last executing test programs: 9.785278304s ago: executing program 3 (id=1222): socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8001, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000380), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x1c'}]}, 0x1c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$usbfs(&(0x7f0000002000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') lseek(r5, 0x0, 0x2) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) 6.729219822s ago: executing program 3 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x0) 6.718972733s ago: executing program 2 (id=1242): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) 6.625972841s ago: executing program 3 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x3eb}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) 6.552165187s ago: executing program 3 (id=1244): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@noquota}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x1, 0x60bd, &(0x7f0000006580)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000000) 6.26896822s ago: executing program 2 (id=1247): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x47524247}) 6.165648768s ago: executing program 2 (id=1249): syz_usb_connect(0x0, 0xb6, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007cf8a81079092702cd36010203010902a40001000000000904"], 0x0) syz_open_pts(0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xa8) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 5.209600316s ago: executing program 0 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x3eb}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) 5.080445777s ago: executing program 0 (id=1255): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000380)={[{@grpquota}, {@block_validity}, {@bsdgroups}, {@errors_remount}, {@abort}, {@stripe={'stripe', 0x3d, 0x3}}, {@dioread_lock}]}, 0x1, 0x7a2, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 4.960469187s ago: executing program 1 (id=1256): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) 4.842919826s ago: executing program 1 (id=1257): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000}) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000300)=0x80000001fe, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.676170169s ago: executing program 3 (id=1258): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001dc0)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) 3.897638193s ago: executing program 0 (id=1259): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0x1b, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) unshare(0x8040480) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x40}, {0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13bb1060811000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 3.797104371s ago: executing program 1 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x208400, &(0x7f0000000500)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c636f6465706167653d69736f383835392d392c747970653d8806e6d92c007c3da50838b213e45c60dfa80dde3ce87abe5e338e4e6a59adcbbcd8c1298ca6754466db1a8a1278dabca7f2fe40cf27dc1fb941304798bf42ba7569909de3630242504efec00c875fa448eb7bdaa7ba31d37ec3e7d64cd77624a0da2b05469cfb6ff12378569cc8b28d1168e0b17c24be8bc7e84cc44764d86c47497b7f98bc4582fe16504124539d5e1c09b9294efa2dd7"], 0x1, 0x2db, &(0x7f0000000600)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x806053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195}, 0x90) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) 3.635622544s ago: executing program 0 (id=1261): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb704, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16, @ANYRES64=r0], &(0x7f0000000200)=""/249, 0x27, 0xf9, 0x9}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}}, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 3.165990462s ago: executing program 2 (id=1262): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0ccb7907081175f37538e486dd"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 2.94950523s ago: executing program 4 (id=1263): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) io_setup(0x18eb, &(0x7f0000001bc0)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.674218642s ago: executing program 4 (id=1264): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441009090000159e0000000000", 0xd) 2.596996469s ago: executing program 4 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 2.499422846s ago: executing program 4 (id=1266): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x0, @loopback}}}, &(0x7f00000001c0)=0x90) 2.073500821s ago: executing program 1 (id=1267): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 1.938441592s ago: executing program 1 (id=1268): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@noquota}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x1, 0x60bd, &(0x7f0000006580)="$eJzs3U1vHVf9B/Df3Cc/9N826qLqP0LIbcNDKc1jCYECbSVgwYYF6hYlct0qIgWUBJRWEXHlDQteBAiJJUIsWfECumDLjhdApAQJ1AXqoLHPcca39+badXznOufzkZyZ35wZ3zP53vG91zPjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PzpXRcTlX6YFJyL+L/oRvYiVpl6LiJW1E3n9QUQ8F9vN8WxEDJcimu23/3k64tWI+OipiHv3b683i8/vsx/f+9Pff//jJ374tz8Oz/znzzf7r01b79at3/z7L3cOt88AAABQmrqu6yp9zD+ZPt/3uu4UADAX+fW/TvLyWfV3D7i+Wq1Wq9Xq7uu2erI77SIiNtvbNO8ZnI4HgGNmMz7uugt0SP5FG0TEE113AlhoVdcd4Ejcu397vUr5Vu3Xg7Wd9nwtyJ78N6vd+zumTWcZv8ZkXs+vrejHM1P6szKnPiySnH9vPP/LO+2jtN5R5z8v0/If7dz6VJycf388/zGPT/69ifmXKuc/OFD+ffkDAAAAAMACy7//P9Hx+d+lw+/Kvjzs/O/anPoAAAAAAAAAAI/aYcf/22X8PwAAAFhYzWf1xm+ferBs2t9ia5a/VUU8ObY+UJh0s8xq1/0AAAAAAAAAAAAAgJIMdq7hfauKGEbEk6urdV03X23j9UEddvvjrvT9h5J1/UMeAAB2fPTU2L38VcRyqxyurq7W9fLKar1aryzl97OjpeV6pfW5Nk+bZUujfbwhHozq5pstt7Zrm/V5eVb7+PdrHmtU9/fRsfnoIGgAaNl5NbrnFekxU9dPR9fvcjgeHP+PH8c/+9H18xQAAAA4enVd11X6c94n0/h+va47BQDMRX79Hz8voH709X8XrD9qtVqtLq9uqye70y4iYrO9TfOewXD8AHDMbMbHXXeBDsm/aIOIeK7rTgALreq6AxyJe/dvr1cp36r9epDGd8/XguzJf7Pa3i5vP2k6y/g1JvN6fm1FP56Z0p9n59SHRZLz743nf3mnfZTWO+r852Va/s1+nuigP13L+ffH8x/z+OTfm5h/qXL+gwPl35c/AAAAAAAssPz7/xMLdf539Fl3Z6aHnf9dO7JHBQAAAAAAAICjde/+7fV832s+//+5Ceu5//PxlPOv5F+knH9vLP8vj63Xb83fffNB/v+6f3v9Dzf/+f95ut/8l/JMlZ5ZVXpGVOmRqkGaHmbvPm1r2B81jzSsev1BuuanHr4TV+NabMTZPev20v/Hg/Zze9qbng632+v+Tvv5Pe2D3fa8/YU97cN0pVO9kttPx3r8LK7F29vtTdvSjP1fntFez2jP+fcd/0XK+Q9aX03+q6m9Gps27n7Y+9Rx355Oepw3rn7+12ePfndm2or+7r61Nfv3Qgf92f4/eWIUv7ixcf30rSs3b14/F2myZ+n5SJNHLOc/TF+7P/9f3GnPP/fbx+vdD0cHzn9RbMVgav4vtuab/X1pzn3rQs5/lL5y/m+n9snH/3HOf/rx/3IH/QEAAAAAAAAAAAAAAICHqet6+xbRNyLiYrr/p6t7MwGA+cqv/3WSl8+r7s/58dTqY15XC9afudaf1IvVH7X6ONZt9WSvt4uI+Gt7m+Y9w68mfTMAYJF9EhH/6LoTdEb+Bct/76+Znuq6M8Bc3Xj/g59cuXZt4/qNrnsCAAAAAAAAAHxWefzPtdb4z6fqur4ztt6e8V/fjLXDjv85yDO7A4xOGai6f/B9epit3qjfaw03/nxMG/97uDv3sPG/BzMebzijfTSjfWlG+/KM9ok3erTk/J9vjXd+KiJOjg2/XsL4r+Nj3pcg5/9C6/nc5P+lsfXa+de/O8759/bkf+bmez8/c+P9D165+t6Vdzfe3fjphXPnzl64ePHSpUtn3rl6bePszr8d9vho5fzz2NeuAy1Lzj9nLv+y5Py/kGr5lyXn/8VUy78sOf/8fk/+Zcn5588+8i9Lzv+lVMu/LDn/r6Ra/mXJ+b+cavmXJef/1VTLvyw5/1dSLf+y5PxPp1r+Zcn5n0n1PvNfOep+MR85/3yGy/Fflpx/vrJB/mXJ+Z9PtfzLkvO/kGr5lyXn/2qq5V+WnP/XUi3/suT8L6Za/mXJ+X891fIvS87/UqrlX5ac/zdSLf+y5Py/mWr5lyXn/1qq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/11Mt/7I8+Pv/ZsyYMZNnuv7JBAAAAAAAAAAAAACMm8flxF3vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfvbqtQOJgZA6qSFrxxjjbLLrS3yhdTHh2nArgVDoBdv1rs2Cb3jtEmgkGwVKVIyKKtqGh7aAUJuXCqvigVYB5QG1qlSJtA/0BVFV4iGqAgpIldoKstWc8///d2b27MyuPXFmzvl8pPjnnTkz58yZ/8zud53vLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNtrxp7nNDWZY1/sv/2JhlL2n8ff3kxvyy17/YRwgAAABcr1/kfz53S7rg8Cpu1LTNP736e99cXFxczD448qdjX1pcTFdMZtnYuizLr4uu/ueHhpq3CR7NJoaGmz4e7rL7kS7Xj3a5fqzL9eNdrl/X5fqJLtcvOwHLrC++H5Pf2bb8rxuLU5rdmo3l120rudWjQ+uGh+P3cnJD+W0Wx05k89mpbC6badm+2HYo3/7JLY19vT2L+xpu2tfmxgr56SPH4zEMhXO8rWVfS/cZ/fiN2eTPfvrI8b++8OztZbPraWi5v+I4d2xtHOdnwiXFsQ5l69I5icc53HScm0uek5GW4xzKb9f4e/txPrfK4xxZOswbqv05n8iG878/nZ+n0eZv66XztDlc9j93ZVl2eemw27dZtq9sONvQcsnw0vMzUazIxn00ltLLs9E1rdMtq1injTm7rXWdtr8m4vO/JdxudIVjaH6afvzp8abn/eeL17JOo8ajXum10r4Ge/1a6Zc1GNfF0/mDfqx0DW4Lj/+R7SuvwdK1U7IG0+NuWoNbu63B4fGR/JjTkzCU32ZpDe5q2X4k39NQPp/Z3nkNTl84fW564ZOfumf+9LGTcyfnzuzZtWtmz759Bw4cmD4xf2pupvjzGs92/9uQDafXwNZw7uJr4LVt2zYv1cWvji97/73W1+FEh9fhxrZte/06HG1/cEM35gW5fE0Xr433N076xJXhbIXXWP787Lz+12F63E2vw9Gm12Hp55SS1+HoKl6HjW3O7Vzd1yyjTf+VHcPKnwuubw1ubFqD7V+PtK/BXn890i9rcCKsix/sXPlzweZwvI9NrfXrkZFlazA93PDe07gkfb0/cSAfZevyjsYVN41nFxfmzt/78LELF87vysK4IV7RtFba1+uGpseULVuvw2ter4fnX/3YHSWXbwznauKexh8TKz5XjW323tv5uco/u5Wfz5ZLd2dh9NiNPp9ln80b53M8y7783U8/+O1HvvymFc9nI29+Zvr6vxZPubTp/XdshfffmPufL/aX7urRkbHR4vU7ks7OWMv7cetTNZq/dw3l+35uenXvx2Phvxv9fnxrh/fjTW3b9vr9eKz9wcX346Fu3+24Pu3P50RYJ6dmOr8fN7bZtHuta3K04/vxXWEOhfP/upAUUi5qWjsrrdu0r9HRsfC4RuMeWtfpnpbtx0I2a+zrid3Xtk533FXc10h6dEtu1DqdbNu21+s0fe9rpXU61O27b9em/fmcCOvi1j2d12ljm6f2Xv975/r416b3zvFua3BsZLxxzGNpEebv99ni+rgG782OZ2ezU9lsfu14vp6G8n1N3be6NTge/rvR75WbOqzBHW3b9noNps9jK629odHlD74H2p/PibAuHr+v8xpsbPPm/b392nVHuCRt0/S1a/v311b6ntcdbafphVoro+E4v7u/8/dmG9ucOrDWnNn5PN0dLrmp5Dy1v35Xek3NZjfmPG0Kx/nsgZXPU+N4Gtt86eAq19PhLMsuffz+/Pu94d9X/u7i97/Z8u8uZf+mc+nj9//kpSf+cS3HD8Dge74YG4rPdU3/MrWaf/8HAAAABkLM/cNhJvI/AAAAVEbM/fH/Ck/kfwAAAKiMmPtHw0xqkv83vfnZ+ecvZamZvxjE69NpeKDYLnZcZ8LHk4tLGpff//W5//6HS6vb93CWZT9/4A9Kt9/0QDyuwmQ4zqtvab18mW/es6p9H33oUtpvc3/9K+H+4+NZ7TIoq+DOZFn25C1fyPcz+aEr+XzqgaP5fPDyY482tnnuYPFxvP0zryi2/4tQ/j184ljL7Z8J5+FHYc68o/x8xNt948rrNu//wNL+4u2Gtt6cP+zHP1zcb/w5OV98tNg+nueVjv/bn3/iG43tH35N+fFfGi4//ifC/X49zP99VbF983PQ+Dje7rPh+OP+4u3u/dp3So//6ueK7c+9tdjuaJhx/zvCx9ve+ux88/l6eOhYy+PK3lZsF/c/8/0/zq+P9xfvv/34J45caTkf7evjqX8r7me6bft4edxP9Pdt+2/cT/P6jPt/4g+Ptpznbvu/+uAzr2rcb/v+727b7tzHd+b7X7q/1p/Y9Jef/ULp/uLxHP7bcy2P5/B7w+s47P/xD4f1GK7/v6vF/bX/dIWj7219/4nbf2XjpZbHE739Z8X+r77hZD7XTazfcNNLXnrz5Tsb5y7Lnl5X3F+3/Z/8q7Mtx//V24rzEa+PHf32/a8k7v/8J6bOnF24OD+bzuojt+Q/O+edxfHE470lvLe2f3zk7IWPzJ2fnJmcybLJ6v4IvWv2tTB/UozLa739zofC83nHnz+5Yfu/fj5e/u/vLy6/8o7i89Zrw3ZfDJdvDM/f9e7/8S235a/voaeKj1t67D2wedt/HVjVhuHxt39dENf7uVd+JD8PjevyzxvxdX2dx//D2eJ+vhXO62L4ycxbb1vaX/P28WcjXHlf8Xq/7vMX3ubi8/o34fl+14+K+4/HFR/vD8PXMd/Z1Pp+F9fHty4Nt99//lM8Lof3k+xycX3cKp7vK8/dVnp48eeQZJdvzz/+k3Q/t6/pYa5k4ZML06fmz1x8ePrC3MKF6YVPfurI6bMXz1w4kv8szyMf7Xb7pfenDfn70+zcvr1Z/m51thgvsBf7+M89dHx2/8z22bkTxy6euPDQubnzJ48vLByfm13YfuzEiblPdLv9/OyhXbsP7tm/e+rk/OyhAwcP7jk4NX/mbOMwioPqYt/Mx6bOnD+S32Th0N6Du+67b+/M1Omzs3OH9s/MTF3sdvv8c9NU49a/P3V+7tSxC/On56YW5j81d2jXwX37dnf9aYCnz51YmJw+f/HM9MWFufPTxWOZvJBf3Pjc1+32VNPCfxRfz7YbKn4QX/aeu/eln8/a8PVPr3hXxSZtP0D02fCzaP75ZecOrObjmPvHwkxqkv8BAACgDmLuHw8zkf8BAACgMmLuXxdmIv8DAABAZcTcPxFmUpP8X7n+/6ZLq9q//r/+f/P50v+vWf//ff3W/y/eL/T/e0P/vzP9/y70//X/9f/1/+mpfuv/x9y/Pstqmf8BAACgDmLu3xBmIv8DAABAZcTcf1OYifwPAAAAlRFz/0vCTGqS//X/9f/1//X/9f/L96//P5j0/zvT/+9C/386q1f//3Ivj1//X/+f5fqt/x9z/0vDTGqS/wEAAKAOYu6/OcxE/gcAAIDKiLn/ljAT+R8AAAAqI+b+jWEmNcn/+v/6//r/+v/6/+X71/8fTJXv/7e/QNZI/78L/X+//1//X/+fnuq3/n/M/S8LM6lJ/gcAAIA6iLn/5WEm8j8AAAD0n9Fru1nM/a8IM1mW/69xBwAAAMCLLub+W7O2InhN/v1f/1//X/9f/1//v3z/q+//j2T6//2j8v3/66T/34X+v/6//r/+Pz3Vb/3/PPdnE9krw0xqkv8BAACgDmLuvy3MRP4HAACAyoi5/5fCTOR/AAAAqIyY+zeFmdQk/+v/6//r/+v/6/+X79/v/x9M+v+d6f93of+v/9/9+P+o7Ou+TP9f/59S/db/j7n/9jCTmuR/AAAAqIOY++8IM5H/AQAAoDJi7v/lMBP5HwAAACoj5v7NYSY1yf/6//r/+v/6//r/5fvX/x9M+v+d6f93of+v/+/3/+v/01P91v+Puf9VYSY1yf8AAABQBzH3vzrMRP4HAACAyoi5/84wE/kfAAAAKiPm/skwk5rkf/1//X/9f/1//f/y/ev/Dyb9/870/7vQ/9f/1//X/6en+q3/H3P/ljCTmuR/AAAAqIOY+7eGmcj/AAAAUBkx998VZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/+/fP/6/4NJ/78z/f8u9P/1//X/9f/pqX7r/8fc/5owk5rkfwAAAKiDmPu3h5nI/wAAAFAZMfe/NsxE/gcAAIDKiLl/R5hJTfK//r/+v/6//r/+f/n+9f8Hk/5/Z/r/Xej/6//r/+v/01P91v+Puf91YSY1yf8AAABQBzH37wwzkf8BAACgMmLuvzvMRP4HAACAyoi5fyrMpCb5X/9f/1//X/9f/798//r/g0n/vzP9/y70//X/9f/1/+mpfuv/x9x/T5hJTfI/AAAA1EHM/feGmcj/AAAAUBkx90+Hmcj/AAAAUBkx98+EmdQk/+v/6//r/+v/r6n/f+fS/er/F/T/+4v+f2f6/13o/+v/v+j9/zH9fyql3/r/MffvCjOpSf4HAACAOoi5f3eYifwPAAAAlRFz/54wE/kfAAAAKiPm/r1hJjXJ//r/+v/6//r/fv9/+f71/weT/n9nve//x4eo/6//r//v9//r/7Ncv/X/Y+6/L8ykJvkfAAAA6iDm/n1hJvI/AAAAVEbM/fvDTOR/AAAAqIyY+w+EmdQk/1e5/7+4uLjilvr/+v/N50v/X/+/bP/6/4NJ/78zv/+/C/1//X/9f/1/eqrf+v8x9x8MM6lJ/gcAAIA6iLn/9WEm8j8AAABURsz9vxJmIv8DAABAZcTc/6thJjXJ/1Xu/3ei/6//33y+9P/1/8v2r/8/mPT/O9P/70L/X/9f/1//n57qt/5/zP2Hwkxqkv8BAACgDmLu/7UwE/kfAAAAKiPm/jeEmcj/AAAAUBkx9x8OM6lJ/tf/1//X/9f/1/8v37/+/2DS/+9M/78L/X/9f/1//X96qt/6/zH3vzHMpCb5HwAAAOog5v77w0zkfwAAAKiMmPvfFGYi/wMAAEBlxNz/5jCTmuR//X/9f/1//X/9//L96/8PJv3/zvT/u9D/1//X/9f/p6f6rf8fc/9bwkxqkv8BAACgDmLuf2uYifwPAAAAlRFz/9vCTOR/AAAAqIyY+98eZlKT/K//r/+v/6//r/9fvn/9/8Gk/9+Z/n8X+v/6//r/+v/0VL/1/2Pu//Uwk5rkfwAAAKiDmPsfCDOR/wEAAKAyYu5/R5iJ/A8AAACVEXP/O8NMapL/9f/1//X/9f/1/8v3r/8/mPT/Oxuw/v8vbg6X6/8X9P/7+/gHq/+/uK799vr/vBD6rf8fc/+7wkxqkv8BAACgDmLuf3eYifwPAAAAlRFz/3vCTOR/AAAAqIyY+38jzKQm+V//v3EcS+1l/X/9//wC/X/9f/3/gaX/39mA9f/9/v82+v/9ffyD1f9fTv+fF0K/9f9j7n9vmElN8j8AAADUQcz9D4aZyP8AAABQGTH3vy/MRP4HAACAyoi5//1hJjXJ//r/fv+//r/+v/5/+f71/weT/n9n+v9d6P/r/+v/6//TU/3W/4+5/6Ewk5rkfwAAAKiDmPs/EGYi/wMAAEBlxNz/m2Em8j8AAABURsz9HwwzqUn+1/8flP7/pP6//r/+f9vj0f/X/y+j/9+Z/n8X+v/6//r/+v/0VL/1/2Pu/1CYSU3yPwAAANRBzP2/FWYi/wMAAEBlxNz/22Em8j8AAABURsz9vxNmUpP8r/8/KP1/v/8/0//X/297PPr/+v9lblz/P77z6P/r/+v/R/r/+v/6/7Trt/5/zP2/G2ZSk/wPAAAAdRBz/4fDTOR/AAAAGAhl/092u5j7j4SZyP8AAABQGTH3Hw0zqUn+1//X/9f/79P+/59t/ZcffO/dR3fp/+v/6/+vyQ39/f+NF7/f/6//r/+fpPenO4s3Nv1//X/9f/qt/x9z/7Ewk5rkfwAAAKiDmPt/L8xE/gcAAIDKiLn/eJiJ/A8AAACVEXP/bJhJTfK//r/+v/5/n/b/B/j3/8fzof/fqmf9//imq/9f6ob2/z+w1BPX/19r/3+89FL9/4r0//3+f/1//X+Cfuv/x9w/F2ZSk/wPAAAAdRBy//CJYi5dIf8DAABAZcTcfzLMRP4HAACAyoi5/yNhJjXJ//r/+v/6//r/fv9/+f77tv/v9/93pP/fWf/0/8vp/+v/D/Lx6//r/7Ncv/X/Y+6fDzOpSf4HAACAOoi5/6NhJvI/AAAAVEbM/R8LM5H/AQAAoDJi7j8VZlKT/K//r/+v/6//r/9fvn/9/8HU9/3/ic771//X/9f/H9zj1//X/2e5fuv/x9x/OsykJvkfAAAA6iDm/jNhJvI/AAAAVEbM/WfDTOR/AAAAqIyY+8+FmdQk/+v/6/9Xtv//Bv3/lfav/6//X2V93//v4v/Zu69mveoqjuMnGJQML8ALb7z3JXDjtb4AL7zxQmccL3QUeyPYK/aCDXvHAorYsKOCDcUu9t7Fjs7EcbLWysnJPvtJwj7Jfv7r87lZeuJxP87EwI/kO1v/r//X/2/v59f/6/851dr6/9z9D49bmux/AAAA6CB3/yPiFvsfAAAAhpG7/9K4xf4HAACAYeTuf2Tc0mT/7+n/D+307P8z49X/j9T/e///vs/X/+v/R3Zu+//L//8rn/5f/6//D/p//b/+n73W1v/n7n9U3NJk/wMAAEAHufsfHbfY/wAAADCM3P2PiVvsfwAAABhG7v7Hxi1N9r/3/3v/v/5/qv8/ov/X/+v/t5T3/8/r1P9feuvFD739untcfybP1//r//X/+n+Wtbb+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuf0LcYv8DAADAMHL3PzFuabL/9f/6/6X7/6ND9P/e/6//1/9vK/3/vE79/9k8X/+v/9f/6/9Z1tr6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAhpG7/7K4xf4HAACAYeTuPxq3NNn/+n/9v/f/6//1/9PP1/9vJ/3/PP3/Bvp//b/+X//PotbW/+fuvzxuabL/AQAAoIPc/U+JW+x/AAAAGEbu/qfGLfY/AAAADCN3/9Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/Bvr/O9vPX6j/1//r/9ntDPv/O2Z+2V6k/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2//l//r//X/08/X/+/nfT/81bT/x86PPll/f/W9//e/6//1/9zkrW9/z93/7Pjlib7HwAAADrI3f+cuMX+BwAAgGHk7n9u3GL/AwAAwDBy9z8vbmmy//X/+n/9v/5f/z/9/Ln+//pdn0//vy76/3mr6f/3of/X/2/z59f/6/851dr6/9z9z49bmux/AAAA6CB3/xVxi/0PAAAAw8jd/4K4xf4HAACAYeTuf2Hc0mT/T/f/J35c/3969P8nf379//TPj6X6//xv1P/P9v/39v7/nvT/8/T/G+j/9f/6//36/yObvl//z5S19f+5+18UtzTZ/wAAANBB7v4Xxy32PwAAAAwjd/9L4hb7HwAAAIaRu/+lcUuT/e/9//p//f/29f/e/3/c+Xz//8457/8P6/9Pk/5/nv5/A/2//l//7/3/LGpt/X/u/pfFLU32PwAAAHSQu//lcYv9DwAAANth958d2PsHSkPu/lfELfY/AAAADCN3/yvjlrH2/wX7/YD+X/+v/9f/r6n/PzLxj2v1/97/fyb0//P0/xvo/w+inz88WP9/1X7fv4b+/zL9PytzUv9/w4mvn6/+P3f/lXHLWPsfAAAAWsvd/6q4xf4HAACAYeTuf3XcYv8DAADAMHL3vyZuabL/D7z/P7L/s/X/+n/9v/7f+//1/0vT/8/T/2+g//f+f+//1/+zqJP6/13OV/+fu/+1cUuT/Q8AAAAd5O5/Xdxi/wMAAMAwcvdfFbfY/wAAADCM3P2vj1ua7H/v/9f/6//1//r/6efr/7eT/n+e/n8D/f/p9vNXTn2//l//r/9nr7X1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAADCN3/5viFvsfAAAAhpG7/81xS5P9r/8/2P4/v67/1//v6P/1//r/c6Jt/39o6q9Ep9qn/7/5wUfve/JX9P/6f+//1//r/1nAKvr/Yyf+7jJ3/1vilib7HwAAADrI3f/WuMX+BwAAgGHk7n9b3GL/AwAAwDBy9789bmmy//X/3v+v/9f/6/+nn6//305t+//T5P3/G+j/9f/6f/0/i1pF/7/r3+fuf0fc0mT/AwAAQAe5+98Zt9j/AAAAMIzc/e+KW+x/AAAAGEbu/nfHLU32v/5f/6//1//r/6efr//fTvr/efr/DfT/+n/9v/6fRR1A/39o919cz7T/z91/ddzSZP8DAABAB7n73xO32P8AAAAwjNz9741b7H8AAAAYRu7+98UtTfa//l//r//X/+v/p5+v/99O+v95+v+dnZ1rZj7AVP9/7G76/0X7+b2/yi9H/6//Z33W9v7/3P3vj1ua7H8AAADoIHf/NXGL/Q8AAADDyN1/bdxi/wMAAMAwcvd/IG5psv/1//p//b/+X/8//Xz9/3bS/8/T/2/g/f/e/6//1/+zqLX1/7n7Pxi3NNn/AAAA0EHu/uviFvsfAAAAhpG7/0Nxi/0PAAAAw8jdf33c0mT/6//1//p//b/+f/r5+v/tdHD9/47+X/+v/99A/6//1/+z19r6/9z9H45bmux/AAAA6CB3/0fiFvsfAAAAhpG7/6Nxi/0PAAAAw8jd/7G4pcn+1//r//X/+n/9//Tz9f/byfv/5+n/N9D/6//1//p/FrW2/j93/8fjlib7HwAAADrI3X9D3GL/AwAAwDBy938ibrH/AQAAYBi5+z8ZtzTZ//p//b/+X/+v/59+/jno/y/a0f8vTv8/T/+/gf5/zP7/gp2B+v8j+36//p81Wlv/n7v/U3FLk/0PAAAAHeTu/3TcYv8DAADAMHL3fyZusf8BAABgGLn7Pxu3NNn/+n/9v/5f/6//n36+9/9vJ/3/PP3/Bvr/Mft/7//X/3PerK3/z93/ubilyf4HAACADnL33xi32P8AAAAwjNz9n49b7H8AAAAYRu7+L8QtTfa//l//r//X/+v/p5+v/99O+v95+v8N9P/6f/2//p9Fra3/z93/xbilyf4HAACADnL33xS32P8AAAAwjNz9N8ct9j8AAAAMI3f/l+KWJvtf/6//P4j+f+/n0P8ft2T/f5H+X/+v/5+0lv7/kkvuc4v+X/+v/9f/6//1/92trf/P3f/luKXJ/gcAAIAOcvd/JW6x/wEAAGAYufu/Gjfd9bx9IgAAAGBpufu/Frc0+f3/U/v/C3eOF6rHTfX/0ajp/3fR/5/8+b3/f/rnh/f/6//1/wdvLf2/9/+f3efX/+v/t/nzn1H/f89Tv1//z4jW1v/n7r8lbmmy/wEAAKCD3P1fj1vsfwAAABhG7v5vxC32PwAAAAwjd/+tcUuT/e/9//p//b/+X/8//Xz9/3bS/8/T/2+g/9f/e///wx54F/0/y1lb/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDBy9387brH/AQAAYBi5+78TtzTZ//p//b/+X/+v/59+vv5/O+n/5+n/N9D/6/9P//PfuPcLw/T/3v/PgtbW/+fu/27c0mT/AwAAQAe5+78Xt9j/AAAAMIzc/d+PW+x/AAAAGEbu/h/ELU32v/5f/z9+//8A/f+e5+v/9f8jO+v+Pv6PPEL/f+HMj+n/N9D/6/+9/1//z6LW1v/n7r8tbmmy/wEAAKCD3P0/jFvsfwAAABhG7v4fxS32PwAAAAwjd/+P45Ym+1//36v/P7TTsf/3/n/9v/6/E+//n6f/30D/r//X/+v/WdTa+v/c/T+JW5rsfwAAANhW97vXQ2473f9s7v6fxi32PwAAAAwjd//P4hb7HwAAAIaRu//ncUuT/a//79X/93z/v/5f/6//70T/P0//v4H+X/+v/9f/s6i19f+5+38Rt+wafofP+H8lAAAAsCa5+38ZtzT5/X8AAADoIHf/r+KWU/b/sdP8U+0AAADA2uTu/3Xc0uT3//X/K+//d/T/+n/9v/5f/38m9P/z7mT/f+yQ/l//P0P/r//X/7PX2vr/3P2/iVua7H8AAAAY1En/RCF3/2/jFvsfAAAAhpG7/3dxi/0PAAAAw8jd//u4pcn+1/+vvP8/q/f/H6l/pf9v3v9fcdHk8/X/+v+R6f/nef//Bvp//b/+X//PotbW/+fu/0Pc0mT/AwAAQAe5+/8Yt9j/AAAAMIzc/X+KW+x/AAAAGEbu/j/HLU32v/5/xP7f+//1//PPH6f/v/vFR2+6/4OuvVr/zwnnsv/Pnwv6f/2//v84/b/+X//PXmvr/3P3/yVuabL/AQAAoIPc/bfHLfY/AAAADCN3/1/jFvsfAAAAhpG7/29xS5P9r//X/+v/t7H/z6a4e//v/f/6/1N5//88/f8G+n/9v/5f/8+i1tb/5+7/e9zSZP8DAABAB7n7/xG32P8AAAAwjNz9/4xb7H8AAAAYRu7+f8UtTfa//l//r//fxv7f+/939P/6/33o/+fp/zfQ/+v/9f/6fxa1tv4/d/+/45Ym+x8AAAA6yN1/R9xi/wMAAMAwcvf/J26x/wEAAGAYufv/G7c02f/6f/2//l//r/+ffr7+fzvp/+fp/zfQ/+v/9f/6fxa1tv4/d///AgAA///KX3eq") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1.672666304s