last executing test programs: 11m56.121214364s ago: executing program 1 (id=4616): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) 11m55.50077952s ago: executing program 1 (id=4623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 11m55.156297187s ago: executing program 1 (id=4628): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 11m54.930762459s ago: executing program 1 (id=4631): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000540), 0x2, 0x550, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 11m54.055192524s ago: executing program 1 (id=4643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m52.783296615s ago: executing program 1 (id=4655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6a4e0866e5a71825c5a9c293b0d4c5e84161b964ac42235f39a4b1f1"], 0xfdef) 11m52.332484861s ago: executing program 32 (id=4655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6a4e0866e5a71825c5a9c293b0d4c5e84161b964ac42235f39a4b1f1"], 0xfdef) 11m45.643036277s ago: executing program 6 (id=4705): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0xc000, &(0x7f0000000100)=ANY=[], 0xf6, 0x69f, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/115, 0x73) getdents64(r0, 0x0, 0x0) 11m45.152007515s ago: executing program 6 (id=4709): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000300), &(0x7f00000003c0)=""/176}, 0x20) 11m44.830877896s ago: executing program 6 (id=4713): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 11m42.97671858s ago: executing program 6 (id=4734): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x1) 11m42.907179667s ago: executing program 6 (id=4735): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11m41.898716713s ago: executing program 6 (id=4744): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="917093") 11m41.056937971s ago: executing program 33 (id=4744): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="917093") 10m47.88843929s ago: executing program 2 (id=5205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0xee00) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2a, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 10m47.583402758s ago: executing program 2 (id=5208): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) 10m47.319360032s ago: executing program 2 (id=5211): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 10m47.04092879s ago: executing program 2 (id=5215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10m46.828410399s ago: executing program 2 (id=5218): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 10m46.179240792s ago: executing program 2 (id=5223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, 0x0) 10m45.606581478s ago: executing program 34 (id=5223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, 0x0) 9.52103466s ago: executing program 0 (id=10813): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 8.876258597s ago: executing program 7 (id=10818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 8.495094208s ago: executing program 7 (id=10821): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) semget$private(0x0, 0x20000000102, 0x0) 6.278986824s ago: executing program 7 (id=10836): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000280)=""/83, 0x53, 0x6) 6.131543639s ago: executing program 0 (id=10837): fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.94442174s ago: executing program 7 (id=10840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file0\x00', 0x2200000, &(0x7f0000000600)={[{@dax}]}, 0x1, 0xba4c, &(0x7f0000020c00)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8dG0ZG2VQkAlUx2tAGZPBDFsUBpGiMaCETCW+Qoy8RAzEB874AMPUwEACG0EYiAomMsCEt2GogZrTe27X3nXN+t/+/zr6+STruefc/s5u77f/cylZ2+55CzuyrCYr6c0qXb/imGcbb2j/wTen3Xv4kmuqXi8dbZtU3N1QbPcttlOy/pO15berS4dqvrPmF9X5TvXg8+5WX1/1nix7X7HbVmxbS5vLmsrv11ehODy5fH/1wMOo+mrpz4D6/M2X5045d/B58nfMsuzQrT7Qcaq7ff684jnJBnWbUNxdteW+/m1N6c+cP2bZnHXZNj8/xlT+OCefvvoLT4z1A9kVdLfP76zo31Z0rirWY0PlGhyPKj/PzzmjaXnxFFYNvh7tarrb5x2XjbCO//mXb/T2la6btVmW1WVZNjHLsklj3YOdo72jpSO/5pf3i+zl9T95uM+LO/571c+yLHt38TpxWPm1ANi1tHe0HDXM+q8baf3feeyGG7dj/c9J+5EAo9XZ3tGSr/WK9T9ppPU/7a6jFxVfdLeWpt4e2w8CAAAAABjWiktXXbB42bKei91www03Bm6M9ZUJiG3Loh/rRwKkluI/J8b6YwQAAIDxrrOr/cUJVUMOTRi8s/dDPf3bmZu7z19119zjy9vi7gXDnHLI9/n39fX1rTlt2dnF7sSK75edVDmcn3/pvYsvKXYbKr//oLb/aG121nlLl/Ucmv9VU2uzS/Kdpvy802qzr+U7zfnO9NrstnynpX+nPlub7xxyzvJl5+YHDgh8xt5ZOrt6swlDimVDPhsG9196b++vytsRTlk+W/8Plcj7v9F0850V95Vto//A+ff9P/z5Au8oo+t/9dXl7Qin3Gr9b1gyq2m4+7bdf+D8U/SPa5jr/5BGldf9iut/wzCnHJj/9alffzbvP+On668pDtVsz/V/0PmnVvbvP/nA9T8/1X7l63/+2rL/Dj0Z41Bn15UvjrT+R+5f86Hi3aoHzQ6craXv1s/k/e++tu2x4lDtKPvvN9L6r2rY6nrCKHV23dhXsf5H0T+bPswpB5q8a27nmrz/q289/Mig+0bTf//K/o0rL/xs44pLV81YeuHiJT1Lei5qaZ7V2tzaNHv2rMb+S0Lp7Y49KePIjq3/bLeKmaos239gfvblR2/M+//5plNuKQ5NGmX/aSOu/7OGPlYGmVKd1dVllyxeufLiptLb8m5z6W3p3YbpP4rX/6nlL6Lqi21Vln1wYP