last executing test programs: 1m35.583541681s ago: executing program 0 (id=771): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \t'], 0x33) close(r0) 1m35.502268673s ago: executing program 0 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x4a, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m35.278136299s ago: executing program 0 (id=775): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x200, 0x8, 0x1, 0x8, 0x1, 0x0, [{0xffffffffffffff98, 0x0, 0x4, '\x00', 0x2a00}]}) 1m34.603623545s ago: executing program 0 (id=781): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIddd3AD+zN6+dm4GQOqmBjWOCcTbZ9SW+0LqYcG24lUAo9ILtetdmwTe8dgk0ko0CJRJGRRVtw0NbQKjNS4VVIZVWgPKAWlWqBO0DfUFUqDxEVUABqVJbQbaac/7//87Mzs7sesfrmXM+Hyn5xTNn5pw585/Z/a7z3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt39+tlP17Isq/+T/2tzlt1c/++NE5vzy15zo48QAAAAWKtf5P9+/rZ0weEV3Khhm396+Xe+trCwsJC9b/hPRj+/sJCumMiy0Q1Zll8XXf3h+2uN2wRPZOO1oYY/D3XZ/XCX60e6XD/a5fqxLtdv6HL9eJfrl5yAJTYWP4/J72x7/p+bi1Oa3Z6N5tdtb3OrJ2obhobiz3Jytfw2C6MnsrnsVDabTTdtX2xby7f/xt31fb0li/saatjX1voK+enjx+Mx1MI53t60r8X7jH78umziZz99/PhfXXjuznaz62lour/iOHdsqx/nJ8MlxbHWsg3pnMTjHGo4zq1tnpPhpuOs5ber/3frcT6/wuMcXjzMddX6nI9nQ/l/fzc/TyONP9ZL52lruOx/7smy7PLiYbdus2Rf2VC2qemSocXnZ7xYkfX7qC+lF2cjq1qnd69gndbnzPbmddr6mojP/93hdiPLHEPj0/TjT4w1PO8/X7iWdRrVH/Vyr5XWNdjr10q/rMG4Lr6bP+gn267B7eHxP37v8muw7dppswbT425Yg9u6rcGhseH8mNOTUMtvs7gGdzVtP5zvqZbPZ+/tvAanLpw+NzX/sY/fP3f62MnZk7Nn9uzaNb1n374DBw5MnZg7NTtd/Psaz3b/25QNpdfAtnDu4mvgVS3bNi7VhS+NLXn/vdbX4XiH1+Hmlm17/TocaX1wtfV5QS5d08Vr4z31kz5+ZShb5jWWPz871/46TI+74XU40vA6bPs1pc3rcGQFr8P6Nud2rux7lpGGf9odw/JfC9a2Bjc3rMHW70da12Cvvx/plzU4HtbF93cu/7VgazjeJydX+/3I8JI1mB5ueO+pX5K+3x8/kI926/Ku+hU3jWUX52fPP/DYsQsXzu/KwlgXL2lYK63rdVPDY8qWrNehVa/Xw3Mvf/KuNpdvDudq/P76v8aXfa7q2+x9oPNzlX91a38+my7dnYXRY+t9Ptt9Na+fz7Es+8K3P/HINx//wuuXPZ/1vPnJqbV/L55yacP77+gy778x979Q7C/d1RPDoyPF63c4nZ3Rpvfj5qdqJH/vquX7fn5qZe/Ho+Gf9X4/vr3D+/GWlm17/X482vrg4vtxrdtPO9am9fkcD+vk1HTn9+P6Nlt2r3ZNjnR8P74nzFo4/68OSSHlooa1s9y6TfsaGRkNj2sk7qF5ne5p2n40ZLP6vp7efW3rdMc9xX0Np0e3aL3W6UTLtr1ep+lnX8ut01q3n75dm9bnczysi9v3dF6n9W2e2bv2986N8T8b3jvHuq3B0eGx+jGPpkWYv99nCxvjGnwgO56dzU5lM/m1Y/l6quX7mnxwZWtwLPyz3u+VWzqswR0t2/Z6DaavY8utvdrI0gffA63P53hYF0892HkN1rd5w/7efu+6I1yStmn43rX152vL/czrrpbTdL3Wykg4zm/v7/yz2fo2pw6sNmd2Pk/3hUtuanOeWl+/y72mZrL1OU9bwnE+d2D581Q/nvo2nz+4wvV0OMuySx95KP95b/j7lb+9+L2vNf29S7u/07n0kYd+csuJf1zN8QMw+F4oxqbia13D30yt5O//AQAAgIEQc/9QmIn8DwAAAKURc3/8v8IT+R8AAABKI+b+kTCTiuT/LW94bu6FS1lq5i8E8fp0Gh4utosd1+nw54mFRfXLH/rK7H//w6WV7Xsoy7KfP/wHbbff8nA8rsJEOM6rb2y+fImv3b+ifR999FLab2N//Yvh/uPjWekyaFfBnc6y7Bu3fTbfz8T7r+TzmYeP5vORy08+Ud/m+YPFn+Ptn31Jsf2fh/Lv4RPHmm7/bDgPPwpz+q3tz0e83VevvHrr/vcu7i/errbt1vxhP/WB4n7j78n53BPF9vE8L3f83/zM01+tb//YK9sf/6Wh9sf/dLjfr4T5vy8rtm98Dup/jrf7VDj+uL94uwe+/K22x3/108X2595UbHc0zLj/HeHP29/03Fzj+XqsdqzpcWVvLraL+5/+3h/l18f7i/ffevzjR640nY/W9fHMvxX3M9Wyfbw87if6+5b91++ncX3G/T/9h0ebznO3/V995NmX1e+3df/3tWx37iM78/0v3l/zb2z6i099tu3+4vEc/ptzTY/n8LvC6zjs/6kPhPUYrv+/q8X9tf52haPvan7/idt/cfOlpscTveVnxf6vvvZkPjeMb9x008233Hr5FfVzl2Xf3VDcX7f9n/zLs03H/6U7ivMRr48d/db9Lyfu//xHJ8+cnb84N5PO6uO35b87523F8cTjvS28t7b++cjZCx+cPT8xPTGdZRPl/RV61+zLYf6kGJc7b72w5B1056Ph+bzrz76x6d5//Uy8/N/fU1x+5a3F161Xhe0+Fy7fHJ6/1e1/qafuviN/fdeeCUe4sPT3Ba/F1u3/dWBFG4bH3/p9QVzv5176wfw81K/Lv27E1/Uaj/8HM8X9fD2c14Xwm5m33bG4v8bt4+9GuPLu4vW+5vMX3ubi8/rX4fl++4+K+4/HFR/vD8L3Md/a0vx+F9fH1y8Ntd5//ls8Lof3k+xycX3cKp7vK8/f0fbw4u8hyS7fmf/5j9P93Lmqh7mc+Y/NT52aO3PxsakLs/MXpuY/9vEjp89ePHPhSP67PI98qNvtF9+fNuXvTzOz+/Zm+bvV2WJcZzf6+M89enxm//S9M7Mnjl08ceHRc7PnTx6fnz8+OzN/77ETJ2Y/2u32czOHdu0+uGf/7smTczOHDhw8uOfg5NyZs/XDKA6qi33TH548c/5IfpP5Q3sP7nrwwb3Tk6fPzswe2j89PXmx2+3zr02T9Vv//uT52VPHLsydnp2cn/v47KFdB/ft2931twGePndifmLq/MUzUxfnZ89PFY9l4kJ+cf1rX7fbU07z/1F8P9uqVvwivuyd9+1Lv5+17iufWPauik1afoHoc+F30fzzi84dWMmfY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f0OYifwPAAAApRFz/3iYSUXyf+n6/1surWj/+v/6/43nS/+/Yv3/d/db/794v9D/74219u/1/wP9f/1//X/9f/1/eqDf+v8x92/MskrmfwAAAKiCmPs3hZnI/wAAAFAaMfffFGYi/wMAAEBpxNx/c5hJRfK//v/17v8P6//r/+v/x3Wp/6//vw70/zvT/+9C/38qq1b//3Ivj1//X/+fpfqt/x9z/y1hJhXJ/wAAAFAFMfffGmYi/wMAAEBpxNx/W5iJ/A8AAAClEXP/5jCTiuR//f+++fz/v8v0/3P6/4u30/8v6P/r/6+G/n9n+v9d6P/7/H/9f/1/eqrf+v8x978ozKQi+R8AAACqIOb+F4eZyP8AAADQf0au7WYx978kzGRJ/r/GHQAAAAA3XMz9t2ctRfCK/P2//n/f9P9z+v/6//r/g9j/H870//uH/n9n+v9d6P/r/+v/6//TU/3W/89zfzaevTTMpCL5HwAAAKog5v47wkzkfwAAACiNmPt/KcxE/gcAAIDSiLl/S5hJRfK//r/+v/6//r/+f/v9+/z/waT/35n+fxf6//r/+v/6//RUv/X/Y+6/M8ykIvkfAAAAqiDm/rvCTOR/AAAAKI2Y+385zET+BwAAgNKIuX9rmElF8r/+f5/3/2NzVP9f/1//X/9f/39F9P870//vQv9f/1//X/+fnuq3/n/M/S8LM6lI/gcAAIAqiLn/5WEm8j8AAACURsz9rwgzkf8BAACgNGLunwgzqUj+1//vUf9/+y1LLvP5//r/aX2Eqf+v/6//f/3p/3em/9+F/r/+v/6//j891W/9/5j77w4zqUj+BwAAgCqIuX9bmIn8DwAAAKURc/89YSbyPwAAAJRGzP3bw0wqkv/1//v88//1//X/9f/1//X/V0X/vzP9/y70//X/9f/1/+mpfuv/x9z/yjCTiuR/AAAAqIKY++8NM5H/AQAAoDRi7n9VmIn8DwAAAKURc/+OMJOK5H/9f/1//X/9f/3/9vvX/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/leHmVQk/wMAAEAVxNy/M8xE/gcAAIDSiLn/vjAT+R8AAABKI+b+yTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v77w0wqkv8BAACgCmLufyDMRP4HAACA0oi5fyrMRP4HAACA0oi5fzrMpCL5X/9f/1//X/9/Vf3/Vyzer/5/Qf+/v+j/d6b/34X+v/7/De//j+r/Uyr91v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj794SZyP8AAABQGjH37w0zqUj+1//X/9f/1//3+f/t96//P5j0/zvrff8/PkT9f/1//X+f/6//z1L91v+Puf/BMJOK5H8AAACogpj794WZyP8AAABQGjH37w8zkf8BAACgNGLuPxBmUpH8r/+v/6//r/+v/99+//r/g0n/vzOf/9+F/r/+v/6//j891W/9/5j7D4aZVCT/AwAAQBXE3P+aMBP5HwAAAEoj5v5fCTOR/wEAAKA0Yu7/1TCTiuR//X/9f/1//X/9//b71/8fTAPb/y++DOv/6//r/w/w8ev/6/+zVL/1/2PuPxRmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/NsxE/gcAAIDSiLn/cJhJRfK//r/+v/6//r/+f/v96/8PpoHt/wcV6/+PtV6g/6//P8jHr/+v/89S/db/j7n/dWEmFcn/AAAAUAUx9z8UZiL/AwAAQGnE3P/6MBP5HwAAAEoj5v43hJlUJP/r/+v/6//r/+v/t9+//v9g0v/vrM/6/0tc5/7/UNcD0P/X/9f/1/+np/qt/x9z/xvDTCqS/wEAAKAKYu5/U5iJ/A8AAAClEXP/m8NM5H8AAAAojZj73xJmUpH8r/+v/6//r/+v/99+//r/g0n/v7OK9/+70/8vWf9/4hb9f/1/rpd2CWipa+v/3/zzZXe4xv5/zP2/HmZSkfwPAAAAVRBz/8NhJvI/AAAAlEbM/W8NM5H/AQAAoDRi7n9bmElF8v+a+v9j+v+R/n/z8ev/t18f+v/6//r/15/+f2cD1v//xa3hcv3/gv5/fx9/X/b/f7hc/39hQ+vt9f+5Hq6t/99WT/r/Mfe/PcykIvkfAAAAqiDm/neEmcj/AAAAUBox978zzET+BwAAgNKIuf83wkwqkv99/n/9OBbby/r/+v/5Bfr/+v/6/wOrZ/3/hReaviDq/xd8/r/+fyf6/33Y//f5/9xg/db/j7n/XWEmFcn/AAAAUAUx9z8SZiL/AwAAQGnE3P/uMBP5HwAAAEoj5v73hJlUJP/r//v8f/1//X/9//b71/8fTD7/vzP9/y70//X/+63//5/6/wy2fuv/x9z/aJhJRfI/AAAAVEHM/e8NM5H/AQAAoDRi7v/NMBP5HwAAAEoj5v73hZlUJP/r/w9K/39C/1//X/+/5fHo/+v/t6P/35n+fxf6//r//db/9/n/DLh+6//H3P/+MJOV5//xFW8JAAAA3BAx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/0Hp//v8/0z/X/+/5fHo/+v/t7N+/f/4zqP/r/9/Hfr/G9sfnv5/fx+//r/+P0v1W/8/5v7fDTOpSP4HAACAKoi5/wNhJvI/AAAADIR2/092q5j7j4SZyP8AAABQGjH3Hw0zqUj+1//X/9f/79P+/59u+5fvf+cdR3fp/+v/6/+vyrp+/n/9xe/z//X/ff5/ov+v/6//T6t+6//H3H8szKQi+R8AAACqIOb+3wszkf8BAACgNGLuPx5mIv8DAABAacTcPxNmUpH8r/+v/6//3yf9/1oty0ry+f/xfOj/N+tZ/z++6er/t7Wu/f/3LvbE9f9X2/8fa3up/r/+/yAfv/6//j9L9Vv/P+b+2TCTiuR/AAAAqIKQ+4dOFHPxCvkfAAAASiPm/pNhJvI/AAAAlEbM/R8MM6lI/tf/1//X/++T/n/r5/8PcP/f5/+35/P/14f+f2f90/9vT/9f/3+Qj1//X/+fpfqt/x9z/1yYSUXyPwAAAFRBzP0fCjOR/wEAAKA0Yu7/cJiJ/A8AAAClEXP/qTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v7TYSYVyf8AAABQBTH3nwkzkf/5f/burNnSurrj+O6kId3FC8hFKlXc5xWkuEiqcpe8gFzkJhdJVSoXIQkZnGkUJ1ScZxTnGQdQxAnnCZxQnMV5VhxwxqEtPWut7nN6n2efbvbpfp7/+nxulnbT7iO2DT/gW38AAACGkbv/8rjF/gcAAIBh5O7/z7ilyf7X/+v/h+3//0b/v9/n6//1/yPT/0/T/2+g/9f/6//1/2zV3Pr/3P3/Fbc02f8AAADQQe7+/45b7H8AAAAYRu7+K+IW+x8AAACGkbv/f+KWJvt/T/9/ZNWz/8+MV/8/Uv/v/f99P1//r/8f2fnt/6/6w698+n/9v/4/6P/1//p/9ppb/5+7/3/jlib7HwAAADrI3f9/cYv9DwAAAMPI3f//cYv9DwAAAMPI3X+/uKXJ/vf+v/f/9f/6f/3/+s/X/y+T9/+nder/r7jzkv+45+a/uOVsPl//r//X/+v/2a659f+5++8ft+wefn+3989HAQAAgOXI3f+AuKXJ3/8HAACADnL3PzBusf8BAABgGLn7HxS3NNn/+n/9v/5f/6//X//5+v9l0v9P69T/n8vn6//1//p//T/bNbf+P3f/g+OWJvsfAAAAOsjd/5C4xf4HAACAYeTuvzJusf8BAABgGLn7T8QtTfa//v/w+//f6v/1/3H1//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9V8UtTfY/AAAAdJC7/6Fxi/0PAAAAw8jd/7C4xf4HAACAYeTuvzpuabL/9f/e/9f/6//1/+s/X/+/TPr/aee//1/3R8j96f8X3/9fpP/X/+v/Od1Z9v/3TvyyvZX+P3f/w+OWJvsfAAAAOsjd/4i4xf4HAACAYeTuf2TcYv8DAADAMHL3PypuabL/9f/6f/2//l//v/7z9f/LpP+fNpv3/48cXfvN+v/F9//e/9f/6//ZZW7v/+fuf3Tc0mT/AwAAQAe5+6+JW+x/AAAAGEbu/sfELfY/AAAADCN3/2Pjlib7X/+v/9f/6//1/+s/f6r/v+W0r0//Py8b+/sNv7Dr/8Nh9//70P/r/5f89ev/9f+caW79f+7+x8UtTfY/AAAAdJC7/9q4xf4HAACAYeTuf3zcYv8DAADAMHL3PyFuabL/1/f/p75f/38w+v/dX7/+f/3Pj231//mfqP+f7P//1vv/PXn/f5r+fwP9v/5f/79f/39804/X/7PO3Pr/3P1PjFua7H8AAADoIHf/k+IW+x8AAACGkbv/yXGL/Q8AAADDyN3/lLilyf73/r/+X/+/vP7f+/87LuT7/6vz3v8f1f8fkP5/mv5/A/2//l//7/1/tmpu/X/u/qfGLU32PwAAAHSQu/9pcYv9DwAAAMtw+j87sPcfKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f8fW0j/7/3/g9L/T9P/b3Bh+/8jg/b/Rwfr/6/f78fPof+/Uv/PzOzq/2899e0Xqv/P3f/MuKXJ/gcAAIAOcvc/K26x/wEAAGAYufufHbfY/wAAADCM3P3XxS1N9v+h9//H9/9s/f996v8v1v/r//X/nd7/1/8flP5/mv5/A+//e//f+//6f7ZqV/9/mgvV/+fuf07c0mT/AwAAQAe5+58bt9j/AAAAMIzc/dfHLfY/AAAADCN3//Pilib7f0v9/3XXXP3X3v/fw/v/+v+9Pz/0//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9z49bmux/AAAA6CB3/wviFvsfAAAAhpG7/4Vxi/0PAAAAw8jd/6K4pcn+P/T3/yd06P/z2/X/+v+V/l//r/8/L9r2/0fW/ZHoTPv0/7f/24l/2P0t+n/9v/5f/6//Zwtm0f+fPPVnl7n7Xxy3NNn/AAAA0EHu/pfELfY/AAAADCN3/0vjFvsfAAAAhpG7/2VxyyD7/9iG79f/e/9f/6//1/+v/3z9/zK17f8PyPv/G+j/9f/6f/0/WzWL/v+0f5+7/+VxyyD7HwAAAFjV7n9F3GL/AwAAwDBy978ybrH/AQAAYBi5+18VtzTZ//p//b/+X/+v/1//+fr/ZdL/T9P/b6D/1//r//X/bNXc+v/c/TfELU32PwAAAHSQu//VcYv9DwAAAMPI3f+auMX+BwAAgGHk7n9t3NJk/+v/9f/6f/2//n/95+v/l0n/P03/v1qtbpz4Atb1/yf/TP+v/9f/6/85R3Pr/3P3vy5uabL/AQAAoIPc/TfGLfY/AAAADCN3/01xi/0PAAAAw8jd//q4pcn+1//r//X/+n/9//rP1/8vk/5/mv5/A+//6//1//p/tmpu/X/u/jfELU32PwAAAHSQu//muMX+BwAAgGHk7n9j3GL/AwAAwDBy998StzTZ//p//b/+X/+v/1//+fr/ZTq8/n+l/9f/6/830P/r//X/7DW3/j93/5vilib7HwAAADrI3f/muMX+BwAAgGHk7n9L3GL/AwAAwDBy9781bmmy//X/1dz95Ur/r//X/+/67fT/+v8l8v7/NP3/Bvp//b/+X//PVs2t/8/d/7a4pcn+BwAAgA5y998at9j/AAAAMIzc/W+PW+x/AAAAGEbu/nfELU32v/7f+/+7+//VSv+v/9f/7zgP/f+xlf5/6/T/0/T/G+j/D9LPnzx5cv2fbM22//+T1UD9//F9f7z+nzmaW/+fu/+dcUuT/Q8AAAAd5O5/V9xi/wMAAMAwcve/O26x/wEAAGAYufvfE7c02f/6f/2/9//1//r/9Z/v/f9l0v9P0/9voP/3/v/s+//96f+Zo7n1/7n73xu3NNn/AAAA0EHu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wM799RfAGiy//X/+n/9v/5/b/9/YqX/X+n/F0v/P03/v4H+X/+v/9f/s1Vz6/9j968+GLc02f8AAADQQe7+2+IW+x8AAACGkbv/9rjF/gcAAIBh5O7/UNzSZP/r//X/+v9l9v/HvP+v/9f/rzWX/v+yy/7+Dv2//l//r//X/+v/u5tb/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDBy9380brH/AQAAYBi5+z8WtzTZ/2f2/xetdgrVHev6/2jU9P+n0f/v/vr1/+t/fizl/X/9/w79/zLNpf/3/v+5ff36f/3/kr/+s+r/Lz3zxx9m//+7A/x/Qf/PYZhb/5+7/464pcn+BwAAgA5y9388brH/AQAAYBi5+z8Rt9j/AAAAMIzc/XfGLU32v/f/9f/6f/3/dvr/E/U/o/5/Pf3/+aH/n6b/30D/r//3/v/l//Kn+n+2Z279f+7+T8YtTfY/AAAAdJC7/1Nxi/0PAAAAw8jd/+m4xf4HAACAYeTu/0zc0mT/6//1//p//b/3/9d/vv5/mfT/0/T/G+j/9f/6f+//s1Vz6/9z9382bmmy/wEAAKCD3P2fi1vsfwAAABhG7v7Pxy32PwAAAAwjd/8X4pYm+3/7/f+l+v+g/59L///P+v89n6//1/+PbCb9f/60uiD9/0UT36f/30D/r//X/+v/2aq59f+5+++KW5rsfwAAAOggd/8X4xb7HwAAAIaRu/9LcYv9DwAAAMPI3f/luKXJ/vf+f6/+/8iqY//v/X/9v/6/k5n0/97/1//r//X/+n/9PzPs/3P3fyVuabL/AQAAYKn+8a/+/a6D/ra5+78at9j/AAAAMIzc/V+LW+x/AAAAGEbu/q/HLU32v/6/V//f8/1//b/+X//fif5/mv5/A/2//l//r/9nq+bW/+fu/0bcctrwO3rW/y0BAACAOcnd/824pcnf/wcAAIAOcvd/K245Y/+fPOA/1Q4AAADMTe7+b8ctTf7+v/5/5v3/avz+/+6V/l//v0P/r//fBv3/tPvY/588ov/X/0/Q/+v/9f/sNbf+P3f/d+KWJvsfAAAABrXrryjk7v9u3GL/AwAAwDBy938vbrH/AQAAYBi5+78ftzTZ//r/mff/5/T+//H6V0vo/73/f4j9/7XH1n6+/l//PzL9/zTv/2+g/19w/5+/Kuv/9f/Mydz6/9z9d8ctTfY/AAAAdJC7/wdxi/0PAAAAw8jd/8O4xf4HAACAYeTu/1Hc0mT/6/8vWP//x9/hh9P/L+v9f/2/9//Pvf//80tO3PZP/3rTDfp/Tjmf/X/+XND/6//1/zu8/6//1/+z19z6/9z9P45bmux/AAAA6CB3/z1xi/0PAAAAw8jd/5O4xf4HAACAYeTu/2nc0mT/6/9HfP9/mf1//r6+AP3/ieX1/9kUd+//vf+v/z+T9/+n6f830P/r//X/+n+2am79f+7+n8UtTfY/AAAAdJC7/+dxi/0PAAAAw8jd/4u4xf4HAACAYeTu/2Xc0mT/r+//L67v1/8fjP5/99fv/f/1Pz+8/6//1/8fPv3/NP3/Bvp//b/+X//PVs2t/8/d/6u4pcn+BwAAgA5y998bt9j/AAAAMIzc/b+OW+x/AAAAGEbu/t/ELU32v/f/9f/6f/2//n/95+v/l0n/P03/v4H+X/+v/9f/s1Vz6/9z9/8+AAD//z/ddNg=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 1m34.135733907s ago: executing program 0 (id=784): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_TONE(r0, 0x6f42, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x1e, 0x0}) 1m32.600810995s ago: executing program 0 (id=807): r0 = socket(0x23, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_1\x00', 0x10) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x89ed, 0x0) 1m32.547990897s ago: executing program 32 (id=807): r0 = socket(0x23, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_1\x00', 0x10) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x89ed, 0x0) 59.106064919s ago: executing program 2 (id=1178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0xa}, 0x8) 59.000936202s ago: executing program 2 (id=1180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e26, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8c68}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000680)='j?', 0x2}], 0x1}}], 0x2, 0x240408d1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="0200002009f06880", 0x8) 58.999079812s ago: executing program 2 (id=1181): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xf4, 0x24, 0xd0f, 0x70bd29, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x4, 0x81, 0x0, 0x6084, 0xef3, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x7]}}, {{0x1c, 0x1, {0x3, 0x7f, 0x4, 0x47b, 0x2, 0xfd, 0x4, 0x3}}, {0xffffffffffffffad, 0x2, [0x1, 0x5, 0x4]}}, {{0xfffffe33, 0x1, {0x7, 0x2, 0x4, 0xff, 0x0, 0x3, 0x9, 0xa}}, {0x18, 0x2, [0x9, 0xff, 0x401, 0x200, 0x0, 0xfffe, 0x2, 0x401, 0xa, 0xfff9]}}, {{0x1c, 0x1, {0x8, 0x3, 0xc3, 0xfffffff2, 0x1, 0x27e, 0x54, 0xa}}, {0x18, 0x2, [0xb, 0x7, 0x20, 0x40, 0x8, 0x8001, 0x80, 0x8000, 0x5, 0xcfc]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 58.962567523s ago: executing program 2 (id=1182): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000008040)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 58.754181478s ago: executing program 2 (id=1185): io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 58.237609361s ago: executing program 2 (id=1188): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000f00)=[0x2, 0xe0, 0x20400000, 0xff, 0x7, 0x2, 0x9, 0x5, 0x80, 0x4, 0x2, 0x0, 0x5, 0x3a4d, 0x2800, 0x486, 0x5, 0x5a, 0x7, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0xfff, 0x9, 0xffff0001, 0x3, 0x4, 0xb9b2, 0x441, 0x6, 0x3, 0x7, 0x8, 0xfffffff8, 0x0, 0xfffffffe, 0x9, 0x8, 0x3, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0x1000, 0x7, 0x1, 0x5, 0x1, 0xf91, 0x0, 0x9, 0x9, 0x7, 0xb, 0x7, 0x7, 0x8000, 0xb80, 0x4, 0x9f, 0x1, 0x5, 0xc41, 0x8, 0x2, 0x1ff, 0x5, 0x7, 0xff76, 0x4, 0xf, 0x6, 0x7, 0x8, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x3, 0x47, 0x7, 0x8, 0x101, 0xfffff046, 0x9, 0x400, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x7, 0x36, 0x157, 0x7d1, 0x8b96, 0xf, 0x20005, 0x0, 0x7, 0x6, 0x2, 0x8, 0x925, 0x4, 0x9, 0x7, 0xb, 0x5a17cff6, 0x0, 0xb6, 0x2, 0x3, 0x2, 0x7f, 0xffffff7f, 0x7, 0x10000, 0x3, 0x1c2a, 0x3ff, 0x0, 0x10, 0x7f, 0x6, 0x3, 0x14, 0x80, 0x7, 0x4, 0x2, 0x0, 0x2f6, 0x5, 0x9, 0xa7, 0x0, 0x9, 0xc, 0x40, 0x8000006, 0x200, 0x1, 0x2, 0x1, 0x401, 0xaa0, 0x2, 0x6, 0x9, 0x400, 0xe, 0x0, 0xfffeffff, 0x5, 0x7fffffff, 0x7ff6, 0x3, 0x1, 0x4, 0x7, 0x400, 0x0, 0x6, 0x6, 0x101, 0x2, 0x5, 0xfffffff8, 0x3, 0x7fff, 0x6d, 0x7, 0x1, 0x8, 0x6, 0x10001, 0x0, 0xffffffff, 0x8, 0xd, 0x2, 0x200, 0x7bd, 0xa2, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4ec, 0x3, 0x401, 0x5, 0xb, 0x1, 0x948, 0x7, 0x8001, 0xff, 0x200, 0xb67, 0x6, 0x5b, 0x2, 0x1, 0x8, 0x6, 0x2, 0x2, 0x1, 0x10, 0x7f, 0xa07, 0xc0bf, 0x40, 0xa4f, 0x8, 0x8001, 0x8, 0x6, 0x10000, 0x1000, 0x8, 0x1, 0x6, 0xab5, 0x4, 0x9da, 0x800000, 0x7, 0x4, 0xf8, 0x7, 0x7fffffff, 0xfffeffff, 0x401, 0x1, 0x101, 0x2, 0x3, 0xe, 0x6, 0x9, 0x401, 0x7, 0x0, 0x7, 0xfffffffc, 0x5, 0x4, 0x8, 0x3f39, 0xbaa, 0x2, 0x6, 0xcb7, 0x4, 0x8, 0x7f, 0x53b, 0xc, 0x1, 0x2, 0x8, 0xc, 0xfffffff8, 0x0, 0x2, 0x3, 0x5, 0x3, 0x400, 0x6b, 0x7ae, 0x1, 0x6f0, 0xffff, 0x7, 0x9, 0x4, 0xfff, 0x2, 0x7f, 0x3, 0x6, 0x544040be, 0x2, 0xc, 0x8, 0x9, 0x8, 0x7, 0x10001, 0xff, 0x7, 0x10000, 0x2, 0x818, 0x4, 0x3, 0x5af, 0x2, 0x5, 0x7, 0x2, 0xd, 0x2, 0x8d, 0xb8c5, 0xfffffffe, 0x202, 0x3, 0x2, 0xa0, 0x9, 0x7, 0x1, 0x4000000, 0xffffffff, 0x4, 0x40, 0x0, 0x1, 0x7, 0x6, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8, 0x1, 0x5, 0x3, 0x9, 0xb1, 0x5, 0x7, 0xe, 0x9, 0x100, 0x3, 0x5, 0x6, 0x7, 0x2, 0x3, 0xec, 0x5, 0x7, 0xff, 0x5, 0x0, 0x9cf, 0xaef8, 0xffff, 0x5, 0x1, 0x5, 0xc, 0x18a, 0xc, 0x0, 0x0, 0x6, 0x7, 0x4, 0xf2ed, 0x6, 0x4, 0x1, 0x7, 0x5, 0x8, 0x10000, 0xb, 0x9, 0xec852fda, 0x2, 0x9, 0x2, 0x3620, 0x9, 0x3, 0x3, 0x7, 0x74, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x21000000, 0x4, 0x5, 0x9, 0x356d28dc, 0x8, 0x999, 0x6, 0x24, 0x6, 0x3, 0x2772, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x101, 0x9cf, 0x10001, 0xd1, 0x0, 0x5, 0x3, 0x6, 0x40004, 0x80000001, 0x2, 0x5, 0x9, 0xe, 0xfff, 0x7, 0x10000, 0xffff, 0x7, 0x9, 0xfffffff7, 0x6, 0xa8, 0x9, 0x7ff, 0xd8a, 0x5, 0x929, 0x0, 0x8, 0xfffffffe, 0x40, 0x4, 0x2, 0x6, 0x1, 0x7, 0x7, 0x7fffffff, 0x33, 0x5, 0xa7, 0x7d8e, 0x2, 0x5, 0x4, 0x5, 0x3, 0x4, 0x1, 0x5, 0x96, 0x80, 0x8000, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x5, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x9, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x6, 0x4, 0x5, 0x40, 0x800, 0xfffffffb, 0x5, 0x0, 0x0, 0x80, 0x6, 0x10, 0x0, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x81, 0x1, 0x0, 0x6, 0x2, 0x7, 0xff, 0x7fff, 0x7, 0x0, 0x3, 0x1, 0x3, 0xb, 0x3, 0x6c, 0xffffffff, 0x8, 0x1ff, 0x10, 0xf, 0x81, 0x292e, 0x2ac9, 0x9, 0xb42, 0x7, 0xd015, 0x3, 0xff, 0x8001, 0x6, 0x0, 0xe, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x5, 0x80000000, 0x6, 0xfffffffb, 0x8, 0x6, 0x3, 0xd, 0x8001, 0x100, 0xffffffa1, 0xb, 0x1, 0x25fa, 0xd4, 0x2, 0xffffffd6, 0x976, 0x7, 0x4, 0x0, 0x5, 0xff, 0x3, 0xe6, 0x74c, 0x4, 0x7, 0xb0a, 0x6, 0x862d, 0x40, 0xffffffff, 0x5, 0x5, 0xd8c, 0x9, 0x7fffffff, 0x7, 0xe11, 0x4, 0x8, 0x1ff, 0x6, 0x10, 0x8001, 0x0, 0x8, 0xffffffff, 0x40, 0xe8, 0xb, 0x2, 0x9, 0x8, 0x5, 0x5, 0x80000001, 0xe, 0x4, 0x9, 0xb, 0x1, 0x3, 0x9, 0x9, 0xa0000000, 0xc390, 0x4, 0x791, 0xfff, 0x4, 0x54f, 0x4, 0x4, 0x80, 0x6, 0xfffffe00, 0xb, 0x5, 0x4, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0x5, 0x6, 0x6, 0x4, 0x8, 0x0, 0x6f616b2e, 0x8, 0x101, 0x1ff, 0x2, 0x0, 0x4, 0xa25, 0x7, 0x8001, 0x9, 0xdd4, 0x4, 0x9, 0x7ff, 0x9, 0xffffffff, 0x80, 0x1, 0x4, 0x7, 0xfffffff7, 0x8, 0x2f69, 0x1, 0x7, 0x766b, 0x8, 0x1, 0xb, 0x8, 0xffffce7d, 0x6, 0x2, 0xffff349c, 0x9c1, 0x2, 0x1, 0x1, 0x2, 0x52, 0x9, 0x10000, 0x5, 0x4, 0x35, 0x9, 0x9088, 0xfff, 0x8, 0xb, 0x8000, 0x7, 0x80000001, 0x8, 0x800, 0x6, 0x5, 0x6, 0xd1, 0x8, 0x8000, 0x3, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x7fff, 0xff, 0x607, 0x6, 0x3, 0x4, 0x7, 0x8, 0xc0000000, 0x9, 0xf035, 0x5aa8, 0x1, 0x7, 0x3, 0x3, 0x5, 0x5, 0x2, 0x20, 0x101, 0x6, 0xb, 0x5fa5, 0x8, 0x5, 0xfffffffd, 0x7fffffff, 0x4, 0x5, 0x8, 0x1000, 0x3, 0xd, 0x3, 0x9, 0x2, 0x9a5, 0x8, 0x8, 0xff, 0x7, 0x4, 0x7fffffff, 0x4b8, 0x3, 0x5, 0x2, 0x4, 0x6, 0x40, 0x1, 0xe07, 0x8, 0x340, 0x3, 0x5, 0x1, 0x7, 0xfb3f, 0x100000, 0x3, 0x9, 0x4, 0xa, 0x100, 0x1a, 0xfffffffa, 0x7, 0x39, 0x7ff, 0xe, 0x835, 0x7, 0x1, 0x2b, 0x2, 0x1d1c, 0x10, 0x6, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x5, 0x2, 0x4, 0xffffff00, 0xee5b, 0x1, 0x1, 0x0, 0x8, 0xfffffffc, 0x29f0, 0x6, 0x8, 0x7, 0x769, 0x0, 0x4, 0xe6f, 0x3, 0xf2a, 0x6, 0x93ad, 0x5, 0x9, 0x400, 0x8000, 0x7, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x1, 0xf4, 0x100, 0x7, 0x1, 0x400, 0x401, 0x4, 0x3, 0xb, 0x7, 0x10, 0x2, 0x2, 0x7f, 0x5, 0x7f, 0x54bf, 0x10, 0xd, 0x8, 0xff, 0x73a3, 0xdc, 0x3, 0x9, 0x3, 0x3b, 0x400000, 0x4, 0x2, 0xfaea, 0x3, 0x80000001, 0x6, 0x7, 0x4, 0x4b, 0x8, 0x6, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xb, 0x9, 0x7fffffff, 0x80, 0x0, 0x1, 0x2, 0x9, 0x5b40000, 0x32bb, 0x200, 0x8, 0xffffffff, 0xf3d, 0x8a, 0x4, 0x3, 0x5, 0x5, 0x81, 0x5, 0xef, 0x6, 0x6, 0xac, 0x7, 0x4, 