ago: executing program 0 (id=1269): setresuid(0xee01, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10) geteuid() prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ftruncate(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) keyctl$set_reqkey_keyring(0x1d, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x7, &(0x7f0000000300)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) 1.546936044s ago: executing program 0 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000100)={[{@pqnoenforce}, {@sysvgroups}, {@swalloc}, {@bsdgroups}, {@lazytime}]}, 0x11, 0x9730, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==") capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) 1.545971734s ago: executing program 4 (id=1271): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x0) 753.950459ms ago: executing program 3 (id=1272): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) 239.218751ms ago: executing program 4 (id=1274): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400), 0xfe, 0x43a, &(0x7f00000008c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r1, 0x7fff) io_setup(0x7f, &(0x7f0000000100)=0x0) r3 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="7f", 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3, 0x0, r3, 0x0, 0x0, 0x3f}]) 208.223483ms ago: executing program 2 (id=1275): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441009090000159e0000000000", 0xd) 88.199063ms ago: executing program 2 (id=1276): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 0s ago: executing program 1 (id=1277): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) kernel console output (not intermixed with test programs): 07][ T6317] XFS: ikeep mount option is deprecated. [ 198.282720][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.301469][ T6311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.338145][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.361108][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.405590][ T6317] XFS (loop1): Mounting V5 Filesystem [ 198.422736][ T6311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 198.566110][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.631890][ T5820] attempt to access beyond end of device [ 198.631890][ T5820] loop3: rw=2049, want=45104, limit=40427 [ 198.664324][ T6317] XFS (loop1): Ending clean mount [ 198.686020][ T6317] XFS (loop1): Quotacheck needed: Please wait. [ 198.764032][ T6334] loop0: detected capacity change from 0 to 64 [ 198.834405][ T6317] XFS (loop1): Quotacheck: Done. [ 199.115984][ T5878] XFS (loop1): Unmounting Filesystem [ 199.424013][ T13] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 199.453381][ T4232] usb 3-1: USB disconnect, device number 8 [ 199.756227][ T6164] hfs: walked past end of dir [ 199.834970][ T6164] hfs: walked past end of dir [ 199.980870][ T6357] loop3: detected capacity change from 0 to 512 [ 200.115842][ T6357] EXT4-fs (loop3): Ignoring removed nobh option [ 200.160843][ T6357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.260289][ T6357] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.289402][ T6357] EXT4-fs (loop3): 1 truncate cleaned up [ 200.299333][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,journal_ioprio=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobh,nombcache,noload,,errors=continue. Quota mode: none. [ 200.300209][ T6362] loop1: detected capacity change from 0 to 256 [ 200.424375][ T6362] Invalid ELF header len 1 [ 201.203187][ T6350] loop2: detected capacity change from 0 to 32768 [ 201.354789][ T6380] netlink: 'syz.1.756': attribute type 9 has an invalid length. [ 201.362770][ T6380] netlink: 'syz.1.756': attribute type 7 has an invalid length. [ 201.411628][ T6380] netlink: 'syz.1.756': attribute type 8 has an invalid length. [ 201.482354][ T6358] loop4: detected capacity change from 0 to 40427 [ 201.552052][ T6350] XFS (loop2): Mounting V5 Filesystem [ 201.580393][ T6358] F2FS-fs (loop4): invalid crc value [ 201.636187][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 201.655814][ T6396] loop1: detected capacity change from 0 to 256 [ 201.727542][ T6358] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.762982][ T6350] XFS (loop2): Ending clean mount [ 201.863428][ T6396] FAT-fs (loop1): Directory bread(block 64) failed [ 201.905084][ T6396] FAT-fs (loop1): Directory bread(block 65) failed [ 201.917754][ T6396] FAT-fs (loop1): Directory bread(block 66) failed [ 201.925702][ T6396] FAT-fs (loop1): Directory bread(block 67) failed [ 201.932462][ T6396] FAT-fs (loop1): Directory bread(block 68) failed [ 201.939602][ T6396] FAT-fs (loop1): Directory bread(block 69) failed [ 201.950592][ T6396] FAT-fs (loop1): Directory bread(block 70) failed [ 201.959201][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.959642][ T6396] FAT-fs (loop1): Directory bread(block 71) failed [ 202.002068][ T6358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 202.012189][ T6146] XFS (loop2): Unmounting Filesystem [ 202.030493][ T6396] FAT-fs (loop1): Directory bread(block 72) failed [ 202.038662][ T6396] FAT-fs (loop1): Directory bread(block 73) failed [ 202.170194][ T3511] attempt to access beyond end of device [ 202.170194][ T3511] loop4: rw=2049, want=45104, limit=40427 [ 202.170312][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.220082][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 202.221575][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.258098][ T6373] device bridge_slave_0 entered promiscuous mode [ 202.293686][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.316525][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.341236][ T6373] device bridge_slave_1 entered promiscuous mode [ 202.517060][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.536705][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.762383][ T6373] team0: Port device team_slave_0 added [ 202.836811][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.878952][ T6373] team0: Port device team_slave_1 added [ 203.007606][ T6426] netlink: 'syz.3.770': attribute type 9 has an invalid length. [ 203.028765][ T6426] netlink: 'syz.3.770': attribute type 7 has an invalid length. [ 203.041111][ T6426] netlink: 'syz.3.770': attribute type 8 has an invalid length. [ 203.066353][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.103592][ T3548] Bluetooth: hci1: command 0x0409 tx timeout [ 203.123776][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.132212][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.165982][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.178158][ T6432] loop4: detected capacity change from 0 to 256 [ 203.180148][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.208679][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.245698][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.292476][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.373439][ T6432] attempt to access beyond end of device [ 203.373439][ T6432] loop4: rw=2049, want=268, limit=256 [ 203.405385][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.454552][ T6373] device hsr_slave_0 entered promiscuous mode [ 203.476221][ T6373] device hsr_slave_1 entered promiscuous mode [ 203.493036][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.518070][ T6373] Cannot create hsr debugfs directory [ 203.787924][ T6442] loop4: detected capacity change from 0 to 128 [ 203.880245][ T6442] befs: (loop4): invalid magic header [ 204.022507][ T6452] loop1: detected capacity change from 0 to 128 [ 204.204925][ T6452] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 204.216416][ T6459] loop4: detected capacity change from 0 to 512 [ 204.268086][ T6459] EXT4-fs (loop4): Ignoring removed nobh option [ 204.309602][ T6459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.418074][ T6452] sysv_free_block: trying to free block not in datazone [ 204.423118][ T6459] EXT4-fs (loop4): 1 truncate cleaned up [ 204.432985][ T6459] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,journal_ioprio=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobh,nombcache,noload,,errors=continue. Quota mode: none. [ 204.433320][ T6434] loop3: detected capacity change from 0 to 32768 [ 204.527594][ T5878] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 204.773249][ T6434] XFS (loop3): Mounting V5 Filesystem [ 204.905432][ T6434] XFS (loop3): Ending clean mount [ 205.036481][ T5820] XFS (loop3): Unmounting Filesystem [ 205.138550][ T6486] input: syz0 as /devices/virtual/input/input14 [ 205.164701][ T6474] loop1: detected capacity change from 0 to 32768 [ 205.183485][ T3548] Bluetooth: hci1: command 0x041b tx timeout [ 205.260824][ T6373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.324417][ T6373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.379697][ T6474] XFS (loop1): Mounting V5 Filesystem [ 205.440923][ T6373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.466592][ T6474] XFS (loop1): Ending clean mount [ 205.521600][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 205.521658][ T26] audit: type=1800 audit(1720040996.571:160): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.785" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 205.693256][ T5878] XFS (loop1): Unmounting Filesystem [ 205.736877][ T6373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.775371][ T6458] loop2: detected capacity change from 0 to 32768 [ 205.877541][ T6505] xt_l2tp: invalid flags combination: 0 [ 205.888048][ T6458] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.784 (6458) [ 206.027154][ T6458] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.060545][ T6458] BTRFS info (device loop2): using free space tree [ 206.095016][ T6458] BTRFS info (device loop2): has skinny extents [ 206.163589][ T9] device hsr_slave_0 left promiscuous mode [ 206.171674][ T9] device hsr_slave_1 left promiscuous mode [ 206.179147][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.188338][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.209447][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.242433][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.255447][ T9] device bridge_slave_1 left promiscuous mode [ 206.261869][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.267616][ T6517] loop3: detected capacity change from 0 to 128 [ 206.282759][ T9] device bridge_slave_0 left promiscuous mode [ 206.305237][ T6521] loop4: detected capacity change from 0 to 128 [ 206.353687][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.377688][ T6517] befs: (loop3): invalid magic header [ 206.394071][ T6458] BTRFS info (device loop2): enabling ssd optimizations [ 206.423123][ T6521] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 206.442753][ T6521] sysv_free_block: trying to free block not in datazone [ 206.505471][ T9] device veth1_macvtap left promiscuous mode [ 206.511731][ T9] device veth0_macvtap left promiscuous mode [ 206.542984][ T9] device veth1_vlan left promiscuous mode [ 206.548844][ T9] device veth0_vlan left promiscuous mode [ 206.583081][ T6539] loop3: detected capacity change from 0 to 512 [ 206.596576][ T3511] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 206.631032][ T6539] EXT4-fs (loop3): Ignoring removed nobh option [ 206.641385][ T6539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.763867][ T6539] EXT4-fs (loop3): 1 truncate cleaned up [ 206.770109][ T6539] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,journal_ioprio=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobh,nombcache,noload,,errors=continue. Quota mode: none. [ 207.051382][ T6555] loop4: detected capacity change from 0 to 256 [ 207.115549][ T6555] FAT-fs (loop4): Directory bread(block 1285) failed [ 207.263057][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 207.841085][ T9] team0 (unregistering): Port device team_slave_1 removed [ 207.871972][ T9] team0 (unregistering): Port device team_slave_0 removed [ 207.898176][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.938168][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.012967][ T4228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.111295][ T9] bond0 (unregistering): Released all slaves [ 208.133708][ T6558] loop4: detected capacity change from 0 to 32768 [ 208.237165][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.252129][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.268533][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.281138][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.301287][ T6558] XFS (loop4): Mounting V5 Filesystem [ 208.306877][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 208.328992][ T6566] loop2: detected capacity change from 0 to 32768 [ 208.339237][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.353902][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.397112][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.404400][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.418855][ T6558] XFS (loop4): Ending clean mount [ 208.461417][ T6579] loop1: detected capacity change from 0 to 2048 [ 208.467364][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.469664][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.497101][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.500644][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.511852][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.516716][ T4228] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.532554][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.539822][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.540359][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.557400][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.610814][ T4228] usb 4-1: config 0 descriptor?? [ 208.635501][ T6585] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.648749][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.664077][ T4228] hub 4-1:0.0: USB hub found [ 208.675552][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.699824][ T26] audit: type=1800 audit(1720040999.751:161): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.800" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 208.715676][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.737579][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.747154][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.762428][ T6373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.780139][ T6566] XFS (loop2): Mounting V5 Filesystem [ 208.788111][ T3511] XFS (loop4): Unmounting Filesystem [ 208.790248][ T6373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.822514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.883174][ T4228] hub 4-1:0.0: 1 port detected [ 208.894133][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.902756][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.940465][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.961106][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.979402][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 208.991221][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 209.005321][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.009757][ T6566] XFS (loop2): Ending clean mount [ 209.092022][ T6598] loop1: detected capacity change from 0 to 256 [ 209.160953][ T6146] XFS (loop2): Unmounting Filesystem [ 209.199576][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.208270][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.241547][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.323968][ T6598] FAT-fs (loop1): Directory bread(block 64) failed [ 209.342417][ T6598] FAT-fs (loop1): Directory bread(block 65) failed [ 209.343383][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 209.383188][ T6598] FAT-fs (loop1): Directory bread(block 66) failed [ 209.410407][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.413045][ T6598] FAT-fs (loop1): Directory bread(block 67) failed [ 209.431720][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.465723][ T6598] FAT-fs (loop1): Directory bread(block 68) failed [ 209.468572][ T6373] device veth0_vlan entered promiscuous mode [ 209.483666][ T6598] FAT-fs (loop1): Directory bread(block 69) failed [ 209.500630][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.525871][ T6598] FAT-fs (loop1): Directory bread(block 70) failed [ 209.526130][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.532440][ T6598] FAT-fs (loop1): Directory bread(block 71) failed [ 209.532538][ T6598] FAT-fs (loop1): Directory bread(block 72) failed [ 209.570163][ T6598] FAT-fs (loop1): Directory bread(block 73) failed [ 209.581391][ T6373] device veth1_vlan entered promiscuous mode [ 209.600600][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.609404][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.625200][ T6601] loop4: detected capacity change from 0 to 128 [ 209.632409][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.697557][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 209.703425][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.721557][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.750312][ T6601] befs: (loop4): invalid magic header [ 209.791669][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.844051][ T6373] device veth0_macvtap entered promiscuous mode [ 209.899052][ T6373] device veth1_macvtap entered promiscuous mode [ 209.915985][ T6604] loop4: detected capacity change from 0 to 1024 [ 209.965078][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.995251][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.012892][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.034731][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.073371][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.092872][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.122883][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.142875][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.164255][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.172299][ T6606] netlink: 'syz.2.808': attribute type 9 has an invalid length. [ 210.193777][ T6606] netlink: 'syz.2.808': attribute type 7 has an invalid length. [ 210.201545][ T6606] netlink: 'syz.2.808': attribute type 8 has an invalid length. [ 210.210859][ T154] hfsplus: b-tree write err: -5, ino 4 [ 210.241599][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.264745][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.314511][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.333594][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.360789][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.402257][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.438837][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.470719][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.491374][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.512601][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.534074][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.565365][ T3656] usb 4-1: USB disconnect, device number 7 [ 210.571185][ T6615] loop2: detected capacity change from 0 to 2048 [ 210.581620][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.592397][ T3660] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 210.634138][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.643726][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.654143][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.700086][ T6373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.703654][ T6618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.750040][ T6373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.770370][ T6373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.811213][ T6373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.057441][ T6625] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 211.103706][ T6623] device bond0 entered promiscuous mode [ 211.123224][ T6623] device bond_slave_0 entered promiscuous mode [ 211.170534][ T6623] device bond_slave_1 entered promiscuous mode [ 211.213716][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 211.246385][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.263220][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.326926][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.343192][ T3695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.366697][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.371797][ T6612] loop4: detected capacity change from 0 to 32768 [ 211.394347][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.468156][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.488959][ T6612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.811 (6612) [ 211.567541][ T6612] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 211.603005][ T3695] usb 4-1: Using ep0 maxpacket: 16 [ 211.608351][ T6612] BTRFS info (device loop4): using free space tree [ 211.619230][ T6634] loop0: detected capacity change from 0 to 16 [ 211.630328][ T6632] loop2: detected capacity change from 0 to 1024 [ 211.635951][ T6612] BTRFS info (device loop4): has skinny extents [ 211.722415][ T6634] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.983910][ T3695] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 212.089141][ T3695] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 212.369732][ T3695] usb 4-1: Product: syz [ 212.390003][ T3695] usb 4-1: Manufacturer: syz [ 212.429529][ T3695] usb 4-1: SerialNumber: syz [ 212.435333][ T6634] attempt to access beyond end of device [ 212.435333][ T6634] loop0: rw=0, want=24, limit=16 [ 212.446526][ T6612] BTRFS info (device loop4): enabling ssd optimizations [ 212.483805][ T3695] usb 4-1: config 0 descriptor?? [ 212.527489][ T6634] attempt to access beyond end of device [ 212.527489][ T6634] loop0: rw=0, want=312, limit=16 [ 212.538239][ T6634] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 212.563125][ T3803] hfsplus: b-tree write err: -5, ino 4 [ 212.639428][ T6628] loop1: detected capacity change from 0 to 32768 [ 212.777960][ T6628] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.818 (6628) [ 213.211091][ T3837] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (3837) [ 214.180194][ T6669] loop2: detected capacity change from 0 to 2048 [ 214.346238][ T6673] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.574143][ T6679] device batadv_slave_1 entered promiscuous mode [ 214.624148][ T6678] loop2: detected capacity change from 0 to 1024 [ 214.656499][ T6676] device batadv_slave_1 left promiscuous mode [ 214.669107][ T13] usb 4-1: USB disconnect, device number 8 [ 214.748332][ T6678] hfsplus: bad catalog entry type [ 214.821267][ T6684] loop1: detected capacity change from 0 to 512 [ 214.844513][ T3726] hfsplus: b-tree write err: -5, ino 4 [ 214.970813][ T6684] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.831: inode #1: comm syz.1.831: iget: illegal inode # [ 215.004567][ T6688] loop3: detected capacity change from 0 to 8192 [ 215.100534][ T6688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.104116][ T6684] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.831: error while reading EA inode 1 err=-117 [ 215.225456][ T6684] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.831: inode #1: comm syz.1.831: iget: illegal inode # [ 215.362937][ T6684] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.831: error while reading EA inode 1 err=-117 [ 215.393874][ T6684] EXT4-fs (loop1): 1 orphan inode deleted [ 215.399673][ T6684] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 215.697120][ T26] audit: type=1800 audit(1720041006.751:162): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.831" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 215.776999][ T6708] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 215.833883][ T6708] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.831: mark_inode_dirty error [ 215.909219][ T6708] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 215.928715][ T6687] loop0: detected capacity change from 0 to 32768 [ 215.957895][ T6708] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.831: mark_inode_dirty error [ 215.992067][ T6708] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.831: Invalid block bitmap block 0 in block_group 0 [ 216.076038][ T6708] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 216.142353][ T6708] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.831: mark_inode_dirty error [ 216.166545][ T6687] XFS (loop0): Mounting V5 Filesystem [ 216.214556][ T6708] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #13: block 26: comm syz.1.831: lblock 1 mapped to illegal pblock 26 (length 1) [ 216.305617][ T6708] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.831: invalid indirect mapped block 234881024 (level 0) [ 216.386542][ T6687] XFS (loop0): Ending clean mount [ 216.399916][ T6731] device batadv_slave_1 entered promiscuous mode [ 216.420013][ T6730] device batadv_slave_1 left promiscuous mode [ 216.438538][ T6708] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 216.489104][ T6733] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 216.520585][ T6373] XFS (loop0): Unmounting Filesystem [ 216.574048][ T3551] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.587010][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.593208][ T5878] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 216.623745][ T6737] IPv6: addrconf: prefix option has invalid lifetime [ 216.772480][ T6740] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 216.843647][ T3551] usb 3-1: Using ep0 maxpacket: 16 [ 216.938028][ T6743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.059038][ T6748] loop4: detected capacity change from 0 to 22 [ 217.079081][ T6748] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 217.139878][ T6748] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 217.214040][ T3551] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 217.248290][ T3551] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 217.252471][ T3581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.290513][ T3551] usb 3-1: Product: syz [ 217.304456][ T6756] device batadv_slave_1 entered promiscuous mode [ 217.308509][ T3551] usb 3-1: Manufacturer: syz [ 217.322515][ T6755] device batadv_slave_1 left promiscuous mode [ 217.329314][ T3551] usb 3-1: SerialNumber: syz [ 217.364381][ T3551] usb 3-1: config 0 descriptor?? [ 217.391387][ T6759] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 217.481555][ T3581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.025132][ T3581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.404194][ T3581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.495144][ T6776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.504149][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 219.892654][ T6803] device batadv_slave_1 entered promiscuous mode [ 219.920071][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.932155][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.975437][ T6765] device bridge_slave_0 entered promiscuous mode [ 220.031838][ T6802] device batadv_slave_1 left promiscuous mode [ 220.045714][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.069736][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.097106][ T6765] device bridge_slave_1 entered promiscuous mode [ 220.233736][ T6674] Bluetooth: hci2: command 0x0409 tx timeout [ 220.311266][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.380555][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.578997][ T3655] usb 3-1: USB disconnect, device number 9 [ 220.968075][ T6832] loop4: detected capacity change from 0 to 64 [ 221.018859][ T6834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.073547][ T6765] team0: Port device team_slave_0 added [ 221.082342][ T6765] team0: Port device team_slave_1 added [ 222.073540][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.094292][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.139685][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.180663][ T6854] device batadv_slave_1 entered promiscuous mode [ 222.212448][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.227242][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.258640][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.285221][ T6853] device batadv_slave_1 left promiscuous mode [ 222.427959][ T6765] device hsr_slave_0 entered promiscuous mode [ 222.450361][ T6674] Bluetooth: hci2: command 0x041b tx timeout [ 222.460802][ T6765] device hsr_slave_1 entered promiscuous mode [ 222.478535][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.491285][ T6765] Cannot create hsr debugfs directory [ 222.496199][ T6855] loop0: detected capacity change from 0 to 4096 [ 222.789068][ T6855] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 222.944676][ T6855] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 223.029304][ T6855] ntfs3: loop0: Failed to load $Extend. [ 223.210576][ T6878] loop4: detected capacity change from 0 to 1024 [ 223.363759][ T6878] hfsplus: unable to parse mount options [ 223.429958][ T6878] netlink: 'syz.4.887': attribute type 4 has an invalid length. [ 223.596619][ T3581] device hsr_slave_0 left promiscuous mode [ 223.665701][ T3581] device hsr_slave_1 left promiscuous mode [ 223.685366][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.704460][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.735433][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.757842][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.780897][ T3581] device bridge_slave_1 left promiscuous mode [ 223.790029][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.807494][ T3581] device bridge_slave_0 left promiscuous mode [ 223.818918][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.847014][ T3581] device veth1_macvtap left promiscuous mode [ 223.858033][ T3581] device veth0_macvtap left promiscuous mode [ 223.867145][ T3581] device veth1_vlan left promiscuous mode [ 223.878572][ T3581] device veth0_vlan left promiscuous mode [ 223.948302][ T6900] loop3: detected capacity change from 0 to 64 [ 224.286413][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 224.302474][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 224.319026][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.335084][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.416427][ T3581] bond0 (unregistering): Released all slaves [ 224.463140][ T6674] Bluetooth: hci2: command 0x040f tx timeout [ 224.490376][ T6878] netlink: 'syz.4.887': attribute type 17 has an invalid length. [ 224.513668][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.910625][ T6914] loop2: detected capacity change from 0 to 1024 [ 225.826917][ T6933] loop4: detected capacity change from 0 to 64 [ 226.184934][ T26] audit: type=1804 audit(1720041017.231:163): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.902" name="/newroot/33/bus/file0" dev="overlay" ino=200 res=1 errno=0 [ 226.341889][ T6765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.348086][ T26] audit: type=1800 audit(1720041017.391:164): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.905" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 226.398882][ T6765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.461079][ T6765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.469946][ T26] audit: type=1800 audit(1720041017.501:165): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.905" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 226.490634][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.519289][ T6765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.561141][ T6674] Bluetooth: hci2: command 0x0419 tx timeout [ 226.955094][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.022341][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.034954][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.063652][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.669034][ T6971] loop4: detected capacity change from 0 to 2048 [ 227.820767][ T6765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.936362][ T6765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.954010][ T6971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.040254][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.063657][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.072466][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.079867][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.117260][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.144447][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.163666][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.171252][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.180355][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.190603][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.200423][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.212008][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.221658][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.244972][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.254498][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.263417][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.275235][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.285889][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.312030][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.342079][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.365095][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.369459][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.413461][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.470854][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.359962][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.373974][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.498769][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.517477][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.559643][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.577192][ T7009] loop3: detected capacity change from 0 to 512 [ 230.603076][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.649434][ T6765] device veth0_vlan entered promiscuous mode [ 230.687957][ T6765] device veth1_vlan entered promiscuous mode [ 230.698096][ T7009] EXT4-fs (loop3): Ignoring removed oldalloc option [ 230.830598][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.850800][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.889219][ T6765] device veth0_macvtap entered promiscuous mode [ 230.918080][ T6765] device veth1_macvtap entered promiscuous mode [ 230.990241][ T7009] EXT4-fs (loop3): Test dummy encryption mode enabled [ 231.002640][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.029764][ T7009] EXT4-fs (loop3): Ignoring removed oldalloc option [ 231.043278][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.057952][ T7037] loop2: detected capacity change from 0 to 256 [ 231.073074][ T7009] EXT4-fs (loop3): Ignoring removed oldalloc option [ 231.080427][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.103113][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.133438][ T7009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c024e01c, mo2=0002] [ 231.142104][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.163502][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.179106][ T7009] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.919: casefold flag without casefold feature [ 231.182897][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.203575][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.218610][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.229260][ T7009] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.919: missing EA_INODE flag [ 231.243471][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.251920][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.312540][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.338489][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.394551][ T7009] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.919: error while reading EA inode 12 err=-117 [ 231.410337][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.460405][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.471047][ T7009] EXT4-fs (loop3): 1 orphan inode deleted [ 231.531794][ T7009] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,oldalloc,max_dir_size_kb=0x0000000000009c7c,debug,noblock_validity,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,prjquota,oldalloc,oldalloc,,errors=continue. Quota mode: writeback. [ 231.572513][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.619235][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.710559][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.746351][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.782922][ T7013] loop4: detected capacity change from 0 to 32768 [ 231.802080][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.830938][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.869615][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.890872][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.921971][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.941603][ T6765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.954450][ T6765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.966953][ T6765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.982654][ T6765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.072800][ T7013] XFS (loop4): Mounting V5 Filesystem [ 232.280987][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.360605][ T6561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.369302][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.409219][ T6561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.445264][ T7013] XFS (loop4): Ending clean mount [ 232.455917][ T7013] XFS (loop4): Quotacheck needed: Please wait. [ 232.468812][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.491052][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.850265][ T7013] XFS (loop4): Quotacheck: Done. [ 233.439536][ T7085] loop1: detected capacity change from 0 to 512 [ 233.468231][ T3511] XFS (loop4): Unmounting Filesystem [ 233.539198][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.623135][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.710115][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.715134][ T7085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.857: inode #1: comm syz.1.857: iget: illegal inode # [ 233.723820][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.789575][ T7085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.857: error while reading EA inode 1 err=-117 [ 233.830101][ T7085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.857: inode #1: comm syz.1.857: iget: illegal inode # [ 233.846625][ T7098] team0: Port device virt_wifi0 added [ 233.859870][ T7085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.857: error while reading EA inode 1 err=-117 [ 233.913504][ T7085] EXT4-fs (loop1): 1 orphan inode deleted [ 233.960350][ T7085] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 234.007212][ T7105] loop3: detected capacity change from 0 to 512 [ 234.155378][ T26] audit: type=1800 audit(1720041025.201:166): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.857" name="bus" dev="loop1" ino=13 res=0 errno=0 [ 234.243382][ T7111] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 234.262368][ T7111] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.857: mark_inode_dirty error [ 234.287008][ T7111] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 234.338754][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.352606][ T7111] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.857: mark_inode_dirty error [ 234.397056][ T7105] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 234.406911][ T7119] loop2: detected capacity change from 0 to 256 [ 234.410162][ T7111] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.857: Invalid block bitmap block 0 in block_group 0 [ 234.499028][ T7111] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 234.594030][ T3581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.635984][ T7111] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #13: comm syz.1.857: mark_inode_dirty error [ 234.679385][ T7111] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #13: block 26: comm syz.1.857: lblock 1 mapped to illegal pblock 26 (length 1) [ 234.698878][ T7122] loop4: detected capacity change from 0 to 2048 [ 234.771460][ T7111] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.857: invalid indirect mapped block 234881024 (level 0) [ 234.843438][ T7111] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 234.848741][ T7122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.960616][ T3581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.961333][ T6765] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 235.360799][ T7108] chnl_net:caif_netlink_parms(): no params data found [ 235.409765][ T3581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.593824][ T3581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.794070][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.801154][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.854629][ T7108] device bridge_slave_0 entered promiscuous mode [ 235.996010][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.026527][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.065095][ T7108] device bridge_slave_1 entered promiscuous mode [ 236.279973][ T7172] loop3: detected capacity change from 0 to 2048 [ 236.306601][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.339946][ T4228] Bluetooth: hci1: command 0x0409 tx timeout [ 236.358590][ T7172] loop3: p1 < > p3 p4 < > [ 236.391537][ T7172] loop3: p3 start 4259840 is beyond EOD, truncated [ 236.471040][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.502983][ T7172] dccp_invalid_packet: P.Data Offset(224) too large [ 236.718535][ T7108] team0: Port device team_slave_0 added [ 236.770634][ T7108] team0: Port device team_slave_1 added [ 236.909299][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.917653][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.950462][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.997189][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.009421][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.093012][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.122508][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 237.375240][ T7108] device hsr_slave_0 entered promiscuous mode [ 237.394520][ T7108] device hsr_slave_1 entered promiscuous mode [ 237.440363][ T7108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.460613][ T7108] Cannot create hsr debugfs directory [ 237.490425][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 237.791858][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.813257][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.821930][ T7164] device bridge_slave_0 entered promiscuous mode [ 237.828929][ T3701] Bluetooth: hci0: command 0x0409 tx timeout [ 237.901296][ T7233] loop4: detected capacity change from 0 to 2048 [ 237.934474][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.942100][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.974208][ T7164] device bridge_slave_1 entered promiscuous mode [ 238.005441][ T7233] UDF-fs: bad mount option "18446744073709551615ÿÿ" or missing value [ 238.056863][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.070542][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.080028][ T7178] device bridge_slave_0 entered promiscuous mode [ 238.242572][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.257047][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 238.262933][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.278985][ T7178] device bridge_slave_1 entered promiscuous mode [ 238.326496][ T7255] xt_NFQUEUE: number of total queues is 0 [ 238.329240][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.376209][ T7255] netlink: 264 bytes leftover after parsing attributes in process `syz.4.970'. [ 238.383306][ T3701] Bluetooth: hci1: command 0x041b tx timeout [ 238.439004][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.535283][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.549017][ T3581] device hsr_slave_0 left promiscuous mode [ 238.560451][ T3581] device hsr_slave_1 left promiscuous mode [ 238.572796][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.593622][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.605362][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.625547][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.664980][ T3581] device bridge_slave_1 left promiscuous mode [ 238.671344][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.899668][ T3581] device bridge_slave_0 left promiscuous