last executing test programs: 1m6.574255011s ago: executing program 3 (id=26): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x404, 0x870}}) 1m6.514313666s ago: executing program 3 (id=30): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040), 0x6) 1m6.420992123s ago: executing program 3 (id=36): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) 1m6.350088758s ago: executing program 3 (id=40): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000400)={[{@utf8}, {@discard}, {@umask={'umask', 0x3d, 0x8}}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x2}}, {@umask}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) 1m6.218776826s ago: executing program 3 (id=46): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x5, 0x80080402, 0x7b, @private1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x2f00, 0x8, 0x8008}}) 1m5.184847816s ago: executing program 3 (id=87): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x7, 0x2}) 1m5.094371916s ago: executing program 32 (id=87): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x7, 0x2}) 47.26657438s ago: executing program 4 (id=1008): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1010841, &(0x7f0000000140)=ANY=[], 0x1, 0x219, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 47.213520307s ago: executing program 4 (id=1010): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f31e7e8c7c988fb", 0xe}], 0x1}, 0x44000) 47.072075257s ago: executing program 4 (id=1015): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0xffffffffffffffff, 0x30) 46.992440697s ago: executing program 4 (id=1021): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000740)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@utf8}, {@errors_remount}, {}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x40000001}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x80c}}, {@namecase}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 46.885314601s ago: executing program 4 (id=1027): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x84, 0x1, 0xfffffffffffffffe, &(0x7f0000000280)=0x3d) 46.4520091s ago: executing program 4 (id=1044): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x40000, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, 0xfffffffffffffffe) 46.391717657s ago: executing program 33 (id=1044): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x40000, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, 0xfffffffffffffffe) 37.624291301s ago: executing program 0 (id=1513): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) 37.572275015s ago: executing program 0 (id=1517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 37.354082613s ago: executing program 0 (id=1529): setresuid(0x0, 0xee01, 0x0) socket$inet6(0xa, 0x3, 0x7) 37.288956967s ago: executing program 0 (id=1531): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000400)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x40000001}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x808}}, {@zero_size_dir}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 37.205759419s ago: executing program 0 (id=1537): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 36.651511475s ago: executing program 0 (id=1566): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$FICLONE(r0, 0x40049409, r0) 36.650638872s ago: executing program 34 (id=1566): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$FICLONE(r0, 0x40049409, r0) 1.189568137s ago: executing program 2 (id=3435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) 1.123766481s ago: executing program 2 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c00080008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 981.582401ms ago: executing program 2 (id=3442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000c00000008001340000004ff0800064041002b0c13000300686173683a6e65742c69666163650000050005000a000000050004"], 0x70}}, 0x0) 980.554089ms ago: executing program 2 (id=3444): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 741.870382ms ago: executing program 2 (id=3458): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000002c0), 0x2, 0xb9a7, &(0x7f000000c1c0)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPa7j+2/4WwHB5/xdf+OFvAsdn6x9XivXf8Pwt3wscP0z/uFL0v3zLT/4VOH64/nGl6H/XG3c8Fjh+hP5xpej/8IZfTgscP1L/uFL0r3ny56H/TvNj+seVov9ZD9x7QeD4x/WPK0X/b629+8TA8aO2379mZz3EcS1F/75nT3w2cLzN+o8rRf9Zr8wP/f2w7frHlaL/RX3zfhw43qF/XCn63/rq0V8JHD9a/7hS9H/6mbOuCByfo39cKfq/d/3ChYHjx+gfV4r+nWtOaw4cn6t/XCn6965b8P7A8Xn6x5Wi/9wXvvTXwPFj9Y8rRf9Vz1/9n8DxTv3jStH/T1uuvT5w/Dj940rRf+83Vq0OHJ+vf1wp+p+z4fr2wPHj9Y8rRf87nvz2+YHjJ+gfV4r+rz5wwx6B4136x5Wi/2Frvx/6w9ZP1D+uFP2ve23DDYHjJ+kfV4r+c9567J7A8U/oH1eK/vu8/MzjgeMn6x9Xiv5P/P3pTYHjC/SPK0X/Hz2ydmLg+Cf1jytF/7N/94fhfk/I23GK/nGl6H/Eo+s6A8dP1T+uFP03/e2hiwPHT9M/rhT9Z/57r9sCx7v1jytF/zc373NV4Pin9I8rRf/bNu75QuD4p/WPK0X/ZS9+YF3g+EL940rRf/L9ux8eOH66/nGl6P/Ug3vsHTh+hv5xpej/xacmrAgcP1P/uFL0n//ExAWB42fpDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLencBdWg/8Hz+ztqhUQkKmPbRHi9CilSxtKqVFe9pU2qksabGURIulvSREhUoLSpTSKoSILJEkCS3zf00z95im78wznr/HZL7v9+s199muOf3O73N+5z7d132uAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmRJutvdEag8HICZcOe8rtp+yz7j1Ln7r6WScses0rdjpm2IPjr11t5gk3jxk7mcETd7bauNuGj99k5IkXnTV83IXhk97vrLPMMmyOwbB58qgO3up/GPacQ2fG3+mYwWAw7OjxfyaaZdyXVe+++/b/4b6qbbb6OmuPm7zxfyZ2GzHh5gnXTzw/cvyfVbYeDFbZcjDF58f0t+G9dz40vcfw32Cz1ddZb7L+gwmdn+g++fpuNfnz/JJbdltluob7N9ls9bXXH9d6Suv4nE1XO2vsE6/rI08dDEaeNhiMPH0wGHnG9O7Bv8fqayy/xrjX/KHL46sfNvSGIL2+D1tgo81nHQwGo8Z/nxh55tD3AuC/y+prLP+asP5HD92e1v+qd88xn/UP//3WW32N5QeTvM8ff+1hQ/9/H9f/PSM2OG76jRgAAAD4Vz1+36VXTNjXN3wwmH8wyf7eiecm/Fxg2AVX3XTTdBvo00PYT/bU35n4LzOu8sznjRkM9thkeg+F6WDY9B4A05X+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276V/syfv/J37ee86h09WP3/jVEzZdZMV5Nr1o8r8/7rqZ//PDnl5m1P3/g12GjW85rvkug8HgDatvuPHig8Hgok3nWXHBwcTbVhp32ypzj5hwgIDFn/i6yBTueMykp7NOvI8Lnrj/9caeNmLYZIOYxOvXvOygnTd7+GWTny425ccx8fgSF6235mxDn2UZPtlGU3quDt3/0GOZvPOEsS8+buxL77v7Xkvvc+BBS+6y+7Y77bDTDnssv9wKKy634rIrrbTC0jvustsOy4z/OoU5Gz8rC03LnI2efM7uW33SOZv8sU1pzsZMbc4mfNL3nuM2vWRozkb+i3O20NTnbMwuQ2MdM2qwzRNTM+5BLDxqcMC4C8vONMlry7zjtn3l3MMHg2Of/GtIM018Dg47bJd/w3FLJpwuMOF0wXjckoundNySwdBxS4YOmLDy+JN9Lx/abvLPWU+4epqPW7L/Go8uOHjK57L+T/yvvv8/pddKwyZO1NA3kQnbjO/1z+NMDE3bapMcZ2LFdCyZf6enjHfM8InP6zTeCZ+LGzbZ/E/tc3GDnXY8ZJEJUVcc/7ce/19Hya8d6z/xdUrrecxkp1N77Rjxz7P/vHaHG144+WvH66Y8xCeti6E5mmmyjab02nHAttfsMulr0xReO9bfZcIHjf/52jHuP7vQ0GvHuLEvOmpw7LgLy427sNiowbnjLiz/xIVZBleNu7DUdnvutv2wJ75fPeV5sPiwJx3gJjxv157seTsNx8dZ9brBYNVr0+Oa8nRm6Xk7eirjzZ/nHkz189xXbrvAhYPBYPYJj2vlobH/b6Txjpz6eMPxJwZTO/7E4LSb9jvj3zzeievsiefahJfpxafwd560zuZ8yjo7fMQkK2Na39dsH7Yff37eifd2+g43Xj80R6Mmu9//6Xv00GNJ/Yfe801q2GGDYVObmym9D3vS3Mwx9bmZ1vcvi094gzHLVOZmiQcPffHQ3Iz+F+dmsSnMzaTvhyc1ejCY5clzM3Kw1rh3NBPmZtFpmZvZ/j3Pm1nD9uPPLzLxqjvWOmSlobkJcxG//w/d/6L/4twM22bi82bhJ25bcPhg9OjBAdvuu+/ey47/OnRxufFfp74GF56WuZz53zOX80141Rn+1MmZeNWuZ49d/n+7Bhf+V+dyzGD40P9z7zL5Yvn38fOfbvp307+b/t3076Z/N/276V9sCp//HzP0c8Gjhp250YQfxoy6+uG59p3e453OZuj9/xP6Pmn//75zPXz18MHE26a6f3b8Nk/L/bMrjj85eNmh7SbfPzjh6mneP/vQMdduPvjP7J/9Xxlaq9Pwc0Ov/93076Z/N/276d9N/27/av9V/4/GwfRh/XfTv5v+3fTvpn83/bvpX2wK+/+XGfo9gJv3efTMCTtCR+2z8SqPTO/xTmcz9P7/CX2ftP//kVU23mf4YOJtU93/P36bjv3/q9x10hGDp/H+/6G1av8//wP9u+nfTf9u+nfTv5v+3fTvpn83/btN1n8qR/xjRmT9d9O/m/7FprD/f7Wh3wMYtcdCCw39PsCt9x85YnqPdzqbUff/+/f/e3n976Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+hebsP9/MNk/e/gmz4so7P//7zaF/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/zfrH7X031T/qKX/ZvpHLf031z9q6f8W/aOW/lvoH7X031L/qKX/W/WPWvpvpX/U0n9r/aOW/tvoH7X031b/qKX/2/SPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r6v13/qKX/bvpHLf131z9q6b+H/lFL/z31j1r676V/1NL/HfpHLf331j9q6b+P/lFL/331j1r6v1P/qKX/fvpHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/YP2jlv6H6B+19H+X/lFL/3frH7X0P1T/qKX/YfpHLf0P1z9q6f8e/aOW/u/VP2rp/z79o5b+79c/aul/hP5RS/8P6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/8P6h+19P+Q/lFL/w/rH7X0/4j+UUv/Y8v6j57G7Vr6H1fWf1q19P+o/lFL/+P1j1r6f0z/qKX/CfpHLf0/rn/U0v8T+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+n9U/aul/nv5RS//P6R+19D9f/6il/+f1j1r6f0H/qKX/F/WPWvpfoH/U0v9L+kct/b+sf9TS/0L9o5b+F+kftfS/WP+opf9X9I9a+n9V/6il/9f0j1r6X6J/1NL/Uv2jlv6X6R+19P+6/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19P+G/lFL/2/qH7X0/5b+UUv/q/WPWvpfo3/U0v/b+kct/a/VP2rp/x39o5b+39U/aul/nf5RS//r9Y9a+n9P/6il/w36Ry39b9Q/aun/ff2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+v9A/6il/x36Ry39f6h/1NL/R/pHLf1/rH/U0v9O/aOW/j/RP2rp/1P9o5b+P9M/aul/l/5RS/+f6x+19P+F/lFL/7v1j1r6/1L/qKX/r/SPWvrfo3/U0v/X+kct/X+jf9TS/7f6Ry39f6d/1NL/Xv2jlv6/1z9q6f8H/aOW/vfpH7X0/6P+UUv/+/WPWvr/Sf+opf8Dvf1nmtqNLf3/3Nt/qlr6P6h/1NL/L/pHLf0f0j9q6f9X/aOW/g/rH7X0/5v+UUv/v+sftfT/h/5RSf9ZBvpHJf0Hj+oftfR/TP+opf/j+kct/cfqH5X0HzbQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/yz6Ry39Z9U/aun/DP2jlv6z6R+19J9d/6il/xz6Ry39n6l/1NJ/Tv2jlv5z6R+19J9b/6il/7P0j1r6z6N/1NL/2fpHLf2fo3/U0v+5+kct/efVP2rp/zz9o5b+8+kftfR/vv5RS/8XFPc/fCq3tfR/YXH/qWnpP7/+UUv/F+kftfQfo3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NL/xfpHLf1fon/U0v+l+kct/ZfQP2rpv6T+UUv/pdr7PzJ2vMmubum/dHv/KWjpv4z+UUv/ZfWPWvovp3/U0n95/aOW/i/TP2rp/3L9o5b+K+gftfRfUf+opf9K+kct/VfWP2rp/wr9o5b+q+gftfR/pf5RS/9X6R+19H916j/yPziup6mW/qta/1FL/9X0j1r6r65/1NJ/Df2jlv6v0T9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il/2v1j1r6v07/qKX/+vpHLf1fr3/U0v8N+kct/d+of9TS/036Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+b9Y/aum/qf5RS//N9I9a+m+uf9TS/y36Ry39t9A/aum/pf5RS/+36h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/+36R+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfR/u/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfa8r9Z/mPjOtpqqX/O6z/qKX/3vpHLf330T9q6b+v/lFL/3fqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv7v0j9q6f9u/aOW/ofqH7X0P6yt/zT+VkNL/8Pb+k+jlv7v0T9q6f9e/aOW/u/TP2rp/379o5b+R+gftfT/gP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfT/oP5RS/8P6R+19P+w/lFL/4/oH7X0P1b/qKX/cfpHLf0/qn/U0v94/aOW/h/TP2rpf4L+UUv/j+sftfT/hP5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/pP5RS/9P6R+19P+0/lFL/8/oH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19D9X/6il/2f1j1r6n6d/1NL/c/pHLf3P1z9q6f95/aOW/l/QP2rp/0X9o5b+F+gftfT/kv5RS/8v6x+19L9Q/6il/0X6Ry39L9Y/aun/Ff2jlv5f1T9q6f81/aOW/pfoH7X0v1T/qKX/ZfpHLf2/rn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2/oX/U0v+b+kct/b+lf9TS/2r9o5b+1+gftfT/tv5RS/9r9Y9a+n9H/6il/3f1j1r6X6d/1NL/ev2jlv7f0z9q6X+D/lFL/xv1j1r6f1//qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv4/0D9q6X+H/lFL/x8OBoPR02tMT2Mt/X9k/Uct/X+sf9TS/079o5b+P9E/aun/U/2jlv4/0z9q6X+X/lFL/5/rH7X0/4X+UUv/u/WPWvr/Uv+opf+v9I9a+t+jf9TS/9f6Ry39f6N/1NL/t/pHLf1/p3/U0v9e/f9pzn+eben/e/2jlv5/0D9q6X+f/lFL/z/qH7X0v1//qKX/n/SPWvo/oH/U0v/P+kct/R/UP2rp/xf9o5b+D+kftfT/q/5RS/+H9Y9a+v9N/6il/9/1j1r6/0P/qKX/I/pHLf0f1T9q6f+Y/lFL/8f1j1r6j9U/Kun/xFn9n6ql/zD9o5b+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvrPpH/U0n9m/aOW/rPoH7X0n1X/qKX/M/SPWvrPpn/U0n92/aOW/nPoH7X0f6b+UUv/OfWPWvrPpX/U0n9u/aOW/s/SP2rpP4/+UUv/Z+sftfR/jv5RS//n6h+19J9X/6il//P0j1r6z6d/1NL/+fpHLf1foH/U0v+F+kct/efXP2rp/yL9o0n7Dxs2GMyo/cfoH7Ws/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8X6x+19H+J/lFL/5fqH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19H+Z/lFL/5frH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1foH7X0X0X/qKX/K/WPWvq/Sv+opf+r9Y9a+q+qf9TSf7Up9J976f/UwJ6eWvqvbv1HLf3X0D9q6f8a/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL//X0j1r6v1b/qKX/6/SPWvqvr3/U0v/1+kct/d+gf9TS/436Ry3936R/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39N9E/aun/Zv2jlv6b6h+19N9M/6il/+b6Ry3936J/1NJ/C/2jlv5b6h+19H+r/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19H+b/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS/+36x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+r9D/6il/976Ry3999E/aum/r/5RS/936h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+79I/aun/bv2jlv6H6h+19D9M/6il/+H6Ry3936N/1NL/vfpHLf3fp3/U0v/9+kct/Y/QP2rp/wH9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rp/0H9o5b+H9I/aun/Yf2jlv4f0T9q6X+s/lFL/+P0j1r6f1T/qKX/8fpHLf0/pn/U0v8E/aOW/h/XP2rp/4my/odN43Yt/U8s6z+tWvqfpH/U0v9k/aOW/qfoH7X0/6T+UUv/T+kftfT/tP5RS//P6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfQ/V/+opf9n9Y9a+p+nf9TS/3P6Ry39z9c/aun/ef2jlv5f0D9q6f9F/aOW/hfoH7X0/5L+UUv/L+sftfS/UP+opf9F+kct/S/WP2rp/xX9o5b+X9U/aun/Nf2jlv6X6B+19L9U/6il/2X6Ry39v65/1NL/cv2jlv5X6B+19L9S/6il/1X6P8n8E05b+n9D/6il/zf1j1r6f0v/qKX/1fpHLf2v0T9q6f9t/aOW/tfqH7X0/47+UUv/7+oftfS/Tv+opf/1+kct/b+nf9TS/wb9o5b+N+oftfT/vv5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/X+gf9TS/46h/jNPp3E9TbX0/6H1H7X0/5H+UUv/H+sftfS/U/+opf9P9I9a+v9U/6il/8/0j1r636V/1NL/5/pHLf1/oX/U0v9u/aOW/r/UP2rp/yv9o5b+9+gftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0v1f/qKX/7/WPWvr/Qf+opf99+kct/f+of9TS/379o5b+f9I/aun/gP5RS/8/6x+19H9Q/6il/1/0j1r6P6R/1NL/r/pHLf0f1j9q6f83/aOW/n/XP2rp/w/9o5b+j+gftfR/VP+opf9j+kct/R/XP2rpP1b/qKT/iIH+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19J9J/6il/8z6Ry39Z9E/auk/q/5RS/9n6B+19J9N/6il/+z6Ry3959A/aun/TP2jlv5z6h+19J9L/6il/9z6Ry39n6V/1NJ/Hv2jlv7P1j9q6f8c/aOW/s/VP2rpP6/+UUv/5+kftfSfT/+opf/z9Y9a+r9A/6il/wv1j1r6z69/1NL/RfpHLf3H6B+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfR/sf5RS/+X6B+19H+p/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/7L6Ry39l9M/aum/vP5RS/+X6R+19H+5/lFL/xX0j1r6r6h/1NJ/pd7+M03txpb+K/f2n6qW/q/QP2rpv4r+UUv/V+oftfR/lf5RS/9X6x+19F9V/6il/2r6Ry39V9c/aum/hv5RS//X6B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TS/7X6Ry39X6d/1NJ/ff2jlv6v1z9q6f8G/aOW/m/UP2rp/yb9o5b+G+gftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/N+sftfTfVP+opf9m+kfj+888mNH7b65/1LL+36J/1NJ/C/2jlv5b6h+19H+r/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19H+b/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS/+36x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+r9D/6il/976Ry3999E/aum/r/5RS/936h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+79I/aun/bv2jlv6H6h+19D9M/6il/+H6Ry3936N/1NL/vfpHLf3fp3/U0v/9+kct/Y/Qf8jYsZNcaOn/Af2jlv5H6h+19D9K/6il/9H6Ry39j9E/aun/Qf2jlv4f0j9q6f9h/aOW/h/RP2rpf6z+UUv/4/SPWvp/VP+opf/x+kct/T+mf9TS/wT9o5b+H9c/aun/Cf2jlv4n6h+19D9J/6il/8n6Ry39T9E/aun/Sf2jlv6f0j9q6f9p/aOW/p/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL/8/qH7X0P0//qKX/5/SPWvqfr3/U0v/z+kct/b+gf9TS/4v6Ry39L9A/aun/Jf2jlv5f1j9q6X+h/lFL/4v0j1r6X6x/1NL/K/pHLf2/qn/U0v9r+kct/S/RP2rpf6n+UUv/y/SPZuT+q/3z2hFf1z+akftPuv4v1z9q6X+F/lFL/yv1j1r6X6V/1NL/G/pHLf2/qX/U0v9b+kct/a/WP2rpf43+UUv/b+sftfS/Vv+opf939I9a+n9X/6il/3X6Ry39r9c/aun/Pf2jlv436B+19L9R/6il//f1j1r636R/1NL/Zv2jlv636B+19L9V/6il/236Ry39b9c/aun/A/2jlv536B+19P+h/lFL/x/pHw31Hz3h8oza/8f6Ry3r/079o5b+P9E/aun/U/2jlv4/0z9q6X+X/lFL/5/rH7X0/4X+UUv/u/WPWvr/Uv+opf+v9I9a+t+jf9TS/9f6Ry39f6N/1NL/t/pHLf1/p3/U0v9e/aOW/r/XP2rp/wf9o5b+9+kftfT/o/5RS//79Y9a+v9J/6il/wP6Ry39/6x/1NL/Qf2jlv5/0T9q6f+Q/lFL/7/qH7X0f1j/qKX/3/SPWvr/Xf+opf8/9I9a+j+if9TS/1H9oxm3/93XTHLtiMf0j2bc/k9e/4/rH7X0H6t/VNJ/5ED/qKX/MP2jlv7D/8f+I/5vx/U01dJ/hPUftfQfqX/U0n+U/lFL/9H6Ry39Z9I/Kug/Mbv+T1XQf5yRs+gftfSfVf+opf8z9I9a+s+mf9TSf3b9o5b+c+gftfR/pv5RS/859Y9a+s+lf9TSf279o5b+z9I/auk/j/5RS/9n6x+19H+O/lFL/+fqH7X0n1f/qKX/8/SPWvrPp3/U0v/5+kct/V+gf9TS/4X6Ry3959c/aun/Iv2jlv5j9I9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvq/WP+opf9L9I9a+r9U/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv9oBu4/yyTXjnyZ/tEM3P9J6//l+kfj++834dKM238F/aOW9b+i/lFL/5X0j1r6r6x/1NL/FTX9Z/6Xtm7pv0pN/39NS/9X6h+19H+V/lFL/1frH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/9foH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6r6d/1NL/tfpHLf1fp3/U0n99/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/836x+19N9U/6il/2b6Ry39N9c/aun/Fv2jlv5b6B+19N9S/6il/1v1j1r6b6V/1NJ/a/2jlv7b6B+19N9W/2jkYDBo6P82/aOW9b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/y76Ry39d9U/aun/dv2jlv676R+19N9d/6il/x76Ry3999Q/aum/l/5RS/936B+19N9b/6il/z76Ry3999U/aun/Tv2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/136Ry39361/1NL/UP2jlv6H6R+19D9c/6il/3v0j1r6vzf0X/o/Oa6nqZb+77P+o5b+79c/aul/hP5RS/8P6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/8P6h+19P+Q/lFL/w/rH7X0/4j+UUv/Y/WPWvofp3/U0v+j+kct/Y/XP2rp/zH9o5b+J+gftfT/uP5RS/9P6B+19D9R/6il/0n6Ry39T9Y/eqL/7IPBYAbvf4r+Ucv6/6T+UUv/T+kftfT/tP5RS//P6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfQ/V/+opf9n9Y9m5P4z//PakefpH83I/Sdd/5/TP2rpf77+UUv/z+sftfT/gv5RS/8v6h+19L9A/6il/5f0j1r6f1n/qKX/hfpHLf0v0j9q6X+x/lFL/6/oH7X0/6r+UUv/r+kftfS/RP+opf+l+kct/S/TP2rp/3X9o5b+l+sftfS/Qv+opf+V+kct/a/SP2rp/w39o5b+39Q/aun/Lf2jlv5X6x+19L9G/6il/7f1j1r6X6t/1NL/O/pHLf2/q3/U0v86/aOW/tfrH7X0/57+UUv/G/SPWvrfqH/U0v/7+kct/W/SP2rpf7P+UUv/W/SPWvrfWtf/9rHTslVL/9vq+k+blv636x+19P+B/lFL/zv0j1r6/1D/qKX/j/SPWvr/WP+opf+d+kct/X+if9TS/6f6Ry39f6Z/1NL/Lv2jlv4/1z9q6f8L/aOW/nfrH7X0/6X+UUv/X+kftfS/R/+opf+v9Y9a+v9G/6il/2/1j1r6/07/qKX/vfpHLf1/r3/U0v8P+kct/e/TP2rp/0f9o5b+9+sftfT/k/5RS/8H9I9a+v9Z/6il/4P6Ry39/6J/1NL/If2jlv5/1T9q6f+w/lFL/7/pH7X0/7v+UUv/f+gftfR/RP+opf+j+kct/R/TP2rp/7j+UUv/sfpHJf1HDfSPWvoP0z9q6T9c/6il/wj9o5b+I/WPWvqP0j9q6T9a/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+j9D/6il/2z6RxP7bzFsMJiB+8+uf9Sy/ufQP2rp/0z9o5b+c+oftfSfS/+opf/c+kct/Z+lf9TSfx79o5b+z9Y/aun/HP2jlv7P1T9q6T+v/lFL/+fpH7X0n0//qKX/8/WPWvq/QP+opf8L9Y9a+s+vf9TS/0X6Ry39x+gftfRfQP9oBu+/8tLjz45aUP9oBu8/ZNRC+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/i/WP2rp/xL9o5b+L9U/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rp/zL9o5b+L9c/aum/gv5RS/8V9Y9a+q+kf9TSf2X9o5b+r9A/aum/iv5RS/9X6h+19H+V/lFL/1frH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/9foH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6r6d/1NL/tfpHLf1fp3/U0n99/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv4b6B+N63/bYDCY0ftvqH/Usv430j9q6b+x/lFL/030j1r6v1n/qKX/pvpHLf030z9q6b+5/lFL/7foH7X030L/qKX/lvpHLf3fqn/U0n8r/aOW/lvrH7X030b/qKX/tvpHLf3fpn/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6b+z/lFL/130j1r676p/1NL/7fpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv7v0D9q6b+3/lFL/330j1r676t/1NL/nfpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv4H6x+19D9E/6il/7v0j1r6v1v/qKX/ofpHLf0P0z9q6X+4/lFL//foH7X0f6/+UUv/9+kftfR/v/5RS/8j9I9a+n9A/6il/5H6Ry39j9I/aul/tP5RS/9j9I9a+n9Q/6il/4f0j1r6f1j/qKX/R/SPWvofq3/U0v84/aOW/h/VP2rpf3xf/7HT8nhb+n+sr/80ael/gv5RS/+P6x+19P+E/lFL/xP1j1r6n6R/1NL/ZP2jlv6n6B+19P+k/lFL/0/pH7X0/7T+UUv/z+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/Z/WPWvqfp3/U0v9zVf3XPWpat2zpf35V/2nX0v/z+kct/b+gf9TS/4v6Ry39L9A/aun/Jf2jlv5f1j9q6X+h/lFL/4v0j1r6X6x/1NL/K/pHLf2/qn/U0v9r+kct/S/RP2rpf6n+UUv/y/SPWvp/Xf+opf/l+kct/a/QP2rpf6X+UUv/q/SPWvp/Q/+opf839Y9a+n9L/6il/9X6Ry39r9E/aun/bf2jlv7X6h+19P+O/lFL/+/qH7X0v07/qKX/9fpHLf2/p3/U0v8G/aOW/jfqH7X0/77+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0v03/qKX/7fpHLf1/oH/U0v8O/aOW/j/UP2rp/yP9o5b+P9Y/aul/p/5RS/+f6B+19P+p/lFL/5/pH7X0v0v/qKX/z/WPWvr/Qv+opf/d+kct/X+pf9TS/1f6Ry3979E/aun/a/2jlv6/0T9q6f9b/aOW/r/TP2rpf6/+UUv/3+sftfT/g/5RS//79I9a+v9R/6il//36Ry39/6R/1NL/Af2jlv5/1j9q6f+g/lFL/7/oH7X0f0j/qKX/X/WPWvo/rH/U0v9v+kct/f+uf9TS/x/6Ry39H9E/aun/qP5RS//H9I9a+j+uf9TSf6z+UUn/0QP9o5b+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv7P0D9q6T+b/lFL/9n1j1r6z6F/1NL/mfpHLf3n1D9q6T+X/lFL/7n1j1r6P0v/qKX/PPpHLf2frX/U0v85+kct/Z+rf9TSf179o5b+z6vrf9g0bdXSf766/tOmpf/z9Y9a+r9A/6il/wv1j1r6z69/1NL/RfpHLf3H6B+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfR/sf5RS/+X6B+19H+p/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/7L6RxP7nz9j919O/6hl/S+vf9TS/2X6Ry39X65/1NJ/Bf2jlv4r6h+19F9J/6il/8r6Ry39X6F/1NJ/Ff2jlv6v1D9q6f8q/aOW/q/WP2rpv6r+UUv/1fSPWvqvrn/U0n8N/aOW/q/RP2rpv6b+UUv/tfSPWvqvrX/U0n8d/aOW/uvqH7X0X0//qKX/a/WPWvq/Tv+opf/6+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv5v1j9q6b+p/lFL/830j1r6b65/1NL/LfpHLf230D9q6b+l/lFL/7fqH7X030r/qKX/1vpHLf230T9q6b+t/lFL/7fpH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/9M/+Y8dO77H8W0yh/y76Ry3rf1f9o5b+b9c/aum/m/5RS//d9Y9a+u+hf9TSf0/9o5b+e+kftfR/h/5RS/+99Y9a+u+jf9TSf1/9o5b+79Q/aum/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/d+lf9TS/936Ry39D9U/aul/mP5RS//D9Y9a+r9H/6il/3v1j1r6v0//qKX/+/WPWvofoX/U0v8D+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v+D+kct/T+kf9TS/8P6Ry39P6J/1NL/WP2jlv7H6R+19P+o/lFL/+P1j1r6f0z/qKX/CfpHLf0/rn/U0v8T+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+n9U/aul/nv5RS//P6R+19D9f/6il/+f1j1r6f0H/qKX/F/WPWvpfoH/U0v9L+kct/b+sf9TS/0L9o5b+F+kftfS/WP+opf9X9I9a+n9V/6il/9f0j1r6X6J/1NL/Uv2jlv6X6R+19P+6/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19P+G/lFL/2/qH7X0/5b+UUv/q/WPWvpfo3/U0v/b+kct/a/VP2rp/x39o5b+39U/aul/nf5RS//r9Y9a+n9P/6il/w36Ry39b9Q/aun/ff2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+v9A/6il/x36Ry39fzh5/yX+w+N6mmrp/yPrP2rp/2P9o5b+d+oftfT/if5RS/+f6h+19P+Z/lFL/7v0j1r6/1z/qKX/L/SPWvrfrX/U0v+X+kct/X+lf9TS/x79o5b+v9Y/aun/G/2jlv6/1T9q6f+78f09BSbT0v9e6z9q6f97/aOW/n/QP2rpf5/+UUv/P+oftfS/X/+opf+f9I9a+j+gf9TS/8/6Ry39H9Q/aun/F/2jlv4P6R+19P+r/lFL/4f1j1r6/03/qKX/3/WPWvr/Q/+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvqP1T8q6T/TQP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6z6R/1NJ/Zv2jlv6z6B+19J9V/6il/zP0j1r6z6Z/1NJ/dv2jlv5z6B+19H+m/lFL/zn1j1r6z6V/1NJ/bv2jlv7P0j9q6T+P/lFL/2frH7X0f47+UUv/5+oftfSfV/+opf/z9I9a+s+nf9TS//n6Ry39X6B/1NL/hfpHLf3n1z9q6f8i/aOW/mP0j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+r9Y/6il/0v0j1r6v1T/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv7L6R+19F9e/6il/8v0j1r6v1z/qKX/CvpHLf1XnIb+D8zxfzmwp6eW/itZ/1FL/5X1j1r6v0L/qKX/KvpHLf1fqX/U0v9V+kct/V+tf9TSf1X9o5b+q+kftfRfXf+opf8a+kct/V+jf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/1+oftfR/nf5RS//19Y9a+r9e/6il/xv0j1r6v1H/qKX/m/SPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/JvpHLf3frH/U0n9T/aOW/pvpH7X031z/qKX/W/SPWvpvoX/U0n9L/aOW/m/VP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/m/TP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf131T9q6f92/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/3foH7X031v/qKX/PvpHLf331T9q6f9O/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/XfpHLf3frX/U0v9Q/aOW/ofpH7X0P1z/qKX/e/SPWvq/V/+opf/79I9a+r9f/6il/xH6Ry39P6B/1NL/SP2jlv5H6R+19D9a/6il/zH6Ry39P6h/1NL/Q/pHLf0/rH/U0v8j+kct/Y+N/R8bO95/bnhPNy39j7P+o5b+H9U/aul/vP5RS/+P6R+19D9B/6il/8f1j1r6f0L/qKX/ifpHLf1P0j9q6X+y/lFL/1P0j1r6f1L/qKX/p/SPWvp/Wv+opf9n9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v+z+kct/c/TP2rp/zn9o5b+5+sftfT/vP5RS/8v6B+19P+i/lFL/wv0j1r6f0n/qKX/l/WPWvpfqH/U0v8i/aOW/hfrH7X0/4r+UUv/r+oftfT/mv5RS/9L9I9a+l+qf9TS/zL9o5b+X9c/aul/uf5RS/8r9I9a+l+pf9TS/yr9o5b+39A/aun/Tf2jlv7f0j9q6X+1/lFL/2v0j1r6f1v/qKX/tfpHLf2/o3/U0v+7+kct/a/TP2rpf73+UUv/7+kftfS/Qf+opf+N+kct/b+vf9TS/yb9o5b+N+sftfS/Rf+JZp7kfEv/W/WPWvrfpn/U0v92/aOW/j/QP2rpf4f+UUv/H+oftfT/kf5RS/8f6x+19L9T/6il/0/0j1r6/1T/qKX/z/SPWvrfpX/U0v/n+kct/X+hf9TS/279o5b+v9Q/aun/K/2jlv736B+19P+1/lFL/9/oH7X0/63+UUv/3+kftfS/V/+opf/v9Y9a+v9B/6il/336Ry39/6h/1NL/fv2jlv5/0j9q6f+A/lFL/z/rH7X0f1D/qKX/X/SPWvo/pH/U0v+v+kct/R/WP2rp/zf9o5b+f9c/aun/D/2jlv6P6B+19H9U/6il/2P6Ry39H9c/auk/Vv+opP8Th7zW/6la+g/TP2rpP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6P0P/qKX/bPpHLf1n1z9q6T+H/lFL/2fqH7X0n1P/qKX/XPpHLf3n1j9q6f8s/aOW/vPoH7X0f7b+UUv/5+gftfR/rv5RS/959Y9a+j9P/6il/3z6Ry39n69/1NL/BfpHLf1fqH/U0n9+/aOW/i/SP2rpP0b/qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/6il/4v1j1r6v0T/qKX/S/WPWvovoX92WEf/JfWPWtb/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4vi/3/6x/t/7eW/i+3/qOW/ivoH7X0X1H/qKX/SvpHLf1X1j9q6f8K/aOW/qvoH7X0f6X+UUv/V+kftfR/tf5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfR/jf5RS/819Y9a+q+lf9TSf239o5b+6+gftfRfV/+opf96+kct/V+rfzRZ/5mn93j+v02h/+v0j1rW//r6Ry39X69/1NL/DfpHLf3fqH/U0v9N+kct/TfQP2rpv6H+UUv/jfSPWvpvrH/U0n8T/aOW/m/WP2rpv6n+UUv/zfSPWvpvrn/U0v8t+kct/bfQP2rpv6X+UUv/t+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/t+kftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0f7v+UUv/3cb3n2l6DevpqqX/7tZ/1NJ/D/2jlv576h+19N9L/6il/zv0j1r6761/1NJ/H/2jlv776h+19H+n/lFL//30j1r6769/1NL/AP2jlv4H6h+19D+ot//eI0+e8iNv6X9wb/+paul/iP5RS/936R+19H+3/lFL/0P1j1r6H6Z/1NL/cP2jlv7v0T9q6f9e/aOW/u/TP2rp/379o5b+R+gftfT/gP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfT/oP5RS/8P6R+19P+w/lFL/4/oH7X0P1b/qKX/cfpHLf0/qn/U0v94/aOW/h/TP2rpf4L+UUv/j+sftfT/hP5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/pP5RS/9P6R+19P+0/lFL/8/oH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv7n6B+19D9X/6il/2f1j1r6n6d/1NL/c/pHLf3P1z9q6f95/aOW/l/QP2rp/0X9o5b+F+gftfT/kv5RS/8v6x+19L9Q/6il/0X6Ry39L9Y/aun/Ff2jlv5f1T9q6f81/aOW/pfoH7X0v1T/qKX/ZfpHLf2/rn/U0v9y/aOW/lfoH7X0v1L/qKX/VfpHLf2/oX/U0v+b+kct/b+lf9TS/2r9o5b+1+gftfT/tv5RS/9r9Y9a+n9H/6il/3f1j1r6X6d/1NL/ev2jlv7f0z9q6X+D/lFL/xv1j1r6f1//qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv4/0D9q6X+H/lFL/x/qH7X0/5H+UUv/H+sftfS/U/+opf9P9I9a+v9U/6il/8/0j1r636V/1NL/5/pHLf1/oX/U0v9u/aOW/r/UP2rp/yv9o5b+9+gftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0v1f/qKX/7/WPWvr/Qf+opf99+kct/f+of9TS/379o5b+f9I/aun/gP5RS/8/6x+19H9Q/6il/1/0j1r6P6R/1NL/r/pHLf0f1j9q6f83/aOW/n/XP2rp/w/9o5b+j+gftfR/VP+opf9j+kct/R/XP2rpP1b/qKT/LAP9o5b+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv7P0D9q6T+b/lFL/9n1j1r6z6F/1NL/mfpHLf3n1D9q6T+X/lFL/7n1j1r6P0v/qKX/PPpHLf2frX/U0v85+kct/Z+rf9TSf179o5b+z9M/auk/n/5RS//n6x+19H+B/lFL/xfqH7X0n1//qKX/i/SPWvqP0T9q6b+A/lFL/wX1j1r6L6R/1NJ/Yf2jlv6L6B+19F9U/6il/2L6Ry39F9c/aun/Yv2jlv4v0T9q6f9S/aOW/kvoH7X0X1L/qKX/UvpHM2r/YZP1X1r/aIbrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwUAAP//I98B9w==") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 437.738293ms ago: executing program 7 (id=3477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e002508005400", @ANYRES32=0x0, @ANYBLOB="040071806e05bc80080013803a48ad0408001c"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 419.869654ms ago: executing program 5 (id=3479): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x9, '\x00', @p_u32=&(0x7f0000000200)=0x9}}) 380.675959ms ago: executing program 7 (id=3480): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/83, 0x53}], 0x1) 380.468314ms ago: executing program 6 (id=3481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) 379.580396ms ago: executing program 5 (id=3482): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0xfffffffffffffffe) 326.201882ms ago: executing program 1 (id=3484): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xe97, 0x63b, 0xf2000000, 0x4, 0x9, "9e0b14185a332bde1ccafb993e1c08663b37b7"}) 326.114321ms ago: executing program 5 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) 325.998343ms ago: executing program 7 (id=3486): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) 315.721467ms ago: executing program 6 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffe}]}, 0x28}}, 0x0) 294.806724ms ago: executing program 1 (id=3488): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc0884123, 0x40944f9c780000) 252.787059ms ago: executing program 5 (id=3489): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) 251.550619ms ago: executing program 6 (id=3490): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x8000}, 0x10) 233.546268ms ago: executing program 7 (id=3491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd25, 0x0, {0xa, 0x0, 0x0, 0x80}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x5}]}, 0x24}}, 0x0) 232.488868ms ago: executing program 1 (id=3492): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_MM(0x41555856, 0x4eee7b633b603c4a, &(0x7f0000ffe000/0x1000)=nil) 194.777646ms ago: executing program 6 (id=3493): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x111, 0x4b4, 0x1a8, 0x700, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 186.788478ms ago: executing program 1 (id=3494): setresgid(0xee00, 0x0, 0xffffffffffffffff) setresgid(0x0, 0xee00, 0x0) 185.584603ms ago: executing program 5 (id=3495): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='.\x02\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6ef, &(0x7f0000000180)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x221008, 0x0) 132.198722ms ago: executing program 7 (id=3496): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) 132.022236ms ago: executing program 1 (id=3497): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000003580)={'bond0\x00', @ifru_map={0x4, 0x7, 0x10, 0x6, 0x8, 0x7}}) 120.926324ms ago: executing program 7 (id=3498): r0 = syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f0000010280)='./mnt\x00', 0x3200008, &(0x7f00000004c0)=ANY=[@ANYBLOB="746573745f64756d6d795f656e6372797074696f6e2c00f5267ef859bf314a50b3ee082bee149254dc3f5e7aeac83a266dbe5265b18513cf0d6f92c762754d21468964ae812a33c13f4e497ba5c077d4bb56bda51c99fafaa81facb632898549518e9e9d0185f8484b79eca8e1a1f51eaccc719e20a98792740b9423660c95e9bc05b38cd1302b1b17511f5cce9cbea836af9d8e719f37192be3ef4864b661bb15cec3a7f56c569ba11201573195d1e52c313eda8f49268e40b1f45ae26a11bccff6473e0710d9271094ad9908a9249cb6954539"], 0x0, 0x10204, &(0x7f0000010300)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x8, @desc1}) 119.026ms ago: executing program 2 (id=3499): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200), 0x10) 88.478238ms ago: executing program 6 (id=3500): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 28.069661ms ago: executing program 5 (id=3501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 27.825418ms ago: executing program 1 (id=3502): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 0s ago: executing program 6 (id=3503): r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd26, 0x25dfdbfb, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): c (C) [ 49.828677][ T9355] __dump_stack+0x30/0x40 [ 49.828688][ T9355] dump_stack_lvl+0xd8/0x12c [ 49.828695][ T9355] dump_stack+0x1c/0x28 [ 49.828702][ T9355] warn_alloc+0x1f8/0x314 [ 49.828710][ T9355] __vmalloc_node_range_noprof+0x128/0x132c [ 49.828719][ T9355] vmalloc_user_noprof+0xf0/0x14c [ 49.828727][ T9355] xskq_create+0xbc/0x168 [ 49.828735][ T9355] xsk_init_queue+0xb0/0x118 [ 49.828740][ T9355] xsk_setsockopt+0x478/0x684 [ 49.828746][ T9355] do_sock_setsockopt+0x1ec/0x328 [ 49.828754][ T9355] __arm64_sys_setsockopt+0x170/0x1e0 [ 49.828760][ T9355] invoke_syscall+0x98/0x254 [ 49.828768][ T9355] el0_svc_common+0xe8/0x23c [ 49.828775][ T9355] do_el0_svc+0x48/0x58 [ 49.828782][ T9355] el0_svc+0x5c/0x26c [ 49.828789][ T9355] el0t_64_sync_handler+0x84/0x12c [ 49.828797][ T9355] el0t_64_sync+0x198/0x19c [ 49.828805][ T9355] Mem-Info: [ 49.828809][ T9355] active_anon:98 inactive_anon:5691 isolated_anon:0 [ 49.828809][ T9355] active_file:2723 inactive_file:4389 isolated_file:0 [ 49.828809][ T9355] unevictable:768 dirty:1870 writeback:0 [ 49.828809][ T9355] slab_reclaimable:10688 slab_unreclaimable:92916 [ 49.828809][ T9355] mapped:29256 shmem:1033 pagetables:1246 [ 49.828809][ T9355] sec_pagetables:0 bounce:0 [ 49.828809][ T9355] kernel_misc_reclaimable:0 [ 49.828809][ T9355] free:1419020 free_pcp:27860 free_cma:7360 [ 49.828825][ T9355] Node 0 active_anon:392kB inactive_anon:22764kB active_file:10892kB inactive_file:17556kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117024kB dirty:7480kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10656kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 49.828841][ T9355] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 49.828859][ T9355] lowmem_reserve[]: 0 0 3491 3491 3491 [ 49.828875][ T9355] Node 0 Normal free:2599216kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:392kB inactive_anon:22764kB active_file:10892kB inactive_file:17556kB unevictable:3072kB writepending:7480kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:111440kB local_pcp:83728kB free_cma:0kB [ 49.828893][ T9355] lowmem_reserve[]: 0 0 0 0 0 [ 49.828908][ T9355] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 49.828958][ T9355] Node 0 Normal: 2366*4kB (UME) 1275*8kB (UME) 736*16kB (UME) 239*32kB (UM) 228*64kB (UME) 169*128kB (UME) 125*256kB (UME) 61*512kB (UM) 31*1024kB (UM) 16*2048kB (UM) 585*4096kB (UM) = 2599216kB [ 49.829024][ T9355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 49.829029][ T9355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 49.829034][ T9355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.829039][ T9355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 49.829044][ T9355] 8136 total pagecache pages [ 49.829047][ T9355] 0 pages in swap cache [ 49.829050][ T9355] Free swap = 124996kB [ 49.829053][ T9355] Total swap = 124996kB [ 49.829056][ T9355] 2097152 pages RAM [ 49.829059][ T9355] 0 pages HighMem/MovableOnly [ 49.829062][ T9355] 433334 pages reserved [ 49.829065][ T9355] 8192 pages cma reserved [ 49.829068][ T9355] 0 pages hwpoisoned [ 49.967186][ T9370] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1103'. [ 50.183977][ T9404] netlink: 'syz.1.1118': attribute type 2 has an invalid length. [ 50.193838][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 50.305821][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 50.308412][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1124'. [ 50.318064][ T9422] misc userio: Invalid payload size [ 50.552910][ T9451] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 50.590358][ T4459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.618065][ T4459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.655296][ T4459] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 50.660803][ T9465] set_capacity_and_notify: 15 callbacks suppressed [ 50.661063][ T9464] netlink: 'syz.1.1147': attribute type 28 has an invalid length. [ 50.661077][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 50.665473][ T9465] loop0: detected capacity change from 0 to 16 [ 50.666505][ T9465] erofs (device loop0): mounted with root inode @ nid 36. [ 50.673148][ T9465] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 50.678690][ T9465] erofs (device loop0): read error -117 @ 43 of nid 36 [ 50.682669][ T4459] bond0 (unregistering): Released all slaves [ 50.689032][ T4459] bond1 (unregistering): Released all slaves [ 50.702287][ T4459] bond2 (unregistering): Released all slaves [ 50.742670][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1111'. [ 50.744544][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1111'. [ 50.747590][ T9389] netlink: 'syz.5.1111': attribute type 4 has an invalid length. [ 50.807087][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.807141][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.807283][ T9241] bridge_slave_0: entered allmulticast mode [ 50.807725][ T9241] bridge_slave_0: entered promiscuous mode [ 50.810610][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.810635][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.810708][ T9241] bridge_slave_1: entered allmulticast mode [ 50.811158][ T9241] bridge_slave_1: entered promiscuous mode [ 50.827597][ T9477] loop2: detected capacity change from 0 to 64 [ 50.949393][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.956703][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.968742][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 51.012247][ T9478] loop0: detected capacity change from 0 to 32768 [ 51.014980][ T9478] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1153 (9478) [ 51.031436][ T9478] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 51.033232][ T9478] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 51.033259][ T9478] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 51.044052][ T9241] team0: Port device team_slave_0 added [ 51.047855][ T9241] team0: Port device team_slave_1 added [ 51.062042][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.063343][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.068003][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.071122][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.073264][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.080278][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.121798][ T9478] BTRFS info (device loop0): rebuilding free space tree [ 51.124977][ T6581] Bluetooth: hci3: command tx timeout [ 51.130948][ T9478] BTRFS info (device loop0): disabling free space tree [ 51.132161][ T9478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.136757][ T9478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.140250][ T9478] BTRFS info (device loop0): setting nodatasum [ 51.141272][ T9478] BTRFS info (device loop0): allowing degraded mounts [ 51.142398][ T9478] BTRFS info (device loop0): turning on async discard [ 51.143760][ T9478] BTRFS info (device loop0): enabling disk space caching [ 51.145366][ T9478] BTRFS info (device loop0): force clearing of disk cache [ 51.145508][ T9478] BTRFS info (device loop0): force zlib compression, level 3 [ 51.182730][ T9520] .: renamed from bridge_slave_1 (while UP) [ 51.212385][ T9241] hsr_slave_0: entered promiscuous mode [ 51.216685][ T9241] hsr_slave_1: entered promiscuous mode [ 51.223890][ T9241] debugfs: 'hsr0' already exists in 'hsr' [ 51.225314][ T9241] Cannot create hsr debugfs directory [ 51.273057][ T9478] BTRFS info (device loop0): balance: start -sconvert=raid0,soft,usage=10625749090306,limit=0 [ 51.273875][ T9478] BTRFS info (device loop0): balance: ended with status: 0 [ 51.293688][ T9536] loop1: detected capacity change from 0 to 64 [ 51.351138][ T6576] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 51.405092][ T4459] hsr_slave_0: left promiscuous mode [ 51.409093][ T4459] hsr_slave_1: left promiscuous mode [ 51.409708][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.409720][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.410393][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.410403][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.508729][ T4459] veth1_macvtap: left promiscuous mode [ 51.508792][ T4459] veth0_macvtap: left promiscuous mode [ 51.517526][ T4459] veth1_vlan: left promiscuous mode [ 51.517591][ T4459] veth0_vlan: left promiscuous mode [ 51.561727][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 51.786674][ T4459] team0 (unregistering): Port device team_slave_1 removed [ 51.798734][ T4459] team0 (unregistering): Port device team_slave_0 removed [ 51.908045][ T9559] loop0: detected capacity change from 0 to 131072 [ 51.924059][ T9559] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 51.998892][ T9559] XFS (loop0): Starting recovery (logdev: internal) [ 52.036795][ T9559] XFS (loop0): Ending recovery (logdev: internal) [ 52.170736][ T6576] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 52.176926][ T9605] loop2: detected capacity change from 0 to 1024 [ 52.194006][ T9241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.210540][ T9241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.211894][ T4693] hfsplus: b-tree write err: -5, ino 4 [ 52.266100][ T9241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.289087][ T9241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.434385][ T9241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.440576][ T9241] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.448122][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.448170][ T743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.456105][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.456157][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.471066][ T9241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.475330][ T9241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.551607][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.653373][ T9634] loop5: detected capacity change from 0 to 32768 [ 52.691558][ T9634] (syz.5.1205,9634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.696752][ T9634] (syz.5.1205,9634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.722947][ T9634] JBD2: Ignoring recovery information on journal [ 52.769840][ T9634] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 52.834345][ T9241] veth0_vlan: entered promiscuous mode [ 52.840599][ T9241] veth1_vlan: entered promiscuous mode [ 52.889885][ T9241] veth0_macvtap: entered promiscuous mode [ 52.892608][ T9241] veth1_macvtap: entered promiscuous mode [ 52.911757][ T6888] ocfs2: Unmounting device (7,5) on (node local) [ 52.930576][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.946029][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.969553][ T3076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.974753][ T9667] loop1: detected capacity change from 0 to 32768 [ 52.984315][ T9667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1213 (9667) [ 52.985858][ T3076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.986364][ T3076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.986383][ T3076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.003426][ T9667] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.003498][ T9667] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 53.049127][ T9696] loop2: detected capacity change from 0 to 1024 [ 53.066636][ T876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.066665][ T876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.104802][ T9667] BTRFS info (device loop1): enabling ssd optimizations [ 53.106623][ T9667] BTRFS info (device loop1): turning on async discard [ 53.106635][ T9667] BTRFS info (device loop1): enabling free space tree [ 53.149268][ T876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.149301][ T876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.205343][ T6581] Bluetooth: hci3: command tx timeout [ 53.228311][ T6573] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.618473][ T9727] loop2: detected capacity change from 0 to 32768 [ 53.623275][ T9727] (syz.2.1227,9727,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 53.624583][ T9727] (syz.2.1227,9727,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 53.647219][ T9727] JBD2: Ignoring recovery information on journal [ 53.673170][ T9727] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 53.784684][ T9751] [ 53.784684][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.784684][ T9751] [ 53.793090][ T9751] [ 53.793090][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.793090][ T9751] [ 53.793131][ T9751] [ 53.793131][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.793131][ T9751] [ 53.793137][ T9751] [ 53.793137][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.793137][ T9751] [ 53.793144][ T9751] [ 53.793144][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.793144][ T9751] [ 53.793150][ T9751] [ 53.793150][ T9751] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.793150][ T9751] [ 53.817444][ T99] [ 53.817444][ T99] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.817444][ T99] [ 53.836399][ T9774] syz.1.1248 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.844179][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 53.866873][ T743] [ 53.866873][ T743] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.866873][ T743] [ 53.866904][ T743] [ 53.866904][ T743] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.866904][ T743] [ 53.867101][ T6576] [ 53.867101][ T6576] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.867101][ T6576] [ 53.867306][ T99] [ 53.867306][ T99] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.867306][ T99] [ 53.869879][ T6576] [ 53.869879][ T6576] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.869879][ T6576] [ 54.337499][ T9844] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 54.438952][ T9861] C: renamed from lo (while UP) [ 54.484128][ T9842] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1280 (9842) [ 54.492699][ T9864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.518748][ T9842] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 54.518806][ T9842] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 54.518828][ T9842] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 54.525204][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.580892][ T9889] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 54.582606][ T9889] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 54.584412][ T9889] veth1_virt_wifi: entered allmulticast mode [ 54.587223][ T9889] veth1_virt_wifi: left allmulticast mode [ 54.647681][ T9842] BTRFS info (device loop6): rebuilding free space tree [ 54.675415][ T9842] BTRFS info (device loop6): disabling free space tree [ 54.675487][ T9842] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.675497][ T9842] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.678918][ T9842] BTRFS info (device loop6): setting nodatasum [ 54.678929][ T9842] BTRFS info (device loop6): allowing degraded mounts [ 54.678936][ T9842] BTRFS info (device loop6): turning on async discard [ 54.678942][ T9842] BTRFS info (device loop6): enabling disk space caching [ 54.678947][ T9842] BTRFS info (device loop6): force clearing of disk cache [ 54.678953][ T9842] BTRFS info (device loop6): force zlib compression, level 3 [ 54.756454][ T9241] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 54.818239][ T9922] __nla_validate_parse: 5 callbacks suppressed [ 54.819452][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'. [ 54.837095][ T9922] netlink: 'syz.2.1312': attribute type 8 has an invalid length. [ 54.837127][ T9922] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 54.924055][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1320'. [ 54.924107][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1320'. [ 55.187498][ T9980] xt_NFQUEUE: number of total queues is 0 [ 55.234628][ T9987] Scaler: ================= START STATUS ================= [ 55.234664][ T9987] Scaler: ================== END STATUS ================== [ 55.258963][ T9964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1331 (9964) [ 55.263642][ T9964] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.265752][ T9964] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 55.285169][ T6581] Bluetooth: hci3: command tx timeout [ 55.311856][T10001] netlink: 'syz.0.1347': attribute type 6 has an invalid length. [ 55.412575][ T9964] BTRFS info (device loop1): enabling ssd optimizations [ 55.414402][ T9964] BTRFS info (device loop1): turning on async discard [ 55.415815][ T9964] BTRFS info (device loop1): enabling free space tree [ 55.461938][T10032] netlink: 'syz.6.1357': attribute type 21 has an invalid length. [ 55.505931][ T6573] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.567356][T10045] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 55.568069][T10045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.706856][T10063] dummy0: entered allmulticast mode [ 55.718188][T10035] set_capacity_and_notify: 7 callbacks suppressed [ 55.719907][T10035] loop5: detected capacity change from 0 to 32768 [ 55.722639][T10035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1359 (10035) [ 55.727709][T10035] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.729664][T10035] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 55.747234][T10061] bridge4: entered promiscuous mode [ 55.782275][T10059] loop1: detected capacity change from 0 to 4096 [ 55.785622][T10035] BTRFS info (device loop5): enabling ssd optimizations [ 55.786848][T10035] BTRFS info (device loop5): turning on async discard [ 55.789711][T10035] BTRFS info (device loop5): enabling free space tree [ 55.822263][T10059] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 55.833748][T10059] ntfs3(loop1): ino=1a, mi_enum_attr [ 55.838982][T10059] ntfs3(loop1): ino=1a, mi_enum_attr [ 55.839024][T10059] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 55.856539][T10087] ieee802154 phy0 wpan0: encryption failed: -22 [ 55.914418][ T6888] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.065008][T10113] @: renamed from veth0_vlan (while UP) [ 56.106784][T10121] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 56.240375][T10137] loop5: detected capacity change from 0 to 4096 [ 56.249525][T10137] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 56.249883][T10137] ntfs3(loop5): It is recommended to use chkdsk. [ 56.391572][T10165] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 56.508588][T10181] loop0: detected capacity change from 0 to 4096 [ 56.512509][T10181] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 56.546261][T10181] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 56.546301][T10181] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 56.553874][ T5560] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 56.570801][T10181] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 56.570854][T10181] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 56.570865][T10181] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 56.570940][ T4538] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 56.637773][T10207] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1436'. [ 56.756580][T10225] netlink: 294 bytes leftover after parsing attributes in process `syz.5.1443'. [ 56.758226][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.864036][T10239] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 57.071052][T10278] loop5: detected capacity change from 0 to 256 [ 57.077052][T10278] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 57.080972][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1467'. [ 57.112003][T10282] loop2: detected capacity change from 0 to 256 [ 57.219896][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1474'. [ 57.302428][T10307] loop0: detected capacity change from 0 to 256 [ 57.311609][T10310] loop5: detected capacity change from 0 to 256 [ 57.312316][T10307] FAT-fs (loop0): Directory bread(block 64) failed [ 57.312333][T10307] FAT-fs (loop0): Directory bread(block 65) failed [ 57.312353][T10307] FAT-fs (loop0): Directory bread(block 66) failed [ 57.312363][T10307] FAT-fs (loop0): Directory bread(block 67) failed [ 57.312382][T10307] FAT-fs (loop0): Directory bread(block 68) failed [ 57.312392][T10307] FAT-fs (loop0): Directory bread(block 69) failed [ 57.312412][T10307] FAT-fs (loop0): Directory bread(block 70) failed [ 57.312421][T10307] FAT-fs (loop0): Directory bread(block 71) failed [ 57.312443][T10307] FAT-fs (loop0): Directory bread(block 72) failed [ 57.312453][T10307] FAT-fs (loop0): Directory bread(block 73) failed [ 57.365441][ T6581] Bluetooth: hci3: command tx timeout [ 57.542661][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1500'. [ 57.613650][T10352] loop2: detected capacity change from 0 to 2048 [ 57.631866][T10352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.657192][T10352] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.1503: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=2048, size=2048 fake=1 [ 57.700485][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.791143][T10378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1514'. [ 57.874126][T10388] netlink: 'syz.2.1520': attribute type 1 has an invalid length. [ 58.032037][T10323] loop6: detected capacity change from 0 to 131072 [ 58.034449][T10323] F2FS-fs (loop6): Test dummy encryption mode enabled [ 58.035569][T10323] F2FS-fs (loop6): invalid crc value [ 58.072180][T10323] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 58.074523][T10323] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.098564][T10415] exfat: Deprecated parameter 'utf8' [ 58.126789][T10415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 58.225137][T10401] ERROR: (device loop5): dtSearch: stack overrun! [ 58.225137][T10401] [ 58.226373][T10401] ERROR: (device loop5): remounting filesystem as read-only [ 58.226382][T10401] btstack dump: [ 58.226385][T10401] bn = 0, index = 4 [ 58.226390][T10401] bn = 0, index = 4 [ 58.226394][T10401] bn = 0, index = 4 [ 58.226397][T10401] bn = 0, index = 4 [ 58.226400][T10401] bn = 0, index = 4 [ 58.226403][T10401] bn = 0, index = 4 [ 58.226407][T10401] bn = 0, index = 4 [ 58.226410][T10401] bn = 0, index = 0 [ 58.226422][T10401] jfs_lookup: dtSearch returned -5 [ 58.451947][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 58.517815][T10465] exfat: Deprecated parameter 'namecase' [ 58.522385][T10465] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 58.591414][T10451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1549 (10451) [ 58.606594][T10476] libceph: resolve '4.' (ret=-3): failed [ 58.623551][T10451] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.624977][T10451] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 58.731987][T10451] BTRFS info (device loop5): enabling ssd optimizations [ 58.733320][T10451] BTRFS info (device loop5): turning on async discard [ 58.734493][T10451] BTRFS info (device loop5): enabling free space tree [ 58.824558][ T6888] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.882654][T10485] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 58.896369][T10510] netlink: 'syz.2.1572': attribute type 2 has an invalid length. [ 58.926210][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.930719][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.932501][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.934061][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.936118][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.977347][T10485] XFS (loop6): Ending clean mount [ 58.980055][T10485] XFS (loop6): Quotacheck needed: Please wait. [ 58.988128][ T743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.025615][T10485] XFS (loop6): Quotacheck: Done. [ 59.116746][T10537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.177487][ T9241] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.223807][ T743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.383038][ T743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.411705][T10571] bond1: Unable to set up delay as MII monitoring is disabled [ 59.458679][T10571] bond1 (unregistering): Released all slaves [ 59.538661][ T743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.597318][T10568] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.635609][T10568] XFS (loop2): Ending clean mount [ 59.682654][T10603] cgroup: name respecified [ 59.705743][T10552] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 59.728616][T10552] XFS (loop5): Ending clean mount [ 59.733764][ T6582] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.742943][T10552] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 59.747118][T10552] XFS (loop5): Unmount and run xfs_repair [ 59.748098][T10552] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 59.749305][T10552] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 59.751913][T10552] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 59.754952][T10552] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 59.756538][T10552] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 59.757970][T10552] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 59.759388][T10552] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 59.760808][T10552] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 59.762330][T10552] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 59.763681][T10552] XFS (loop5): metadata I/O error in "xfs_read_agf+0x220/0x58c" at daddr 0x1 len 1 error 74 [ 59.768211][T10552] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4e0/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 59.771179][T10552] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 59.791648][ T6888] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 59.839550][T10511] chnl_net:caif_netlink_parms(): no params data found [ 59.879398][T10623] FAT-fs (loop1): Directory bread(block 64) failed [ 59.880936][T10623] FAT-fs (loop1): Directory bread(block 65) failed [ 59.882098][T10623] FAT-fs (loop1): Directory bread(block 66) failed [ 59.883204][T10623] FAT-fs (loop1): Directory bread(block 67) failed [ 59.884303][T10623] FAT-fs (loop1): Directory bread(block 68) failed [ 59.885843][T10623] FAT-fs (loop1): Directory bread(block 69) failed [ 59.886927][T10623] FAT-fs (loop1): Directory bread(block 70) failed [ 59.888669][T10623] FAT-fs (loop1): Directory bread(block 71) failed [ 59.889763][T10623] FAT-fs (loop1): Directory bread(block 72) failed [ 59.890794][T10623] FAT-fs (loop1): Directory bread(block 73) failed [ 60.029115][T10633] exfat: Deprecated parameter 'utf8' [ 60.031250][T10633] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 60.044066][ T743] bridge0: port 3(dummy0) entered disabled state [ 60.112290][ T743] bridge_slave_1: left allmulticast mode [ 60.113367][ T743] bridge_slave_1: left promiscuous mode [ 60.114510][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.132506][ T743] bridge_slave_0: left allmulticast mode [ 60.132540][ T743] bridge_slave_0: left promiscuous mode [ 60.132606][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.295755][T10654] SQUASHFS error: Unable to read inode 0xa7 [ 60.378982][T10646] JBD2: Ignoring recovery information on journal [ 60.399764][T10646] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 60.439275][ T6888] ocfs2: Unmounting device (7,5) on (node local) [ 60.449179][T10629] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 60.463357][T10629] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 60.477464][T10629] fscrypt (loop6, inode 3): Unsupported encryption flags (0xd6) [ 60.719448][T10678] FAT-fs (loop5): Directory bread(block 64) failed [ 60.720820][T10678] FAT-fs (loop5): Directory bread(block 65) failed [ 60.722317][T10678] FAT-fs (loop5): Directory bread(block 66) failed [ 60.723515][T10678] FAT-fs (loop5): Directory bread(block 67) failed [ 60.724743][T10678] FAT-fs (loop5): Directory bread(block 68) failed [ 60.726051][T10678] FAT-fs (loop5): Directory bread(block 69) failed [ 60.727276][T10678] FAT-fs (loop5): Directory bread(block 70) failed [ 60.728578][T10678] FAT-fs (loop5): Directory bread(block 71) failed [ 60.729704][T10678] FAT-fs (loop5): Directory bread(block 72) failed [ 60.729742][T10678] FAT-fs (loop5): Directory bread(block 73) failed [ 60.842142][T10684] __nla_validate_parse: 3 callbacks suppressed [ 60.843478][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1622'. [ 60.897150][ T743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.915506][T10690] Device name not specified. [ 60.915506][T10690] [ 60.936862][ T743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.959291][ T743] bond0 (unregistering): Released all slaves [ 60.967279][ T53] Bluetooth: hci1: command tx timeout [ 60.977944][T10511] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.982901][T10511] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.983059][T10511] bridge_slave_0: entered allmulticast mode [ 60.985841][T10511] bridge_slave_0: entered promiscuous mode [ 60.991820][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.991904][T10511] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.991969][T10511] bridge_slave_1: entered allmulticast mode [ 61.005134][T10511] bridge_slave_1: entered promiscuous mode [ 61.016569][ T743] hma(sha224): left promiscuous mode [ 61.104584][T10708] netlink: 'syz.1.1633': attribute type 2 has an invalid length. [ 61.113412][T10511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.114643][T10511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.153744][T10511] team0: Port device team_slave_0 added [ 61.155877][T10511] team0: Port device team_slave_1 added [ 61.163165][T10511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.166090][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.170712][T10511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.173337][T10511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.174566][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.178934][T10511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.261916][T10734] set_capacity_and_notify: 15 callbacks suppressed [ 61.263158][T10734] loop5: detected capacity change from 0 to 1024 [ 61.302540][ T876] hfsplus: b-tree write err: -5, ino 4 [ 61.360136][T10511] hsr_slave_0: entered promiscuous mode [ 61.360504][T10511] hsr_slave_1: entered promiscuous mode [ 61.360690][T10511] debugfs: 'hsr0' already exists in 'hsr' [ 61.360700][T10511] Cannot create hsr debugfs directory [ 61.479534][T10764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.529451][T10768] loop2: detected capacity change from 0 to 1764 [ 61.584740][T10777] loop1: detected capacity change from 0 to 2048 [ 61.633914][T10784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.646561][T10777] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 61.653623][T10777] Remounting filesystem read-only [ 61.692653][ T743] hsr_slave_0: left promiscuous mode [ 61.703748][ T743] hsr_slave_1: left promiscuous mode [ 61.722437][ T743] veth1_macvtap: left promiscuous mode [ 61.722498][ T743] veth0_macvtap: left promiscuous mode [ 61.722545][ T743] veth1_vlan: left promiscuous mode [ 61.722579][ T743] veth0_vlan: left promiscuous mode [ 61.986288][ T743] team0 (unregistering): Port device team_slave_1 removed [ 62.002407][ T743] team0 (unregistering): Port device team_slave_0 removed [ 62.088501][T10786] loop6: detected capacity change from 0 to 131072 [ 62.090137][T10786] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 62.090538][T10786] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 62.091843][T10786] F2FS-fs (loop6): invalid crc value [ 62.125502][T10786] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 62.126385][T10786] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 62.126784][T10786] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 62.201823][T10795] bond1 (unregistering): Released all slaves [ 62.362409][T10511] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.381397][T10818] netlink: 'syz.1.1679': attribute type 5 has an invalid length. [ 62.401963][T10511] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.424325][T10511] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.447964][T10826] loop1: detected capacity change from 0 to 164 [ 62.451542][T10511] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.599824][T10511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.607889][T10511] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.611645][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.611686][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.616764][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.616803][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.679723][T10511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.679774][T10511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.782686][T10876] loop1: detected capacity change from 0 to 128 [ 62.799462][T10876] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.819793][T10842] loop2: detected capacity change from 0 to 32768 [ 62.835240][T10842] syz.2.1685: attempt to access beyond end of device [ 62.835240][T10842] loop2: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768 [ 62.837966][T10842] metapage_write_end_io: I/O error [ 62.848026][T10842] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 62.848026][T10842] [ 62.855929][T10842] ERROR: (device loop2): remounting filesystem as read-only [ 62.857637][T10842] blkno = 8ed2c, nblocks = 1 [ 62.858426][T10842] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 62.858426][T10842] [ 62.861348][T10842] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 62.861348][T10842] [ 62.863216][T10842] ERROR: (device loop2): txAbort: [ 62.863216][T10842] [ 62.866244][T10842] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 62.866244][T10842] [ 62.890551][T10511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.892210][ T6582] syz-executor: attempt to access beyond end of device [ 62.892210][ T6582] loop2: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768 [ 62.904166][ T6582] metapage_write_end_io: I/O error [ 62.904643][ T6582] JFS: metapage_get_blocks failed [ 62.904656][ T6582] JFS: metapage_get_blocks failed [ 62.904666][ T6582] JFS: metapage_get_blocks failed [ 62.904675][ T6582] JFS: metapage_get_blocks failed [ 62.946648][T10890] netlink: 'syz.1.1702': attribute type 3 has an invalid length. [ 63.048304][ T53] Bluetooth: hci1: command tx timeout [ 63.049825][T10914] netlink: 'syz.2.1708': attribute type 21 has an invalid length. [ 63.052762][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1708'. [ 63.054397][T10914] netlink: 'syz.2.1708': attribute type 1 has an invalid length. [ 63.087350][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1711'. [ 63.149353][T10511] veth0_vlan: entered promiscuous mode [ 63.150874][T10511] veth1_vlan: entered promiscuous mode [ 63.220496][T10511] veth0_macvtap: entered promiscuous mode [ 63.222597][T10511] veth1_macvtap: entered promiscuous mode [ 63.255786][T10511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.278592][T10511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.303125][ T4538] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308685][ T4538] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308736][ T4538] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308760][ T4538] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.410477][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.410511][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.439673][ T876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.439712][ T876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.515437][T10980] openvswitch: netlink: Multiple metadata blocks provided [ 63.591312][T10991] netlink: 'syz.1.1738': attribute type 4 has an invalid length. [ 63.591354][T10991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1738'. [ 63.649581][T10974] loop7: detected capacity change from 0 to 32768 [ 63.911356][T11039] loop6: detected capacity change from 0 to 256 [ 63.932770][T11039] FAT-fs (loop6): Directory bread(block 64) failed [ 63.932802][T11039] FAT-fs (loop6): Directory bread(block 65) failed [ 63.932823][T11039] FAT-fs (loop6): Directory bread(block 66) failed [ 63.932833][T11039] FAT-fs (loop6): Directory bread(block 67) failed [ 63.932854][T11039] FAT-fs (loop6): Directory bread(block 68) failed [ 63.932864][T11039] FAT-fs (loop6): Directory bread(block 69) failed [ 63.932882][T11039] FAT-fs (loop6): Directory bread(block 70) failed [ 63.932892][T11039] FAT-fs (loop6): Directory bread(block 71) failed [ 63.932911][T11039] FAT-fs (loop6): Directory bread(block 72) failed [ 63.932921][T11039] FAT-fs (loop6): Directory bread(block 73) failed [ 63.970499][T11052] x_tables: unsorted entry at hook 1 [ 63.992652][T11054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1764'. [ 63.998729][T11048] loop5: detected capacity change from 0 to 2048 [ 63.999246][T11048] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485 [ 64.032124][T11048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.170304][T11072] FAT-fs (loop2): Directory bread(block 64) failed [ 64.170345][T11072] FAT-fs (loop2): Directory bread(block 65) failed [ 64.170366][T11072] FAT-fs (loop2): Directory bread(block 66) failed [ 64.170376][T11072] FAT-fs (loop2): Directory bread(block 67) failed [ 64.170396][T11072] FAT-fs (loop2): Directory bread(block 68) failed [ 64.170405][T11072] FAT-fs (loop2): Directory bread(block 69) failed [ 64.170424][T11072] FAT-fs (loop2): Directory bread(block 70) failed [ 64.170436][T11072] FAT-fs (loop2): Directory bread(block 71) failed [ 64.170457][T11072] FAT-fs (loop2): Directory bread(block 72) failed [ 64.170467][T11072] FAT-fs (loop2): Directory bread(block 73) failed [ 64.258284][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1776'. [ 64.260543][T11088] vlan0: entered promiscuous mode [ 64.284722][T11072] syz.2.1769: attempt to access beyond end of device [ 64.284722][T11072] loop2: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 64.307356][T11072] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 64.307394][T11072] FAT-fs (loop2): Filesystem has been set read-only [ 64.307442][T11072] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 64.462031][T11113] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.479256][T11113] tmpfs: Bad value for 'size' [ 64.487464][ T2465] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488614][ T2465] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.545719][T11124] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.547717][T11116] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 64.547727][T11116] FAT-fs (loop7): Filesystem has been set read-only [ 64.576603][T11112] syz.1.1786: attempt to access beyond end of device [ 64.576603][T11112] loop1: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096 [ 64.576650][T11112] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 64.710571][T11125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1791 (11125) [ 64.716655][T11125] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.716706][T11125] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 64.716726][T11125] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 64.760141][T11125] BTRFS info (device loop5): rebuilding free space tree [ 64.786011][T11125] BTRFS info (device loop5): disabling free space tree [ 64.786058][T11125] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.786070][T11125] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.799193][T11125] BTRFS info (device loop5): enabling ssd optimizations [ 64.799223][T11125] BTRFS info (device loop5): turning off barriers [ 64.799479][T11125] BTRFS info (device loop5): enabling disk space caching [ 64.799504][T11125] BTRFS info (device loop5): force clearing of disk cache [ 64.799520][T11125] BTRFS info (device loop5): enabling auto defrag [ 64.844988][T11125] BTRFS warning (device loop5): can't clear the compat:1 feature bit while mounted [ 64.867101][ T6888] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.067514][T11193] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1815'. [ 65.126803][ T6581] Bluetooth: hci1: command tx timeout [ 65.134765][T11157] JBD2: Ignoring recovery information on journal [ 65.157909][T11157] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 65.248537][T11213] capability: warning: `syz.7.1819' uses 32-bit capabilities (legacy support in use) [ 65.256916][T11215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1820'. [ 65.343230][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 65.476038][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1834'. [ 65.524236][T11247] bridge1: entered promiscuous mode [ 65.611958][T11267] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 65.670379][T11275] xt_TCPMSS: Only works on TCP SYN packets [ 65.678576][T11278] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 65.768939][T11269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1847 (11269) [ 65.800717][T11269] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.800793][T11269] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 65.800818][T11269] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 65.849556][T11311] mac80211_hwsim hwsim18 ..c: renamed from wlan1 (while UP) [ 65.861652][T11312] EXT4-fs (loop6): 1 truncate cleaned up [ 65.862140][T11312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.886055][T11269] BTRFS