last executing test programs: 1m43.895365432s ago: executing program 0 (id=8043): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) preadv2(r0, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/251, 0xfb}], 0x1, 0x1, 0x7, 0x3) 1m43.564441364s ago: executing program 0 (id=8049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x1a, 0x21, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x44}}, 0x0) 1m43.311263196s ago: executing program 0 (id=8054): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000000c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 1m43.034702047s ago: executing program 0 (id=8059): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m42.330454161s ago: executing program 0 (id=8069): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="12000000246837f7", 0x8}], 0x1) 1m41.691483385s ago: executing program 0 (id=8077): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x12, 0x0, 0x101, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @binary="748cf8e8"}]}]}, 0x28}}, 0x0) 1m41.464975356s ago: executing program 32 (id=8077): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x12, 0x0, 0x101, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @binary="748cf8e8"}]}]}, 0x28}}, 0x0) 1m35.442143821s ago: executing program 1 (id=8145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x4, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0x200}, 0x4}}, @TCA_MPLS_LABEL={0xfffffffffffffcd4, 0x5, 0x94c8}]}, {0x4, 0x4}, {0xc}, {0xfffffffffffffff1}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m34.278231628s ago: executing program 1 (id=8138): r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000780)={0x5, 0x1, 0x2, "11e1d97e25b1a85978ee20df31c2674ba201bce9b695b831157503e87c23ca0b", 0x34343452}) 1m34.01440324s ago: executing program 1 (id=8143): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}, {}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@creator={'creator', 0x3d, "b1fde0af"}}, {@barrier}, {@umask={'umask', 0x3d, 0x804}}]}, 0x0, 0x6e2, &(0x7f0000001140)="$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") getdents64(r0, &(0x7f0000002140)=""/4105, 0x1009) 1m33.665356022s ago: executing program 1 (id=8149): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m33.005110136s ago: executing program 1 (id=8155): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 1m32.518793448s ago: executing program 1 (id=8158): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {0x0, 0xe}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0xa}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 1m32.078510301s ago: executing program 33 (id=8158): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {0x0, 0xe}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0xa}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 1m31.374760995s ago: executing program 3 (id=8171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@allocspi={0x124, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@remote, 0x0, 0x32}, @in6=@empty}, 0x0, 0xa0b1}, [@user_kmaddress={0x2c, 0xb, {@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m31.274417826s ago: executing program 3 (id=8172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 1m31.063491547s ago: executing program 3 (id=8175): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000280), r0, 0x0, 0x800, 0x0) 1m30.945876878s ago: executing program 3 (id=8177): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m30.443145881s ago: executing program 3 (id=8179): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') 1m30.052838793s ago: executing program 3 (id=8183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x4800, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef40d000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1m29.628359076s ago: executing program 34 (id=8183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x4800, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef40d000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 3.37466269s ago: executing program 5 (id=9259): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4000000, @private0}}}, 0x88) 3.031470112s ago: executing program 4 (id=9262): r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) 2.821706614s ago: executing program 5 (id=9265): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5d66, &(0x7f000000bb40)="$eJzs3dtvHFcdB/DfXry+lKZWH6oQcUlTLi2lSeOkTcutqZB4AAGVqrwnMm4VkQJKQkUri7iKxDsSz6j8ETyDUB+LxJ/APxAp7lMFooPGPicZT9bepIl31j6fj+TM/ObseM/k6/Hsemb2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/7Rm6d7EXHx3bRgOeILMYjoRyzW9fGoZ87nxw8j4mhsNcdTEXFkPqJef+ufJyLORsTHRyJub66v1otX7rMfL71x658/ffNnG3/86j/+9d+P/vy3dvsbH/3wJ3+9EbF89A9/+t+NR7PtAAAAUIqqqqpeept/LL2/73fdKQBgKvLxv0rycrVarVar1YevbqrGu9EsImKjuU79msHpeAA4YDbi0667QIfkX7RhRDzWdSeAmdbrugPsi9ub66u9lG+veTw4vt2erwXZkf9G7879HbtNJ2lfYzKtn6+bMYgnd+nP4pT6MEty/v12/he320fpcfud/7Tslv9o+9an4uT8B+38Ww5P/v2x+Zcq5z98oPwH8gcAAAAAgBmW//6/3PH53/mH35T7stf53+NT6gMAAAAAAAAAPGoPO/7fHcb/AwAAgJlVv1evfXjk7rLdPoutXn6hF/F46/FAYdLNMktd9wMAAAAAAAAAAAAASjLcvob3Qi9iLiIeX1qqqqr+amrXD+ph1z/oSt9+KFnXv+QBAGDbx0da9/L3IhYi4kL6rL+5paWlqlpYXKqWqsX5/Hp2NL9QLTbe1+ZpvWx+dB8viIejqv5mC431mia9X57U3v5+9XONqsF9dGw6OgwcACJi+2h02xHpkKmqJ6LrVzkcDPb/w8f+z/3o+ucUAAAA2H9VVVW99HHex9I5/37XnQIApiIf/9vnBdRqtVqtVh++uqka70aziIiN5jr1awbD8QPAAbMRn3bdBTok/6INI+Jo150AZlqv6w6wL25vrq/2Ur695vEgje+erwXZkf9Gb2u9vP646STta0ym9fN1Mwbx5C79eWpKfZglOf9+O/+L2+2j9Lj9zn9adsu/3s7lDvrTtZz/oJ1/y+HJvz82/1Ll/IcPlP9A/gAAAAAAMMPy3/+Xnf/NmwwAAAAAAAAAB87tzfXVfN9rPv//pTGPc//n4ZTz78m/SDn/fjv/1gU5g8b8rdfv5v/J5vrqh18895U8nfn85waj+rnnev3BMF3zU829FZfjSqzFi/c8frij/fQ97XM72lcmtJ+5p31Uty/m9pOxGr+OK/GLO+3zEy6MWpjQXk1oz/kP7P9FyvkPG191/kupvdea1m590L9nv29Oxz3P+Z9/du7evWv6bsbgzrY11dt3ooP+bP2fPDaK315bu3ryd5euX796OtJkx9KVSJNHLOc/l75y/s8+s92ef+8399dbH4weOP9ZcTOGu+b/TGO+3t7npty3LuT8R+kr55+PQOP3/4Oc/+77//Md9AcAAAAAAAAAAAAAAAD2UlXV1i2i5yPi5XT/T1f3ZgIA05WP/1WSl6vV6gNZL8xYf9Rq9YzVTdV4rzWLiPh7c536NcPvx30zAGCWfRYR/+66E3RG/gXLn/dXT7/WdWeAqbr23vu/vHTlytrVa133BAAAAAAAAAD4vPL4n8cb4z9vXQfUGjd6x/ivr8fxTzbXV99d/s+XD9z4n/3RYGus87RBT8fe43+fiL3H/x5OeL65Ce2jCe3zE9oXJrSPvdGjIef/dMo4538sbdhe47/m/NvTCU/Zqb3Gf322g/50Led/Io31nPP/Zutxzfyrvxzk8X/7O/I/df2d35y69t77L1x+59Lba2+v/erM2ZVXT6+cO/vKi6feunxlLf3bYY/3V84/j33tOtCy5Pxz5vIvS87/66mWf1ly/t9ItfzLkvPPr/fkX5acf37vI/+y5PyfS7X8y5Lz/1aq5V+WnP/zqZZ/WXL+3061/MuS838h1fIvS87/ZKrlX5ac/6lUy78sOf98hkv+Zcn55ysb5F+WnP9KquVflpz/mVTLvyw5/7Opln9Zcv4vpVr+Zcn5v5xq+Zcl538u1fIvS87/lVTLvyw5/1dTLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5fz/V8i9Lzv8HqZZ/WXL+r6Va/mW5+/n/ZsyYMZNnuv7NBAAAAAAAAAAAAAC0TeNy4q63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHdvMXKW9/3A3z3Za0PsTWIIBwO2MWBg8a4P+PD/14mBkFJoG0JCeiI1rr02Jj7Va3MSEhtBUySQygUXtFJSQKjKRaugNlGDRCMuKrXpTXvV3lRppUYVikLlRL1pVHD1zjzP45nZ9bxr7CEz7/P5RPbPO8dn3nlmdr8bfQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLX2rpk/HCqKovzT+GuiKC4t/72s2F1+ObftF71CAAAA4EK93/j7z1emE3Yv4kotl/m7a//xO2fOnDlTFH+y6lMvlzNYUxQrlhZF87xg/MfH2y4TPFuMDw23fD1ccfcjFeePVpw/VnH+korzl1acP15x/rwDMM+y5u9jGje2vvHPieYhLVYVY43z1i9wrWeHlg4Px9/lNAw1rnNm7EBxqDhczBTT864z1PhfUby9tryve4p4X8Mt97W6KIrTP316X1zDUDjG64u2O2tofe7eu6NY87OfPr3vsYmfX7PQrDwM81ZaFBvWlet8rijO/rqqGCqWpmMS1zncss7VC6xzpG2dQ43rlf/uXOfpRa4zPu7xsM5/6rLO1eG0J64vimKuOOdlOj1bDBfLO+41He/x5o4ob6N8Kj9RjJ7XPlm7iH1SXudH17fvk849GY//2nBMRs+xhtan472vLZl33D/sPikfdT/s1fK27y/vdHy89VerbXu1vMzTN5x7Dyz43C2wB9JebtkD66r2wPCSkcYeGD675nVte2DTvOsMF0ON+3r3hu57YOrkkeNTs08+dduhI3sPzhycObpl6+admzZv37pjeurAocMz4e/zO6QDZHkxnPbguvBeE/fgTR2Xbd2SZ15rvg5evXL7tQvN81nD+EV6HVzIGoqwX750Y7mgS4eLc+zx8jLPbbjw10H6vt/yOhhteR0s+J66wOtgdBGvg/Iypzcs7nvmaMufhdaw0HvhxdgDEy174EK+H7au4cN8Pyzv86Gbz/1euDqs6/lbzvf74ci8PRAf1lB47ZWnpJ/3xneE4zJ/X1xVnnHJkuLU7MyJjU/sPXnyxKYijI/EJ1ueq879srzlMRXz9svwee+X3Z//YPtVC5w+EY7V+K3dn6vyMlsnuz9XjXf3hY9n26mbizAuso/6eC703aw8nilLdDme5WWeu+3CfxZMuaTl/W+s6v1vZGy0+f43ko7GWNv73/ynZqSxsqI4fdvi3v/Gwp+P+v1vVZ+8/5XH6qGN3fdAeZnnp853D4x2ff+7PsyhsJ6bQ2IYb8n9HzTOn2tu05bnsnLfjI6OhX0zGu+xfd9smXed8tbK+94w/eH2zYbr25+rtp9barhvymP18nT3fVNe5p1NF/7esSz+s+W9Y0nVHhgbWVKudyxtgub73ZllcQ9sLPYVx4rDxf50nfJZLu9rcvPi9sCS8Oejfu+4ok/2QHmsXtncfQ+Ul/nbLRf3Z6cN4ZR0mZafnTp/v3CuzH/V6Nnb6zxsFzvzl+v87NbuvxsqL/OTreebM7ofp1vDKZcscJw6Xz/n2tP7i+rjdLH2dLnOw7d3/91UeZlV2xa5n3YXRfHWC280f9/V/P3uX5765++0/d53od8pv/XCG1+48gc/OJ/1AwDw4X3Q+HtuSfNnzZb/x3ox//8/AAAAMBBi7h8OM5H/AQAAoDZi7h8JM5H/AQAAoDZi7h8NM8kk/z8y9PWX33+mSJ8GeCaI58fDcP/S5uVix3sufL3mzFnl6Xe+MXbfd59Z3H0PF0Xxv/deveDlH1ka19V0PK5zpP30ea64blH3//CDZy/X+vkJp4ebtx8fz2K3Qewqv/1vdzZud83NzfnOvUVjPjD3/LON29/Z/Dpe/t3/aF7uG+FDS3YfGGq7/oawnvVhrgmfKXP/srPHoZzxet9+++Dff/rLZ+8vXm9o3YrGw3xlY/N242dEvfRXzcvHx32u9f/NC9/6dnn5J25YeP3PDC+8/nfD7f4ozP95r3l66zH/bsv6/yCsP95fvN7G17+/4Prf/Ovm5d8M++LVMDvXf8cfXfP+Qs9XvJ/do83rxfuf/rO7G9eLtxdvv3P941N3th2Pztt/5/Xm7ex67L9HWi8fT4/3Ez082r6/h8Lz29YjL4riW18v2o5zMda83lsd64+3d3x04fXf2rHO46890rh+5+OJvvngXQs+3rie3X8x0fZ4XloRjt/wsn8ob/fdq8N+DOf/fK55e52fZfrmivb3m3j5Vyear9t4e1Md63+pY/1z15XHrnr99/ysuf43P7O0bf27V4b99PHmrFr/wT9d2Xb91z7XXM+JxyePHps9dSh+xsFEx+t46fiy5Zdc+rEVK8N7aefXe46dfGTmxJrpNdNFsWYAPzKw1+t/Pcz/ao65i38PTf8y2tx3L97X/L5101jz65fC6Q+H5zN+f/zmH4+17dfO531uvDkvdP23hHUs1ur1P96xqAv+59Y3X/7XB77S+XNBfDzHLxtvPL5X1l7eOG/oneb5ne9XVf79svbX9Q9XNef3wnE9Ez6Zed3lzfvrvP342SQvfrH5+o0/ycXrFx2fJzIx0v44LnT9Pww/x3z/ivb3v7g/vvdMx6c5TxRD5RLmwvtDMdc8P14qHu8XT1++4P3Fz+Ep5q48n2We0+yTs1OHDx099cTUyZnZk1OzTz6158ixU0dP7ml8dumeR6uuf/b1vbzx+t4/s21r0Xi1H2uOHvtFr//4g/v2b5++cf/Mgb2nDpx88PjMiYP7Zmf3zeyfvXHvgQMzj1dd/9D+XZs279yyffPkwUP7d+3YuXPLzslDR4+Vy2guqsK26a9OHj2xp3GV2V1bd266/fat05NHju2f2bV9enryVNX1G9+bJstrPzZ5Yubw3pOHjsxMzh56ambXpp3btm2u/PTHI8cPzK6ZOnHq6NSp2ZkTU83HsuZk4+Tye1/V9cnD7MrwftdhKPx0fvet29Ln45be+No5b6p5kYn2E38SPgvqG+Nbdizm65j7x8JMMsn/AAAAkIOY+8MH/589Q/4HAACA2oi5f2mYifwPAAAAtRFz/3iYSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x9y8riizzPwAAAOQg5v7lYSbyPwAAANRGzP2XhJnI/wAAAFAbMfdfGmaSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z9HwszyST/AwAAQA5i7l8RZiL/AwAAQG3E3L8yzET+BwAAgNqIuX8izCST/K//r/+v/6//r/+v/99L+v/6/93o/+v/D/L69f/1/6nWb/3/mPs/HmaSSf4HAACAHMTc/4kwE/kfAAAAaiPm/k+Gmcj/AAAAUBsx968KM8kk/+v/6//r/+v/6//r//eS/r/+fzf6//r/g7x+/X/9f6r1W/8/5v7Lwkwyyf8AAACQg5j7Lw8zkf8BAACgNmLu/1SYifwPAAAAtRFz/xVhJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3H9lmEkm+R8AAAByEHP/VWEm8j8AAADURsz9V4eZyP8AAABQGzH3rw4zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/mvCTDLJ/wAAAJCDmPuvDTOR/wEAAKA2Yu6/LsxE/gcAAIDaiLl/TZhJJvlf/1//X/9f/1//X/+/l/T/9f+70f/X/x/k9ev/6/9Trd/6/zH3rw0zyST/AwAAQA5i7l8XZiL/AwAAQG3E3H99mIn8DwAAALURc//6MJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+6/Icwkk/wPAAAAOYi5/8YwE/kfAAAAaiPm/pvCTOR/AAAAqI2Y+zeEmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc//NYSaZ5H8AAADIQcz9t4SZyP8AAABQGzH33xpmIv8DAABAbcTcPxlmkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/beFmWSS/wEAACAHMfdvDDOR/wEAAKA2Yu6fCjOR/wEAAKA2Yu6fDjPJJP/r/+v/6//r/+v/6//3kv6//n83+v/6/4O8fv1//X+q9Vv/P+b+TWEmmeR/AAAAyEHM/ZvDTOR/AAAAqI2Y+7eEmcj/AAAAUBsx928NM8kk/+v/6//r/+v/6//r//eS/r/+fzf6//r/g7x+/X/9f6r1W/8/5v7bw0wyyf8AAACQg5j7t4WZyP8AAABQGzH3bw8zkf8BAACgNmLu3xFmkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/TvDTDLJ/wAAAJCDmPv/X5iJ/A8AAAC1EXP//w8zkf8BAACgNmLu/6Uwk0zyv/6//r/+v/7/Re3/P/pYOl3/X/+/0P/X/6+g/6//P8jr1//X/6dav/X/Y+7fFWaSSf4HAACAHMTc/+kwE/kfAAAAaiPm/s+Emcj/AAAAUBsx9+8OM8kk/+v/6//r/+v/++//6//3kv6//n83+v/6/4O8fv1//X+q9Vv/P+b+O8JMMsn/AAAAkIOY++8MM5H/AQAAoDZi7r8rzET+BwAAgNqIuf+zYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9x/d5hJJvkfAAAAchBz/+fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf+eMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+7/lTCTTPI/AAAA5CDm/nvDTOR/AAAAqI2Y++8LM5H/AQAAoDZi7v/VMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+7/tTCTTPI/AAAA5CDm/l8PM5H/AQAAoDZi7v98mIn8DwAAALURc//9YSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9z/hTCTTPI/AAAA5CDm/gfCTOR/AAAAqI2Y+78YZiL/AwAAQG3E3P+lMJNM8r/+/7n6/829oP+v/6//f5b+v/7/h6H/r//fjf6//v8gr1//X/+fav3W/4+5/8Ewk0zyPwAAAOQg5v4vh5nI/wAAAFAbMff/RpiJ/A8AAAC1EXP/b4aZZJL/9f/99//1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc/9vhZlkkv8BAAAgBzH3/3aYifwPAAAAtRFz/++Emcj/AAAAUBsx9z8UZpJJ/tf/1//X/9f/1//X/+8l/X/9/270//X/B3n9+v/6/1Trt/5/zP1fCTPJJP8DAABADmLu/90wE/kfAAAAaiPm/j1hJvI/AAAA1EbM/Q+HmWSS//X/9f/1//X/9f/1/3tJ/1//vxv9f/3/QV6//r/+P9X6rf8fc//eMJNM8j8AAADkIOb+3wszkf8BAACgNmLu3xdmIv8DAABAbcTcvz/MJJP8r/+v/6//r/+v/6//30v6//r/3ej/6/8P8vr1//X/qdZv/f+Y+2fCTDLJ/wAAAJCDmPsPhJnI/wAAAFAbMfcfDDOR/wEAAKA2Yu5/JMwkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j7D4WZZJL/AQAAIAcx9z8aZiL/AwAAQG3E3P/VMBP5HwAAAGoj5v7DYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9x/JMwkk/wPAAAAOYi5/2iYifwPAAAAtRFz/7EwE/kfAAAAaiPm/uNhJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3P/7YSaZ5H8AAADIQcz9J8JM5H8AAACojZj7Z8NM5H8AAACojZj7T4aZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXn9P+/8jhf4/tdBv/f+Y+0+FmWSS/wEAACAHMfc/FmYi/wMAAEBtxNz/eJiJ/A8AAAC1EXP/E2EmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q1++//6//T7V+6//H3P9kmEkm+R8A/o+9u+a9JTuiOPpPHIxkyd/XzMzMzMzMzMzMzEyBk10lR90zz2697lNrJRVd6Ug32sFPDQAwQe3+e+Y2+x8AAACWUbv/XrnN/gcAAIBl1O6/d24bsv/1//p//b/+X/+v/z+S/l//v0X/r/+/8vv1//p/9p2t/6/df5/cNmT/AwAAwAS1+++b2+x/AAAAWEbt/vvlNvsfAAAAllG7//65bcj+1//r//X/+n/9v/7/SPp//f8W/b/+/8rv1//r/9l3tv6/dv8DctuQ/Q8AAAAT1O5/YG6z/wEAAOCE7nZLv6rd/6DcZv8DAADAMmr3Pzi3Ddn/+n/9v/5f/6//1/8fSf+v/9+i/9f/X/n9+n/9P/vO1v/X7n9Ibhuy/wEAAGCC2v0PzW32PwAAACyjdv/Dcpv9DwAAAMuo3f/w3DZk/+v/9f/6f/2//l//fyT9v/5/i/5f/3/l9+v/9f/sO1v/X7v/EbltyP4HAACACWr3PzK32f8AAACwjNr9j8pt9j8AAAAso3b/o3PbkP2v/9f/6//1//p//f+R9P/6/y36f/3/ld+v/9f/s+9s/X/t/sfktiH7HwAAACao3f/Y3Gb/AwAAwDJq9z8ut9n/AAAAsIza/Y/PbUP2v/5f/6//1//r//X/R9L/6/+36P/1/1d+v/5f/8++s/X/tfufkNuG7H8AAACYoHb/E3Ob/Q8AAADLqN3/pNxm/wMAAMAyavc/ObcN2f/6f/3/ne//76H/1//r//X/d5n+X/+/Rf+v/7/y+/X/+n/2na3/r93/lNw2ZP8DAADABLX7n5rb7H8AAABYRu3+p+U2+x8AAACWUbv/6bltyP7X/+v/ff9f/6//1/8fSf+v/9+i/9f/X/n9+n/9P/vO1v/X7n9Gbhuy/wEAAGCC2v3PzG32PwAAACyjdv+zcpv9DwAAAMuo3f/s3DZk/+v/9f/6f/2//l//fyT9v/5/i/5f/3/l9+v/9f/sO1v/X7v/ObltyP4HAACACWr3Pze32f8AAACwjNr9z8tt9j8AAAAso3b/83PbkP2v/9f/6//1//p//f+R9P/6/y36f/3/ld+v/9f/s+9s/X/t/hfktiH7HwAAACao3f/C3Gb/AwAAwDJq978ot9n/AAAAsIza/S/ObUP2v/5f/6//1//r//X/R9L/6/+36P/1/1d+v/5f/8++s/X/tftfktuG7H8AAACYoHb/S3Ob/Q8AAADLqN3/stxm/wMAAMAyave/PLcN2f/6f/2//l//r//X/x9J/6//36L/1/9f+f36f/0/+87W/9fuf0VuG7L/AQAAYILa/a/MbfY/AAAALKN2/6tym/0PAAAAy6jd/+rcNmT/6//1//p//b/+X/9/JP2//n+L/l//f+X36//1/+w7W/9fu/81uW3I/gcAAIAJave/NrfZ/wAAALCM2v2vy232PwAAACyjdv/rc9uQ/a//1//r//X/+n/9/5H0//r/Lfp//f+V36//1/+z72z9f+3+N+S2IfsfAAAAJqjd/8bcZv8DAADAMmr3vym32f8AAACwjNr9b85tQ/a//l//r//X/+v/9f9H0v/r/7fo//X/V36//l//z76z9f+1+9+S24bsfwAAAJigdv9bc5v9DwAAAMuo3f+23Gb/AwAAwDJq9789tw3Z//p//b/+X/+v/9f/H0n/r//fov/X/1/5/fp//T/7ztb/1+5/R24bsv8BAABggtr978xt9j8AAAAso3b/u3Kb/Q8AAADLqN3/7tw2ZP/r//X/+n/9v/5f/38k/b/+f4v+X/9/5ffr//X/7Dtb/1+7/z25bcj+BwAAgAlq9783t9n/AAAAsIza/e/LbfY/AAAALKN2//tz25D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5Xf/z/0/3fP1f+zvLP1/7X7P5Dbhux/AAAAmKB2/wdzm/0PAAAAy6jd/6HcZv8DAADAMmr3fzi3Ddn/+n/9v/5f/6//1/8fSf+v/9+i/9f/X/n9vv+v/2ff2fr/2v0fyW1D9j8AAABMULv/o7nN/gcAAIBl1O7/WG6z/wEAAGAZtfs/ntuG7H/9v/5f/6//1//r/4+k/9f/b9H/6/+v/H79v/6ffWfr/2v3fyK3Ddn/AAAAMEHt/k/mNvsfAAAAllG7/1O5zf4HAACAZdTu/3RuG7L/9f/6f/3/f/X/d9zc3Oj/9f+h////0P/r/7fo//X/V36//l//z76z9f+1+z+T24bsfwAAAJigdv9nc5v9DwAAAMuo3f+53Gb/AwAAwDJq938+tw3Z//p//b/+3/f/9f/6/yPp//X/W/T/+v8rv1//r/9n39n6/9r9X8htQ/Y/AAAATFC7/4u5zf4HAACAZdTu/1Jus/8BAABgGbX7v5zbhux//b/+X/+v/9f/6/+PpP/X/2/R/+v/r/x+/b/+n31n6/9r938ltw3Z/wAAADBB7f6v5jb7HwAAAJZRu/9ruc3+BwAAgGXU7v96bhuy//X/+n/9v/5f/6//P5L+X/+/Rf+v/7/y+/X/+n/2na3/r93/jdw2ZP8DAADABLX7v5nb7H8AAABYRu3+b+U2+x8AAACWUbv/27ltyP7X/+v/9f/6f/2//v9I+n/9/xb9v/7/yu/X/+v/2Xe2/r92/3dy25D9DwAAABPU7v9ubrP/AQAAYBm1+7+X2+x/AAAAWEbt/u/ntiH7X/+v/9f/6//1//r/I+n/9f9b9P/6/yu/X/+v/2ff2fr/2v0/yG1D9j8AAABMULv/h7nN/gcAAIBl1O7/UW6z/wEAAGAZtft/nNuG7H/9v/5f/6//1//r/4+k/9f/b9H/6/+v/H79v/6ffWfr/2v3/yS3Ddn/AAAAMEHt/p/mNvsfAAAAllG7/2e5zf4HAACAZdTu/3luG7L/9f/6f/2//l//r/8/kv5f/79F/6//v/L79f/6f/adrf+v3f+L3DZk/wMAAMAEtft/mdvsfwAAAFhG7f5f5Tb7HwAAAJZRu//XuW3I/tf/6//1//r/8/T/d+Tq//X/d57+X/9/o/+/Zbe7n7/6+/X/+n/2na3/r93/m9w2ZP8DAADABLX7f5vb7H8AAABYRu3+3+U2+x8AAACWUbv/97ltyP7X/+v/9f/6//P0//lfff9f/38X6P/1/zf6/1t2u/v5q79f/6//Z9/Z+v/a/X/IbUP2PwAAAExQu/+Puc3+BwAAgGXU7v9TbrP/AQAAYBm1+/+c24bsf/2//l//r//X/+v/j6T/1/9v0f/r/6/8fv2//p99Z+v/a/f/JbcN2f8AAAAwQe3+v+Y2+x8AAACWUbv/b7nN/gcAAIBl1O7/e24bsv/1//p//b/+X/+v/z+S/l//v0X/r/+/8vv1//p/9p2t/6/d/4/cNmT/AwAAwAS1+/+Z2+x/AAAAWEbt/n/lNvsfAAAAllG7/9+5bcj+1//r//X/+n/9v/7/SPp//f8W/b/+/8rv1//r/9l3tv6/dv9/AgAA//+Z+ZMy") removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', ')\x00@=\x8fY?