0x64, 0x6, 0x9, 0x8, 0x3, 0x300000, 0x3, 0x0, 0x4a1, 0xcd9, 0x3e77, 0x854, 0xee8, 0x3, 0x7fffffff, 0x400, 0x5, 0x3, 0x4, 0x2, 0x2, 0x81c, 0x3ff, 0x800, 0xe7d, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x400, 0xfffffffe, 0xffffffff, 0x800, 0x41c, 0x9, 0xfffffffc, 0x800009, 0x1bcb, 0x9, 0x4, 0x2, 0xf4a, 0x8, 0x1ff, 0x3, 0x401, 0x3, 0x9, 0x7, 0x2b4, 0x91, 0x7, 0x8c, 0x1, 0xffffffff, 0x2, 0xb, 0x9, 0x7, 0x3, 0x0, 0x9, 0xb, 0x3, 0x1f, 0x8, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8, 0xd3, 0x5, 0xf, 0x3, 0x8, 0x7, 0x3, 0x7ff, 0x104, 0x6, 0x5, 0x2, 0x7, 0x8, 0x6ee5, 0xfffffffb, 0x401, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5, 0xc0000000, 0x1, 0x2, 0x76ac8333, 0xe, 0xff, 0x3ff, 0x66680, 0x7ff, 0x9, 0x9, 0x2, 0x230c, 0x2, 0x51c4ea0d, 0xbd, 0x9c, 0xd, 0x401, 0x0, 0x0, 0x3, 0xe6, 0x2, 0x4], 0x2, 0x400, 0x38}) 58.155212553s ago: executing program 33 (id=1188): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000f00)=[0x2, 0xe0, 0x20400000, 0xff, 0x7, 0x2, 0x9, 0x5, 0x80, 0x4, 0x2, 0x0, 0x5, 0x3a4d, 0x2800, 0x486, 0x5, 0x5a, 0x7, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0xfff, 0x9, 0xffff0001, 0x3, 0x4, 0xb9b2, 0x441, 0x6, 0x3, 0x7, 0x8, 0xfffffff8, 0x0, 0xfffffffe, 0x9, 0x8, 0x3, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0x1000, 0x7, 0x1, 0x5, 0x1, 0xf91, 0x0, 0x9, 0x9, 0x7, 0xb, 0x7, 0x7, 0x8000, 0xb80, 0x4, 0x9f, 0x1, 0x5, 0xc41, 0x8, 0x2, 0x1ff, 0x5, 0x7, 0xff76, 0x4, 0xf, 0x6, 0x7, 0x8, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x3, 0x47, 0x7, 0x8, 0x101, 0xfffff046, 0x9, 0x400, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x7, 0x36, 0x157, 0x7d1, 0x8b96, 0xf, 0x20005, 0x0, 0x7, 0x6, 0x2, 0x8, 0x925, 0x4, 0x9, 0x7, 0xb, 0x5a17cff6, 0x0, 0xb6, 0x2, 0x3, 0x2, 0x7f, 0xffffff7f, 0x7, 0x10000, 0x3, 0x1c2a, 0x3ff, 0x0, 0x10, 0x7f, 0x6, 0x3, 0x14, 0x80, 0x7, 0x4, 0x2, 0x0, 0x2f6, 0x5, 0x9, 0xa7, 0x0, 0x9, 0xc, 0x40, 0x8000006, 0x200, 0x1, 0x2, 0x1, 0x401, 0xaa0, 0x2, 0x6, 0x9, 0x400, 0xe, 0x0, 0xfffeffff, 0x5, 0x7fffffff, 0x7ff6, 0x3, 0x1, 0x4, 0x7, 0x400, 0x0, 0x6, 0x6, 0x101, 0x2, 0x5, 0xfffffff8, 0x3, 0x7fff, 0x6d, 0x7, 0x1, 0x8, 0x6, 0x10001, 0x0, 0xffffffff, 0x8, 0xd, 0x2, 0x200, 0x7bd, 0xa2, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4ec, 0x3, 0x401, 0x5, 0xb, 0x1, 0x948, 0x7, 0x8001, 0xff, 0x200, 0xb67, 0x6, 0x5b, 0x2, 0x1, 0x8, 0x6, 0x2, 0x2, 0x1, 0x10, 0x7f, 0xa07, 0xc0bf, 0x40, 0xa4f, 0x8, 0x8001, 0x8, 0x6, 0x10000, 0x1000, 0x8, 0x1, 0x6, 0xab5, 0x4, 0x9da, 0x800000, 0x7, 0x4, 0xf8, 0x7, 0x7fffffff, 0xfffeffff, 0x401, 0x1, 0x101, 0x2, 0x3, 0xe, 0x6, 0x9, 0x401, 0x7, 0x0, 0x7, 0xfffffffc, 0x5, 0x4, 0x8, 0x3f39, 0xbaa, 0x2, 0x6, 0xcb7, 0x4, 0x8, 0x7f, 0x53b, 0xc, 0x1, 0x2, 0x8, 0xc, 0xfffffff8, 0x0, 0x2, 0x3, 0x5, 0x3, 0x400, 0x6b, 0x7ae, 0x1, 0x6f0, 0xffff, 0x7, 0x9, 0x4, 0xfff, 0x2, 0x7f, 0x3, 0x6, 0x544040be, 0x2, 0xc, 0x8, 0x9, 0x8, 0x7, 0x10001, 0xff, 0x7, 0x10000, 0x2, 0x818, 0x4, 0x3, 0x5af, 0x2, 0x5, 0x7, 0x2, 0xd, 0x2, 0x8d, 0xb8c5, 0xfffffffe, 0x202, 0x3, 0x2, 0xa0, 0x9, 0x7, 0x1, 0x4000000, 0xffffffff, 0x4, 0x40, 0x0, 0x1, 0x7, 0x6, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8, 0x1, 0x5, 0x3, 0x9, 0xb1, 0x5, 0x7, 0xe, 0x9, 0x100, 0x3, 0x5, 0x6, 0x7, 0x2, 0x3, 0xec, 0x5, 0x7, 0xff, 0x5, 0x0, 0x9cf, 0xaef8, 0xffff, 0x5, 0x1, 0x5, 0xc, 0x18a, 0xc, 0x0, 0x0, 0x6, 0x7, 0x4, 0xf2ed, 0x6, 0x4, 0x1, 0x7, 0x5, 0x8, 0x10000, 0xb, 0x9, 0xec852fda, 0x2, 0x9, 0x2, 0x3620, 0x9, 0x3, 0x3, 0x7, 0x74, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x21000000, 0x4, 0x5, 0x9, 0x356d28dc, 0x8, 0x999, 0x6, 0x24, 0x6, 0x3, 0x2772, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x101, 0x9cf, 0x10001, 0xd1, 0x0, 0x5, 0x3, 0x6, 0x40004, 0x80000001, 0x2, 0x5, 0x9, 0xe, 0xfff, 0x7, 0x10000, 0xffff, 0x7, 0x9, 0xfffffff7, 0x6, 0xa8, 0x9, 0x7ff, 0xd8a, 0x5, 0x929, 0x0, 0x8, 0xfffffffe, 0x40, 0x4, 0x2, 0x6, 0x1, 0x7, 0x7, 0x7fffffff, 0x33, 0x5, 0xa7, 0x7d8e, 0x2, 0x5, 0x4, 0x5, 0x3, 0x4, 0x1, 0x5, 0x96, 0x80, 0x8000, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x5, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x9, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x6, 0x4, 0x5, 0x40, 0x800, 0xfffffffb, 0x5, 0x0, 0x0, 0x80, 0x6, 0x10, 0x0, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x81, 0x1, 0x0, 0x6, 0x2, 0x7, 0xff, 0x7fff, 0x7, 0x0, 0x3, 0x1, 0x3, 0xb, 0x3, 0x6c, 0xffffffff, 0x8, 0x1ff, 0x10, 0xf, 0x81, 0x292e, 0x2ac9, 0x9, 0xb42, 0x7, 0xd015, 0x3, 0xff, 0x8001, 0x6, 0x0, 0xe, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x5, 0x80000000, 0x6, 0xfffffffb, 0x8, 0x6, 0x3, 0xd, 0x8001, 0x100, 0xffffffa1, 0xb, 0x1, 0x25fa, 0xd4, 0x2, 0xffffffd6, 0x976, 0x7, 0x4, 0x0, 0x5, 0xff, 0x3, 0xe6, 0x74c, 0x4, 0x7, 0xb0a, 0x6, 0x862d, 0x40, 0xffffffff, 0x5, 0x5, 0xd8c, 0x9, 0x7fffffff, 0x7, 0xe11, 0x4, 0x8, 0x1ff, 0x6, 0x10, 0x8001, 0x0, 0x8, 0xffffffff, 0x40, 0xe8, 0xb, 0x2, 0x9, 0x8, 0x5, 0x5, 0x80000001, 0xe, 0x4, 0x9, 0xb, 0x1, 0x3, 0x9, 0x9, 0xa0000000, 0xc390, 0x4, 0x791, 0xfff, 0x4, 0x54f, 0x4, 0x4, 0x80, 0x6, 0xfffffe00, 0xb, 0x5, 0x4, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0x5, 0x6, 0x6, 0x4, 0x8, 0x0, 0x6f616b2e, 0x8, 0x101, 0x1ff, 0x2, 0x0, 0x4, 0xa25, 0x7, 0x8001, 0x9, 0xdd4, 0x4, 0x9, 0x7ff, 0x9, 0xffffffff, 0x80, 0x1, 0x4, 0x7, 0xfffffff7, 0x8, 0x2f69, 0x1, 0x7, 0x766b, 0x8, 0x1, 0xb, 0x8, 0xffffce7d, 0x6, 0x2, 0xffff349c, 0x9c1, 0x2, 0x1, 0x1, 0x2, 0x52, 0x9, 0x10000, 0x5, 0x4, 0x35, 0x9, 0x9088, 0xfff, 0x8, 0xb, 0x8000, 0x7, 0x80000001, 0x8, 0x800, 0x6, 0x5, 0x6, 0xd1, 0x8, 0x8000, 0x3, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x7fff, 0xff, 0x607, 0x6, 0x3, 0x4, 0x7, 0x8, 0xc0000000, 0x9, 0xf035, 0x5aa8, 0x1, 0x7, 0x3, 0x3, 0x5, 0x5, 0x2, 0x20, 0x101, 0x6, 0xb, 0x5fa5, 0x8, 0x5, 0xfffffffd, 0x7fffffff, 0x4, 0x5, 0x8, 0x1000, 0x3, 0xd, 0x3, 0x9, 0x2, 0x9a5, 0x8, 0x8, 0xff, 0x7, 0x4, 0x7fffffff, 0x4b8, 0x3, 0x5, 0x2, 0x4, 0x6, 0x40, 0x1, 0xe07, 0x8, 0x340, 0x3, 0x5, 0x1, 0x7, 0xfb3f, 0x100000, 0x3, 0x9, 0x4, 0xa, 0x100, 0x1a, 0xfffffffa, 0x7, 0x39, 0x7ff, 0xe, 0x835, 0x7, 0x1, 0x2b, 0x2, 0x1d1c, 0x10, 0x6, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x5, 0x2, 0x4, 0xffffff00, 0xee5b, 0x1, 0x1, 0x0, 0x8, 0xfffffffc, 0x29f0, 0x6, 0x8, 0x7, 0x769, 0x0, 0x4, 0xe6f, 0x3, 0xf2a, 0x6, 0x93ad, 0x5, 0x9, 0x400, 0x8000, 0x7, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x1, 0xf4, 0x100, 0x7, 0x1, 0x400, 0x401, 0x4, 0x3, 0xb, 0x7, 0x10, 0x2, 0x2, 0x7f, 0x5, 0x7f, 0x54bf, 0x10, 0xd, 0x8, 0xff, 0x73a3, 0xdc, 0x3, 0x9, 0x3, 0x3b, 0x400000, 0x4, 0x2, 0xfaea, 0x3, 0x80000001, 0x6, 0x7, 0x4, 0x4b, 0x8, 0x6, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xb, 0x9, 0x7fffffff, 0x80, 0x0, 0x1, 0x2, 0x9, 0x5b40000, 0x32bb, 0x200, 0x8, 0xffffffff, 0xf3d, 0x8a, 0x4, 0x3, 0x5, 0x5, 0x81, 0x5, 0xef, 0x6, 0x6, 0xac, 0x7, 0x4, 0x64, 0x6, 0x9, 0x8, 0x3, 0x300000, 0x3, 0x0, 0x4a1, 0xcd9, 0x3e77, 0x854, 0xee8, 0x3, 0x7fffffff, 0x400, 0x5, 0x3, 0x4, 0x2, 0x2, 0x81c, 0x3ff, 0x800, 0xe7d, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x400, 0xfffffffe, 0xffffffff, 0x800, 0x41c, 0x9, 0xfffffffc, 0x800009, 0x1bcb, 0x9, 0x4, 0x2, 0xf4a, 0x8, 0x1ff, 0x3, 0x401, 0x3, 0x9, 0x7, 0x2b4, 0x91, 0x7, 0x8c, 0x1, 0xffffffff, 0x2, 0xb, 0x9, 0x7, 0x3, 0x0, 0x9, 0xb, 0x3, 0x1f, 0x8, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8, 0xd3, 0x5, 0xf, 0x3, 0x8, 0x7, 0x3, 0x7ff, 0x104, 0x6, 0x5, 0x2, 0x7, 0x8, 0x6ee5, 0xfffffffb, 0x401, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5, 0xc0000000, 0x1, 0x2, 0x76ac8333, 0xe, 0xff, 0x3ff, 0x66680, 0x7ff, 0x9, 0x9, 0x2, 0x230c, 0x2, 0x51c4ea0d, 0xbd, 0x9c, 0xd, 0x401, 0x0, 0x0, 0x3, 0xe6, 0x2, 0x4], 0x2, 0x400, 0x38}) 6.03683986s ago: executing program 1 (id=1814): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000008080)={{}, {}, [], {}, [{0x8, 0x3}]}, 0x2c, 0x1) 4.501979368s ago: executing program 1 (id=1826): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@fat=@discard}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@shortname_mixed}, {@numtail}, {@rodir}, {@uni_xlateno}]}, 0x7c, 0x2cf, &(0x7f0000001400)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 4.000324791s ago: executing program 3 (id=1831): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x2f2, &(0x7f0000000400)="$eJzs3c1u00oYxvFnnKRNP9ST0/boSGdzUKESbCoKLBCbSChb9qwQ0KRSRVREWyRgQ0EsEReA2HILXAQbEDfADjZcQFcYzXicOKntJBA3/fj/pFrOeGb8DrbjeY1aC8CZdbPx9f3Vb/bHSCWVJN2QAklVqSzpH/1bfby9t7XXbjXzOiq5FvbHKGppog0z3Tob2620prada+HV7Key5pNlKEb4MwxDKXRLnFnu6k8RSNP+OnTbq0ccV1H2pf8nHcNYfR9cJXmAzYEO9EQLRYYEADj+/P0/8LeJeVdkFATSqr/tn6r7/8GkAxiva+1DRfnz+cT9383uQmOP719uUzffcymc3R7EWeIwwVT6Pk8pOrN6JphmUFbpYglmNrfKWtt4oWagl6p7iWrLbtmMTt3YgGhX4tx0ONm9VXRrNhqNm1H2i0Pa3Gq3pu1KSvxLo+3xz5mP5rO5Y2p6q2Zn/lcOjab0Lq7Tc6SCio3/cnaPc3ZRs7Xk0/56vR70VPnb7eQ/fy54A0ZZTc9Ikn3GDwj2OxHkxen2vajexwrR6NYHtFpKa1XrfMpotdzTquTPhLWNh+3cRynFiIdo3pjbZkU/9EGNxPw/sPGtKnFl5n3VG1fTnxnReKbSa3b+bfq6614u5/prTo80LnijPS17rfu6roXdp88elNrt1o5duZey8mh+x/iSyisptU7xKyXl1NF+tyS0nofhsD2HRQZ/aawd2u+PTom9fNIq26usUxIc9WHyK/E5Npm9j3MlYxSNT8o7IU/OShhKGZsK+IbCsbNr4oPuC2YmHBCOmp13mSj/czN5P6tzKZJd1HLm6QP/0yjR43ong+udCi665exIGdxcdgaX2OOVjJzR5VznL0oXEoVGuXus+ThPCdPQF93l+T8AAAAAAAAAAAAAAAAAAMBJM8ZfJ4h/k/HQpgkPEQAAAAAAAAAAAAAAAAAAAACAE++33v+b9jfi3ft/aynv/00Y3/t/898MBGAovwIAAP//n7F2ZA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ftruncate(r0, 0x8) 3.62841814s ago: executing program 1 (id=1833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getpeername(r0, 0x0, 0x0) 3.500443693s ago: executing program 1 (id=1835): r0 = inotify_init() r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x8, @empty, 0x8}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.488565844s ago: executing program 3 (id=1836): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x180) semop(r1, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0xa7dd, 0x3000}], 0x2) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1, 0xfffff800, 0x800) 3.380327926s ago: executing program 1 (id=1839): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000240)=0x32) dup3(r0, r1, 0x80000) 3.228178319s ago: executing program 1 (id=1841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 2.453165929s ago: executing program 3 (id=1846): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 2.270893384s ago: executing program 5 (id=1849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv', 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 2.092645878s ago: executing program 5 (id=1851): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x1, r1}]) 1.891062653s ago: executing program 5 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505000000004"], 0x4c}}, 0x0) 1.750482996s ago: executing program 6 (id=1856): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x80800}, &(0x7f00000004c0)=0x8) 1.731823907s ago: executing program 5 (id=1857): syz_mount_image$jfs(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c646973636172643d3078303030303030303030303030303030342c696f636861727365743d69736f383835392d392c646973636172642c696f636861727365743d6d6163726f6d616e2c6572726f72733d72656d6f756e742d726f2c71756f74612c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c75737271756f74612c006ff298bdf09f85ee9642cda8"], 0x24, 0x62d7, &(0x7f0000021240)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') unlink(&(0x7f0000000280)='./file1\x00') 1.703111048s ago: executing program 4 (id=1858): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000006800a1012dbd7000fcdbdf2502000700000000000800010002020000040009"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.683261148s ago: executing program 6 (id=1859): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0123:abcd:a,4567:ef01:o', 0x17) 1.61342536s ago: executing program 6 (id=1860): r0 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.413139335s ago: executing program 6 (id=1861): syz_mount_image$jfs(&(0x7f0000000a00), &(0x7f0000000080)='./bus\x00', 0xc001, &(0x7f0000001900)=ANY=[@ANYBLOB='discard=0x0000000000000004,usrquota,iocharset=ascii,errors=remount-ro,nointegrity,noquota,nodiscard\x00noquota,nointegresize,discard=0x000000000000043a,iocharset=macromanian,nointegridiscard,dont_appraise,defcontext=sysadm_u,subj_type={[,smackfsdef=nointeerity,func=CREDS_CLECK,audit,fowne2=\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61f7, &(0x7f0000002240)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT28ySzk92uU8c7a8/nIzkzv3lmvc/4u7Mv2Zl5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER6cjdnY318vFFw/Yj+/+8e+/++Gpt/72h8H5//7pTu+1Sevdvfur//z53uG2GQAAANqmKIqikz7mn0mf77tNdwoAmIn8+l8kefmJr3/9z7f+Mk/9UavVarV6BnVVMd69ahERW9XblO8ZfB0PAMfMVnzcdBdokPxbrR8Rp5ruBDDXOk13gCOxs7u53kn5dqqvB6v77flYkJH8tzoPzu+YNJ2mfozJrB5f29GLZyb0Z2lGfZgnOf9uPf9r++3DtN5R5z8rk/If7p/61Do5/149/5qTk393bP5tlfPvP1b+PfkDAAAAAMAcy///v9Lw978Lh9+UA/mk739XZ9QHAAAAAAAAAHjSDjv+3wPG/wMAAIC5VX5WL/3m9MNlk67FVi6/2ol4qrY+0DLpZJnlpvsBAAAAAAAAAAAAAG3S3z+G92onYhARTy0vF0VR/lTV68d12Nsfd23ffmizpp/kAQBg30ena+fydyIWI+JqutbfYHl5uSgWl5aL5WJpIb+fHS4sFkuVz7V5Wi5bGB7gDXF/WJS/bLFyu6ppn5entdd/X3lfw6J3gI49IYP015zQ3FDYAJDsvxrteEU6YYri6UlvPmCE/f8EWomVph9XzL+mH6YAAADA0SuKouiky3mfSd/5d5vuFAAwE/n1v/69wKHq7oT2iCfz+9VqtVqtVn+quqoY7161iIit6m3K9wyG4weAY2YrPm66CzRI/q3Wj4jnmu4EMNc6TXeAI7Gzu7neSfl2qq8HaXz3fCzISP5bnb3b5duPm05TP8ZkVo+v7ejFMxP68+yM+jBPcv7dev7X9tuHab2jzn9WJuU/3Dtlrn1y/r16/jUnJ//u2PzbKufff6z8e/IHAAAAAIA5lv//f8X3v3mTAQAAAAAAAODY2dndXM/nvebv/z83Zj3nf55MOf/O4+a/lOblf6zl/Lu1/L9cW69Xmb//5sP9/9+7m+u/v/Ovz+bpQfNfyDOd9MjqpEdEJ91Tp5+mh9m6R20PesPyngadbq+fjvkpBu/EjbgZG3FhZN1u+ns8bF8baS97OhhpvzjS3n+k/dJI+yBdd6BYyu3nYj1+Ejfj7b32sm1hyvYvTmkvprTn/Hue/1sp59+v/JT5L6f2Tm1auv9h95H9vjoddz9v3Pj8Ly8c/eZMtR29B9tWVW7f2Qb6s/c3OTWMn93euHXu7vU7d26tRZqMLL0YafKE5fwHez8LD5//X9hvz8/71f31/ofDx85/XmxHf2L+L1Tmy+19acZ9a0LOf5h+cv5vp/bx+/9xzn/y/v9yA/0BAAAAAAAAAAAAAACAT1IUxd4pom9ExOV0/k9T52YCALOVX/+LJC9Xq9VqtVp98uqqYrzXq0VE/LV6m/I9wy/G/TIAYJ79LyL+0XQnaIz8Wyxf76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq4cd/7OfZx4MMPqEB/qeYLs77HUrw40/H3vjc5+bNP732Xh0/O88Jm6vuh0TDKa0D6e0L0xpX3xkyegVHMae6FGR83++Mt55mf+Z2vDrbRj/tT7mfRvk/M9WHs9l/l+qrVfNv/jt3OW/ddAVt6M7kv/5O+/99Pzt9z945cZ719/deHfjx5fW1i5cunz5ypUr59+5cXPjwv6/R9PrOZDzz2NfOw60XXL+OXP5t0vO/wupln+75Py/mGr5t0vOP7/fk3+75PzzZx/5t0vO/6VUy79dcv5fSbX822Vnd3OhzP/lVMu/XfL+/9VUy79dcv6vpFr+7ZLzP5dq+bdLzv98qg+Qv8vDnyA5//wNl/2/XXL+a6mWf7vk/C+mWv7tkvO/lGr5t0vO/9VUy79dcv5fS7X82yXnfznV8m+XnP/XU33A/Kcd9swxkfO/kmr7f7vk/L+Ravm3S87/m6mWf7vk/F9LtfzbJef/rVTLv11y/t9OtfzbJef/nVTLv11y/q+nWv7t8vD6/2bMmDGTZ5p+ZgIAAAAAAAAAAAAA6mZxOHHT2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/J8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOuv7gZ/Zm9cOIQZCcPI3ZJOYEJwlu77EF/51MSFcGqAUSAL0gu1612bBN7x2CRTJpoESCaOiior0RVtAqI1UVVgVLyiiNC+qXl6V9gV9U1FVQmpUGRRQkdqKZquZ8zyPZ2Zn5+x6x+uz53w+kv3bnTlnzjNnnnN2fmt/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7q43zX62kWVZ80/rr81Z9qLm1xsnNrdue/2NHiEAAACwWv/b+vv5W9INB5exUtsyf/uqf/jGwsLCQvb+4d8b/eLCQrpjIstGN2RZ677o8r99oNG+TPBkNt4Yavt+qGDzwwX3jxTcP1pw/1jB/RsK7h8vuH/RDlhkY/77mNaDbWt9uTnfpdmt2Wjrvm091nqysWFoKP4up6XRWmdh9Fg2l53IZrPpjuXzZRut5b99V3Nbb8vitobatrW1OUN+/MmjcQyNsI+3dWzr6mNGP3xjNvGTH3/y6B+fu3J7r1q4GzoeLx/nfXc3x/npcEs+1ka2Ie2TOM6htnFu7fGaDHeMs9Far/l19zifX+Y4h68Oc011v+bj2VDr6++29tNI+6/10n7aGm77r3uyLLt4ddjdyyzaVjaUbeq4Zejq6zOez8jmYzSn0kuzkRXN07uWMU+bdWZb5zztPibi639XWG9kiTG0v0w//NTYotd9pfM0aj7rpY6V7jk46GOlLHMwzovvtp70Uz3n4Lbw/D9579JzsOfc6TEH0/Num4N3F83BobHh1pjTi9BorXN1Du7oWH64taVGqz53b/85OHXu5Jmp+Y9/4nVzJ48cnz0+e2rXjh3Tu/bs2bdv39SxuROz0/nf17i3y29TNpSOgbvDvovHwGu6lm2fqgtfGdxxON7nONzcteygj8OR7ifXWJsDcvGczo+NR5s7ffzSULbEMdZ6fbav/jjs9bNgpO047PkzpcdxOLKM47C5zJnty3vPMtL2p9cYrtfPgs1tc7D7/Uj3HBz0+5GyzMHm+5HmWP5l+9I/C7aG8T41udL3I8OL5mB6uuHc07wlvd8f39cqveblHc07bhrLzs/Pnn3giSPnzp3dkYWyJl7WNle65+umtueULZqvQyuerwfnXvXUHT1u3xz21fjrmn+NL/laNZfZ/UD/16r10633/uy4dWcWyoCt9f7s9dO8uT9TL9lnfzaX+fTU6t+Lp7607fw7usT5N/b9L+TbSw/15PDoSH78Dqe9M9pxPu58qUZa565Ga9vPTy3vfDwa/qz1+fjWPufjLV3LDvp8PNr95OL5uFH0247V6X49x8M8OTHd/3zcXGbLzpXOyZG+5+N7Qm2E/f/a8K4h9UVtc2epeZu2NTIyGp7XSNxC5zzd1bH8aOjNmtt6Zue1zdP77skfazg9u6vWap5OdC076HmazldLzdNG0W/frk336zke5sWtu/rP0+Yyz+5e/blzY/yy7dw5VjQHR4fHmmMeTZMwP98vbIxz8IHsaHY6O5HNtO4da82nRmtbkw8ubw6OhT9rfa7c0mcO3te17KDnYPo5ttTca4wsfvID0P16jod58fSD/edgc5mH9w72vet94Za0TNt71+7fry31O687unbT9fydV3Ocf723/+9mm8uc2LfSPrP/fro/3HJTj/3UffwudUzNZGuzn7aEcV7Zt/R+ao6nucwX9y9zPh3MsuzCRx9q/b43/PvKn5//3jc6/t2l17/pXPjoQz+6+djfrGT8AKx/L+RlU/6zru1fppbz7/8AAADAuhD7/qFQE/0/AAAAVEbs++P/Ck/0/wAAAFAZse8fCTWpSf+/5eErcy9cyFIyfyGI96fd8Ei+XMy4TofvJxauat7+0Ndmf/qtC8vb9lCWZT975Dd7Lr/lkTiu3EQY5+U3d96+eMULy9r+4ceuLteeX/9yePz4fJY7DXpFcKezLPv2LZ9vbWfiA5da9dlHDrfqey4+9WRzmef359/H9Z97Wb78H4Tw78FjRzrWfy7shx+EOv323vsjrvf1S6/duvfxq9uL6zXufnHraT/9wfxx4+fkfOHJfPm4n5ca/19+7pmvN5d/4tW9x39hqPf4nwmP+7VQ//uV+fLtr0Hz+7jeZ8L44/bieg989Ts9x3/5s/nyZ96SL3c41Lj9+8L3295yZa59fz3RONLxvLK35svF7U9/73da98fHi4/fPf7xQ5c69kf3/Hj2n/LHmepaPt4etxP9Rdf2m4/TPj/j9p/57cMd+7lo+5ff89wrm4/bvf37u5Yb7lq/+xOb/vAzn++5vTieg392puP5HHx3OI7D9p/+YJiP4f7/ufz5ju1Gh9/def6Jy39584WO5xO97Sf59i+/4Xir/vvET3//phfd/OKLdzb3XZZ997354xVt//gfne4Y/1du2956PeL9MaPfvf2lxO2f/djkqdPz5+dm2vZq67Nz3pGPZ8P4xk3N8d4Szq3d3x86fe5Ds2cnpiems2yiuh+hd82+GuqP8nJxpetvfyy8nnd86dub7v3Hz8Xb//nR/PZLb89/br0mLPeFcPvm/PVbaKxy+0/fdVvr+G48m3/fkWMfgK3b/mPfshYMz7/7fUGc72de/qHWfmje1/q5EY/rVY7/+zP543wz7NeF8MnMd992dXvty8fPRrj03vx4X/X+C6e5+Lr+SXi93/mD/PHjuOLz/X54H/OdLZ3nuzg/vnlhqPvxW5/icTGcT7KL+f1xqbi/Lz1/W8/hxc8hyS7e3vr+d9Pj3L6ip7mU+Y/PT52YO3X+ialzs/PnpuY//olDJ0+fP3XuUOuzPA99uGj9q+enTa3z08zsnt3Z9MYsy05n02twwro+429+tbzxn3ns6Mze6XtnZo8dOX/s3GNnZs8ePzo/f3R2Zv7eI8eOzX6saP25mQM7du7ftXfn5PG5mQP79u/ftX9y7tTp5jDyQRXYM/2RyVNnD7VWmT+we/+OBx/cPT158vTM7IG909OT54vWb/1smmyu/RuTZ2dPHDk3d3J2cn7uE7MHduzfs2dn4acBnjxzbH5i6uz5U1Pn52fPTuXPZeJc6+bmz76i9amm+X/N3892a+QfxJe96/496fNZm772qSUfKl+k6wNEr4TPovn7l5zZt5zvY98/GmpSk/4fAAAA6iD2/WOhJvp/AAAAqIzY928INdH/AwAAQGXEvn881KQm/b/8v/z/8vL/+f3y//XK/5/5aJ4rXe/5/5ifl/+vhxuc/1/19geQ/7+z353y/wXk/29ofn5Vhm78+OX/5f9ZrGz5/9j3b8yyWvb/AAAAUAex798UaqL/BwAAgMqIff9NoSb6fwAAAKiM2Pe/KNSkJv2//P+y8v87iwJX1c//u/6//H+2PvP/8cWR/6+NFefvH3+049sK5P/7kv8vIP+/fvP/JRi//L/8P91Gl7znRuX/Y99/c6hJTfp/AAAAqIPY97841ET/DwAAAJUR+/5bQk30/wAAAFAZse/fHGpSk/5f/t/1/+X/5f8rnf9f7fX/2wYj/78+uP5/f/L/Ba45/z8u/78e8/+jgx1/ufP/hcOX/+e6KNv1/2Pf/5JQk5r0/wAAAFAHse9/aaiJ/h8AAAAqI/b9Lws10f8DAABAZcS+/9ZQk5r0//L/8v/y//L/8v+9t198/f/8K/n/cpH/70/+v4Dr/9cr/z/g8Zc7/z/o6/+Pvrl7ffl/eilb/j/2/S8PNalJ/w8AAAB1EPv+20JN9P8AAABQGbHvf0Woif4fAAAAKiP2/VtCTWrS/8v/y//L/8v/y//33n5x/j8n/18u8v/9yf8XkP+X/5f/X17+v8ebX/l/eilb/j/2/beHmtSk/wcAAIA6iH3/HaEm+n8AAACojNj3/79QE/0/AAAAVEbs+7eGmtSk/9/y8JXHv9T6Sv4/k/+X/69B/v/+Mfl/+f9qk//vT/6/gPy//L/8/zKv/7/YSvL/G4oejMooW/4/9v2vDDWpSf8PAAAAdRD7/leFmuj/AQAAoDJi339nqIn+HwAAACoj9v0ToSbrr/9/39A1rOT6/9XK///pXz19Zyb/L/9fsP2K5v/jNJD/rzn5//7k/wvI/8v/y/+vSf6f+ihb/j/2/XeFmqy//h8AAABYQuz77w410f8DAABAZcS+/55QE/0/AAAAVEbs+7eFmtSk/5f/r1b+P5L/l//vt/2K5v8T+f96k//voe0gXSf5/wn5f/n/9Tj+65n/H1/G8x9M/j+++5X/ZzDKlv+Pff+rQ01q0v8DAABAHcS+/95QE/0/AAAAVEbs+18TaqL/BwAAgMqIff99oSY16f/l/+X/5f/l/+X/e29f/n99kv/vb6X5/zHX/5f/l/8vRf7f9f9Zr8qW/499/2tDTWrS/wMAAEAdxL5/e6iJ/h8AAAAqI/7/zfz/ver/AQAAoIpi3z8ZalKT/n8V+f+FYfn/RP6/c/xlzf835P/l/+X/K0/+v791cv1/+f8S5f+bt8v/y//L/3Otypb/j33/60JNatL/AwAAQB3Evv+BUBP9PwAAAFRG7PunQk30/wAAAFAZse+fDjWpSf/v+v+1y/9vqHP+3/X/l5X/vynLMvl/+f91S/6/P/n/AvL/rv9ftfx/lsn/c0OVLf8f+/4doSY16f8BAACgDmLfvzPURP8PAAAAlRH7/l2hJvp/AAAAqIzY9+8ONalJ/y//X7v8f62v/y//7/r/8v/VJ//fn/x/Afl/+f+q5f9d/58brGz5/9j3PxhqUpP+HwAAAOog9v17Qk30/wAAAFAZse/fG2oS+v9e/68bAAAAWF9i378v1KQm//4v/1+R/P9v/V3HtuX/5f/7bX8w+f+N8v+hyv+XS0Xz/92HxTWT/y8g/y//L/8v/89AlS3/H/v+/aEmNen/AQAAoA5i3//6UBP9PwAAAFRG7Pv/f6iJ/h8AAAAqI/b9PxdqUpP+X/6/Ivn/LvL/8v/9tu/6//L/VVbR/P/AVCr/PyT/L/9frvHL/8v/s9j1z//Hr5aX/499/4FQk5r0/wAAAFAHse//+VAT/T8AAABURuz73xBqov8HAACAyoh9/8FQk5r0//L/8v/y//L/1yf//4asWxnz/83JI/9fLfL//VUq/+/6//L/JRu//L/8P4uV7fr/se9/Y6hJTfp/AAAAqIPY9z8UaqL/BwAAgMqIff+bQk30/wAAAFAZse9/ONSkJv2//L/8v/y//L/r//fevvz/+iT/35/8fwH5f/l/+X/5fwaqbPn/2Pe/OdSkJv0/AAAA1EHs+98SaqL/BwAAgMqIff9bQ030/wAAAFAZse9/W6hJTfp/+X/5f/l/+X/5/97bl/9fn+T/+5P/LyD/L/8v/y//z0CVLf8f+/5fCDWpSf8PAAAAdRD7/kdCTfT/AAAAUBmx7397qIn+HwAAACoj9v3vCDWpSf8v/y//L/8v/y//33v78v/rk/x/f/L/BeT/5f/l/+X/Gaiy5f9j3//OUJOa9P8AAABQB7Hv/8VQE/0/AAAAVEbs+98VaqL/BwAAgMqIff8vhZrUpP+X/5f/L1f+f+FC+3ry//L/2aDy/82V5P9rQf6/P/n/Aj3y/xvk/+X/5f/l/7lmZcv/x77/3aEmNen/AQAAoA5i3/+eUBP9PwAAAFRG7PvfG2qi/wcAAIDKiH3/o6EmNen/5f9LkP/P1jz/n55y+fL/WfatC2NZlsn/Z/L/iev/y/+vhPx/f/L/BVz/X/5f/l/+n4EqW/4/9v2PhZrUpP8HAACAOoh9/+OhJvp/AAAAqIzY978v1ET/DwAAAJUR+/73h5rUpP+X/y/O/3dnkXtx/f/O8a8u/1+l6/+PdMyPOuX/x9tezzQv5f/l/9eA/H9/8v8F5P9Dfj4bkv8vYf4/zOaNS6wv/08ZlS3/H/v+D4Sa1KT/BwAAgDqIff8vh5ro/wEAAKAyYt//K6Em+n8AAACojNj3/2qoSU36f/n/Elz/X/6/wvn/zvlRp/y/6/8vJv+/NuT/+5P/LyD/7/r/Zc7/F5D/p4zKlv+Pff+vhZos2fj96D+X8TQBAACAEol9/wdDTWry7/8AAABQB7HvPxRqov8HAACAyoh9/+FQk5r0/zcy/x+VK/8fr6gq/y//v+7y/yPy/zn5/3obXP7/FTdnmfy//L/8v/y//L/8P6tRtvx/7PuPhJrUpP8HAACAOoh9/6+Hmuj/AQAAoDJi33801ET/DwAAAJUR+/6ZUJOa9P+u/+/6/4PK//9M/v9G5/9d/z+Q/6831//vT/6/gPy//L/8v/w/A1W2/H/s+2dDTWrS/wMAAECFpV8Hx77/WKiJ/h8AAAAqI/b9x0NN9P8AAABQGbHv/1CoSU36f/l/+X/X/78R+f+RjuXl/3Py//L/gyD/35/8fwH5f/l/+X/5fwaqbPn/2PfPhZrUpP8HAACAOoh9/4dDTfT/AAAAUBmx7/9IqIn+HwAAACoj9v0nQk1q0v/L/8v/1z3/38iyi67/L//fa/vy/+uT/H9/8v8F5P/l/+X//4+9+3iy6yzzOH7HI0tqNvAHsGDNiiUsKLNhz5adq1ibaHKQTc5gMiabnHNOJuecsQGTczTJhipR7n6eR2rdq3Mk9VHfc97389k8I800fRtrZuqH6luv/p9Jza3/z91/RdzSyf4HAACAHuTuv2/cYv8DAABAM3L33y9usf8BAACgGbn77x+3dLL/9f/6/977/9VW3v/f/z+v/9+j/9f/T2Gtvz9yfl9/1v7/Lne98nL9v/5f/z9I/6//1/9zprn1/7n7HxC3dLL/AQAAoAe5+x8Yt9j/AAAA0Izc/Q+KW+x/AAAAaEbu/ivjlk72f8f9/42nf46k/9f/7/5Gz/3/9fp//f+yef9/mP5/hP5f/6//1/8zqbn1/7n7Hxy3dLL/AQAAoAe5+x8St9j/AAAA0Izc/Q+NW+x/AAAAaEbu/ofFLZ3s/477f+//6//LMvr/o97/P+Pn0f/r/zfR/w/T/4/Q/+v/9f/6fyY1t/4/d//D45ZO9j8AAAD0IHf/I+IW+x8AAACakbv/kXGL/Q8AAADNyN3/qLilk/2v/9f/6/+X0v8f0vv/+n/9/8Jdtzr1fxP0/+v0/yNG+v/VSv8/5Jz7+c0/3nI+/1no//X/rJtb/5+7/9Fxyz1Wq6MX+kMCAAAAs5K7/zFxSyd//w8AAAA9yN1/Im6x/wEAAKAZufuvils62f/6f/2//l//r//f/P31/8t0bv39sbN+vf4/nLX/v/MdrrhPv/2/9/+Hef9f/6//50xz6/9z918dt3Sy/wEAAKAHufsfG7fY/wAAANCM3P2Pi1vsfwAAAGhG7v7Hxy2d7H/9f2v9///v+7rT+v/d2kX/r//X/+v/W3fQ/l7/H7p+/3+nfqn/1//r//X/HMzc+v/c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v4nxS32PwAAADQjd/+T45ZO9r/+v7X+f//Xef9f/7/p++v/9f8t0/8P0/+PaOX9/wv8U7Ptfv6gtv359f/6f9bNrf/P3f+UuKWT/Q8AAAA9yN3/1LjF/gcAAIBm5O5/Wtxi/wMAAEAzcvc/PW7pZP/r//X/y+j/8zvo//X/F7//T/r/ZdL/D9P/j2il/79A2+7nl/759f/6f9bNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/y+j/vf+v//f+v/7/3Oj/h+n/R+j/9f/6f/0/k5pb/5+7/5q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/9f/6f/2//n/z99f/L5P+f5j+f4T+X/+v/9f/M6kZ9f+nfdXx1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3f+iuKWT/a//n03/v5vztdX/76xWqwvu/++p/192/79z2j/P+nOp/9f/HwL9/7Al9v8n9P9F/z/vz6//1/+zbkb9/+6vc/e/OG7pZP8DAABAD3L3Xxu32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v9dbfX/3v8/889HT/2/9//X6f8Ph/5/2BL7/5X+v+j/5/359f/6f9bNrf/P3f+yuOnopRf8IwIAAAAzk7v/5XFLJ3//DwAAAD3I3f+KuMX+BwAAgIW6Zu13cve/Mm7pZP/r/6ft/4+e9nv6f/3/mX8+9P/6f/3/xaf/H6b/H6H/1//r//X/TGpu/X/u/lfFLZ3sfwAAAOhB7v7r4hb7HwAAAJqRu//VcYv9DwAAAM3I3f+auKWT/a//9/6//l//r//f/P31/8uk/x+m/x+h/9f/b7f/P3bqv9T/04bz6P9Pnjx54qL3/7n7Xxu3dLL/AQAAoAe5+18Xt9j/AAAA0Izc/a+PW+x/AAAAaEbu/jfELZ3sf/3/xej/92rFWff/+Ud9Wf3/VauV/l//r//X/w/T/w/T/4/Q/+v/vf+v/2dSc3v/P3f/G+OWTvY/AAAA9CB3/5viFvsfAAAAmpG7/81xi/0PAAAAzcjd/5a4pZP9r//3/v+C+n/v/+v/9/08C+v/b13p/w/FIvr/nbN//7n3/1fr//X/A7rr/+91t32/1P/r/1k3t/4/d/9b45ZO9j8AAAD0IHf/2+IW+x8AAACakbv/7XGL/Q8AAADNyN3/jrjpSCf7X/+v/9f/6//1/5u//yG//390tVrp/yewiP5/wNz7f+//6/+HdNf/n0H/r/9n3dz6/9z974xbOtn/AAAA0IPc/e+KW+x/AAAAaEbu/nfHLfY/AAAANCN3/3vilk72v/5f/6//1/833/9fvYj+3/v/E9H/Dzmi/x+j/9f/6//1/xyKbfX/ufvfG7d0sv8BAACgB7n73xe32P8AAADQjNz9749b7H8AAABoRu7+D8Qtje//o3H1//r/8+n/83Pq/9vq/4/Nrv8/vu9fr5P3//X/E9H/D9P/j9D/6//1/9fo/5nS3N7/z93/wbil8f0PAAAAPcnd/6G49R/d2v8AAADQjNz9H45b7H8AAABoRu7+j8Qtnex//b/+3/v/+v/m3//X/3dF/z9M/z9iTv3/3W9Z+3j6/3l//kb6f+//M6m59f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCM3P0fj1vsfwAAAGhG7v7r45ZO9r/+X/+v/9f/6//3/hnq/9ug/x92OP3/jv7f+//Vz/9f/G+B/l//P/b1tGlu/X/u/k/ELZ3sfwAAAOhB7v5Pxi32PwAAADQjd/+n4hb7HwAAABbpyIbfy93/6bilk/2v/9f/6//1//r/zd9f/79M+v9h3v8/m9tde/qv9P/n2s/fad+vlvb+/5n//0v/r/9nenPr/3P3fyZu6WT/AwAAQA9y9382brH/AQAAoBm5+z8Xt9j/AAAA0Izc/Z+PWzrZ//p//X8z/f9tH0L/r//X/3dP/z9M/z/C+/9bfT9/6Z9f/6//Z93c+v/c/V+IWzrZ/wAAANCD3P1fjFvsfwAAAGhG7v4vxS32PwAAADRjd/dnXNbh/tf/b63/3/3X1/97/1//r//X/09L/z9M/z9C/6//1//r/5nU3Pr/L+9+1fHVV+KWTvY/AAAA9CB3/1fjFvsfAAAAmpG7/2txi/0PAAAAzcjd//W4pZP9r//3/v8y+v+TJ0+e0P/r//f/PKf6/5v0/xT9/zD9/wj9v/5f/6//Z1Jz6/9z938jbulk/wMAAEAPcvd/M26x/wEAAKAZufu/FbfY/wAAANCM3P3fjls62f/6/xn0/8f1/97/1/+vvP+v/5+I/n+znbj6/xEt9v/Hz/3H33Y/f1Db/vz6f/0/6+bW/+fu/07c0sn+BwAAgB7k7v9u3LK2/284xE8FAAAATCl3//fiFn//DwAAAM3I3f/9uKWT/a//P7z+/7Z/73p5/39ntfnz6//1//p//f/Fpv8fpv8f0WL/fx623c8v/fPr//X/rJtb/5+7/wdxy/7hd+n5/ZQAAADAnOTu/2Hc0snf/wMAAEAPcvffELfY/wAAANCM3P03xi2d7H/9/wze/2+w/z+c9/+P6//1/1P2/5fo/9ug/x+m/x+h/9f/6/8n6v/zT7P+v3dz6/9z9/8obulk/wMAAEAPcvf/OG6x/wEAAKAZuft/ErfY/wAAANCM3P03xS2n7f9NbXcr9P/6/+X2/97/1/97/1//v07/vzP43z3X/v/Y6mD9f9L/6//1/732/97/Z8/c+v/c/T+NW/z9PwAAACzOpWf5/dz9P4tb7H8AAABoRu7+n8ct9j8AAAA0I3f/L+KWmy/Z1kc6VPp//b/+X/+v/9/8/fX/y6T/H+b9/xH6/yn6+cv0/230/6uV/p+Dm1v/n7v/l3GLv/8HAACAZuTu/1XcYv8DAABAM3L3/zpusf8BAACgGbn7fxO3dLL/9f/6/wP2/7tppv5/j/5/j/5/M/3/4dD/D9P/j9D/e/9f/+/9fyY1t/4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2/tf4//q3W/2+3/7/E+/+79P/6/03fX/+/TPr/Yfr/Efp//b/+X//PpObW/+fu/2Pc0sn+BwAAgB7k7v9T3GL/AwAAQDNy9/85brH/AQAAoBm5+/8St3Sy/73/33f/P8H7/xP1/5ffMT+7/v/U1+n/9+j/9f/nQ/8/TP+/Wf2D0v/r//X/+n8mNbf+P3f/X+OWTvY/AAAA9CB3/9/iFvsfAAAAmpG7/+a4xf4HAACAZuTu/3vc0sn+1//r/+fR/5+i/z/1dfr/Pfp//f/50P8P22b/f+/bj3/bi97/Hxv5APr//Aj6f/2//p9JzK3/z93/j7ilk/0PAAAAPcjd/8+4xf4HAACAZuTu/1fcYv8DAABAM3L3/ztu6WT/j/T/pyo5/f8g/f/+z6//3/znQ/+v/9f/X3z6/2He/x+h//f+v/5f/8+k5tb/5+6/JW7pZP8DAABAD3L33xq32P8AAADQjNz9/4lb7H8AAABoRu7+/8Ytnex/7/8vqf+/TP/fQf9/VP+v/9f/H4j+f5j+f4T+X/+v/9f/M6m59f+5+/8XAAD//zhVUCE=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 1.348698007s ago: executing program 4 (id=1862): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) 1.231310649s ago: executing program 4 (id=1863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) 1.119310052s ago: executing program 4 (id=1864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 740.876641ms ago: executing program 3 (id=1865): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000060002004e240000080006000001000005000d0000000000080006"], 0x48}}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 685.323913ms ago: executing program 6 (id=1866): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 670.672323ms ago: executing program 4 (id=1876): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x4000) 669.886534ms ago: executing program 5 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @initial, @initial, {0x4, 0x6}, "", @value={0x0, 0x1, 0x3, 0x1, 0xff}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}}}]}, 0x54}}, 0x800) 648.605154ms ago: executing program 3 (id=1868): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000001040)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 153.569516ms ago: executing program 6 (id=1869): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x40) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) 153.487656ms ago: executing program 3 (id=1870): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40488d0) 153.422506ms ago: executing program 4 (id=1871): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0xe39}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x0, 0x6, r1, 0x0, 0xfe}]) 152.961056ms ago: executing program 5 (id=1872): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x2, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 0s ago: executing program 34 (id=1869): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x40) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): s: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.942146][ T7414] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 151.960311][ T7414] UDF-fs: Scanning with blocksize 512 failed [ 152.029270][ T7414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.051791][ T21] usb 6-1: USB disconnect, device number 5 [ 152.693062][ T7468] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 152.774832][ T7471] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.842095][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1132'. [ 153.112586][ T7443] JBD2: Ignoring recovery information on journal [ 153.189227][ T7443] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 153.359632][ T4231] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 153.374062][ T7443] (syz.1.1124,7443,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 153.389881][ T7443] (syz.1.1124,7443,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422755854968174 failed -12 [ 153.426655][ T7443] (syz.1.1124,7443,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 153.465486][ T7502] set_capacity_and_notify: 3 callbacks suppressed [ 153.465503][ T7502] loop3: detected capacity change from 0 to 512 [ 153.487769][ T7443] (syz.1.1124,7443,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 153.508729][ T7443] (syz.1.1124,7443,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 153.557114][ T7443] (syz.1.1124,7443,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 153.587319][ T7502] EXT4-fs (loop3): 1 truncate cleaned up [ 153.587348][ T7502] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 153.670798][ T4231] usb 6-1: Using ep0 maxpacket: 16 [ 153.694658][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 153.849938][ T4231] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.949857][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.975547][ T7525] bridge0: port 3(syz_tun) entered blocking state [ 153.999031][ T4231] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.019650][ T7525] bridge0: port 3(syz_tun) entered disabled state [ 154.038723][ T4231] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.074474][ T7525] device syz_tun entered promiscuous mode [ 154.118692][ T7525] bridge0: port 3(syz_tun) entered blocking state [ 154.125808][ T7525] bridge0: port 3(syz_tun) entered forwarding state [ 154.234862][ T7542] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 154.269908][ T4231] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 154.302243][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.324489][ T4231] usb 6-1: Product: syz [ 154.328894][ T4231] usb 6-1: Manufacturer: syz [ 154.334198][ T4231] usb 6-1: SerialNumber: syz [ 154.486095][ T7557] loop3: detected capacity change from 0 to 22 [ 154.521149][ T7557] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 154.594210][ T7557] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 154.632541][ T4231] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 154.661969][ T4231] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 154.725944][ T7565] loop1: detected capacity change from 0 to 8 [ 154.957574][ T7574] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 155.007554][ T7574] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 155.062423][ T4231] usb 6-1: 2:1 : can't get Cluster Descriptor [ 155.321602][ T5006] usb 6-1: USB disconnect, device number 6 [ 155.330564][ T5101] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 155.358049][ T7589] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 155.439510][ T2238] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.519302][ T7597] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1181'. [ 155.600307][ T7600] loop2: detected capacity change from 0 to 2048 [ 155.657962][ T7600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.735231][ T5101] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 155.749575][ T5101] usb 4-1: config 0 has no interface number 0 [ 155.755444][ T4195] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 155.763040][ T5101] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.775961][ T4195] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 155.909905][ T5101] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 155.919009][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 155.936019][ T5101] usb 4-1: Manufacturer: syz [ 155.942851][ T5101] usb 4-1: SerialNumber: syz [ 155.949304][ T7604] loop1: detected capacity change from 0 to 32768 [ 155.963659][ T5101] usb 4-1: config 0 descriptor?? [ 155.969780][ T2238] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 155.981979][ T2238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.996733][ T2238] usb 5-1: Product: syz [ 156.001465][ T2238] usb 5-1: Manufacturer: syz [ 156.006093][ T2238] usb 5-1: SerialNumber: syz [ 156.008517][ T7604] JBD2: Ignoring recovery information on journal [ 156.070435][ T7604] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.128679][ T472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.162282][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 156.206797][ T472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.328388][ T472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.429385][ T2238] usb 5-1: USB disconnect, device number 9 [ 156.465203][ T472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.560367][ T7147] udevd[7147]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.681810][ T5101] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input13 [ 156.916091][ T1325] usb 4-1: USB disconnect, device number 8 [ 156.948596][ T472] tipc: Disabling bearer [ 156.999581][ T5977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 156.999934][ T472] tipc: Left network mode [ 157.011776][ T7631] program syz.5.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.269765][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 157.389844][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.431227][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.432904][ T7619] chnl_net:caif_netlink_parms(): no params data found [ 157.486584][ T5977] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 157.531875][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.576849][ T5977] usb 2-1: config 0 descriptor?? [ 157.651582][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.666519][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.675373][ T7619] device bridge_slave_0 entered promiscuous mode [ 157.694566][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.702146][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.710699][ T7619] device bridge_slave_1 entered promiscuous mode [ 157.747805][ T7667] loop4: detected capacity change from 0 to 1024 [ 157.809022][ T7667] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 157.833761][ T7667] EXT4-fs (loop4): inline encryption not supported [ 157.857746][ T7667] EXT4-fs (loop4): Ignoring removed bh option [ 157.871629][ T7619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.938286][ T7619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.958759][ T7667] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noload,user_xattr,nolazytime,grpjquota=,nomblk_io_submit,inlinecrypt,nodiscard,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 157.960721][ T7640] loop5: detected capacity change from 0 to 32768 [ 157.980529][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.058601][ T7640] JBD2: Ignoring recovery information on journal [ 158.081655][ T5977] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 158.088833][ T5977] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 158.098194][ T5977] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 158.105679][ T5977] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 158.126086][ T7619] team0: Port device team_slave_0 added [ 158.132705][ T5977] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 158.146966][ T5977] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 158.167684][ T7619] team0: Port device team_slave_1 added [ 158.269832][ T7640] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 158.298298][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.359782][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.385716][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.444538][ T7619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.462337][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.470976][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.496890][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.536086][ T21] usb 2-1: USB disconnect, device number 13 [ 158.559560][ T6389] ocfs2: Unmounting device (7,5) on (node local) [ 158.580232][ T7688] fido_id[7688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 158.598445][ T7619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.629598][ T13] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 158.788627][ T7699] loop3: detected capacity change from 0 to 8 [ 158.815988][ T2286] Bluetooth: hci3: command 0x0409 tx timeout [ 158.826809][ T7619] device hsr_slave_0 entered promiscuous mode [ 158.862869][ T7619] device hsr_slave_1 entered promiscuous mode [ 158.881288][ T7619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.914961][ T7619] Cannot create hsr debugfs directory [ 159.036637][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 159.058272][ T13] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 159.101029][ T7709] loop1: detected capacity change from 0 to 8 [ 159.135856][ T13] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 159.155895][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.185343][ T13] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 159.203854][ T7713] netlink: 'syz.5.1216': attribute type 3 has an invalid length. [ 159.212262][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.268403][ T13] usb 5-1: config 0 descriptor?? [ 159.303907][ T7683] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.401983][ T7723] loop5: detected capacity change from 0 to 256 [ 159.447984][ T472] device hsr_slave_0 left promiscuous mode [ 159.471045][ T7723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 159.490225][ T472] device hsr_slave_1 left promiscuous mode [ 159.499300][ T472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.560246][ T472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.570683][ T472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.578231][ T472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.633988][ T472] device bridge_slave_1 left promiscuous mode [ 159.649463][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.688593][ T472] device bridge_slave_0 left promiscuous mode [ 159.710172][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.753471][ T472] device veth1_macvtap left promiscuous mode [ 159.773952][ T472] device veth0_macvtap left promiscuous mode [ 159.782175][ T13] belkin 0003:1020:0006.0005: ignoring exceeding usage max [ 159.795796][ T13] belkin 0003:1020:0006.0005: unbalanced delimiter at end of report description [ 159.805445][ T472] device veth1_vlan left promiscuous mode [ 159.812273][ T472] device veth0_vlan left promiscuous mode [ 159.818527][ T13] belkin 0003:1020:0006.0005: parse failed [ 159.825676][ T13] belkin: probe of 0003:1020:0006.0005 failed with error -22 [ 159.985029][ T13] usb 5-1: USB disconnect, device number 10 [ 160.299628][ T472] team0 (unregistering): Port device team_slave_1 removed [ 160.314514][ T472] team0 (unregistering): Port device team_slave_0 removed [ 160.329081][ T472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.347657][ T472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.418492][ T472] bond0 (unregistering): Released all slaves [ 