info (device loop2): rebuilding free space tree [ 65.908098][T11269] BTRFS info (device loop2): disabling free space tree [ 65.908151][T11269] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.908162][T11269] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.910101][T11312] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 65.910414][T11312] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1862: invalid indirect mapped block 234881024 (level 0) [ 65.916710][T11269] BTRFS info (device loop2): enabling ssd optimizations [ 65.916724][T11269] BTRFS info (device loop2): turning off barriers [ 65.916730][T11269] BTRFS info (device loop2): enabling disk space caching [ 65.916736][T11269] BTRFS info (device loop2): force clearing of disk cache [ 65.916742][T11269] BTRFS info (device loop2): enabling auto defrag [ 65.940805][T11269] BTRFS warning (device loop2): can't clear the compat:1 feature bit while mounted [ 65.963397][ T9241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.016180][ T6582] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.035566][T11334] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1870'. [ 66.123669][T11295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1858 (11295) [ 66.127219][T11295] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.127265][T11295] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 66.170489][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1878'. [ 66.186260][T11295] BTRFS info (device loop5): setting nodatasum [ 66.186295][T11295] BTRFS info (device loop5): allowing degraded mounts [ 66.186318][T11295] BTRFS info (device loop5): enabling ssd optimizations [ 66.186325][T11295] BTRFS info (device loop5): disabling tree log [ 66.186331][T11295] BTRFS info (device loop5): turning on async discard [ 66.186337][T11295] BTRFS info (device loop5): enabling free space tree [ 66.186344][T11295] BTRFS info (device loop5): max_inline set to 0 [ 66.269481][T11376] netlink: 'syz.2.1883': attribute type 13 has an invalid length. [ 66.269515][T11376] netlink: 'syz.2.1883': attribute type 17 has an invalid length. [ 66.362130][ T6888] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.598309][T11375] set_capacity_and_notify: 10 callbacks suppressed [ 66.599915][T11375] loop7: detected capacity change from 0 to 32768 [ 66.602223][T11375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1882 (11375) [ 66.615721][T11375] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.617445][T11375] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 66.620769][T11375] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 66.731684][T11375] BTRFS info (device loop7): rebuilding free space tree [ 66.739490][T11375] BTRFS info (device loop7): disabling free space tree [ 66.740752][T11375] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.740799][T11375] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.746936][T11375] BTRFS info (device loop7): enabling ssd optimizations [ 66.748183][T11375] BTRFS info (device loop7): turning off barriers [ 66.749318][T11375] BTRFS info (device loop7): enabling disk space caching [ 66.750490][T11375] BTRFS info (device loop7): force clearing of disk cache [ 66.751626][T11375] BTRFS info (device loop7): enabling auto defrag [ 66.790968][T11375] BTRFS warning (device loop7): can't clear the compat:1 feature bit while mounted [ 66.841699][T10511] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.936661][T11479] loop2: detected capacity change from 0 to 4096 [ 67.115004][T11508] loop1: detected capacity change from 0 to 2048 [ 67.116824][T11508] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 67.124551][T11508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.205123][ T53] Bluetooth: hci1: command tx timeout [ 67.508407][T11524] loop5: detected capacity change from 0 to 32768 [ 67.526215][T11565] netlink: 'syz.7.1951': attribute type 29 has an invalid length. [ 67.526449][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1951'. [ 67.527192][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 67.546130][T11524] jfs_mkdir: dtInsert returned -EIO [ 67.546166][T11524] ERROR: (device loop5): txAbort: [ 67.546166][T11524] [ 67.554798][T11524] ERROR: (device loop5): remounting filesystem as read-only [ 67.658185][T11585] tmpfs: User quota block hardlimit too large. [ 67.680127][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'. [ 67.694118][T11592] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 67.708590][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1967'. [ 67.898029][T11621] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 67.906890][T11621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 67.946963][T11629] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1982'. [ 68.050955][T11623] loop1: detected capacity change from 0 to 4096 [ 68.052853][T11637] loop7: detected capacity change from 0 to 256 [ 68.053637][T11637] exfat: Deprecated parameter 'utf8' [ 68.053664][T11637] exfat: Deprecated parameter 'namecase' [ 68.053675][T11637] exfat: Deprecated parameter 'namecase' [ 68.058967][T11603] loop2: detected capacity change from 0 to 32768 [ 68.062048][T11637] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f81e, utbl_chksum : 0xe619d30d) [ 68.069525][T11623] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 68.089024][T11623] ntfs3(loop1): ino=19, mi_enum_attr [ 68.089059][T11623] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 68.091651][T11603] JBD2: Ignoring recovery information on journal [ 68.115709][T11603] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 68.125525][T11623] ntfs3(loop1): failed to convert "c46c" to cp869 [ 68.128278][T11623] ntfs3(loop1): ino=20, mi_enum_attr [ 68.205553][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 68.267162][T11625] loop5: detected capacity change from 0 to 32768 [ 68.269311][T11625] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1980 (11625) [ 68.318866][T11649] ipt_REJECT: ECHOREPLY no longer supported. [ 68.338906][T11625] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.338965][T11625] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.338984][T11625] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 68.412659][T11665] loop2: detected capacity change from 0 to 2048 [ 68.415880][T11625] BTRFS info (device loop5): rebuilding free space tree [ 68.423710][T11665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.437551][T11625] BTRFS info (device loop5): disabling free space tree [ 68.437599][T11625] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.437610][T11625] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.438874][T11625] BTRFS info (device loop5): setting nodatasum [ 68.438883][T11625] BTRFS info (device loop5): allowing degraded mounts [ 68.438890][T11625] BTRFS info (device loop5): turning on async discard [ 68.438896][T11625] BTRFS info (device loop5): enabling disk space caching [ 68.438901][T11625] BTRFS info (device loop5): force clearing of disk cache [ 68.438908][T11625] BTRFS info (device loop5): force zlib compression, level 3 [ 68.459609][T11665] EXT4-fs error (device loop2): empty_inline_dir:1770: inode #12: block 9: comm syz.2.1994: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 68.464409][T11665] EXT4-fs warning (device loop2): empty_inline_dir:1777: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 68.507251][T11625] BTRFS info (device loop5): balance: start -sconvert=raid0,soft,limit=3..0 [ 68.507354][T11625] BTRFS info (device loop5): balance: ended with status: 0 [ 68.542360][T11594] loop6: detected capacity change from 0 to 131072 [ 68.549067][T11594] F2FS-fs (loop6): invalid crc value [ 68.555639][ T6888] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.580812][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 68.618743][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.647330][T11594] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 68.650580][T11594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 68.665103][T11594] F2FS-fs (loop6): sanity_check_inode: corrupted inode i_blocks i_ino=7 iblocks=0, run fsck to fix. [ 68.790558][T11707] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 68.790677][T11707] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.839332][ T190] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 69.001426][T11736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.001460][T11736] IPv6: NLM_F_CREATE should be set when creating new route [ 69.001539][T11736] IPv6: NLM_F_CREATE should be set when creating new route [ 69.093371][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2029'. [ 69.102950][T11748] FAT-fs (loop2): Directory bread(block 64) failed [ 69.104151][T11748] FAT-fs (loop2): Directory bread(block 65) failed [ 69.105354][T11748] FAT-fs (loop2): Directory bread(block 66) failed [ 69.106482][T11748] FAT-fs (loop2): Directory bread(block 67) failed [ 69.107681][T11748] FAT-fs (loop2): Directory bread(block 68) failed [ 69.109052][T11748] FAT-fs (loop2): Directory bread(block 69) failed [ 69.110416][T11748] FAT-fs (loop2): Directory bread(block 70) failed [ 69.111823][T11748] FAT-fs (loop2): Directory bread(block 71) failed [ 69.112958][T11748] FAT-fs (loop2): Directory bread(block 72) failed [ 69.114010][T11748] FAT-fs (loop2): Directory bread(block 73) failed [ 69.176188][ T31] audit: type=1400 audit(69.150:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11757 comm="syz.7.2035" saddr=172.30.0.8 daddr=172.20.20.170 netif=wpan0 [ 69.333471][T11776] overlayfs: missing 'lowerdir' [ 69.361713][T11780] ieee802154 phy0 wpan0: encryption failed: -90 [ 69.509573][T11808] bond0: (slave bond_slave_1): Releasing backup interface [ 69.539863][T11817] sock: sock_timestamping_bind_phc: sock not bind to device [ 69.605776][ T26] cfg80211: failed to load regulatory.db [ 69.628366][ T6581] Bluetooth: Wrong link type (-71) [ 69.658057][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 69.658093][T11836] openvswitch: netlink: IP tunnel dst address not specified [ 69.883227][T11857] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 69.908438][T11857] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 70.240284][T11887] FAT-fs (loop5): Directory bread(block 64) failed [ 70.240320][T11887] FAT-fs (loop5): Directory bread(block 65) failed [ 70.240356][T11887] FAT-fs (loop5): Directory bread(block 66) failed [ 70.240367][T11887] FAT-fs (loop5): Directory bread(block 67) failed [ 70.240387][T11887] FAT-fs (loop5): Directory bread(block 68) failed [ 70.240396][T11887] FAT-fs (loop5): Directory bread(block 69) failed [ 70.240423][T11887] FAT-fs (loop5): Directory bread(block 70) failed [ 70.240436][T11887] FAT-fs (loop5): Directory bread(block 71) failed [ 70.240456][T11887] FAT-fs (loop5): Directory bread(block 72) failed [ 70.240466][T11887] FAT-fs (loop5): Directory bread(block 73) failed [ 70.306198][T11891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 70.420023][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2101'. [ 70.430184][T11880] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2094 (11880) [ 70.447434][T11880] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 70.447513][T11880] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 70.447541][T11880] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 70.501992][T11880] BTRFS info (device loop2): rebuilding free space tree [ 70.520148][T11880] BTRFS info (device loop2): disabling free space tree [ 70.520202][T11880] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.520218][T11880] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.528071][T11880] BTRFS info (device loop2): setting nodatasum [ 70.528105][T11880] BTRFS info (device loop2): allowing degraded mounts [ 70.528116][T11880] BTRFS info (device loop2): turning on async discard [ 70.528124][T11880] BTRFS info (device loop2): enabling disk space caching [ 70.528130][T11880] BTRFS info (device loop2): force clearing of disk cache [ 70.528137][T11880] BTRFS info (device loop2): force zlib compression, level 3 [ 70.600077][T11880] BTRFS info (device loop2): balance: start -sconvert=raid0,soft,limit=3..0 [ 70.600160][T11880] BTRFS info (device loop2): balance: ended with status: 0 [ 70.668796][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.668849][T11921] hfsplus: xattr searching failed [ 70.668979][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.668987][T11921] hfsplus: xattr searching failed [ 70.669033][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.669041][T11921] hfsplus: xattr searching failed [ 70.669085][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.669093][T11921] hfsplus: xattr searching failed [ 70.669374][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.669380][T11921] hfsplus: xattr searching failed [ 70.669429][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.669440][T11921] hfsplus: xattr searching failed [ 70.669477][T11921] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 70.669483][T11921] hfsplus: xattr searching failed [ 70.685475][ T6582] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 70.987450][T11944] /dev/nullb0: Can't open blockdev [ 71.047115][T11951] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 71.051183][T11951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.074595][T11929] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.113987][T11929] XFS (loop5): Ending clean mount [ 71.152226][T11893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.161411][T11834] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2071 (11834) [ 71.186297][T11834] BTRFS info (device loop7): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 71.186364][T11834] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 71.233069][ T6888] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.293396][T11834] BTRFS info (device loop7): enabling ssd optimizations [ 71.293441][T11834] BTRFS info (device loop7): enabling free space tree [ 71.396815][T11997] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 71.401996][T11961] xfs: Deprecated parameter 'noikeep' [ 71.402028][T11961] XFS: noikeep mount option is deprecated. [ 71.419769][T10511] BTRFS info (device loop7): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 71.422377][T11997] process 'syz.6.2132' launched './file2' with NULL argv: empty string added [ 71.422690][T11997] cramfs: Error -3 while decompressing! [ 71.422698][T11997] cramfs: 0000000048613572(26)->0000000072a418f6(4096) [ 71.422722][T11997] cramfs: Error -3 while decompressing! [ 71.422727][T11997] cramfs: 0000000095bd76fb(26)->00000000a26a0fee(4096) [ 71.422738][T11997] cramfs: Error -3 while decompressing! [ 71.422742][T11997] cramfs: 00000000e6960703(16)->00000000f8da1bee(4096) [ 71.422755][T11997] cramfs: Error -3 while decompressing! [ 71.422758][T11997] cramfs: 0000000048613572(26)->0000000072a418f6(4096) [ 71.485624][T11961] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 71.506577][T11961] XFS (loop1): Ending clean mount [ 71.551801][ T6573] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 71.649760][T12020] bridge1: entered allmulticast mode [ 71.813398][T12043] set_capacity_and_notify: 14 callbacks suppressed [ 71.817164][T12043] loop7: detected capacity change from 0 to 2048 [ 71.820283][T12040] loop5: detected capacity change from 0 to 256 [ 71.821710][T12043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.856793][T12040] exfat: Deprecated parameter 'utf8' [ 71.874399][T12040] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 71.924705][T12054] loop1: detected capacity change from 0 to 64 [ 72.101651][T12078] openvswitch: netlink: Multiple metadata blocks provided [ 72.104191][T12075] loop1: detected capacity change from 0 to 4096 [ 72.134953][T12075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.192626][T12075] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 16: comm syz.1.2156: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 72.198435][T12069] loop5: detected capacity change from 0 to 32768 [ 72.199571][T12069] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2154 (12069) [ 72.211879][T12069] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 72.211963][T12069] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 72.259178][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.367746][T12069] BTRFS info (device loop5): rebuilding free space tree [ 72.373627][T12069] BTRFS info (device loop5): setting nodatasum [ 72.373886][T12069] BTRFS info (device loop5): allowing degraded mounts [ 72.373912][T12069] BTRFS info (device loop5): enabling ssd optimizations [ 72.373937][T12069] BTRFS info (device loop5): turning on async discard [ 72.373957][T12069] BTRFS info (device loop5): enabling free space tree [ 72.373973][T12069] BTRFS info (device loop5): force clearing of disk cache [ 72.373986][T12069] BTRFS info (device loop5): force zlib compression, level 3 [ 72.429461][T12014] loop6: detected capacity change from 0 to 131072 [ 72.437843][T12069] BTRFS info (device loop5): balance: start -ssoft,usage=3917010174444,drange=9..7,limit=0,limit=0..0,stripes=0..2 [ 72.437981][T12069] BTRFS info (device loop5): balance: ended with status: 0 [ 72.440154][T12014] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 72.440181][T12014] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 72.440447][T12122] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 72.491522][T12014] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 72.496820][T12128] loop7: detected capacity change from 0 to 2048 [ 