\xc9\v\t\x85\xd5\x063;\x06\xf5\xa4\xa9X\x91\xb8\x8c\x92'}) 2.729346024s ago: executing program 4 (id=9266): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002000081"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.723209034s ago: executing program 2 (id=9267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x5b59a396928ba8c6}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 2.556815365s ago: executing program 2 (id=9269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52) 2.458616116s ago: executing program 4 (id=9271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) 2.275512117s ago: executing program 2 (id=9273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 2.274526307s ago: executing program 4 (id=9274): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) sync_file_range(r0, 0x0, 0xfffffffffffffffd, 0x0) 2.066322678s ago: executing program 4 (id=9277): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x10}}) 2.004607209s ago: executing program 2 (id=9279): syz_mount_image$cramfs(&(0x7f0000000680), &(0x7f0000000180)='./file2\x00', 0x1, &(0x7f00000006c0)=ANY=[], 0xfd, 0x140, &(0x7f00000002c0)="$eJzs0L9LAmEcx/H3489+KBoYWEMEDUlhnie2NSgkCdlB4dIU6EWBliiEYzU39AfcULSKQ/QHlE2WQtjf4RY0FuejhdDU/LyGO+7zffjcw3dzoxshCE4GBFCpmrWaWVzcNXKZvfsHwcjE4FmuVO3DRZk9puDIfrugfyHjZ78DKJlrhdOS/d1PQQRIT8PhsRsNeXbKAemQnZXM+DCLLEFrVmb6H1limM27IB2Qmd33dQvL9j9mfvs+gLrllhf1MqZurTYbLzuddja6smBe6Zm5O1/YSd70yC3UrfdYO/oWazZ63U5u28gZ3YSurye0uKYle8ZrJ5s8v8a15TuDfTHe57E78nApwBLQGMz7T8IPQoBRDnhDk8BJEMRoQuvm0yiPti0nhYOw+2f/AkVRFEVRFEVRFEX5p+8AAAD//3OuWFE=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x18000020) 1.81944328s ago: executing program 4 (id=9281): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 1.78993262s ago: executing program 6 (id=9282): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT=0x0], 0x21, 0x1f9, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) 1.404328162s ago: executing program 5 (id=9285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.322108692s ago: executing program 2 (id=9286): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f89, &(0x7f0000005b80)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H5Su+qr0zV9yv+p6UtV9QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBYcjPhODiH7Ecl0fi3rmYr7/MCKOxGZzPBcRg8WIev3Nf56JOBcRHx2KuLdxa7VefGaP/Th/6ub1T77/nX/87k93jvz0zZ980G7/0WfPfvj72xGHf/jah5/cfjLbDgAAAKWoqqrqpbf5R9P7+37XnQIApiI//1dJXq5Wq9XqJ1r/sT9b/VEXWjdV491uFhGx3lynfs3gcDwAzJn1+LjrLtAh+RdtGBFPdd0JYKb1xiwb+yECc+Xexq3VXsq313w+OLbVnj+n3Jb/eu/+9R27TSdpn2My7vdrP9yJQTy7S3+Wp9SHWZLz77fzv7zVPkr32+/8p2W3/Edblz4VJ+c/aOffsi3/P0fE3ObfH5t/qXL+w0fJf30wx/u//AEAAAAAOPjy5/+HOz7+u/j4m7InDzv+e2xKfQAAAAAAAACAJ+1xx/+7z/h/AAAAMLPq9+q1vxx6sGy372Krl1/qRTzduj9QmHSxzErX/QAAAAAAAAAAAACAkgy3zuG91ItYiIinV1aqqqpvTe36UT3u+vOu9O2HknX9Rx4AALZ8dKh1LX8vYikiLqXv+ltYWVmpqqXllWqlWl7Mr2dHi0vVcuN9bZ7WyxZHe3hBPBxV9Q9baqzXNOn98qT29s+rH2tUDfbQsenoMHAAiIitZ6N7npEOmKp6Jrp+lcN8sP8fPPZ/9qLr31MAAABg/1VVVfXS13kfTcf8+113CgCYhqX8/N8+LqBWq9Vqtfrg1U3VeLebRUSsN9epXzMYjh8A5sx6fNx1F+iQ/Is2jIgjXXcCmGm9rjvAvri3cWu1l/LtNZ8P0vju+VyQbfmv9zbXy+uPm07SPsdkWr9fd2IQz+7Sn+em1IdZkvPvt/O/vNU+Svfb7/ynZbf86+083EF/upbzH7Tzbzk4+ffH5l+qnP/wkfIfyB8AAAAAAGZY/vz/sOO/eZMBAAAAAAAAYO7c27i1mq97zcf/Pz/mfr3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFQ/9kKvPximc36qhbfialyLtTi14/7Dbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j/i5TzHzZudf4rqb3Xmtbuvt/fsd83p+Me5+Lf/vvizr1r+u7E4P62NdXbd7yD/mz+nzw1il/dWLt+4jdXbt68fjrSZNvSM5EmT1jOfyHdcv4vvbDVnv/uN/fXu++PHjn/WXEnhrvm/0Jjvt7el6fcty7k/EfplvPPz0Dj9/95zn/3/f+VDvoDAAAAAAAAAAAAAAAAD1NV1eYlohcj4kK6/qerazMBgKn6ww/STJWEWq1Wq9XqA1s3VeO93ixiafs6FyLit+N+GAAwy/4XEf/suhN0Rv4Fy9/3V0+/0HVngKm68e57P7ty7dra9Rtd9wQAAAAAAAAA+LTy+J/HGuM/b54H1Bo3etv4r2/Esbkd/7M/GmyOdZ426Pl4+Pjfx+Ph438PJzzewoT20YT2xQntSxPax17o0ZDzfz5lnPM/mjaspPFfX+qgP13L+R9PYz3n/L/Uul8z/+qv85x/f1v+J2++88uTN95979Wr71x5e+3ttZ+fPnXh3Nnz586eP3/yravX1k5t/dthj/dXzj+Pfe080LLk/HPm8i9Lzv+LqZZ/WXL+L6Za/mXJ+efXe/IvS84/v/eRf1ly/i+nWv5lyfl/OdXyL0vO/5VUy78sOf+vpFr+Zcn5v5pq+Zcl538i1fIvS87/ZKrlX5acfz7CJf+y5PzzmQ3yL0vO/0yq5V+WnP/ZVMu/LDn/c6mWf1ly/udTLf+y5PwvpFr+Zcn5fzXV8i9Lzv9rqZZ/WXL+r6Va/mXJ+X891fIvS87/G6mWf1ly/t9MtfzLkvP/VqrlX5ac/7dTLf+y5PxfT7X8y/Lg+//NTHnmP3+PmIFumDEzbqbrv0wAAAAAAAAAAAAAQNs0TifuehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3t3FyHXWZwA/+2WvnUBcEkIIhqwdJxiy8e76KzHBZAOEpqGlaSC0tKGOsdeOwV/1riGJombTpG0QkRqpvUgvSgFRhNRWiRBSqZSiSEVq75orUG5QK+XCUpPKRFCJimSrM+d9352ZnZ1Zf2w855zfD8V/78yZmXfOnJndZ80zAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTb9LGZPx/Isiz/r/HHhiy7PP/7umw6/3J+96VeIQAAAHCh3mj8+Q9XpBOmV3Chpm3+7X3/8f2FhYWF7Auvn3nzLxcW0hljWTa0Nssa50X//stfLDRvEzyRjQ4MNn092OPmh3qcP9zj/JEe56/pcf7aHueP9jh/yQ5YYl3x+5jGlW1p/HVDsUuzq7KRxnlbOlzqiYG1g4PxdzkNA43LLIwcyo5kR7OZbHLJZQYa/8uyFzblt3VXFm9rsOm2NmZZdvZnjx6IaxgI+3hL1nJjDc2P3Wt3ZGOv/+zRA9+Ze/XdnWbP3bBkpVm2dXO+ziezbPHXVdlAtjbtk7jOwaZ1buywzqGWdQ40Lpf/vX2dZ1e4zni/R8M6X+qyzo3htIeuz7JsPlt2m3ZPZIPZ+rZbTft7tDgi8uvIH8p3ZMPndJxsWsFxkl/mletbj5P2YzLu/01hnwwvs4bmh+O1x9cs2e/ne5zk97ofjtX8uu/Jb3R0tPlXqy3Har7Nozcsfwx0fOw6HAPpWG46Bjb3OgYG1ww1joHBxTVvbjkGppZcZjAbaNzWmRu6HwMTc8dOTsw+/MjNR47tPzxzeOb41OTunTt27dyxa9fEoSNHZyaLP89tl5bI+mwwHYObw2tNPAbf37Zt8yG58M2L9zwY7ZPnQX7fP3NjvqDLB7NljvF8mye3XvjzIH3fb3oeDDc9Dzq+pnZ4Hgyv4HmQb3N268q+Zw43/ddpDav1Wrih6Ri4lN8P89u8/wPLvxZuDOt66oPn+v1waMkxEO/WQHju5aekn/dGbw37ZelxcW1+xmVrstOzM6e2PbR/bu7UVBbGW+LKpseq/XhZ33SfsiXHy+A5Hy/Tf/+rG6/tcPqGsK9Gb+r+WOXb7Bzv/lg1Xt1b9+earNifLaduz8K4yN7q/dnpu1m+P1OW6LI/822evPnCfxZMuaTp9W+k1+vf0Mhw8fo3lPbGSMvr39KHZqixsiw7e/PKXv9Gwn9v9evfVX3y+pfvq/u3dT8G8m2emjjXY2C46+vf9WEOhPV8ICSG0abc/2bj/PniMG16LHseN8PDI+G4GY632Hrc7Fhymfza8tveOnl+x83W61sfq5afWyp43OT76q8mux83+TYvTl34a8e6+Nem1441vY6BkaE1+XpH0kFQvN4trIvHwLbsQHYiO5odTJfJH+X8tsa3r+wYWBP+e6tfO67pk2Mg31fPbu9+DOTb/GjHxf3ZaWs4JW3T9LNT++8Xlsv81w4vXl/7brvYmT9f58d//Kl0WqcMkW/z6s5zzRnd99NN4ZTLOuyn9ufPcsf0weyt2U/XhHUe3dX9d1P5NlftXuHxNJ1l2ctTLzd+3xV+v/u90z/+fsvvfTv9TvnlqZfvnrj3J+eyfgAAzt+bjT/n1xQ/azb9i/VK/v0fAAAAKIWY+wfDTOR/AAAAqIyY+4fCTOR/AAAAqIyY+4fDTGqS/x+8dc9zbzyWpXcDXAji+XE33PORYrvY8Z4PX48tLMpP/+i3R5776mMru+3BLMt+dfd7Om7/4Efiugon4zo/1Hr6Etdct6Lbf+C+xe2a3z/h7J7i+uP9WelhELvKL0xsb1zv2MNTjfni3Vlj3jv/1BPF9Rdfx+3P7Ci2/5vwpiXThwZaLr81rGdLmGPhPWXumV7cD/mMl3tu4/v+9crPLt5evNzA5rc37uazf1xcb3yPqGeuLLaP93u59f/L1777XL79Qzd0Xv9jg53XfyZc7yth/nJvsX3zPv9q0/r/NKw/3l683LZv/bDj+p9/V7H98+G4+EaY7eu/4y/e+0anxyvezvRtxeXi7U/+787G5eL1xetvX//oY1Mt+6P9+l98vbievV/++VDz9vH0eDvRA7e1Ht8D4fFt6ZFnWfbdP8ta9nP24eJy/9y2/nh9J2/rvP6b2tZ5cuC6xuUX78+Glvv19b/b3vH+xvVM/+OGlvvzzJ1h/70+8aP8es/cG47HcP7/vVRcX/t7mT5/Z+vrTdz+GxuK5228vom29T/Ttv756/J913v9d71erP/529e2rH/6E+F4uquYvdZ/+G+vaLn8N79TPB6nvjJ+/MTs6SMHm/Zq8/N47ei69Zdd/ra3XxFeS9u/3ndi7sGZU2OTY5NZNlbCtwxc7fV/K8z/Kcb8xb+Fwk9+Xhx3T3+y+L71/l8UXz8TTn8gPJ7x++PX/3qk5Xhtf9znby/mha7/g2EdK/Wur/3XdSva8MznXzj9T3/yavvPBfH+nHznaOP+Pbvp6sZ5Ay8W57e/XvXyn+9sfV7/dHiyMX8Q9utCeGfmzVcXt9d+/fG9SZ7+dPH8jT/Jxctnbe8nsmGo9X5c6Pp/Gn6O+eE1ra9/8fj4wWNt7+a8IRvIlzAfXh+y+eL8uFXc30+fvbrj7cX34cnm330uy1zW7MOzE0ePHD/90MTczOzcxOzDj+w7duL08bl9jfcu3ffFXpdffH6vbzy/D87s3pk1nu0nirHKLvX6T9534OAtkzcenDm0//ShuftOzpw6fGB29sDMwdkb9x86NPOVXpc/cnDv1PY9O27ZPn74yMG9t+7Zs2PP+JHjJ/JlFIvqYffkl8aPn9rXuMjs3p17pnbt2jk5fuzEwZm9t0xOjp/udfnG96bx/NJfHj81c3T/3JFjM+OzRx6Z2Tu1Z/fu7T3f/fHYyUOzYxOnTh+fOD07c2qiuC9jc42T8+99vS5PPcyeCK93bQbCT+efu2l3en/c3LcfX/aqik1afzzNXgvvBRW/v/X6Oub+kTCTmuR/AAAAqIOY+8Mb/y+eIf8DAABAZcTcvzbMRP4HAACAyoi5v0j+o+nj3+uS/y9W//9x/f8G/X/9/0z/P9H/1//P9P/1/3uoQv8//+FR/1//X/9f/5/O+q3/H3J/ti7L/Ps/AAAAVFTM/evDTOR/AAAAqIyY+y8LM5H/AQAAoDJi7r88zKQm+d/n/+v/6/936//HbfX/M/3/fuj/b/lv/f8l9P/1/zOf/3/eLnV/vuzr78P+/zr9f/pNv/X/Y+5/W5hJTfI/AAAA1EHM/W8PM5H/AQAAoDJi7r8izET+BwAAgMqIuX9DmElN8r/+v/6//r/P/9f/L03/3+f/d6D/r/+f6f+ft0vdny/7+vuw/+/z/+k7/db/j7n/18JMapL/AQAAoA5i7n9HmIn8DwAAAJURc/+VYSbyPwAAAFRGzP1XhZnUJP/Xs///SpZl+v+Z/r/+f9s69f/1/1eD/r/+fzf6//r/ZV6//r/+P731W/8/5v53hpnUJP8DAABAHcTcf3WYifwPAAAAlRFz/7vCTOR/AAAAqIyY+68JM6lJ/q9n/9/n/+v/F/T/W9ep/6//vxr0//X/u9H/1/8v8/qr0P9fl+n/s7r6rf8fc/+7w0xqkv8BAACgDmLuvzbMRP4HAACAyoi5/z1hJvI/AAAAVEbM/RvDTGqS//X/9f/1//X/9f/1/1dTufr/g8ueo/9f0P9vdfH6//OLC9D/L836q9D/9/n/rLZ+6//H3P/eMJOa5H8AAACog5j73xdmIv8DAABAZcTcf12YifwPAAAAlRFz/1iYSU3yv/6//r/+v/6//r/+/2oqV/9/efr/Bf3/Vj7/X/9f/1//n+76rf8fc/+mMJOa5H8AAACog5j7N4eZyP8AAABQGTH3Xx9mIv8DAABAZcTcvyXMpCb5X/9f/1//X/9f/1//fzXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8hzKQm+R8AAADqIOb+G8NM5H8AAACojJj73x9mIv8DAABAZcTcvzXMpCb5X/9f/1//v8T9/yH9/0z/v+/p/+v/d6P/r/9f5vXr/+v/01u/9f9j7v9AmElN8j8AAADUQcz9Hwwzkf8BAACgMmLuvynMRP4HAACAyoi5fzzMpCb5X/9f/1//v8T9f5//37J+/f/+pP+v/9+N/r/+f5nXr/+v/09v/db/j7n/5jCTmuR/AAAAqIOY+7eFmcj/AAAAUBkx90+Emcj/AAAAUBkx90+GmdQk/+v/6//r/+v/6//r/68m/X/9/270//X/y7x+/X/9f3rrt/5/zP1TYSY1yf8AAABQBzH3bw8zkf8BAACgMmLu3xFmIv8DAABAZcTcvzPMpCb5vyT9/22pAKX/r//f7/3/ef3/SP9f/z/T/9f/70H/X/+/zOvX/9f/p9Vgh9P6rf8fc/+uMJOa5H8AAACog5j7d4eZyP8AAABQGTH33xJmMp3+L8YAAABAycXcf2uYSU3+/b8k/X+f/6//X57+v8//T/T/9f8z/X/9/x70//X/y7x+/X/9f3rrt/5/zP17wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/21hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+/8La/X/9f/1/7uvX/9/den/6/93o/+v/1/m9ev/6//TW7/1/2Pu3xtmUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPtvDzOR/wEAAKAyYu6fDjOpSf7X/696/9/n/+v/6//3Wr/+/+rS/9f/70b/v5z9//Bji/5/H/X/82NI/59+1G/9/5j77wgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP0fCzOR/wEAAKAyYu7/eJhJTfK//r/+v/6//r/+v/7/atL/X7X+f+OlUP+/oP9/fi51f77s6++n/r/P/6df9Vv/P+b+O8NMapL/AQAAoA5i7v9EmIn8DwAAAJURc/+vh5nI/wAAAFAZMfffFWZSk/yv/6//v0r9/7hb9P/1//X/9f/1/33+/7L0//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/91hJvI/AAAAVEbM/Z8MM5H/AQAAoGTWLHtOzP2/GWZSk/xfvv7/WCn7/4Pp+mvT//f5//r/+v/6/w36//r/3ej/6/+Xef36//r/9NZv/f+Y+38rzKQm+R8AAADqIOb+T4WZyP8AAABQGTH3/3aYifwPAAAAlRFz/z1hJjXJ/xe7/99++W58/r/+f6b/r/9/vv3/hcUb0v/vb/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7fyfMpCb5HwAAAOog5v57w0zkfwAAAOhTD57zJWLu/3SYifwPAAAAlRFz/2fCTGqS/8v3+f/6//r/+v/6/z7/v0z0//X/u9H/1/8v8/r1//X/6a3f+v8x998XZlKT/A8AAAB1EHP/Z8NM5H8AAACojJj7fzfMRP4HAACAyoi5//fCTGqS//X/9f/1//X/9f/1/1eT/v/S/n/+Gqb/X9D/1/8v8/r1//X/6a3f+v8x938uzKQm+R8AAADqIOb+3w8zkf8BAACgMmLu/4MwE/kfAAAAKiPm/vvDTGqS//X/9f/1//X/9f/1/1eT/r/P/+9G/1//v8zr1//X/6e3fuv/x9z/+TCTmuR/AAAAqIOY+/8wzET+BwAAgMqIuX9fmIn8DwAAAJURc/8DYSY1yf/6//r/+v/6//r/+v+rSf9f/78b/X/9/zKvX/9f/5/e+q3/H3P//jCT6dabAQAAAMor5v4vhJnU5N//AQAAoA5i7j8QZiL/AwAAQGXE3H8wzKQm+V//X/+/PP3/Af3/QP9f/79M9P/1/7vR/9f/L/P69f/1/+mt3/r/MffPhJnUJP8DAABAHcTcfyjMRP4HAACAyoi5/3CYifwPAAAAlRFz/4NhJjXJ//r/+v/l6f/7/P/oIvX/X/pe2zr1//X/V4P+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/iNhJjXJ/wAAAFAHMfd/McxE/gcAAIDKiLn/S2Em8j8AAABURsz9R8NMapL/9f/1//X/a9v/X9nn/69bvF39f/3/86H/r//fjf6//n+Z16//r/9Pb/3W/4+5/1iYSU3yPwAAANRBzP3Hw0zkfwAAAKiMmPtPhJnI/wAAAFAZMfefDDOpSf7X/z+3/v/AMt1A/f/O6693/z9fZQX6/030//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/j8KM6lJ/gcAAIA6iLn/VJiJ/A8AAACVEXP/bJiJ/A8AAACVEXP/XJhJTfK//r/P/9f/9/n/+v/6/6tJ/1//vxv9f/3/Mq9f/1//n976rf8fc//pMP+fvftc1qyq9jj8noaG7jql18AteAVegtdglddgDmDGrJhzwpwwK4qYc845Z1HMsUqL3WMM7Lb3Wh3223uuOZ7nA+OcjSWTovnwr/ZXqzTZ/wAAANBB7v77xy32PwAAAEwjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+B8UtTfY/AAAAdJC7/8Fxi/0PAAAA08jd/5C4xf4HAACAaeTuf2jc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/9hcUuT/Q8AAAAd5O5/eNxi/wMAAMA0cvc/Im6x/wEAAGAaufuvj1ua7H/9v/5f/7/B/v9q/b/+fzv0//r/Jfp//f+W36//1/+zbrT+P3f/DXFLk/0PAAAAHeTuf2TcYv8DAADANHL3Pypusf8BAABgGrn7Hx23NNn/+n/9v/5/g/2/7//r/zdE/6//X6L/1/9v+f36f/0/60br/3P3PyZuabL/AQAAoIPc/Y+NW+x/AAAAmEbu/sfFLSv7/7bTe30WAAAAcIRy9z8+bmny+//6f/2//l//r//X/++T/l//v0T/r//f8vv1//p/1u29/7/PjQf3Qvv/3P03xi1N9j8AAAB0kLv/CXGL/Q8AAADTyN3/xLjF/gcAAIBp5O5/UtzSZP/r//X/d/f///4//b/+X/9/98/1/0dD/6//P8TBvzr6f/3/lt8/UP9/TfxI/89w9t7/r/T+5/7/ufufHLc02f8AAADQQe7+p8Qt9j8AAABMI3f/U+MW+x8AAACmkbv/aXFLk/2v/9f/+/6//l//r//fJ/3/sP3/uf/qnc33/y+I/l//f1j/f+8LeL/v/9PBaP1/7v6nxy1N9j8AAAB0kLv/GXGL/Q8AAADTyN1/Om6x/wEAAGAaNx388dTumXFLk/2v/9f/6//1/2f3/yda9v93/Uz/vx/6/2H7/2X6/wui/9f/D/L9f/0/wxqt/8/d/6y4pcn+BwAAgA5y9z87brH/AQAAYBq5+58Tt9j/AAAAMI3c/c+NW5rsf/2//l//r/+/rO//XzVH/+/7//uj/9f/L9H/6//3/v5r9/d+/b/+n3Wj9f+5+58XtzTZ/wAAADC9E7va/c+PW+x/AAAAmEbu/hfELfY/AAAATCN3/wvjlib7X/+v/9f/6/8vq/+f5Pv/+v/90f/r/5dcaP+/0//X34v+f5z36//1/6wbrf/P3f+iuKXJ/gcAAIAOcve/OG6x/wEAAGAauftfErfY/wAAADCN3P0vjVua7H/9v/5/sP7/5E7/f9Z/j/5f/6//X6b/79H/+/7/3X8v+v9x3q//1/+zbrT+P3f/y+KWJvsfAAAAOsjd//K4xf4HAACAaeTuf0XcYv8DAADANHL3vzJuOXf/n7iSr7py9P/6/8H6f9//1//r//X/F0X/r//fTdj/nzrkr6f/H+v9+n/9P+tG6/9z998ct/j9fwAAAJhG7v5XxS32PwAAAEwjd/+r4xb7HwAAAKaRu/81cUuT/X9Y/3/n/5/58/r/C6P/P//79f/6f/2//l//r/9fov/3/f8tv1//r/9n3Wj9f+7+18YtTfY/AAAAdJC7/3Vxi/0PAAAA08jd//q4xf4HAACAaeTuf0Pc0mT/H/33/6/T/+v/9f9x9f/6f/2//l//v0z/r//f8vv1//p/1o3W/+fuf2Pc0mT/AwAAQAe5+98Ut9j/AAAAMI3c/W+OW+x/AAAAmEbu/rfELU32/9H3/77/r/+/yP7/hP4/6f/jn6v+X/9/EfT/+v+d/v+SHXc/v/X36//1/6wbrf/P3X/LwdTrt/8BAACgg1sO/nhq99a4xf4HAACAaeTuf1vcYv8DAADANHL3vz1uabL/9f/6/2Pv/33/v+j/45+r/l//fxH0//r/nf7/kh13P7/19+v/9f+sG63/z93/jrilyf4HAACADnL3vzNusf8BAABgGrH7z/yP3+1/AAAAmNK7Dv54avfuuKXJ/m/c/193uf3/6f/6v7v0/zv9/3H0/7ec+2tP/6//3xL9v/5/if5f/7/l94/T/8cPrtf/M57R+v/c/e+JW5rsfwAAAOggd/974xb7HwAAAKaRu//WuMX+BwAAgGnk7n9f3NJk/zfu/yf5/v9974gX+P7/vP2/7//H1f/r/89H/6//3+n/L9lx9/Nbf/84/b/v/zOu0fr/3P3vj1ua7H8AAADoIHf/bXGL/Q8AAADTyN3/gbjF/gcAAIBp5O6/PW5psv/1/1vv/6/s9//1//p//b/+/2Lp//X/S/T/+v8tv1//r/9n3Wj9f+7+D8YtTfY/AAAAdJC7/0Nxi/0PAAAA08jd/+G4xf4HAACAaeTu/0jc0mT/6//1//vq/+/6i+j/m/T/N+j/d/r/Q+n/9f9L9P/6/y2/X/+v/2fdaP1/7v6Pxi1N9j8AAAB0kLv/Y3GL/Q8AAADTyN3/8bjF/gcAAIBp5O7/RNxwr3sc35OO1slDfh69uf5f/+/7//p/3//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/2Tc4vf/AQAAYBq5+z8Vt9j/AAAAMI3c/Z+OW+x/AAAAmEbu/s/ELU32v/5f/6//32z/f1r/f/b79f9j0v/r/5fo//X/W36//l//z7rR+v/c/Z+NW5rsfwAAAOggd//n4hb7HwAAAKaRu//zcYv9DwAAANPI3f+FuKXJ/tf/6//1/5vt/33//5z36//HpP/X/y/R/+v/t/x+/b/+n3Wj9f+5+78YtzTZ/wAAANBB7v4vxS32PwAAAEwjd/+X4xb7HwAAAKaRu/8rcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+r8YtTfY/AAAAdJC7/2txi/0PAAAA08jd//W4xf4HAACAaeTu/0bc0mT/z9z/L/3H9P9n6P/1/zv9v/5/z/T/+v8l+v9L6v+v1v+P8X79v/6fdaP1/7n7vxm3NNn/AAAA0EHu/m/FLfY/AAAATCN3/7fjFvsfAAAAppG7/ztxS5P9P3P/v0T/f4b+X/+/0//r//dM/6//X6L/9/3/Lb9f/6//Z90x9f8nd4f0/7n7vxu3NNn/AAAA0EHu/u/FLfY/AAAATCN3//fjFvsfAAAAppG7/wdxyzz7/363LvxJ/f+R9/8Hv4j0//r/nf5f/6//P6D/1/8v0f/r/7f8fv2//p91o33/P3f/D+OWefY/AAAAtJe7/0dxi/0PAAAA08jd/+O4xf4HAACAaeTu/0nc0mT/6/99/1//36r/v2qn/9f/X2H6f/3/Ev2//n/L79f/6/9ZN1r/n7v/p3FLk/0PAAAAHeTu/1ncYv8DAADANHL3/zxusf8BAABgGrn7fxG3NNn/+n/9v/6/Vf/v+//6/ytO/6//X6L/1/9v+f3Z/+evO/2//p//NVr/n7v/l3FLk/0PAAAAHeTu/1XcYv8DAADANHL3/zpusf8BAABgGrn7fxO3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L7ff9f/8+60fr/3P13xC1N9j8AAAB0kLv/t3GL/Q8AAADTyN3/u7jF/gcAAIBp5O6/M25psv/1//r/Kfv/a/X/+n/9/yj0//r/Jfp//f+W36//1/+zbrT+P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAaeTu/2PcYv8DAADANHL3/yluabL/9f/6/4vv/0/W3/ew/b/v/+v/9f/DmLf/v0b/r/+/7P7/ppvP/Fj/v8336//1/6wbrf/P3f/nuKXJ/gcAAIAOcvf/JW6x/wEAAGAaufv/GrfY/wAAADCN3P1/i1ua7H/9/6j9/+0D9/8b+P6//l//r/8fxrz9v+//j9H/3/PgbrX/9/3/bb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/+v/R+3/R/7+v/5f/382/f8Z+v/z0//r/5d0//6//n/b79f/6/9ZN1r/n7v/PwEAAP//5X4sTA==") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1.293292743s ago: executing program 6 (id=9287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x1001) 1.198260183s ago: executing program 7 (id=9288): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 1.079713554s ago: executing program 6 (id=9289): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000001a40), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 948.532574ms ago: executing program 7 (id=9290): syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [{}, {}, {}, {0x2, 0x0, 0xee00}], {}, [{}, {}]}, 0x24, 0x0) 819.488865ms ago: executing program 6 (id=9291): r0 = io_uring_setup(0x6ac7, &(0x7f00000005c0)={0x0, 0x6c75, 0x8, 0x1, 0x55}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 723.602276ms ago: executing program 5 (id=9292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 675.591267ms ago: executing program 7 (id=9293): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000280)=""/81) 633.449046ms ago: executing program 6 (id=9294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x4}}]}, 0x28}}, 0x0) 519.817827ms ago: executing program 7 (id=9295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000011000101000000400000000000000000", @ANYRES32, @ANYBLOB="0100000000000000080013"], 0x48}, 0x1, 0x0, 0x0, 0x80d5}, 0x800) 407.601478ms ago: executing program 5 (id=9296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 407.166508ms ago: executing program 6 (id=9297): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f0000001200)=""/4080, 0xff0) 214.129119ms ago: executing program 7 (id=9298): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffeb", 0x8) 114.44146ms ago: executing program 5 (id=9299): r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x0) 5.97561ms ago: executing program 7 (id=9300): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=9301): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): ctors = 256 limit=760 [ 925.977616][T23384] exfat: Deprecated parameter 'utf8' [ 926.006531][T23379] syz.1.8060: attempt to access beyond end of device [ 926.006531][T23379] loop1: rw=524288, sector=1124, nr_sectors = 256 limit=760 [ 926.038286][T23384] exfat: Deprecated parameter 'utf8' [ 926.049791][T23379] syz.1.8060: attempt to access beyond end of device [ 926.049791][T23379] loop1: rw=0, sector=868, nr_sectors = 8 limit=760 [ 926.080286][T23384] exfat: Deprecated parameter 'utf8' [ 926.130102][T23390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8065'. [ 926.146220][T23384] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 926.510463][T23400] loop3: detected capacity change from 0 to 128 [ 926.576851][T23400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 926.870285][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 926.986033][T23387] loop4: detected capacity change from 0 to 32768 [ 927.062775][T23387] XFS (loop4): Mounting V5 Filesystem [ 927.132590][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.173910][T23387] XFS (loop4): Ending clean mount [ 927.312847][T23422] loop1: detected capacity change from 0 to 256 [ 927.327455][ T4291] XFS (loop4): Unmounting Filesystem [ 927.341219][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.430930][T23422] FAT-fs (loop1): Directory bread(block 64) failed [ 927.443417][T23422] FAT-fs (loop1): Directory bread(block 65) failed [ 927.489006][T23422] FAT-fs (loop1): Directory bread(block 66) failed [ 927.530104][T23422] FAT-fs (loop1): Directory bread(block 67) failed [ 927.536770][T23422] FAT-fs (loop1): Directory bread(block 68) failed [ 927.572247][T23422] FAT-fs (loop1): Directory bread(block 69) failed [ 927.579803][T23422] FAT-fs (loop1): Directory bread(block 70) failed [ 927.614652][T23422] FAT-fs (loop1): Directory bread(block 71) failed [ 927.638665][T23422] FAT-fs (loop1): Directory bread(block 72) failed [ 927.645237][T23422] FAT-fs (loop1): Directory bread(block 73) failed [ 927.736864][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.804982][T23431] loop2: detected capacity change from 0 to 256 [ 927.912939][T23431] FAT-fs (loop2): Directory bread(block 64) failed [ 927.939547][T23431] FAT-fs (loop2): Directory bread(block 65) failed [ 927.956926][T23431] FAT-fs (loop2): Directory bread(block 66) failed [ 927.989705][T23431] FAT-fs (loop2): Directory bread(block 67) failed [ 928.007570][ T33] team0: Port device netdevsim0 removed [ 928.026011][T23431] FAT-fs (loop2): Directory bread(block 68) failed [ 928.036454][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.057894][T23431] FAT-fs (loop2): Directory bread(block 69) failed [ 928.097117][T23431] FAT-fs (loop2): Directory bread(block 70) failed [ 928.103705][T23431] FAT-fs (loop2): Directory bread(block 71) failed [ 928.162341][T23431] FAT-fs (loop2): Directory bread(block 72) failed [ 928.169373][T23431] FAT-fs (loop2): Directory bread(block 73) failed [ 928.247796][T23440] loop3: detected capacity change from 0 to 1024 [ 928.325617][T23440] hfsplus: bad catalog entry type [ 928.337912][T23443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 928.349359][T23443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.358598][T23443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.379849][T23443] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 928.388152][T23443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 928.395871][T23443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 928.547750][ T62] hfsplus: b-tree write err: -5, ino 4 [ 928.934620][T23464] loop4: detected capacity change from 0 to 1024 [ 928.955944][T23464] EXT4-fs: Ignoring removed orlov option [ 928.980314][T23464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 928.994563][T23464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 929.006447][T23464] System zones: 0-1, 3-36 [ 929.016526][T23464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 929.293003][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 929.349428][T23485] loop2: detected capacity change from 0 to 16 [ 929.370566][T23484] loop1: detected capacity change from 0 to 256 [ 929.392742][T23485] erofs: (device loop2): mounted with root inode @ nid 36. [ 929.452731][T23484] FAT-fs (loop1): Directory bread(block 64) failed [ 929.507626][T23484] FAT-fs (loop1): Directory bread(block 65) failed [ 929.535984][T23484] FAT-fs (loop1): Directory bread(block 66) failed [ 929.543968][T23484] FAT-fs (loop1): Directory bread(block 67) failed [ 929.564140][T23484] FAT-fs (loop1): Directory bread(block 68) failed [ 929.620682][T23484] FAT-fs (loop1): Directory bread(block 69) failed [ 929.649993][T23484] FAT-fs (loop1): Directory bread(block 70) failed [ 929.670900][T23484] FAT-fs (loop1): Directory bread(block 71) failed [ 929.677555][T23484] FAT-fs (loop1): Directory bread(block 72) failed [ 929.722224][T23484] FAT-fs (loop1): Directory bread(block 73) failed [ 929.775620][T23495] xt_connbytes: Forcing CT accounting to be enabled [ 929.828405][T23495] set match dimension is over the limit! [ 929.919403][T23442] chnl_net:caif_netlink_parms(): no params data found [ 930.100078][T23505] loop2: detected capacity change from 0 to 1024 [ 930.213587][T23480] loop3: detected capacity change from 0 to 32768 [ 930.240897][T23480] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.8098 (23480) [ 930.297044][T23480] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 930.312561][T23480] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 930.322488][T23480] BTRFS info (device loop3): force zlib compression, level 3 [ 930.330339][T23480] BTRFS info (device loop3): force clearing of disk cache [ 930.337909][T23480] BTRFS info (device loop3): setting nodatasum [ 930.345081][T23480] BTRFS info (device loop3): allowing degraded mounts [ 930.352341][T23480] BTRFS info (device loop3): enabling disk space caching [ 930.354127][T23502] loop4: detected capacity change from 0 to 4096 [ 930.360037][T23480] BTRFS info (device loop3): disk space caching is enabled [ 930.416743][T12295] hfsplus: b-tree write err: -5, ino 4 [ 930.439351][T23442] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.446481][T23442] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.527702][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 930.527718][ T26] audit: type=1326 audit(8166428.107:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23522 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432437e819 code=0x7ffc0000 [ 930.556214][ T26] audit: type=1326 audit(8166428.126:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23522 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f432437e819 code=0x7ffc0000 [ 930.558427][T23442] device bridge_slave_0 entered promiscuous mode [ 930.579286][ T26] audit: type=1326 audit(8166428.126:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23522 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432437e819 code=0x7ffc0000 [ 930.614590][ T26] audit: type=1326 audit(8166428.126:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23522 comm="syz.2.