last executing test programs: 2m40.299528392s ago: executing program 5 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x2c}}, 0x0) 2m39.530903421s ago: executing program 5 (id=43): io_setup(0x22, &(0x7f00000003c0)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r1, 0x0}]) 2m38.785336912s ago: executing program 5 (id=47): setresuid(0x0, 0xee00, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 2m38.444913795s ago: executing program 5 (id=51): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0), 0x3, 0x4de, &(0x7f0000000c40)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 2m37.84192977s ago: executing program 5 (id=54): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m36.757130647s ago: executing program 5 (id=64): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 2m36.119917646s ago: executing program 32 (id=64): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2}}}}]}, 0x88}}, 0x0) 2m6.77225575s ago: executing program 6 (id=242): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x12) 2m6.589192184s ago: executing program 6 (id=244): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@attr2}, {@uquota}, {@grpquota}]}, 0x3, 0x9856, &(0x7f000001c900)="$eJzs3QW4ZXWhuP8zw9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSIl0d3d3d3f8n2FmdBxfuPr/3edyr+/7Ps+Zvffaa6+z9vez1jpnsw57r7jIsgsNDEwyMLyRl3/v0Jc/efSWLy+007HXH/HSoocvfvSIyWMNvxgydMTlVCMupx4YGBg0YjmDhk8bPOTEkwYPjDMwMHjU5U4w7viDJhgYWGvEzQVGXM49/GLCa0bO99Zo8YoOW41Buw7/Gv5NBwYGxh125ZmBmVcYdTkj1muWf3qi0lZccNFF/m71N7dh4zdkxPVRv8Ya/jXhZQMDE146wNvHoPf2Gb39/SfZ+4KVVn6P1+P/RCsuuOhio/kP2xfHGDFt7mH7+Oj7oLHRt/Ohc98x8hg0CA+c/0daccFFlhh45+P8wKpvHrT5W28fNwePNzAwePyBgcETDAwMnnBgYPBEAwODJ36vXer/rfd046uqqqr3pAUXmn2hYa/3Rvt9YJyRv9fS74WrvLHUHQMDA2MOn2fwXCNfC1ZVVVVVVVXV/84WXGj2heH1/yTv9vr/hFNfnbHX/1VVVVVVVVX/d1pswYVmH/Y6frTX/5O/2+v/7R54ccMRf/s/9/BHvfnePomqqqqqqqqqeteW+erbr//HH+31/9B3e/3/8Py7PDhivpH/3eCNURY5aJS/J3htlOljjDL/q6NMHzLK9FHnH2tgYPCQEdNf//vkweMNu++f5x88ybD1HjH9lVGmz/L3/795yLSjTJ91lOnTjzJ9thHrOmz6DKNMn3OU+Wf8V8a2qqqqqqqqqqqqqqqqqqrqf6o3nzj1zL+/5/vHB0Z5//a/vY/7iL8LGHTc2Vdf/Z6t6P+OBv3z30Ns916v0/9rw5zHOWrowMDGy7/Xq1LvQe/15zXUe1v+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uHc7//+39/6c4fK2R/8/83IfuPuVEoz52/VGuj/M/utbvWf+p5/8H1h80MDDCd5JhrksuuMxyMw4MDEw05e6HzjHwt/vmGXbf/JONMeINEoa/DcJ0Q3jB2434VPTtRsw6YhnHvb38xd46ZIxBo63EKE168mGHrbfiS3OMfjn9Oz+PwSOvfOCSrRYe+V4Wg0eb6Z2205HLH/lcRncese4zDlv3mbfYaNOZN996m8+sv9Ea66697tobzzv33PPMOfdc88428zrrb7j2LMP/facxG/r2v9P8K2M2+ehj9sSCo47Z6M/tncZs6LuP2dtLHHuv1TYYOWajr9p/NWbTvPuYDV1/xDcaMnTMgdXfHptBAwNDph1zYKthN2Yde2BgyHQj5p182LyfnWzwwMAef3+iw66N/bdtcNB2w+ZZcZFlF/r7x+7/88fvv8Pn2Y81/GLIiCEZMtWIy6mHf5tJBv6+KQ4ecuJJg4c9938Y5gnGHX/QBAMDa424ucCIy3lH3HvlyPne4XPWR1vRt99mZdfhX3/zGHfYlWOWnvimUZfzDgT/Hf3/+vn/T17zDPrbQA0a8TVinuFeCy662N+/19vDsMDI94QZ9rNlmMn/w8fY/5f90/oOHeftN7l9p/V9l/fFHf78Yfua/rHzhv53vS8uHzuWePvfof/KsWPg3Y8dY/z96t+nrn3FFKMfOxZ/51X8h/1i5BiNPdpM73TsmHH/Bbd9+9j07seOJdYf8UFDfz92DB4YGDLNyGPHsAPJ9GMO7DHsxmzDbsww5sARw27M/vaNcQfOHnZjpjU32XCtQW+/bc+I5c4ybLkLTDbo7Sd/9cwLHj3G3m+9Ne2IdZlltAPriO1j6Kg/HxecbPiwjXwsLffuLYbfN/2I5c76byx35GNpufNsNvy+GUYsd7bRljvGuyx35GNH7g/DZn17f5hx0D/84Sfsv4uMtv8OGnlYH+UhI7/GGv414WUjPxsK9pd/67hD++8k77K+7/K5Vri9DZu2w5JXnPrf9blWtL7jvPv6vtPncL/j+m4w7lZL/Tes76BR1vcftrNN5xu+rcw4Yjub89/Yfkc+dvTj2Jhv3zucYcZ/5Ti2wD8dx7YfY/BoKz9K7/Q70Fow//Drk/9tafMeOcbEI8d+zNGW+1/9DjTjux/HJll/tMctcvDAIBrzhx8/bL2x/4sxH3PgH39XHznmIx/7bmM+wz+P+aB/GvN53n3M/9XfO2ecZvj9Y7zLmA/eefMlR475WP/mmM/w7475AgNj0JjvccDwcXu34+k7jfnIx/7jmA8Z+NLAwMC0I8Z8+n9lO5/lv2c7Hw/mH379gb9NumSKM3Yb5Rgz6N8Z8+n/3TEf+rftfNq375t68MBYYw1stcYWW2w26/B/R96cbfi/fCx6+v7h4/xuP0vfyWjkY99tv5j2XzEa+t9j9JEh/zz/yBcdI28vf/Yxk/7/PRZN++8ZDVpkgI9Fp1w0fNze7feidxrzkY+ln4NDR3n86K/r3uX9KPE5DZu23/773D5ykSMe1vtR/uv9w2Y78r/xrT/6Qb7+U+u//7vL313+7vJ3l7+4dzj//7f3/394kmUfG/Eiecw951t3zfd6fd/j/qPP/4/w/Yfz/2uuO9+ew14KjrjvXc/PDp/nf+X52bmHX0x4zcj5Rj8/yCv6zudnZ9hrpmUG/mfOz/7/auS++i+8ju/47y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Duf/R/6N8tAD37h/uxEnQsfcd58133iv1/c97j/6/P8I3384///GmvvsO3jgb/e96/n/4fM4zv8vdeDeJw38Lz7/P3Jf7fx//Rfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7i3uH8/wIj/w5grtXW2XXk3wNsPOsXdnyv1/c97j/1/H+f/++t47+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Ijz/wOjfazj0m0XGJz//7/dO/h/LX/M4r9M/pjFf9n8MYv/cvljFv/l88cs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9v5I9Z/L+ZP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/b+WPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP7fzh+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx3zx/zOK/Rf6Yxf+7+WMW/+/lj1n8t8wfs/hvlT9m8d86f8ziv03+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMV/2/wxi/92+WMW/+3zxyz+P84fs/jvkD9m8f9J/pjFf8f8MYv/TvljFv+f5o9Z/HfOH7P475I/ZvHfNX/M4v+z/DGL/275Yxb/n+ePWfx/kT9m8d89f8ziv0f+mMV/z/wxi/8v88cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/+v8scs/gfkj1n8D8wfs/j/On/M4v+b/DGL/0H5Yxb/3+aPWfwPzh+z+B+SP2bxPzR/zOL/u/wxi//v88cs/oflj1n8/5A/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/n/MH7P4H5M/ZvH/U/6Yxf/Y/DGL/3H5Yxb/P+ePWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/1/yxyz+p+SPWfz/mj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n8Bw3kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP7vyx+z+L8/f8zi/4H8MYv/B/PHLP4fyh+z+E+eP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnyJ/zOL/8fwxi/+U+WMW/6H5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv9P5I9Z/D+ZP2bx/1T+mMX/0/ljFv/P5I9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bx/2L+mMX/S/ljFv9F8scs/ovmj1n8v5w/ZvFfLH/M4v+V/DGL/+L5Yxb/JfLHLP5fzR+z+C+ZP2bxXyp/zOK/dP6Yxf9r+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bx/3r+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+H8jf8zi/838MYv/qvljFv/V8scs/qvnj1n818gfs/h/K3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f92/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9O/pjFf7P8MYv/5vljFv8t8scs/t/NH7P4fy9/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP7b5o9Z/LfLH7P4b58/ZvH/cf6YxX+H/DGL/0/yxyz+O+aPWfx3yh+z+P80f8ziv3P+mMV/l/wxi/+u+WMW/5/lj1n8d8sfs/j/PH/M4v+L/DGL/+75Yxb/PfLHLP575o9Z/H+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/H+VP2bxPyB/zOJ/YP6Yxf/X+WMW/9/kj1n8D8ofs/j/Nn/M4n9w/pjF/5D8MYv/ofljFv/f5Y9Z/H+fP2bxPyx/zOL/h/wxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bx/2P+mMX/mPwxi/+f8scs/sfmj1n8j8sfs/j/OX/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8/5I/ZvE/JX/M4v/X/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOL/9tX8/zmL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv/J88cs/h/OH7P4fyR/zOL/0fwxi//H8scs/lPkj1n8P54/ZvGfMn/M4j80f8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/ifwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4r9A/pjFf8H8MYv/QvljFv+F88cs/l/MH7P4fyl/zOK/SP6YxX/R/DGL/5fzxyz+i+WPWfy/kj9m8V88f8ziv0T+mMX/q/ljFv8l88cs/kvlj1n8l84fs/h/LX/M4r9M/pjFf9n8MYv/cvljFv/l88cs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9v5I9Z/L+ZP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/b+WPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP7fzh+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx3zx/zOK/Rf6Yxf+7+WMW/+/lj1n8t8wfs/hvlT9m8d86f8ziv03+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMV/2/wxi/92+WMW/+3zxyz+P84fs/jvkD9m8f9J/pjFf8f8MYv/TvljFv+f5o9Z/HfOH7P475I/ZvHfNX/M4v+z/DGL/275Yxb/n+ePWfx/kT9m8d89f8ziv0f+mMV/z/wxi/8v88cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/+v8scs/gfkj1n8D8wfs/j/On/M4v+b/DGL/0H5Yxb/3+aPWfwPzh+z+B+SP2bxPzR/zOL/u/wxi//v88cs/oflj1n8/5A/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/n/MH7P4H5M/ZvH/U/6Yxf/Y/DGL/3H5Yxb/P+ePWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/1/yxyz+p+SPWfz/mj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n8xxjIH7P4D8ofs/gPzh+z+I+RP2bxH5I/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8Z88f8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP0X+mMX/4/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/gvkj1n8F8wfs/gvlD9m8V84f8zi/8X8MYv/l/LHLP6L5I9Z/BfNH7P4fzl/zOK/WP6Yxf8r+WMW/8Xzxyz+S+SPWfy/mj9m8V8yf8ziv1T+mMV/6fwxi//X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi//X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9G/pjF/5v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Vv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/t/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+d/DGL/2b5Yxb/zfPHLP5b5I9Z/L+bP2bx/17+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfy3zR+z+G+XP2bx3z5/zOL/4/wxi/8O+WMW/5/kj1n8d8wfs/jvlD9m8f9p/pjFf+f8MYv/LvljFv9d88cs/j/LH7P475Y/ZvH/ef6Yxf8X+WMW/93zxyz+e+SPWfz3zB+z+P8yf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+P8qf8zif0D+mMX/wPwxi/+v88cs/r/JH7P4H5Q/ZvH/bf6Yxf/g/DGL/yH5Yxb/Q/PHLP6/yx+z+P8+f8zif1j+mMX/D/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi/8f8MYv/MfljFv8/5Y9Z/I/NH7P4H5c/ZvH/c/6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4/yV/zOJ/Sv6Yxf+v+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/yED+mMV/UP6YxX9w/pjFf4z8MYv/kPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9E/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/L+aPWfy/lD9m8V8kf8ziv2j+mMX/y/ljFv/F8scs/l/JH7P4L54/ZvFfIn/M4v/V/DGL/5L5Yxb/pfLHLP5L549Z/L+WP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/r+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/zfyxyz+38wfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+38scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/2/nj1n8N8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/+/kj1n8N8sfs/hvnj9m8d8if8zi/938MYv/9/LHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4r9t/pjFf7v8MYv/9vljFv8f549Z/HfIH7P4/2QU/zHfi/X6X5rFf8f2f8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8f88cs/sfkj1n8/5Q/ZvE/Nn/M4n9c/pjF/8/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+X/DGL/yn5Yxb/v+aPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/zEH8scs/oPyxyz+g/PHLP5j5I9Z/Ifkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi//Q/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8xf8zi/6X8MYv/IvljFv9F88cs/l/OH7P4L5Y/ZvH/Sv6YxX/x/DGL/xL5Yxb/r+aPWfyXzB+z+C+VP2bxXzp/zOL/tfwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfy/kT9m8f9m/pjFf9X8MYv/avljFv/V88cs/mvkj1n8v5U/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/O3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjFf/P8MYv/FvljFv/v5o9Z/L+XP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zh/zOK/Q/6Yxf8n+WMW/x3zxyz+O+WPWfx/mj9m8d85f8ziv0v+mMV/1/wxi//P8scs/rvlj1n8f54/ZvH/Rf6YxX/3/DGL/x75Yxb/PfPHLP6/zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP6/yh+z+B+QP2bxPzB/zOL/6/wxi/9v8scs/gflj1n8f5s/ZvE/OH/M4n9I/pjF/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH2sgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/x/zxyz+x+SPWfz/lD9m8T82f8zif1z+mMX/z/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/5f8MYv/KfljFv+/5o9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/sQfyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzF/zOL/pfwxi/8i+WMW/0Xzxyz+X84fs/gvlj9m8f9K/pjFf/H8MYv/EvljFv+v5o9Z/JfMH7P4L5U/ZvFfOn/M4v+1/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+RP2bx/2b+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/lT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H87f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMV/8/wxi/8W+WMW/+/mj1n8v5c/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv9t88cs/tvlj1n8t88fs/j/OH/M4r9D/pjF/yf5Yxb/HfPHLP475Y9Z/H+aP2bx3zl/zOK/S/6YxX/X/DGL/8/yxyz+u+WPWfx/nj9m8f9F/pjFf/f8MYv/HvljFv8988cs/r/MH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/KH7P4H5A/ZvE/MH/M4v/r/DGL/2/yxyz+B+WPWfx/mz9m8T84f8zif0j+mMX/0Pwxi//v8scs/r/PH7P4H5Y/ZvH/Q/6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/zF/zOJ/TP6Yxf9P+WMW/2Pzxyz+x+WPWfz/nD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8kfs/ifkj9m8f9r/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfZyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8if8zi/8n8MYv/p/LHLP6fzh+z+H8mf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/F/PHLP5fyh+z+C+SP2bxXzR/zOL/5fwxi/9i+WMW/6/kj1n8F88fs/gvkT9m8f9q/pjFf8n8MYv/UvljFv+l88cs/l/LH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/1/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjF/xv5Yxb/b+aPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf9b+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/7fzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/3fyxyz+m+WPWfw3zx+z+G+RP2bx/27+mMX/e/ljFv8t88cs/lvlj1n8t84fs/hvkz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8d82f8ziv13+mMV/+/wxi/+P88cs/jvkj1n8f5I/ZvHfMX/M4r9T/pjF/6f5Yxb/nfPHLP675I9Z/HfNH7P4/yx/zOK/W/6Yxf/n+WMW/1/kj1n8d88fs/jvkT9m8d8zf8zi/8v8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zi/6v8MYv/AfljFv8D88cs/r/OH7P4/yZ/zOJ/UP6Yxf+3+WMW/4Pzxyz+h+SPWfwPzR+z+P8uf8zi//v8MYv/YfljFv8/5I9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/H/PHLP7H5I9Z/P+UP2bxPzZ/zOJ/XP6Yxf/P+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOL/l/wxi/8p+WMW/7/mj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv9xB/LHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+2H+i/5gjro7qP2n+2H+iP+3/k+WPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8Z88f8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP0X+mMX/4/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/gvkj1n8F8wfs/gvlD9m8V84f8zi/8X8MYv/l/LHLP6L5I9Z/BfNH7P4fzl/zOK/WP6Yxf8r+WMW/8Xzxyz+S+SPWfy/mj9m8V8yf8ziv1T+mMV/6fwxi//X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi//X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9G/pjF/5v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Vv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/t/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+d/DGL/2b5Yxb/zfPHLP5b5I9Z/L+bP2bx/17+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfy3zR+z+G+XP2bx3z5/zOL/4/wxi/8O+WMW/5/kj1n8d8wfs/jvlD9m8f9p/pjFf+f8MYv/LvljFv9d88cs/j/LH7P475Y/ZvH/ef6Yxf8X+WMW/93zxyz+e+SPWfz3zB+z+P8yf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+P8qf8zif0D+mMX/wPwxi/+v88cs/r/JH7P4H5Q/ZvH/bf6Yxf/g/DGL/yH5Yxb/Q/PHLP6/yx+z+P8+f8zif1j+mMX/D/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi/8f8MYv/MfljFv8/5Y9Z/I/NH7P4H5c/ZvH/c/6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4/yV/zOJ/Sv6Yxf+v+WMW/1Pzxyz+p+WPWfxPzx+z+J/xj/7j/o+v1//SLP5ntv9jFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/Arn/oHd4/hb/C+X+75TF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif94A/ljFv93+vxbexb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX9o/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+YP2bx/1L+mMV/kfwxi/+i+WMW/y/nj1n8F8sfs/h/JX/M4r94/pjFf4n8MYv/V/PHLP5L5o9Z/JfKH7P4L50/ZvH/Wv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP7fyB+z+H8zf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38ofs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/nT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8ziv3n+mMV/i/wxi/9388cs/t/LH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/tvljFv/t8scs/tvnj1n8f5w/ZvHfIX/M4v+T/DGL/475Yxb/nfLHLP4/zR+z+O+cP2bx3yV/zOK/a/6Yxf9n+WMW/93yxyz+P88fs/j/In/M4r97/pjFf4/8MYv/nvljFv9f5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9f5Y9Z/A/IH7P4H5g/ZvH/df6Yxf83+WMW/4Pyxyz+v80fs/gfnD9m8T8kf8zif2j+mMX/d/ljFv/f549Z/A/LH7P4/yF/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/P+YP2bxPyZ/zOL/p/wxi/+x+WMW/+Pyxyz+f84fs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/7/kj1n8T8kfs/j/NX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH5P4jz+QP2bxH5Q/ZvEfnD9m8R8jf8ziPyR/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4j95/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf4r8MYv/x/PHLP5T5o9Z/Ifmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/4v5Yxb/L+WPWfwXyR+z+C+aP2bx/3L+mMV/sfwxi/9X8scs/ovnj1n8l8gfs/h/NX/M4r9k/pjFf6n8MYv/0vljFv+v5Y9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjF/+v5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4v+N/DGL/zfzxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/rfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf/b+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf87+WMW/83yxyz+m+ePWfy3yB+z+H83f8zi/738MYv/lvljFv+t8scs/lvnj1n8t8kfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/hvmz9m8d8uf8ziv33+mMX/x/ljFv8d8scs/j/JH7P475g/ZvHfKX/M4v/T/DGL/875Yxb/XfLHLP675o9Z/H+WP2bx3y1/zOL/8/wxi/8v8scs/rvnj1n898gfs/jvmT9m8f9l/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8f9V/pjF/4D8MYv/gfljFv9f549Z/H+TP2bxPyh/zOL/2/wxi//B+WMW/0Pyxyz+h+aPWfx/lz9m8f99/pjF/7D8MYv/H/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/4/5Yxb/Y/LHLP5/yh+z+B+bP2bxPy5/zOL/5/wxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/0v+mMX/lPwxi/9f88cs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/BAP5Yxb/QfljFv/B+WMW/zHyxyz+Q/LHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/pPnj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8p8gfs/h/PH/M4j9l/pjFf2j+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf8T+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjFf4H8MYv/gvljFv+F8scs/gvnj1n8v5g/ZvH/Uv6YxX+R/DGL/6L5Yxb/L+ePWfwXyx+z+H8lf8ziv3j+mMV/ifwxi/9X88cs/kvmj1n8l8ofs/gvnT9m8f9a/pjFf5n8MYv/svljFv/l8scs/svnj1n8v54/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/t/IH7P4fzN/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP7fyh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/L+dP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/L+TP2bx3yx/zOK/ef6YxX+L/DGL/3fzxyz+38sfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi//388cs/j/IH7P4/zB/zOL/o/wxi/+2+WMW/+3yxyz+2+ePWfx/nD9m8d8hf8zi/5P8MYv/jvljFv+d8scs/j/NH7P475w/ZvHfJX/M4r9r/pjF/2f5Yxb/3fLHLP4/zx+z+P8if8ziv3v+mMV/j/wxi/+e+WMW/1/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/1/lj1n8D8gfs/gfmD9m8f91/pjF/zf5Yxb/g/LHLP6/zR+z+B+cP2bxPyR/zOJ/aP6Yxf93+WMW/9/nj1n8D8sfs/j/IX/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8/5j/Pzf2iEuB/zH5Y5b9/0/5Yxb/Y/PHLP7H5Y9Z/P+cP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/yR+z+J+SP2bx/2v+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8Z9wIH/M4j8of8ziPzh/zOI/Rv6YxX9I/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/gPzR+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8X88cs/l/KH7P4L5I/ZvFfNH/M4v/l/DGL/2L5Yxb/r+SPWfwXzx+z+C+RP2bx/2r+mMV/yfwxi/9S+WMW/6Xzxyz+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx3zZ/zOK/Xf6YxX/7/DGL/4/zxyz+O+SPWfx/kj9m8d8xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PH/hP9Bw0MbDcwmv8h+WP/if60/x+aP2bx/13+mMX/9/ljFv/D8scs/n/IH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv8/5o9Z/I/JH7P4/yl/zOJ/bP6Yxf+4/DGL/5/zxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf8v+WMW/1Pyxyz+f80fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+r8h/rX57T4v+cyv9fz+L/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/hMN5I9Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9i/pjF/0v5Yxb/RfLHLP6L5o9Z/L+cP2bxXyx/zOL/lfwxi//i+WMW/yXyxyz+X80fs/gvmT9m8V8qf8ziv3T+mMX/a/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f96/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/I3/M4v/N/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyt/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/dv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/+b5Yxb/LfLHLP7fzR+z+H8vf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+2+aPWfy3yx+z+G+fP2bx/3H+mMV/h/yxUf3HHfjP9f9J/phl/98xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT82mv/x/6n+R+aPWfb/o/LHLP5H549Z/P+YP2bxPyZ/zOL/p/wxi/+x+WMW/+Pyxyz+f84fs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/7/kj1n8T8kfs/j/NX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8sfeeuutbQ3+T+aPWfb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+Ew/kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+f//7Fz9/Fa1/Udx3/AFyVT0LlaaBiBKJoKgopk3qClHoGj3VhKgpLizQRlSoGulOzG2spZrnJtpXmTOlMLZ801HOWc00WzotpmY2zmWCtclhO3SvY4cA5xTh/OPD9+/dz6PJ9/wLmu0+cKeT3qzXV4HENZ+u+ofyhL/530D2XpP1z/UJb+I/QPZem/s/6hLP130T+Upf+v6R/K0n9X/UNZ+v+6/qEs/V+kfyhL/xfrH8rS/zf0D2Xp/xL9Q1n6j9Q/lKX/bvqHsvTfXf9Qlv4v1T+Upf8o/UNZ+u+hfyhL/5fpH8rSf7T+oSz9X65/KEv/MfqHsvQfq38oS/899Q9l6T9O/1CW/nvpH8rSf2/9Q1n6j9c/lKX/PvqHsvTfV/9Qlv6v0D+Upf9++oey9N9f/1CW/gfoH8rSf4L+oSz9J+ofytL/QP1DWfpP0j+Upf9k/UNZ+h+kfyhL/4P1D2Xpf4j+oSz9p+gfytL/UP1DWfpP1T+Upf8r9Q9l6X+Y/qEs/V+lfyhL/8P1D2Xpf4T+oSz9j9Q/lKX/UfqHsvSfpn8oS/+j9Q9l6X+M/qEs/V+tfyhL/9foH8rS/1j9Q1n6H6d/KEv/4/UPZenfoX8oS/8T9A9l6T9d/1CW/jP0D2XpP1P/UJb+nfqHsvQ/Uf9Qlv4n6R/K0v+1+oey9H+d/qEs/V+vfyhL/zfoH8rS/2T9Q1n6v/F/679hxC/5F/Z/U5b+b/K//1CW/qfoH8rS/1T9Q1n6z9I/lKX/m/UPZel/mv6hLP1n6x/K0n+O/qEs/U/XP5Sl/xn6h7L0n6t/KEv/t+gfytL/TP1DWfqfpX8oS/95+oey9D9b/1CW/ufoH8rS/1z9Q1n6n6d/KEv/39Q/lKX/+fqHsvSfr38oS/8F+oey9L9A/1CW/hfqH8rSf6H+oSz9f0v/UJb+F+kfytL/Yv1DWfov0j+Upf9b9Q9l6f82/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZen/2/qHsvR/u/6hLP3foX8oS//L9A9l6X+5/qEs/ZfqH8rS/536h7L0v0L/UJb+79I/lKX/u/UPZen/Hv1DWfq/V/9Qlv5X6h/K0v99+oey9H+//qEs/X9H/1CW/r+rfyhL/w/oH8rS/4P6h7L0v0r/UJb+v6d/KEv/q/UPZen/If1DWfp/WP9Qlv7X6B/K0v/39