72.501279][T12128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.501951][T12014] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 72.501963][T12014] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 72.531883][ T6888] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 72.654348][T12143] __nla_validate_parse: 2 callbacks suppressed [ 72.656500][T12143] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2181'. [ 72.763335][T12160] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 72.868670][T12172] random: crng reseeded on system resumption [ 72.879464][T12174] openvswitch: netlink: Missing valid actions attribute. [ 72.879512][T12174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.894399][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 72.894449][T12176] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 72.934162][T12172] hibernate: Hibernate image not generated by this kernel! [ 72.934205][T12172] PM: hibernation: Image mismatch: architecture specific data [ 73.002853][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'. [ 73.060734][T12203] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.2210'. [ 73.063640][T12201] loop7: detected capacity change from 0 to 1024 [ 73.168192][T12221] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2216'. [ 73.300009][T12239] loop1: detected capacity change from 0 to 256 [ 73.300355][T12239] exfat: Deprecated parameter 'utf8' [ 73.317066][T12239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 73.473054][T12229] loop6: detected capacity change from 0 to 32768 [ 73.673663][T12288] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 73.679589][T12300] netlink: 9144 bytes leftover after parsing attributes in process `syz.2.2252'. [ 73.858120][T12334] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 73.878044][T12336] random: crng reseeded on system resumption [ 73.900749][T12334] cramfs: Error -3 while decompressing! [ 73.900789][T12334] cramfs: 00000000ac565075(26)->00000000acaa5b83(4096) [ 73.902081][T12334] cramfs: Error -3 while decompressing! [ 73.902092][T12334] cramfs: 0000000021e58882(26)->00000000c5cb7809(4096) [ 73.902111][T12334] cramfs: Error -3 while decompressing! [ 73.902119][T12334] cramfs: 000000001ce766a0(16)->00000000159ac3f4(4096) [ 73.902147][T12334] cramfs: Error -3 while decompressing! [ 73.902154][T12334] cramfs: 00000000ac565075(26)->00000000acaa5b83(4096) [ 73.933138][ T7051] udevd[7051]: incorrect cramfs checksum on /dev/loop6 [ 73.987538][ T7051] udevd[7051]: incorrect cramfs checksum on /dev/loop6 [ 74.075681][T12363] exfat: Deprecated parameter 'namecase' [ 74.078501][T12361] sit0: entered allmulticast mode [ 74.090775][T12363] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 74.139170][T12372] netlink: 'syz.6.2284': attribute type 1 has an invalid length. [ 74.259252][T12390] sit0: entered allmulticast mode [ 74.274076][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 74.274117][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2294'. [ 74.351374][T12401] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 74.389644][T12401] ntfs3(loop6): ino=5, "/" indx_read [ 74.391049][T12401] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 74.423958][T12410] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 74.425731][T12410] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 74.440118][T12410] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 74.441718][T12410] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 74.474137][T12376] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2286 (12376) [ 74.488942][T12376] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 74.489011][T12376] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 74.523195][T12416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.524545][T12416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.524563][T12416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.543398][T12378] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 9c1e1f89-8da2-4035-9776-b11e0bdd2f59 [ 74.543444][T12378] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2288 (12378) [ 74.549619][T12416] EXT4-fs (loop5): 1 truncate cleaned up [ 74.550095][T12416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.551253][T12416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.554132][T12378] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 74.554177][T12378] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 74.554195][T12378] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 74.661389][T12376] BTRFS info (device loop2): rebuilding free space tree [ 74.671380][T12378] BTRFS info (device loop1): rebuilding free space tree [ 74.680321][T12378] BTRFS info (device loop1): disabling free space tree [ 74.680373][T12378] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.680384][T12378] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.683064][T12376] BTRFS info (device loop2): setting nodatasum [ 74.683075][T12376] BTRFS info (device loop2): allowing degraded mounts [ 74.683081][T12376] BTRFS info (device loop2): enabling ssd optimizations [ 74.683088][T12376] BTRFS info (device loop2): turning on async discard [ 74.683093][T12376] BTRFS info (device loop2): enabling free space tree [ 74.683099][T12376] BTRFS info (device loop2): force clearing of disk cache [ 74.683105][T12376] BTRFS info (device loop2): force zlib compression, level 3 [ 74.696499][T12378] BTRFS info (device loop1): setting nodatasum [ 74.696536][T12378] BTRFS info (device loop1): allowing degraded mounts [ 74.696549][T12378] BTRFS info (device loop1): turning on async discard [ 74.696557][T12378] BTRFS info (device loop1): enabling disk space caching [ 74.696563][T12378] BTRFS info (device loop1): force clearing of disk cache [ 74.696571][T12378] BTRFS info (device loop1): force zlib compression, level 3 [ 74.760340][T12376] BTRFS info (device loop2): balance: start -ssoft,usage=3917010174444,drange=9..7,limit=0,limit=0..0,stripes=0..2 [ 74.760448][T12376] BTRFS info (device loop2): balance: ended with status: 0 [ 74.808504][T12378] BTRFS info (device loop1): balance: start -sprofiles=system|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=0,usage=0..0,drange=36028797018963968..70368744177664 [ 74.808603][T12378] BTRFS info (device loop1): balance: ended with status: 0 [ 74.857669][ T6582] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 74.862234][ T6573] BTRFS info (device loop1): last unmount of filesystem 9c1e1f89-8da2-4035-9776-b11e0bdd2f59 [ 74.966687][T12484] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 74.966716][T12484] UDF-fs: Scanning with blocksize 512 failed [ 74.972924][T12484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.021850][T12484] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 75.564467][T12512] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2329 (12512) [ 75.890559][T12512] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 75.892349][T12512] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 75.894092][T12512] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 75.927619][T12557] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 75.953844][ T6565] udevd[6565]: incorrect cramfs checksum on /dev/loop2 [ 76.010927][ T6565] udevd[6565]: incorrect cramfs checksum on /dev/loop2 [ 76.032459][T12512] BTRFS info (device loop1): rebuilding free space tree [ 76.038186][T12512] BTRFS info (device loop1): disabling free space tree [ 76.041566][T12512] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.043237][T12512] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.048097][T12512] BTRFS info (device loop1): setting nodatasum [ 76.049350][T12512] BTRFS info (device loop1): turning on async discard [ 76.050718][T12512] BTRFS info (device loop1): enabling disk space caching [ 76.051905][T12512] BTRFS info (device loop1): force clearing of disk cache [ 76.078025][T12512] BTRFS error (device loop1): balance: invalid convert system profile raid0 [ 76.080696][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'. [ 76.090242][ T6573] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.148201][T12595] netlink: 'syz.6.2354': attribute type 11 has an invalid length. [ 76.148252][T12595] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2354'. [ 76.398851][T12634] comedi comedi0: bad chanlist[0]=0x0000148d chan=5261 range length=2 [ 76.414501][T12628] Symlink component flag not implemented [ 76.415659][T12628] Symlink component flag not implemented [ 76.416717][T12628] Symlink component flag not implemented (129) [ 76.417719][T12628] Symlink component flag not implemented (6) [ 76.586845][T12658] EXT4-fs: Ignoring removed orlov option [ 76.594168][T12658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 76.620774][T12658] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.621496][T12658] EXT4-fs (loop2): invalid journal inode [ 76.621532][T12658] EXT4-fs (loop2): can't get journal size [ 76.627866][T12611] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 76.628339][T12611] F2FS-fs (loop7): invalid crc value [ 76.647669][T12658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.667254][T12611] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 76.673464][T12611] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 76.689822][T12658] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 76.689822][T12658] [ 76.785276][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.793147][T12652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2376 (12652) [ 76.797510][T12652] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.799281][T12652] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 76.799329][T12652] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 76.925327][T12652] BTRFS info (device loop6): rebuilding free space tree [ 76.927927][T12701] set_capacity_and_notify: 16 callbacks suppressed [ 76.927957][T12701] loop1: detected capacity change from 0 to 1764 [ 76.932714][T12701] ISOFS: unable to read i-node block [ 76.932742][T12701] isofs_fill_super: get root inode failed [ 76.933717][T12652] BTRFS info (device loop6): disabling free space tree [ 76.933752][T12652] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.933768][T12652] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.958118][T12652] BTRFS info (device loop6): setting nodatasum [ 76.958175][T12652] BTRFS info (device loop6): setting nodatacow [ 76.958190][T12652] BTRFS info (device loop6): enabling ssd optimizations [ 76.958200][T12652] BTRFS info (device loop6): turning off barriers [ 76.958209][T12652] BTRFS info (device loop6): turning on async discard [ 76.958215][T12652] BTRFS info (device loop6): enabling disk space caching [ 76.958221][T12652] BTRFS info (device loop6): force clearing of disk cache [ 76.958227][T12652] BTRFS info (device loop6): enabling auto defrag [ 76.958233][T12652] BTRFS info (device loop6): max_inline set to 76 [ 76.971834][T12713] loop7: detected capacity change from 0 to 16 [ 76.977349][T12713] erofs (device loop7): mounted with root inode @ nid 36. [ 76.989389][T12652] tmpfs: Bad value for 'mpol' [ 77.028414][T12718] loop5: detected capacity change from 0 to 164 [ 77.039722][ T9241] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.073473][T12718] rock: directory entry would overflow storage [ 77.073504][T12718] rock: sig=0x4f50, size=4, remaining=3 [ 77.073683][T12718] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 77.208700][T12736] loop5: detected capacity change from 0 to 1024 [ 77.266952][ T5560] hfsplus: b-tree write err: -5, ino 4 [ 77.280862][T12747] loop2: detected capacity change from 0 to 1024 [ 77.319724][T12747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.461065][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.620334][T12785] netlink: 'syz.1.2426': attribute type 5 has an invalid length. [ 77.663298][T12797] loop7: detected capacity change from 0 to 512 [ 77.666024][T12797] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.827124][T12823] random: crng reseeded on system resumption [ 77.912819][T12832] loop1: detected capacity change from 0 to 256 [ 77.921015][T12832] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 77.994244][T12839] __nla_validate_parse: 3 callbacks suppressed [ 77.994541][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2453'. [ 77.999702][T12843] loop5: detected capacity change from 0 to 512 [ 78.055976][T12843] syz.5.2455: attempt to access beyond end of device [ 78.055976][T12843] loop5: rw=8390659, sector=80192, nr_sectors = 128768 limit=512 [ 78.240010][T12874] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 78.243889][T12874] bond1 (unregistering): Released all slaves [ 78.328786][T12892] binder: 12891:12892 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 78.386076][T12903] tmpfs: Bad value for 'mpol' [ 78.427617][T12911] xt_cgroup: invalid path, errno=-2 [ 78.441686][T12910] netlink: 'syz.5.2487': attribute type 21 has an invalid length. [ 78.466070][T12914] loop2: detected capacity change from 0 to 1024 [ 78.497637][T12914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.518988][T12917] loop1: detected capacity change from 0 to 4096 [ 78.523488][T12917] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 78.544518][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.545237][T12917] ntfs3(loop1): ino=19, mi_enum_attr [ 78.545255][T12917] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 78.570045][T12917] ntfs3(loop1): failed to convert "c46c" to cp865 [ 78.576043][T12917] ntfs3(loop1): ino=20, mi_enum_attr [ 78.738519][T12959] netlink: 'syz.5.2504': attribute type 5 has an invalid length. [ 79.096485][T12993] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 79.372521][T13031] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2536'. [ 79.484786][T13043] bridge2: entered promiscuous mode [ 79.489523][T13043] bridge2: entered allmulticast mode [ 79.592909][T13053] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 79.637207][T13058] delete_channel: no stack [ 79.674548][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.674754][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.770967][T12940] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 79.773564][T12940] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 79.775529][T12940] F2FS-fs (loop6): invalid crc value [ 79.797123][T12940] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 79.802660][T12940] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 79.804165][T12940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 79.950881][T13085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.972799][T13085] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #12: comm syz.1.2563: directory missing '..' [ 80.014047][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.057905][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 80.122557][T13108] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.132502][T13111] netlink: 'syz.6.2571': attribute type 30 has an invalid length. [ 80.201855][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2578'. [ 80.237422][T13128] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 80.270706][T13128] veth0_vlan: left promiscuous mode [ 80.271515][T13128] veth0_vlan: entered promiscuous mode [ 80.272264][T13128] team0: Device veth0_vlan failed to register rx_handler [ 80.395753][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.408980][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.412698][ T6581] Bluetooth: hci0: unknown advertising packet type: 0x25 [ 80.413186][ T6581] Bluetooth: hci0: unknown advertising packet type: 0x07 [ 80.421800][T13158] tc_dump_action: action bad kind [ 80.662403][T13194] FAT-fs (loop7): Directory bread(block 64) failed [ 80.663602][T13194] FAT-fs (loop7): Directory bread(block 65) failed [ 80.664711][T13194] FAT-fs (loop7): Directory bread(block 66) failed [ 80.666673][T13194] FAT-fs (loop7): Directory bread(block 67) failed [ 80.667871][T13194] FAT-fs (loop7): Directory bread(block 68) failed [ 80.668912][T13194] FAT-fs (loop7): Directory bread(block 69) failed [ 80.670016][T13194] FAT-fs (loop7): Directory bread(block 70) failed [ 80.671046][T13194] FAT-fs (loop7): Directory bread(block 71) failed [ 80.672704][T13194] FAT-fs (loop7): Directory bread(block 72) failed [ 80.673770][T13194] FAT-fs (loop7): Directory bread(block 73) failed [ 80.759377][T13205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.765381][T13210] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2622'. [ 80.783858][T13205] EXT4-fs error (device loop2): ext4_xattr_set_entry:1669: inode #13: comm syz.2.2618: corrupted xattr entries [ 80.816463][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.865147][T13223] netlink: 'syz.2.2627': attribute type 2 has an invalid length. [ 80.865181][T13223] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 80.865523][T13223] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 80.884081][T13225] netlink: 'syz.2.2628': attribute type 3 has an invalid length. [ 80.996926][T13239] comedi comedi0: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 81.154409][T13263] xt_bpf: check failed: parse error [ 81.193318][T13269] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 81.194146][T13272] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2650'. [ 81.203003][ T6564] udevd[6564]: incorrect cramfs checksum on /dev/loop2 [ 81.208531][T13269] cramfs: Error -3 while decompressing! [ 81.208567][T13269] cramfs: 00000000ac565075(26)->0000000039b56f0a(4096) [ 81.209308][T13269] cramfs: Error -3 while decompressing! [ 81.209321][T13269] cramfs: 0000000021e58882(26)->00000000e853272e(4096) [ 