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432437e819 code=0x7ffc0000 [ 930.622960][T23502] ntfs: volume version 3.1. [ 930.641655][T12502] Bluetooth: hci0: command 0x0409 tx timeout [ 930.823220][T23480] BTRFS info (device loop3): rebuilding free space tree [ 930.848121][T23480] BTRFS info (device loop3): disabling free space tree [ 930.861075][T23442] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.866731][T23480] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 930.873853][T23442] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.890972][T23480] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 930.941327][T23442] device bridge_slave_1 entered promiscuous mode [ 931.108286][T23480] BTRFS info (device loop3): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 931.165013][T23545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8115'. [ 931.290836][T23548] --map-set only usable from mangle table [ 931.307704][ T4278] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 931.392176][T23442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.707589][T23442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.136735][T23442] team0: Port device team_slave_0 added [ 932.166186][T23442] team0: Port device team_slave_1 added [ 932.219870][T23540] loop1: detected capacity change from 0 to 32768 [ 932.278227][T23540] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 932.278251][T23540] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 932.301430][T23540] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 932.302707][ T5064] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 932.302725][ T5064] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 932.394468][ T5064] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 85ms [ 932.398678][ T5064] gfs2: fsid=syz:syz.0: jid=0: Done [ 932.398722][T23540] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 932.475545][ T33] device hsr_slave_0 left promiscuous mode [ 932.476135][ T33] device hsr_slave_1 left promiscuous mode [ 932.476887][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.476956][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.478064][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.478088][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.483277][ T33] device bridge_slave_1 left promiscuous mode [ 932.631036][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.702003][ T33] device bridge_slave_0 left promiscuous mode [ 932.720420][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.843940][T12502] Bluetooth: hci0: command 0x041b tx timeout [ 932.853158][ T33] device veth1_macvtap left promiscuous mode [ 932.865455][ T33] device veth0_macvtap left promiscuous mode [ 932.871637][ T33] device veth1_vlan left promiscuous mode [ 932.885616][ T33] device veth0_vlan left promiscuous mode [ 933.525175][ T33] team0 (unregistering): Port device team_slave_1 removed [ 933.574212][ T33] team0 (unregistering): Port device team_slave_0 removed [ 933.621407][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.671206][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.173409][ T33] bond0 (unregistering): Released all slaves [ 934.255125][T23442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.262283][T23442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.288745][T23442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.305739][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8145'. [ 934.328745][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8145'. [ 934.338717][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8145'. [ 934.363548][T23442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.370541][T23442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.485476][T23442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.641414][T23442] device hsr_slave_0 entered promiscuous mode [ 934.670449][T23442] device hsr_slave_1 entered promiscuous mode [ 934.746894][T23607] bridge0: port 3(veth0_to_bridge) entered blocking state [ 934.767358][T23607] bridge0: port 3(veth0_to_bridge) entered disabled state [ 934.820991][T23609] loop1: detected capacity change from 0 to 1024 [ 934.834302][T23607] device veth0_to_bridge entered promiscuous mode [ 934.842418][T23607] bridge0: port 3(veth0_to_bridge) entered blocking state [ 934.849710][T23607] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 934.875372][T23609] hfsplus: bad catalog entry type [ 934.935247][T23614] loop2: detected capacity change from 0 to 1024 [ 934.994118][T23614] EXT4-fs: Ignoring removed orlov option [ 935.003989][T23614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 935.033634][ T46] hfsplus: b-tree write err: -5, ino 4 [ 935.066478][T23614] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 935.075303][T12502] Bluetooth: hci0: command 0x040f tx timeout [ 935.103034][T23619] netlink: 'syz.4.8147': attribute type 15 has an invalid length. [ 935.117156][T23614] System zones: 0-1, 3-36 [ 935.183644][T23614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 935.231402][T23627] loop1: detected capacity change from 0 to 256 [ 935.250575][T23627] exfat: Deprecated parameter 'utf8' [ 935.271430][T23627] exfat: Deprecated parameter 'utf8' [ 935.311974][T23627] exfat: Deprecated parameter 'utf8' [ 935.366877][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 935.374162][T23627] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 935.530123][T23442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 935.592875][T23638] loop2: detected capacity change from 0 to 256 [ 935.601525][T23442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 935.637894][T23442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 935.693126][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8153'. [ 935.749240][T23638] FAT-fs (loop2): Directory bread(block 64) failed [ 935.761156][T23442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 935.774074][T23638] FAT-fs (loop2): Directory bread(block 65) failed [ 935.780824][T23638] FAT-fs (loop2): Directory bread(block 66) failed [ 935.810379][T23638] FAT-fs (loop2): Directory bread(block 67) failed [ 935.838381][T23638] FAT-fs (loop2): Directory bread(block 68) failed [ 935.861246][T23638] FAT-fs (loop2): Directory bread(block 69) failed [ 935.881365][T23638] FAT-fs (loop2): Directory bread(block 70) failed [ 935.887972][T23638] FAT-fs (loop2): Directory bread(block 71) failed [ 935.936078][T23638] FAT-fs (loop2): Directory bread(block 72) failed [ 935.963910][T23638] FAT-fs (loop2): Directory bread(block 73) failed [ 936.005425][ T4290] bond0: (slave syz_tun): Releasing backup interface [ 936.222904][T23650] loop3: detected capacity change from 0 to 1024 [ 936.276773][T23442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.423191][T23655] loop2: detected capacity change from 0 to 1024 [ 936.444555][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.507429][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.509043][T23655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 936.523201][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.554396][T23442] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.585097][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 936.607009][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.620760][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.627894][T12295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.636968][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 936.702090][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 936.721187][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.802622][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 936.833582][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 936.842103][T23573] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.849313][T23573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.918667][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 936.962095][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 936.978684][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 937.058757][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.095360][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 937.125269][T23677] loop2: detected capacity change from 0 to 256 [ 937.182387][T23677] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 937.214153][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.283864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 937.292670][T12502] Bluetooth: hci0: command 0x0419 tx timeout [ 937.324958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 937.344817][T23684] netlink: 'syz.3.8171': attribute type 11 has an invalid length. [ 937.354013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 937.400188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.448949][T23442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 937.505472][T23442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 937.543885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 937.592556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 937.683712][T23443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.695923][T23443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.708623][T23443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.722462][T23443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.730029][T23443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 937.737393][T23443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.760121][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.873376][T23704] loop3: detected capacity change from 0 to 256 [ 937.950641][T23704] exfat: Deprecated parameter 'utf8' [ 937.971113][T23703] loop2: detected capacity change from 0 to 4096 [ 937.978322][T23704] exfat: Deprecated parameter 'utf8' [ 937.983658][T23704] exfat: Deprecated parameter 'utf8' [ 938.031630][T23704] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 938.065918][T23703] ntfs: volume version 3.1. [ 938.123150][T23703] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode. [ 938.202936][T23703] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 938.418878][T23716] loop4: detected capacity change from 0 to 64 [ 938.703318][T23725] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 938.754517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 938.769732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 938.783671][T23442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.998949][T23696] chnl_net:caif_netlink_parms(): no params data found [ 939.608678][T12502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 939.618841][T12502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 939.631428][T12502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 939.656399][T12502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 939.663903][T12502] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 939.674339][T12502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.712579][T23696] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.721014][T23696] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.729207][T23696] device bridge_slave_0 entered promiscuous mode [ 939.776701][T23696] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.811784][T23696] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.840657][T23696] device bridge_slave_1 entered promiscuous mode [ 939.919998][T23764] loop2: detected capacity change from 0 to 4096 [ 939.944609][T23443] Bluetooth: hci4: command 0x0409 tx timeout [ 939.960991][T23764] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 940.066483][T23696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.157770][T23696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.307487][T23696] team0: Port device team_slave_0 added [ 940.343521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 940.360235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 940.392981][T23442] device veth0_vlan entered promiscuous mode [ 940.470955][T23696] team0: Port device team_slave_1 added [ 940.482364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 940.493960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 940.547433][T23782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8196'. [ 940.571881][T23782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8196'. [ 940.684246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 940.697211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 940.719795][T23442] device veth1_vlan entered promiscuous mode [ 940.758619][T23696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.766125][T23696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.819658][T23696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.833089][T23787] SET target dimension over the limit! [ 940.873788][T23770] loop4: detected capacity change from 0 to 32768 [ 940.907893][T23770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8194 (23770) [ 940.946642][T23770] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 940.970898][T23770] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 940.987870][T23770] BTRFS info (device loop4): using free space tree [ 941.026001][T23696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.032971][T23696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.118968][T23696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.162434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 941.173556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 941.299573][T23770] BTRFS info (device loop4): enabling ssd optimizations [ 941.381914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 941.399766][ T4291] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 941.411660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.464549][T23442] device veth0_macvtap entered promiscuous mode [ 941.779626][T23696] device hsr_slave_0 entered promiscuous mode [ 941.805937][T23696] device hsr_slave_1 entered promiscuous mode [ 941.812620][T23696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.829335][T23696] Cannot create hsr debugfs directory [ 941.843155][ T46] device hsr_slave_0 left promiscuous mode [ 941.850906][ T46] device hsr_slave_1 left promiscuous mode [ 941.857703][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.865982][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.886720][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.901401][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.912606][T23443] Bluetooth: hci1: command 0x0409 tx timeout [ 941.922201][ T46] device bridge_slave_1 left promiscuous mode [ 941.943712][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.007465][ T46] device bridge_slave_0 left promiscuous mode [ 942.010889][T23825] loop2: detected capacity change from 0 to 764 [ 942.030905][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.038163][T23825] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 942.134021][ T46] device veth1_macvtap left promiscuous mode [ 942.145811][ T46] device veth0_macvtap left promiscuous mode [ 942.152480][ T46] device veth1_vlan left promiscuous mode [ 942.158342][ T46] device veth0_vlan left promiscuous mode [ 942.170334][T23443] Bluetooth: hci4: command 0x041b tx timeout [ 942.685773][ T46] team0 (unregistering): Port device team_slave_1 removed [ 942.734919][ T46] team0 (unregistering): Port device team_slave_0 removed [ 942.778657][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.824779][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.301303][ T46] bond0 (unregistering): Released all slaves [ 943.393316][T23442] device veth1_macvtap entered promiscuous mode [ 943.403898][T23754] chnl_net:caif_netlink_parms(): no params data found [ 943.434536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.446533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 943.525841][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.536649][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.547146][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.558243][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.568138][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.578623][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.591071][T23442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.623190][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.631791][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.643182][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.655783][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.665916][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.676343][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.686579][T23442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.697406][T23442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.727829][T23442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.750356][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.759263][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.770220][T23442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.781216][T23442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.798863][T23442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.807659][T23442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.821047][T23754] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.828691][T23754] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.836520][T23754] device