7AK14/OO9/x8bXbi4O1Y2y//SR+tdt+XsJtIPr/9yKmSH9H3y456a8/4qDPnxBcWi0r/8HjLj+e63/HdXZVfE/fHayvP9JbxyxKXD8QF//xZWif/2m1tWB4x/RP64U/de+0HJb4PhB+seVov899zWeHjh+sP5xpej/uQcOWhU4PkP/uFL0n/Hk9D0Dxw/RP64U/f/x+NSZgeON+seVov+Jz1xwVeD4ofrHlaL/d19efkPgeJP+caXo//u+cx4IHG/WP64U/Xd/ZclLgeMt+seVov/Kpy/bK3B8pv5xpej/2w1XHBk4/lH940rRf9PaFScHjs/SP64U/RvXf/7iwPFW/eNK0f+F53/4m8Dx2frHlaJ/w3M3fy9w/DD940rR/7LNP/lX4Pjh+seVov+db97+aOD4EfrHlaL/Qxt/OS1w/Ej940rRv+aJn4f+O82P6R9Xiv5n3n/P+YHjH9c/rhT9v7XurhMCx+dsu3/NznqI41qK/n3PnPBM4Hib9R9Xiv6zXl4Q+vuh2/WPK0X/C/vm/zhwvEP/uFL0v+WVo74SOH6U/nGl6P/U02deHjg+V/+4UvR/74ZFiwLHj9Y/rhT9O9ee2hw4Pk//uFL0712/8P2B4/P1jytF/3nPf+mvgePH6B9Xiv6rn7vqP4HjnfrHlaL/nzZfc13g+LH6x5Wi/95vrl4TOL5A/7hS9D9743XtgePH6R9Xiv63P/Ht8wLHj9c/rhT9X7n/+j0Cx7v0jytF/8PWfT/0h62foH9cKfpf++rG6wPHT9Q/rhT957796N2B45/QP64U/fd56enHAsdP0j+uFP0f//tTrwWOL9Q/rhT9f/TwuomB45/UP64U/c/63R+G+z0h2+Nk/eNK0f+IR9Z3Bo6fon9cKfq/9rcHLwocP1X/uFL0n/nvvW4NHO/WP64U/d96Y58rA8c/pX9cKfrfumnP5wPHP61/XCn6L3/hA+sDxxfpH1eK/pPv2/3wwPHT9I8rRf8nH9hj78Dx0/WPK0X/Lz45YWXg+Bn6x5Wi/4LHJy4MHD9TfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27gTe8rnw//iZ1YwkpJKisWsVKkplqUhps4TIkl22kL3QIkuLJUVa7KRNoUKWihSRNZVKkRYlISEy/8eYuYzxHk2/fzXTfT+fj4d7zvme7xyf83mdz7l37vfe7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw9F6q661ymAwesqt/R5z/zG7vPaWpY5d+aQjF7/4ZVsdMuKuyVtXGjfl7gkTpzF46MFWmnTfyMm7jD7qzJNGTroxcurHnX38+BFzDkbMm0e190b/ZNhzDV2Z/KATBoPBiIMn//ew8ZM+rHjTTdf9k8eqtt7Kq606afIm//dwt1FT7p6y/eHroyf/t8LGg8EKGw6m+/qY+da89Ya7Z/YY/hest/Jqq0/TfzCl80Pdp13fLcZPmYih29O+zs++ersVZlq0f6P1Vl51jUmtp7eOT1l3pZMmPvS+PvrYwWD0cYPB6OMHg9EnzNQ4/NusvMqyq0x6zx+6Pbn6fkNfEKT39xELrbX+7IPBYMzkzxOjTxz6XAD8b1l5lWVfFdb/2KH70/pf8aY557f+4X/f6iuvsuxgqq9zJ2/db+jv93H93zLqLYfNvBEDAAAA/6oHbzvn/CnH+kYOBgsOpjne+5Ap3xcYcfqFV1450wY6awjHyR77MxP/YyZ1HnfahMFgh3Vm9lCYCUbM7AEwU+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/sWmc/x/rqHLlY9Y+5VTdl1suXnXPXPaPz9p27j/+qhnmuF6/H+wzYjJLSc132YwGLxx5TXXXnIwGJy57rzLLTx4+L7lJ923wjyjppwgYMmHPi42nQeeMPXl7A8/xukPPf7qE48bNWKaQUzlDa8+d6+t17vnRdNeLjH95/Hw+SXOXP3Vcwz9LsvIaXaa3mt16PGHnsu0naeMfclJY19q1+13WmqXPfd6/jbbb7rVFlttscOyy7xkuWWWW3r55V+y1JbbbLfFCyd/nM6cTZ6VRWZkzsZOO2e3rTz1nE373KY3ZxMef84eesRbDlv37KE5G/0vztkijz9nE7YZGuuEMYNNHpqaSf/LRccM9ph0Y+nZpnpvmW/Svi+fZ+RgcOgjT3TStdkefg2O2G+bf8N5S6ZcLjTlcuF43pKzpnfeksHQeUuGTpjw0skXu543tN+0v2c9ZfMMn7dk91UeWHjwmN/L+o/4P33+f0yv5Uc8PFFDJw2Zss/kXo+cZ2Jo2laa6jwTy6Vzyfw7PWa8E0Y+/LpO453ye3Ejppn/x/u9uMFWW+6z2