mode [ 238.913810][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.930427][ T3581] device veth1_macvtap left promiscuous mode [ 238.937373][ T3581] device veth0_macvtap left promiscuous mode [ 238.946699][ T3581] device veth1_vlan left promiscuous mode [ 238.952745][ T3581] device veth0_vlan left promiscuous mode [ 239.191010][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 239.211858][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 239.229465][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.246086][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.347949][ T3581] bond0 (unregistering): Released all slaves [ 239.426548][ T7164] team0: Port device team_slave_0 added [ 239.446446][ T7164] team0: Port device team_slave_1 added [ 239.460047][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.533677][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.540809][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.568334][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.635170][ T7178] team0: Port device team_slave_0 added [ 239.645966][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.682919][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.730514][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.764261][ T7178] team0: Port device team_slave_1 added [ 239.903854][ T3695] Bluetooth: hci0: command 0x041b tx timeout [ 239.938052][ T7164] device hsr_slave_0 entered promiscuous mode [ 239.947771][ T7164] device hsr_slave_1 entered promiscuous mode [ 239.957961][ T7164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.966971][ T7164] Cannot create hsr debugfs directory [ 239.990909][ T7284] device macsec0 entered promiscuous mode [ 240.000774][ T7284] device macsec0 left promiscuous mode [ 240.035623][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.042599][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.099642][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.113356][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.120328][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.159376][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.303250][ T3701] Bluetooth: hci2: command 0x041b tx timeout [ 240.330535][ T7178] device hsr_slave_0 entered promiscuous mode [ 240.341427][ T7178] device hsr_slave_1 entered promiscuous mode [ 240.349368][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.357608][ T7178] Cannot create hsr debugfs directory [ 240.463232][ T3701] Bluetooth: hci1: command 0x040f tx timeout [ 240.578245][ T7164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.591961][ T7108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.610309][ T7108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.654966][ T7164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.691793][ T7108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.708608][ T7108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.755737][ T7164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.835673][ T7164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.971357][ T7178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.041130][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.082676][ T7178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.119888][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.131924][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.171800][ T7108] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.205614][ T7178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.246176][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.263738][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.290555][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.297753][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.353421][ T7178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.358008][ T3701] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 241.394222][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.404594][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.406146][ T3701] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 241.434148][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.453700][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.460825][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.486600][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.501259][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.516087][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.534693][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.543883][ T7308] loop3: detected capacity change from 0 to 4096 [ 241.582423][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.602722][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.603803][ T7308] ntfs3: Unknown parameter '/dev/uhid' [ 241.614722][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.644058][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.662629][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.674266][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.696545][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.719859][ T7108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.956932][ T7164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.982987][ T3703] Bluetooth: hci0: command 0x040f tx timeout [ 241.996672][ T7164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.053586][ T7164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.132699][ T7164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.171175][ T7178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.223264][ T7178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.235885][ T7336] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 242.244877][ T7336] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 242.272138][ T7178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.323903][ T7178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.373620][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.381232][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.410481][ T7108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.417885][ T3695] Bluetooth: hci2: command 0x040f tx timeout [ 242.514063][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.529091][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.733507][ T3695] Bluetooth: hci1: command 0x0419 tx timeout [ 242.755596][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.765042][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.805477][ T7108] device veth0_vlan entered promiscuous mode [ 242.940245][ T3695] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.958498][ T7108] device veth1_vlan entered promiscuous mode [ 243.061997][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.080363][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.206533][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.269902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.295452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.333360][ T3695] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 243.348813][ T7108] device veth0_macvtap entered promiscuous mode [ 243.381196][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.390587][ T3695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.414398][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.425795][ T7108] device veth1_macvtap entered promiscuous mode [ 243.443037][ T3695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.480944][ T3695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 243.508533][ T7178] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.525727][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.546890][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.567766][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.587371][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.609326][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.623313][ T3695] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 243.638459][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.657038][ T3695] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 243.679800][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.690786][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.712716][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.721606][ T3695] usb 4-1: Manufacturer: syz [ 243.735757][ T3695] usb 4-1: config 0 descriptor?? [ 243.858208][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.866797][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.875786][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.884354][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.892432][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.902420][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.910852][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.920187][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.931314][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.938459][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.947199][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.956256][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.965402][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.972492][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.980977][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.990686][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.009300][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.021327][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.042194][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.051639][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.058795][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.079570][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.092217][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.111075][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.118249][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.135951][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.151782][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.170538][ T3247] Bluetooth: hci0: command 0x0419 tx timeout [ 244.175249][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.212956][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.232921][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.262862][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.264974][ T3695] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 244.273294][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.289889][ T3695] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 244.301681][ T3695] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 244.323868][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.337284][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.357465][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.385907][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.418398][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.433866][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.445726][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.454911][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.463658][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 244.465188][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.478773][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.488041][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.497168][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.506629][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.519522][ T7108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.534453][ T7108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.544681][ T7108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.553581][ T13] usb 4-1: USB disconnect, device number 9 [ 244.553975][ T7108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.592651][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.601712][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.615283][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.625791][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.642104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.653854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.662570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.671374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.693905][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.729693][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.744107][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.773170][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.787206][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.796494][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.806340][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.847903][ T7178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.953801][ T3908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.991388][ T3908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.049902][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.051330][ T6561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.078786][ T6561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.098486][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.169140][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.188376][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.206751][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.247397][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.264511][ T7390] loop3: detected capacity change from 0 to 4096 [ 245.271306][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.294690][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.304327][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.350158][ T7393] loop0: detected capacity change from 0 to 512 [ 245.385732][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.392779][ T7394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.449015][ T7393] EXT4-fs (loop0): Ignoring removed orlov option [ 245.462166][ T7393] EXT4-fs (loop0): Test dummy encryption mode enabled [ 245.525999][ T7164] device veth0_vlan entered promiscuous mode [ 245.538584][ T7393] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.551948][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.564601][ T26] audit: type=1804 audit(1720041036.611:167): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.993" name="/newroot/90/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 245.570103][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.608672][ T7164] device veth1_vlan entered promiscuous mode [ 245.622064][ T26] audit: type=1804 audit(1720041036.671:168): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.993" name="/newroot/90/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 245.648202][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.655064][ T7393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 245.657175][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.671330][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.680557][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.683090][ T7393] System zones: [ 245.689435][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.698406][ T7393] 1-12 [ 245.701967][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.715019][ T7393] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.937: casefold flag without casefold feature [ 245.737770][ T7393] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.937: missing EA_INODE flag [ 245.790311][ T7178] device veth0_vlan entered promiscuous mode [ 245.796336][ T7393] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.937: error while reading EA inode 12 err=-117 [ 245.796657][ T7393] EXT4-fs (loop0): 1 orphan inode deleted [ 245.818906][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.836433][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.853255][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.860347][ T7393] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none. [ 245.862748][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.903829][ T7164] device veth0_macvtap entered promiscuous mode [ 245.918782][ T7164] device veth1_macvtap entered promiscuous mode [ 245.958441][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.977714][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.996778][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.033251][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.172716][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.211361][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.236079][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.256524][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.271066][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.282251][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.298314][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.056059][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.094485][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.104347][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.112735][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.131505][ T7402] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 247.152546][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.162748][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.196392][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.215143][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.225621][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.239265][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.249784][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.263157][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.287939][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.298960][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.311375][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.323664][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.335649][ T7401] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 247.365030][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.391386][ T7178] device veth1_vlan entered promiscuous mode [ 247.544538][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.561971][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.575217][ T7164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.596152][ T7164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.611724][ T7164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.630205][ T7164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.098460][ T3908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.166940][ T3908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.275890][ T7178] device veth0_macvtap entered promiscuous mode [ 248.344273][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.346680][ T7436] loop4: detected capacity change from 0 to 4096 [ 248.353776][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.380199][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.406543][ T7178] device veth1_macvtap entered promiscuous mode [ 248.480834][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.489792][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.522773][ T7441] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.554750][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.608451][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.640810][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.681859][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.712422][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.763041][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.777103][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.790010][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.801038][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.816149][ T26] audit: type=1804 audit(1720041039.871:169): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1003" name="/newroot/229/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 248.817087][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.850769][ T26] audit: type=1804 audit(1720041039.901:170): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1003" name="/newroot/229/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 248.883363][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.904255][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.916222][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.928111][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.945179][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.954299][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.963830][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.995432][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.029906][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.053635][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.064313][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.101428][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.143992][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.170775][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.181559][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.192287][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.233621][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.261302][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1013'. [ 249.264645][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.289358][ T7462] loop4: detected capacity change from 0 to 512 [ 249.298563][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.338144][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.427880][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.448933][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.461485][ T7178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.461528][ T7178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.461561][ T7178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.461592][ T7178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.489504][ T7467] Invalid option length (398) for dns_resolver key [ 249.585732][ T7473] capability: warning: `syz.4.1013' uses 32-bit capabilities (legacy support in use) [ 249.738363][ T7467] could not allocate digest TFM handle sha256-arm64-neon [ 249.942291][ T7485] loop3: detected capacity change from 0 to 512 [ 250.020600][ T7485] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 250.040744][ T6561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.064963][ T6561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.110665][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.206577][ T2604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.225506][ T2604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.290975][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.421876][ T7494] kvm: emulating exchange as write [ 250.937004][ T3581] device hsr_slave_0 left promiscuous mode [ 250.944143][ T7522] overlayfs: missing 'lowerdir' [ 251.003157][ T3581] device hsr_slave_1 left promiscuous mode [ 251.017215][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.043073][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.072009][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.123115][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.160196][ T3581] device bridge_slave_1 left promiscuous mode [ 251.185546][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.216812][ T3581] device bridge_slave_0 left promiscuous mode [ 251.273406][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.404198][ T3581] device hsr_slave_0 left promiscuous mode [ 251.410742][ T3581] device hsr_slave_1 left promiscuous mode [ 251.443752][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.452491][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.479005][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.490418][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.518889][ T3581] device bridge_slave_1 left promiscuous mode [ 251.529526][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.541168][ T3581] device bridge_slave_0 left promiscuous mode [ 251.548561][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.566875][ T3581] device veth1_macvtap left promiscuous mode [ 251.573625][ T3581] device veth0_macvtap left promiscuous mode [ 251.580841][ T3581] device veth1_vlan left promiscuous mode [ 251.598501][ T3581] device veth0_vlan left promiscuous mode [ 251.606473][ T3581] device veth1_macvtap left promiscuous mode [ 251.612585][ T3581] device veth0_macvtap left promiscuous mode [ 251.627045][ T3581] device veth1_vlan left promiscuous mode [ 251.634609][ T3581] device veth0_vlan left promiscuous mode [ 251.830178][ T7548] loop0: detected capacity change from 0 to 1024 [ 252.141582][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 252.162786][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 252.195377][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.246569][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.316101][ T7554] overlayfs: missing 'lowerdir' [ 252.405728][ T3581] bond0 (unregistering): Released all slaves [ 252.439664][ T7559] loop0: detected capacity change from 0 to 512 [ 252.487047][ T7559] EXT4-fs (loop0): Ignoring removed orlov option [ 252.494254][ T7559] EXT4-fs (loop0): Test dummy encryption mode enabled [ 252.507904][ T7559] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.529353][ T7559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 252.541677][ T7559] System zones: 1-12 [ 252.562035][ T7559] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1052: casefold flag without casefold feature [ 252.576267][ T7559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1052: missing EA_INODE flag [ 252.588487][ T7559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1052: error while reading EA inode 12 err=-117 [ 252.604480][ T7559] EXT4-fs (loop0): 1 orphan inode deleted [ 252.610412][ T7559] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none. [ 252.740394][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 252.802670][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 252.829819][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.844569][ T3581] device bond_slave_1 left promiscuous mode [ 252.873042][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.882707][ T3581] device bond_slave_0 left promiscuous mode [ 253.652079][ T3581] bond0 (unregistering): Released all slaves [ 253.865362][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 253.925812][ T7572] loop2: detected capacity change from 0 to 512 [ 253.938037][ T7575] loop0: detected capacity change from 0 to 1024 [ 253.980387][ T7569] loop3: detected capacity change from 0 to 8192 [ 254.020151][ T7572] Invalid option length (398) for dns_resolver key [ 254.119997][ T7569] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 254.132685][ T7569] REISERFS (device loop3): using ordered data mode [ 254.140204][ T7569] reiserfs: using flush barriers [ 254.151569][ T7576] loop1: detected capacity change from 0 to 1024 [ 254.158568][ T7569] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.175564][ T7569] REISERFS (device loop3): checking transaction log (loop3) [ 254.196576][ T7576] hfsplus: creator requires a 4 character value [ 254.212335][ T7572] could not allocate digest TFM handle sha256-arm64-neon [ 254.222295][ T7569] REISERFS (device loop3): Using r5 hash to sort names [ 254.254010][ T7576] hfsplus: unable to parse mount options [ 254.620127][ T7587] loop3: detected capacity change from 0 to 512 [ 255.476312][ T7587] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.585420][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.591868][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688287][ T7587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 255.763982][ T7587] Quota error (device loop3): write_blk: dquota write failed [ 255.776019][ T7587] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 255.803864][ T7587] Quota error (device loop3): write_blk: dquota write failed [ 255.830689][ T7587] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 255.835000][ T3660] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.861782][ T7587] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1059: Failed to acquire dquot type 1 [ 255.970364][ T7587] EXT4-fs (loop3): 1 truncate cleaned up [ 255.979940][ T7587] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,barrier=0x0000000000000003,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 256.100172][ T7587] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 256.128596][ T7626] loop0: detected capacity change from 0 to 256 [ 256.161885][ T3660] usb 2-1: Using ep0 maxpacket: 32 [ 256.169362][ T7615] loop4: detected capacity change from 0 to 8192 [ 256.213967][ T7626] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.239325][ T7615] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 256.268529][ T7626] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 256.291838][ T7615] REISERFS (device loop4): using ordered data mode [ 256.313154][ T3660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.331664][ T7615] reiserfs: using flush barriers [ 256.332870][ T3660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.353135][ T3660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 256.364091][ T3660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.374494][ T3660] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 256.387693][ T3660] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 256.392565][ T7615] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.398307][ T3660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.425685][ T7629] loop3: detected capacity change from 0 to 256 [ 256.433635][ T3660] usb 2-1: config 0 descriptor?? [ 256.489218][ T7629] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 256.516110][ T7615] REISERFS (device loop4): checking transaction log (loop4) [ 256.567085][ T7629] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 256.581680][ T7615] REISERFS (device loop4): Using r5 hash to sort names [ 256.613393][ T7629] exFAT-fs (loop3): Filesystem has been set read-only [ 256.635753][ T7629] exFAT-fs (loop3): hint_cluster is invalid (1) [ 256.761660][ T7629] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 256.822276][ T7629] exFAT-fs (loop3): error, failed to bmap (inode : ffff888061eeefe0 iblock : 9, err : -5) [ 256.894039][ T7629] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 256.925749][ T7629] attempt to access beyond end of device [ 256.925749][ T7629] loop3: rw=2049, want=34359738496, limit=256 [ 256.946491][ T3660] ntrig 0003:1B96:000A.000C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 257.023118][ T3583] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.256301][ T3660] usb 2-1: USB disconnect, device number 9 [ 257.803413][ T3583] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 257.812331][ T3583] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 257.873028][ T3583] usb 4-1: New USB device found, idVendor=0930, idProduct=0215, bcdDevice= 8.78 [ 257.882114][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.893286][ T7640] loop4: detected capacity change from 0 to 2048 [ 257.961957][ T7624] loop2: detected capacity change from 0 to 40427 [ 258.017016][ T7640] loop4: p1 < > p3 p4 < > [ 258.034953][ T7647] dccp_invalid_packet: P.Data Offset(224) too large [ 