bridge_slave_0 entered promiscuous mode [ 943.884837][T23754] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.894899][T23754] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.904989][T23754] device bridge_slave_1 entered promiscuous mode [ 943.938668][T23754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.967374][T23754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.103097][T23754] team0: Port device team_slave_0 added [ 944.120074][T23754] team0: Port device team_slave_1 added [ 944.146947][T12502] Bluetooth: hci1: command 0x041b tx timeout [ 944.190996][T23573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.199054][T23573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.233582][T23754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.240556][T23754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.296450][T23754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.314818][T23754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.322468][T23754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.349535][T23754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.377934][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 944.392988][T12502] Bluetooth: hci4: command 0x040f tx timeout [ 944.406766][T23696] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 944.495719][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.526085][T23696] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 944.540508][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.551924][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.567118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 944.592398][T23696] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 944.655513][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.668407][T23696] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 944.681749][T23754] device hsr_slave_0 entered promiscuous mode [ 944.691154][T23754] device hsr_slave_1 entered promiscuous mode [ 944.698569][T23754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.708018][T23754] Cannot create hsr debugfs directory [ 944.771096][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.816328][T23849] xt_TCPMSS: Only works on TCP SYN packets [ 944.884173][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.080470][T23857] loop4: detected capacity change from 0 to 512 [ 945.147139][T23857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 945.196952][T23696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.226890][T23857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 945.370732][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 945.394319][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 945.409271][T23861] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 945.436610][T23696] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.470883][T23754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 945.553572][T23754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 945.605910][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 945.633032][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 945.649940][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 945.685908][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.693091][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.844935][T23754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 945.873011][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 945.883804][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 945.916656][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 945.949138][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.956345][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.985508][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 946.023785][T23754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 946.095692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 946.199473][T23856] loop5: detected capacity change from 0 to 32768 [ 946.228354][T23856] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.8208 (23856) [ 946.266800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 946.294193][T23856] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 946.309439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 946.315738][T23856] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 946.350232][T23856] BTRFS info (device loop5): force zlib compression, level 3 [ 946.360595][T23443] Bluetooth: hci1: command 0x040f tx timeout [ 946.396035][T23856] BTRFS info (device loop5): force clearing of disk cache [ 946.435586][T23856] BTRFS info (device loop5): setting nodatasum [ 946.441825][T23856] BTRFS info (device loop5): allowing degraded mounts [ 946.478271][T23856] BTRFS info (device loop5): enabling disk space caching [ 946.479982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 946.485342][T23856] BTRFS info (device loop5): disk space caching is enabled [ 946.495453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.509316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.570623][T23696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.595398][T23696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.598157][T23898] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 946.618941][T23443] Bluetooth: hci4: command 0x0419 tx timeout [ 946.637407][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.661843][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.707086][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.740115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.770279][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.863780][T23856] BTRFS info (device loop5): rebuilding free space tree [ 946.904634][T23919] loop2: detected capacity change from 0 to 512 [ 946.949614][T23856] BTRFS info (device loop5): disabling free space tree [ 946.951335][T23919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 946.956535][T23856] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 946.998107][T23856] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 947.038943][T23919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 947.049908][T23754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.196552][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 947.208860][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 947.227047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.239256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.243219][T23696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.251480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.270257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.278682][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 947.282457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.290628][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 947.301825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.302025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.333206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.345425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.357656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.374567][T23856] BTRFS info (device loop5): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 947.525284][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 947.531665][T23754] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.570104][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 947.623614][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 947.654862][T23573] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.662002][T23573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.695496][T23442] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 947.757626][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 947.833137][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 947.841936][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 947.887143][T23573] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.894325][T23573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.531393][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.550939][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.585470][T23443] Bluetooth: hci1: command 0x0419 tx timeout [ 948.602138][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.622772][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.699370][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.715447][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.782070][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.813068][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.846589][T23928] loop4: detected capacity change from 0 to 32768 [ 948.863525][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.888237][T23928] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 948.903814][T23754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.953282][T23754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.967926][T23928] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 948.992719][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 949.002325][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 949.087085][T23928] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 949.096265][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 949.105564][T23963] block device autoloading is deprecated and will be removed. [ 949.149011][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 949.228519][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 949.256393][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.309619][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 949.355999][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 949.547196][T23928] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 949.721482][T23696] device veth0_vlan entered promiscuous mode [ 949.772520][T23696] device veth1_vlan entered promiscuous mode [ 949.882497][T23696] device veth0_macvtap entered promiscuous mode [ 949.915010][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 949.940044][T23986] loop2: detected capacity change from 0 to 256 [ 949.965650][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 950.026977][T23696] device veth1_macvtap entered promiscuous mode [ 950.076204][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 950.121341][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 950.161502][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.210017][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.239382][T23986] FAT-fs (loop2): Directory bread(block 64) failed [ 950.239510][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.263499][T23986] FAT-fs (loop2): Directory bread(block 65) failed [ 950.270146][T23986] FAT-fs (loop2): Directory bread(block 66) failed [ 950.291324][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.328778][T23986] FAT-fs (loop2): Directory bread(block 67) failed [ 950.332524][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.335395][T23986] FAT-fs (loop2): Directory bread(block 68) failed [ 950.391784][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.442467][T23986] FAT-fs (loop2): Directory bread(block 69) failed [ 950.458204][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.488344][T23986] FAT-fs (loop2): Directory bread(block 70) failed [ 950.494346][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.494902][T23986] FAT-fs (loop2): Directory bread(block 71) failed [ 950.529107][T23696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.558883][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 950.581724][T23997] loop4: detected capacity change from 0 to 256 [ 950.595130][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 950.604102][T23986] FAT-fs (loop2): Directory bread(block 72) failed [ 950.628392][T23986] FAT-fs (loop2): Directory bread(block 73) failed [ 950.655872][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.676394][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.693710][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.716946][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.719921][T23997] FAT-fs (loop4): Directory bread(block 64) failed [ 950.752458][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.775780][T23997] FAT-fs (loop4): Directory bread(block 65) failed [ 950.782613][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.792862][T23997] FAT-fs (loop4): Directory bread(block 66) failed [ 950.836441][T23696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.847253][T23997] FAT-fs (loop4): Directory bread(block 67) failed [ 950.864100][T23997] FAT-fs (loop4): Directory bread(block 68) failed [ 950.870676][T23997] FAT-fs (loop4): Directory bread(block 69) failed [ 950.886583][T23696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.916990][T23696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.934906][T23754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.951967][T23997] FAT-fs (loop4): Directory bread(block 70) failed [ 950.985402][T23997] FAT-fs (loop4): Directory bread(block 71) failed [ 951.021198][T23997] FAT-fs (loop4): Directory bread(block 72) failed [ 951.044074][T23997] FAT-fs (loop4): Directory bread(block 73) failed [ 951.223183][ T26] audit: type=1800 audit(8166447.465:147): pid=23997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8240" name="file1" dev="loop4" ino=1048659 res=0 errno=0 [ 951.273275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.304261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.328131][T24007] loop2: detected capacity change from 0 to 2048 [ 951.329934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.360549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.397276][T23696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.406018][T23696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.415940][T24007] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.8244: bad orphan inode 8192 [ 951.440891][T23696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.449919][T23696] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.475542][T24007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 951.614427][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 951.665156][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.673589][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.788740][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 951.823003][T23573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.836368][T23573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.866192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 951.976637][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 952.005175][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 952.154500][T24026] program syz.2.8255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.190412][ T46] device hsr_slave_0 left promiscuous mode [ 952.205650][ T46] device hsr_slave_1 left promiscuous mode [ 952.268603][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.284515][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.297963][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.324067][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.336202][ T46] device veth0_to_bridge left promiscuous mode [ 952.342947][ T46] bridge0: port 3(veth0_to_bridge) entered disabled state [ 952.352291][ T46] device bridge_slave_1 left promiscuous mode [ 952.358603][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.368664][ T46] device bridge_slave_0 left promiscuous mode [ 952.376074][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.421001][ T46] device veth1_macvtap left promiscuous mode [ 952.428362][ T46] device veth0_macvtap left promiscuous mode [ 952.436781][ T46] device veth1_vlan left promiscuous mode [ 952.442566][ T46] device veth0_vlan left promiscuous mode [ 952.577277][ T46] bond2 (unregistering): Released all slaves [ 952.615568][ T46] bond1 (unregistering): Released all slaves [ 953.061079][ T46] team0 (unregistering): Port device team_slave_1 removed [ 953.112987][ T46] team0 (unregistering): Port device team_slave_0 removed [ 953.170701][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.219332][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.727339][ T46] bond0 (unregistering): Released all slaves [ 953.825339][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 953.841512][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 953.852055][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 953.919645][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 953.958601][T23754] device veth0_vlan entered promiscuous mode [ 953.993507][T24043] kAFS: unparsable volume name [ 954.005347][T23754] device veth1_vlan entered promiscuous mode [ 954.112584][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 954.146967][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 954.195323][T23754] device veth0_macvtap entered promiscuous mode [ 954.257775][T23754] device veth1_macvtap entered promiscuous mode [ 954.293331][T24050] loop4: detected capacity change from 0 to 512 [ 954.341481][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.392095][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.456897][T24050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 954.479294][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.555500][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.604824][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.637003][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.683265][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.725659][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.762591][T23754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.787849][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 954.808064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 954.828856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 954.859607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 954.898080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 954.960960][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.982569][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.010054][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.031610][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.063493][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.090656][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.123258][T23754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.157280][T23754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.157389][T24042] loop6: detected capacity change from 0 to 32768 [ 955.194378][T23754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.244971][T24076] netlink: 'syz.4.8260': attribute type 1 has an invalid length. [ 955.248771][T24042] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.8245 (24042) [ 955.274243][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 955.289936][T23573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.301338][T23754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.341664][T24042] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 