81.209349][T13269] cramfs: Error -3 while decompressing! [ 81.209356][T13269] cramfs: 000000001ce766a0(16)->0000000023a963d0(4096) [ 81.209381][T13269] cramfs: Error -3 while decompressing! [ 81.209387][T13269] cramfs: 00000000ac565075(26)->0000000039b56f0a(4096) [ 81.250176][ T6564] udevd[6564]: incorrect cramfs checksum on /dev/loop2 [ 81.326073][T13290] netlink: 'syz.2.2658': attribute type 21 has an invalid length. [ 81.326116][T13290] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2658'. [ 81.360369][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2664'. [ 81.399500][T13303] netlink: 'syz.7.2667': attribute type 13 has an invalid length. [ 81.401002][T13303] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2667'. [ 81.510983][T13320] netlink: 'syz.7.2674': attribute type 1 has an invalid length. [ 81.529862][T13319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.554223][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.563038][T13204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.563077][T13204] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 81.644640][T13204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.644684][T13204] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 81.717825][T13204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.717859][T13204] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 81.718524][T13204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.718535][T13204] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 81.770054][T13204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.770094][T13204] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 81.798987][T13354] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 81.851960][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2695'. [ 81.968032][T13379] tmpfs: Bad value for 'mpol' [ 81.985578][T13382] set_capacity_and_notify: 10 callbacks suppressed [ 81.986852][T13382] loop7: detected capacity change from 0 to 8 [ 82.002771][T13358] loop2: detected capacity change from 0 to 32768 [ 82.004701][T13358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2692 (13358) [ 82.035779][T13358] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.038901][T13385] libceph: resolve '. [ 82.038901][T13385] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)Hyo=U邋#ǤYMhE$ [ 82.038901][T13385] ' (ret=-3): failed [ 82.045673][T13358] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 82.095579][T13398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.158712][T13358] BTRFS info (device loop2): enabling ssd optimizations [ 82.160102][T13358] BTRFS info (device loop2): turning on async discard [ 82.161965][T13358] BTRFS info (device loop2): enabling free space tree [ 82.202014][ T6582] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.296756][T13394] loop7: detected capacity change from 0 to 32768 [ 82.305945][T13394] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2708 (13394) [ 82.316665][T13394] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 82.316731][T13394] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 82.332940][T13446] loop6: detected capacity change from 0 to 128 [ 82.345159][T13443] netlink: 'syz.2.2716': attribute type 39 has an invalid length. [ 82.346968][T13447] loop1: detected capacity change from 0 to 1024 [ 82.348496][T13447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.350691][T13447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.351010][T13446] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 82.351034][T13446] hpfs: filesystem error: improperly stopped [ 82.351042][T13446] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 82.351049][T13446] hpfs: You really don't want any checks? You are crazy... [ 82.351112][T13446] hpfs: hpfs_map_sector(): read error [ 82.351117][T13446] hpfs: code page support is disabled [ 82.351207][T13446] hpfs: hpfs_map_4sectors(): unaligned read [ 82.351226][T13446] hpfs: hpfs_map_4sectors(): unaligned read [ 82.351230][T13446] hpfs: filesystem error: unable to find root dir [ 82.394642][T13447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.445496][T13394] BTRFS info (device loop7): rebuilding free space tree [ 82.468721][T13394] BTRFS info (device loop7): enabling ssd optimizations [ 82.468754][T13394] BTRFS info (device loop7): using spread ssd allocation scheme [ 82.468767][T13394] BTRFS info (device loop7): enabling free space tree [ 82.468775][T13394] BTRFS info (device loop7): force clearing of disk cache [ 82.485552][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.555871][T10511] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 82.589588][T13471] loop6: detected capacity change from 0 to 32768 [ 82.592702][T13471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2724 (13471) [ 82.626682][T13471] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.626733][T13471] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 82.729779][T13471] BTRFS info (device loop6): enabling ssd optimizations [ 82.729815][T13471] BTRFS info (device loop6): turning on async discard [ 82.729826][T13471] BTRFS info (device loop6): enabling free space tree [ 82.832266][ T9241] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.999626][T13543] loop1: detected capacity change from 0 to 2048 [ 83.005727][T13543] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.036103][T13557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.036244][T13543] syz.1.2745: attempt to access beyond end of device [ 83.036244][T13543] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 83.062115][T13543] syz.1.2745: attempt to access beyond end of device [ 83.062115][T13543] loop1: rw=8388608, sector=9437254, nr_sectors = 2 limit=2048 [ 83.062155][T13543] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 83.097459][T13564] libceph: resolve '. [ 83.097459][T13564] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)Hyo=U邋#ǤYMhE$ [ 83.097459][T13564] ' (ret=-3): failed [ 83.136027][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2752'. [ 83.263313][T13586] loop5: detected capacity change from 0 to 256 [ 83.263686][T13586] exfat: Deprecated parameter 'utf8' [ 83.270303][T13586] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 83.277041][T13590] loop7: detected capacity change from 0 to 1024 [ 83.313406][ T3569] hfsplus: b-tree write err: -5, ino 4 [ 83.524752][T13635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2783'. [ 83.552743][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2786'. [ 83.756698][T13677] loop2: detected capacity change from 0 to 256 [ 83.764649][T13677] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 83.772186][T13677] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 83.916946][T13690] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 83.939984][T13690] ntfs3(loop2): ino=19, mi_enum_attr [ 84.195281][T13716] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 84.376048][T13742] openvswitch: netlink: Duplicate or invalid key (type 0). [ 84.376091][T13742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.486381][T13744] overlayfs: failed to resolve './file0/file1': -2 [ 84.573612][T13766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.738766][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 84.738800][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 84.738809][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2855'. [ 84.798960][T13787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2854 (13787) [ 84.806843][T13787] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.808607][T13787] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 84.833546][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2858'. [ 84.833583][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2858'. [ 84.848606][T13787] BTRFS info (device loop5): enabling ssd optimizations [ 84.851744][T13787] BTRFS info (device loop5): turning on async discard [ 84.852872][T13787] BTRFS info (device loop5): enabling free space tree [ 84.893166][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2861'. [ 84.894735][T13815] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2861'. [ 84.904102][T13795] EXT4-fs (loop6): Test dummy encryption mode enabled [ 84.909082][ T6888] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.921259][T13795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.955562][T13795] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.996801][ T9241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.050770][T13783] JBD2: Ignoring recovery information on journal [ 85.125330][T13783] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 85.159152][T13783] (syz.1.2851,13783,0):ocfs2_find_entry:1115 ERROR: status = -117 [ 85.160323][T13783] (syz.1.2851,13783,0):ocfs2_find_entry:1115 ERROR: status = -117 [ 85.160342][T13783] (syz.1.2851,13783,0):ocfs2_mknod:506 ERROR: status = -117 [ 85.202505][T13852] validate_nla: 2 callbacks suppressed [ 85.202551][T13852] netlink: 'syz.7.2876': attribute type 1 has an invalid length. [ 85.267397][ T6573] ocfs2: Unmounting device (7,1) on (node local) [ 85.578100][T13904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.698109][T13914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.709356][T13915] netlink: 'syz.6.2901': attribute type 10 has an invalid length. [ 85.709397][T13915] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 85.709726][T13915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.720134][T13914] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.721442][T13914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 85.724915][T13914] System zones: 0-1, 15-15, 18-18, 34-34 [ 85.727129][T13914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.728365][T13914] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 85.729913][T13914] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.732164][T13914] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 85.745030][T13914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2900: bg 0: block 40: padding at end of block bitmap is not set [ 85.749309][T13914] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 85.761130][T13914] EXT4-fs (loop5): 1 truncate cleaned up [ 85.762598][T13914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.780846][T13921] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 85.785299][T13914] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.790897][T13914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 85.810771][T13890] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.818878][ T6888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.842319][T13890] XFS (loop2): Ending clean mount [ 85.848414][T13890] XFS (loop2): Quotacheck needed: Please wait. [ 85.888335][T13890] XFS (loop2): Quotacheck: Done. [ 85.945570][ T6582] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.978895][T13889] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 85.981954][T13889] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.983976][T13889] F2FS-fs (loop1): invalid crc value [ 86.056978][T13889] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 86.065619][T13889] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.065651][T13889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 86.111520][T13935] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.139490][T13935] XFS (loop5): Ending clean mount [ 86.183287][ T6888] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.294990][T13981] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 86.423273][T14003] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.433871][T14003] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 86.446943][T14008] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 86.463380][T14003] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.2933: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.477668][T14003] EXT4-fs (loop1): Remounting filesystem read-only [ 86.477717][T14003] Quota error (device loop1): write_blk: dquota write failed [ 86.477739][T14003] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.477832][T14003] EXT4-fs (loop1): 1 orphan inode deleted [ 86.478317][T14003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.544718][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.868075][T14071] erofs (device loop7): mounted with root inode @ nid 36. [ 86.911172][T14079] netlink: 'syz.5.2971': attribute type 1 has an invalid length. [ 87.037725][T14057] set_capacity_and_notify: 12 callbacks suppressed [ 87.037952][T14057] loop6: detected capacity change from 0 to 32768 [ 87.039626][T14057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2959 (14057) [ 87.042324][T14057] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.042763][T14057] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 87.120365][T14057] BTRFS info (device loop6): enabling ssd optimizations [ 87.120404][T14057] BTRFS info (device loop6): turning on async discard [ 87.120415][T14057] BTRFS info (device loop6): enabling free space tree [ 87.211499][T14131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.238740][ T31] audit: type=1107 audit(87.200:3): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 87.256895][ T9241] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.276807][T14133] loop5: detected capacity change from 0 to 256 [ 87.282014][T14133] FAT-fs (loop5): Directory bread(block 64) failed [ 87.282058][T14133] FAT-fs (loop5): Directory bread(block 65) failed [ 87.282083][T14133] FAT-fs (loop5): Directory bread(block 66) failed [ 87.282093][T14133] FAT-fs (loop5): Directory bread(block 67) failed [ 87.282112][T14133] FAT-fs (loop5): Directory bread(block 68) failed [ 87.282121][T14133] FAT-fs (loop5): Directory bread(block 69) failed [ 87.282139][T14133] FAT-fs (loop5): Directory bread(block 70) failed [ 87.282149][T14133] FAT-fs (loop5): Directory bread(block 71) failed [ 87.282167][T14133] FAT-fs (loop5): Directory bread(block 72) failed [ 87.282176][T14133] FAT-fs (loop5): Directory bread(block 73) failed [ 87.287908][T14135] loop1: detected capacity change from 0 to 4096 [ 87.290241][T14135] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 87.298600][T14093] loop7: detected capacity change from 0 to 32768 [ 87.308505][T14135] ntfs3(loop1): ino=19, mi_enum_attr [ 87.308540][T14135] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 87.320249][T14135] ntfs3(loop1): failed to convert "c46c" to cp950 [ 87.321955][T14135] ntfs3(loop1): ino=20, mi_enum_attr [ 87.346327][T14093] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.427096][T14093] XFS (loop7): Ending clean mount [ 87.469913][T10511] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.746104][T14201] tipc: Can't bind to reserved service type 0 [ 87.861244][T14174] loop5: detected capacity change from 0 to 32768 [ 87.883175][T14218] loop1: detected capacity change from 0 to 2048 [ 87.918251][T14224] veth0_to_bond: entered allmulticast mode [ 87.925219][T14227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.951722][T14218] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 87.960177][T14218] Remounting filesystem read-only [ 88.216866][T14272] __nla_validate_parse: 12 callbacks suppressed [ 88.216914][T14272] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3051'. [ 88.217229][T14272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.335165][T14290] netlink: 'syz.5.3060': attribute type 21 has an invalid length. [ 88.336571][T14290] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3060'. [ 88.338243][T14290] netlink: 'syz.5.3060': attribute type 5 has an invalid length. [ 88.339776][T14290] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3060'. [ 88.408801][T14299] loop6: detected capacity change from 0 to 256 [ 88.410448][T14299] exfat: Deprecated parameter 'utf8' [ 88.415487][T14299] exfat: Deprecated parameter 'utf8' [ 88.425326][T14299] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 88.492054][T14306] netlink: 'syz.5.3068': attribute type 1 has an invalid length. [ 88.493633][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3068'. [ 88.533345][T14313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.562809][T14285] loop1: detected capacity change from 0 to 40427 [ 88.564562][T14285] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 88.566391][T14285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.568114][T14285] F2FS-fs (loop1): Image doesn't support compression [ 88.569185][T14285] F2FS-fs (loop1): build fault injection rate: 690 [ 88.570542][T14285] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 88.572319][T14285] F2FS-fs (loop1): invalid crc value [ 88.589546][T14285] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 88.592528][T14285] F2FS-fs (loop1): Start checkpoint disabled! [ 88.600399][T14285] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 88.613183][T14285] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.614393][T14285] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 88.734642][T14336] loop7: detected capacity change from 0 to 22 [ 88.735202][T14336] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 88.738355][T14336] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 88.782136][T14340] loop2: detected capacity change from 0 to 256 [ 88.809678][T14340] FAT-fs (loop2): Directory bread(block 64) failed [ 88.809714][T14340] FAT-fs (loop2): Directory bread(block 65) failed [ 88.809736][T14340] FAT-fs (loop2): Directory bread(block 66) failed [ 88.809746][T14340] FAT-fs (loop2): Directory bread(block 67) failed [ 88.809767][T14340] FAT-fs (loop2): Directory bread(block 68) failed [ 88.809777][T14340] FAT-fs (loop2): Directory bread(block 69) failed [ 88.809796][T14340] FAT-fs (loop2): Directory bread(block 70) failed [ 88.809806][T14340] FAT-fs (loop2): Directory bread(block 71) failed [ 88.809824][T14340] FAT-fs (loop2): Directory bread(block 72) failed [ 88.809833][T14340] FAT-fs (loop2): Directory bread(block 73) failed [ 88.844103][T14344] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 88.867971][T14344] ntfs3(loop6): ino=19, mi_enum_attr [ 88.868010][T14344] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 88.914520][T14354] tmpfs: Bad value for 'mpol' [ 88.916688][T14344] ntfs3(loop6): failed to convert "c46c" to cp950 [ 88.916843][T14344] ntfs3(loop6): ino=20, mi_enum_attr [ 88.987027][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3093'. [ 89.035439][T14368] x_tables: ip_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 89.120681][T14384] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3106'. [ 89.406044][T14431] kAFS: No cell specified [ 89.489078][ T99] read_mapping_page failed! [ 89.490011][ T99] read_mapping_page failed! [ 89.685942][T14439] JBD2: Ignoring recovery information on journal [ 89.701004][T14439] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 89.719276][T14437] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.746856][T14439] (syz.7.3130,14439,1):ocfs2_find_entry:1115 ERROR: status = -117 [ 89.751902][T14439] (syz.7.3130,14439,1):ocfs2_find_entry:1115 ERROR: status = -117 [ 89.753386][T14439] (syz.7.3130,14439,1):ocfs2_mknod:506 ERROR: status = -117 [ 89.753587][T14437] XFS (loop2): Ending clean mount [ 89.811488][T10511] ocfs2: Unmounting device (7,7) on (node local) [ 89.862173][T14450] F2FS-fs (loop6): build fault injection rate: 174 [ 89.862212][T14450] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 89.872013][T14450] F2FS-fs (loop6): invalid crc value [ 89.880517][ T6582] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.942531][T14479] netlink: 'syz.7.3145': attribute type 10 has an invalid length. [ 89.944426][T14450] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 89.951172][T14450] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 89.970159][T14479] team0: Port device macvlan0 added [ 90.016616][T14486] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3148'. [ 90.069876][T14492] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3150'. [ 90.146102][T14498] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 90.146133][T14498] UDF-fs: Scanning with blocksize 512 failed [ 90.153481][T14498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.203394][T14512] tmpfs: Bad value for 'mpol' [ 90.265573][T14520] netlink: 'syz.2.3164': attribute type 25 has an invalid length. [ 90.288495][T14519] usb usb3: usbfs: process 14519 (syz.5.3162) did not claim interface 0 before use [ 90.426741][T14550] netlink: 'syz.6.3179': attribute type 1 has an invalid length. [ 90.426791][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 90.502250][T14557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.521279][T14557] UDF-fs: incorrect filename length (10) [ 90.602843][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 90.664309][T14581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.664350][T14581] IPv6: NLM_F_CREATE should be set when creating new route [ 90.664396][T14581] IPv6: NLM_F_CREATE should be set when creating new route [ 90.782612][T14564] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.841767][T14564] XFS (loop7): Ending clean mount [ 90.913051][T10511] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.082959][T14647] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.093774][T14647] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 91.097690][T14647] FAT-fs (loop6): Filesystem has been set read-only [ 91.219481][T14656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 91.318137][T14675] netlink: 'syz.6.3235': attribute type 1 has an invalid length. [ 91.318177][T14675] netlink: 'syz.6.3235': attribute type 2 has an invalid length. [ 91.318775][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.455568][T14693] ntfs3(loop2): ino=1a, mi_enum_attr [ 91.455603][T14693] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 91.514329][T14706] exfat: Deprecated parameter 'utf8' [ 91.514421][T14706] exfat: Deprecated parameter 'namecase' [ 91.544075][T14706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 91.572445][T14706] overlay: filesystem on ./file0 not supported [ 91.757140][T14727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.806512][ T9241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.823195][T14720] jfs_lookup: iget failed on inum 4 [ 92.128009][T14740] set_capacity_and_notify: 18 callbacks suppressed [ 92.134604][T14740] loop5: detected capacity change from 0 to 32768 [ 92.136785][T14740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3267 (14740) [ 92.151540][T14740] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.151607][T14740] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 92.159185][T14721] loop1: detected capacity change from 0 to 65536 [ 92.184585][T14721] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 92.210371][T14740] BTRFS info (device loop5): enabling ssd optimizations [ 92.212700][T14740] BTRFS info (device loop5): turning on async discard [ 92.213963][T14740] BTRFS info (device loop5): enabling free space tree [ 92.214471][T14721] XFS (loop1): Ending clean mount [ 92.220501][T14795] loop7: detected capacity change from 0 to 256 [ 92.249516][T14795] FAT-fs (loop7): Directory bread(block 64) failed [ 92.249553][T14795] FAT-fs (loop7): Directory bread(block 65) failed [ 92.249575][T14795] FAT-fs (loop7): Directory bread(block 66) failed [ 92.249585][T14795] FAT-fs (loop7): Directory bread(block 67) failed [ 92.249606][T14795] FAT-fs (loop7): Directory bread(block 68) failed [ 92.249615][T14795] FAT-fs (loop7): Directory bread(block 69) failed [ 92.249634][T14795] FAT-fs (loop7): Directory bread(block 70) failed [ 92.249643][T14795] FAT-fs (loop7): Directory bread(block 71) failed [ 92.249662][T14795] FAT-fs (loop7): Directory bread(block 72) failed [ 92.249671][T14795] FAT-fs (loop7): Directory bread(block 73) failed [ 92.263291][ T6888] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.281305][ T6573] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 92.313583][T14807] loop2: detected capacity change from 0 to 16 [ 92.313991][T14807] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 92.539701][T14847] xt_hashlimit: max too large, truncated to 1048576 [ 92.539776][T14847] xt_hashlimit: overflow, rate too high: 0 [ 92.644332][T14863] netlink: 'syz.6.3316': attribute type 1 has an invalid length. [ 92.725131][T14872] loop2: detected capacity change from 0 to 256 [ 92.800250][T14884] loop2: detected capacity change from 0 to 128 [ 92.802522][T14885] loop7: detected capacity change from 0 to 64 [ 92.813283][T14885] syz.7.3327: attempt to access beyond end of device [ 92.813283][T14885] loop7: rw=8388608, sector=65534, nr_sectors = 2 limit=64 [ 92.816578][T14885] Buffer I/O error on dev loop7, logical block 32767, async page read [ 92.829309][T14884] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.898487][ T6582] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.983604][T14909] openvswitch: netlink: IPv4 tunnel dst address is zero [ 93.101573][T14930] loop6: detected capacity change from 0 to 1024 [ 93.161626][ T743] hfsplus: b-tree write err: -5, ino 4 [ 93.200279][T14944] netlink: 'syz.6.3352': attribute type 1 has an invalid length. [ 93.264773][T14927] loop1: detected capacity change from 0 to 32768 [ 93.268642][T14927] [ 93.268642][T14927] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.268642][T14927] [ 93.321317][ T6573] [ 93.321317][ T6573] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.321317][ T6573] [ 93.321488][ T6573] [ 93.321488][ T6573] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.321488][ T6573] [ 93.401563][T14969] loop7: detected capacity change from 0 to 8 [ 93.452348][T14978] __nla_validate_parse: 5 callbacks suppressed [ 93.452393][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3371'. [ 93.468294][T14985] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3375'. [ 93.585955][T14999] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 93.599318][T14999] bond4 (unregistering): Released all slaves [ 93.616903][T15003] netlink: 'syz.6.3382': attribute type 3 has an invalid length. [ 93.617025][T15003] netlink: 'syz.6.3382': attribute type 3 has an invalid length. [ 93.617055][T15003] netlink: 'syz.6.3382': attribute type 3 has an invalid length. [ 93.617077][T15003] netlink: 'syz.6.3382': attribute type 3 has an invalid length. [ 93.657719][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 93.847581][T15052] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 93.859378][T15054] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.877103][T15047] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 93.881509][T15047] Remounting filesystem read-only [ 94.177116][T15105] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 94.192286][T15105] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 94.277745][T15092] JBD2: Ignoring recovery information on journal [ 94.300223][T15122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.327178][T15092] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 94.431513][T15092] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad chain 8 [ 94.431568][T15092] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.431574][T15092] OCFS2: File system is now read-only. [ 94.431580][T15092] (syz.5.3427,15092,1):ocfs2_search_chain:1818 ERROR: status = -30 [ 94.431591][T15092] (syz.5.3427,15092,1):ocfs2_search_chain:1941 ERROR: status = -30 [ 94.431601][T15092] (syz.5.3427,15092,1):ocfs2_claim_suballoc_bits:2021 ERROR: status = -30 [ 94.431611][T15092] (syz.5.3427,15092,1):ocfs2_claim_suballoc_bits:2074 ERROR: status = -30 [ 94.431620][T15092] (syz.5.3427,15092,1):__ocfs2_claim_clusters:2449 ERROR: status = -30 [ 94.431628][T15092] (syz.5.3427,15092,1):__ocfs2_claim_clusters:2457 ERROR: status = -30 [ 94.431635][T15092] (syz.5.3427,15092,1):ocfs2_block_group_alloc_contig:438 ERROR: status = -30 [ 94.431642][T15092] (syz.5.3427,15092,1):ocfs2_block_group_alloc:712 ERROR: status = -30 [ 94.431684][T15092] (syz.5.3427,15092,1):ocfs2_block_group_alloc:765 ERROR: status = -30 [ 94.431694][T15092] (syz.5.3427,15092,1):ocfs2_reserve_suballoc_bits:840 ERROR: status = -30 [ 94.431703][T15092] (syz.5.3427,15092,1):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30 [ 94.431709][T15092] (syz.5.3427,15092,1):ocfs2_reserve_new_metadata_blocks:997 ERROR: status = -30 [ 94.431722][T15092] (syz.5.3427,15092,1):ocfs2_reserve_new_metadata_blocks:1020 ERROR: status = -30 [ 94.431729][T15092] (syz.5.3427,15092,1):ocfs2_mknod:354 ERROR: status = -30 [ 94.431788][T15092] (syz.5.3427,15092,1):ocfs2_mknod:506 ERROR: status = -30 [ 94.431796][T15092] (syz.5.3427,15092,1):ocfs2_mkdir:662 ERROR: status = -30 [ 94.524769][ T6888] ocfs2: Unmounting device (7,5) on (node local) [ 94.828676][T15196] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 94.841136][T15191] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 94.841292][T15191] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 94.914655][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3474'. [ 94.944657][T15208] netlink: 1372 bytes leftover after parsing attributes in process `syz.7.3477'. [ 95.073966][T15228] ip6tnl3: entered allmulticast mode [ 95.174386][T15172] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.204209][T15172] XFS (loop2): Ending clean mount [ 95.257984][ T6582] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.329559][ T4133] hfsplus: b-tree write err: -5, ino 4 [ 95.335911][T15263] hfs: unable to locate alternate MDB [ 95.337848][T15263] hfs: continuing without an alternate MDB [ 95.386099][ T4133] hfs: new node 0 already hashed ** replaying previous printk message ** [ 95.386099][ T4133] hfs: new node 0 already hashed? [ 95.386908][ T4133] ------------[ cut here ]------------ [ 95.386912][ T4133] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create+0x384/0x430, CPU#1: kworker/u8:15/4133 [ 95.390456][ T4133] Modules linked in: [ 95.391066][ T4133] CPU: 1 UID: 0 PID: 4133 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT [ 95.392535][ T4133] Tainted: [L]=SOFTLOCKUP [ 95.393164][ T4133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 95.394608][ T4133] Workqueue: writeback wb_workfn (flush-7:6) [ 95.395514][ T4133] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.396682][ T4133] pc : hfs_bnode_create+0x384/0x430 [ 95.397451][ T4133] lr : hfs_bnode_create+0x384/0x430 [ 95.398224][ T4133] sp : ffff80009ee76bd0 [ 95.398872][ T4133] x29: ffff80009ee76be0 x28: 0000000000000000 x27: dfff800000000000 [ 95.400116][ T4133] x26: 0000000000000080 x25: dfff800000000000 x24: 0000000000000000 [ 95.401490][ T4133] x23: ffff0000f817508c x22: 0000000000000000 x21: 0000000000000000 [ 95.402856][ T4133] x20: ffff0000c63f6000 x19: ffff0000db415400 x18: 00000000ffffffff [ 95.404153][ T4133] x17: ffff800093599000 x16: ffff800082e5e68c x15: 0000000000000001 [ 95.405504][ T4133] x14: 1ffff00013dcecf4 x13: 0000000000000000 x12: 0000000000000000 [ 95.406889][ T4133] x11: ffff700013dcecf5 x10: 0000000000ff0100 x9 : e179a4b32ff77000 [ 95.408036][ T4133] x8 : e179a4b32ff77000 x7 : ffff8000805761f8 x6 : 0000000000000000 [ 95.409276][ T4133] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260 [ 95.410559][ T4133] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001f [ 95.411864][ T4133] Call trace: [ 95.412383][ T4133] hfs_bnode_create+0x384/0x430 (P) [ 95.413187][ T4133] hfs_bmap_alloc+0x5b0/0x688 [ 95.413869][ T4133] hfs_btree_inc_height+0xf8/0x870 [ 95.414663][ T4133] hfs_brec_insert+0x664/0xa10 [ 95.415402][ T4133] __hfs_ext_write_extent+0x230/0x488 [ 95.416253][ T4133] hfs_ext_write_extent+0x144/0x1bc [ 95.417031][ T4133] hfs_write_inode+0xc4/0x7b8 [ 95.417772][ T4133] __writeback_single_inode+0x6b0/0x16b8 [ 95.418608][ T4133] writeback_sb_inodes+0x73c/0x16b4 [ 95.419343][ T4133] wb_writeback+0x3b4/0xd70 [ 95.420086][ T4133] wb_workfn+0x320/0xdc0 [ 95.420720][ T4133] process_one_work+0x7c0/0x1558 [ 95.421458][ T4133] worker_thread+0x958/0xed8 [ 95.422167][ T4133] kthread+0x5fc/0x75c [ 95.422779][ T4133] ret_from_fork+0x10/0x20 [ 95.423455][ T4133] irq event stamp: 469036 [ 95.424109][ T4133] hardirqs last enabled at (469035): [] irqentry_exit+0x1b4/0x308 [ 95.425480][ T4133] hardirqs last disabled at (469036): [] el1_brk64+0x20/0x54 [ 95.426759][ T4133] softirqs last enabled at (469034): [] handle_softirqs+0xaf8/0xc88 [ 95.428262][ T4133] softirqs last disabled at (467839): [] __do_softirq+0x14/0x20 [ 95.429651][ T4133] ---[ end trace 0000000000000000 ]--- [ 95.460643][ T4133] ------------[ cut here ]------------ [ 95.460656][ T4133] kernel BUG at fs/hfs/bnode.c:565! [ 95.462810][ T4133] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 95.465682][ T4133] Modules linked in: [ 95.466301][ T4133] CPU: 1 UID: 0 PID: 4133 Comm: kworker/u8:15 Tainted: G W L syzkaller #0 PREEMPT [ 95.467998][ T4133] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 95.468779][ T4133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 95.470290][ T4133] Workqueue: writeback wb_workfn (flush-7:6) [ 95.471252][ T4133] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.472420][ T4133] pc : hfs_bnode_put+0x348/0x3c4 [ 95.473199][ T4133] lr : hfs_bnode_put+0x348/0x3c4 [ 95.473891][ T4133] sp : ffff80009ee76cc0 [ 95.474466][ T4133] x29: ffff80009ee76cd0 x28: 0000000000000302 x27: dfff800000000000 [ 95.475629][ T4133] x26: ffff700013dcedac x25: ffff80009ee76d60 x24: 0000000000000200 [ 95.476827][ T4133] x23: ffff0000c63f6000 x22: dfff800000000000 x21: 0000000000000000 [ 95.478073][ T4133] x20: ffff0000db415480 x19: ffff0000db415400 x18: 00000000ffffffff [ 95.479335][ T4133] x17: ffff800093599000 x16: ffff800080544d7c x15: 0000000000000001 [ 95.480535][ T4133] x14: 1fffe0001b682a90 x13: 0000000000000000 x12: 0000000000000000 [ 95.481686][ T4133] x11: ffff60001b682a91 x10: 0000000000ff0100 x9 : 0000000000000000 [ 95.482930][ T4133] x8 : ffff0000d5860000 x7 : ffff80008af09f78 x6 : 0000000000000000 [ 95.484059][ T4133] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800081364f98 [ 95.485219][ T4133] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 95.486392][ T4133] Call trace: [ 95.486836][ T4133] hfs_bnode_put+0x348/0x3c4 (P) [ 95.487494][ T4133] hfs_btree_inc_height+0x448/0x870 [ 95.488271][ T4133] hfs_brec_insert+0x664/0xa10 [ 95.488957][ T4133] __hfs_ext_write_extent+0x230/0x488 [ 95.489762][ T4133] hfs_ext_write_extent+0x144/0x1bc [ 95.490546][ T4133] hfs_write_inode+0xc4/0x7b8 [ 95.491232][ T4133] __writeback_single_inode+0x6b0/0x16b8 [ 95.492038][ T4133] writeback_sb_inodes+0x73c/0x16b4 [ 95.492816][ T4133] wb_writeback+0x3b4/0xd70 [ 95.493436][ T4133] wb_workfn+0x320/0xdc0 [ 95.494084][ T4133] process_one_work+0x7c0/0x1558 [ 95.494815][ T4133] worker_thread+0x958/0xed8 [ 95.495513][ T4133] kthread+0x5fc/0x75c [ 95.496124][ T4133] ret_from_fork+0x10/0x20 [ 95.496735][ T4133] Code: f94007f7 f2fbfff6 17ffff45 97cfa621 (d4210000) [ 95.497808][ T4133] ---[ end trace 0000000000000000 ]--- [ 95.762804][ T4133] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 95.763759][ T4133] SMP: stopping secondary CPUs [ 95.764507][ T4133] Kernel Offset: disabled [ 95.765125][ T4133] CPU features: 0x400000,00078001,04e04501,5427fea7 [ 95.766073][ T4133] Memory Limit: none [ 96.079597][ T4133] Rebooting in 86400 seconds..