258.044495][ T7640] loop4: p3 start 4259840 is beyond EOD, truncated [ 258.050472][ T3583] usb 4-1: Direct firmware load for ath3k-1.fw failed with error -2 [ 258.111698][ T3583] usb 4-1: Falling back to sysfs fallback for: ath3k-1.fw [ 258.124765][ T7624] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.212337][ T2962] loop4: p1 < > p3 p4 < > [ 258.227669][ T2962] loop4: p3 start 4259840 is beyond EOD, truncated [ 258.396945][ T7624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.501738][ T7658] loop1: detected capacity change from 0 to 1024 [ 258.630341][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.811794][ T7666] loop0: detected capacity change from 0 to 8192 [ 258.863982][ T7666] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 258.953637][ T7666] REISERFS (device loop0): using ordered data mode [ 258.960185][ T7666] reiserfs: using flush barriers [ 258.971629][ T7669] loop3: detected capacity change from 0 to 256 [ 259.000241][ T7669] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.044733][ T7666] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.121517][ T7666] REISERFS (device loop0): checking transaction log (loop0) [ 259.132216][ T7669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 259.193451][ T7666] REISERFS (device loop0): Using r5 hash to sort names [ 259.598873][ T7691] loop3: detected capacity change from 0 to 256 [ 259.673472][ T7691] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 259.724851][ T7691] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 259.749336][ T7691] exFAT-fs (loop3): Filesystem has been set read-only [ 259.769887][ T7691] exFAT-fs (loop3): hint_cluster is invalid (1) [ 259.794650][ T3660] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 259.803953][ T7691] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 259.824567][ T7691] exFAT-fs (loop3): error, failed to bmap (inode : ffff888061f2dc60 iblock : 9, err : -5) [ 259.853485][ T7691] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 259.882255][ T7691] attempt to access beyond end of device [ 259.882255][ T7691] loop3: rw=2049, want=34359738496, limit=256 [ 260.004261][ T7677] loop2: detected capacity change from 0 to 40427 [ 260.085788][ T7677] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 260.093076][ T3660] usb 2-1: Using ep0 maxpacket: 16 [ 260.113623][ T7677] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.150187][ T7677] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.214550][ T7677] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.221894][ T7677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.433174][ T3660] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 260.446708][ T3660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.468829][ T3660] usb 2-1: Product: syz [ 260.482891][ T3660] usb 2-1: Manufacturer: syz [ 260.488078][ T3660] usb 2-1: SerialNumber: syz [ 260.506338][ T3660] usb 2-1: config 0 descriptor?? [ 260.554419][ T3660] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 260.562724][ T3660] usb 2-1: Detected FT232H [ 260.773186][ T3660] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 260.975986][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'. [ 261.253045][ T3660] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 261.273239][ T3660] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 261.309473][ T7711] loop2: detected capacity change from 0 to 8192 [ 261.351809][ T7711] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 261.363379][ T7711] REISERFS (device loop2): using ordered data mode [ 261.370413][ T7711] reiserfs: using flush barriers [ 261.376862][ T7711] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.393674][ T7711] REISERFS (device loop2): checking transaction log (loop2) [ 261.407086][ T7711] REISERFS (device loop2): Using r5 hash to sort names [ 261.582400][ T7716] loop2: detected capacity change from 0 to 256 [ 261.614710][ T3660] usb 2-1: USB disconnect, device number 10 [ 261.628940][ T3660] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 261.640760][ T3660] ftdi_sio 2-1:0.0: device disconnected [ 261.652155][ T7716] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.692076][ T7716] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 262.282634][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 262.490591][ T7741] loop1: detected capacity change from 0 to 2048 [ 262.503418][ T7745] loop0: detected capacity change from 0 to 256 [ 262.554019][ T7741] loop1: p1 < > p3 p4 < > [ 262.562107][ T7741] loop1: p3 start 4259840 is beyond EOD, truncated [ 262.584843][ T7745] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.653215][ T3701] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 262.671681][ T7745] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 262.715835][ T7741] dccp_invalid_packet: P.Data Offset(224) too large [ 262.912926][ T3701] usb 3-1: Using ep0 maxpacket: 32 [ 262.998381][ T7755] loop3: detected capacity change from 0 to 256 [ 263.043209][ T3701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.066518][ T3701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.109134][ T3701] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 263.136995][ T3701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.183755][ T3701] usb 3-1: config 0 descriptor?? [ 263.238436][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'. [ 263.401053][ T7774] loop0: detected capacity change from 0 to 256 [ 263.425252][ T7774] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.485531][ T7774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 263.581345][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 263.668585][ T3701] chicony 0003:04F2:1236.000D: unknown main item tag 0x0 [ 263.692990][ T3701] chicony 0003:04F2:1236.000D: unknown main item tag 0x0 [ 263.712962][ T3701] chicony 0003:04F2:1236.000D: item fetching failed at offset 10/11 [ 263.725941][ T3701] chicony 0003:04F2:1236.000D: Chicony hid parse failed: -22 [ 263.733622][ T3701] chicony: probe of 0003:04F2:1236.000D failed with error -22 [ 264.512013][ T3695] usb 3-1: USB disconnect, device number 10 [ 264.692627][ T7795] loop3: detected capacity change from 0 to 4096 [ 264.779050][ T7795] ntfs: volume version 3.1. [ 264.858380][ T7795] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 264.879573][ T7795] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 265.348978][ T7810] loop3: detected capacity change from 0 to 40427 [ 265.555715][ T7810] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.611875][ T7810] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.619190][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 266.285305][ T26] audit: type=1800 audit(1720041057.341:171): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1144" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 266.664806][ T7843] mmap: syz.2.1154 (7843) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 266.801177][ T5820] attempt to access beyond end of device [ 266.801177][ T5820] loop3: rw=2049, want=45104, limit=40427 [ 266.842107][ T7846] loop0: detected capacity change from 0 to 4096 [ 266.919990][ T7846] ntfs: volume version 3.1. [ 266.974614][ T7855] netlink: 'syz.2.1158': attribute type 2 has an invalid length. [ 267.030598][ T7846] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 267.030684][ T7846] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 267.263147][ T3655] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.510090][ T7867] loop0: detected capacity change from 0 to 256 [ 267.528268][ T7872] loop1: detected capacity change from 0 to 128 [ 268.083464][ T3655] usb 3-1: Using ep0 maxpacket: 32 [ 268.125859][ T7867] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 268.161373][ T7882] loop3: detected capacity change from 0 to 4096 [ 268.217886][ T7884] loop4: detected capacity change from 0 to 512 [ 268.225350][ T3655] usb 3-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=72.02 [ 268.235310][ T3655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.249700][ T3655] usb 3-1: config 0 descriptor?? [ 268.255467][ T7867] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 268.300718][ T7884] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.316512][ T7867] exFAT-fs (loop0): Filesystem has been set read-only [ 268.343968][ T3655] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 268.430089][ T7884] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1171: iget: bad extended attribute block 19 [ 268.448333][ T7884] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1171: couldn't read orphan inode 15 (err -117) [ 268.484901][ T7884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.596461][ T7884] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1171: bg 0: block 65: padding at end of block bitmap is not set [ 268.619113][ T7884] Quota error (device loop4): write_blk: dquota write failed [ 268.647312][ T7884] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 268.660683][ T7884] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1171: Failed to acquire dquot type 0 [ 268.715603][ T7884] syz.4.1171 (7884) used greatest stack depth: 18848 bytes left [ 268.735418][ T7892] loop3: detected capacity change from 0 to 512 [ 268.780646][ T7892] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1173: casefold flag without casefold feature [ 268.811948][ T7892] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1173: missing EA_INODE flag [ 268.829681][ T7892] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1173: error while reading EA inode 2 err=-117 [ 268.850685][ T7892] EXT4-fs (loop3): 1 orphan inode deleted [ 268.859809][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.923459][ T7892] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.020486][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.122609][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.162227][ T7899] loop4: detected capacity change from 0 to 2048 [ 269.237510][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.249306][ T7899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.597546][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 270.681604][ T7922] loop0: detected capacity change from 0 to 256 [ 270.731226][ T3656] usb 3-1: USB disconnect, device number 11 [ 270.770287][ T7922] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 271.072118][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.087295][ T7934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.098577][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.311496][ T7941] loop0: detected capacity change from 0 to 32768 [ 271.318448][ T7941] XFS: noattr2 mount option is deprecated. [ 271.346128][ T7938] loop3: detected capacity change from 0 to 2048 [ 271.380475][ T7902] device bridge_slave_0 entered promiscuous mode [ 271.432919][ T3660] Bluetooth: hci0: command 0x0409 tx timeout [ 271.448535][ T7941] XFS (loop0): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 271.607999][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.617920][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.642358][ T7902] device bridge_slave_1 entered promiscuous mode [ 271.875424][ T7937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.120285][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.123643][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.219639][ T7957] loop2: detected capacity change from 0 to 4096 [ 272.281868][ T7902] team0: Port device team_slave_0 added [ 272.354730][ T7902] team0: Port device team_slave_1 added [ 272.632063][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.647717][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.775354][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.079082][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.135051][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.174226][ T7967] loop3: detected capacity change from 0 to 2048 [ 273.245117][ T7975] dccp_invalid_packet: P.Data Offset(224) too large [ 273.271914][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.311458][ T7967] loop3: p1 < > p3 p4 < > [ 273.371970][ T7967] loop3: p3 start 4259840 is beyond EOD, truncated [ 273.428917][ T7984] loop0: detected capacity change from 0 to 256 [ 273.465968][ T154] device hsr_slave_0 left promiscuous mode [ 273.501684][ T154] device hsr_slave_1 left promiscuous mode [ 273.504486][ T3695] Bluetooth: hci0: command 0x041b tx timeout [ 273.531402][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.572266][ T7984] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 273.582892][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.614502][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.622092][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.665828][ T2962] loop3: p1 < > p3 p4 < > [ 273.689506][ T154] device bridge_slave_1 left promiscuous mode [ 273.689875][ T2962] loop3: p3 start 4259840 is beyond EOD, [ 273.715734][ T7990] loop2: detected capacity change from 0 to 512 [ 273.733063][ T2962] truncated [ 273.741737][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.779228][ T154] device bridge_slave_0 left promiscuous mode [ 273.788741][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.802359][ T7990] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.851790][ T154] device veth1_macvtap left promiscuous mode [ 273.877369][ T154] device veth0_macvtap left promiscuous mode [ 273.914372][ T154] device veth1_vlan left promiscuous mode [ 273.920245][ T154] device veth0_vlan left promiscuous mode [ 273.931447][ T7990] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1197: iget: bad extended attribute block 19 [ 273.994400][ T7990] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1197: couldn't read orphan inode 15 (err -117) [ 274.063001][ T7990] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.189299][ T7990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1197: bg 0: block 65: padding at end of block bitmap is not set [ 274.216624][ T3841] udevd[3841]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 274.256463][ T7990] Quota error (device loop2): write_blk: dquota write failed [ 274.259898][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 274.271249][ T7990] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 274.285954][ T7990] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1197: Failed to acquire dquot type 0 [ 274.564954][ T8009] loop2: detected capacity change from 0 to 4096 [ 274.697176][ T154] team0 (unregistering): Port device team_slave_1 removed [ 274.761387][ T154] team0 (unregistering): Port device team_slave_0 removed [ 274.782311][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.800589][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.936670][ T154] bond0 (unregistering): Released all slaves [ 275.185764][ T7902] device hsr_slave_0 entered promiscuous mode [ 275.193319][ T7902] device hsr_slave_1 entered promiscuous mode [ 275.373928][ T8031] loop4: detected capacity change from 0 to 2048 [ 275.462581][ T8038] loop0: detected capacity change from 0 to 2048 [ 275.499007][ T8031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.591427][ T3547] Bluetooth: hci0: command 0x040f tx timeout [ 275.685764][ T8036] loop2: detected capacity change from 0 to 4096 [ 275.783685][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.785741][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.791807][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.044692][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.439714][ T7902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.509037][ T7902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.553596][ T7902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.617403][ T7902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.093392][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.169717][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.179108][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.232592][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.303619][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.331084][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.383559][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.385743][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 277.390772][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.463412][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.472085][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.488553][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.518205][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.525409][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.570233][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.625300][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.637761][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.668592][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.690789][ T8094] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 277.730855][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.769057][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.803675][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.855419][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.896160][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.914737][ T3547] Bluetooth: hci0: command 0x0419 tx timeout [ 277.939090][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.966154][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.998173][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.047394][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.386116][ T8073] loop0: detected capacity change from 0 to 32768 [ 278.532163][ T8073] XFS (loop0): Mounting V5 Filesystem [ 278.624631][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.673376][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.680958][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.747291][ T8073] XFS (loop0): Ending clean mount [ 278.759242][ T8073] XFS (loop0): Quotacheck needed: Please wait. [ 278.819524][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.851794][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.934078][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.969563][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.981178][ T7902] device veth0_vlan entered promiscuous mode [ 279.001862][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.024062][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.038040][ T7902] device veth1_vlan entered promiscuous mode [ 279.066779][ T8073] XFS (loop0): Quotacheck: Done. [ 279.090941][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.101424][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.111895][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.122073][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.134173][ T7902] device veth0_macvtap entered promiscuous mode [ 279.196050][ T7902] device veth1_macvtap entered promiscuous mode [ 279.226841][ T7108] XFS (loop0): Unmounting Filesystem [ 279.288272][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.312358][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.338083][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.358516][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.372409][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.389421][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.399745][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.419717][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.456407][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.471842][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.514753][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.534161][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.550908][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.581092][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.615124][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.647385][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.685529][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.708093][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.730218][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.775128][ T7902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.808102][ T7902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.880897][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.934274][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.962491][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.987893][ T7902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.026998][ T7902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.064051][ T7902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.122876][ T7902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.413061][ T3660] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 280.474327][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.495998][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.539445][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.617872][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.649335][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.680956][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.713778][ T3660] usb 3-1: Using ep0 maxpacket: 16 [ 280.779407][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 280.838040][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 280.853088][ T3660] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.969816][ T8167] loop3: detected capacity change from 0 to 32768 [ 281.053219][ T3660] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=36.cd [ 281.072252][ T3660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.123668][ T3660] usb 3-1: Product: syz [ 281.127883][ T3660] usb 3-1: Manufacturer: syz [ 281.170381][ T3660] usb 3-1: SerialNumber: syz [ 281.194755][ T3660] usb 3-1: config 0 descriptor?? [ 281.249892][ T8217] loop0: detected capacity change from 0 to 2048 [ 281.258509][ T3660] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 281.268862][ T3660] command write [95] error -22 [ 281.358458][ T8167] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 281.358458][ T8167] [ 281.390104][ T8217] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,block_validity,bsdgroups,errors=remount-ro,abort,stripe=0x0000000000000003,dioread_lock,. Quota mode: writeback. [ 281.589568][ T8217] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1255: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 281.631416][ T5820] read_mapping_page failed! [ 281.659793][ T5820] ERROR: (device loop3): txCommit: [ 281.659793][ T5820] [ 281.703398][ T5820] read_mapping_page failed! [ 281.708755][ T5820] ERROR: (device loop3): txCommit: [ 281.708755][ T5820] [ 281.733119][ T8217] EXT4-fs (loop0): Remounting filesystem read-only [ 281.759393][ T3695] usb 3-1: USB disconnect, device number 12 [ 281.829217][ T8235] tmpfs: Bad value for 'mpol' [ 281.836785][ T8235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 282.225732][ T8226] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 282.575583][ T8238] loop1: detected capacity change from 0 to 64 [ 284.588184][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.735506][ T8251] device syzkaller0 entered promiscuous mode [ 284.848470][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.951985][ T8267] loop1: detected capacity change from 0 to 32768 [ 285.986498][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.052298][ T8278] loop4: detected capacity change from 0 to 512 [ 286.133324][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.165871][ T8267] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 286.165871][ T8267] [ 286.188116][ T8267] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 286.188116][ T8267] [ 286.230341][ T8278] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1274: casefold flag without casefold feature [ 286.286547][ T7902] read_mapping_page failed! [ 286.291272][ T7902] ERROR: (device loop1): txCommit: [ 286.291272][ T7902] [ 286.298222][ T8278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1274: missing EA_INODE flag [ 286.308480][ T8271] loop0: detected capacity change from 0 to 32768 [ 286.326169][ T7902] read_mapping_page failed! [ 286.330735][ T7902] ERROR: (device loop1): txCommit: [ 286.330735][ T7902] [ 286.419733][ T8278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1274: error while reading EA inode 12 err=-117 [ 286.463418][ T8287] ------------[ cut here ]------------ [ 286.469705][ T8287] WARNING: CPU: 1 PID: 8287 at kernel/workqueue.c:1453 __queue_work+0xbaf/0xd00 [ 286.478778][ T8287] Modules linked in: [ 286.482713][ T8287] CPU: 1 PID: 8287 Comm: syz.2.1276 Not tainted 5.15.161-syzkaller #0 [ 286.490899][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.500988][ T8287] RIP: 0010:__queue_work+0xbaf/0xd00 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 286.506337][ T8287] Code: 7c 24 10 e8 63 68 77 00 e9 1c fd ff ff e8 09 9a 2d 00 89 ee 48 c7 c7 20 17 7d 8c e8 8b cf d7 02 e9 64 fc ff ff e8 f1 99 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db 99 2d 00 [ 286.525974][ T8287] RSP: 0018:ffffc90003047bf8 EFLAGS: 00010087 [ 286.532073][ T8287] RAX: ffffffff8152c0df RBX: 00000000000b0012 RCX: 0000000000040000 [ 286.540068][ T8287] RDX: ffffc9000b70c000 RSI: 000000000000bc02 RDI: 000000000000bc03 [ 286.548072][ T8287] RBP: 0000000000010000 R08: ffffffff8153a37b R09: ffffed100f5b5828 [ 286.556076][ T8287] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 286.564082][ T8287] R13: ffff8880189d7000 R14: 0000000000000008 R15: 0000000000000000 [ 286.572077][ T8287] FS: 00007fa2c0c9a6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 286.579178][ T8278] EXT4-fs (loop4): 1 orphan inode deleted [ 286.581113][ T8287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.593445][ T8287] CR2: 00007fe10c73b000 CR3: 000000007d900000 CR4: 00000000003506e0 [ 286.601534][ T8287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.609615][ T8287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.617611][ T8287] Call Trace: [ 286.620905][ T8287] [ 286.623961][ T8287] ? __warn+0x15b/0x300 [ 286.628144][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.632849][ T8287] ? report_bug+0x1b7/0x2e0 [ 286.637390][ T8287] ? handle_bug+0x3d/0x70 [ 286.641748][ T8287] ? exc_invalid_op+0x16/0x40 [ 286.646452][ T8287] ? asm_exc_invalid_op+0x16/0x20 [ 286.651599][ T8287] ? is_chained_work+0x6b/0x100 [ 286.656479][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.661006][ T8278] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.661361][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.676600][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.681303][ T8287] ? queue_delayed_work_on+0xfc/0x250 [ 286.686696][ T8287] ? lockdep_hardirqs_off+0x70/0x100 [ 286.692004][ T8287] ? __queue_delayed_work+0x182/0x210 [ 286.697406][ T8287] queue_delayed_work_on+0x156/0x250 [ 286.702759][ T8287] ? delayed_work_timer_fn+0x80/0x80 [ 286.708082][ T8287] ? hci_conn_drop+0x17c/0x2c0 [ 286.712876][ T8287] l2cap_chan_del+0x2cd/0x610 [ 286.717601][ T8287] l2cap_chan_close+0x100/0x880 [ 286.722482][ T8287] ? l2cap_chan_list+0xc0/0xc0 [ 286.727287][ T8287] l2cap_sock_shutdown+0x3b8/0x870 [ 286.732429][ T8287] __se_sys_shutdown+0x147/0x1a0 [ 286.737394][ T8287] do_syscall_64+0x3b/0xb0 [ 286.741933][ T8287] ? clear_bhb_loop+0x15/0x70 [ 286.746647][ T8287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.752566][ T8287] RIP: 0033:0x7fa2c225bbd9 [ 286.757091][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.776714][ T8287] RSP: 002b:00007fa2c0c9a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 286.785600][ T8287] RAX: ffffffffffffffda RBX: 00007fa2c23ea110 RCX: 00007fa2c225bbd9 [ 286.793604][ T8287] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 286.801601][ T8287] RBP: 00007fa2c22caa98 R08: 0000000000000000 R09: 0000000000000000 [ 286.809596][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.817593][ T8287] R13: 000000000000006e R14: 00007fa2c23ea110 R15: 00007ffefaa08d88 [ 286.825613][ T8287] [ 286.828656][ T8287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.835956][ T8287] CPU: 1 PID: 8287 Comm: syz.2.1276 Not tainted 5.15.161-syzkaller #0 [ 286.844153][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.854321][ T8287] Call Trace: [ 286.857632][ T8287] [ 286.860592][ T8287] dump_stack_lvl+0x1e3/0x2d0 [ 286.865397][ T8287] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 286.871054][ T8287] ? panic+0x860/0x860 [ 286.875141][ T8287] ? __queue_work+0xad0/0xd00 [ 286.879837][ T8287] ? __queue_work+0xad0/0xd00 [ 286.884534][ T8287] panic+0x318/0x860 [ 286.888459][ T8287] ? __warn+0x16a/0x300 [ 286.892638][ T8287] ? fb_is_primary_device+0xd0/0xd0 [ 286.897883][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.902675][ T8287] __warn+0x2b2/0x300 [ 286.906688][ T8287] ? __queue_work+0xbaf/0xd00 [ 286.911401][ T8287] report_bug+0x1b7/0x2e0 [ 286.915766][ T8287] handle_bug+0x3d/0x70 [ 286.920077][ T8287] exc_invalid_op+0x16/0x40 [ 286.924613][ T8287] asm_exc_invalid_op+0x16/0x20 [ 286.929507][ T8287] RIP: 0010:__queue_work+0xbaf/0xd00 [ 286.934787][ T8287] Code: 7c 24 10 e8 63 68 77 00 e9 1c fd ff ff e8 09 9a 2d 00 89 ee 48 c7 c7 20 17 7d 8c e8 8b cf d7 02 e9 64 fc ff ff e8 f1 99 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db 99 2d 00 [ 286.954549][ T8287] RSP: 0018:ffffc90003047bf8 EFLAGS: 00010087 [ 286.960651][ T8287] RAX: ffffffff8152c0df RBX: 00000000000b0012 RCX: 0000000000040000 [ 286.968647][ T8287] RDX: ffffc9000b70c000 RSI: 000000000000bc02 RDI: 000000000000bc03 [ 286.976829][ T8287] RBP: 0000000000010000 R08: ffffffff8153a37b R09: ffffed100f5b5828 [ 286.984837][ T8287] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 286.992926][ T8287] R13: ffff8880189d7000 R14: 0000000000000008 R15: 0000000000000000 [ 287.000937][ T8287] ? is_chained_work+0x6b/0x100 [ 287.006263][ T8287] ? __queue_work+0xbaf/0xd00 [ 287.010980][ T8287] ? __queue_work+0xbaf/0xd00 [ 287.015695][ T8287] ? queue_delayed_work_on+0xfc/0x250 [ 287.021100][ T8287] ? lockdep_hardirqs_off+0x70/0x100 [ 287.026505][ T8287] ? __queue_delayed_work+0x182/0x210 [ 287.032014][ T8287] queue_delayed_work_on+0x156/0x250 [ 287.037339][ T8287] ? delayed_work_timer_fn+0x80/0x80 [ 287.042664][ T8287] ? hci_conn_drop+0x17c/0x2c0 [ 287.047466][ T8287] l2cap_chan_del+0x2cd/0x610 [ 287.052187][ T8287] l2cap_chan_close+0x100/0x880 [ 287.057084][ T8287] ? l2cap_chan_list+0xc0/0xc0 [ 287.061892][ T8287] l2cap_sock_shutdown+0x3b8/0x870 [ 287.067302][ T8287] __se_sys_shutdown+0x147/0x1a0 [ 287.072279][ T8287] do_syscall_64+0x3b/0xb0 [ 287.076814][ T8287] ? clear_bhb_loop+0x15/0x70 [ 287.081520][ T8287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.087538][ T8287] RIP: 0033:0x7fa2c225bbd9 [ 287.091985][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.111704][ T8287] RSP: 002b:00007fa2c0c9a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 287.120238][ T8287] RAX: ffffffffffffffda RBX: 00007fa2c23ea110 RCX: 00007fa2c225bbd9 [ 287.128329][ T8287] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 287.136328][ T8287] RBP: 00007fa2c22caa98 R08: 0000000000000000 R09: 0000000000000000 [ 287.144342][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.152341][ T8287] R13: 000000000000006e R14: 00007fa2c23ea110 R15: 00007ffefaa08d88 [ 287.160360][ T8287] [ 287.163613][ T8287] Kernel Offset: disabled [ 287.169841][ T8287] Rebooting in 86400 seconds..