955.346926][T23754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.414794][T23754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.417246][T24042] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 955.456583][T23754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.478620][T24042] BTRFS info (device loop6): force zlib compression, level 3 [ 955.509772][T24042] BTRFS info (device loop6): force clearing of disk cache [ 955.556484][T24042] BTRFS info (device loop6): setting nodatasum [ 955.577902][T24042] BTRFS info (device loop6): allowing degraded mounts [ 955.584727][T24042] BTRFS info (device loop6): enabling disk space caching [ 955.696101][T24042] BTRFS info (device loop6): disk space caching is enabled [ 955.760928][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.798767][T24067] loop5: detected capacity change from 0 to 32768 [ 955.824104][T24067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.8259 (24067) [ 955.824716][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.862828][T24067] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 955.880534][T24067] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 955.889508][T24067] BTRFS info (device loop5): using free space tree [ 955.962517][T23573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.027567][T23573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.036280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 956.118174][T24042] BTRFS info (device loop6): rebuilding free space tree [ 956.167818][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 956.188778][T24042] BTRFS info (device loop6): disabling free space tree [ 956.262881][T24042] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 956.297043][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8271'. [ 956.306308][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8271'. [ 956.358660][T24067] BTRFS info (device loop5): enabling ssd optimizations [ 956.358705][ T4734] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 956.373602][T24042] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 956.537478][T24042] BTRFS info (device loop6): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 956.583182][ T4734] usb 5-1: Using ep0 maxpacket: 16 [ 956.600752][T24067] BTRFS info (device loop5): balance: start [ 956.637303][ T4734] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 956.657631][T24067] BTRFS info (device loop5): balance: ended with status: 0 [ 956.675872][T23696] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 956.677258][ T4734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.747042][ T4734] usb 5-1: Product: syz [ 956.754725][ T4734] usb 5-1: Manufacturer: syz [ 956.760984][ T4734] usb 5-1: SerialNumber: syz [ 956.821770][ T4734] usb 5-1: config 0 descriptor?? [ 956.844596][ T4734] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 957.228627][T23442] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 957.239090][ T4730] usb 5-1: USB disconnect, device number 117 [ 957.528715][ T26] audit: type=1326 audit(8166453.356:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 957.611921][ T26] audit: type=1326 audit(8166453.422:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 957.737377][ T26] audit: type=1326 audit(8166453.553:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 957.842246][ T26] audit: type=1326 audit(8166453.600:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 958.474494][T24207] xt_hashlimit: overflow, rate too high: 0 [ 958.600990][T24213] loop7: detected capacity change from 0 to 256 [ 958.709961][T24213] FAT-fs (loop7): Directory bread(block 64) failed [ 958.753812][T24213] FAT-fs (loop7): Directory bread(block 65) failed [ 958.760560][T24213] FAT-fs (loop7): Directory bread(block 66) failed [ 958.794549][T24213] FAT-fs (loop7): Directory bread(block 67) failed [ 958.839453][T24213] FAT-fs (loop7): Directory bread(block 68) failed [ 958.856032][T24213] FAT-fs (loop7): Directory bread(block 69) failed [ 958.888054][T24213] FAT-fs (loop7): Directory bread(block 70) failed [ 958.919361][T24213] FAT-fs (loop7): Directory bread(block 71) failed [ 958.947243][T24213] FAT-fs (loop7): Directory bread(block 72) failed [ 958.963373][T24213] FAT-fs (loop7): Directory bread(block 73) failed [ 959.389965][T24246] loop4: detected capacity change from 0 to 256 [ 959.469412][T24246] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 959.521115][T24248] loop7: detected capacity change from 0 to 1764 [ 959.594479][T24248] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 959.828355][T24263] loop2: detected capacity change from 0 to 1024 [ 959.949632][T24269] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8319'. [ 959.992725][T24263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 960.039144][T24271] loop6: detected capacity change from 0 to 4096 [ 960.052946][T24271] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 960.215843][T24271] ntfs3: loop6: failed to convert "c46c" to iso8859-4 [ 960.304769][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 960.464230][T24286] tmpfs: Bad value for 'mpol' [ 960.920508][T24307] loop6: detected capacity change from 0 to 2048 [ 960.925036][T24301] loop2: detected capacity change from 0 to 4096 [ 960.941448][T24307] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 961.011984][T24307] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 961.063376][T24307] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 961.085088][T24307] UDF-fs: Scanning with blocksize 512 failed [ 961.094399][T24315] syz.4.8336 (24315): /proc/24314/oom_adj is deprecated, please use /proc/24314/oom_score_adj instead. [ 961.156587][T24307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.216455][T24318] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8338'. [ 961.271103][T24318] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8338'. [ 961.410407][T24322] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 961.720843][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8344'. [ 961.979845][T24346] trusted_key: encrypted_key: master key parameter is missing [ 962.030617][T24348] usb usb8: usbfs: process 24348 (syz.7.8350) did not claim interface 0 before use [ 962.210040][T24359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8354'. [ 962.222021][T24350] loop5: detected capacity change from 0 to 4096 [ 962.261597][T24350] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 962.333307][T24363] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8356'. [ 962.528773][T24371] cgroup: none used incorrectly [ 962.594585][T24373] netlink: 'syz.7.8361': attribute type 4 has an invalid length. [ 962.719396][T24379] loop5: detected capacity change from 0 to 256 [ 962.819547][T24379] FAT-fs (loop5): Directory bread(block 64) failed [ 962.843634][T24386] loop7: detected capacity change from 0 to 512 [ 962.853409][T24379] FAT-fs (loop5): Directory bread(block 65) failed [ 962.858729][T24385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.877783][T24376] loop6: detected capacity change from 0 to 4096 [ 962.892630][T24379] FAT-fs (loop5): Directory bread(block 66) failed [ 962.899225][T24379] FAT-fs (loop5): Directory bread(block 67) failed [ 962.906184][T24379] FAT-fs (loop5): Directory bread(block 68) failed [ 962.912742][T24379] FAT-fs (loop5): Directory bread(block 69) failed [ 962.919658][T24379] FAT-fs (loop5): Directory bread(block 70) failed [ 962.926526][T24379] FAT-fs (loop5): Directory bread(block 71) failed [ 962.933131][T24379] FAT-fs (loop5): Directory bread(block 72) failed [ 962.939916][T24379] FAT-fs (loop5): Directory bread(block 73) failed [ 962.974865][T24386] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 963.042558][T24386] UDF-fs: Scanning with blocksize 512 failed [ 963.049369][T24386] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 963.085434][T24386] UDF-fs: Scanning with blocksize 1024 failed [ 963.145826][T24386] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 963.177437][T24386] UDF-fs: Scanning with blocksize 2048 failed [ 963.206444][T24386] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 963.270015][T24386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 963.436132][T24402] loop4: detected capacity change from 0 to 16 [ 963.475520][T24402] erofs: (device loop4): mounted with root inode @ nid 36. [ 963.781623][T24414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8374'. [ 963.804434][T24415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.834795][T24414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8374'. [ 964.114512][T24431] loop4: detected capacity change from 0 to 256 [ 964.218801][T24431] FAT-fs (loop4): Directory bread(block 64) failed [ 964.233415][T24425] loop5: detected capacity change from 0 to 4096 [ 964.247356][T24431] FAT-fs (loop4): Directory bread(block 65) failed [ 964.266712][T24431] FAT-fs (loop4): Directory bread(block 66) failed [ 964.311656][T24431] FAT-fs (loop4): Directory bread(block 67) failed [ 964.344275][T24431] FAT-fs (loop4): Directory bread(block 68) failed [ 964.365335][T24431] FAT-fs (loop4): Directory bread(block 69) failed [ 964.404963][T24431] FAT-fs (loop4): Directory bread(block 70) failed [ 964.437598][T24431] FAT-fs (loop4): Directory bread(block 71) failed [ 964.445426][T24431] FAT-fs (loop4): Directory bread(block 72) failed [ 964.470201][T24431] FAT-fs (loop4): Directory bread(block 73) failed [ 964.938028][T24453] loop6: detected capacity change from 0 to 1024 [ 965.081309][T24453] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 965.105802][T24421] loop7: detected capacity change from 0 to 32768 [ 965.126591][T24465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8393'. [ 965.269806][T24421] XFS (loop7): Mounting V5 Filesystem [ 965.324204][T23696] EXT4-fs (loop6): unmounting filesystem. [ 965.531731][T24421] XFS (loop7): Ending clean mount [ 965.560410][T24421] XFS (loop7): Quotacheck needed: Please wait. [ 965.694214][T24421] XFS (loop7): Quotacheck: Done. [ 965.903722][T23754] XFS (loop7): Unmounting Filesystem [ 966.543496][T24531] loop4: detected capacity change from 0 to 512 [ 966.601294][T24531] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 966.766378][T24531] EXT4-fs (loop4): 1 truncate cleaned up [ 966.772070][T24531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 966.921132][T24547] loop2: detected capacity change from 0 to 256 [ 966.936042][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 966.966256][ T26] audit: type=1326 audit(8166462.185:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.6.8417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 967.012539][T24547] exfat: Deprecated parameter 'utf8' [ 967.063602][ T26] audit: type=1326 audit(8166462.213:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.6.8417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 967.099253][T24547] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 967.185718][ T26] audit: type=1326 audit(8166462.213:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.6.8417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 967.227133][ T26] audit: type=1326 audit(8166462.213:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24549 comm="syz.6.8417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 967.396370][T24564] net_ratelimit: 8575 callbacks suppressed [ 967.396390][T24564] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 967.409505][T24564] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 967.737354][T24585] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8432'. [ 967.937556][T24592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8434'. [ 968.182494][T24605] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 968.778618][T24632] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 968.856783][T24639] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 968.901013][T13630] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 969.021140][T24645] loop2: detected capacity change from 0 to 16 [ 969.084179][T24645] erofs: (device loop2): mounted with root inode @ nid 36. [ 969.135504][T23443] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 969.157756][T13630] usb 8-1: Using ep0 maxpacket: 8 [ 969.176808][T13630] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 969.188808][T24645] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 969.235528][T24656] loop4: detected capacity change from 0 to 256 [ 969.242600][T24656] exfat: Deprecated parameter 'utf8' [ 969.269346][T13630] usb 8-1: config 0 interface 0 has no altsetting 0 [ 969.272358][T24656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 969.286302][ T26] audit: type=1800 audit(8166464.345:156): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8457" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 969.320825][T13630] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 969.371370][T13630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.379419][T13630] usb 8-1: Product: syz [ 969.425119][T13630] usb 8-1: Manufacturer: syz [ 969.429772][T13630] usb 8-1: SerialNumber: syz [ 969.450096][T13630] usb 8-1: config 0 descriptor?? [ 969.538325][T13630] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 969.573269][T24664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8464'. [ 969.676400][T13630] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 969.686241][T24671] netlink: 'syz.6.8466': attribute type 26 has an invalid length. [ 969.702913][T13630] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 969.751796][T13630] snd_usb_toneport: probe of 8-1:0.0 failed with error -22 [ 969.926377][T13630] usb 8-1: USB disconnect, device number 2 [ 970.068983][T24684] loop5: detected capacity change from 0 to 1024 [ 970.127549][T24689] xt_addrtype: ipv6 does not support BROADCAST matching [ 970.541074][T24706] loop6: detected capacity change from 0 to 8 [ 970.587401][T24706] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 970.656110][T24706] cramfs: Error -5 while decompressing! [ 970.661701][T24706] cramfs: ffffffff974c5568(8)->ffff8880492fd000(4096) [ 970.718628][T24706] cramfs: Error -3 while decompressing! [ 970.730229][T24706] cramfs: ffffffff974c5570(44)->ffff888049f78000(4096) [ 970.775418][T24706] cramfs: Error -3 while decompressing! [ 970.814804][T24706] cramfs: ffffffff974c559c(16)->ffff88805186f000(4096) [ 970.821756][T24706] cramfs: Error -5 while decompressing! [ 970.876371][T24706] cramfs: ffffffff974c5568(8)->ffff8880492fd000(4096) [ 970.931392][ T26] audit: type=1800 audit(8166465.889:157): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8480" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 971.717327][T24700] loop2: detected capacity change from 0 to 40427 [ 971.785341][T24700] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 971.816858][T24700] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 971.910036][T24700] F2FS-fs (loop2): Found nat_bits in checkpoint [ 972.095336][T24700] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 972.104923][T24700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 972.386604][ T4730] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 972.602604][ T4730] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 972.622212][ T4730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.673054][ T4730] usb 6-1: config 0 descriptor?? [ 972.729233][ T4730] gspca_main: spca508-2.14.0 probing 8086:0110 [ 973.081684][ T4299] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 973.145308][ T4730] gspca_spca508: reg_read err -71 [ 973.158872][ T4730] gspca_spca508: reg_read err -71 [ 973.175617][ T4730] gspca_spca508: reg_read err -71 [ 973.191784][ T4730] gspca_spca508: reg_read err -71 [ 973.209975][ T4730] gspca_spca508: reg write: error -71 [ 973.221235][ T4730] spca508: probe of 6-1:0.0 failed with error -71 [ 973.262440][ T4730] usb 6-1: USB disconnect, device number 2 [ 973.275648][ T4299] usb 8-1: config 0 has an invalid interface number: 199 but max is 1 [ 973.316773][ T4299] usb 8-1: config 0 has no interface number 1 [ 973.339129][ T4299] usb 8-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 973.395265][ T4299] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 973.441416][ T4299] usb 8-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 973.491198][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 973.509540][ T4299] usb 8-1: SerialNumber: syz [ 973.532149][ T4299] usb 8-1: config 0 descriptor?? [ 973.550885][ T4299] usb 8-1: Found UVC 0.00 device (0002:0000) [ 973.607629][ T4299] usb 8-1: No valid video chain found. [ 973.774478][ T4299] usb 8-1: USB disconnect, device number 3 [ 973.909352][T24832] loop6: detected capacity change from 0 to 4096 [ 973.919284][T24832] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 973.930933][T24832] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 973.942132][T24832] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 973.989955][T24832] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 974.040419][T24832] ntfs: volume version 3.1. [ 974.129454][T24832] ntfs: (device loop6): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 974.165396][T24832] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 974.641433][T24864] netlink: 'syz.6.8539': attribute type 1 has an invalid length. [ 974.948744][T24877] loop7: detected capacity change from 0 to 256 [ 974.963732][T24843] loop2: detected capacity change from 0 to 32768 [ 975.067842][T24843] XFS (loop2): Mounting V5 Filesystem [ 975.124398][T24877] FAT-fs (loop7): Directory bread(block 64) failed [ 975.132788][T24877] FAT-fs (loop7): Directory bread(block 65) failed [ 975.141999][T24877] FAT-fs (loop7): Directory bread(block 66) failed [ 975.149471][T24877] FAT-fs (loop7): Directory bread(block 67) failed [ 975.156434][T24877] FAT-fs (loop7): Directory bread(block 68) failed [ 975.163147][T24877] FAT-fs (loop7): Directory bread(block 69) failed [ 975.170320][T24877] FAT-fs (loop7): Directory bread(block 70) failed [ 975.177045][T24877] FAT-fs (loop7): Directory bread(block 71) failed [ 975.189774][T24877] FAT-fs (loop7): Directory bread(block 72) failed [ 975.196345][T24877] FAT-fs (loop7): Directory bread(block 73) failed [ 975.257899][T24843] XFS (loop2): Ending clean mount [ 975.510987][T24906] loop6: detected capacity change from 0 to 512 [ 975.528578][ T4284] XFS (loop2): Unmounting Filesystem [ 975.585103][T24906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 975.631533][T24906] EXT4-fs (loop6): Test dummy encryption mode enabled [ 975.710785][T24906] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 975.793979][T24906] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.8551: attempt to clear invalid blocks 2 len 1 [ 975.907704][T24906] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 975.938789][T24921] autofs4:pid:24921:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 975.984314][T24906] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.8551: invalid indirect mapped block 1819239214 (level 0) [ 976.047375][T24906] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.8551: invalid indirect mapped block 1819239214 (level 1) [ 