Q9l6f8R/UNZ+n9U/1CW/h/TP5Sl/7X6h7L0/wP9Q1n6f1z/UJb+f6h/KEv/P9I/lKX/J/QPZen/Sf1DWfpfp38oS//r9Q9l6f8p/UNZ+t+gfyhL/xv1D2Xpf5P+oSz9b9Y/lKX/p/UPZel/i/6hLP1v1T+Upf9t+oey9P9j/UNZ+t+ufyhL/8/oH8rS/w79Q1n636l/KEv/u/QPZen/Wf1DWfp/Tv9Qlv7L9A9l6X+3/qEs/f9E/1CW/vfoH8rS//P6h7L0/4L+oSz9/1T/UJb+9+ofytL/z/QPZen/Rf1DWfr/uf6hLP2X6x/K0v8+/UNZ+v+F/qEs/VfoH8rS/0v6h7L0/7L+oSz979c/lKX/X+ofytL/Af1DWfr/lf6hLP0f1D+Upf9f6x/K0v8h/UNZ+j+sfyhL/7/RP5Sl/1f0D2Xpv1L/UJb+X9U/lKX/3+ofytL/Ef1DWfp/Tf9Qlv5f1z+Upf839A9l6b9K/1CW/t/UP5Sl/7f0D2Xp/239Q1n6/53+oSz9/17/UJb+/6B/KEv/R/UPZen/Hf1DWfr/o/6hLP1X6x/K0v+f9A9l6b9G/1CW/v+sfyhL/3/RP5Sl/2P6h7L0/67+oSz9H9c/lKX/v+ofytJ/rf6hLP3/Tf9Qlv7f0z+Upf+/6x/K0v/7+oey9P+B/qEs/dfpH8rS/wn9Q1n6/4f+oSz9f6h/KEv/J/UPZen/o9T9y1Y/k6X/j1P337os/Z/SP5Sl/3/qH8rS/2n9Q1n6r9c/lKX/M/qHsvT/L/1DWfr/t/6hLP1/on8oS/+f6h/K0v9n+oey9H9W/1CW/hv0DyXpv3OlfyhL/0H6h7L0H6x/KEv/IfqHsvQv+oey9B+qfyhL/+30D2Xpv73+oSz9h+kfytL/BfqHsvTfQf9Qlv4v1D+Upf+O+oey9N9J/1CW/sP1D2XpP0L/0K9cfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgqjo6p60bMqjXU0O2fDBq5byNPx+0/pRzb77587v0/Nz96enBSw7e8sGGDRs2DH6q+kr3w+2rqur6b9u5+/Gwvsddr3/5tGvHb3pURt/wzL63L37m6PfeterW9cfdMv32oRufHVqdcfZ58+dNHFxVZezQaknXgwMHVVXZa2h1ddeDSV0P9h5a3dr1YPLGBy+oVnQ9OODMC+ef1fXE+Nq/ZwDw/11H59JqSK/Frnr9aWDL/b982t1Le37u5yV7Xq1U3ft/77Jd39bncz22sv89r19e3nf/B/wPCAD8goHt//2je37u5yV/4f3/zAs+uir63Nb3v+f1yxj7DwDNC77+32uj+37dv8/X/6M/B2y+P//0a7bv2v9b1p+8qPup8ly+/v/z1y9j++7/4F5f/x9UVWXPnq//b19VZdw2/nYAQAodne9c19/7//73v+zW52bQlvu/yx0rTu7a/9U73PXi7qeGDnD/9+zv/f+xfX6tAMBz09H5qQ193v8PYP+rvYKX3Lz/xyx56EVd+/+11d8dvcXnBrL/4/ru/4RFCxZOuPiSS/c/b8Hcc+adM++CqVOmHHrwlEOmTpqw8SsCm37cxt8UAPgVt23v/6sd+twMqqrHN99/YPmoh7r2f9LHjz+3+6lhA9z/vfp9/z/a+38A6GXM4Gq77aolcxctuujATT/2PJy06cdN/7Fg/wfw9/9je76Jrud7BgdV1Us233de/L7BXft/49jdlnc/td0A93/vfvf/qN7fqwgAPDfb+P7/rD43vfZ/xJDbpnbt/wnj9rmy+6mB/v3/+H73/3rv/wGgjo7O6pf6Jrpr/6/Y8WfX1bsu+/j+PwBoXhv7/8Sod42pd132tf8A0Lw29n/ekTvdU++6vML+A0Dz2tj/BzuumV3vuuxn/wGgeW3s/4zzRz1c77rsb/8BoHlt7P/oS89cXO+6HGD/AaB5bez/7aesW1Pvukyw/wDQvDb2/7Rhq5+sd10m2n8AaF4b+//tfU86u951OdD+A0Dz2tj/Lx52wKP1rssk+w8AzWtj/yeOvH5Gvesy2f4DQPPa2P8PX3jETfWuy0H2HwCa18b+j5z52cn1rsvB9h8AmtfG/r/1tK9eVe+6HGL/AaB5bez/s5cdNbLedZli/wGgeW3s/4oH95hV77ocav8BoHlt7P/0x69eWe+6TLX/ANC8NvZ/76eeWFjvurzS/gNA89rY/89864y19a7LYfYfAJrXxv4Pv/7ZEfWuy6vsPwA0r439f88VC6+td10Ot/8A0Lw29v971wwfV++6HGH/AaB5bez/Wz63dFm963Kk/QeA5rWx/19/bPL0etflKPsPAM1rY/9P/dLy79S7LtPsPwA0r439P/iR++fWuy5H238AaF4b+3/fj2Y+Xe+6HGP/AaB5bez/S9/9jT3qXZdX238AaF4b+/+xT89+f73r8hr7DwDNa2P/f/KFsQfVuy7H2n8AaF4b+7/wI3fcWO+6HGf/AaB5bex/534/XlPvuhxv/wGgeW3s/wPD37G43nXpsP8A0Lw29v+2lw15uN51OcH+A0Dz2tj/MYd/cHa96zLd/gNA89rY/6XTd72n3nWZYf8BoHlt7P8Lz/vEmHrXZab9B4DmtbH/5yx57Lp616XT/gNA89rY/x/MWjCs3nU50f4DQPPa2P/dd5gzst51Ocn+A0Dz2tj/q8c/clW96/Ja+w8AzWtj/3869c7J9a7L6+w/ADSvjf1fvPvom+pdl9fbfwBoXhv7/80F982od13eYP8BoHlt7P+cEyc+Wu+6nGz/AaB5bez/pDmdZ9e7Lm+0/wDQvDb2/963r3iy3nV5k/0HgOa1sf9XPvDJZfWuyyn2HwCa18b+77h253H1rsup9h8AmtfG/p/x9AXX1rsus+w/ADSvjf3//qo1I+pdlzfbfwBoXhv733HDZWvrXZfT7D8ANK+N/f/y0h8urHddZtt/AGheG/t/54euWlnvusyx/wDQvDb2f9zd1ax61+V0+w8Azbv4kkvPnzt//ryLfOADH/hg8wfP9/8zAQAATfv5H/qf718JAAAAAAAAAAAAAAAAAAAA5NXGv07s+f5nBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+hx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAAAE+VuvMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//XuvQlg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x3f00, 0x1f}) 2m5.227242138s ago: executing program 6 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000ff0000000a0001"], 0x2c}}, 0x0) 2m4.263110473s ago: executing program 6 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@stripe}, {@noblock_validity}]}, 0x83, 0x453, &(0x7f0000001f80)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$eJzs289vFFUcAPDvzLZg+WEr4g9+qFU0Nv5oaUHl4EGNJh40MfGCx9oWgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwEU1M1szuDLs77C4U2i5lP59k4L2d17733Tdv9715nQAG1nj2TxKxLSJ+j4jRRra9wHjjvyuXz879c/nsXBK12tt/JfVyf18+O1cULX5ua56ZSCPSz5LY06HepdNnjs9Wqwun8vzU8on3p5ZOn3n22InZowtHF07OHDp08MD0C8/PPHeDkfxX63X2nqytuz9a3Lvr9XcuvDl3+MK7P3+bFPGX4lgl471OPlHr2dwNZ3tLOhnqY0NYkUpEZN01XB//o1GJZueNxmuf9rVxwJqq5bqcPlcD7mBJ9LsFQH8UX/TZ+rc41m/20X+XXm4sgLK4r+RH48xQpNFYGA2X1reraTwiDp/796vsiLW5DwEA0Ob7bP7zTKf5Xxr3t5S7O98bGsv3UnZExL0RsTMi7ouol30gIh5cYf3lTZJr5z/pxZsK7AZl878X872t9vlfWhQZq+S57fXMcHLkWHVhf/6eTMTw5iw/3aOOH1797Ytu51rnf9mR1V/MBfN2XBza3P4z87PLs7cSc6tLn0TsHuoUf3J1JyCJiF0Rsfsm6zj21Dd7u50rxT/SvvlY9lJ7dhX2mWpfRzzZ6P9zUYq/kPTen5y6K6oL+6eKq+Jav/x6/q1u9V+//9dW1v9bOl7/V+MfS1r3a5dWXsf5Pz7vuqaZXPH1vyk65T6cXV4+NR2xKXmj0ejW12ea5Yt8UT6Lf2Jf5/G/I5rvxJ6IyC7ihyLi4Yh4JO+7RyPisYjYVw4sbSZ/euXx95q59gv8duj/+VL/j7UXKfV/M7Epyq90TlSO//hd+29sJm/s8+9gPTWRv5J9/l1v97y1FUmPBt7auwcAAAAbQxoR2yJJJ6+m03RysvE3/DtjS1pdXFp++sjiByfnG88IjMVwWtzpatwPbtwPnc6X9UV+ppQ/kN83/rIyUs9Pzi1W5/sdPAy4rV3Gf+bPSr9bB6w5z2vB4DL+YXAZ/zC4jH8YXB3G/0g/2gGsv07f/x83k7XR9WwMsK5K49+2HwwQ638YXMY/DK7W8d/z+XvgTrI0Er0f3h+ARHp7NGODJSLtW+3pqv/mZI1Hwbb+99dKE/3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wcAAP//nHbk3g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 2m3.184306755s ago: executing program 6 (id=275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x40, r2, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m2.06934289s ago: executing program 6 (id=287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "78e99e15"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x5, "526ac71fdb"}, 0x0, 0x0, 0x0, 0x0}) 2m1.830205129s ago: executing program 33 (id=287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "78e99e15"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x5, "526ac71fdb"}, 0x0, 0x0, 0x0, 0x0}) 1m51.874118564s ago: executing program 2 (id=349): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 1m51.535354479s ago: executing program 2 (id=353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m51.254275819s ago: executing program 2 (id=355): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1m50.991670156s ago: executing program 2 (id=357): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x1, 0x550b, &(0x7f00000079c0)="$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") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) 1m48.995751143s ago: executing program 2 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x5bec, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000300)=[0x80000001], 0x2) 1m46.03126025s ago: executing program 2 (id=384): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d69736f383835392d362c696e746567726974792c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c67727071756f74612c67727071756f7461006e6f71756f74612c6572726f72733d63612297e375d3f66f6e74696e75652c756d61736b3d30783030303030303030303030303062fe78ddf30ffefff4ac7aa80df8d01d61b9e725256adec93aec6e89bfd090cfa8412cc716e10a0136247338e0909723773ad2e4b40e96d3ed8a0498cc0cdf859f6d675c279e2b91000000000c00000000", @ANYRESDEC=0x0, @ANYBLOB=',resize=0x0000000000000003,nointegrity,iocharset=ascii,usrquota,func=MMAP_CHECK,pcr=00000000000000000004,fowner>', @ANYRESDEC=0x0, @ANYBLOB="b5f7"], 0x1, 0x6166, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m45.761986781s ago: executing program 34 (id=384): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d69736f383835392d362c696e746567726974792c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c67727071756f74612c67727071756f7461006e6f71756f74612c6572726f72733d63612297e375d3f66f6e74696e75652c756d61736b3d30783030303030303030303030303062fe78ddf30ffefff4ac7aa80df8d01d61b9e725256adec93aec6e89bfd090cfa8412cc716e10a0136247338e0909723773ad2e4b40e96d3ed8a0498cc0cdf859f6d675c279e2b91000000000c00000000", @ANYRESDEC=0x0, @ANYBLOB=',resize=0x0000000000000003,nointegrity,iocharset=ascii,usrquota,func=MMAP_CHECK,pcr=00000000000000000004,fowner>', @ANYRESDEC=0x0, @ANYBLOB="b5f7"], 0x1, 0x6166, &(0x7f0000000700)="$eJzs3c9vHGf9B/DP/vD6R79NrR6qfiuE3LT8KKVJnJQQKND2AAcuPaBcUSLXrSJSQElAaWURV75w4MRfAELiiBBHxIE/oAeu3HriRCQbCdQTg8Z+nni82e06dbyz9vN6Sc7MZ55Z7zN+7+yPzMw+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE97/3g9VORFz7eVqwHPF/0YvoRizW9UpELK4s5/X7EfFs7DbHMxExNx9R3373n6ciXo2Ij85EbO9srNWLLx6yH9/9499/98Mn3vrbH+bO/+dPd3qvjVvv7t1f/fvP9462zQAAAFCaqqqqTvqY/1z6fN9tu1MAwFTk1/8qyctPff3rf7z1l1nqT3n1/TONRTPQH7VarS6ibqpGu9csImKzeZv6PYPD8QBwwmzGJ213gRbJv2j9iHii7U4AM63Tdgc4Fts7G2udlG+n+XqwsteezwU5kP9m58H1HeOmkwyfYzKtx9dW9OLpMf1ZnFIfZknOvzuc/7W99kFa77jzn5Zx+Q/2Ln0qTs6/N5z/kNOTf3dk/qXK+fcfKf+e/AEAAAAAYIbl//9fbvn47/zRN+VQPu3478qU+gAAAAAAAAAAj9tRx/97wPh/AAAAMLPqz+q135zZXzbuu9jq5Vc7EU8OrQ8UJl0ss9R2PwAAAAAAAAAAAACgJP29c3ivdiLmIuLJpaWqquqfpuH6UR319idd6dsPJWv7SR4AAPZ8dGboWv5OxEJEXE3f9Te3tLRUVQuLS9VStTif388O5heqxcbn2jytl80PDvGGuD+o6l+20Lhd06TPy5Pah39ffV+DqneIjj0mc+mvOaa5pbABINl7Ndr2inTKVNVT4958wAH2/1NoOZbbflwx+9p+mAIAAADHr6qqqpO+zvu5dMy/23anAICpyK//w8cFjlR3x7RHPJ7fr1ar1Wq1+jPVTdVo95pFRGw2b1O/ZzAcPwCcMJvxSdtdoEXyL1o/Ip5tuxPATOu03QGOxfbOxlon5dtpvh6k8d3zuSAH8t/s7N4u337UdJLhc0ym9fjail48PaY/z0ypD7Mk598dzv/aXvsgrXfc+U/LuPwHu5fMlSfn3xvOf8jpyb87Mv9S5fz7j5R/T/4AAAAAADDD8v//Lzv+mzcZAAAAAAAAAE6c7Z2NtXzdaz7+/7kR67n+83TK+XceNf/FNC//Ey3n3x3K/8tD6/Ua8/ff3N///7Wzsfb7O//8/zw9bP7zeaaTHlmd9IjopHvq9NP0KFv3sK2Pe4P6nuY63V4/nfNTzb0TN+JmrMeFA+t2099jv331QHvd07kD7RcPtPcfar90oH0ufe9AtZjbz8Va/CRuxtu77XXb/ITtX5jQXk1oz/n3PP8XKeffb/zU+S+l9s7QtHb/w+5D+31zOup+3rjx+V9eOP7NmWgreg+2ranevrMt9Gf3b/LEIH52e/3WubvX79y5tRppcmDpxUiTxyznP7f7M7///P/CXnt+3m/ur/c/HDxy/rNiK/pj83+hMV9v70tT7lsbcv6D9JPzfzu1j97/T3L+4/f/l1voDwAAAAAAAAAAAAAAAHyaqqp2LxF9IyIup+t/2ro2EwCYrvz6XyV5uVqtVqvV6tNXN1Wjvd4sIuKvzdvU7xl+MeqXAQCz7L8R8XHbnaA18i9Y/r6/evpi250Bpur2+x/86PrNm+u3brfdEwAAAAAAAADgs8rjf640xn9+MSKWh9Y7MP7rm7Fy1PE/+3nmwQCjj3mg7zG2uoNetzHc+POxOz73uXHjf5+Nh8f/zmPi9prbMcbchPbBhPb5Ce0LI5fupzXyQo+GnP/zjfHO6/yfGxp+vYTxX4fHvC9Bzv9s4/Fc5/+lofWa+Ve/nbn8Nw+74lZ0D+R//s57Pz1/+/0PXrnx3vV3199d//Gl1dULly5fvnLlyvl3btxcv7D37/H0egbk/PPY184DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x+T/5lyfnnzz7yL0vO/6VUy78sOf+vpFr+Zdne2Ziv83851fIvS97/v5pq+Zcl5/9KquVflpz/uVTLvyw5//OpPkT+vh7+FMn55yNc9v+y5PxXUy3/suT8L6Za/mXJ+V9KtfzLkvN/NdXyL0vO/2upln9Zcv6XUy3/suT8v55q+Zcl538l1fIvS87/G6mWf1ly/t9MtfzLkvN/LdXyL0vO/1upln9Zcv7fTrX8y5Lz/06q5V+WnP/rqZZ/Wfa//9+MGTNm8kzbz0wAAAAAAAAAAAAAwLBpnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27i1Grru+A/iZvdhrhxADITipgU1iQnCW7NpOfKFNMeHaAKVAQqEXHNe7Ngu+4bVLoEg2DZRIGBVVVE0f2gJCbaSqIqp4oBWleah6eSrtA32pqCohNaoCCqhIbUWz1cz5//87Mzs7s+udrM+e/+cj2b/dmTNzzpw5M7vftb97AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDdrW+c+2yjKIrmn9ZfO4riBc2Pt03uaF32umu9hQAAAMB6/V/r72dvSBccWcWN2pb5u1f849cXFxcXi/eP/u74FxcX0xWTRTG+tSha10VP/vsHGu3LBI8WE42Rts9HBqx+dMD1YwOuHx9w/ZYB128dcP3EgOuX7YBltpU/j2nd2e7WhzvKXVrcWIy3rtvd41aPNraOjMSf5bQ0WrdZHD9RzBenirlipmP5ctlGa/lv3tpc19uKuK6RtnXtah4hP/zk8bgNjbCPd3esa+k+o++/oZj80Q8/efyPLzxzc685cDd03F+5nXfe1tzOT4dLym1tFFvTPonbOdK2nbt6PCejHdvZaN2u+XH3dj67yu0cXdrMDdX9nE8UI62Pv93aT2PtP9ZL+2lXuOy/by+K4vLSZncvs2xdxUixveOSkaXnZ6I8Ipv30TyUXlyMrek4vXUVx2lzzu7uPE67XxPx+b813G5shW1of5q+/6kty573tR6nUfNRr/Ra6T4Gh/1aqcoxGI+Lb7ce9GM9j8Hd4fF/8o6Vj8Gex06PYzA97rZj8LZBx+DIltHWNqcnodG6zdIxuLdj+dHWmhqt+fQd/Y/B6Qunz00vfPwTr50/fezk3Mm5M/v37p3Zf+DAoUOHpk/Mn5qbKf++yr1dfduLkfQauC3su/gaeHXXsu2H6uKXh/c6nOjzOtzRteywX4dj3Q+usTEvyOXHdPnaeLC50yeujBQrvMZaz8+e9b8O0+Nuex2Otb0Oe35N6fE6HFvF67C5zLk9q/ueZaztT69teL6+FuxoOwa7vx/pPgaH/f1IVY7BiXBc/Ouelb8W7Arb+9jUWr8fGV12DKaHG957mpek7/cnDrVGr+PyluYV120pLi7Mnb/7kWMXLpzfW4SxIV7Sdqx0H6/b2x5Tsex4HVnz8Xpk/hWP3dLj8h1hX028tvnXxIrPVXOZe+7u/1y1vrr13p8dl+4rwhiyjd6fvb6aN/dnypJ99mdzmU9Pr/978ZRL295/x1d4/425/7lyfemuHh0dHytfv6Np74x3vB93PlVjrfeuRmvdz06v7v14PPzZ6PfjG/u8H+/sWnbY78fj3Q8uvh83Bv20Y326n8+JcJycmun/ftxcZue+tR6TY33fj28PsxH2/2tCUki5qO3YWem4TesaGxsPj2ssrqHzON3fsfx4yGbNdT2x7+qO0ztvL+9rND26JRt1nE52LTvs4zS9X610nDYG/fTt6nQ/nxPhuLhxf//jtLnMU/es/71zW/yw7b1zy6BjcHx0S3Obx9NBWL7fL26Lx+DdxfHibHGqmG1du6V1PDVa65q6d3XH4JbwZ6PfK3f2OQbv7Fp22Mdg+jq20rHXGFv+4Ieg+/mcCMfF4/f2Pwaby7zp4HC/d70zXJKWafvetfvnayv9zOuWrt30fP7Mq7mdf3Ow/89mm8ucOrTWnNl/P90VLrmux37qfv2u9JqaLTZmP+0M2/nMoZX3U3N7mst88fAqj6cjRVFc+uj9rZ/3hn9f+fOL3/l6x7+79Po3nUsfvf8H15/427VsPwCb33Pl2F5+rWv7l6nV/Ps/AAAAsCnE3D8SZiL/AwAAQG3E3B//V3gi/wMAAEBtxNw/FmaSSf7f+aZn5p+7VKRm/mIQr0+74YFyudhxnQmfTy4uaV5+/1fnfvyXl1a37pGiKH7ywG/0XH7nA3G7SpNhO598c+fly294aVXrf/ihpeXa++tfCvcfH89qD4NeFdyZoii+ecPnW+uZ/MCV1nzqgYdb8z2XH3u0ucyzh8vP4+2ffkm5/B+E8u+RE8c6bv902A/fC3Pm7b33R7zd1668ZtfB9y2tL96ucdsLWw/78Q+W9xt/T84XHi2Xj/t5pe3/q8898bXm8o+8qvf2Xxrpvf1PhPv9apj/8/Jy+fbnoPl5vN1nwvbH9cXb3f2Vb/Xc/ic/Wy5/7i3lcg+HGdd/Z/h891uemW/fX480jnU8ruKt5XJx/TPf+e3W9fH+4v13b//E0Ssd+6P7+Hjqn8v7me5aPl4e1xP9Rdf6m/fTfnzG9T/xWw937OdB63/yPU+/vHm/3eu/q2u50a7bd//Gpj/8zOd7ri9uz5E/O9fxeI68O7yOw/of/2A4HsP1//vk5zvWGz387s73n7j8l3Zc6ng80dt+VK7/ydefbM3/mPzx71/3gutfePmVzX1XFN9+b3l/g9Z/8o/Odmz/l2/a03o+4vWxo9+9/pXE9Z//2NSZswsX52fb9mrrd+e8o9yerRPbtje394bw3tr9+dGzFz40d35yZnKmKCbr+yv0rtpXwvxBOS6v9fZ7HgrP5y2/983td/zT5+Ll//JgefmVt5dft14dlvtCuHxH+fwtNta5/sdvvan1+m48VX7e0WMfgl27//PQqhYMj7/7+4J4vJ976Yda+6F5XevrRnxdr3P7vztb3s83wn5dDL+Z+babltbXvnz83QhX3lu+3te9/8LbXHxe/yQ83+/8Xnn/cbvi4/1u+D7mWzs73+/i8fGNSyPd99/6LR6Xw/tJcbm8Pi4V9/eVZ2/quXnx95AUl29uff476X5uXtPDXMnCxxemT82fufjI9IW5hQvTCx//xNHTZy+euXC09bs8j3540O2X3p+2t96fZucO3FPMbCuK4mwxswFvWM/P9jc/Wt32n3vo+OzBmTtm504cu3jiwkPn5s6fPL6wcHxuduGOYydOzH1s0O3nZ+/bu+/w/oP7pk7Oz9536PDh/Yen5s+cbW5GuVEDHJj5yNSZ80dbN1m4757De++9956ZqdNnZ+fuOzgzM3Vx0O1bX5ummrf+9anzc6eOXZg/PTe1MP+Jufv2Hj5wYN/A3wZ4+tyJhcnp8xfPTF9cmDs/XT6WyQuti5tf+wbdnnpa+Lfy+9lujfIX8RXvuutA+v2sTV/91Ip3VS7S9QtEnwm/i+YfXnTu0Go+j7l/PMwkk/wPAAAAOYi5f0uYifwPAAAAtRFz/9YwE/kfAAAAaiPm/okwk0zyv/6//v/q+v/l9fr/efX/z3207JVu9v5/7M/r/+fhGvf/171+/X/9//r1/1ffn9/s26//r//PclXr/8fcv60ossz/AAAAkIOY+7eHmcj/AAAAUBsx918XZiL/AwAAQG3E3P+CMJNM8r/+/6r6//sGFa7q3/93/n/9/2Jz9v/jk6P/n4019+/f92DHp/r/gf6//r/+v/6//j/rNr7iNdeq/x9z//VhJpnkfwAAAMhBzP0vDDOR/wEAAKA2Yu6/IcxE/gcAAIDaiLl/R5hJJvlf/9/5//X/9f9r3f9f7/n/2zZG/39zcP7//vT/B7jq/v+E/v9m7P+PD3f7q93/H7j5+v88L6p2/v+Y+18UZpJJ/gcAAIAcxNz/4jAT+R8AAABqI+b+l4SZyP8AAABQGzH33xhmkkn+1//X/9f/1//X/++9/sHn/y8/0v+vFv3//vT/B3D+/7z6/0Pe/mr3/4d9/v/xN3ffXv+fXqrW/4+5/6VhJpnkfwAAAMhBzP03hZnI/wAAAFAbMfe/LMxE/gcAAIDaiLl/Z5hJJvlf/1//X/9f/1//v/f6B/f/S/r/1aL/35/+/wD6//r/+v+r6//3+OZX/59eqtb/j7n/5jCTTPI/AAAA5CDm/lvCTOR/AAAAqI2Y+38qzET+BwAAgNqIuX9XmEkm+V//X/9f/z+v/v9dW/T/9f/rTf+/P/3/AfT/9f/1/1d5/v/l1tL/3zrozqiNqvX/Y+5/eZhJJvkfAAAAchBz/yvCTOR/AAAAqI2Y+18ZZiL/AwAAQG3E3D8ZZpJJ/tf/r1f//0//+vFXFvr/+v8D1r9p+v/l29Jq+//xMND/z5z+f3/6/wPo/+v/6/9vSP+ffFSt/x9z/61hJpnkfwAAAMhBzP23hZnI/wAAAFAbMfffHmYi/wMAAEBtxNy/O8wkk/yv/1+v/n+k/6//32/9m6b/Hzj/v/7/Wuj/99D2ItX/H0D/X/8/+/5//O5X/5/hqFr/P+b+V4WZZJL/AQAAIAcx998RZiL/AwAAQG3E3P/qMBP5HwAAAGoj5v47w0wyyf/6//r/+v/6//r/vdev/785VbD/v2ct66/a+f+36P/r/+v/Z9b/d/5/hqtq/f+Y+18TZpJJ/gcAAIAcxNy/J8xE/gcAAIDaiP9/s/x/r/I/AAAA1FHM/VNhJpnkf/1//f+c+v8N/X/9f/3/2qtg/39Nqtb/d/5//X/9f/1//X/Wo2r9/5j7Xxtmkkn+BwAAgBzE3H93mIn8DwAAALURc/90mIn8DwAAALURc/9MmEkm+V//X/8/p/6/8//r/+v/15/+f3/6/wPo/+fe/w8fXa5P/78o9P+5pqrW/4+5f2+YSSb5HwAAAHIQc/++MBP5HwAAAGoj5v79YSbyPwAAANRGzP33hJlkkv/1//X/9f/1//X/e69f/39z0v/vT/9/AP3/3Pv/zv+v/8+QVa3/H3P/vWEmmeR/AAAAyEHM/QfCTOR/AAAAqI2Y+w+GmYT83+v/dQMAAACbS8z9h8JMMvn3f/3/mvT/f/PvO9at/6//32/9w+n/b9P/D1P/v1pq2v/vfllcNf3/AfT/9f/1//X/Gaqq9f9j7j8cZpJJ/gcAAIAcxNz/ujAT+R8AAABqI+b+nw4zkf8BAACgNmLu/5kwk0zyv/5/Tfr/XfT/9f/7rd/5//X/66ym/f+hqVX/f0T/X/+/Wtuv/6//z3LPf/8/frS6/n/M/feFmWSS/wEAACAHMff/bJiJ/A8AAAC1EXP/68NM5H8AAACojZj7j4SZZJL/9f/1//X/9f+fn/7/64tuVez/Nw8e/f960f/vr1b9f+f/1/+v2Pbr/+v/s1zVzv8fc/8bwkwyyf8AAACQg5j77w8zkf8BAACgNmLuf2OYifwPAAAAtRFz/5vCTDLJ//r/+v/6//r/zv/fe/36/5uT/n9/+v8D6P/r/+v/6/8zVFXr/8fc/+Ywk0zyPwAAAOQg5v63hJnI/wAAAFAbMfe/NcxE/gcAAIDaiLn/bWEmmeR//X/9f/1//X/9/97r1//fnPT/+9P/H0D/X/9f/1//n6GqWv8/5v6fCzPJJP8DAABADmLufyDMRP4HAACA2oi5/+1hJvI/AAAA1EbM/e8IM8kk/+v/6//r/+v/6//3Xr/+/+ak/9+f/v8A+v/6//r/+v8MVdX6/zH3vzPMJJP8DwAAADmIuf/nw0zkfwAAAKiNmPvfFWYi/wMAAEBtxNz/C2EmmeR//X/9/2r1/xcvtd9O/1//vxhW/795I/3/LOj/96f/P0CP/v9W/X/9f/1//X+uWtX6/zH3vzvMJJP8DwAAADmIuf89YSbyPwAAANRGzP3vDTOR/wEAAKA2Yu5/MMwkk/yv/59l/z895Or1/53/X//f+f/1/9dH/78//f8BnP9f/1//X/+foapa/z/m/ofCTDLJ/wAAAJCDmPvfF2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97w8zyST/6/9n2f+v8Pn/69b/H+s4PnLq/0+0PZ/puNT/1//fAPr//en/D6D/r/9f5f5/OJq3rXB7/X+qqGr9/5j7PxBmkkn+BwAAgBzE3P9LYSbyPwAAANRGzP2/HGYi/wMAAEBtxNz/K2EmmeR//X/9f/1/5/93/v/e69f/35z0//vT/x9A/1//v8r9/wH0/6miqvX/Y+7/1TCTFYPfD/5rFQ8TAAAAqJCY+z8YZpLJv/8DAABADmLuPxpmIv8DAABAbcTc/3CYSSb5X/+/u/8fz6i6Gfv/S8ev/r/+f7/16//r/9fZ8Pr/L7u+KPT/9f/1//X/9f/1/1mPqvX/Y+4/FmaSSf4HAACAHMTc/2thJvI/AAAA1EbM/cfDTOR/AAAAqI2Y+2fDTDLJ/9ew/z9ezf6/8/9fbf//J/r/+v+B/n9v+v8bw/n/+9P/H0D/X/9f/1//n6GqWv8/5v65MJNM8j8AAADUWPpxcMz9J8JM5H8AAACojZj7T4aZyP8AAABQGzH3fyjMJJP87/z/+v/O/38t+v9jHcvr/5f0//X/h0H/vz/9/wH0//X/9f/1/xmqqvX/Y+6fDzPJJP8DAABADmLu/3CYifwPAAAAtRFz/0fCTOR/AAAAqI2Y+0+FmWSS//X/9f9z7/83iuKy8//r//dav/7/5qT/35/+/wD6//r/+v/6/wxV1fr/MfefDjPJJP8DAABADmLuPxNmIv8DAABAbfw/e/fRJNd53XG4TRNpZX8Er73y0l7RH8Fb71zltTOdlEgqZ4nKOVA555yonHPOVM6RipSqoOLgnAMMpnEvgGnM3Pue59kcAkWoe4gmVH+NfnX/de//wXl68297P7L/AQAAYES5+/89bmmy//X/+v/u/f/mWJ7/v//v1/+fo//X/+/Cgf7++u1/36Wi8Ev2/3/ztzf+k/5f/6//n6T/1//r/7nY0vr/3P3/Ebc02f8AAADQQe7+/4xb7H8AAAAYRu7+/4pb7H8AAAAYRu7+G+OWJvtf/6//1//r//f1/7fr//X/6+b5/9P0/zP0//p//b/+n51aWv+fu/+/45Ym+x8AAAA6yN3/P3GL/Q8AAADDyN3/v3GL/Q8AAADDyN3/f3FLk/2v/9f/6//X0v+f9Pz/i74e/b/+fxv9/zT9/wz9v/5f/6//Z6eW1v/n7v//uKXJ/gcAAIAOcvffI26x/wEAAGAYufvvGbfY/wAAADCM3P33ilua7H/9v/5f/7+W/v+Inv+v/9f/r9xtm/N/Juj/D9L/z5jp/zcb/f+Uy+7nt39563n/l6D/1/9z0NL6/9z9945b/n6zOXm1XyQAAACwKLn77xO3NPn+PwAAAHSQu/+muMX+BwAAgGHk7r85bmmy//X/+n/9v/5f/7/99fX/6+T5/9MO3///9V/+yz/37f89/3+a5//vuv+/+5Oh/2fdltb/5+6/JW5psv8BAACgg9z9941b7H8AAAAYRu7++8Ut9j8AAAAMI3f//eOWJvt/Jf3/ifwL/f9c///n+37dBf3/Xu2i/9f/6//1/6PT/0/z/P8Ze3/Mnakf6v/1/57/r//ncJbW/+fuf0Dc0mT/AwAAQAe5+x8Yt9j/AAAAMIzc/Q+KW+x/AAAAGEbu/gfHLU32/0r6f8//9/x//b/+X/+v/78s+v9p+v8Zozz//yo/Ncfdzx/Wcb9//b/+n4OW1v/n7n9I3NJk/wMAAEAHufsfGrfY/wAAADCM3P0Pi1vsfwAAABhG7v6Hxy1N9r/+X/+/jv4/X0H/r/+/9v1/0v+vk/5/mv5/xij9/1U67n5+7e9f/6//56Cl9f+5+x8RtzTZ/wAAANBB7v5Hxi32PwAAAAwjd/+j4hb7HwAAAIaRu//RcUuT/a//1/+vo//3/H/9v+f/6/8vj/5/mv5/hv5f/6//1/+zU0vr/3P33xq3NNn/AAAA0EHu/sfELfY/AAAADCN3/2PjFvsfAAAAhpG7/3FxS5P9r//X/+v/9f/6/+2vr/9fJ/3/NP3/DP2//l//r/9npxbU/1/wq05vHh+3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r/9fTP+/l/ON1f+f2Ww2+v9N0/7/zAW/n/W51P/r/4+A/n+a/n+G/l//r//X/7NTC+r/936cu//JcUuT/Q8AAAAd5O5/Stxi/wMAAMAwcvc/NW6x/wEAAGAYufufFrc02f/6/8X0/3vG6v89///iz0en/t/z/w/S/x8N/f80/f8M/b/+X/+v/2enltb/5+5/etx08sRVf4kAAADAwuTuf0bc0uT7/wAAANBB7v5nxi32PwAAAKzUrQd+Jnf/s+KWJvtf/7/b/v/kBT+n/9f/X/z50P/r//X/157+f5r+f4b+X/+v/9f/s1NL6/9z9z87bmmy/wEAAKCD3P23xS32PwAAAAwjd/9z4hb7HwAAAIaRu/+5cUuT/a//9/x//b/+X/+//fX1/+uk/5+m/5+h/9f/H2//f+r8X+r/GcMV9P9nz5696Zr3/7n7nxe3NNn/AAAA0EHu/ufHLfY/AAAADCN3/wviFvsfAAAAhpG7/4VxS5P9r/9v2v/nR31d/f/Nm43+X/+v/9f/T9P/T9P/z9D/6/89/1//z04t7fn/uftfFLc02f8AAADQQe7+F8ct9j8AAAAMI3f/S+IW+x8AAACGkbv/pXFLk/2v/2/a/3v+v/5f/3/U/f9dG/3/kVhF/3/m0q+/9P7/Fv2//n9Cu/7/H/5u3w/1//p/Dlpa/5+7/2VxS5P9DwAAAB3k7n953GL/AwAAwDBy978ibrH/AQAAYBi5+18ZN13fZP/r//X/+n/9v/5/++sf8fP/T242G/3/Dqyi/5+w9P5/N8//v/jf8vP0//r/Nb9//b/+n4OW1v/n7n9V3NJk/wMAAEAHuftfHbfY/wAAADCM3P2viVvsfwAAABhG7v7Xxi1N9r/+X/+v/9f/D9//37KK/t/z/3dE/z9tGf3/pen/9f9rfv/6f/0/l++4+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/6/+vpP/P96n/H6v/P7W4/v/0vv+8Js//1//viP5/mv5/hv5f/6//v1X/zy4t7fn/ufvfFLc02f8AAADQQe7+N8et/+nW/gcAAIBh5O5/S9xi/wMAAMAwcve/NW5psv/1//p/z//X/w///H/9fyv6/2n6/xn6f/2//t/z/9mppfX/ufvfFrc02f8AAADQQe7+t8ct9j8AAAAMI3f/O+IW+x8AAACGkbv/9rilyf7X/+v/9f/6f/3/ud9D/f8Y9P/Tjqb/P6P/1/9XP/9n8W+B/l//P/frGdPS+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAIaRu//dcYv9DwAAAKt0/Zafy93/nrilyf7X/+v/9f/6f/3/9tfX/6/TsfT/+aHQ/7d6/v/e+23f///Vvh+t7fn/F//3l/5f/8/uLa3/z93/3rilyf4HAACADnL3vy9usf8BAABgGLn73x+32P8AAAAwjNz9H4hbmux//b/+X/+v/9f/b399/f86ef7/NP3/DM//P9bn56/9/ev/9f8ctLT+P3f/B+OWJvsfAAAAOsjd/6G4xf4HAACAYeTu/3DcYv8DAADAMPZ2f8ZlDfe//l//r//X/+v/t7++/n+d9P/T9P8z9P/6f/2//p+dWlr//5G9X3V689G4pcn+BwAAgA5y938sbrH/AQAAYBi5+z8et9j/AAAAMIzc/Z+IW5rsf/2//n8d/f/Zs2dv0v/r//d/Pef7/zv0/xT9/zT9/wz9v/5f/6//Z6eW1v/n7v9k3NJk/wMAAEAHufs/FbfY/wAAADCM3P2fjlvsfwAAABhG7v7PxC1N9r/+fwH9/2n9v+f/6/83nv+v/98R/f80/f+MEfv/05f/5R93P39Yx/3+9f/6fw5aWv+fu/+zcUuT/Q8AAAAd5O7/XNxi/wMAAMAwcvd/Pm6x/wEAAGAYufu/ELc02f/6/6Pr/+/+Z9fl+f9nNtvfv/5f/6//1/9fa/r/afr/GSP2/1fguPv5tb9//b/+n4OW1v/n7v9i3LJ/+J24sq8SAAAAWJLc/V+KW5p8/x8AAAA6yN3/5bjF/gcAAIBh5O7/StzSZP/r/xfw/P8B+3/P/9/++dD/L7r/v07/Pwb9/zT9/wz9v/5f/7+j/j8/zfr/7pbW/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/jvilgv2/7a2exT6f/2//l//r//f/vr6/3XS/0+73P7/1OZw/X/S/+v/9f9d+3/P/+ecpfX/ufu/Ebf4/j8AAACszolL/Hzu/m/GLfY/AAAADCN3/7fiFvsfAAAAhpG7/9txy53XHddbOlL6f/2//l//r//f/vr6/3XS/0/z/P8Z+v9d9PM36P/H6P83G/0/h7e0/j93/3fiFt//BwAAgGHk7v9u3GL/AwAAwDBy938vbrH/AQAAYBi5+78ftzTZ//p//f8h+/+9NFP/f47+/xz9/3b6/6Oh/5+m/5+h//f8f/2/5/+zU0vr/3P3/yBuabL/AQAAoIPc/T+MW+x/AAAAGEbu/h/FLfY/AAAADCN3/4/jlib7/9j6//hHrf9fff/v+f/6f/2//n9R9P/T9P8z9P/6f/2//p+dWlr/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADAMHL3/yxusf8BAABgGLn7fx63NNn/nv+v/9f/6//1/9tfX/+/Tvr/afr/7eo36lD9//k/DfX/+n/9v/6fc5bW/+fu/0Xc0mT/AwAAQAe5+38Zt9j/AAAAMIzc/XfGLfY/AAAADCN3/6/ilib7X/+v/9f/6//1/9tfX/+/Tvr/acfZ///jX8y/rOf/H3v/n29B/6//1/+zE0vr/3P3/zpuabL/AQAAoIPc/b+JW+x/AAAAGEbu/t/GLfY/AAAADCN3/+/ilib7f6b/P1V/o/5/kv5///vX/2//fOj/9f/6/2tP/z/N8/9n6P89/1//r/9np5bW/+fu/33c0mT/AwAAQAe5+++KW+x/AAAAGEbu/j/ELfY/AAAADCN3/x/jlib73/P/19T/36D/1//r//X/+v8Z+v9p+v8Z+n/9v/5f/89OLa3/z93/pwAAAP//8XxTnQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m35.457189312s