160.514579][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1229'. [ 160.768757][ T7619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.834609][ T7619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.889785][ T2286] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.892623][ T7619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.904639][ T1325] Bluetooth: hci3: command 0x041b tx timeout [ 160.954142][ T7775] Bluetooth: hci1: too big key_count value 37575 [ 160.992607][ T7619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.012942][ T7781] loop8: detected capacity change from 0 to 7 [ 161.069760][ T7781] Dev loop8: unable to read RDB block 7 [ 161.099227][ T7781] loop8: unable to read partition table [ 161.131541][ T2286] usb 5-1: Using ep0 maxpacket: 8 [ 161.139228][ T7781] loop8: partition table beyond EOD, truncated [ 161.170019][ T7787] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1241'. [ 161.202370][ T7781] loop_reread_partitions: partition scan of loop8 (x^) failed (rc=-5) [ 161.249732][ T2286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.264128][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.285946][ T2286] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.315628][ T2286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.365695][ T2286] usb 5-1: config 0 descriptor?? [ 161.375460][ T7619] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.410506][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.428748][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.481804][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.491807][ T7794] loop1: detected capacity change from 0 to 2048 [ 161.501365][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.524391][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.531578][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.579999][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.616158][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.630860][ T7794] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 161.645694][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.652478][ T2286] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.693015][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.700161][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.726558][ T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.736550][ T7794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.738561][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.793980][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.871486][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.902426][ T7809] loop3: detected capacity change from 0 to 64 [ 161.913692][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.922240][ T4360] usb 5-1: USB disconnect, device number 11 [ 161.952260][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.961842][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.972004][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.980800][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.996848][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 162.021024][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.041675][ T7619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.061074][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.070088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.090532][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.159033][ T7814] loop3: detected capacity change from 0 to 1024 [ 162.169876][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 162.277134][ T7818] loop1: detected capacity change from 0 to 512 [ 162.284013][ T21] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 162.310986][ T21] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 162.379260][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.417928][ T7814] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodioread_nolock,noblock_validity,delalloc,journal_dev=0x0000000000000007,nodioread_nolock,journal_ioprio=0x0000000000000006,noinit_itable,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 162.421388][ T7818] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 162.469675][ T7814] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.481288][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.495465][ T7619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.539725][ T21] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 162.544655][ T7818] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.548821][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.621203][ T26] audit: type=1800 audit(1785506311.828:63): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1249" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 162.699551][ T21] usb 6-1: Product: syz [ 162.703763][ T21] usb 6-1: Manufacturer: syz [ 162.708379][ T21] usb 6-1: SerialNumber: syz [ 162.714519][ T7818] EXT4-fs (loop1): shut down requested (1) [ 162.753643][ T7832] loop4: detected capacity change from 0 to 4096 [ 162.910333][ T7838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.009971][ T5101] Bluetooth: hci3: command 0x040f tx timeout [ 163.041115][ T21] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 163.254792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.275166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.284287][ T7850] loop3: detected capacity change from 0 to 4096 [ 163.322282][ T7850] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 163.375404][ T7619] device veth0_vlan entered promiscuous mode [ 163.422781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.450749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.488363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.516725][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.540692][ T21] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 163.558952][ T7619] device veth1_vlan entered promiscuous mode [ 163.600742][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.675315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.694256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.713536][ T7619] device veth0_macvtap entered promiscuous mode [ 163.725721][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 163.742216][ T7619] device veth1_macvtap entered promiscuous mode [ 163.797785][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.909625][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.924599][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.956155][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.013515][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.024450][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.074094][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.100561][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.149140][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.169648][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.189610][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.237899][ T7884] loop3: detected capacity change from 0 to 736 [ 164.248545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.273514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.287533][ T21] usb 6-1: device firmware changed [ 164.303481][ T21] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 164.335810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.353077][ T21] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 164.381183][ T21] usb 6-1: USB disconnect, device number 7 [ 164.390211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.411509][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.458944][ T2286] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 164.474837][ T2286] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 164.499491][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.509359][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.529356][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.540345][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.551033][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.560963][ T7619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.572851][ T7619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.584580][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.613476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.622130][ T4284] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 164.636958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.661655][ T7619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.681610][ T7619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.701533][ T7619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.719457][ T7619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.008451][ T7902] loop5: detected capacity change from 0 to 256 [ 165.025251][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.041672][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.050025][ T5977] Bluetooth: hci3: command 0x0419 tx timeout [ 165.056311][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.076719][ T4284] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 165.095039][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.115268][ T4284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.157322][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.188456][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.248450][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.257844][ T7902] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 165.359907][ T4284] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 165.374728][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 165.414919][ T4284] usb 5-1: Product: syz [ 165.420788][ T4284] usb 5-1: Manufacturer: syz [ 165.425646][ T4284] usb 5-1: SerialNumber: syz [ 165.438154][ T4284] usb 5-1: config 0 descriptor?? [ 165.501248][ T4284] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 165.509213][ T7922] loop5: detected capacity change from 0 to 512 [ 165.522889][ T4284] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 165.531148][ T4284] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 165.550464][ T7922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.603791][ T7922] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1273: corrupted in-inode xattr [ 165.663960][ T7922] EXT4-fs (loop5): get orphan inode failed [ 165.675278][ T7922] EXT4-fs (loop5): mount failed [ 165.716325][ T7932] loop6: detected capacity change from 0 to 1024 [ 166.081545][ T7950] debugfs: Directory 'netdev:wlan0' with parent 'phy13' already present! [ 166.365100][ T7964] loop6: detected capacity change from 0 to 2048 [ 166.414184][ T7960] loop1: detected capacity change from 0 to 8192 [ 166.423024][ T7974] loop3: detected capacity change from 0 to 512 [ 166.517019][ T7974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.531225][ T7964] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.560871][ T7964] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.572702][ T7974] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.591337][ T7985] loop5: detected capacity change from 0 to 4096 [ 166.681219][ T7992] loop1: detected capacity change from 0 to 256 [ 166.722845][ T7992] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.752649][ T7993] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.938659][ T26] audit: type=1804 audit(1785506316.138:64): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1291" name="/newroot/65/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 166.939622][ T4360] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 167.333200][ T5006] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0 [ 167.363515][ T5006] hid-generic 0000:FFFFFFFE:0800.0006: unknown main item tag 0x0 [ 167.379903][ T4284] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 167.397601][ T5006] hid-generic 0000:FFFFFFFE:0800.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 167.409505][ T4360] usb 7-1: config 7 has an invalid descriptor of length 170, skipping remainder of the config [ 167.427075][ T4360] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 167.490248][ T5101] usb 5-1: USB disconnect, device number 12 [ 167.583914][ T4360] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 167.623727][ T4360] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 167.652291][ T8016] fido_id[8016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 167.655486][ T4360] usb 7-1: Product: syz [ 167.699785][ T4360] usb 7-1: SerialNumber: syz [ 167.749999][ T4284] usb 2-1: not running at top speed; connect to a high speed hub [ 167.756100][ T4360] usb 7-1: bad CDC descriptors [ 167.775822][ T4360] usb 7-1: bad CDC descriptors [ 167.790153][ T8025] loop4: detected capacity change from 0 to 64 [ 167.798418][ T4360] option 7-1:7.0: GSM modem (1-port) converter detected [ 167.859804][ T4284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 167.889046][ T4284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.991946][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 168.056490][ T5006] usb 7-1: USB disconnect, device number 2 [ 168.078135][ T5006] option 7-1:7.0: device disconnected [ 168.109960][ T4284] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 168.137591][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.157623][ T4284] usb 2-1: Product: syz [ 168.169638][ T4284] usb 2-1: Manufacturer: syz [ 168.186903][ T4284] usb 2-1: SerialNumber: syz [ 168.270901][ T4284] oti6858 2-1:1.0: oti6858 converter detected [ 168.295298][ T4284] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 168.701994][ T8003] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 168.714385][ T8031] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.1305 (8031) [ 168.735444][ T4284] usb 2-1: USB disconnect, device number 14 [ 168.752406][ T4284] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 168.777204][ T4284] oti6858 2-1:1.0: device disconnected [ 168.821906][ T8031] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.869802][ T8031] BTRFS info (device loop5): using free space tree [ 168.877651][ T8031] BTRFS info (device loop5): has skinny extents [ 169.052979][ T8065] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.224797][ T8065] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 169.316048][ T8031] BTRFS info (device loop5): enabling ssd optimizations [ 169.395756][ T8100] set_capacity_and_notify: 2 callbacks suppressed [ 169.395773][ T8100] loop1: detected capacity change from 0 to 1024 [ 169.396447][ T26] audit: type=1800 audit(1785506318.598:65): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1305" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 169.802946][ T8121] loop1: detected capacity change from 0 to 1024 [ 169.932905][ T8121] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.979952][ T8121] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.997789][ T8121] JBD2: no valid journal superblock found [ 170.023586][ T8121] EXT4-fs (loop1): error loading journal [ 170.128258][ T8131] loop3: detected capacity change from 0 to 1024 [ 170.220546][ T8135] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 170.251266][ T8131] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.336717][ T4360] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0 [ 170.342153][ T8131] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.350291][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 170.406800][ T4360] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0 [ 170.434344][ T26] audit: type=1800 audit(1785506319.638:66): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1333" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 170.454141][ T4360] hid-generic 0000:FFFFFFFE:0800.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 170.472252][ T8146] loop5: detected capacity change from 0 to 16 [ 170.498167][ T26] audit: type=1800 audit(1785506319.668:67): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1333" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 170.539836][ T9] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 170.566284][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 170.568495][ T8150] loop6: detected capacity change from 0 to 512 [ 170.579452][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.579452][ T9] [ 170.606054][ T8146] erofs: (device loop5): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 170.663367][ T8146] erofs: (device loop5): mounted with root inode @ nid 36. [ 170.675426][ T8152] loop1: detected capacity change from 0 to 512 [ 170.737383][ T8153] fido_id[8153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.775287][ T8152] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.813080][ T8150] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.847316][ T8152] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 170.903726][ T8150] EXT4-fs (loop6): 1 truncate cleaned up [ 170.928702][ T8150] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 170.954613][ T8152] EXT4-fs (loop1): 1 truncate cleaned up [ 170.960428][ T8152] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 171.000893][ T26] audit: type=1800 audit(1785506320.208:68): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1341" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 171.026765][ T8152] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 171.524556][ T8157] loop5: detected capacity change from 0 to 40427 [ 171.548971][ T4360] hid-generic 0000:FFFFFFFE:0800.0008: unknown main item tag 0x0 [ 171.568461][ T8157] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 171.574989][ T4360] hid-generic 0000:FFFFFFFE:0800.0008: unknown main item tag 0x0 [ 171.576417][ T4360] hid-generic 0000:FFFFFFFE:0800.