976.113339][T24906] EXT4-fs (loop6): 1 truncate cleaned up [ 976.151053][T24906] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 976.241797][T24906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 976.305278][T24906] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 976.424160][T23696] EXT4-fs (loop6): unmounting filesystem. [ 976.518906][T24936] netlink: 6 bytes leftover after parsing attributes in process `syz.7.8562'. [ 976.560615][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 976.614037][T24936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.903322][T24952] loop4: detected capacity change from 0 to 256 [ 976.949784][T24952] exfat: Deprecated parameter 'utf8' [ 976.991359][T24952] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 977.048107][T24949] loop2: detected capacity change from 0 to 4096 [ 977.259667][T24923] loop5: detected capacity change from 0 to 32768 [ 977.456388][T24968] xt_connbytes: Forcing CT accounting to be enabled [ 977.489734][T24970] loop7: detected capacity change from 0 to 128 [ 977.625712][T24970] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 977.653680][T24970] FAT-fs (loop7): Filesystem has been set read-only [ 977.815240][T23754] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 978.055624][T24994] IPv6: sit2: Disabled Multicast RS [ 978.320797][ T4736] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 978.536283][ T4736] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 978.553372][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8591'. [ 978.562567][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8591'. [ 978.563019][ T4736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.643164][ T4736] usb 8-1: config 0 descriptor?? [ 978.655479][ T4736] cp210x 8-1:0.0: cp210x converter detected [ 978.769783][ T4299] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 978.977807][ T4299] usb 7-1: Using ep0 maxpacket: 8 [ 978.984836][ T4299] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 978.992946][ T4299] usb 7-1: config 0 has no interface number 0 [ 979.016838][T25035] netlink: 'syz.2.8598': attribute type 3 has an invalid length. [ 979.023013][ T4299] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=21.10 [ 979.068716][ T4299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.087928][ T4299] usb 7-1: Product: syz [ 979.099971][ T4736] usb 8-1: cp210x converter now attached to ttyUSB0 [ 979.103198][ T4299] usb 7-1: Manufacturer: syz [ 979.115296][ T4299] usb 7-1: SerialNumber: syz [ 979.141948][ T4299] usb 7-1: config 0 descriptor?? [ 979.145404][ T4736] usb 8-1: USB disconnect, device number 4 [ 979.194267][ T4736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 979.251657][ T4736] cp210x 8-1:0.0: device disconnected [ 979.606255][T25059] loop2: detected capacity change from 0 to 512 [ 979.666895][ T7257] usb 7-1: USB disconnect, device number 2 [ 979.673181][T25059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 979.683989][T25059] System zones: 1-12 [ 979.688919][T25059] EXT4-fs (loop2): orphan cleanup on readonly fs [ 979.695230][ T7257] f81534a_ctrl 7-1:0.11: failed to set register 0x116: -19 [ 979.695254][ T7257] f81534a_ctrl 7-1:0.11: failed to enable ports: -19 [ 979.720235][T25059] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 393240: comm syz.2.8606: invalid block [ 979.765220][T25059] EXT4-fs (loop2): Remounting filesystem read-only [ 979.771820][T25059] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8606: couldn't read orphan inode 11 (err -117) [ 979.791162][T25059] EXT4-fs (loop2): Remounting filesystem read-only [ 979.803947][T25059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 980.016930][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 980.305620][T25079] loop2: detected capacity change from 0 to 4096 [ 980.343974][T25084] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8616'. [ 980.852055][T25096] loop6: detected capacity change from 0 to 1024 [ 980.985246][T25069] loop7: detected capacity change from 0 to 32768 [ 981.277645][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8626'. [ 981.324011][T25115] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8626'. [ 981.357680][T25115] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8626'. [ 981.412433][T25115] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8626'. [ 981.517720][T25124] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8629'. [ 981.570644][T25124] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8629'. [ 982.035980][T25149] __nla_validate_parse: 1 callbacks suppressed [ 982.036007][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8637'. [ 982.375559][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8646'. [ 983.537741][T25218] loop5: detected capacity change from 0 to 256 [ 983.597091][T25218] exfat: Deprecated parameter 'utf8' [ 983.654703][T25218] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 984.074977][T25230] loop7: detected capacity change from 0 to 4096 [ 984.411482][T25249] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8680'. [ 984.525768][T25247] loop4: detected capacity change from 0 to 4096 [ 984.577972][T25247] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 984.636375][T25247] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 984.668346][T25247] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 984.747756][T25247] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 984.754905][T25259] sctp: [Deprecated]: syz.5.8683 (pid 25259) Use of int in maxseg socket option. [ 984.754905][T25259] Use struct sctp_assoc_value instead [ 984.787029][T25262] loop7: detected capacity change from 0 to 256 [ 984.788887][T25215] loop2: detected capacity change from 0 to 32768 [ 984.805884][T25262] exfat: Deprecated parameter 'utf8' [ 984.816478][T25247] ntfs: volume version 3.1. [ 984.858062][T25215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8667 (25215) [ 984.884982][T25262] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 984.940293][T25247] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 984.948785][T25247] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 984.987434][T25215] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.046241][T25215] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 985.082628][T25215] BTRFS info (device loop2): using free space tree [ 985.262817][T25274] loop7: detected capacity change from 0 to 4096 [ 985.536646][T25215] BTRFS info (device loop2): enabling ssd optimizations [ 985.544287][T25300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8690'. [ 985.559421][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 985.566016][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 985.812086][T25311] loop7: detected capacity change from 0 to 256 [ 985.838046][T25311] exfat: Deprecated parameter 'namecase' [ 985.865716][ T4284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.890719][ T4736] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 985.906812][T25311] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 985.940490][T25317] loop5: detected capacity change from 0 to 512 [ 985.965606][T25317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 986.079409][T25317] EXT4-fs (loop5): Test dummy encryption mode enabled [ 986.164688][ T4736] usb 7-1: Using ep0 maxpacket: 16 [ 986.174470][ T4736] usb 7-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 986.190914][T25317] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 986.210931][T25317] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.8699: attempt to clear invalid blocks 2 len 1 [ 986.239545][ T4736] usb 7-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 986.239575][ T4736] usb 7-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 986.239600][ T4736] usb 7-1: config 0 interface 0 has no altsetting 0 [ 986.274038][ T4736] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 986.274070][ T4736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.274090][ T4736] usb 7-1: Product: syz [ 986.274105][ T4736] usb 7-1: Manufacturer: syz [ 986.274118][ T4736] usb 7-1: SerialNumber: syz [ 986.283673][ T4736] usb 7-1: config 0 descriptor?? [ 986.289353][T25317] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 986.290215][T25317] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8699: invalid indirect mapped block 1819239214 (level 0) [ 986.292111][T25317] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8699: invalid indirect mapped block 1819239214 (level 1) [ 986.297153][T25317] EXT4-fs (loop5): 1 truncate cleaned up [ 986.297186][T25317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 986.315428][ T4736] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input99 [ 986.385613][T25317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 986.406849][T25317] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 986.546449][ T4735] usb 7-1: USB disconnect, device number 3 [ 986.578490][T23442] EXT4-fs (loop5): unmounting filesystem. [ 986.806812][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8706'. [ 986.806843][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8706'. [ 986.806862][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8706'. [ 986.817739][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8706'. [ 987.740325][ T4299] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 987.812785][T25388] afs: Unexpected value for 'dyn' [ 987.966503][ T4299] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 987.996927][ T4299] usb 5-1: config 0 has no interface number 0 [ 988.025782][ T4299] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 988.068126][ T4299] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 988.112903][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.139225][ T4299] usb 5-1: Product: syz [ 988.159516][ T4299] usb 5-1: Manufacturer: syz [ 988.164161][ T4299] usb 5-1: SerialNumber: syz [ 988.219033][ T4299] usb 5-1: config 0 descriptor?? [ 988.258338][ T4299] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 988.389560][T25415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.463301][ C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 988.633587][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8737'. [ 988.707441][T19412] usb 5-1: USB disconnect, device number 118 [ 988.764762][T19412] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 988.935496][T25441] loop7: detected capacity change from 0 to 2048 [ 988.988056][T25441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.836080][ T4272] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 990.039224][ T4272] usb 8-1: Using ep0 maxpacket: 16 [ 990.050664][ T4272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.072230][T25491] overlayfs: conflicting options: nfs_export=on,index=off [ 990.091442][ T4272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.117514][ T4272] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 990.145318][ T4272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.154336][ T4272] usb 8-1: Product: syz [ 990.159131][ T4272] usb 8-1: Manufacturer: syz [ 990.163743][ T4272] usb 8-1: SerialNumber: syz [ 990.622141][ T4272] usb 8-1: cannot find UAC_HEADER [ 990.642202][T25458] loop6: detected capacity change from 0 to 40427 [ 990.665521][ T4272] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 990.710614][ T4272] usb 8-1: USB disconnect, device number 5 [ 990.720414][T25458] F2FS-fs (loop6): invalid crc value [ 990.772003][T25458] F2FS-fs (loop6): Found nat_bits in checkpoint [ 990.869768][T25458] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 990.879604][T25520] loop4: detected capacity change from 0 to 1024 [ 990.900069][T25458] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 990.974476][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.170047][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8784'. [ 992.209869][ T22] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 992.254169][T25523] loop5: detected capacity change from 0 to 32768 [ 992.303030][T25523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.8770 (25523) [ 992.434079][T25523] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 992.445456][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 992.457646][ T22] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 992.490768][T25523] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 992.508831][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.519677][T25523] BTRFS info (device loop5): using free space tree [ 992.551137][ T22] usb 3-1: Product: syz [ 992.555670][ T22] usb 3-1: Manufacturer: syz [ 992.560678][ T22] usb 3-1: SerialNumber: syz [ 992.589552][ T22] usb 3-1: config 0 descriptor?? [ 992.603618][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8787'. [ 992.622350][ T22] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 992.679189][T10472] udevd[10472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.870313][T25523] BTRFS info (device loop5): enabling ssd optimizations [ 992.947262][ T22] usb 3-1: USB disconnect, device number 112 [ 993.049951][T23442] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 994.012618][T25656] rdma_rxe: rxe creation allowed on top of a real device only [ 994.230281][ T4272] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 994.242153][ T22] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 994.433301][ T4272] usb 6-1: Using ep0 maxpacket: 32 [ 994.454138][ T4272] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 994.455669][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 994.487804][ T4272] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 994.496469][ T4272] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 994.509119][T25674] Unsupported ieee802154 address type: 0 [ 994.527247][ T4272] usb 6-1: config 1 has no interface number 0 [ 994.527572][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF6, skipping [ 994.544554][ T4272] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 994.572200][ T4272] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 994.573736][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 994.604394][ T4272] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 994.625012][ T4272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.659227][ T4272] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 994.660861][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 994.733997][ T22] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 994.754063][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.794492][ T22] usb 5-1: Product: syz [ 994.799031][ T22] usb 5-1: Manufacturer: syz [ 994.803650][ T22] usb 5-1: SerialNumber: syz [ 994.827218][ T22] usb 5-1: config 0 descriptor?? [ 994.855646][ T22] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 994.879559][ T4272] snd_usb_pod 6-1:1.1: invalid control EP [ 994.888510][ T4272] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 994.928243][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8826'. [ 994.929076][ T4272] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 994.943186][ T26] audit: type=1326 audit(8166488.354:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25687 comm="syz.6.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 994.983589][ T26] audit: type=1326 audit(8166488.382:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25687 comm="syz.6.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 995.001533][ T4272] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 995.204198][ T22] usb 6-1: USB disconnect, device number 3 [ 995.206989][T25698] loop2: detected capacity change from 0 to 256 [ 995.242004][ T4299] usb 5-1: USB disconnect, device number 119 [ 995.342746][ T26] audit: type=1326 audit(8166488.719:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25687 comm="syz.6.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 995.373228][ T26] audit: type=1326 audit(8166488.719:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25687 comm="syz.6.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e37e819 code=0x7ffc0000 [ 995.672223][T25712] loop6: detected capacity change from 0 to 1024 [ 995.680889][T25712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 995.715972][T25712] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 995.880386][T23696] EXT4-fs (loop6): unmounting filesystem. [ 996.019103][T25728] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 996.099759][ T26] audit: type=1326 audit(8166489.430:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25731 comm="syz.4.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f757e819 code=0x7ffc0000 [ 996.226661][T25735] loop5: detected capacity change from 0 to 4096 [ 996.233215][ T26] audit: type=1326 audit(8166489.477:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25731 comm="syz.4.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f93f757e819 code=0x7ffc0000 [ 996.254244][T25738] cgroup: Invalid name [ 996.304787][ T26] audit: type=1326 audit(8166489.477:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25731 comm="syz.4.