ago: executing program 4 (id=448): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x8, 0x7fffffffffffffff) 1m34.916991935s ago: executing program 4 (id=453): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) poll(&(0x7f0000000180)=[{r0, 0x10}], 0x1, 0x6) 1m34.588478761s ago: executing program 4 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 1m34.347721509s ago: executing program 4 (id=460): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc5, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 1m33.675851212s ago: executing program 4 (id=466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) 1m32.498119605s ago: executing program 4 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x38, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x2c, 0x1, 0x1}]}]}]}]}, 0x38}}, 0x0) 1m32.161831371s ago: executing program 35 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x38, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x2c, 0x1, 0x1}]}]}]}]}, 0x38}}, 0x0) 20.26583558s ago: executing program 9 (id=970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="05030400d3fc02000000ab5d71acedd7c9560385dcb188a884d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 19.912138673s ago: executing program 9 (id=973): mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x9, 0x6031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 19.581405234s ago: executing program 9 (id=976): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) 19.132996493s ago: executing program 9 (id=979): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1213, &(0x7f0000003680)="$eJzs3E9rXFUYB+C3aWtrav6obbUF6UE3urk0WbhRkCApSAeUtiO0gnBrJjrMdSbkDoERMbpy6+cQl90J4k432fgZ3GXjsoJ4JDONTTRdlJbeJjzPZl7m3B/3PTPDwBzmnO23v/u8t1oXq+Uwpo69E1NrEeluihRTsevreOOtX3595frNW1eXWq3layldWbqx8GZKafbSTx99+cOrPw/PfHhn9sdTsTX/8fYfi79vnd+6sP33jc+6derWqT8YpjLdHgyG5e2qk1a6da9I6YOqU9ad1O3XnfV946vVYG1tlMr+ysz02nqnrlPZH6VeZ5SGgzRcH6Xy07LbT0VRpJnp4FG0v7+bc47I+WQ8Eznn/GxMx5l4LmZiNuZiPp6PF+LFOBvn4ny8FC/HhfFVTfcNAAAAAAAAAAAAAAAAAAAAR8sj7f+/1HDzAAAAAAAAAAAAAAAAAAAAcERcv3nr6lKrtXwtpdMR1bcb7Y325HEyvrQa3aiiE5djLv6K8e7/nPOxyakBOV95r7V8OY3NxzfV5r385kb7+P78wvg4gd183ptfmOTT/vypmN6bX4y5OHtwfvF/+V5stE/H66/tyRcxF799EoOoYiV2svfzXy2k9O77rf/c/+L4OgAAADgKivSvA3+/F8WDxif5B6wP5APWB1JM7d51J38iLp5obNrcU4++6JVV1VlvvNjtaPLMZkQ8JY0djmLxzzvndl6+h0qdfEqaf6zF8X0fpOb7OaRFY19JPEH33/SmOwEAAAAAAAAAAOBhPIm/EzY9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//KTTHYQ==") syz_clone(0x10c0600, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 17.911649183s ago: executing program 9 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 15.957865018s ago: executing program 9 (id=997): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292e254c7beef9173564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x5c, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 15.957606355s ago: executing program 36 (id=997): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292e254c7beef9173564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x5c, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 8.016428659s ago: executing program 0 (id=1034): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@filestreams}, {@uqnoenforce}, {@largeio}, {}, {@quota}]}, 0xfe, 0x97d9, &(0x7f000001c700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r0) 6.090864872s ago: executing program 7 (id=1050): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ff"], 0xd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x20840, 0x0) 5.565039736s ago: executing program 0 (id=1053): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000140)) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 4.780020471s ago: executing program 0 (id=1056): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xcf543737ff523749}}, 0x50) 4.732182963s ago: executing program 3 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000100)="c5", 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 4.531217483s ago: executing program 3 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 3.473021718s ago: executing program 3 (id=1060): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) 3.105239199s ago: executing program 3 (id=1062): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x3) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001fc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xc2, 0x1, 0x0, 0x10}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x52, 0x6, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x6, 0x4}}}}}}}]}}, 0x0) 2.509763605s ago: executing program 0 (id=1065): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pwrite64(r0, &(0x7f0000000540)="9e", 0x1, 0xfecf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x140802, 0xe4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r2, r1, 0x0, 0x87a680000) 2.464862841s ago: executing program 8 (id=1066): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 2.464147992s ago: executing program 7 (id=1067): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1302, 0x120) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f0000000640)='./bus\x00', 0x0) 2.20707872s ago: executing program 0 (id=1069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000d740)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4c8c0}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040080}}], 0x2, 0x4) 2.206525929s ago: executing program 8 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "2f9ba2ce41a730cb", "37a0906df45a6f4f40b151634357ea00", '\x00', "de3f106b925ded4d"}, 0x28) 1.986342247s ago: executing program 1 (id=1071): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) 1.955276037s ago: executing program 0 (id=1072): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x10, &(0x7f00000001c0)={0x40, 0x11, 0x3, "bab2b0"}, 0x0, 0x0}) 1.88040654s ago: executing program 8 (id=1073): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000140)=[r1, r1, r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000380)}) 1.68433211s ago: executing program 1 (id=1074): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)={0x7a, 0x6}, 0x0, 0x0, 0x0) 1.646883342s ago: executing program 7 (id=1075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.618463032s ago: executing program 8 (id=1076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$packet(r1, 0x0, 0x0, 0x24000800, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) 1.5052089s ago: executing program 1 (id=1077): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.238598074s ago: executing program 7 (id=1078): unshare(0x2040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d40)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 1.070771108s ago: executing program 1 (id=1079): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setgid(0x0) 911.093251ms ago: executing program 7 (id=1080): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) 719.777902ms ago: executing program 1 (id=1081): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, 'iso8859-3'}}, {@gid}, {@gid}, {}, {@nobarrier}]}, 0x1, 0x5f8, &(0x7f0000001c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) mkdirat(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 589.418145ms ago: executing program 8 (id=1082): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index=0x3, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 459.570278ms ago: executing program 7 (id=1083): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 342.883333ms ago: executing program 3 (id=1084): unshare(0x4040600) r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000dc0), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 191.541039ms ago: executing program 1 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 190.538135ms ago: executing program 8 (id=1086): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f00002ab91c691e277fffffeb000200"}) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x4, 0x80, 0x0, 0x21a, 0x3, '`\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7f) 0s ago: executing program 3 (id=1087): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff1, 0xffff}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x36767a45}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): : hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.855642][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.872036][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.886421][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.955905][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.170520][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.177776][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.231141][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.238448][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.602070][ T11] bridge_slave_1: left allmulticast mode [ 157.607781][ T11] bridge_slave_1: left promiscuous mode [ 157.654420][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.736991][ T11] bridge_slave_0: left allmulticast mode [ 157.770656][ T11] bridge_slave_0: left promiscuous mode [ 157.789525][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.958634][ T7808] loop3: detected capacity change from 0 to 32768 [ 157.997524][ T7808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.490 (7808) [ 158.071960][ T7808] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.111744][ T7808] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 158.162938][ T7808] BTRFS info (device loop3): using free-space-tree [ 158.402982][ T7812] loop0: detected capacity change from 0 to 32768 [ 158.562137][ T7812] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.651412][ T29] audit: type=1800 audit(1731987902.238:19): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 158.693304][ T7812] XFS (loop0): Ending clean mount [ 158.725495][ T7812] XFS (loop0): Quotacheck needed: Please wait. [ 158.768001][ T5845] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.812195][ T7812] XFS (loop0): Quotacheck: Done. [ 158.944091][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.991910][ T5863] Bluetooth: hci4: command tx timeout [ 159.033315][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.046597][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.090810][ T11] infiniband syz1: set down [ 159.113189][ T11] bond0 (unregistering): Released all slaves [ 159.418990][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 159.474681][ T7868] netlink: 'syz.0.497': attribute type 7 has an invalid length. [ 159.523167][ T7868] netlink: 'syz.0.497': attribute type 8 has an invalid length. [ 159.530939][ T7868] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.497'. [ 159.639732][ T7863] loop3: detected capacity change from 0 to 4096 [ 159.707710][ T7863] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 160.109655][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.131679][ T7881] hsr0: entered promiscuous mode [ 160.148319][ T7863] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 160.454373][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 160.460242][ T7898] loop7: detected capacity change from 0 to 2048 [ 160.537178][ T7898] loop7: p1 < > p2 p3 < p5 > p4 [ 160.543046][ T7898] loop7: partition table partially beyond EOD, truncated [ 160.557568][ T7898] loop7: p1 start 4278190080 is beyond EOD, truncated [ 160.574992][ T7898] loop7: p2 start 16908800 is beyond EOD, truncated [ 160.595447][ T7898] loop7: p4 start 11326 is beyond EOD, truncated [ 160.623229][ T1760] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.631664][ T7898] loop7: p5 start 16908800 is beyond EOD, truncated [ 160.951720][ T1760] usb 2-1: Using ep0 maxpacket: 16 [ 161.068889][ T1760] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.073256][ T5863] Bluetooth: hci4: command tx timeout [ 161.085538][ T1760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.097244][ T1760] usb 2-1: Product: syz [ 161.101441][ T1760] usb 2-1: Manufacturer: syz [ 161.106231][ T11] hsr_slave_0: left promiscuous mode [ 161.106351][ T1760] usb 2-1: SerialNumber: syz [ 161.120216][ T11] hsr_slave_1: left promiscuous mode [ 161.131415][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 161.149799][ T1760] r8152-cfgselector 2-1: Unknown version 0x0000 [ 161.156338][ T1760] r8152-cfgselector 2-1: config 0 descriptor?? [ 161.163855][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.174022][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.228237][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.241710][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.296845][ T11] veth1_macvtap: left promiscuous mode [ 161.317071][ T11] veth0_macvtap: left promiscuous mode [ 161.321644][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 161.333620][ T7924] netlink: 165 bytes leftover after parsing attributes in process `syz.0.514'. [ 161.341401][ T11] veth1_vlan: left promiscuous mode [ 161.375660][ T11] veth0_vlan: left promiscuous mode [ 161.389651][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 161.441964][ T1760] r8152-cfgselector 2-1: Needed 2 retries to read version [ 161.449414][ T1760] r8152-cfgselector 2-1: Unknown version 0x0000 [ 161.466745][ T1760] r8152-cfgselector 2-1: bad CDC descriptors [ 161.694493][ T1760] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 162.360700][ T7945] loop1: detected capacity change from 0 to 128 [ 162.416962][ T7945] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.439922][ T7945] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.477111][ T7938] loop0: detected capacity change from 0 to 40427 [ 162.498606][ T7938] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 162.513053][ T7945] syz.1.520 (pid 7945) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 162.522060][ T7938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.561802][ T7938] F2FS-fs (loop0): build fault injection attr: rate: 18446, type: 0x1fffff [ 162.577364][ T7938] F2FS-fs (loop0): invalid crc value [ 162.587711][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.589135][ T7938] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.604820][ T11] team0 (unregistering): Port device team_slave_1 removed [ 162.713524][ T7938] F2FS-fs (loop0): Start checkpoint disabled! [ 162.740950][ T7938] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.748572][ T7938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 162.753254][ T7950] loop1: detected capacity change from 0 to 2048 [ 162.768200][ T11] team0 (unregistering): Port device team_slave_0 removed [ 162.808341][ T7952] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.834683][ T29] audit: type=1800 audit(1731987906.418:20): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.518" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 162.883285][ T29] audit: type=1800 audit(1731987906.428:21): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.518" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 162.933161][ T1082] smc: removing ib device syz1 [ 163.040304][ T12] kworker/u8:1: attempt to access beyond end of device [ 163.040304][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 163.083555][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.100113][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.143154][ T5863] Bluetooth: hci4: command tx timeout [ 163.744733][ T5949] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.858072][ T7909] tipc: Started in network mode [ 163.877246][ T7909] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 163.963124][ T7909] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 163.982631][ T7909] tipc: Enabled bearer , priority 10 [ 164.213986][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.266213][ T7974] loop7: detected capacity change from 0 to 128 [ 164.285705][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.356576][ T7801] bridge_slave_0: entered allmulticast mode [ 164.426384][ T7801] bridge_slave_0: entered promiscuous mode [ 164.493938][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.552370][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.559755][ T7801] bridge_slave_1: entered allmulticast mode [ 164.692026][ T7801] bridge_slave_1: entered promiscuous mode [ 164.845978][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.855061][ T5949] usb 2-1: config 1 has no interface number 0 [ 164.861307][ T5949] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.872750][ T5949] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 164.882702][ T5949] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 164.893143][ T5949] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 165.114617][ T5921] tipc: Node number set to 1 [ 165.224105][ T5863] Bluetooth: hci4: command tx timeout [ 165.483973][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.638608][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.856311][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.865712][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.873975][ T5949] usb 2-1: Product: syz [ 165.878244][ T5949] usb 2-1: Manufacturer: syz [ 165.882958][ T5949] usb 2-1: SerialNumber: syz [ 166.203443][ T7961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.219796][ T7801] team0: Port device team_slave_0 added [ 166.248555][ T7969] loop0: detected capacity change from 0 to 262144 [ 166.264603][ T7458] veth0_vlan: entered promiscuous mode [ 166.340061][ T7969] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.349114][ T7801] team0: Port device team_slave_1 added [ 166.628549][ T7969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.836226][ T7996] loop7: detected capacity change from 0 to 1024 [ 166.934893][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.948584][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.977789][ T7996] gfs2: gfs2 mount does not exist [ 166.978103][ T7961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.012966][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.037973][ T5949] cdc_ncm 2-1:1.1: bind() failure [ 167.053952][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.073934][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.270212][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.277633][ T3557] hfsplus: b-tree write err: -5, ino 4 [ 167.301896][ T7994] loop3: detected capacity change from 0 to 32768 [ 167.314829][ T7994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.535 (7994) [ 167.323391][ T7458] veth1_vlan: entered promiscuous mode [ 167.333394][ T5906] usb 2-1: USB disconnect, device number 6 [ 167.475495][ T7994] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.503773][ T7994] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 167.512638][ T7994] BTRFS info (device loop3): using free-space-tree [ 167.726455][ T7801] hsr_slave_0: entered promiscuous mode [ 167.733453][ T7801] hsr_slave_1: entered promiscuous mode [ 167.739678][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.748931][ T7801] Cannot create hsr debugfs directory [ 167.811212][ T7458] veth0_macvtap: entered promiscuous mode [ 167.821190][ T7458] veth1_macvtap: entered promiscuous mode [ 167.839485][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.971720][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.985151][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.042611][ T8015] loop1: detected capacity change from 0 to 256 [ 168.065489][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.076107][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.088098][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.098509][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.109930][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.122584][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.137502][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.215291][ T8015] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 168.267883][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.296427][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.327483][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.338999][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.350545][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.366874][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.467051][ T7458] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.521360][ T7458] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.582289][ T7458] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.591067][ T7458] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.774171][ T5845] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.336358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.357589][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.455949][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.471744][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.554079][ T8057] loop3: detected capacity change from 0 to 2048 [ 169.658797][ T8057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.697733][ T8062] loop8: detected capacity change from 0 to 256 [ 169.743543][ T7801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 169.757564][ T8057] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.798124][ T8057] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 169.817441][ T8062] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 169.824330][ T7801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 169.832427][ T8057] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.832427][ T8057] [ 169.847707][ T8057] EXT4-fs (loop3): Total free blocks count 0 [ 169.885429][ T8057] EXT4-fs (loop3): Free/Dirty block details [ 169.895659][ T7801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 169.901697][ T8057] EXT4-fs (loop3): free_blocks=2415919104 [ 169.937601][ T8057] EXT4-fs (loop3): dirty_blocks=48 [ 169.947649][ T8057] EXT4-fs (loop3): Block reservation details [ 169.957088][ T8057] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 169.976137][ T7801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 170.272587][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.281040][ T8037] loop0: detected capacity change from 0 to 32768 [ 170.402124][ T8037] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.495644][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.521082][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.578463][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.585674][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.664522][ T8085] netlink: 566 bytes leftover after parsing attributes in process `syz.1.556'. [ 170.675824][ T8037] XFS (loop0): Ending clean mount [ 170.700780][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.707961][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.722166][ T8037] XFS (loop0): Quotacheck needed: Please wait. [ 170.791889][ T8037] XFS (loop0): Quotacheck: Done. [ 171.003753][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.050802][ T8102] loop1: detected capacity change from 0 to 512 [ 171.149494][ T8102] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 171.209426][ T8102] EXT4-fs (loop1): invalid journal inode [ 171.225815][ T8102] EXT4-fs (loop1): can't get journal size [ 171.306089][ T8102] EXT4-fs (loop1): 1 truncate cleaned up [ 171.364358][ T8102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.691369][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.914025][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.983003][ T8125] loop7: detected capacity change from 0 to 40427 [ 171.998303][ T8125] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 172.006932][ T8125] F2FS-fs (loop7): Image doesn't support compression [ 172.020650][ T8125] F2FS-fs (loop7): Image doesn't support compression [ 172.055199][ T8125] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x4 [ 172.091921][ T8125] F2FS-fs (loop7): invalid crc value [ 172.136053][ T8125] F2FS-fs (loop7): Found nat_bits in checkpoint [ 172.550850][ T8125] F2FS-fs (loop7): Start checkpoint disabled! [ 172.575508][ T8125] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 172.745390][ T8125] syz.7.563: attempt to access beyond end of device [ 172.745390][ T8125] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.054496][ T7801] veth0_vlan: entered promiscuous mode [ 173.080700][ T12] kworker/u8:1: attempt to access beyond end of device [ 173.080700][ T12] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 173.086555][ T7801] veth1_vlan: entered promiscuous mode [ 173.138360][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 173.174728][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 173.204057][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 173.210871][ T7801] veth0_macvtap: entered promiscuous mode [ 173.255126][ T7801] veth1_macvtap: entered promiscuous mode [ 173.312661][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.343981][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.377670][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.400809][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.430571][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.460649][ T8130] loop8: detected capacity change from 0 to 40427 [ 173.473866][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.493834][ T8130] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 173.504303][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.521610][ T8130] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 173.544809][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.581640][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.616029][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.640333][ T8130] F2FS-fs (loop8): Found nat_bits in checkpoint [ 173.666956][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.728241][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.764255][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.801850][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.827979][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.855009][ T8130] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 173.878603][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.889360][ T8130] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 173.906165][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.927240][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.960052][ T8164] loop3: detected capacity change from 0 to 32768 [ 173.967870][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.971585][ T29] audit: type=1800 audit(1731987917.548:22): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.565" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 173.980190][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.033240][ T3557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.040996][ T8130] syz.8.565: attempt to access beyond end of device [ 174.040996][ T8130] loop8: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 174.062607][ T7801] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.079047][ T8164] MetaData crosses page boundary!! [ 174.094957][ T7801] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.111827][ T8164] lblock = 631800, size = 28672 [ 174.117387][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.3.571 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 174.127659][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.131550][ T7801] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.137798][ T8164] Call Trace: [ 174.149777][ T8164] [ 174.152727][ T8164] dump_stack_lvl+0x241/0x360 [ 174.157438][ T8164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.161527][ T7801] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.162647][ T8164] ? __pfx__printk+0x10/0x10 [ 174.175922][ T8164] __get_metapage+0xa24/0xef0 [ 174.180679][ T8164] dtSearch+0x582/0x2520 [ 174.184974][ T8164] ? get_UCSname+0xe3/0x610 [ 174.189557][ T8164] jfs_lookup+0x17f/0x410 [ 174.193921][ T8164] ? __pfx_jfs_lookup+0x10/0x10 [ 174.198793][ T8164] ? d_alloc_parallel+0x14a8/0x1600 [ 174.204034][ T8164] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 174.209880][ T8164] ? __pfx_d_alloc_parallel+0x10/0x10 [ 174.215272][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.220950][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.226620][ T8164] ? __init_waitqueue_head+0xae/0x150 [ 174.232039][ T8164] __lookup_slow+0x28e/0x3f0 [ 174.236670][ T8164] ? __pfx___lookup_slow+0x10/0x10 [ 174.241834][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.247510][ T8164] lookup_slow+0x53/0x70 [ 174.251797][ T8164] link_path_walk+0x99b/0xea0 [ 174.256533][ T8164] path_lookupat+0xa9/0x450 [ 174.261084][ T8164] filename_lookup+0x2a3/0x670 [ 174.265899][ T8164] ? __pfx_filename_lookup+0x10/0x10 [ 174.271251][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.276925][ T8164] ? rcu_is_watching+0x15/0xb0 [ 174.281718][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.287384][ T8164] ? getname_kernel+0x140/0x2f0 [ 174.288152][ T8181] loop0: detected capacity change from 0 to 512 [ 174.292252][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.292295][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.292335][ T8164] kern_path+0x35/0x50 [ 174.313899][ T8164] unix_find_other+0x123/0x910 [ 174.318684][ T8164] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 174.324436][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.326287][ T8181] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.330081][ T8164] ? __pfx_unix_find_other+0x10/0x10 [ 174.330114][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330157][ T8164] unix_dgram_sendmsg+0xae0/0x1f80 [ 174.330204][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330237][ T8164] ? aa_sk_perm+0x96d/0xab0 [ 174.330272][ T8164] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 174.330306][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330339][ T8164] ? __import_iovec+0x3a8/0x870 [ 174.330380][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330413][ T8164] ? aa_sock_msg_perm+0x91/0x160 [ 174.330445][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330483][ T8164] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 174.330511][ T8164] __sock_sendmsg+0x223/0x270 [ 174.330560][ T8164] ____sys_sendmsg+0x52a/0x7e0 [ 174.330602][ T8164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.330633][ T8164] ? __fget_files+0x2a/0x410 [ 174.330676][ T8164] ? __fget_files+0x2a/0x410 [ 174.330722][ T8164] __sys_sendmmsg+0x36a/0x720 [ 174.330769][ T8164] ? __pfx___sys_sendmmsg+0x10/0x10 [ 174.330834][ T8164] ? wake_up_q+0xdc/0x120 [ 174.330873][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330911][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.330945][ T8164] ? futex_wait+0x285/0x360 [ 174.330989][ T8164] ? __pfx_futex_wait+0x10/0x10 [ 174.331039][ T8164] ? fd_install+0x9c/0x5d0 [ 174.331076][ T8164] ? __pfx_lock_release+0x10/0x10 [ 174.356826][ T8181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 174.356867][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.365907][ T8181] System zones: [ 174.366954][ T8164] ? do_futex+0x33b/0x560 [ 174.377066][ T8181] 1-12 [ 174.378095][ T8164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.383521][ T8181] [ 174.388678][ T8164] ? fd_install+0x35c/0x5d0 [ 174.388734][ T8164] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.399248][ T8164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.409978][ T8181] EXT4-fs (loop0): 1 truncate cleaned up [ 174.414174][ T8164] ? do_syscall_64+0x100/0x230 [ 174.414215][ T8164] __x64_sys_sendmmsg+0xa0/0xb0 [ 174.421095][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.424050][ T8164] do_syscall_64+0xf3/0x230 [ 174.424090][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.424121][ T8164] RIP: 0033:0x7f169e17e759 [ 174.424146][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.424171][ T8164] RSP: 002b:00007f169eff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.424202][ T8164] RAX: ffffffffffffffda RBX: 00007f169e335f80 RCX: 00007f169e17e759 [ 174.424224][ T8164] RDX: 0000000000000001 RSI: 0000000020000e80 RDI: 0000000000000006 [ 174.424244][ T8164] RBP: 00007f169e1f175e R08: 0000000000000000 R09: 0000000000000000 [ 174.424262][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.424281][ T8164] R13: 0000000000000000 R14: 00007f169e335f80 R15: 00007ffe4c6b8008 [ 174.424319][ T8164] [ 174.452054][ T8164] bread failed! [ 174.518013][ T8130] syz.8.565: attempt to access beyond end of device [ 174.518013][ T8130] loop8: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 174.522935][ T8164] jfs_lookup: dtSearch returned -5 [ 174.777773][ T7458] syz-executor: attempt to access beyond end of device [ 174.777773][ T7458] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.833153][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.867761][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.875741][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.883774][ T7458] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 174.911402][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.924893][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.558545][ T5906] kernel write not supported for file bpf-prog (pid: 5906 comm: kworker/1:5) [ 176.124027][ T8215] loop9: detected capacity change from 0 to 4096 [ 176.220086][ T8215] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 176.266357][ T8227] loop8: detected capacity change from 0 to 2048 [ 176.340051][ T8227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.374680][ T8215] ntfs3(loop9): ino=0, attr_set_size [ 176.410492][ T8227] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.454250][ T8237] ntfs3(loop9): MFT: r=0, expect seq=0 instead of 1! [ 176.565114][ T8239] vivid-002: disconnect [ 176.587029][ T8238] vivid-002: reconnect [ 176.649665][ T7458] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.692506][ T8242] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.077251][ T8260] input: syz1 as /devices/virtual/input/input6 [ 177.135707][ T8266] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 177.135707][ T8266] The task syz.0.597 (8266) triggered the difference, watch for misbehavior. [ 177.590562][ T8282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.603'. [ 178.204884][ T8271] loop9: detected capacity change from 0 to 32768 [ 178.232356][ T8271] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.599 (8271) [ 178.248693][ T8296] syz.0.609 uses obsolete (PF_INET,SOCK_PACKET) [ 178.264326][ T8284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.310493][ T8271] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 178.359002][ T8271] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 178.359799][ T8284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.411435][ T8271] BTRFS info (device loop9): using free-space-tree [ 178.552206][ T29] audit: type=1326 audit(1731987922.128:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169e17e759 code=0x7ffc0000 [ 178.637201][ T29] audit: type=1326 audit(1731987922.128:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f169e17e759 code=0x7ffc0000 [ 178.697942][ T29] audit: type=1326 audit(1731987922.128:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169e17e759 code=0x7ffc0000 [ 178.756915][ T8317] loop3: detected capacity change from 0 to 128 [ 178.830826][ T8319] loop7: detected capacity change from 0 to 512 [ 178.864994][ T8317] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 178.882041][ T8319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.945610][ T8317] syz.3.613: attempt to access beyond end of device [ 178.945610][ T8317] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 179.003392][ T8317] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 179.025809][ T8317] syz.3.613: attempt to access beyond end of device [ 179.025809][ T8317] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 179.071623][ T8317] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 179.080315][ T8317] syz.3.613: attempt to access beyond end of device [ 179.080315][ T8317] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 179.089431][ T8331] loop1: detected capacity change from 0 to 256 [ 179.131578][ T8317] Buffer I/O error on dev loop3, logical block 1157, async page read [ 179.150329][ T8317] syz.3.613: attempt to access beyond end of device [ 179.150329][ T8317] loop3: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 179.187498][ T8331] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 179.207959][ T8317] Buffer I/O error on dev loop3, logical block 3211264, async page read [ 179.222291][ T8317] syz.3.613: attempt to access beyond end of device [ 179.222291][ T8317] loop3: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 179.236127][ T8317] Buffer I/O error on dev loop3, logical block 8768635, async page read [ 179.264331][ T8317] syz.3.613: attempt to access beyond end of device [ 179.264331][ T8317] loop3: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 179.281316][ T8317] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 179.298712][ T8317] syz.3.613: attempt to access beyond end of device [ 179.298712][ T8317] loop3: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 179.320268][ T8317] Buffer I/O error on dev loop3, logical block 209285, async page read [ 179.333025][ T8317] syz.3.613: attempt to access beyond end of device [ 179.333025][ T8317] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 179.348761][ T8317] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 179.383742][ T8319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.431709][ T8317] syz.3.613: attempt to access beyond end of device [ 179.431709][ T8317] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 179.447010][ T8319] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.482093][ T5969] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 179.538887][ T8317] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 179.564013][ T5863] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.576760][ T8348] EXT4-fs error (device loop7): __ext4_new_inode:1276: comm syz.7.614: failed to insert inode 16: doubly allocated? [ 179.578057][ T5863] Bluetooth: hci3: Injecting HCI hardware error event [ 179.603163][ T5863] Bluetooth: hci3: hardware error 0x00 [ 179.651891][ T8317] syz.3.613: attempt to access beyond end of device [ 179.651891][ T8317] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 179.702006][ T5969] usb 9-1: Using ep0 maxpacket: 8 [ 179.739252][ T5969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.750450][ T5969] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.762088][ T5969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.788164][ T5969] usb 9-1: config 0 descriptor?? [ 179.928417][ T7108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.943086][ T7801] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 179.979339][ T8317] Buffer I/O error on dev loop3, logical block 1157, async page read [ 180.008856][ T8355] loop1: detected capacity change from 0 to 512 [ 180.019392][ T8355] EXT4-fs: Ignoring removed bh option [ 180.200901][ T5969] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.230209][ T29] audit: type=1800 audit(1731987923.818:26): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.613" name="/" dev="loop3" ino=2 res=0 errno=0 [ 180.253536][ T8355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.297865][ T8355] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.396056][ T5949] usb 9-1: USB disconnect, device number 2 [ 180.423653][ T8362] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 180.491963][ T5949] iowarrior 9-1:0.0: I/O-Warror #0 now disconnected [ 180.757667][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.228406][ T8386] loop8: detected capacity change from 0 to 128 [ 181.252319][ T8386] tmpfs: Unknown parameter 'errors' [ 181.761000][ T5845] sysv_free_block: trying to free block not in datazone [ 181.797892][ T5845] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 181.871721][ T5863] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 182.195580][ T8400] loop9: detected capacity change from 0 to 32768 [ 182.433425][ T8400] XFS (loop9): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 182.596687][ T8382] loop7: detected capacity change from 0 to 40427 [ 182.642100][ T5863] Bluetooth: Unknown LE signaling command 0xff [ 182.648321][ T5863] Bluetooth: Wrong link type (-22) [ 182.661450][ T8382] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 182.668785][ T8382] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 182.761820][ T8382] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x1fffff [ 182.802736][ T8382] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x6 [ 182.958184][ T8382] F2FS-fs (loop7): invalid crc value [ 182.972493][ T8382] F2FS-fs (loop7): Found nat_bits in checkpoint [ 183.094281][ T8400] XFS (loop9): Ending clean mount [ 183.200878][ T8382] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 183.243860][ T8382] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 183.484326][ T7801] XFS (loop9): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 183.927456][ T7108] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 183.948628][ T7108] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 184.067125][ T8425] loop1: detected capacity change from 0 to 40427 [ 184.138138][ T8425] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 184.149429][ T8425] F2FS-fs (loop1): Image doesn't support compression [ 184.174210][ T8425] F2FS-fs (loop1): invalid crc value [ 184.243220][ T8425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.711815][ T8425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.820227][ T29] audit: type=1800 audit(1731987928.388:27): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.637" name="file0" dev="loop1" ino=10 res=0 errno=0 [ 184.882158][ T8425] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x663/0x8c0 [ 184.960795][ T8486] loop3: detected capacity change from 0 to 128 [ 185.157869][ T5841] bio_check_eod: 13 callbacks suppressed [ 185.157893][ T5841] syz-executor: attempt to access beyond end of device [ 185.157893][ T5841] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 185.204544][ T8486] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.214141][ T5841] F2FS-fs (loop1): Remounting filesystem read-only [ 185.262168][ T8486] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.284583][ T5841] F2FS-fs (loop1): Remounting filesystem read-only [ 185.383032][ T8423] loop8: detected capacity change from 0 to 32768 [ 185.396995][ T8423] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.636 (8423) [ 185.471616][ T29] audit: type=1326 audit(1731987929.038:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fed97e759 code=0x7ffc0000 [ 185.515870][ T8499] loop0: detected capacity change from 0 to 2048 [ 185.611745][ T29] audit: type=1326 audit(1731987929.038:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fed97e759 code=0x7ffc0000 [ 185.712756][ T8499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.726094][ T29] audit: type=1326 audit(1731987929.048:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4fed97e759 code=0x7ffc0000 [ 185.779753][ T8470] loop9: detected capacity change from 0 to 40427 [ 185.836275][ T8470] F2FS-fs (loop9): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 185.882173][ T29] audit: type=1326 audit(1731987929.048:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fed97e793 code=0x7ffc0000 [ 185.912631][ T8470] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 185.920993][ T8470] F2FS-fs (loop9): build fault injection attr: rate: 18446, type: 0x1fffff [ 185.991745][ T29] audit: type=1326 audit(1731987929.048:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4fed97d23f code=0x7ffc0000 [ 186.003337][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.076592][ T5845] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.086895][ T8470] F2FS-fs (loop9): invalid crc value [ 186.107781][ T29] audit: type=1326 audit(1731987929.108:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4fed97e7e7 code=0x7ffc0000 [ 186.191697][ T8470] F2FS-fs (loop9): Found nat_bits in checkpoint [ 186.251858][ T29] audit: type=1326 audit(1731987929.108:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fed97d0f0 code=0x7ffc0000 [ 186.273980][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.341728][ T29] audit: type=1326 audit(1731987929.108:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fed97e35b code=0x7ffc0000 [ 186.391589][ T29] audit: type=1326 audit(1731987929.248:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4fed97d3ea code=0x7ffc0000 [ 186.415309][ T29] audit: type=1326 audit(1731987929.248:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4fed97d3ea code=0x7ffc0000 [ 186.437207][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.567615][ T8525] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 186.601894][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.663'. [ 186.643633][ T8525] batman_adv: batadv0: Adding interface: virt_wifi0 [ 186.664871][ T8470] F2FS-fs (loop9): Start checkpoint disabled! [ 186.688126][ T8525] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.718165][ T8470] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 186.753528][ T8470] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 186.788966][ T8525] batman_adv: batadv0: Interface activated: virt_wifi0 [ 186.949446][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.665'. [ 187.273828][ T3557] kworker/u8:12: attempt to access beyond end of device [ 187.273828][ T3557] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.351678][ T3557] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 187.382851][ T3557] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 187.408220][ T8552] input: syz1 as /devices/virtual/input/input7 [ 187.963070][ T8560] loop1: detected capacity change from 0 to 32768 [ 187.997188][ T8560] [ 187.997188][ T8560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.997188][ T8560] [ 188.077506][ T8560] [ 188.077506][ T8560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.077506][ T8560] [ 188.092946][ T8560] [ 188.092946][ T8560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.092946][ T8560] [ 188.196936][ T8560] [ 188.196936][ T8560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.196936][ T8560] [ 188.213381][ T111] [ 188.213381][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.213381][ T111] [ 188.242466][ T8574] [ 188.242466][ T8574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.242466][ T8574] [ 188.275216][ T8574] [ 188.275216][ T8574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.275216][ T8574] [ 188.286726][ T8580] netlink: 48 bytes leftover after parsing attributes in process `syz.7.681'. [ 188.368573][ T8574] [ 188.368573][ T8574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.368573][ T8574] [ 188.411909][ T8574] [ 188.411909][ T8574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.411909][ T8574] [ 188.490107][ T8574] [ 188.490107][ T8574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.490107][ T8574] [ 188.555023][ T110] [ 188.555023][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.555023][ T110] [ 188.654628][ T1082] [ 188.654628][ T1082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.654628][ T1082] [ 188.666997][ T1082] [ 188.666997][ T1082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.666997][ T1082] [ 188.681628][ T5841] [ 188.681628][ T5841] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.681628][ T5841] [ 188.758062][ T110] [ 188.758062][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.758062][ T110] [ 188.853955][ T5841] [ 188.853955][ T5841] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.853955][ T5841] [ 189.197175][ T8608] loop9: detected capacity change from 0 to 512 [ 189.231697][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 189.319931][ T8613] loop1: detected capacity change from 0 to 512 [ 189.373349][ T8613] EXT4-fs error (device loop1): ext4_quota_enable:7080: comm syz.1.693: Bad quota inum: 1, type: 2 [ 189.389261][ T8613] EXT4-fs warning (device loop1): ext4_enable_quotas:7128: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 189.409710][ T8608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.436708][ T8613] EXT4-fs (loop1): mount failed [ 189.501942][ T8608] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.512383][ T5909] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 189.512422][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.560893][ T5909] usb 1-1: Product: syz [ 189.570992][ T5909] usb 1-1: Manufacturer: syz [ 189.589607][ T5909] usb 1-1: SerialNumber: syz [ 189.611316][ T8608] EXT4-fs (loop9): shut down requested (1) [ 189.615895][ T5909] usb 1-1: config 0 descriptor?? [ 189.638726][ T5909] ch341 1-1:0.0: ch341-uart converter detected [ 189.784221][ T7801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.565509][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.742039][ T5909] ch341-uart ttyUSB0: failed to read break control: -71 [ 190.749087][ T5909] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 190.789640][ T47] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.865008][ T47] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.876968][ T5909] usb 1-1: USB disconnect, device number 4 [ 190.919995][ T5909] ch341 1-1:0.0: device disconnected [ 190.929667][ T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.970760][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.018053][ T8638] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.074464][ T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.078529][ T8634] loop9: detected capacity change from 0 to 40427 [ 191.098266][ T8634] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x1fffff [ 191.107073][ T8634] F2FS-fs (loop9): Image doesn't support compression [ 191.131700][ T8634] F2FS-fs (loop9): invalid crc value [ 191.199353][ T8634] F2FS-fs (loop9): Found nat_bits in checkpoint [ 191.337756][ T47] usb 2-1: USB disconnect, device number 7 [ 191.592100][ T5921] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 191.804470][ T5921] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 191.824184][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.914172][ T5921] usb 8-1: config 0 descriptor?? [ 191.975862][ T5921] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 191.981779][ T8634] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 192.080324][ T8634] F2FS-fs (loop9): inject dquot initialize in f2fs_dquot_initialize of f2fs_setattr+0x5ed/0x12d0 [ 192.100498][ T8680] loop1: detected capacity change from 0 to 512 [ 192.142584][ T5921] gp8psk: usb in 128 operation failed. [ 192.161637][ T5949] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.174353][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.219895][ T5921] gp8psk: usb in 137 operation failed. [ 192.241550][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.285285][ T7801] syz-executor: attempt to access beyond end of device [ 192.285285][ T7801] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 192.312681][ T8680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.332074][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 192.347293][ T5921] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 192.365049][ T5949] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 192.374907][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.383931][ T5949] usb 4-1: Product: syz [ 192.388483][ T5949] usb 4-1: Manufacturer: syz [ 192.392443][ T8680] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.393245][ T5949] usb 4-1: SerialNumber: syz [ 192.424769][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.430097][ T7801] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 192.443796][ T5921] usb 8-1: media controller created [ 192.463213][ T7801] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 192.475155][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.476871][ T5949] usb 4-1: config 0 descriptor?? [ 192.499010][ T5921] gp8psk_fe: Frontend attached [ 192.506237][ T5921] usb 8-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 192.528077][ T5921] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 192.599839][ T5949] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 192.629539][ T5921] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 192.646489][ T5949] usb 4-1: Detected FT-X [ 192.682026][ T5921] gp8psk: found Genpix USB device pID = 203 (hex) [ 192.746934][ T8680] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.709: Allocating blocks 18-19 which overlap fs metadata [ 192.852613][ T5949] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 193.021401][ T8680] __quota_error: 12 callbacks suppressed [ 193.021429][ T8680] Quota error (device loop1): write_blk: dquota write failed [ 193.044183][ T5969] usb 8-1: USB disconnect, device number 2 [ 193.051619][ T8680] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 193.091658][ T8680] EXT4-fs error (device loop1): ext4_acquire_dquot:6910: comm syz.1.709: Failed to acquire dquot type 0 [ 193.163957][ T5969] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 193.189812][ T8697] loop0: detected capacity change from 0 to 47 [ 193.332037][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.392522][ T5949] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.435297][ T8697] Trying to free block not in datazone [ 193.626471][ T5969] usb 4-1: USB disconnect, device number 3 [ 193.662542][ T5969] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.742053][ T5969] ftdi_sio 4-1:0.0: device disconnected [ 193.796203][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.852722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.770305][ T8733] loop9: detected capacity change from 0 to 1764 [ 195.177505][ T8694] loop8: detected capacity change from 0 to 32768 [ 195.283045][ T8694] ERROR: (device loop8): dtSearch: DT_GETPAGE: dtree page corrupt [ 195.283045][ T8694] [ 195.345860][ T8746] loop1: detected capacity change from 0 to 256 [ 195.372320][ T8746] exfat: Deprecated parameter 'utf8' [ 195.384088][ T8746] exfat: Deprecated parameter 'namecase' [ 195.390187][ T8746] exfat: Deprecated parameter 'namecase' [ 195.396057][ T8694] ERROR: (device loop8): remounting filesystem as read-only [ 195.429289][ T8694] jfs_lookup: dtSearch returned -5 [ 195.457953][ T8749] ERROR: (device loop8): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 195.457953][ T8749] [ 195.527970][ T8749] jfs_readdir: unexpected rc = -5 from dtReadNext [ 195.621687][ T8723] loop3: detected capacity change from 0 to 32768 [ 195.825126][ T8723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.720 (8723) [ 195.850014][ T8746] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b81958a, utbl_chksum : 0xe619d30d) [ 195.867130][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 196.367717][ T8723] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.441716][ T8723] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 196.485715][ T8723] BTRFS info (device loop3): using free-space-tree [ 196.520565][ T8774] loop9: detected capacity change from 0 to 64 [ 196.713166][ T29] audit: type=1326 audit(1731987940.298:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.787376][ T29] audit: type=1326 audit(1731987940.368:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.826467][ T8764] loop7: detected capacity change from 0 to 40427 [ 196.832877][ T29] audit: type=1326 audit(1731987940.368:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.832927][ T29] audit: type=1326 audit(1731987940.368:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.832973][ T29] audit: type=1326 audit(1731987940.368:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.833016][ T29] audit: type=1326 audit(1731987940.368:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 196.948962][ T8764] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 196.972203][ T8764] F2FS-fs (loop7): Image doesn't support compression [ 197.039883][ T8764] F2FS-fs (loop7): Image doesn't support compression [ 197.121916][ T8764] F2FS-fs (loop7): invalid crc value [ 197.145952][ T8802] loop0: detected capacity change from 0 to 128 [ 197.176478][ T8802] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 197.217331][ T29] audit: type=1326 audit(1731987940.368:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 197.225606][ T8764] F2FS-fs (loop7): Found nat_bits in checkpoint [ 197.261917][ T8802] FAT-fs (loop0): Filesystem has been set read-only [ 197.370003][ T29] audit: type=1326 audit(1731987940.368:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.8.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cadf7e759 code=0x7ffc0000 [ 197.651383][ T8764] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 197.691757][ T5845] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.811858][ T8820] capability: warning: `syz.0.743' uses 32-bit capabilities (legacy support in use) [ 197.939845][ T7108] syz-executor: attempt to access beyond end of device [ 197.939845][ T7108] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.011807][ T7108] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 198.691720][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.873565][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.897636][ T47] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 198.946314][ T47] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.012013][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.031400][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.045858][ T8850] loop8: detected capacity change from 0 to 64 [ 199.045994][ T47] usb 2-1: Product: syz [ 199.063744][ T47] usb 2-1: Manufacturer: syz [ 199.078324][ T47] usb 2-1: SerialNumber: syz [ 199.130005][ T8850] hfs: get root inode failed [ 199.179508][ T8847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.232381][ T8796] loop9: detected capacity change from 0 to 32768 [ 199.298556][ T8841] Process accounting resumed [ 199.312391][ T8796] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 199.617192][ T8796] XFS (loop9): Ending clean mount [ 199.638699][ T8838] loop3: detected capacity change from 0 to 40427 [ 199.645779][ T8796] XFS (loop9): Quotacheck needed: Please wait. [ 199.691579][ T8838] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 199.730886][ T8838] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 199.811456][ T8838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.851088][ T8796] XFS (loop9): Quotacheck: Done. [ 200.031637][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 200.031666][ T29] audit: type=1804 audit(1731987943.608:61): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.738" name="/newroot/19/file0/file2" dev="loop9" ino=1063 res=1 errno=0 [ 200.120438][ T8838] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 200.126457][ T8876] loop8: detected capacity change from 0 to 128 [ 200.153160][ T8838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 200.184706][ T47] cdc_ncm 2-1:1.0: bind() failure [ 200.284835][ T47] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 200.293282][ T5949] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 200.295792][ T47] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 200.311550][ T47] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 200.328126][ T47] usb 2-1: USB disconnect, device number 8 [ 200.339413][ T7801] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.461606][ T5949] usb 8-1: Using ep0 maxpacket: 32 [ 200.476613][ T5949] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 200.486385][ T8861] loop0: detected capacity change from 0 to 32768 [ 200.489748][ T5949] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 200.500070][ T8861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.753 (8861) [ 200.513696][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.551555][ T5949] usb 8-1: Product: syz [ 200.555816][ T5949] usb 8-1: Manufacturer: syz [ 200.561848][ T5909] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 200.570244][ T5949] usb 8-1: SerialNumber: syz [ 200.578278][ T5949] usb 8-1: config 0 descriptor?? [ 200.584586][ T8872] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 200.593930][ T5949] hub 8-1:0.0: bad descriptor, ignoring hub [ 200.599877][ T5949] hub 8-1:0.0: probe with driver hub failed with error -5 [ 200.615814][ T5949] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input9 [ 200.624157][ T8861] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.659803][ T8861] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 200.677634][ T8861] BTRFS info (device loop0): using free-space-tree [ 200.733121][ T5909] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 200.743088][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.756811][ T5909] usb 9-1: config 0 descriptor?? [ 200.980801][ T5949] usb 8-1: USB disconnect, device number 3 [ 200.986876][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 201.052083][ T29] audit: type=1326 audit(1731987944.588:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.154658][ T29] audit: type=1326 audit(1731987944.598:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.178279][ T29] audit: type=1326 audit(1731987944.598:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.200519][ T29] audit: type=1326 audit(1731987944.598:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.223342][ T29] audit: type=1326 audit(1731987944.598:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.245612][ T29] audit: type=1326 audit(1731987944.598:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.268886][ T29] audit: type=1326 audit(1731987944.598:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.291908][ T29] audit: type=1326 audit(1731987944.608:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.314306][ T29] audit: type=1326 audit(1731987944.608:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86bf7e759 code=0x7ffc0000 [ 201.445258][ T8861] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 201.892212][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.992543][ T5909] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 202.043484][ T5909] usb 9-1: USB disconnect, device number 3 [ 202.194147][ T8924] netlink: 'syz.3.765': attribute type 9 has an invalid length. [ 202.209265][ T8924] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.765'. [ 202.416261][ T8929] pimreg: entered allmulticast mode [ 202.426712][ T8927] loop7: detected capacity change from 0 to 1024 [ 202.452748][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 202.471439][ T8927] hfsplus: Bad value for 'gid' [ 202.491939][ T8931] pimreg: left allmulticast mode [ 202.531030][ T8927] loop7: detected capacity change from 0 to 64 [ 202.689540][ T9] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 202.703466][ T9] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 202.748705][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.807269][ T8936] loop9: detected capacity change from 0 to 512 [ 202.873314][ T8936] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 202.972667][ T8939] macvlan0: entered promiscuous mode [ 202.980747][ T8947] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 202.991686][ T8936] EXT4-fs (loop9): 1 truncate cleaned up [ 202.998337][ T8936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.044868][ T9] usb 2-1: string descriptor 0 read error: -71 [ 203.053090][ T9] hub 2-1:32.0: USB hub found [ 203.061206][ T9] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 203.065974][ T8938] macvlan0: left promiscuous mode [ 203.471412][ T9] usb 2-1: USB disconnect, device number 9 [ 203.518731][ T8959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.693243][ T7801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.935299][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.886913][ T8953] loop0: detected capacity change from 0 to 32768 [ 205.074358][ T8953] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 205.408972][ T8953] XFS (loop0): Ending clean mount [ 205.564783][ T3001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.608728][ T5843] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 205.766682][ T9036] loop9: detected capacity change from 0 to 256 [ 205.975143][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 206.071638][ T1192] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.128389][ T9046] loop9: detected capacity change from 0 to 128 [ 206.161656][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 206.173380][ T5921] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 206.208642][ T5921] usb 4-1: config 0 has no interface number 0 [ 206.238483][ T5921] usb 4-1: config 0 interface 12 has no altsetting 0 [ 206.254386][ T1192] usb 2-1: Using ep0 maxpacket: 16 [ 206.279205][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.292167][ T9046] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 206.293001][ T5921] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 206.311617][ T9046] sysv_count_free_blocks: free block count was -2041545935, correcting to 0 [ 206.320679][ T1192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.344240][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.370346][ T1192] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 206.390817][ T5921] usb 4-1: Product: syz [ 206.401598][ T5921] usb 4-1: Manufacturer: syz [ 206.409106][ T1192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.428009][ T5921] usb 4-1: SerialNumber: syz [ 206.448890][ T5921] usb 4-1: config 0 descriptor?? [ 206.456057][ T1192] usb 2-1: config 0 descriptor?? [ 206.601263][ T9046] sysv_count_free_inodes: unable to read inode table [ 206.752871][ T7801] sysv_free_block: trying to free block not in datazone [ 206.787834][ T7801] sysv_free_block: trying to free block not in datazone [ 206.861690][ T7801] sysv_free_block: trying to free block not in datazone [ 206.868702][ T7801] sysv_free_block: trying to free block not in datazone [ 206.876179][ T7801] sysv_free_block: trying to free block not in datazone [ 206.895204][ T7801] sysv_free_block: trying to free block not in datazone [ 206.930827][ T5863] Bluetooth: unknown link type 29 [ 206.934599][ T9063] loop8: detected capacity change from 0 to 8 [ 206.936191][ T5863] Bluetooth: hci5: connection err: -111 [ 206.955879][ T1192] kye 0003:0458:501B.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 206.973706][ T1192] kye 0003:0458:501B.0004: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 206.977618][ T9063] SQUASHFS error: Failed to read block 0x62b: -5 [ 206.984745][ T1192] kye 0003:0458:501B.0004: tablet-enabling feature report not found [ 206.984791][ T1192] kye 0003:0458:501B.0004: tablet enabling failed [ 207.007224][ T9063] SQUASHFS error: Unable to read metadata cache entry [629] [ 207.014981][ T9063] SQUASHFS error: Unable to read inode 0x11f [ 207.084615][ T7801] sysv_free_block: trying to free block not in datazone [ 207.136012][ T9039] loop1: detected capacity change from 0 to 8 [ 207.161690][ T7801] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 207.202539][ T9039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 207.255195][ T9039] SQUASHFS error: Failed to read block 0x9b: -5 [ 207.324592][ T9065] loop7: detected capacity change from 0 to 32768 [ 207.332711][ T9065] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.815 (9065) [ 207.352373][ T9039] SQUASHFS error: Unable to read metadata cache entry [99] [ 207.410893][ T9065] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.421363][ T9065] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 207.430839][ T9065] BTRFS info (device loop7): using free-space-tree [ 207.448608][ T9039] SQUASHFS error: Unable to read inode 0x127 [ 207.526389][ T5921] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 207.547827][ T5921] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 207.562045][ T5947] usb 2-1: USB disconnect, device number 10 [ 207.642375][ T5921] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 207.650543][ T5921] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 207.707585][ T5921] usb 4-1: USB disconnect, device number 4 [ 207.770759][ T9065] BTRFS info (device loop7): scrub: started on devid 1 [ 207.791109][ T9096] loop9: detected capacity change from 0 to 512 [ 207.802824][ T9096] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.803094][ T9065] BTRFS info (device loop7): scrub: finished on devid 1 with status: 0 [ 207.902889][ T1192] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 207.914530][ T7108] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.988135][ T9096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.088574][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 208.088598][ T29] audit: type=1800 audit(1731987951.678:74): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.820" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 208.139430][ T1192] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.181832][ T1192] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.219892][ T1192] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 208.247272][ T9103] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.820: bg 0: block 496: padding at end of block bitmap is not set [ 208.267208][ T1192] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.318280][ T1192] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.358101][ T9105] loop3: detected capacity change from 0 to 1024 [ 208.364946][ T1192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.414755][ T1192] usb 9-1: Product: syz [ 208.440237][ T1192] usb 9-1: Manufacturer: syz [ 208.472902][ T1192] usb 9-1: SerialNumber: syz [ 208.570211][ T9103] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 208.664755][ T9103] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 208.687370][ T9105] hfsplus: request for non-existent node 2048 in B*Tree [ 208.706389][ T9105] hfsplus: request for non-existent node 2048 in B*Tree [ 208.740392][ T29] audit: type=1800 audit(1731987952.328:75): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.820" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 208.800496][ T9113] loop1: detected capacity change from 0 to 1024 [ 208.900177][ T7801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.937797][ T9113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.954324][ T9119] loop0: detected capacity change from 0 to 1024 [ 209.263734][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.549079][ T9134] loop1: detected capacity change from 0 to 1024 [ 209.616844][ T1192] cdc_ncm 9-1:1.0: bind() failure [ 209.644112][ T1192] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 209.686598][ T1192] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 209.707124][ T9134] hfsplus: xattr searching failed [ 209.732061][ T1192] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 209.763171][ T9146] hfsplus: xattr searching failed [ 209.794398][ T9146] hfsplus: xattr searching failed [ 209.801285][ T1192] usb 9-1: USB disconnect, device number 4 [ 209.836369][ T9134] hfsplus: b-tree write err: -5, ino 3 [ 210.047014][ T62] hfsplus: b-tree write err: -5, ino 3 [ 210.398718][ T9138] loop9: detected capacity change from 0 to 40427 [ 210.443505][ T9166] loop8: detected capacity change from 0 to 2048 [ 210.457945][ T9138] F2FS-fs (loop9): Found nat_bits in checkpoint [ 210.615309][ T9166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.641862][ T9175] loop1: detected capacity change from 0 to 64 [ 210.698248][ T9166] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.711547][ T9138] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 210.766846][ T9150] loop0: detected capacity change from 0 to 32768 [ 210.816171][ T7801] syz-executor: attempt to access beyond end of device [ 210.816171][ T7801] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.830860][ T7801] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 210.925174][ T9150] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.033801][ T7458] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.230103][ T9150] XFS (loop0): Ending clean mount [ 211.257147][ T9150] XFS (loop0): Quotacheck needed: Please wait. [ 211.401679][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.518199][ T9150] XFS (loop0): Quotacheck: Done. [ 211.692042][ T9211] loop3: detected capacity change from 0 to 1024 [ 211.759605][ T9216] loop9: detected capacity change from 0 to 64 [ 211.814364][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 211.864516][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.876133][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.886247][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 211.896124][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.928867][ T9] usb 2-1: config 0 descriptor?? [ 211.929295][ T9150] XFS (loop0): User initiated shutdown received. [ 211.968460][ T9150] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x110/0x160 (fs/xfs/xfs_fsops.c:445). Shutting down filesystem. [ 212.045072][ T9150] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 212.152915][ T9221] loop7: detected capacity change from 0 to 4096 [ 212.170383][ T9221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.209565][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.209565][ T3001] loop9: rw=1, sector=689, nr_sectors = 1 limit=64 [ 212.234112][ T5843] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 212.247823][ T3001] buffer_io_error: 12 callbacks suppressed [ 212.247850][ T3001] Buffer I/O error on dev loop9, logical block 689, lost async page write [ 212.250141][ T9221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.256366][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.256366][ T3001] loop9: rw=1, sector=690, nr_sectors = 1 limit=64 [ 212.298266][ T3001] Buffer I/O error on dev loop9, logical block 690, lost async page write [ 212.307302][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.307302][ T3001] loop9: rw=1, sector=815, nr_sectors = 1 limit=64 [ 212.322464][ T3001] Buffer I/O error on dev loop9, logical block 815, lost async page write [ 212.332510][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.332510][ T3001] loop9: rw=1, sector=816, nr_sectors = 1 limit=64 [ 212.347130][ T3001] Buffer I/O error on dev loop9, logical block 816, lost async page write [ 212.368096][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.368096][ T3001] loop9: rw=1, sector=817, nr_sectors = 1 limit=64 [ 212.384287][ T9] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 212.393134][ T3001] Buffer I/O error on dev loop9, logical block 817, lost async page write [ 212.456830][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.456830][ T3001] loop9: rw=1, sector=818, nr_sectors = 1 limit=64 [ 212.511968][ T3001] Buffer I/O error on dev loop9, logical block 818, lost async page write [ 212.520678][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.520678][ T3001] loop9: rw=1, sector=819, nr_sectors = 1 limit=64 [ 212.593616][ T9] ft260 0003:0403:6030.0005: chip code: 5e81 abf2 [ 212.632043][ T3001] Buffer I/O error on dev loop9, logical block 819, lost async page write [ 212.640669][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.640669][ T3001] loop9: rw=1, sector=820, nr_sectors = 1 limit=64 [ 212.676586][ T7108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.729625][ T3001] Buffer I/O error on dev loop9, logical block 820, lost async page write [ 212.745784][ T3001] kworker/u8:9: attempt to access beyond end of device [ 212.745784][ T3001] loop9: rw=1, sector=821, nr_sectors = 457 limit=64 [ 212.797633][ T9] ft260 0003:0403:6030.0005: uart interface is not supported [ 213.013738][ T1192] usb 2-1: USB disconnect, device number 11 [ 213.211993][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.381944][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 213.426851][ T5921] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 213.461740][ T5921] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.489028][ T5921] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.529584][ T5921] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.573538][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.601147][ T5921] usb 4-1: config 0 has no interface number 0 [ 213.626233][ T5921] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 213.697735][ T5921] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 213.707774][ T5921] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.717950][ T5921] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.731058][ T5921] usb 4-1: config 0 interface 125 has no altsetting 0 [ 213.737947][ T5921] usb 4-1: config 0 interface 125 has no altsetting 2 [ 213.789432][ T5921] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 213.798923][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.823474][ T5921] usb 4-1: Product: syz [ 213.835813][ T5921] usb 4-1: Manufacturer: syz [ 213.848578][ T5921] usb 4-1: SerialNumber: syz [ 213.882158][ T5921] usb 4-1: config 0 descriptor?? [ 213.894132][ T5921] usb 4-1: selecting invalid altsetting 2 [ 213.991456][ T9240] loop8: detected capacity change from 0 to 32768 [ 214.555217][ T9288] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.873' sets config #0 [ 214.616317][ T9291] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 214.861899][ T9297] tun0: tun_chr_ioctl cmd 1074025675 [ 214.877688][ T9297] tun0: persist enabled [ 214.911819][ T5969] usb 4-1: USB disconnect, device number 5 [ 214.932807][ T9297] tun0: tun_chr_ioctl cmd 1074025675 [ 214.938182][ T9297] tun0: persist disabled [ 215.109728][ T9309] loop8: detected capacity change from 0 to 64 [ 215.552903][ T9279] loop0: detected capacity change from 0 to 32768 [ 215.608898][ T9326] loop3: detected capacity change from 0 to 64 [ 215.641897][ T9279] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.870 (9279) [ 215.716363][ T9279] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 215.791803][ T9279] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.830006][ T9279] BTRFS info (device loop0): using free-space-tree [ 216.556619][ T9323] loop7: detected capacity change from 0 to 32768 [ 216.611862][ T9323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.885 (9323) [ 216.699500][ T9315] loop1: detected capacity change from 0 to 32768 [ 216.716369][ T9323] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.738377][ T9315] XFS: ikeep mount option is deprecated. [ 216.751699][ T9323] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 216.794627][ T9347] loop8: detected capacity change from 0 to 32768 [ 216.805202][ T9347] XFS: ikeep mount option is deprecated. [ 216.848823][ T9360] loop3: detected capacity change from 0 to 2048 [ 216.856624][ T5843] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 216.881917][ T9315] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.057947][ T9347] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.127799][ T9360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.143458][ T9323] BTRFS info (device loop7): rebuilding free space tree [ 217.167695][ T9329] loop9: detected capacity change from 0 to 32768 [ 217.191683][ T9329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.887 (9329) [ 217.207644][ T9323] BTRFS info (device loop7): disabling free space tree [ 217.308033][ T9323] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.338541][ T9323] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.483022][ T9329] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.494598][ T9329] BTRFS info (device loop9): using sha256 (sha256-ni) checksum algorithm [ 217.504075][ T9329] BTRFS info (device loop9): using free-space-tree [ 217.510718][ T9347] XFS (loop8): Ending clean mount [ 217.526883][ T9315] XFS (loop1): Ending clean mount [ 217.602281][ T9315] XFS (loop1): Quotacheck needed: Please wait. [ 217.610037][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.674559][ T9347] XFS (loop8): Quotacheck needed: Please wait. [ 217.735584][ T29] audit: type=1800 audit(1731987961.328:76): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.885" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 218.063995][ T9315] XFS (loop1): Quotacheck: Done. [ 218.081555][ T9347] XFS (loop8): Quotacheck: Done. [ 218.132406][ T7108] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.228284][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 218.418986][ T7801] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.509701][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.532865][ T7458] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.184617][ T9464] loop0: detected capacity change from 0 to 256 [ 219.374744][ T9464] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 219.438580][ T9464] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 219.483482][ T5906] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 219.645992][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.661902][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.746621][ T5906] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 219.775762][ T9450] loop9: detected capacity change from 0 to 40427 [ 219.784292][ T9450] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 219.791286][ T9450] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 219.828960][ T9450] F2FS-fs (loop9): invalid crc value [ 219.850094][ T5906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.874390][ T9477] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.906'. [ 219.888764][ T9450] F2FS-fs (loop9): Found nat_bits in checkpoint [ 219.909268][ T5906] usb 8-1: config 0 descriptor?? [ 219.949760][ T9477] openvswitch: netlink: IP tunnel dst address not specified [ 220.167823][ T9450] F2FS-fs (loop9): Start checkpoint disabled! [ 220.252328][ T9450] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 220.259427][ T9450] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 220.343043][ T5906] isku 0003:1E7D:319C.0006: ignoring exceeding usage max [ 220.345983][ T9488] loop1: detected capacity change from 0 to 256 [ 220.368876][ T5906] isku 0003:1E7D:319C.0006: unbalanced