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 171.604213][ T8157] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 171.617501][ T8157] F2FS-fs (loop5): invalid crc value [ 171.655887][ T8178] fido_id[8178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.677545][ T8157] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 171.918817][ T8157] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 171.930231][ T8157] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.125665][ T26] audit: type=1800 audit(1785506321.328:69): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1342" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 172.180216][ T8180] attempt to access beyond end of device [ 172.180216][ T8180] loop5: rw=2049, want=45104, limit=40427 [ 172.210059][ T8167] loop6: detected capacity change from 0 to 32768 [ 172.306860][ T8167] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 172.385457][ T8214] loop1: detected capacity change from 0 to 4096 [ 172.436179][ T8214] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 172.497159][ T8217] loop4: detected capacity change from 0 to 256 [ 172.532648][ T7619] ocfs2: Unmounting device (7,6) on (node local) [ 172.677614][ T8217] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 172.830519][ T2238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 172.892632][ T2238] Bluetooth: hci3: Injecting HCI hardware error event [ 172.941450][ T4188] Bluetooth: hci3: hardware error 0x00 [ 172.971672][ T8229] pimreg1: tun_chr_ioctl cmd 1074025677 [ 173.051966][ T8229] pimreg1: linktype set to 0 [ 173.175337][ T8226] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 173.293349][ T8232] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 173.309559][ T8232] REISERFS (device loop5): using ordered data mode [ 173.316202][ T8232] reiserfs: using flush barriers [ 173.436589][ T8232] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.555475][ T8232] REISERFS (device loop5): checking transaction log (loop5) [ 173.579642][ T8223] JBD2: Ignoring recovery information on journal [ 173.636953][ T8232] REISERFS (device loop5): Using r5 hash to sort names [ 173.644447][ T8232] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 173.715135][ T8232] REISERFS warning (device loop5): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=522, len=13 - odd [ 173.739765][ T8223] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 173.860406][ T4360] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.122529][ T4360] usb 5-1: Using ep0 maxpacket: 8 [ 174.127963][ T8252] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 174.168194][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 174.220505][ T8264] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 174.225131][ T8252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 174.249746][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.287313][ T8252] ntfs3: loop1: Failed to load $Extend. [ 174.289932][ T4360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 174.347045][ T4360] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 174.398423][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.441563][ T4360] usb 5-1: config 0 descriptor?? [ 174.536570][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1389'. [ 174.651205][ T8278] set_capacity_and_notify: 6 callbacks suppressed [ 174.651221][ T8278] loop3: detected capacity change from 0 to 512 [ 174.751402][ T8278] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.893406][ T8278] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 174.909155][ T8293] loop6: detected capacity change from 0 to 2048 [ 174.917029][ T4360] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 174.925725][ T4360] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 174.939916][ T4360] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 174.947019][ T4360] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 174.965783][ T4360] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x4 [ 174.979529][ T4360] saitek 0003:06A3:0CCB.0009: unknown global tag 0xd [ 174.996531][ T4360] saitek 0003:06A3:0CCB.0009: item 0 0 1 13 parsing failed [ 175.007107][ T4360] saitek 0003:06A3:0CCB.0009: parse failed [ 175.013831][ T2238] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.048960][ T4360] saitek: probe of 0003:06A3:0CCB.0009 failed with error -22 [ 175.058629][ T8293] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 175.107619][ T8293] System zones: 0-7 [ 175.139481][ T8293] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 175.163301][ T8244] loop4: detected capacity change from 0 to 512 [ 175.199131][ T8293] EXT4-fs error (device loop6): ext4_find_extent:929: inode #2: comm syz.6.1396: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 175.232895][ T8244] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 175.269904][ T2238] usb 2-1: Using ep0 maxpacket: 32 [ 175.285434][ T8293] EXT4-fs (loop6): Remounting filesystem read-only [ 175.312180][ T8297] EXT4-fs error (device loop6): ext4_find_extent:929: inode #2: comm syz.6.1396: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 175.314422][ T8244] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 175.349940][ T8244] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.368665][ T8289] loop5: detected capacity change from 0 to 32768 [ 175.389997][ T2238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.424642][ T2238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.440179][ T8132] usb 5-1: USB disconnect, device number 13 [ 175.476803][ T8289] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 175.494171][ T8297] EXT4-fs (loop6): Remounting filesystem read-only [ 175.495120][ T2238] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.514708][ T2238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.524910][ T2238] usb 2-1: config 0 descriptor?? [ 175.572250][ T2238] hub 2-1:0.0: USB hub found [ 175.711833][ T26] audit: type=1800 audit(1785506324.918:70): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1395" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 175.759228][ T8289] syz.5.1395 (8289) used greatest stack depth: 18304 bytes left [ 175.789683][ T2238] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 175.825200][ T6389] ocfs2: Unmounting device (7,5) on (node local) [ 176.232041][ T2238] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 176.261682][ T2238] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 176.370652][ T8332] loop5: detected capacity change from 0 to 4096 [ 176.410810][ T8334] loop4: detected capacity change from 0 to 256 [ 176.478257][ T8332] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.496544][ T8133] Bluetooth: hci4: command 0x0411 tx timeout [ 176.699909][ T8133] usb 2-1: USB disconnect, device number 15 [ 176.769243][ T8340] binder: 8339:8340 ioctl c0306201 200000000440 returned -14 [ 177.074321][ T8360] loop3: detected capacity change from 0 to 256 [ 177.175945][ T8360] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.241634][ T8375] loop4: detected capacity change from 0 to 512 [ 177.308797][ T8360] exFAT-fs (loop3): hint_cluster is invalid (17) [ 177.495869][ T8375] EXT4-fs (loop4): 1 orphan inode deleted [ 177.502337][ T8375] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 177.515532][ T8395] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 177.519374][ T8375] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.628689][ T8401] loop6: detected capacity change from 0 to 8 [ 177.979122][ T8409] loop1: detected capacity change from 0 to 4096 [ 178.112656][ T8409] NILFS (loop1): invalid segment: Checksum error in segment payload [ 178.127112][ T8409] NILFS (loop1): trying rollback from an earlier position [ 178.168618][ T8409] NILFS (loop1): recovery complete [ 178.181354][ T8421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.437689][ T8424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.569740][ T8424] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.862849][ T2238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.948273][ T8449] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 179.095555][ T8449] REISERFS (device loop1): using ordered data mode [ 179.125879][ T8449] reiserfs: using flush barriers [ 179.179013][ T8449] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.241021][ T2238] usb 4-1: config 7 has an invalid descriptor of length 170, skipping remainder of the config [ 179.244881][ T8449] REISERFS (device loop1): checking transaction log (loop1) [ 179.271185][ T2238] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 179.296183][ T8449] REISERFS (device loop1): Using r5 hash to sort names [ 179.318783][ T8449] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 179.414980][ T8132] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 179.419700][ T2238] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 179.445212][ T2238] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 179.489541][ T2238] usb 4-1: Product: syz [ 179.496623][ T2238] usb 4-1: SerialNumber: syz [ 179.561002][ T2238] usb 4-1: bad CDC descriptors [ 179.567065][ T2238] usb 4-1: bad CDC descriptors [ 179.578941][ T2238] option 4-1:7.0: GSM modem (1-port) converter detected [ 179.778119][ T2238] usb 4-1: USB disconnect, device number 9 [ 179.785636][ T2238] option 4-1:7.0: device disconnected [ 179.908633][ T8510] set_capacity_and_notify: 2 callbacks suppressed [ 179.908650][ T8510] loop5: detected capacity change from 0 to 512 [ 180.014896][ T8510] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 180.079316][ T8510] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1474: bad orphan inode 15 [ 180.089674][ T8132] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 180.089707][ T8132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.089727][ T8132] usb 7-1: Product: syz [ 180.089742][ T8132] usb 7-1: Manufacturer: syz [ 180.089757][ T8132] usb 7-1: SerialNumber: syz [ 180.126572][ T8510] ext4_test_bit(bit=14, block=18) = 1 [ 180.132140][ T8510] is_bad_inode(inode)=0 [ 180.136299][ T8510] NEXT_ORPHAN(inode)=1023 [ 180.141364][ T8510] max_ino=32 [ 180.144575][ T8510] i_nlink=0 [ 180.155732][ T8510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1474: bg 0: block 161: padding at end of block bitmap is not set [ 180.184103][ T8510] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 180.197712][ T8510] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,nolazytime,,errors=continue. Quota mode: none. [ 180.217056][ T8510] ext2 filesystem being mounted at /96/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 180.486653][ T8535] loop3: detected capacity change from 0 to 256 [ 180.544634][ T8535] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.655810][ T6446] blk_update_request: I/O error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.668308][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 92199) [ 180.680449][ T6446] Buffer I/O error on device sda1, logical block 92160 [ 180.688298][ T6446] blk_update_request: I/O error, dev sda, sector 745774 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.699564][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 93222) [ 180.711079][ T6446] Buffer I/O error on device sda1, logical block 93183 [ 180.718010][ T6446] blk_update_request: I/O error, dev sda, sector 749662 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 180.729294][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 93734) [ 180.740817][ T6446] Buffer I/O error on device sda1, logical block 93669 [ 180.747893][ T6446] Buffer I/O error on device sda1, logical block 93670 [ 180.755069][ T6446] Buffer I/O error on device sda1, logical block 93671 [ 180.761982][ T6446] Buffer I/O error on device sda1, logical block 93672 [ 180.768851][ T6446] Buffer I/O error on device sda1, logical block 93673 [ 180.775754][ T6446] Buffer I/O error on device sda1, logical block 93674 [ 180.782672][ T6446] Buffer I/O error on device sda1, logical block 93675 [ 180.789596][ T6446] Buffer I/O error on device sda1, logical block 93676 [ 180.801181][ T6446] blk_update_request: I/O error, dev sda, sector 696630 op 0x1:(WRITE) flags 0x0 phys_seg 29 prio class 0 [ 180.812638][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2029 starting block 87110) [ 180.836784][ T6446] blk_update_request: I/O error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.848272][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151) [ 180.859963][ T6446] blk_update_request: I/O error, dev sda, sector 729390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.871220][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91174) [ 180.882870][ T6446] blk_update_request: I/O error, dev sda, sector 733262 op 0x1:(WRITE) flags 0x0 phys_seg 15 prio class 0 [ 180.894274][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91686) [ 180.906705][ T6446] blk_update_request: I/O error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.918181][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 180.929861][ T6446] blk_update_request: I/O error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 180.941111][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 180.952792][ T6446] blk_update_request: I/O error, dev sda, sector 815142 op 0x1:(WRITE) flags 0x0 phys_seg 18 prio class 0 [ 180.964128][ T6446] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101926) [ 181.055965][ T3522] Aborting journal on device sda1-8. [ 181.056906][ T8531] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 181.065052][ T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 181.071030][ T8531] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 181.081324][ T4224] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.088180][ T8531] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 181.096411][ T3522] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 181.104498][ T8531] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 181.121795][ T8531] Buffer I/O error on dev sda1, logical block 8212, lost async page write [ 181.130438][ T8531] Buffer I/O error on dev sda1, logical block 8213, lost async page write [ 181.139039][ T8531] Buffer I/O error on dev sda1, logical block 23725, lost async page write [ 181.153389][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 181.167327][ T8541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1484: Detected aborted journal [ 181.185053][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 181.193787][ T8541] EXT4-fs (sda1): I/O error while writing superblock [ 181.200670][ T8541] EXT4-fs (sda1): Remounting filesystem read-only [ 181.205432][ T1093] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 181.218793][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 181.225945][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 181.233196][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 181.240244][ T8541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1484: Detected aborted journal [ 181.245045][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 181.259555][ T8530] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1482: Detected aborted journal [ 181.262477][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 181.280135][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 181.284634][ T8541] EXT4-fs (sda1): I/O error while writing superblock [ 181.292491][ T4175] EXT4-fs (sda1): previous I/O error to superblock detected [ 181.306293][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 181.307391][ T8551] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd-run-hook: reading directory lblock 0 [ 181.313807][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 181.333201][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 181.346972][ T8552] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1486: Detected aborted journal [ 181.357547][ T8541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1484: Detected aborted journal [ 181.370705][ T4224] usb 4-1: Using ep0 maxpacket: 32 [ 181.492767][ T4224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.509056][ T4224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.532343][ T4224] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.543722][ T4224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.562864][ T4224] usb 4-1: config 0 descriptor?? [ 181.620654][ T4224] hub 4-1:0.0: USB hub found [ 181.703470][ T8531] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 181.841486][ T4224] hub 4-1:0.0: 1 port detected [ 182.069813][ T4224] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 182.084246][ T4224] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 182.207595][ T8572] loop1: detected capacity change from 0 to 32768 [ 182.225142][ T8572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1490 (8572) [ 182.227332][ T4224] usbhid 4-1:0.0: can't add hid device: -71 [ 182.264869][ T4224] usbhid: probe of 4-1:0.0 failed with error -71 [ 182.299924][ T8572] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 182.323207][ T8572] BTRFS info (device loop1): setting nodatasum [ 182.330721][ T4224] usb 4-1: USB disconnect, device number 10 [ 182.340329][ T8572] BTRFS info (device loop1): force zlib compression, level 3 [ 182.366477][ T8572] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 182.376111][ T8572] BTRFS info (device loop1): use lzo compression, level 0 [ 182.409937][ T8572] BTRFS info (device loop1): turning on flush-on-commit [ 182.414841][ T8582] udevd[8582]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 182.420980][ T8572] BTRFS info (device loop1): enabling auto defrag [ 182.465281][ T8572] BTRFS info (device loop1): max_inline at 4096 [ 182.472014][ T8572] BTRFS info (device loop1): using free space tree [ 182.479211][ T8572] BTRFS info (device loop1): has skinny extents [ 182.527802][ T8572] BTRFS info (device loop1): enabling ssd optimizations [ 182.622043][ T8605] udevd[8605]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 182.781327][ T8611] device bond0 entered promiscuous mode [ 182.786921][ T8611] device bond_slave_0 entered promiscuous mode [ 182.805863][ T8611] device bond_slave_1 entered promiscuous mode [ 182.899820][ T8132] rtl8150 7-1:1.0: couldn't reset the device [ 182.907267][ T8132] rtl8150: probe of 7-1:1.0 failed with error -5 [ 182.938453][ T8132] usb 7-1: USB disconnect, device number 3 [ 183.114512][ T8611] device batadv0 entered promiscuous mode [ 183.135035][ T8611] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 183.143322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 183.261133][ T8612] loop3: detected capacity change from 0 to 40427 [ 183.313672][ T8612] F2FS-fs (loop3): invalid crc value [ 183.355502][ T8612] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 183.367452][ T8132] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.479646][ T4224] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.518005][ T8612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.586600][ T8612] attempt to access beyond end of device [ 183.586600][ T8612] loop3: rw=2049, want=45104, limit=40427 [ 183.607186][ T8633] af_packet: tpacket_rcv: packet too big, clamped from 75 to 4294967286. macoff=82 [ 183.649460][ T8132] usb 7-1: Using ep0 maxpacket: 16 [ 183.706455][ T4191] attempt to access beyond end of device [ 183.706455][ T4191] loop3: rw=2049, want=45112, limit=40427 [ 183.766900][ T8640] loop1: detected capacity change from 0 to 64 [ 183.789905][ T8132] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.809297][ T8642] input: syz1 as /devices/virtual/input/input14 [ 183.810379][ T8132] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.959736][ T4224] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.055545][ T4224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.066096][ T8132] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.083771][ T8132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.091938][ T4224] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.105222][ T8132] usb 7-1: Product: syz [ 184.119466][ T4224] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 184.137985][ T8132] usb 7-1: Manufacturer: syz [ 184.149487][ T8132] usb 7-1: SerialNumber: syz [ 184.158729][ T4224] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 184.198154][ T4224] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 184.218707][ T4224] usb 5-1: config 1 interface 1 has no altsetting 0 [ 184.255251][ T8653] loop3: detected capacity change from 0 to 4096 [ 184.285094][ T8653] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext2 [ 184.438052][ T8132] usb 7-1: 0:2 : does not exist [ 184.457463][ T8132] usb 7-1: USB disconnect, device number 4 [ 184.500297][ T4224] usb 5-1: string descriptor 0 read error: -22 [ 184.510847][ T4224] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 184.534953][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.543231][ T4225] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.718654][ T8666] loop3: detected capacity change from 0 to 512 [ 184.754378][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.796485][ T8666] FAT-fs (loop3): FAT read failed (blocknr 128) [ 184.819765][ T4224] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 184.829793][ T4224] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 184.848517][ T8667] FAT-fs (loop3): FAT read failed (blocknr 128) [ 184.969836][ T4225] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.989481][ T4225] usb 2-1: config 0 has no interface number 0 [ 185.000314][ T4225] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 185.019566][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.033973][ T4225] usb 2-1: config 0 descriptor?? [ 185.073278][ T4225] usb 2-1: selecting invalid altsetting 1 [ 185.088487][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1520'. [ 185.108402][ T4225] dvb_ttusb_budget: ttusb_init_controller: error [ 185.111669][ T8671] loop5: detected capacity change from 0 to 64 [ 185.117130][ T4225] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 185.121930][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1520'. [ 185.171791][ T4225] DVB: Unable to find symbol cx22700_attach() [ 185.188209][ T4225] DVB: Unable to find symbol tda10046_attach() [ 185.194582][ T4225] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 185.207209][ T8675] loop3: detected capacity change from 0 to 256 [ 185.268173][ T26] audit: type=1800 audit(1785506334.468:71): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1521" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 185.309614][ T4224] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 185.359788][ T4224] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 185.373409][ T4360] usb 2-1: USB disconnect, device number 16 [ 185.397549][ T8675] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.450199][ T8675] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 185.477451][ T4224] usb 5-1: USB disconnect, device number 14 [ 185.540855][ T8675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.733772][ T8679] loop5: detected capacity change from 0 to 8192 [ 185.812228][ T8679] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 185.817447][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.829951][ T8679] REISERFS (device loop5): using ordered data mode [ 185.843771][ T8679] reiserfs: using flush barriers [ 185.853902][ T8679] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.870455][ T8679] REISERFS (device loop5): checking transaction log (loop5) [ 185.883438][ T8679] REISERFS (device loop5): Using r5 hash to sort names [ 185.939849][ T8679] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 186.009821][ T8679] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 186.089572][ T4360] Bluetooth: hci1: command 0x0406 tx timeout [ 186.095731][ T4360] Bluetooth: hci2: command 0x0406 tx timeout [ 186.168060][ T8695] EXT4-fs error: 265 callbacks suppressed [ 186.168076][ T8695] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1532: Detected aborted journal [ 186.195813][ T8678] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1524: Detected aborted journal [ 186.218363][ T8694] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1533: Detected aborted journal [ 186.221060][ T8696] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1534: Detected aborted journal [ 186.241418][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 186.256249][ T8694] EXT4-fs: 245 callbacks suppressed [ 186.256264][ T8694] EXT4-fs (sda1): Remounting filesystem read-only [ 186.268950][ T8678] EXT4-fs (sda1): Remounting filesystem read-only [ 186.279471][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 186.281542][ T8695] EXT4-fs (sda1): Remounting filesystem read-only [ 186.286024][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 186.296040][ T8678] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1524: Detected aborted journal [ 186.351442][ T8695] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1532: Detected aborted journal [ 186.377420][ T8678] EXT4-fs (sda1): Remounting filesystem read-only [ 186.380475][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 186.388565][ T8699] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1531: Detected aborted journal [ 186.399464][ T8696] EXT4-fs (sda1): Remounting filesystem read-only [ 186.408904][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 186.417206][ T8678] EXT4-fs (sda1): Remounting filesystem read-only [ 186.422100][ T8696] EXT4-fs (sda1): Remounting filesystem read-only [ 186.433876][ T8678] EXT4-fs (sda1): Remounting filesystem read-only [ 186.459330][ T8697] loop4: detected capacity change from 0 to 4096 [ 186.469257][ T8679] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 186.519948][ T8679] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 186.552116][ T8679] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 186.615150][ T8697] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 186.696574][ T8697] ntfs3: loop4: failed to convert "0000" to iso8859-2 [ 186.717755][ T8697] ntfs3: loop4: failed to convert name for inode 1e. [ 186.792317][ T8707] loop6: detected capacity change from 0 to 256 [ 186.912750][ T8707] FAT-fs (loop6): Directory bread(block 64) failed [ 186.941902][ T8707] FAT-fs (loop6): Directory bread(block 65) failed [ 186.969620][ T8707] FAT-fs (loop6): Directory bread(block 66) failed [ 186.986519][ T8707] FAT-fs (loop6): Directory bread(block 67) failed [ 186.993219][ T8707] FAT-fs (loop6): Directory bread(block 68) failed [ 187.009547][ T8707] FAT-fs (loop6): Directory bread(block 69) failed [ 187.046581][ T8707] FAT-fs (loop6): Directory bread(block 70) failed [ 187.066983][ T8707] FAT-fs (loop6): Directory bread(block 71) failed [ 187.122375][ T8707] FAT-fs (loop6): Directory bread(block 72) failed [ 187.150948][ T8707] FAT-fs (loop6): Directory bread(block 73) failed [ 187.741451][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.749287][ T8722] device batadv_slave_0 entered promiscuous mode [ 187.796963][ T8722] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 188.018294][ T8752] loop5: detected capacity change from 0 to 256 [ 188.038245][ T8752] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 188.143794][ T8758] loop6: detected capacity change from 0 to 2048 [ 188.279271][ T8761] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.667510][ T8776] loop3: detected capacity change from 0 to 4096 [ 188.759553][ T4360] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 188.771534][ T8776] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 189.175532][ T8781] loop6: detected capacity change from 0 to 65536 [ 189.367926][ T8781] XFS (loop6): Mounting V5 Filesystem [ 189.469705][ T4360] usb 5-1: not running at top speed; connect to a high speed hub [ 189.559620][ T4224] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 189.559711][ T4360] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.614419][ T4360] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 188, setting to 64 [ 189.643160][ T4360] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 189.666170][ T4360] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 189.698226][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.715672][ T8781] XFS (loop6): Ending clean mount [ 189.746952][ T26] audit: type=1800 audit(1785506338.948:72): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1568" name="file1" dev="loop6" ino=70 res=0 errno=0 [ 189.752164][ T8774] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.774351][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.800704][ T4360] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 189.821745][ T4360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 189.829953][ T4360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 189.838827][ T4360] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 189.849617][ T4360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 189.857364][ T4360] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 189.866948][ T4360] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 189.899373][ T7619] XFS (loop6): Unmounting Filesystem [ 190.017325][ T4224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 190.029292][ T4224] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 190.044753][ T4224] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.236685][ T4360] usb 5-1: USB disconnect, device number 15 [ 190.239875][ T4224] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 190.259708][ T4224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 190.261961][ T4360] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 190.277641][ T4224] usb 2-1: Product: syz [ 190.292386][ T4224] usb 2-1: Manufacturer: syz [ 190.297114][ T4224] usb 2-1: SerialNumber: syz [ 190.297221][ T4360] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 190.325539][ T4360] keyspan 5-1:1.0: device disconnected [ 190.339774][ T8786] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.373546][ T8806] netlink: 'syz.6.1574': attribute type 10 has an invalid length. [ 190.396375][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.410560][ T8806] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.432296][ T8806] netlink: 'syz.6.1574': attribute type 10 has an invalid length. [ 190.440280][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1574'. [ 190.451573][ T8806] device batadv0 entered promiscuous mode [ 190.458343][ T8806] bond0: (slave batadv0): Releasing backup interface [ 190.472017][ T8806] bridge0: port 3(batadv0) entered blocking state [ 190.478562][ T8806] bridge0: port 3(batadv0) entered disabled state [ 190.527961][ T8808] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.595632][ T4224] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 190.829508][ C0] usblp0: nonzero write bulk status received: -71 [ 190.852974][ T4224] usb 2-1: USB disconnect, device number 17 [ 190.864454][ T4224] usblp0: removed [ 190.892304][ T8813] loop4: detected capacity change from 0 to 256 [ 190.916824][ T8813] exfat: Deprecated parameter 'utf8' [ 190.925462][ T8813] exfat: Deprecated parameter 'utf8' [ 190.985265][ T8813] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 191.004452][ T155] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.011432][ T8816] loop3: detected capacity change from 0 to 128 [ 191.014705][ T155] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.076580][ T8816] EXT4-fs (loop3): Ignoring removed nobh option [ 191.113483][ T8816] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 191.130850][ T8816] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.195597][ T8815] EXT4-fs error: 225 callbacks suppressed [ 191.195613][ T8815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1581: Detected aborted journal [ 191.223153][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 191.233752][ T8822] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1583: Detected aborted journal [ 191.234761][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 191.261674][ T8815] EXT4-fs: 207 callbacks suppressed [ 191.261685][ T8815] EXT4-fs (sda1): Remounting filesystem read-only [ 191.275918][ T8822] EXT4-fs (sda1): Remounting filesystem read-only [ 191.282127][ T8815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1581: Detected aborted journal [ 191.295781][ T8822] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1583: Detected aborted journal [ 191.312415][ T8815] EXT4-fs (sda1): Remounting filesystem read-only [ 191.319044][ T8815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1581: Detected aborted journal [ 191.339958][ T8822] EXT4-fs (sda1): Remounting filesystem read-only [ 191.348552][ T8822] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1583: Detected aborted journal [ 191.365531][ T8815] EXT4-fs (sda1): Remounting filesystem read-only [ 191.372456][ T8815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1581: Detected aborted journal [ 191.397258][ T8824] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1584: Detected aborted journal [ 191.400484][ T8822] EXT4-fs (sda1): Remounting filesystem read-only [ 191.408333][ T8815] EXT4-fs (sda1): Remounting filesystem read-only [ 191.421923][ T8824] EXT4-fs (sda1): Remounting filesystem read-only [ 191.430340][ T8815] EXT4-fs (sda1): Remounting filesystem read-only [ 191.439262][ T8825] loop1: detected capacity change from 0 to 128 [ 191.441871][ T8809] EXT4-fs (sda1): Remounting filesystem read-only [ 191.472065][ T8816] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 191.558124][ T8827] loop6: detected capacity change from 0 to 1024 [ 191.607719][ T8827] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 191.630287][ T8827] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 191.723595][ T8827] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.1585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 191.884310][ T8827] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1585: couldn't read orphan inode 11 (err -117) [ 191.936593][ T8827] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 192.142127][ T8827] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.1585: Invalid block bitmap block 0 in block_group 0 [ 192.270312][ T8827] Quota error (device loop6): write_blk: dquota write failed [ 192.292941][ T8827] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 192.345808][ T8857] loop3: detected capacity change from 0 to 1024 [ 192.476954][ T8827] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1585: Failed to acquire dquot type 0 [ 192.533196][ T8853] loop4: detected capacity change from 0 to 65536 [ 192.558532][ T8856] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1585: Invalid inode bitmap blk 137438953472 in block_group 0 [ 192.572570][ T8857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 192.585685][ T8857] System zones: 0-1, 3-12 [ 192.606730][ T8857] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,stripe=0x0000000000000fdc,debug,resgid=0x0000000000000000,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 192.620285][ T8863] netlink: 'syz.1.1600': attribute type 11 has an invalid length. [ 192.645354][ T155] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:3: Invalid inode table block 8589934593 in block_group 0 [ 192.696628][ T8853] XFS (loop4): Mounting V5 Filesystem [ 192.778340][ T8857] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 192.793725][ T8853] XFS (loop4): Ending clean mount [ 192.828692][ T26] audit: type=1800 audit(1785506342.028:73): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1597" name="file1" dev="loop4" ino=70 res=0 errno=0 [ 192.988595][ T4197] XFS (loop4): Unmounting Filesystem [ 193.125760][ T8888] loop1: detected capacity change from 0 to 64 [ 193.639727][ T4225] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.879519][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 193.999735][ T4225] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 194.007972][ T4225] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 194.040894][ T4225] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 194.089775][ T4225] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 194.119447][ T4225] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.262549][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268915][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.309582][ T4225] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 194.336378][ T4225] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 194.345903][ T4225] usb 4-1: Product: syz [ 194.355813][ T4225] usb 4-1: Manufacturer: syz [ 194.373553][ T4225] usb 4-1: SerialNumber: syz [ 194.390456][ T8909] loop5: detected capacity change from 0 to 40427 [ 194.395658][ T4225] usb 4-1: config 0 descriptor?? [ 194.421922][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1606'. [ 194.437149][ T8909] F2FS-fs (loop5): invalid crc value [ 194.456782][ T4225] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 194.486150][ T8909] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 194.503716][ T4225] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 194.512469][ T8927] tipc: Enabling of bearer rejected, media not registered [ 194.726593][ T8909] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.889884][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.901692][ T6389] attempt to access beyond end of device [ 194.901692][ T6389] loop5: rw=2049, want=45104, limit=40427 [ 194.943693][ T4225] usb 4-1: USB disconnect, device number 11 [ 194.972438][ T4225] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 195.045678][ T8946] loop1: detected capacity change from 0 to 256 [ 195.046500][ T8944] bond0: Device is already in use. [ 195.179620][ T8948] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 195.386674][ T8955] [U]  [ 195.399541][ T8955] [U] K{ [ 195.402815][ T8955] [U] T 1ŠFFˊ`GJǘGO/MC [ 195.434645][ T8957] loop6: detected capacity change from 0 to 512 [ 195.447021][ T8955] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 195.507195][ T8955] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 195.549158][ T8955] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 195.601499][ T8957] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.722111][ T8955] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 195.745705][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.763795][ T8955] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 195.776210][ T8955] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 195.789536][ T8955] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 195.925375][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.019022][ T4190] Bluetooth: hci4: link tx timeout [ 196.025251][ T4190] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.035746][ T4190] Bluetooth: hci4: link tx timeout [ 196.044535][ T4190] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.068172][ T8955] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 196.161649][ T8955] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 196.201116][ T8984] loop5: detected capacity change from 0 to 256 [ 196.201729][ T8989] EXT4-fs error: 248 callbacks suppressed [ 196.201742][ T8989] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1652: Detected aborted journal [ 196.226806][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 196.241996][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 196.258076][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 196.259651][ T8955] [U] 22Ʃ۩X?0;3U [ 196.285821][ T8955] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 196.287614][ T4175] EXT4-fs: 239 callbacks suppressed [ 196.287625][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 196.310778][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.311556][ T8989] EXT4-fs (sda1): Remounting filesystem read-only [ 196.346987][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 196.358662][ T4860] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 196.372622][ T8955] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 196.373568][ T8984] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 196.405642][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 196.426682][ T8955] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 196.435305][ T8983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1648: Detected aborted journal [ 196.458320][ T8990] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1653: Detected aborted journal [ 196.460036][ T8989] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1652: Detected aborted journal [ 196.470807][ T8983] EXT4-fs (sda1): Remounting filesystem read-only [ 196.494821][ T8955] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 196.512134][ T8990] EXT4-fs (sda1): Remounting filesystem read-only [ 196.517169][ T8989] EXT4-fs (sda1): Remounting filesystem read-only [ 196.524772][ T8983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1648: Detected aborted journal [ 196.525622][ T8955] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 196.552566][ T8989] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1652: Detected aborted journal [ 196.553350][ T8990] EXT4-fs (sda1): Remounting filesystem read-only [ 196.566627][ T8989] EXT4-fs (sda1): Remounting