JSoy03+Uw/+n6Pk9441Hvo4vfU8YZrLx3vvGPXI1Ue2bnH5AtO+d7x++kN81LoYmqPZptlpeu8de2x68TZTvzdN571jjW2m/KLxI+8dk/63iwy9d0wa++JjBodOurHMpBtLjBmcOunGsg/dGD+4cNKNF2y243abj3jo89VjXgdLjnjUDzyG1+2q07xuZ+D8OCteOhiseEl6XtOfziy9bsc+znjz73MPHvf3uS/YdKEzBoPBE6c8r5cOjf3/Io139OOPN5x/YvB4558YHHflbif8m8f78Dp76LU25W16yen8mUets7kes872HzXVypjRr2s2D/tPvj7fw492/BZXXDY0R2Omedx/9jl66Lmk/kNf801txH6DEY83N9P7OuxRczPn48/NjH79suSULzDGP87cPO+ufZ89NDdj/8W5WWI6czP118NTGzsYjH/03IwevGbSVzRT5mbxGZmbOf49r5vZw/6Try/28KbrX7PP8kNzE+Yifv4fevzF/8W5GbHJw6+bRR+6b+GRg7FjB3tsuuuuOy89+ePQzWUmf3z8NbjojMzluH/PXM4/5V1n5GMn5+FN2548cdn/6xpc9F+dywmDkUN/595m2sXy7+P7P93076Z/N/276d9N/276d9O/2HSO/08Y+r7gQSNOXGvKN2PGXHTP3LvO7PHOZMP6+P+Uvo86/r/r3PdcNHLw8H2Pe3x28j6z5PHZ5SZf7L300H7THh+csnmGj8/efcgl6w/+O8dn/0+G1uoMfN/Q+383/bvp303/bvp307/bv9p/xf/QOJg5rP9u+nfTv5v+3fTvpn83/YtN5/j/C4d+DuCqXR44ccqB0DG7rL3C/TN7vDPZsD7+P6Xvo47/37/C2ruMHDx83+Me/5+8T8fx/xVuPPqAwSx8/H9orTr+zz+hfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvoXm87x/5WGfg5gzA6LLDL08wDX3H7gqJk93plsuB7/9+//9/L+303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9C825fj/YJp/9vDNXhdROP7/v206/d+if9TSf039o5b+a+kftfRfW/+opf86+kct/d+qf9TSf139o5b+6+kftfRfX/+opf/b9I9a+m+gf9TSf0P9o5b+b3/8/mP+08OaVbX038j6j1r6b6x/1NJ/E/2jlv6b6h+19H+H/lFL/830j1r6b65/1NJ/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/936h+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+r9L/6il/876Ry39d9E/aum/q/5RS/936x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+79E/aun/Xv2jlv776h+19N9P/6il//76Ry3936d/1NL//fpHLf0/oH/U0v+D+kct/Q/QP2rp/yH9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rp/2H9o5b+H9E/aun/Uf2jlv4f0z9q6X9oWf+xM7hfS//DyvrPqJb+h+sftfQ/Qv+opf/H9Y9a+h+pf9TS/xP6Ry39P6l/1NL/KP2jlv5H6x+19P+U/lFL/2P0j1r6f1r/qKX/Z/SPWvp/Vv+opf/n9I9a+h+rf9TS/zj9o5b+x+sftfQ/Qf+opf+J+kct/U/SP2rpf7L+UUv/U/SPWvqfqn/U0v/z+kct/U/TP2rp/wX9o5b+X9Q/aun/Jf2jlv5f1j9q6f8V/aOW/qfrH7X0/6r+UUv/r+kftfQ/Q/+opf+Z+kct/c/SP2rp/3X9o5b+39A/aun/Tf2jlv5n6x+19D9H/6il/7n6Ry39v6V/1NL/PP2jlv7n6x+19L9A/6il/4X6Ry39v61/1NL/O/pHLf2/q3/U0v8i/aOW/hfrH7X0/57+UUv/S/SPWvp/X/+opf8P9I9a+l+qf9TS/zL9o5b+P9Q/aul/uf5RS/8r9I9a+v9I/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+P9Y/aul/vf5RS/+f6B+19P+p/lFL/5/pH7X0v0H/qKX/z/WPWvr/Qv+opf8v9Y9a+t+of9TS/1f6Ry39f61/1NL/Jv2jlv436x+19P+N/lFL/1v0j1r6/1b/qKX/7/SPWvr/Xv+opf8f9I9a+t+qf9TS/4/6Ry39/6R/1NL/Nv2jlv5/1j9q6X/7o/rP9l8f1qyqpf9frP+opf8d+kct/e/UP2rpf5f+UUv/v+oftfS/W/+opf/f9I9a+t+jf9TS/179o5b+9+kftfT/u/5RSf/xA/2jkv6DB/SPWvr/Q/+opf+D+kct/SfqH5X0HzHQP2rpP0L/qKX/SP2jEcfssvkTBoNh33+U/lHL+h+tf9TSf4z+UUv/sfpHLf1n0z9q6T9O/6il/3j9o5b+s+sftfR/gv5RS/859I9a+j9R/6il/5z6Ry39n6R/1NJ/Lv2jlv5z6x+19J9H/6il/5P1j1r6z6t/1NL/KfpHLf2fqn/U0v9p+kct/efTP2rp/3T9o5b+8+sftfR/hv5RS/9n6h+19F9A/6il/4L6Ry39n6V/1NJ/gv5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/Z+sftfR/jv5RS//n6h+19H+e/lFL/+frH7X0f0F7//snTjbN5pb+S7X3n46W/i/UP2rpv7T+UUv/ZfSPWvovq3/U0v9F+kct/V+sf9TS/yX6Ry39l9M/aum/vP5RS/+X6h+19H+Z/lFL/xX0j1r6v1z/qKX/K/SPWvq/Uv+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvq/Sv+opf+r9Y9a+r9G/6il/6r6Ry39V9M/aun/Wv2jlv6r6x+19H+d/lFL/9frH7X0X0P/qKX/G/SPWvq/Uf+opf+b9I9a+r9Z/6il/1v0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/1v1j1r6r6t/1NJ/Pf2jlv7r6x+19H+b/lFL/w30j1r6b6h/9Ej/MYPBYPj2f7v+Ucv630j/qKX/xvpHLf030T9q6b+p/lFL/3foH7X030z/qKX/5vpHLf230D9q6b+l/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19H+n/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9p+v3H/1fGNYtq6f8u6z9q6b+z/lFL/130j1r676p/1NL/3fpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv576x+19N9H/6il/3v0j1r6v1f/qKX/vvpHLf33a+s/gz/V0NJ//7b+M6il//v0j1r6v1//qKX/B/SPWvp/UP+opf8B+kct/T+kf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/T+sf9TS/yP6Ry39P6p/NDz77zdqME3/j+kfDc/+k03d/1D9o5b+h+n/sKnnoaX/4fpHLf2P0D9q6f9x/aOW/kfqH7X0/4T+UUv/T+oftfQ/Sv+opf/R+kct/T+lf9TS/xj9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19P+8/lFL/9P0j1r6f0H/qKX/F/WPWvp/Sf+opf+X9Y9a+n9F/6il/+n6Ry39v6p/1NL/a/pHLf3P0D9q6X+m/lFL/7P0j1r6f13/qKX/N/SPWvp/U/+opf/Z+kct/c/RP2rpf67+UUv/b+kftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/b+sftfT/jv5RS//v6h+19L9I/6il/8X6Ry39v6d/1NL/Ev2jlv7f1z9q6f8D/aOW/pfqH7X0v0z/qKX/D/WPWvpfrn/U0v8K/aOW/j/SP2rpf6X+UUv/q/SPWvpfrX/U0v8a/aOW/tfqH7X0v07/qKX/j/WPWvpfr3/U0v8ng8Fg7Mwa0yyspf9Prf+opf/P9I9a+t+gf9TS/+f6Ry39f6F/1NL/l/pHLf1v1D9q6f8r/aOW/r/WP2rpf5P+UUv/m/WPWvr/Rv+opf8t+kct/X+rf9TS/3f6Ry39f69/1NL/D/pHLf1v1T9q6f9H/aOW/n/SP2rpf5v+UUv/P+sftfS/Xf+opf9f9I9a+t+hf9TS/079o5b+d+kftfT/q/5RS/+79Y9a+v9N/6il/z36Ry3979U/aul/n/5RS/+/6x+19L9f/6il/wP6Ry39/6F/NKn/xBGDwXDv/6D+Ucv6n6h/VNL/oav6P1ZL/xH6Ry39R+oftfQfpX/U0n+0/lFL/zH6Ry39x+oftfSfTf+opf84/aOW/uP1j1r6z65/1NL/CfpHLf3n0D9q6f9E/aOW/nPqH7X0f5L+UUv/ufSPWvrPrX/U0n8e/aOW/k/WP2rpP6/+UUv/p+gftfR/qv5RS/+n6R+19J9P/6il/9P1j1r6z69/1NL/GfpHLf2fqX/U0n8B/aOW/gvqH7X0f5b+UUv/CfpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5Iz0H/Cf3Jcs6iW/s+2/qOW/s/RP2rp/1z9o5