collection at end of report description [ 220.389402][ T5906] isku 0003:1E7D:319C.0006: parse failed [ 220.406382][ T5906] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -22 [ 220.441343][ T9488] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 220.522355][ T29] audit: type=1800 audit(1731987964.108:77): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.908" name="bus" dev="loop1" ino=1048636 res=0 errno=0 [ 220.586811][ T5906] usb 8-1: USB disconnect, device number 4 [ 220.701023][ T9495] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 220.812284][ T3496] kworker/u8:11: attempt to access beyond end of device [ 220.812284][ T3496] loop9: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 220.890918][ T3496] kworker/u8:11: attempt to access beyond end of device [ 220.890918][ T3496] loop9: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 220.946463][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 220.976938][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 221.008678][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 221.036412][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 221.062037][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 221.091357][ T3496] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 221.345884][ T9515] loop0: detected capacity change from 0 to 128 [ 222.254889][ T9532] loop1: detected capacity change from 0 to 32768 [ 222.314533][ T9528] loop0: detected capacity change from 0 to 40427 [ 222.459750][ T9528] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 222.517532][ T9528] F2FS-fs (loop0): invalid crc value [ 222.588880][ T9528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.628218][ T9532] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.789571][ T9552] loop7: detected capacity change from 0 to 2048 [ 222.933493][ T9528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.025030][ T9552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.103138][ T5841] ocfs2: Unmounting device (7,1) on (node local) [ 223.192282][ T5843] syz-executor: attempt to access beyond end of device [ 223.192282][ T5843] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 223.211654][ T29] audit: type=1800 audit(1731987966.778:78): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.927" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 223.256399][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.289568][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.338027][ T9578] loop1: detected capacity change from 0 to 1024 [ 223.351772][ T9578] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.358788][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.369301][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.415136][ T9580] loop9: detected capacity change from 0 to 256 [ 223.570396][ T5863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 223.580329][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:9 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 223.590940][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 223.601016][ T5863] Workqueue: hci5 hci_rx_work [ 223.605738][ T5863] Call Trace: [ 223.609026][ T5863] [ 223.611977][ T5863] dump_stack_lvl+0x241/0x360 [ 223.616694][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.621920][ T5863] ? __pfx__printk+0x10/0x10 [ 223.626539][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.632209][ T5863] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 223.637526][ T5863] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 223.642196][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.643095][ T5863] sysfs_create_dir_ns+0x2ce/0x3a0 [ 223.643133][ T5863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 223.643162][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.659949][ T9578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.664722][ T5863] kobject_add_internal+0x435/0x8d0 [ 223.664770][ T5863] kobject_add+0x152/0x220 [ 223.692187][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.697835][ T5863] ? do_raw_spin_unlock+0x13c/0x8b0 [ 223.703053][ T5863] ? device_add+0x3e7/0xbf0 [ 223.707583][ T5863] ? __pfx_kobject_add+0x10/0x10 [ 223.712530][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.718176][ T5863] ? _raw_spin_unlock+0x28/0x50 [ 223.723047][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.728696][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.734347][ T5863] ? get_device_parent+0x165/0x410 [ 223.739486][ T5863] device_add+0x4e5/0xbf0 [ 223.743846][ T5863] hci_conn_add_sysfs+0xe8/0x200 [ 223.748802][ T5863] le_conn_complete_evt+0xc9f/0x12e0 [ 223.754116][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.759764][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 223.765504][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.771148][ T5863] ? __mutex_unlock_slowpath+0x21d/0x750 [ 223.776794][ T5863] ? __copy_skb_header+0x437/0x5b0 [ 223.781923][ T5863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.787578][ T5863] ? skb_pull_data+0x112/0x230 [ 223.792377][ T5863] hci_le_conn_complete_evt+0x18c/0x420 [ 223.797952][ T5863] hci_event_packet+0xa57/0x1540 [ 223.802908][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 223.808216][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 223.813599][ T5863] ? do_raw_spin_unlock+0x13c/0x8b0 [ 223.818819][ T5863] ? __entry_text_end+0xfdfc5/0x1020c9 [ 223.824289][ T5863] ? hci_send_to_monitor+0xd8/0x7f0 [ 223.829514][ T5863] ? kcov_remote_start+0x97/0x7d0 [ 223.834561][ T5863] hci_rx_work+0x3e8/0xca0 [ 223.839001][ T5863] ? process_scheduled_works+0x976/0x1850 [ 223.844738][ T5863] process_scheduled_works+0xa65/0x1850 [ 223.850333][ T5863] ? __pfx_process_scheduled_works+0x10/0x10 [ 223.856348][ T5863] ? assign_work+0x364/0x3d0 [ 223.860960][ T5863] worker_thread+0x870/0xd30 [ 223.865587][ T5863] ? __kthread_parkme+0x169/0x1d0 [ 223.870638][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 223.875794][ T5863] kthread+0x2f2/0x390 [ 223.879890][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 223.885022][ T5863] ? __pfx_kthread+0x10/0x10 [ 223.889630][ T5863] ret_from_fork+0x4d/0x80 [ 223.894080][ T5863] ? __pfx_kthread+0x10/0x10 [ 223.898680][ T5863] ret_from_fork_asm+0x1a/0x30 [ 223.903481][ T5863] [ 223.906632][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.920073][ T5863] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 223.934398][ T5863] Bluetooth: hci5: failed to register connection device [ 223.941870][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.989025][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.015695][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.157839][ T9598] loop9: detected capacity change from 0 to 1024 [ 224.190949][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.237126][ T5921] usb 4-1: config 0 descriptor?? [ 224.306160][ T9598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.328760][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.619923][ T7801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.665437][ T5921] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 224.703478][ T5921] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 225.046867][ T47] usb 4-1: USB disconnect, device number 6 [ 225.053066][ T9604] loop1: detected capacity change from 0 to 40427 [ 225.101764][ T9604] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 225.109645][ T9604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 225.331163][ T9596] loop8: detected capacity change from 0 to 40427 [ 225.493026][ T9604] F2FS-fs (loop1): invalid crc value [ 225.500733][ T9596] F2FS-fs (loop8): invalid crc value [ 225.514911][ T9596] F2FS-fs (loop8): Found nat_bits in checkpoint [ 225.662796][ T9604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 225.871005][ T9596] F2FS-fs (loop8): Start checkpoint disabled! [ 225.888545][ T9604] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 225.904518][ T9596] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 225.912643][ T9604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 226.103338][ T9604] F2FS-fs (loop1): Unexpected flush for atomic writes: ino=10, npages=1 [ 226.160394][ T9604] syz.1.941: attempt to access beyond end of device [ 226.160394][ T9604] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.316455][ T5841] syz-executor: attempt to access beyond end of device [ 226.316455][ T5841] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 226.333321][ T5841] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 226.501135][ T1082] kworker/u8:5: attempt to access beyond end of device [ 226.501135][ T1082] loop8: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 226.628738][ T33] kworker/u8:2: attempt to access beyond end of device [ 226.628738][ T33] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 226.679126][ T33] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 226.722643][ T33] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 226.730824][ T33] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 227.569708][ T9687] loop0: detected capacity change from 0 to 8192 [ 228.480206][ T9720] loop0: detected capacity change from 0 to 1024 [ 228.602483][ T9658] loop3: detected capacity change from 0 to 40427 [ 228.631541][ T9658] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 228.661913][ T9658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.781930][ T9658] F2FS-fs (loop3): invalid crc value [ 228.844278][ T9658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.932103][ T3001] hfsplus: b-tree write err: -5, ino 4 [ 229.087552][ T9658] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.151575][ T9658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.290055][ T9658] syz.3.957: attempt to access beyond end of device [ 229.290055][ T9658] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 229.406596][ T9658] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.417820][ T9742] loop9: detected capacity change from 0 to 8192 [ 229.451900][ T9658] syz.3.957: attempt to access beyond end of device [ 229.451900][ T9658] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 229.555420][ T9658] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.768701][ T9718] loop8: detected capacity change from 0 to 40427 [ 229.781310][ T9701] loop1: detected capacity change from 0 to 32768 [ 229.878360][ T9701] XFS: noikeep mount option is deprecated. [ 229.951808][ T9718] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1fffff [ 230.026104][ T9718] F2FS-fs (loop8): invalid crc value [ 230.121881][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 230.198017][ T9718] F2FS-fs (loop8): Found nat_bits in checkpoint [ 230.198213][ T9701] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.444816][ T9773] IPVS: Scheduler module ip_vs_sip not found [ 230.570218][ T9718] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 230.597849][ T9701] XFS (loop1): Ending clean mount [ 230.642554][ T9701] XFS (loop1): Quotacheck needed: Please wait. [ 230.880530][ T9701] XFS (loop1): Quotacheck: Done. [ 230.937100][ T9789] loop0: detected capacity change from 0 to 512 [ 230.946383][ T9789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.959156][ T7458] syz-executor: attempt to access beyond end of device [ 230.959156][ T7458] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.974239][ T7458] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 230.996219][ T9789] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.056266][ T9789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.993: bg 0: block 248: padding at end of block bitmap is not set [ 231.142682][ T9789] Quota error (device loop0): write_blk: dquota write failed [ 231.150423][ T9789] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 231.211357][ T9789] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.993: Failed to acquire dquot type 1 [ 231.272370][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.305033][ T9789] EXT4-fs (loop0): 1 truncate cleaned up [ 231.359899][ T9789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.516874][ T9789] EXT4-fs error (device loop0): __ext4_remount:6553: comm syz.0.993: Abort forced by user [ 231.518943][ T9801] loop3: detected capacity change from 0 to 256 [ 231.537601][ T9789] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 231.564235][ T9789] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 231.596093][ T9789] ext4 filesystem being remounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.600041][ T9801] exfat: Deprecated parameter 'namecase' [ 231.714695][ T9789] Quota error (device loop0): write_blk: dquota write failed [ 231.782859][ T9789] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 231.865446][ T9789] EXT4-fs error (device loop0): ext4_acquire_dquot:6910: comm syz.0.993: Failed to acquire dquot type 1 [ 231.895322][ T53] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.954198][ T9790] loop7: detected capacity change from 0 to 32768 [ 232.100662][ T9790] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.991 (9790) [ 232.133912][ T9801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 232.242750][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.258000][ T53] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.268965][ T1082] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 232.298333][ T1082] EXT4-fs error (device loop0): ext4_release_dquot:6933: comm kworker/u8:5: Failed to release dquot type 1 [ 232.329580][ T9790] BTRFS info (device loop7): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 232.342089][ T9790] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 232.374046][ T9790] BTRFS info (device loop7): using free-space-tree [ 232.864541][ T9839] binder: 9833:9839 ioctl c0306201 200003c0 returned -22 [ 233.024651][ T9812] loop8: detected capacity change from 0 to 40427 [ 233.063128][ T9812] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 233.070925][ T9812] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 233.197697][ T9837] loop0: detected capacity change from 0 to 32768 [ 233.204413][ T9812] F2FS-fs (loop8): invalid crc value [ 233.240556][ T53] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.283922][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.348530][ T9812] F2FS-fs (loop8): Found nat_bits in checkpoint [ 233.409659][ T9837] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.465024][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.476046][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.532102][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.542340][ T5863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.549735][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.649462][ T9812] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 233.656923][ T9812] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 233.694322][ T9837] XFS (loop0): Ending clean mount [ 233.701186][ T53] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.937204][ T7108] BTRFS info (device loop7): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 233.962093][ T5843] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.133426][ T9876] loop1: detected capacity change from 0 to 4096 [ 234.215292][ T9876] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 234.396873][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.602956][ T53] bridge_slave_1: left allmulticast mode [ 234.608697][ T53] bridge_slave_1: left promiscuous mode [ 234.626617][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.891814][ T53] bridge_slave_0: left allmulticast mode [ 234.897857][ T53] bridge_slave_0: left promiscuous mode [ 234.906213][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.408285][ T9894] loop3: detected capacity change from 0 to 32768 [ 235.547207][ T9894] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 235.643718][ T5859] Bluetooth: hci4: command tx timeout [ 235.790280][ T9894] XFS (loop3): Ending clean mount [ 235.880614][ T1192] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 235.973872][ T5845] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 236.093821][ T1192] usb 9-1: Using ep0 maxpacket: 8 [ 236.117360][ T1192] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 236.160911][ T1192] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.197822][ T1192] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.251191][ T1192] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.301623][ T1192] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.310749][ T1192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.455431][ T9901] loop7: detected capacity change from 0 to 32768 [ 236.520168][ T9901] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 236.588635][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.686542][ T1192] usb 9-1: GET_CAPABILITIES returned 0 [ 236.694564][ T1192] usbtmc 9-1:16.0: can't read capabilities [ 236.850870][ T7108] ocfs2: Unmounting device (7,7) on (node local) [ 236.884783][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.907529][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 236.919930][ T1760] usb 9-1: USB disconnect, device number 5 [ 237.101369][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.139712][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.153735][ T9917] loop1: detected capacity change from 0 to 32768 [ 237.163755][ T9917] XFS: ikeep mount option is deprecated. [ 237.172624][ T9917] XFS: ikeep mount option is deprecated. [ 237.180467][ T53] bond0 (unregistering): Released all slaves [ 237.209525][ T9835] chnl_net:caif_netlink_parms(): no params data found [ 237.366433][ T9917] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.466411][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.656404][ T9917] XFS (loop1): Ending clean mount [ 237.662442][ T9944] loop7: detected capacity change from 0 to 256 [ 237.680688][ T9944] exfat: Unknown parameter 'ÙÇ×Ð@<µ¨óu‚ÞþP¡ƒl’¯õø°U6óq›_Û¦dîÒaѰ“ªõ5._:†kæ /ß®­íJ¸d¸çH³¤ÜTÏFë"ˆ@ƒMKT’Ub“ñ?JŸî¥õSÂì¾;m…Çý!†ý.