filesystem read-only [ 196.574140][ T8983] EXT4-fs (sda1): Remounting filesystem read-only [ 196.584271][ T8983] EXT4-fs (sda1): Remounting filesystem read-only [ 196.588787][ T8955] [U] EC [ 196.619532][ T4860] usb 7-1: Using ep0 maxpacket: 16 [ 196.619884][ T8955] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 196.657554][ T26] audit: type=1800 audit(1785506345.858:74): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1648" name="file2" dev="loop5" ino=1048695 res=0 errno=0 [ 196.692592][ T8984] exFAT-fs (loop5): hint_cluster is invalid (17) [ 196.709916][ T26] audit: type=1800 audit(1785506345.888:75): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1648" name="file2" dev="loop5" ino=1048695 res=0 errno=0 [ 196.750390][ T4860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.750505][ T8984] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 196.771688][ T4860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.800264][ T8954] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 196.803089][ T4860] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.822321][ T8984] exFAT-fs (loop5): Filesystem has been set read-only [ 196.842585][ T8984] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 196.881955][ T4860] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.906135][ T4860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.951299][ T4860] usb 7-1: config 0 descriptor?? [ 197.112599][ T9010] loop9: detected capacity change from 0 to 7 [ 197.128483][ C0] print_req_error: 199 callbacks suppressed [ 197.128501][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.145426][ C0] buffer_io_error: 54 callbacks suppressed [ 197.145441][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.160052][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.171015][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.188726][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.199720][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.224082][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.235114][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.249566][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.260557][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.268599][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.279550][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.287968][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.298918][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.307952][ T9010] ldm_validate_partition_table(): Disk read failed. [ 197.314800][ T4360] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 197.323210][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.334170][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.342493][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.353454][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.364961][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.375940][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.390119][ T9010] Dev loop9: unable to read RDB block 0 [ 197.407721][ T4860] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 197.409100][ T9010] loop9: unable to read partition table [ 197.419005][ T4860] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 197.433387][ T4860] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 197.439294][ T9010] loop9: partition table beyond EOD, truncated [ 197.448034][ T9010] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.462646][ T4860] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 197.479226][ T4860] microsoft 0003:045E:07DA.000B: no inputs found [ 197.486497][ T4860] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 197.525398][ T9019] udevd[9019]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 197.617978][ T9022] loop3: detected capacity change from 0 to 512 [ 197.746419][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.759713][ T9022] EXT4-fs (loop3): Invalid journal IO priority (must be 0-7) [ 197.776457][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.777342][ T4224] usb 7-1: USB disconnect, device number 5 [ 197.883901][ T9032] loop5: detected capacity change from 0 to 128 [ 197.932412][ T4360] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 197.958698][ T4360] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 197.987832][ T9032] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 198.006058][ T4360] usb 5-1: Manufacturer: syz [ 198.032690][ T4360] usb 5-1: config 0 descriptor?? [ 198.057102][ T9032] sysv_free_block: trying to free block not in datazone [ 198.089752][ T4224] Bluetooth: hci4: command 0x0406 tx timeout [ 198.154811][ T6389] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 198.450434][ T9053] loop6: detected capacity change from 0 to 256 [ 198.532268][ T4360] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 198.545393][ T9057] netlink: 'syz.5.1679': attribute type 10 has an invalid length. [ 198.554386][ T4360] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 198.562410][ T4360] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 198.570637][ T4360] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 198.580426][ T4360] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 198.589579][ T4360] cougar 0003:060B:700A.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 198.636458][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.653881][ T9060] udevd[9060]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 198.661028][ T9057] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.687286][ T9041] loop1: detected capacity change from 0 to 40427 [ 198.694215][ T9059] netlink: 'syz.5.1679': attribute type 10 has an invalid length. [ 198.712792][ T9059] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1679'. [ 198.729882][ T9041] F2FS-fs (loop1): Corrupted extension count (33554469 + 1 > 64) [ 198.744910][ T9059] device batadv0 entered promiscuous mode [ 198.752886][ T9059] bond0: (slave batadv0): Releasing backup interface [ 198.761072][ T4224] usb 5-1: USB disconnect, device number 16 [ 198.768263][ T9041] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 198.800197][ T9059] bridge0: port 3(batadv0) entered blocking state [ 198.815144][ T9059] bridge0: port 3(batadv0) entered disabled state [ 198.855576][ T9041] F2FS-fs (loop1): invalid crc value [ 198.887540][ T9041] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 198.915279][ T9062] loop6: detected capacity change from 0 to 4096 [ 198.946637][ T9065] netlink: 'syz.5.1681': attribute type 1 has an invalid length. [ 198.974016][ T9041] F2FS-fs (loop1): recover fsync data on readonly fs [ 199.029299][ T9041] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 199.039357][ T9062] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 199.041015][ T6446] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 199.057406][ T6446] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 199.058998][ T9041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.152155][ T9041] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 199.193913][ T9071] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 199.484878][ T9073] loop4: detected capacity change from 0 to 8192 [ 199.494592][ T9077] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 199.566861][ T9073] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 199.603805][ T9073] REISERFS (device loop4): using ordered data mode [ 199.610933][ T9073] reiserfs: using flush barriers [ 199.621178][ T9073] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.637991][ T9073] REISERFS (device loop4): checking transaction log (loop4) [ 199.657487][ T9073] REISERFS (device loop4): Using r5 hash to sort names [ 199.664644][ T9073] REISERFS (device loop4): using 3.5.x disk format [ 199.671919][ T9073] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 199.707954][ T9087] loop1: detected capacity change from 0 to 256 [ 199.858291][ T9087] FAT-fs (loop1): Directory bread(block 64) failed [ 199.908563][ T9087] FAT-fs (loop1): Directory bread(block 65) failed [ 199.942611][ T9087] FAT-fs (loop1): Directory bread(block 66) failed [ 199.971697][ T9087] FAT-fs (loop1): Directory bread(block 67) failed [ 199.988104][ T9087] FAT-fs (loop1): Directory bread(block 68) failed [ 200.054386][ T9087] FAT-fs (loop1): Directory bread(block 69) failed [ 200.075132][ T9087] FAT-fs (loop1): Directory bread(block 70) failed [ 200.095135][ T9102] loop4: detected capacity change from 0 to 1024 [ 200.112215][ T9087] FAT-fs (loop1): Directory bread(block 71) failed [ 200.118866][ T9087] FAT-fs (loop1): Directory bread(block 72) failed [ 200.192746][ T9106] Context (ID=0x0) not attached to queue pair (handle=0x4d8:0xdc) [ 200.200828][ T9087] FAT-fs (loop1): Directory bread(block 73) failed [ 200.329728][ T9] hfsplus: b-tree write err: -5, ino 25 [ 200.339873][ T9] hfsplus: b-tree write err: -5, ino 4 [ 200.375898][ T9] hfsplus: b-tree write err: -5, ino 2 [ 200.416321][ T9] hfsplus: b-tree write err: -5, ino 17 [ 200.418881][ T9114] trusted_key: encrypted_key: key user:syz not found [ 200.770201][ T9131] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 201.229834][ T4860] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 201.238215][ T4175] EXT4-fs error: 280 callbacks suppressed [ 201.238233][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 201.267307][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 201.293376][ T9139] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1713: Detected aborted journal [ 201.294305][ T4175] EXT4-fs: 242 callbacks suppressed [ 201.294316][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 201.318276][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 201.326685][ T9139] EXT4-fs (sda1): Remounting filesystem read-only [ 201.331364][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 201.354175][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 201.394185][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 201.413129][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 201.431868][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 201.444370][ T9148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1718: Detected aborted journal [ 201.456888][ T9148] EXT4-fs (sda1): Remounting filesystem read-only [ 201.467887][ T9148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1718: Detected aborted journal [ 201.479535][ T9148] EXT4-fs (sda1): Remounting filesystem read-only [ 201.487860][ T9148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1718: Detected aborted journal [ 201.499853][ T9148] EXT4-fs (sda1): Remounting filesystem read-only [ 201.506458][ T9148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1718: Detected aborted journal [ 201.517694][ T9148] EXT4-fs (sda1): Remounting filesystem read-only [ 201.524860][ T9148] EXT4-fs (sda1): Remounting filesystem read-only [ 201.632777][ T9154] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1720'. [ 201.669700][ T4860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.715043][ T4860] usb 2-1: not running at top speed; connect to a high speed hub [ 201.799703][ T4860] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 201.969719][ T4860] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 201.989083][ T4860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.008014][ T4860] usb 2-1: Product: syz [ 202.013525][ T4860] usb 2-1: Manufacturer: syz [ 202.019665][ T4860] usb 2-1: SerialNumber: syz [ 202.028253][ T9164] set_capacity_and_notify: 1 callbacks suppressed [ 202.028267][ T9164] loop6: detected capacity change from 0 to 8 [ 202.167286][ T9160] loop4: detected capacity change from 0 to 32768 [ 202.268024][ T9167] loop6: detected capacity change from 0 to 4096 [ 202.337860][ T9167] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 202.399753][ T4860] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 202.441879][ T4860] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.489665][ T4860] usb 2-1: unable to issue vendor read request (ret = -71) [ 202.509689][ T4860] usb 2-1: unable to issue vendor read request (ret = -71) [ 202.553183][ T4860] usb 2-1: unable to issue vendor read request (ret = -71) [ 202.599735][ T4860] usb 2-1: unable to issue vendor read request (ret = -71) [ 202.646123][ T4860] usb 2-1: USB disconnect, device number 18 [ 202.936639][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.068269][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 203.084478][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 203.095503][ T9188] netlink: 'syz.4.1733': attribute type 19 has an invalid length. [ 203.114153][ T9190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1734'. [ 203.644616][ T9192] loop4: detected capacity change from 0 to 32768 [ 203.704373][ T9200] loop1: detected capacity change from 0 to 8192 [ 203.763909][ T9204] loop5: detected capacity change from 0 to 128 [ 203.789819][ T9192] ERROR: (device loop4): dtReadFirst: stbl[0] out of bound [ 203.789819][ T9192] [ 203.827648][ T9204] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 203.842739][ T9200] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 203.854567][ T9204] hpfs: filesystem error: improperly stopped [ 203.861038][ T9204] hpfs: You really don't want any checks? You are crazy... [ 203.869088][ T9204] hpfs: hpfs_map_sector(): read error [ 203.874920][ T9204] hpfs: code page support is disabled [ 203.881006][ T9204] hpfs: hpfs_map_4sectors(): unaligned read [ 203.887121][ T9204] hpfs: hpfs_map_4sectors(): unaligned read [ 203.893491][ T9204] hpfs: filesystem error: unable to find root dir [ 203.895612][ T9200] REISERFS (device loop1): using ordered data mode [ 203.912631][ T9204] hpfs: hpfs_map_4sectors(): unaligned read [ 203.939652][ T9200] reiserfs: using flush barriers [ 203.967696][ T9192] ERROR: (device loop4): remounting filesystem as read-only [ 204.001327][ T9200] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 204.029874][ T9200] REISERFS (device loop1): checking transaction log (loop1) [ 204.068366][ T9200] REISERFS (device loop1): Using r5 hash to sort names [ 204.107514][ T9200] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 204.136697][ T9214] loop5: detected capacity change from 0 to 256 [ 204.186790][ T9200] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 204.277193][ T9200] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 204.422442][ T9220] loop3: detected capacity change from 0 to 512 [ 204.438241][ T9222] loop6: detected capacity change from 0 to 512 [ 204.626130][ T9220] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 204.702558][ T9222] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 204.728464][ T9220] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.737676][ T9239] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 204.758769][ T9222] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.858702][ T9222] EXT4-fs error (device loop6): ext4_xattr_block_list:713: inode #12: comm syz.6.1738: corrupted xattr block 6 [ 205.109153][ T9247] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 205.335014][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 205.483350][ T9258] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1764'. [ 205.703496][ T9249] loop1: detected capacity change from 0 to 32768 [ 205.739607][ T5007] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.764033][ T9249] [ 205.764033][ T9249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.764033][ T9249] [ 205.815711][ T9273] SQUASHFS error: Failed to read block 0x260685: -5 [ 205.838532][ T9273] SQUASHFS error: Unable to read metadata cache entry [260685] [ 205.861907][ T4360] kernel read not supported for file /dsp1 (pid: 4360 comm: kworker/1:12) [ 205.870722][ T151] ERROR: (device loop1): diWrite: ixpxd invalid [ 205.870722][ T151] [ 205.882478][ T9273] SQUASHFS error: Unable to read directory block [260685:0] [ 205.910417][ T151] ERROR: (device loop1): txCommit: [ 205.910417][ T151] [ 205.929547][ T151] jfs_write_inode: jfs_commit_inode failed! [ 205.935879][ T4193] [ 205.935879][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.935879][ T4193] [ 205.947529][ T4193] [ 205.947529][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.947529][ T4193] [ 206.163989][ T5007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.178797][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1771'. [ 206.178912][ T5007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.199832][ T5007] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 206.215902][ T5007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.236596][ T5007] usb 5-1: config 0 descriptor?? [ 206.264790][ T9286] EXT4-fs error: 198 callbacks suppressed [ 206.264805][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.266320][ T9285] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1776: Detected aborted journal [ 206.275403][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.320039][ T9288] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1778: Detected aborted journal [ 206.320194][ T9285] EXT4-fs: 176 callbacks suppressed [ 206.320204][ T9285] EXT4-fs (sda1): Remounting filesystem read-only [ 206.344163][ T9286] EXT4-fs (sda1): Remounting filesystem read-only [ 206.353149][ T9288] EXT4-fs (sda1): Remounting filesystem read-only [ 206.363233][ T9288] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1778: Detected aborted journal [ 206.364487][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.375878][ T9288] EXT4-fs (sda1): Remounting filesystem read-only [ 206.392751][ T9286] EXT4-fs (sda1): Remounting filesystem read-only [ 206.408664][ T9288] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1778: Detected aborted journal [ 206.422487][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.437214][ T9286] EXT4-fs (sda1): Remounting filesystem read-only [ 206.445367][ T9288] EXT4-fs (sda1): Remounting filesystem read-only [ 206.449571][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.469852][ T9286] EXT4-fs (sda1): Remounting filesystem read-only [ 206.476607][ T9286] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1777: Detected aborted journal [ 206.488557][ T9286] EXT4-fs (sda1): Remounting filesystem read-only [ 206.503939][ T9259] EXT4-fs (sda1): Remounting filesystem read-only [ 206.512020][ T4190] Bluetooth: hci4: link tx timeout [ 206.517230][ T4190] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 206.654916][ T4360] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 206.757414][ T5007] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.769303][ T9299] erofs: (device loop5): mounted with root inode @ nid 36. [ 206.791048][ T5007] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.798505][ T5007] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.815752][ T5007] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.827242][ T5007] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.841277][ T5007] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 206.935007][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1784'. [ 206.979322][ T9302] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1784'. [ 206.990289][ T5007] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 0 [ 207.021341][ T9296] JBD2: Ignoring recovery information on journal [ 207.025793][ T5007] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 207.059159][ T5007] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 207.079209][ T5007] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 207.139739][ T4360] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 207.168484][ T4360] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 