000000000 [ 221.728788][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.736759][T11876] R13: 0000000000000000 R14: 00007fac7d535f80 R15: 00007ffdec998c48 [ 221.744742][T11876] [ 221.748003][T11876] Kernel Offset: disabled [ 221.752423][T11876] Rebooting in 86400 seconds..