Ϙˆ8¸F-¿¥9lÅ' [ 237.710463][ T5859] Bluetooth: hci4: command tx timeout [ 237.751179][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.987262][ T9944] loop7: detected capacity change from 0 to 256 [ 238.027274][ T9944] exfat: Unknown parameter 'iogid' [ 238.176244][ T9948] loop3: detected capacity change from 0 to 32768 [ 238.178348][ T1192] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.269900][ T9948] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 238.343047][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.413583][ T1192] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.445640][ T1192] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.479239][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.494696][ T9948] XFS (loop3): Starting recovery (logdev: internal) [ 238.511341][ T1192] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.522295][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.528131][ T9948] XFS (loop3): Ending recovery (logdev: internal) [ 238.539826][ T9835] bridge_slave_0: entered allmulticast mode [ 238.567812][ T1192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.573033][ T9835] bridge_slave_0: entered promiscuous mode [ 238.613450][ T9952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.614160][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.648311][ T1192] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.648637][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.678483][ T5845] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 238.700366][ T9835] bridge_slave_1: entered allmulticast mode [ 238.755380][ T9835] bridge_slave_1: entered promiscuous mode [ 238.930259][ T1192] usb 1-1: USB disconnect, device number 5 [ 239.447466][ T53] hsr_slave_0: left promiscuous mode [ 239.462296][ T9982] loop3: detected capacity change from 0 to 4096 [ 239.469432][ T53] hsr_slave_1: left promiscuous mode [ 239.510172][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.531610][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.605067][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.627677][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.682489][ T9975] loop7: detected capacity change from 0 to 32768 [ 239.794456][ T5859] Bluetooth: hci4: command tx timeout [ 239.837236][ T53] veth1_macvtap: left promiscuous mode [ 239.862406][ T53] veth0_macvtap: left promiscuous mode [ 239.868413][ T53] veth1_vlan: left promiscuous mode [ 239.878614][ T53] veth0_vlan: left promiscuous mode [ 240.001818][ T9975] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 240.163168][ T9975] XFS (loop7): Ending clean mount [ 240.241150][ T9999] input: syz0 as /devices/virtual/input/input10 [ 240.346012][ T5949] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 [ 240.410732][ T5949] XFS (loop7): Unmount and run xfs_repair [ 240.417730][ T5949] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 240.462352][ T5949] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 240.471287][ T5949] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 240.522413][ T5949] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 240.532050][ T5949] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 240.540981][ T5949] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 240.594687][ T5949] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.595296][T10008] loop1: detected capacity change from 0 to 64 [ 240.631429][ T5949] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.640455][ T5949] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.687217][ T9975] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74 [ 240.897118][ T9975] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 240.913637][ T9975] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 241.030778][ T7108] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 241.085720][T10016] loop6: detected capacity change from 512 to 464 [ 241.437607][T10004] loop0: detected capacity change from 0 to 32768 [ 241.538032][T10004] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 241.671790][ T5949] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 241.714754][T10039] trusted_key: syz.7.1048 sent an empty control message without MSG_MORE. [ 241.830500][T10004] XFS (loop0): Ending clean mount [ 241.841602][ T5949] usb 9-1: Using ep0 maxpacket: 8 [ 241.849648][ T5949] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.864452][ T5949] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 241.870399][ T5859] Bluetooth: hci4: command tx timeout [ 241.877995][ T5949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 241.903758][T10004] XFS (loop0): Quotacheck needed: Please wait. [ 241.961423][ T5949] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.019888][ T5949] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 242.039725][ T5949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.087659][ T5949] usb 9-1: Product: syz [ 242.127884][T10004] XFS (loop0): Quotacheck: Done. [ 242.135155][ T5949] usb 9-1: Manufacturer: syz [ 242.139801][ T5949] usb 9-1: SerialNumber: syz [ 242.159498][ T5949] usb 9-1: config 0 descriptor?? [ 242.182828][ T5949] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input11 [ 242.198351][T10004] XFS (loop0): User initiated shutdown received. [ 242.233601][T10004] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:455). Shutting down filesystem. [ 242.323206][T10004] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 242.462546][ C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 242.518547][ T5843] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 242.557175][T10048] loop3: detected capacity change from 0 to 2048 [ 242.565892][ T1192] usb 9-1: USB disconnect, device number 6 [ 242.565952][ C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 242.704838][T10048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.723253][T10048] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.840338][ T29] audit: type=1800 audit(1731987986.408:79): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1052" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 242.876947][T10048] fs-verity: sha512 using implementation "sha512-avx2" [ 242.921377][T10048] fs-verity (loop3, inode 13): Error -22 reading file data [ 242.937483][T10048] fs-verity (loop3, inode 13): Error -22 building Merkle tree [ 243.006704][ T53] team0 (unregistering): Port device team_slave_1 removed [ 243.037527][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.133371][T10053] loop0: detected capacity change from 0 to 4096 [ 243.160630][T10053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.192247][ T53] team0 (unregistering): Port device team_slave_0 removed [ 243.199681][T10056] loop3: detected capacity change from 0 to 64 [ 243.297668][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.305390][ T29] audit: type=1800 audit(1731987986.888:80): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1054" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 243.553257][T10065] fuse: Bad value for 'fd' [ 244.202005][ T5859] Bluetooth: hci1: command tx timeout [ 244.377717][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.409629][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.571041][T10073] loop1: detected capacity change from 0 to 128 [ 244.676344][T10043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.680390][ T9835] team0: Port device team_slave_0 added [ 244.706110][T10043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.715280][ T9835] team0: Port device team_slave_1 added [ 244.790878][T10043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.853406][T10043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.889509][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.903566][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.990954][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.029478][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.051527][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.065183][T10043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 245.106912][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.209223][T10043] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 245.229244][T10043] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 245.265421][T10043] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 245.332442][T10043] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 245.359123][T10043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.370111][ T9835] hsr_slave_0: entered promiscuous mode [ 245.379180][T10043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 245.389548][ T9835] hsr_slave_1: entered promiscuous mode [ 245.409045][ T9835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.429325][ T9835] Cannot create hsr debugfs directory [ 245.440544][T10043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 245.731643][ T5949] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.793173][T10106] loop7: detected capacity change from 0 to 64 [ 245.943217][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 245.965832][T10109] syz.7.1067: attempt to access beyond end of device [ 245.965832][T10109] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 245.981769][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.008340][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 246.047395][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.055828][T10109] Buffer I/O error on dev loop7, logical block 512, async page read [ 246.132184][T10109] syz.7.1067: attempt to access beyond end of device [ 246.132184][T10109] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 246.139952][ T5949] usb 4-1: config 0 descriptor?? [ 246.193163][ T5949] hub 4-1:0.0: bad descriptor, ignoring hub [ 246.199167][ T5949] hub 4-1:0.0: probe with driver hub failed with error -5 [ 246.237752][T10109] Buffer I/O error on dev loop7, logical block 56576, async page read [ 246.521817][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.656166][T10128] loop1: detected capacity change from 0 to 512 [ 246.665369][T10128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.671700][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 246.687847][T10128] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1077: bad orphan inode 131083 [ 246.704061][ T1760] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 246.715276][T10128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.749227][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 246.790256][ T5909] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 246.823027][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.851559][ T5909] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.859804][ T5909] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.868668][ T5909] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.877104][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.886922][ T5909] usb 1-1: config 0 has no interface number 0 [ 246.893939][ T5909] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 246.917950][ T5909] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 246.948571][ T5909] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.969220][ T5909] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.998840][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.023947][ T5909] usb 1-1: config 0 interface 125 has no altsetting 0 [ 247.031284][ T5909] usb 1-1: config 0 interface 125 has no altsetting 2 [ 247.077224][ T5909] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 247.096028][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.119687][ T5909] usb 1-1: Product: syz [ 247.132612][ T5909] usb 1-1: Manufacturer: syz [ 247.139707][ T5909] usb 1-1: SerialNumber: syz [ 247.189070][ T5909] usb 1-1: config 0 descriptor?? [ 247.215121][ T5909] usb 1-1: selecting invalid altsetting 2 [ 247.232008][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 247.282023][ T1760] usb 4-1: USB disconnect, device number 7 [ 247.383038][ T5859] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.448388][T10147] loop1: detected capacity change from 0 to 1024 [ 247.689416][T10153] loop7: detected capacity change from 0 to 512 [ 247.858464][T10153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.907115][T10153] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.082788][T10153] ------------[ cut here ]------------ [ 248.082814][T10153] Looking for class "&ei->i_data_sem" with key init_once.__key.800, but found a different class "&ei->i_data_sem" with the same key [ 248.082963][T10153] WARNING: CPU: 1 PID: 10153 at kernel/locking/lockdep.c:939 look_up_lock_class+0xdc/0x170 [ 248.083009][T10153] Modules linked in: [ 248.083030][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.7.1083 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 248.083061][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 248.083079][T10153] RIP: 0010:look_up_lock_class+0xdc/0x170 [ 248.083109][T10153] Code: 01 0f 85 8a 00 00 00 c6 05 df c8 3e 04 01 90 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 48 c7 c7 00 ed 0a 8c e8 a5 93 8d f5 90 <0f> 0b 90 90 eb 61 90 e8 f8 41 f2 f8 e8 93 d2 ac f5 48 c7 c7 40 ec [ 248.083132][T10153] RSP: 0018:ffffc900030af4f0 EFLAGS: 00010046 [ 248.083157][T10153] RAX: 54324d1ea3f70400 RBX: ffffffff93d07fd8 RCX: 0000000000040000 [ 248.083178][T10153] RDX: ffffc9000c7c3000 RSI: 0000000000000c95 RDI: 0000000000000c96 [ 248.083197][T10153] RBP: ffffc900030af600 R08: ffffffff8155e312 R09: 1ffff110170e519a [ 248.083219][T10153] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88807adbbdf8 [ 248.083241][T10153] R13: ffff88807adbbdf8 R14: ffff88807adbbdf8 R15: ffffffff9a514401 [ 248.083268][T10153] FS: 00007f68a86fc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 248.083294][T10153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.083314][T10153] CR2: 000000110c3741ce CR3: 0000000033714000 CR4: 0000000000350ef0 [ 248.083336][T10153] Call Trace: [ 248.083347][T10153] [ 248.083358][T10153] ? __warn+0x168/0x4e0 [ 248.083392][T10153] ? look_up_lock_class+0xdc/0x170 [ 248.083421][T10153] ? report_bug+0x2b3/0x500 [ 248.083461][T10153] ? look_up_lock_class+0xdc/0x170 [ 248.083491][T10153] ? handle_bug+0x60/0x90 [ 248.083522][T10153] ? exc_invalid_op+0x1a/0x50 [ 248.083554][T10153] ? asm_exc_invalid_op+0x1a/0x20 [ 248.083587][T10153] ? __warn_printk+0x292/0x360 [ 248.083625][T10153] ? look_up_lock_class+0xdc/0x170 [ 248.083655][T10153] register_lock_class+0x102/0x980 [ 248.083697][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.083729][T10153] ? __asan_memset+0x23/0x50 [ 248.083757][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.083789][T10153] ? truncate_inode_pages_range+0x51f/0xfc0 [ 248.083828][T10153] ? __pfx_register_lock_class+0x10/0x10 [ 248.083874][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.083915][T10153] __lock_acquire+0xf0/0x2050 [ 248.083967][T10153] lock_acquire+0x1ed/0x550 [ 248.084009][T10153] ? ext4_ioctl+0x4410/0x58d0 [ 248.084046][T10153] ? __pfx_lock_acquire+0x10/0x10 [ 248.084087][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.084127][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.084165][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.084210][T10153] down_write_nested+0xa2/0x220 [ 248.084245][T10153] ? ext4_ioctl+0x4410/0x58d0 [ 248.084276][T10153] ? __pfx_down_write_nested+0x10/0x10 [ 248.084311][T10153] ? ext4_journal_check_start+0x175/0x250 [ 248.084358][T10153] ? __ext4_journal_start_sb+0x290/0x600 [ 248.084405][T10153] ext4_ioctl+0x4410/0x58d0 [ 248.084441][T10153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.084473][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.084506][T10153] ? do_vfs_ioctl+0x1e71/0x2e40 [ 248.084539][T10153] ? __pfx_ext4_ioctl+0x10/0x10 [ 248.084570][T10153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.084607][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.084640][T10153] ? mark_lock+0x9a/0x360 [ 248.084672][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.084713][T10153] ? tomoyo_path_number_perm+0x208/0x880 [ 248.084762][T10153] ? __pfx_lock_release+0x10/0x10 [ 248.084806][T10153] ? lockdep_hardirqs_on+0x99/0x150 [ 248.084835][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.084873][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.084905][T10153] ? kfree+0x1a0/0x440 [ 248.084940][T10153] ? tomoyo_path_number_perm+0x68d/0x880 [ 248.084984][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.085016][T10153] ? tomoyo_path_number_perm+0x71a/0x880 [ 248.085057][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.085089][T10153] ? __lock_acquire+0x1384/0x2050 [ 248.085133][T10153] ? tomoyo_path_number_perm+0x208/0x880 [ 248.085176][T10153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.085246][T10153] ? __fget_files+0x2a/0x410 [ 248.085317][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.085350][T10153] ? __fget_files+0x2a/0x410 [ 248.085389][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.085420][T10153] ? __pfx_ext4_ioctl+0x10/0x10 [ 248.085452][T10153] __se_sys_ioctl+0xf7/0x170 [ 248.085481][T10153] do_syscall_64+0xf3/0x230 [ 248.085514][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.085542][T10153] RIP: 0033:0x7f68a797e759 [ 248.085565][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.085589][T10153] RSP: 002b:00007f68a86fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.085622][T10153] RAX: ffffffffffffffda RBX: 00007f68a7b35f80 RCX: 00007f68a797e759 [ 248.085644][T10153] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 248.085662][T10153] RBP: 00007f68a79f175e R08: 0000000000000000 R09: 0000000000000000 [ 248.085681][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.085699][T10153] R13: 0000000000000000 R14: 00007f68a7b35f80 R15: 00007ffdf5af5228 [ 248.085729][T10153] [ 248.085744][T10153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.085759][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.7.1083 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 248.085789][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 248.085806][T10153] Call Trace: [ 248.085816][T10153] [ 248.085826][T10153] dump_stack_lvl+0x241/0x360 [ 248.085859][T10153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.085888][T10153] ? __pfx__printk+0x10/0x10 [ 248.085914][T10153] ? _printk+0xd5/0x120 [ 248.085941][T10153] ? __init_begin+0x41000/0x41000 [ 248.085975][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.086007][T10153] ? vscnprintf+0x5d/0x90 [ 248.086044][T10153] panic+0x349/0x880 [ 248.086071][T10153] ? __warn+0x177/0x4e0 [ 248.086101][T10153] ? __pfx_panic+0x10/0x10 [ 248.086125][T10153] ? show_trace_log_lvl+0x3b2/0x410 [ 248.086166][T10153] __warn+0x34b/0x4e0 [ 248.086195][T10153] ? look_up_lock_class+0xdc/0x170 [ 248.086225][T10153] report_bug+0x2b3/0x500 [ 248.086266][T10153] ? look_up_lock_class+0xdc/0x170 [ 248.086296][T10153] handle_bug+0x60/0x90 [ 248.086327][T10153] exc_invalid_op+0x1a/0x50 [ 248.086358][T10153] asm_exc_invalid_op+0x1a/0x20 [ 248.086385][T10153] RIP: 0010:look_up_lock_class+0xdc/0x170 [ 248.086413][T10153] Code: 01 0f 85 8a 00 00 00 c6 05 df c8 3e 04 01 90 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 48 c7 c7 00 ed 0a 8c e8 a5 93 8d f5 90 <0f> 0b 90 90 eb 61 90 e8 f8 41 f2 f8 e8 93 d2 ac f5 48 c7 c7 40 ec [ 248.086437][T10153] RSP: 0018:ffffc900030af4f0 EFLAGS: 00010046 [ 248.086460][T10153] RAX: 54324d1ea3f70400 RBX: ffffffff93d07fd8 RCX: 0000000000040000 [ 248.086482][T10153] RDX: ffffc9000c7c3000 RSI: 0000000000000c95 RDI: 0000000000000c96 [ 248.086501][T10153] RBP: ffffc900030af600 R08: ffffffff8155e312 R09: 1ffff110170e519a [ 248.086522][T10153] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88807adbbdf8 [ 248.086544][T10153] R13: ffff88807adbbdf8 R14: ffff88807adbbdf8 R15: ffffffff9a514401 [ 248.086571][T10153] ? __warn_printk+0x292/0x360 [ 248.086612][T10153] register_lock_class+0x102/0x980 [ 248.086653][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.086685][T10153] ? __asan_memset+0x23/0x50 [ 248.086712][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.086744][T10153] ? truncate_inode_pages_range+0x51f/0xfc0 [ 248.086780][T10153] ? __pfx_register_lock_class+0x10/0x10 [ 248.086821][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.086860][T10153] __lock_acquire+0xf0/0x2050 [ 248.086911][T10153] lock_acquire+0x1ed/0x550 [ 248.086951][T10153] ? ext4_ioctl+0x4410/0x58d0 [ 248.086985][T10153] ? __pfx_lock_acquire+0x10/0x10 [ 248.087026][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.087064][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.087102][T10153] ? __pfx___might_resched+0x10/0x10 [ 248.087146][T10153] down_write_nested+0xa2/0x220 [ 248.087180][T10153] ? ext4_ioctl+0x4410/0x58d0 [ 248.087209][T10153] ? __pfx_down_write_nested+0x10/0x10 [ 248.087241][T10153] ? ext4_journal_check_start+0x175/0x250 [ 248.087286][T10153] ? __ext4_journal_start_sb+0x290/0x600 [ 248.087330][T10153] ext4_ioctl+0x4410/0x58d0 [ 248.087364][T10153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.087395][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087427][T10153] ? do_vfs_ioctl+0x1e71/0x2e40 [ 248.087458][T10153] ? __pfx_ext4_ioctl+0x10/0x10 [ 248.087487][T10153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.087517][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087549][T10153] ? mark_lock+0x9a/0x360 [ 248.087579][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087621][T10153] ? tomoyo_path_number_perm+0x208/0x880 [ 248.087666][T10153] ? __pfx_lock_release+0x10/0x10 [ 248.087705][T10153] ? lockdep_hardirqs_on+0x99/0x150 [ 248.087732][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087767][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087799][T10153] ? kfree+0x1a0/0x440 [ 248.087834][T10153] ? tomoyo_path_number_perm+0x68d/0x880 [ 248.087879][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087910][T10153] ? tomoyo_path_number_perm+0x71a/0x880 [ 248.087951][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.087983][T10153] ? __lock_acquire+0x1384/0x2050 [ 248.088027][T10153] ? tomoyo_path_number_perm+0x208/0x880 [ 248.088070][T10153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.088139][T10153] ? __fget_files+0x2a/0x410 [ 248.088177][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.088210][T10153] ? __fget_files+0x2a/0x410 [ 248.088249][T10153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.088281][T10153] ? __pfx_ext4_ioctl+0x10/0x10 [ 248.088311][T10153] __se_sys_ioctl+0xf7/0x170 [ 248.088340][T10153] do_syscall_64+0xf3/0x230 [ 248.088373][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.088400][T10153] RIP: 0033:0x7f68a797e759 [ 248.088421][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.088445][T10153] RSP: 002b:00007f68a86fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.088472][T10153] RAX: ffffffffffffffda RBX: 00007f68a7b35f80 RCX: 00007f68a797e759 [ 248.088493][T10153] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 248.088512][T10153] RBP: 00007f68a79f175e R08: 0000000000000000 R09: 0000000000000000 [ 248.088530][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.088548][T10153] R13: 0000000000000000 R14: 00007f68a7b35f80 R15: 00007ffdf5af5228 [ 248.088579][T10153] [ 248.088890][T10153] Kernel Offset: disabled