207.188545][ T5007] playstation: probe of 0003:054C:0DF2.000D failed with error -22 [ 207.205091][ T9296] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 207.210849][ T4360] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.284067][ T5007] usb 5-1: USB disconnect, device number 17 [ 207.337911][ T9319] set_capacity_and_notify: 4 callbacks suppressed [ 207.337929][ T9319] loop1: detected capacity change from 0 to 512 [ 207.341453][ T9318] udevd[9318]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 207.419136][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 207.499852][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 207.510756][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 207.540014][ T4360] usb 7-1: Product: syz [ 207.554477][ T4360] usb 7-1: Manufacturer: syz [ 207.559160][ T4360] usb 7-1: SerialNumber: syz [ 207.604245][ T9289] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.686257][ T9327] usbcore.quirks: string doesn't fit in 127 chars. [ 207.715517][ T9331] loop1: detected capacity change from 0 to 512 [ 207.824528][ T9331] EXT4-fs (loop1): can't mount with commit=10, fs mounted w/o journal [ 207.863662][ T4360] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.139434][ C0] usblp0: nonzero write bulk status received: -71 [ 208.147987][ T4860] usb 7-1: USB disconnect, device number 6 [ 208.155731][ T4860] usblp0: removed [ 208.160881][ T9355] zero sized request [ 208.556790][ T9364] loop3: detected capacity change from 0 to 8192 [ 208.717118][ T9364] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 208.730896][ T9364] REISERFS (device loop3): using ordered data mode [ 208.753180][ T9364] reiserfs: using flush barriers [ 208.804001][ T9364] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.839027][ T9348] loop4: detected capacity change from 0 to 32768 [ 208.920081][ T9364] REISERFS (device loop3): checking transaction log (loop3) [ 209.060305][ T9370] loop1: detected capacity change from 0 to 40427 [ 209.158274][ T9370] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 209.166076][ T9364] REISERFS (device loop3): Using tea hash to sort names [ 209.189628][ T9370] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 209.216531][ T9364] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 209.245802][ T9381] loop4: detected capacity change from 0 to 1024 [ 209.254155][ T9370] F2FS-fs (loop1): invalid crc value [ 209.285563][ T9372] loop5: detected capacity change from 0 to 40427 [ 209.326821][ T9370] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 209.421706][ T9372] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 209.431736][ T9372] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 209.480144][ T9372] F2FS-fs (loop5): invalid crc value [ 209.488449][ T9381] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.1818: lblock 2 mapped to illegal pblock 2 (length 1) [ 209.526501][ T9372] F2FS-fs (loop5): Found nat_bits in checkpoint [ 209.574946][ T9381] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 209.632052][ T9381] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.1818: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.710512][ T9370] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 209.733405][ T9370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 209.745860][ T9381] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 209.757120][ T9372] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 209.770746][ T9372] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 209.805334][ T9381] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1818: Failed to acquire dquot type 0 [ 209.843356][ T9381] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 209.922957][ T9381] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.1818: mark_inode_dirty error [ 209.997352][ T9381] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 210.020435][ T9381] EXT4-fs (loop4): 1 orphan inode deleted [ 210.026229][ T9381] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 210.057288][ T4193] attempt to access beyond end of device [ 210.057288][ T4193] loop1: rw=2049, want=40976, limit=40427 [ 210.093849][ T155] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.125008][ T155] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 210.185265][ T155] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 210.227165][ T9406] loop3: detected capacity change from 0 to 2048 [ 210.334023][ T9406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.406210][ T151] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.444141][ T9412] loop6: detected capacity change from 0 to 1024 [ 210.466455][ T151] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 210.486412][ T151] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 210.513657][ T4197] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 210.576245][ T9412] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 210.590047][ T4197] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 210.604196][ T9414] loop1: detected capacity change from 0 to 256 [ 210.640461][ T4197] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 210.674143][ T9412] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,sb=0x0000000000000004,delalloc,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,usrquota,,errors=continue. Quota mode: writeback. [ 210.789697][ T9412] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.965202][ T9412] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 211.235631][ T9435] bridge0: port 3(batadv0) entered disabled state [ 211.282922][ T9435] device bridge_slave_1 left promiscuous mode [ 211.286538][ T9432] EXT4-fs error: 222 callbacks suppressed [ 211.286553][ T9432] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1836: Detected aborted journal [ 211.293978][ T9440] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1841: Detected aborted journal [ 211.327102][ T9438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1832: Detected aborted journal [ 211.338776][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.349140][ T9434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.1837: Detected aborted journal [ 211.364901][ T9438] EXT4-fs: 204 callbacks suppressed [ 211.364914][ T9438] EXT4-fs (sda1): Remounting filesystem read-only [ 211.376822][ T9440] EXT4-fs (sda1): Remounting filesystem read-only [ 211.386739][ T9434] EXT4-fs (sda1): Remounting filesystem read-only [ 211.418293][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.432593][ T9435] device bridge_slave_0 left promiscuous mode [ 211.438847][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.472960][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.481085][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.492848][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.500103][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.545981][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.568635][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.598680][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.605425][ T9443] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.613392][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.628346][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.635097][ T9436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1840: Detected aborted journal [ 211.646438][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.654775][ T9436] EXT4-fs (sda1): Remounting filesystem read-only [ 211.669743][ T8615] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 211.851805][ T472] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 211.869599][ T472] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 211.882580][ T472] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.882580][ T472] [ 211.892521][ T472] EXT4-fs (loop5): Total free blocks count 0 [ 211.898653][ T472] EXT4-fs (loop5): Free/Dirty block details [ 211.904944][ T472] EXT4-fs (loop5): free_blocks=4096 [ 211.911120][ T472] EXT4-fs (loop5): dirty_blocks=512 [ 211.916537][ T472] EXT4-fs (loop5): Block reservation details [ 211.922891][ T472] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 211.937616][ T472] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 211.959117][ T472] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.959117][ T472] [ 212.109684][ T8615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.134235][ T8615] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.160098][ T9459] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 212.162417][ T8615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.205489][ T8615] usb 2-1: config 0 descriptor?? [ 212.251395][ T9456] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 212.279995][ T9456] REISERFS (device loop4): using ordered data mode [ 212.303840][ T9456] reiserfs: using flush barriers [ 212.315568][ T9456] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.375300][ T9456] REISERFS (device loop4): checking transaction log (loop4) [ 212.380767][ T9467] device bridge_slave_1 entered promiscuous mode [ 212.419504][ T8132] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.547342][ T9456] REISERFS (device loop4): Using tea hash to sort names [ 212.554944][ T9456] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 212.711011][ T8615] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 212.732512][ T8615] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input16 [ 212.779678][ T8132] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.795910][ T8132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.899651][ T8132] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.918987][ T8132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.940403][ T8132] usb 4-1: SerialNumber: syz [ 212.943691][ T8615] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 213.067608][ T9488] udevd[9488]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 213.252046][ T8132] usb 4-1: 0:2 : does not exist [ 213.303151][ T8132] usb 4-1: USB disconnect, device number 12 [ 213.447641][ T9497] set_capacity_and_notify: 4 callbacks suppressed [ 213.447657][ T9497] loop4: detected capacity change from 0 to 256 [ 213.488627][ T9482] loop5: detected capacity change from 0 to 32768 [ 213.516780][ T9491] loop6: detected capacity change from 0 to 32768 [ 213.561416][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.579968][ T9482] read_mapping_page failed! [ 213.589756][ T9482] ERROR: (device loop5): txCommit: [ 213.589756][ T9482] [ 213.617035][ T9497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 213.631765][ T9498] jfs_unlink: dtDelete returned -116 [ 213.667754][ T9491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.686427][ T9498] jfs_unlink: dtDelete returned -116 [ 213.997393][ T8615] usb 2-1: USB disconnect, device number 19 [ 214.221595][ T6446] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.323160][ T6446] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.417202][ T6446] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 214.486056][ T6446] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.082881][ T9003] bridge0: port 3(syz_tun) entered disabled state [ 215.108669][ T9003] device syz_tun left promiscuous mode [ 215.114798][ T9003] bridge0: port 3(syz_tun) entered disabled state [ 215.800285][ T6446] device hsr_slave_0 left promiscuous mode [ 215.806657][ T6446] device hsr_slave_1 left promiscuous mode [ 215.813676][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.821640][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.829286][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.838237][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.848087][ T6446] device veth1_macvtap left promiscuous mode [ 215.854360][ T6446] device veth0_macvtap left promiscuous mode [ 215.860494][ T6446] device veth1_vlan left promiscuous mode [ 215.866279][ T6446] device veth0_vlan left promiscuous mode [ 216.019121][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 216.037418][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 216.050081][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.067221][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.132527][ T6446] bond0 (unregistering): Released all slaves [ 216.318124][ T3853] EXT4-fs error: 288 callbacks suppressed [ 216.318138][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 216.368593][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 216.791800][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 216.904502][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 216.977500][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 217.267149][ T6446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.317396][ T6446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.358065][ T6446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.395555][ T6446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.507647][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 217.528965][ T6446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.546211][ T9546] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 217.559891][ T9547] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 217.589331][ T6446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.612166][ T3853] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 217.631585][ T9548] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 217.649150][ T6446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.712047][ T6446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.817218][ T6446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.860772][ T6446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.905090][ T6446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.966910][ T6446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.080166][ T6446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.133985][ T6446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.195417][ T6446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.264214][ T6446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.904311][ T6446] device bond0 left promiscuous mode [ 219.910695][ T6446] device bond_slave_0 left promiscuous mode [ 219.916704][ T6446] device bond_slave_1 left promiscuous mode [ 219.926719][ T6446] device batadv0 left promiscuous mode [ 219.935433][ T6446] device hsr_slave_0 left promiscuous mode [ 219.941999][ T6446] device hsr_slave_1 left promiscuous mode [ 219.948557][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.963538][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.971084][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.978916][ T6446] device bridge_slave_1 left promiscuous mode [ 219.985247][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.994640][ T6446] device bridge_slave_0 left promiscuous mode [ 220.001347][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.019103][ T6446] device hsr_slave_0 left promiscuous mode [ 220.026900][ T6446] device hsr_slave_1 left promiscuous mode [ 220.033336][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.041105][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.048726][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.056632][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.064342][ T6446] device bridge_slave_1 left promiscuous mode [ 220.071750][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.085733][ T6446] device bridge_slave_0 left promiscuous mode [ 220.092378][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.171443][ T6446] ODEBUG: Out of memory. ODEBUG disabled [ 220.235132][ T6446] device hsr_slave_0 left promiscuous mode [ 220.243456][ T6446] device hsr_slave_1 left promiscuous mode [ 220.250721][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.258189][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.266344][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.276260][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.284285][ T6446] device bridge_slave_1 left promiscuous mode [ 220.290741][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.299192][ T6446] device bridge_slave_0 left promiscuous mode [ 220.305767][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.316525][ T6446] device hsr_slave_0 left promiscuous mode [ 220.323017][ T6446] device hsr_slave_1 left promiscuous mode [ 220.329293][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.337392][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.347920][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.360066][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.375861][ T6446] bridge0: port 3(batadv0) entered disabled state [ 220.384170][ T6446] device bridge_slave_1 left promiscuous mode [ 220.390562][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.399606][ T6446] device bridge_slave_0 left promiscuous mode [ 220.405848][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.490632][ T6446] device veth1_macvtap left promiscuous mode [ 220.496677][ T6446] device veth0_macvtap left promiscuous mode [ 220.503967][ T6446] device veth1_vlan left promiscuous mode [ 220.511655][ T6446] device veth0_vlan left promiscuous mode [ 220.518186][ T6446] device veth1_macvtap left promiscuous mode [ 220.524430][ T6446] device veth0_macvtap left promiscuous mode [ 220.530539][ T6446] device veth1_vlan left promiscuous mode [ 220.536299][ T6446] device veth0_vlan left promiscuous mode [ 220.543895][ T6446] device veth1_macvtap left promiscuous mode [ 220.550616][ T6446] device veth0_macvtap left promiscuous mode [ 220.556719][ T6446] device veth1_vlan left promiscuous mode [ 220.565107][ T6446] device veth0_vlan left promiscuous mode [ 220.571678][ T6446] device veth1_macvtap left promiscuous mode [ 220.577684][ T6446] device veth0_macvtap left promiscuous mode [ 220.586292][ T6446] device veth1_vlan left promiscuous mode [ 220.592719][ T6446] device veth0_vlan left promiscuous mode [ 220.909210][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 220.925566][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 220.936838][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.950682][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.009121][ T6446] bond0 (unregistering): Released all slaves [ 221.128516][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 221.141614][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 221.152617][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.167283][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.221442][ T6446] bond0 (unregistering): Released all slaves [ 221.397281][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 221.409341][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 221.424547][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.437053][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.489025][ T6446] bond0 (unregistering): Released all slaves [ 221.589306][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 221.608231][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 221.623057][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.635957][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.692584][ T6446] bond0 (unregistering): Released all slaves [ 222.904918][ T3560] EXT4-fs error: 193 callbacks suppressed [ 222.904932][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 222.924995][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 222.937002][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 222.949731][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 222.962830][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 222.974484][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0