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f757e819 code=0x7ffc0000 [ 996.336406][ T4272] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 996.344091][T25739] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.360056][T25735] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18158232222581129218, rec_len=65535, name_len=1 [ 996.425134][T25735] Remounting filesystem read-only [ 996.546966][T25748] loop6: detected capacity change from 0 to 512 [ 996.572017][ T4272] usb 8-1: Using ep0 maxpacket: 16 [ 996.585755][ T4272] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 996.613721][ T4272] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 996.641793][ T4272] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 996.667519][ T4272] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 996.667570][T25748] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 996.688974][ T4272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.697985][T25748] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 996.717338][T25748] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.8854: Failed to acquire dquot type 1 [ 996.746757][ T4272] usb 8-1: Product: syz [ 996.762348][ T4272] usb 8-1: Manufacturer: syz [ 996.779501][T25748] EXT4-fs (loop6): 1 truncate cleaned up [ 996.787754][ T4272] usb 8-1: SerialNumber: syz [ 996.809297][T25748] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 996.830044][ T4272] usb 8-1: config 0 descriptor?? [ 996.852733][T25725] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 996.874206][T25748] EXT4-fs (loop6): unmounting filesystem. [ 996.881470][ T4272] mceusb 8-1:0.0: mceusb_dev_probe: device setup failed! [ 996.909898][ T4272] mceusb: probe of 8-1:0.0 failed with error -12 [ 997.115823][ T5061] usb 8-1: USB disconnect, device number 6 [ 997.678705][T25793] loop2: detected capacity change from 0 to 512 [ 997.788324][T25793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 997.980103][T25796] loop4: detected capacity change from 0 to 4096 [ 998.025912][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 998.207181][T25796] ntfs: (device loop4): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u. [ 998.232758][T25813] loop2: detected capacity change from 0 to 1024 [ 998.282503][T25796] ntfs: volume version 3.1. [ 998.313419][T25813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 998.396985][T25763] loop5: detected capacity change from 0 to 32768 [ 998.521131][T25763] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 998.565121][T25763] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 998.609065][T25763] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 998.655737][ T4272] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 998.674275][ T4272] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 998.747748][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 998.857922][ T4272] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 998.923663][ T4272] gfs2: fsid=syz:syz.0: jid=0: Done [ 998.945205][T25763] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 999.327246][T25850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 999.700419][T25863] netlink: 'syz.5.8884': attribute type 1 has an invalid length. [ 999.743321][T25824] loop7: detected capacity change from 0 to 32768 [ 999.800703][T25824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.8874 (25824) [ 999.900800][T25824] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 999.973950][T25824] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1000.025031][T25824] BTRFS info (device loop7): using free space tree [ 1000.168403][T25824] BTRFS info (device loop7): enabling ssd optimizations [ 1000.358661][T23754] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.053514][T25924] netlink: 'syz.7.8901': attribute type 3 has an invalid length. [ 1001.393799][T25872] loop4: detected capacity change from 0 to 32768 [ 1001.626777][T25905] loop6: detected capacity change from 0 to 32768 [ 1001.665083][T25905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.8897 (25905) [ 1001.733559][T25905] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.800040][T25905] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1001.808762][T25905] BTRFS info (device loop6): using free space tree [ 1001.923476][T25905] BTRFS info (device loop6): enabling ssd optimizations [ 1002.014359][T23696] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.109497][T25973] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1003.078387][T26010] dlm: no locking on control device [ 1003.189670][ T4732] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1003.340673][T26022] loop6: detected capacity change from 0 to 164 [ 1003.380065][T26022] Unable to read rock-ridge attributes [ 1003.428378][ T4732] usb 3-1: Using ep0 maxpacket: 8 [ 1003.434012][T26022] tmpfs: Bad value for 'nr_blocks' [ 1003.439749][ T4732] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1003.471089][ T4732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.491960][ T4732] usb 3-1: config 0 descriptor?? [ 1003.541545][ T4732] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1003.981700][ T4732] gspca_spca501: reg write: error -71 [ 1003.989382][ T4732] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1004.019023][ T4732] spca501: probe of 3-1:0.0 failed with error -22 [ 1004.077130][ T4732] usb 3-1: USB disconnect, device number 113 [ 1004.191866][T26049] loop4: detected capacity change from 0 to 4096 [ 1004.328214][T26049] ntfs: volume version 3.1. [ 1004.412590][T26064] libceph: resolve '.' (ret=-3): failed [ 1004.617316][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8954'. [ 1004.926808][T26088] loop4: detected capacity change from 0 to 1764 [ 1004.937123][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8960'. [ 1004.958781][T26090] netlink: 'syz.7.8960': attribute type 1 has an invalid length. [ 1005.173887][T26099] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8962'. [ 1005.503176][T26114] loop5: detected capacity change from 0 to 164 [ 1005.623729][T26116] loop2: detected capacity change from 0 to 1024 [ 1005.672100][T26118] loop4: detected capacity change from 0 to 1024 [ 1005.738287][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 1005.738303][ T26] audit: type=1326 audit(8166498.446:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26120 comm="syz.7.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1005.759526][T26118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1005.783621][T26116] syz.2.8980: attempt to access beyond end of device [ 1005.783621][T26116] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1005.847468][T26116] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 1005.882463][ T26] audit: type=1326 audit(8166498.446:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26120 comm="syz.7.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1005.919230][T26116] syz.2.8980: attempt to access beyond end of device [ 1005.919230][T26116] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1005.974291][ T26] audit: type=1326 audit(8166498.446:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26120 comm="syz.7.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1006.007380][T26116] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 1006.032414][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 1006.438943][T26153] loop7: detected capacity change from 0 to 1024 [ 1006.619616][T26153] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1006.658904][T26159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8985'. [ 1006.890853][T23754] EXT4-fs (loop7): unmounting filesystem. [ 1006.924940][T26175] loop2: detected capacity change from 0 to 256 [ 1006.981414][T26175] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1007.165035][T26177] loop5: detected capacity change from 0 to 4096 [ 1007.237212][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1007.272422][T26177] ntfs3: loop5: Failed to load $Extend. [ 1007.610340][T26208] loop2: detected capacity change from 0 to 256 [ 1007.657208][T26208] exfat: Deprecated parameter 'namecase' [ 1007.696364][T26208] exfat: Deprecated parameter 'utf8' [ 1007.713737][T26205] loop7: detected capacity change from 0 to 1024 [ 1007.743143][T26208] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1007.824444][T26213] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1007.939780][T26213] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1007.962252][T26218] loop6: detected capacity change from 0 to 1024 [ 1008.099484][T26218] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1008.266069][T26232] loop4: detected capacity change from 0 to 1024 [ 1008.301254][T26232] hfsplus: unable to parse mount options [ 1008.409188][T26238] netlink: 'syz.5.9013': attribute type 1 has an invalid length. [ 1008.420897][T23696] EXT4-fs (loop6): unmounting filesystem. [ 1008.460512][T26238] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.9013'. [ 1008.482133][T26238] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9013'. [ 1008.623766][T26245] kAFS: unable to lookup cell '/' [ 1008.659741][T26248] netlink: 'syz.6.9015': attribute type 7 has an invalid length. [ 1008.667681][ T4732] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1008.881806][ T4732] usb 5-1: Using ep0 maxpacket: 16 [ 1008.893283][ T4732] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1008.942138][ T4732] usb 5-1: config 0 has no interface number 0 [ 1008.948295][ T4732] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 62119, setting to 1024 [ 1008.971561][ T4732] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1009.056335][ T4732] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1009.081222][ T4732] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1009.143479][ T4732] usb 5-1: Product: syz [ 1009.156669][ T4732] usb 5-1: SerialNumber: syz [ 1009.178450][ T4732] usb 5-1: config 0 descriptor?? [ 1009.184164][T26232] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1009.194210][T26273] loop6: detected capacity change from 0 to 64 [ 1009.377189][T26281] overlayfs: missing 'lowerdir' [ 1009.424511][ T4732] usb 5-1: invalid MIDI in EP 0 [ 1009.510770][ T4732] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 1009.555757][ T4732] usb 5-1: USB disconnect, device number 120 [ 1009.687247][T26286] loop2: detected capacity change from 0 to 4096 [ 1009.734055][T26286] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1009.809574][T26286] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1009.846769][ T4761] udevd[4761]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.847368][T26286] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1009.877457][T26299] loop7: detected capacity change from 0 to 256 [ 1009.956497][T26299] FAT-fs (loop7): Directory bread(block 64) failed [ 1009.969913][T26286] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1009.980398][T26299] FAT-fs (loop7): Directory bread(block 65) failed [ 1010.018329][T26299] FAT-fs (loop7): Directory bread(block 66) failed [ 1010.039268][T26299] FAT-fs (loop7): Directory bread(block 67) failed [ 1010.046794][T26302] loop5: detected capacity change from 0 to 512 [ 1010.062982][T26299] FAT-fs (loop7): Directory bread(block 68) failed [ 1010.063913][T26286] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1010.109781][T26299] FAT-fs (loop7): Directory bread(block 69) failed [ 1010.116533][T26299] FAT-fs (loop7): Directory bread(block 70) failed [ 1010.141728][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.9036: corrupted inode contents [ 1010.155856][T26299] FAT-fs (loop7): Directory bread(block 71) failed [ 1010.172471][T26299] FAT-fs (loop7): Directory bread(block 72) failed [ 1010.179160][T26299] FAT-fs (loop7): Directory bread(block 73) failed [ 1010.195360][T26286] ntfs: volume version 3.1. [ 1010.206743][T26302] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.9036: mark_inode_dirty error [ 1010.263947][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.9036: corrupted inode contents [ 1010.316286][T26302] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.9036: mark_inode_dirty error [ 1010.351506][T26302] Quota error (device loop5): write_blk: dquota write failed [ 1010.359375][T26286] overlayfs: upper fs is r/o, try multi-lower layers mount [ 1010.372838][T26302] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1010.415556][T26302] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.9036: Failed to acquire dquot type 0 [ 1010.477538][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9036: corrupted inode contents [ 1010.520918][T26302] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.9036: mark_inode_dirty error [ 1010.567577][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9036: corrupted inode contents [ 1010.635977][T26302] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.9036: mark_inode_dirty error [ 1010.695393][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9036: corrupted inode contents [ 1010.732433][T26302] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1010.763210][T26302] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9036: corrupted inode contents [ 1010.812975][T26302] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.9036: mark_inode_dirty error [ 1010.873968][T26302] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1010.922966][T26302] EXT4-fs (loop5): 1 truncate cleaned up [ 1010.935862][T26302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1011.131300][T26302] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1011.177759][T26302] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1011.205458][T26302] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.9036: Failed to acquire dquot type 1 [ 1011.250858][ T4733] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1011.382247][T23442] EXT4-fs (loop5): unmounting filesystem. [ 1011.391200][T12295] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1011.395259][T26309] loop4: detected capacity change from 0 to 32768 [ 1011.438030][T12295] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:8: Failed to release dquot type 1 [ 1011.455956][ T4733] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 1011.464099][ T4733] usb 8-1: config 0 has no interface number 0 [ 1011.483963][T26309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9038 (26309) [ 1011.507477][ T4733] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=58.2b [ 1011.540531][ T4733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.568559][ T4733] usb 8-1: config 0 descriptor?? [ 1011.631001][T26309] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1011.679067][T26309] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1011.742729][T26309] BTRFS info (device loop4): using free space tree [ 1011.771248][T26356] loop5: detected capacity change from 0 to 512 [ 1011.819688][ T4733] RobotFuzz Open Source InterFace, OSIF 8-1:0.56: version 58.2b found at bus 008 address 007 [ 1011.917371][T26356] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1012.070437][T23442] EXT4-fs (loop5): unmounting filesystem. [ 1012.087759][ T4733] usb 8-1: USB disconnect, device number 7 [ 1012.130193][T26309] BTRFS info (device loop4): enabling ssd optimizations [ 1012.300244][T26394] sctp: [Deprecated]: syz.2.9061 (pid 26394) Use of int in max_burst socket option. [ 1012.300244][T26394] Use struct sctp_assoc_value instead [ 1012.326054][ T4291] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1012.575265][ T4732] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1012.766378][T26410] netlink: 'syz.6.9067': attribute type 4 has an invalid length. [ 1012.779834][ T4732] usb 6-1: Using ep0 maxpacket: 16 [ 1012.787318][ T4732] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1012.811849][ T4732] usb 6-1: config 0 has no interface number 0 [ 1012.824312][T26413] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9068'. [ 1012.835697][ T4732] usb 6-1: New USB device found, idVendor=10b8, idProduct=1e78, bcdDevice=18.ae [ 1012.847411][ T4732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.885506][ T4732] usb 6-1: Product: syz [ 1012.921073][ T4732] usb 6-1: Manufacturer: syz [ 1012.925722][ T4732] usb 6-1: SerialNumber: syz [ 1012.955031][ T4732] usb 6-1: config 0 descriptor?? [ 1013.181148][ T4732] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 1013.209335][ T4732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.253003][ T4732] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 1013.282176][ T4732] usb 6-1: media controller created [ 1013.334057][T26432] syz.2.9074 uses old SIOCAX25GETINFO [ 1013.360439][ T4732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.583509][T26444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9079'. [ 1013.593522][ T4732] DVB: Unable to find symbol dib7000p_attach() [ 1013.600230][ T4732] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 1013.645944][T26444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9079'. [ 1013.838319][ T4732] rc_core: IR keymap rc-dib0700-rc5 not found [ 1013.845154][ T4732] Registered IR keymap rc-empty [ 1013.870371][ T4732] dvb-usb: could not initialize remote control. [ 1013.877099][ T4732] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 1013.954751][ T4732] usb 6-1: USB disconnect, device number 4 [ 1014.074538][ T4732] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 1014.174721][T26468] QAT: failed to copy from user cfg_data. [ 1015.126196][T26506] loop4: detected capacity change from 0 to 256 [ 1015.191166][T26506] exfat: Deprecated parameter 'utf8' [ 1015.200015][T26443] loop2: detected capacity change from 0 to 32768 [ 1015.228722][T26506] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1015.249864][T26443] gfs2: Unknown parameter 'norgrpvb' [ 1015.685809][T26528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9111'. [ 1015.774853][T26528] tc_dump_action: action bad kind [ 1016.438555][T26564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9125'. [ 1016.466593][T26564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9125'. [ 1017.024093][ T4299] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1017.221710][T26592] netlink: 'syz.2.9134': attribute type 32 has an invalid length. [ 1017.231798][ T4299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.236910][T26555] loop5: detected capacity change from 0 to 32768 [ 1017.259314][ T4299] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.303976][T26555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.9122 (26555) [ 1017.304020][ T4299] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1017.379668][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1017.410783][ T4299] usb 5-1: SerialNumber: syz [ 1017.440200][T26555] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1017.475085][T26555] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1017.532328][T26555] BTRFS info (device loop5): using free space tree [ 1017.555007][T26562] loop6: detected capacity change from 0 to 32768 [ 1017.658552][ T4299] usb 5-1: 0:2 : does not exist [ 1017.691553][ T4299] usb 5-1: USB disconnect, device number 121 [ 1017.837454][T26555] BTRFS info (device loop5): enabling ssd optimizations [ 1017.925833][T10472] udevd[10472]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.020347][T26630] loop2: detected capacity change from 0 to 512 [ 1018.068484][T23442] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1018.136675][T26630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1018.176853][T26630] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.9141: bg 0: block 416: padding at end of block bitmap is not set [ 1018.291942][T26630] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1018.614306][T26648] loop6: detected capacity change from 0 to 512 [ 1018.676440][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 1018.760804][T26648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1018.953074][T26648] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1019.162970][T23696] EXT4-fs (loop6): unmounting filesystem. [ 1020.004475][T26712] loop2: detected capacity change from 0 to 64 [ 1020.025183][T26714] netlink: 'syz.5.9169': attribute type 15 has an invalid length. [ 1020.217119][T26721] netlink: 'syz.4.9171': attribute type 1 has an invalid length. [ 1020.309890][ T93] block nbd2: Attempted send on invalid socket [ 1020.316232][ T93] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1020.329009][T26725] hfs: can't find a HFS filesystem on dev nbd2 [ 1020.876303][T26747] loop6: detected capacity change from 0 to 1764 [ 1020.928623][T26747] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1021.515366][T26783] x_tables: duplicate entry at hook 2 [ 1022.032818][T26809] loop2: detected capacity change from 0 to 256 [ 1022.045850][ T93] block nbd4: Attempted send on invalid socket [ 1022.052521][ T93] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1022.092856][T26810] vxfs: unable to read disk superblock at 1 [ 1022.141693][ T52] block nbd4: Attempted send on invalid socket [ 1022.148666][ T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1022.159515][T26809] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1022.198052][T26810] vxfs: unable to read disk superblock at 8 [ 1022.210003][T26810] vxfs: can't find superblock. [ 1022.881472][T26848] loop5: detected capacity change from 0 to 256 [ 1022.911080][T26848] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1022.950412][T26848] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.524961][T26874] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9234'. [ 1023.706811][ T26] audit: type=1326 audit(8166515.255:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1023.764044][ T26] audit: type=1326 audit(8166515.283:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1023.781430][T26883] loop2: detected capacity change from 0 to 256 [ 1023.838706][T26883] exfat: Deprecated parameter 'namecase' [ 1023.875446][ T26] audit: type=1326 audit(8166515.283:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1023.914442][T26883] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xed4932bb, utbl_chksum : 0xe619d30d) [ 1023.951959][ T26] audit: type=1326 audit(8166515.283:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f677e819 code=0x7ffc0000 [ 1024.295330][T26899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.452020][T26870] loop4: detected capacity change from 0 to 32768 [ 1024.557889][T26904] loop2: detected capacity change from 0 to 1024 [ 1024.603965][T26906] loop6: detected capacity change from 0 to 1024 [ 1024.611943][T26904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1024.670707][T26906] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1024.689791][ T5061] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1024.861324][T23696] EXT4-fs (loop6): unmounting filesystem. [ 1024.924224][ T5061] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1024.968844][ T5061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.976888][ T5061] usb 8-1: Product: syz [ 1024.993361][T26900] loop5: detected capacity change from 0 to 32768 [ 1024.997412][ T5061] usb 8-1: Manufacturer: syz [ 1025.040493][ T5061] usb 8-1: SerialNumber: syz [ 1025.055210][ T5061] usb 8-1: config 0 descriptor?? [ 1025.077185][ T5061] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1025.085213][T26900] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1025.108323][T26900] lbmIODone: I/O error in JFS log [ 1025.134690][T26900] *** Log Format Error ! *** [ 1025.160340][T26900] lmLogInit: exit(-22) [ 1025.180834][T26900] lmLogOpen: exit(-22) [ 1025.362495][T26921] loop4: detected capacity change from 0 to 512 [ 1025.424994][T26921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1025.454857][T26921] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.9251: corrupted xattr block 33 [ 1025.508093][ T5061] gspca_sunplus: reg_w_riv err -71 [ 1025.514197][ T5061] sunplus: probe of 8-1:0.0 failed with error -71 [ 1025.573011][ T5061] usb 8-1: USB disconnect, device number 8 [ 1025.646506][ T4291] EXT4-fs (loop4): unmounting filesystem. [ 1025.846516][T26942] loop6: detected capacity change from 0 to 256 [ 1025.891733][T26942] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 1026.801403][T26981] loop2: detected capacity change from 0 to 8 [ 1026.890045][T26981] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1026.942122][T26981] cramfs: Error -3 while decompressing! [ 1026.971596][T26987] loop6: detected capacity change from 0 to 8 [ 1026.981910][T26981] cramfs: ffffffff974c9568(26)->ffff888050199000(4096) [ 1027.033009][T26981] cramfs: Error -3 while decompressing! [ 1027.052366][T26981] cramfs: ffffffff974c9582(26)->ffff88804a580000(4096) [ 1027.070594][T26944] loop5: detected capacity change from 0 to 32768 [ 1027.093863][T26981] cramfs: Error -3 while decompressing! [ 1027.111112][T26981] cramfs: ffffffff974c959c(16)->ffff8880413fd000(4096) [ 1027.119062][T26987] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1027.125527][T26987] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1027.134409][T26981] cramfs: Error -3 while decompressing! [ 1027.168841][T26981] cramfs: ffffffff974c9568(26)->ffff888050199000(4096) [ 1027.170017][T26987] SQUASHFS error: Unable to read directory block [247:26] [ 1027.198246][ T26] audit: type=1800 audit(8166518.519:176): pid=26981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9279" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1028.167859][T26988] loop4: detected capacity change from 0 to 32768 [ 1028.241358][T26988] (syz.4.9281,26988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.295719][T27027] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9295'. [ 1028.314354][T26988] (syz.4.9281,26988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1028.384976][T26988] JBD2: Ignoring recovery information on journal [ 1028.483477][T26999] loop2: detected capacity change from 0 to 32768 [ 1028.584364][T26988] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1028.682656][T26988] [ 1028.685029][T26988] ====================================================== [ 1028.692055][T26988] WARNING: possible circular locking dependency detected [ 1028.699085][T26988] 6.1.118-syzkaller #0 Not tainted [ 1028.704207][T26988] ------------------------------------------------------ [ 1028.711235][T26988] syz.4.9281/26988 is trying to acquire lock: [ 1028.717317][T26988] ffff88807ce50650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x68c/0xb60 [ 1028.726765][T26988] [ 1028.726765][T26988] but task is already holding lock: [ 1028.734145][T26988] ffff88804ea13f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 1028.745060][T26988] [ 1028.745060][T26988] which lock already depends on the new lock. [ 1028.745060][T26988] [ 1028.755475][T26988] [ 1028.755475][T26988] the existing dependency chain (in reverse order) is: [ 1028.764497][T26988] [ 1028.764497][T26988] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1028.773385][T26988] lock_acquire+0x1f8/0x5a0 [ 1028.778440][T26988] down_write+0x36/0x60 [ 1028.783137][T26988] ocfs2_lock_global_qf+0x221/0x2a0 [ 1028.788884][T26988] ocfs2_acquire_dquot+0x2ad/0xb60 [ 1028.794544][T26988] dqget+0x762/0xe90 [ 1028.798978][T26988] __dquot_initialize+0x2d9/0xea0 [ 1028.804544][T26988] ocfs2_get_init_inode+0x154/0x1c0 [ 1028.810277][T26988] ocfs2_mknod+0xe32/0x2e20 [ 1028.815313][T26988] ocfs2_mkdir+0x1c0/0x4e0 [ 1028.820265][T26988] vfs_mkdir+0x3b6/0x590 [ 1028.825051][T26988] do_mkdirat+0x225/0x360 [ 1028.829920][T26988] __x64_sys_mkdir+0x6a/0x80 [ 1028.835047][T26988] do_syscall_64+0x3b/0xb0 [ 1028.839999][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.846442][T26988] [ 1028.846442][T26988] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 1028.856982][T26988] lock_acquire+0x1f8/0x5a0 [ 1028.862031][T26988] down_write+0x36/0x60 [ 1028.866728][T26988] ocfs2_lock_global_qf+0x202/0x2a0 [ 1028.872463][T26988] ocfs2_acquire_dquot+0x2ad/0xb60 [ 1028.878096][T26988] dqget+0x762/0xe90 [ 1028.882505][T26988] __dquot_initialize+0x2d9/0xea0 [ 1028.888042][T26988] ocfs2_get_init_inode+0x154/0x1c0 [ 1028.893750][T26988] ocfs2_mknod+0xe32/0x2e20 [ 1028.898762][T26988] ocfs2_mkdir+0x1c0/0x4e0 [ 1028.903706][T26988] vfs_mkdir+0x3b6/0x590 [ 1028.908488][T26988] do_mkdirat+0x225/0x360 [ 1028.913360][T26988] __x64_sys_mkdir+0x6a/0x80 [ 1028.918488][T26988] do_syscall_64+0x3b/0xb0 [ 1028.923432][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.929868][T26988] [ 1028.929868][T26988] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 1028.937532][T26988] lock_acquire+0x1f8/0x5a0 [ 1028.942574][T26988] __mutex_lock+0x132/0xd80 [ 1028.947616][T26988] dquot_commit+0x57/0x510 [ 1028.952579][T26988] ext4_write_dquot+0x1fd/0x360 [ 1028.957969][T26988] mark_all_dquot_dirty+0xf7/0x400 [ 1028.963626][T26988] __dquot_free_space+0x956/0xe70 [ 1028.969275][T26988] ext4_free_blocks+0x1fb4/0x3020 [ 1028.974839][T26988] ext4_ext_remove_space+0x22bb/0x4f30 [ 1028.980842][T26988] ext4_ext_truncate+0x201/0x360 [ 1028.986323][T26988] ext4_truncate+0xa1d/0x1290 [ 1028.991538][T26988] ext4_evict_inode+0xb68/0x1150 [ 1028.997021][T26988] evict+0x529/0x930 [ 1029.001457][T26988] ext4_orphan_cleanup+0xb70/0x1400 [ 1029.007191][T26988] ext4_fill_super+0x83ff/0x8b50 [ 1029.012685][T26988] get_tree_bdev+0x3fe/0x620 [ 1029.017798][T26988] vfs_get_tree+0x88/0x270 [ 1029.022733][T26988] do_new_mount+0x2ba/0xb40 [ 1029.027748][T26988] __se_sys_mount+0x2d5/0x3c0 [ 1029.032940][T26988] do_syscall_64+0x3b/0xb0 [ 1029.037868][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.044290][T26988] [ 1029.044290][T26988] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 1029.051910][T26988] lock_acquire+0x1f8/0x5a0 [ 1029.056940][T26988] down_write+0x36/0x60 [ 1029.061601][T26988] ext4_map_blocks+0x955/0x1cb0 [ 1029.066963][T26988] ext4_writepages+0x1643/0x3de0 [ 1029.072407][T26988] do_writepages+0x3a2/0x670 [ 1029.077509][T26988] __writeback_single_inode+0x15d/0x11e0 [ 1029.083648][T26988] writeback_sb_inodes+0xc2b/0x1b20 [ 1029.089354][T26988] __writeback_inodes_wb+0x114/0x400 [ 1029.095147][T26988] wb_writeback+0x4b1/0xe10 [ 1029.100177][T26988] wb_workfn+0xc9e/0x1020 [ 1029.105032][T26988] process_one_work+0x8a9/0x11d0 [ 1029.110482][T26988] worker_thread+0xa47/0x1200 [ 1029.115680][T26988] kthread+0x28d/0x320 [ 1029.120276][T26988] ret_from_fork+0x1f/0x30 [ 1029.125474][T26988] [ 1029.125474][T26988] -> #2 (jbd2_handle){++++}-{0:0}: [ 1029.132756][T26988] lock_acquire+0x1f8/0x5a0 [ 1029.137772][T26988] start_this_handle+0x1f71/0x21b0 [ 1029.143390][T26988] jbd2__journal_start+0x2d1/0x5c0 [ 1029.149007][T26988] jbd2_journal_start+0x25/0x30 [ 1029.154365][T26988] ocfs2_start_trans+0x3c0/0x6f0 [ 1029.159810][T26988] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 1029.166054][T26988] ocfs2_dismount_volume+0x1fb/0x960 [ 1029.171853][T26988] generic_shutdown_super+0x130/0x340 [ 1029.177744][T26988] kill_block_super+0x7a/0xe0 [ 1029.182964][T26988] deactivate_locked_super+0xa0/0x110 [ 1029.188875][T26988] cleanup_mnt+0x490/0x520 [ 1029.193839][T26988] task_work_run+0x246/0x300 [ 1029.198969][T26988] exit_to_user_mode_loop+0xde/0x100 [ 1029.204788][T26988] exit_to_user_mode_prepare+0xb1/0x140 [ 1029.210879][T26988] syscall_exit_to_user_mode+0x60/0x270 [ 1029.216970][T26988] do_syscall_64+0x47/0xb0 [ 1029.221928][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.228371][T26988] [ 1029.228371][T26988] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1029.236911][T26988] lock_acquire+0x1f8/0x5a0 [ 1029.241963][T26988] down_read+0xad/0xa30 [ 1029.246662][T26988] ocfs2_start_trans+0x3b5/0x6f0 [ 1029.252152][T26988] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 1029.258417][T26988] ocfs2_dismount_volume+0x1fb/0x960 [ 1029.264247][T26988] generic_shutdown_super+0x130/0x340 [ 1029.270345][T26988] kill_block_super+0x7a/0xe0 [ 1029.275568][T26988] deactivate_locked_super+0xa0/0x110 [ 1029.281474][T26988] cleanup_mnt+0x490/0x520 [ 1029.286436][T26988] task_work_run+0x246/0x300 [ 1029.291564][T26988] exit_to_user_mode_loop+0xde/0x100 [ 1029.297385][T26988] exit_to_user_mode_prepare+0xb1/0x140 [ 1029.303549][T26988] syscall_exit_to_user_mode+0x60/0x270 [ 1029.309634][T26988] do_syscall_64+0x47/0xb0 [ 1029.314581][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.321160][T26988] [ 1029.321160][T26988] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 1029.328658][T26988] validate_chain+0x1661/0x5950 [ 1029.330484][ T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1029.334027][T26988] __lock_acquire+0x125b/0x1f80 [ 1029.346847][T26988] lock_acquire+0x1f8/0x5a0 [ 1029.351894][T26988] ocfs2_start_trans+0x2b0/0x6f0 [ 1029.357383][T26988] ocfs2_acquire_dquot+0x68c/0xb60 [ 1029.363037][T26988] dqget+0x762/0xe90 [ 1029.367463][T26988] __dquot_initialize+0x2d9/0xea0 [ 1029.373029][T26988] ocfs2_get_init_inode+0x154/0x1c0 [ 1029.378758][T26988] ocfs2_mknod+0xe32/0x2e20 [ 1029.383786][T26988] ocfs2_mkdir+0x1c0/0x4e0 [ 1029.388729][T26988] vfs_mkdir+0x3b6/0x590 [ 1029.393522][T26988] do_mkdirat+0x225/0x360 [ 1029.398386][T26988] __x64_sys_mkdir+0x6a/0x80 [ 1029.403517][T26988] do_syscall_64+0x3b/0xb0 [ 1029.408474][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.414995][T26988] [ 1029.414995][T26988] other info that might help us debug this: [ 1029.414995][T26988] [ 1029.425228][T26988] Chain exists of: [ 1029.425228][T26988] sb_internal#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_quota_ip_alloc_sem_key [ 1029.425228][T26988] [ 1029.442384][T26988] Possible unsafe locking scenario: [ 1029.442384][T26988] [ 1029.449928][T26988] CPU0 CPU1 [ 1029.455305][T26988] ---- ---- [ 1029.460677][T26988] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1029.466322][T26988] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1029.476237][T26988] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1029.484405][T26988] lock(sb_internal#2); [ 1029.488667][T26988] [ 1029.488667][T26988] *** DEADLOCK *** [ 1029.488667][T26988] [ 1029.496819][T26988] 6 locks held by syz.4.9281/26988: [ 1029.502036][T26988] #0: ffff88807ce50460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 1029.511303][T26988] #1: ffff88804ea11808 (&type->i_mutex_dir_key#27/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 1029.513744][T27070] loop6: detected capacity change from 0 to 1024 [ 1029.522122][T26988] #2: ffff88804e96d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 1029.522198][T26988] #3: ffff88805519e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2a0/0xb60 [ 1029.552162][T26988] #4: ffff88804ea142c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 1029.565429][T26988] #5: ffff88804ea13f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 1029.576790][T26988] [ 1029.576790][T26988] stack backtrace: [ 1029.582669][T26988] CPU: 1 PID: 26988 Comm: syz.4.9281 Not tainted 6.1.118-syzkaller #0 [ 1029.590812][T26988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1029.600873][T26988] Call Trace: [ 1029.604151][T26988] [ 1029.607070][T26988] dump_stack_lvl+0x1e3/0x2cb [ 1029.611745][T26988] ? nf_tcp_handle_invalid+0x642/0x642 [ 1029.617286][T26988] ? print_circular_bug+0x12b/0x1a0 [ 1029.622477][T26988] check_noncircular+0x2fa/0x3b0 [ 1029.627496][T26988] ? add_chain_block+0x850/0x850 [ 1029.632423][T26988] ? lockdep_lock+0x11f/0x2a0 [ 1029.637097][T26988] ? _find_first_zero_bit+0xd0/0x100 [ 1029.642466][T26988] validate_chain+0x1661/0x5950 [ 1029.647314][T26988] ? reacquire_held_locks+0x660/0x660 [ 1029.652771][T26988] ? __stack_depot_save+0x3f5/0x470 [ 1029.658229][T26988] ? reacquire_held_locks+0x660/0x660 [ 1029.663622][T26988] ? qtree_read_dquot+0x698/0x7f0 [ 1029.668643][T26988] ? kasan_set_track+0x60/0x70 [ 1029.673404][T26988] ? kasan_set_track+0x4b/0x70 [ 1029.678165][T26988] ? kasan_save_free_info+0x27/0x40 [ 1029.683353][T26988] ? ____kasan_slab_free+0xd6/0x120 [ 1029.688546][T26988] ? __kmem_cache_free+0x25c/0x3c0 [ 1029.693651][T26988] ? qtree_read_dquot+0x698/0x7f0 [ 1029.698670][T26988] ? ocfs2_acquire_dquot+0x2f5/0xb60 [ 1029.703951][T26988] ? dqget+0x762/0xe90 [ 1029.708016][T26988] ? __dquot_initialize+0x2d9/0xea0 [ 1029.713212][T26988] ? ocfs2_get_init_inode+0x154/0x1c0 [ 1029.718573][T26988] ? ocfs2_mknod+0xe32/0x2e20 [ 1029.723241][T26988] ? mark_lock+0x9a/0x340 [ 1029.727565][T26988] __lock_acquire+0x125b/0x1f80 [ 1029.732415][T26988] lock_acquire+0x1f8/0x5a0 [ 1029.736912][T26988] ? ocfs2_acquire_dquot+0x68c/0xb60 [ 1029.742202][T26988] ? read_lock_is_recursive+0x10/0x10 [ 1029.747568][T26988] ? __lock_acquire+0x1f80/0x1f80 [ 1029.752586][T26988] ? __might_sleep+0xb0/0xb0 [ 1029.757254][T26988] ? do_raw_spin_unlock+0x137/0x8a0 [ 1029.762441][T26988] ? ocfs2_qinfo_unlock+0xa8/0x140 [ 1029.767542][T26988] ocfs2_start_trans+0x2b0/0x6f0 [ 1029.772474][T26988] ? ocfs2_acquire_dquot+0x68c/0xb60 [ 1029.777758][T26988] ? ocfs2_recovery_exit+0x280/0x280 [ 1029.783039][T26988] ? _raw_spin_unlock+0x24/0x40 [ 1029.787887][T26988] ? ocfs2_qinfo_unlock+0x11d/0x140 [ 1029.793076][T26988] ocfs2_acquire_dquot+0x68c/0xb60 [ 1029.798183][T26988] ? dqget+0xca6/0xe90 [ 1029.802249][T26988] ? ocfs2_destroy_dquot+0x40/0x40 [ 1029.807357][T26988] dqget+0x762/0xe90 [ 1029.811247][T26988] __dquot_initialize+0x2d9/0xea0 [ 1029.816269][T26988] ? new_inode+0x1ba/0x1d0 [ 1029.820683][T26988] ? dquot_initialize+0x20/0x20 [ 1029.825549][T26988] ? do_raw_spin_unlock+0x137/0x8a0 [ 1029.830743][T26988] ? inode_init_owner+0x292/0x430 [ 1029.835763][T26988] ocfs2_get_init_inode+0x154/0x1c0 [ 1029.840951][T26988] ? ocfs2_create_inode_in_orphan+0x15a0/0x15a0 [ 1029.847208][T26988] ? validate_chain+0x112/0x5950 [ 1029.852137][T26988] ocfs2_mknod+0xe32/0x2e20 [ 1029.856637][T26988] ? ocfs2_mkdir+0x4e0/0x4e0 [ 1029.861215][T26988] ? mark_lock+0x9a/0x340 [ 1029.865539][T26988] ? __lock_acquire+0x125b/0x1f80 [ 1029.870565][T26988] ? __lock_acquire+0x125b/0x1f80 [ 1029.875592][T26988] ? ocfs2_inode_unlock_tracker+0x236/0x2a0 [ 1029.881473][T26988] ? __lock_acquire+0x1f80/0x1f80 [ 1029.886487][T26988] ? do_raw_spin_lock+0x14a/0x370 [ 1029.891506][T26988] ? do_raw_spin_unlock+0x137/0x8a0 [ 1029.896799][T26988] ? _raw_spin_unlock+0x24/0x40 [ 1029.901667][T26988] ? put_pid+0xd8/0x120 [ 1029.905830][T26988] ocfs2_mkdir+0x1c0/0x4e0 [ 1029.910243][T26988] ? make_kgid+0x6f0/0x6f0 [ 1029.914666][T26988] ? ocfs2_symlink+0x2f00/0x2f00 [ 1029.919597][T26988] ? HAS_UNMAPPED_ID+0x1ef/0x240 [ 1029.924534][T26988] ? inode_permission+0xf7/0x450 [ 1029.929465][T26988] ? ocfs2_getattr+0x380/0x380 [ 1029.934228][T26988] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 1029.939243][T26988] ? security_inode_mkdir+0xb4/0x100 [ 1029.944517][T26988] vfs_mkdir+0x3b6/0x590 [ 1029.948754][T26988] do_mkdirat+0x225/0x360 [ 1029.953080][T26988] ? vfs_mkdir+0x590/0x590 [ 1029.957489][T26988] ? getname_flags+0x1f9/0x4f0 [ 1029.962327][T26988] ? lockdep_hardirqs_on+0x94/0x130 [ 1029.967518][T26988] __x64_sys_mkdir+0x6a/0x80 [ 1029.972124][T26988] do_syscall_64+0x3b/0xb0 [ 1029.976529][T26988] ? clear_bhb_loop+0x45/0xa0 [ 1029.981194][T26988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.987084][T26988] RIP: 0033:0x7f93f757e819 [ 1029.991490][T26988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.011103][T26988] RSP: 002b:00007f93f73ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1030.019511][T26988] RAX: ffffffffffffffda RBX: 00007f93f7735fa0 RCX: 00007f93f757e819 [ 1030.027472][T26988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1030.035431][T26988] RBP: 00007f93f75f175e R08: 0000000000000000 R09: 0000000000000000 [ 1030.043389][T26988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.051348][T26988] R13: 0000000000000000 R14: 00007f93f7735fa0 R15: 00007fff4c718918 [ 1030.059314][T26988] [ 1030.065637][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1030.097705][ T14] usb 6-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02 [ 1030.132911][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1030.146896][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.188524][ T14] usb 6-1: config 0 descriptor?? [ 1030.219189][ T4291] ocfs2: Unmounting device (7,4) on (node local) [ 1030.412339][ T14] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1030.639437][ T14] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1030.653630][ T14] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1030.664118][ T14] asix: probe of 6-1:0.0 failed with error -71 [ 1030.676962][ T14] usb 6-1: USB disconnect, device number 5