b+z9M/aun/fP2jlv4v0D9q6b+U/lFL/xfqH7X0X1r/qKX/MvpHLf2X1T9q6f8i/aOW/i/WP2rp/xL9o5b+y+kftfRfXv+opf9L9Y9a+r9M/6il/wr6R8O+/2yTr75c/2jY959y9RX6Ry39X6l/1NJ/Rf2jlv4rTaf/PEv9twY2a2rpv7L1H7X0X0X/qKX/q/SPWvq/Wv+opf9r9I9a+q+qf9TSfzX9o5b+r9U/aum/uv5RS//X6R+19H+9/lFL/zX0j1r6v0H/qKX/G/WPWvq/Sf+opf+b9Y9a+r9F/6il/5r6Ry3919I/aum/tv5RS/919I9a+r9V/6il/7r6Ry3919M/aum/vv5RS/+36R+19N9A/6il/4b6Ry39365/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry3936F/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/536Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+79I/aum/s/5RS/9d9I9a+u+qf9TS/936Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf979I9a+r9X/6il/776Ry3999M/aum/v/5RS//36R+19H+//lFL/w/oH7X0/6D+UUv/A/SPWvp/SP+opf+B+kct/Q/SP2rpf7D+UUv/Q/SPWvp/WP+opf9H9I9a+n9U/6il/8f0j1r6H6p/1NL/MP2jlv6H6x+19D9C/6il/8f1j1r6H6l/1NL/E/pHLf0/WdZ/vxncr6X/UWX9Z1RL/6P1j1r6f0r/aFj3H/fw1pHH6B8N6/6PbB35af2jlv6f0T9q6f9Z/aOW/p/TP2rpf6z+UUv/4/SPWvofr3/U0v8E/aOW/ifqH7X0P0n/qKX/yfpHLf1P0T9q6X+q/lFL/8/rH7X0P03/6NH9B8O2/xf0j1rW/xf1j1r6f0n/qKX/l/WPWvp/Rf+opf/p+kct/b+qf9TS/2v6Ry39z9A/aul/pv5RS/+z9I9a+n9d/6il/zf0j1r6f1P/qKX/2fpHLf3P0T9q6X+u/lFL/2/pH7X0P0//qKX/+fpHLf0v0D9q6X+h/o+y4JTLlv7f1j9q6f8d/aOW/t/VP2rpf5H+UUv/i/WPWvp/T/+opf8l+kct/b+vf9TS/wf6Ry39L9U/aul/mf5RS/8f6h+19L9c/6il/xX6Ry39f6R/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39r9U/aul/nf5RS/8f6x+19L9e/6il/0/0j1r6/1T/qKX/z/SPWvrfoH/U0v/n+kct/X+hf9TS/5f6Ry39b9Q/aun/K/2jlv6/1j9q6X+T/lFL/5v1j1r6/0b/qKX/LfpHLf1/q3/U0v93+kct/X+vf9TS/w/6Ry39b9U/aun/R/2jlv5/0j9q6X+b/lFL/z/rH7X0v13/qKX/X/SPWvrfoX/U0v9O/aOW/nfpH7X0/6v+UUv/u/WPWvr/Tf+opf89+kct/e/VP2rpf5/+UUv/v+sftfS/X/+opf8D+kct/f+hf9TS/0H9o5b+E/WPSvqPGugftfQfoX/U0n+k/lFL/1H6Ry39R+sftfQfo3/U0n+s/lFL/9n0j1r6j9M/auk/Xv+opf/s+kct/Z+gf9TSfw79o5b+T9Q/auk/p/5RS/8n6R+19J9L/6il/9z6Ry3959E/aun/ZP2jlv7z6h+19H+K/lFL/6fqH7X0f5r+UUv/+fSPWvo/Xf+opf/8+kct/Z+hf9TS/5mTnuv4mTWoWVdL/wWs/6il/4L6Ry39n6V/1NJ/gv5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/Z+sftfR/jv5RS//n6h+19H+e/lFL/+frH7X0f4H+UUv/pfSPWvq/UP+opf/S+kct/ZfRP2rpv6z+UUv/F+kftfR/sf5RS/+X6B+19F9O/6il//K9/Wd7vDtb+r+0t//jaun/Mv2jlv4r6B+19H+5/lFL/1foH7X0f6X+UUv/FfWPWvqvpH/U0n9l/aOW/qvoH7X0f5X+UUv/V+sftfR/jf5RS/9V9Y9a+q+mf9TS/7X6Ry39V9c/aun/Ov2jlv6v1z9q6b+G/lFL/zfoH7X0f6P+UUv/N+kftfR/s/5RS/+36B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/+36h+19F9X/6il/3r6R5P7jxsM9/7r6x+1rP+36R+19N9A/6il/4b6Ry39365/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry3936F/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/536Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+79I/aum/s/5RS/9d9I9a+u+qf9TS/936Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf979I9a+r9X/6il/75T9995JoxrFtXSfz/rP2rpv7/+UUv/9+kftfR/v/5RS/8P6B+19P+g/lFL/wP0HzJx4lQ3Wvp/SP+opf+B+kct/Q/SP2rpf7D+0Yhj7ps4ceLw73+I/lHL+v+w/lFL/4/oH7X0/6j+UUv/j+kftfQ/VP+opf9h+kct/Q/XP2rpf4T+UUv/j+sftfQ/Uv+opf8n9I9a+n9S/6il/1H6Ry39j9Y/aun/Kf2jlv7H6B+19P+0/lFL/8/oH7X0/6z+UUv/z+kftfQ/Vv+opf9x+kct/Y/XP2rpf4L+UUv/E/WPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/5/WPWvqfpn/U0v8L+kct/b+of9TS/0v6Ry39v6x/1NL/K/pHLf1P1z9q6f9V/aOW/l/TP2rpf4b+UUv/M/WPWvqfpX/U0v/r+kct/b+hf9TS/5v6Ry39z9Y/aul/jv5RS/9z9Y+Gc/+VHtk66lv6R8O5/9Tr/zz9o5b+5+sftfS/QP+opf+F+kct/b+tf9TS/zv6Ry39v6t/1NL/Iv2jlv4X6x8Nu/4XDGL/7+kfDbv+01n/l+gftfT/vv5RS/8f6B+19L9U/6il/2X6Ry39f6h/1NL/cv2jlv5X6B+19P+R/lFL/yv1j1r6X6V/1NL/av2jlv7X6B+19L9W/6il/3X6Ry39f6x/1NL/ev2jlv4/0T9q6f9T/aOW/j/TP2rpf4P+UUv/n+sftfT/hf5RS/9f6h+19L9R/6il/6/0j1r6/1r/qKX/TfpHLf1v1j9q6f8b/aOW/rfoH7X0/63+UUv/3+kftfT/vf5RS/8/6B+19L9V/6il/x/1j1r6/0n/qKX/bfpHLf3/rP9jjCzqf7v+UUv/v+gftfS/Q/+opf+d+kct/e/SP2rp/1f9o5b+d+sftfT/m/5RS/979I9a+t+rf9TS/z79o5b+f9c/aul/v/5RS/8H9I9a+v9D/6il/4P6Ry39J+oflfQfPdA/auk/Qv+opf/If9p/1H92XLOolv6jrP+opf9o/aOW/mP0j1r6j9U/auk/m/5RS/9x+kct/cfrH7X0n13/qKX/E/SPWvrPoX/U0v+J+kct/efUP2rp/yT9o5b+c+kftfSfW/+opf88+kct/Z+sf9TSf179o5b+T9E/aun/VP2jlv5P0z9q6T+f/lFL/6frH7X0n1//qKX/M/SPWvo/U/+opf8C+kct/RfUP2rp/yz9o5b+E/SPWvovpH/U0n9h/aOW/ovoH7X0X1T/qKX/YvpHLf0X1z9q6b+E/lFL/yX1j1r6P1v/qKX/c/SPWvo/V/+opf/z9I9a+j9f/6il/wv0j1r6L6V/1NL/hfpHLf2X1j9q6b+M/lFL/2X1j4Zx//FTbR39Iv2jYdz/Uev/xfpHI47ZZY5BQf+X6B+1rP/l9I9a+i+vf9TS/6X6Ry39X1bTf9y/tHdL/xVq+v9rWvq/XP+opf8r9I9a+r9S/6il/4r6Ry39V9I/aum/sv5RS/9V9I9a+r9K/6il/6v1j1r6v0b/qKX/qvpHLf1X0z9q6f9a/aOW/qvrH7X0f53+UUv/1+sftfRfQ/+opf8b9I9a+r9R/6il/5v0j1r6v1n/qKX/W/SPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/W/WPWvqvq3/U0n89/aOW/uvrH7X0f5v+UUv/DfSPWvpvqH/U0v/t+k9jzEMfW/pvpH/U0n9j/aOW/pvoH7X031T/qKX/O/SPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6v1P/qKX/dvpHLf231z9q6b+D/lFL/x31j1r676R/1NL/XfpHLf131j9q6b+L/lFL/131j1r6v1v/qKX/bvpHLf131z9q6b+H/lFL/z31j1r676V/1NJ/b/2jlv776B+19H+P/lFL//fqH7X031f/qKX/fvpHLf331z9q6f8+/aOW/u/XP2rp/wH9o5b+H9Q/aul/gP5RS/8P6R8N8/7jp1wdfaD+0TDvP2T0QfpHLf0P1j9q6X+I/lFL/w/rH7X0/4j+UUv/j+oftfT/mP5RS/9D9Y9a+h+mf9TS/3D9o5b+R+gftfT/uP5RS/8j9Y9a+n9C/6il/yf1j1r6H6V/1NL/aP2jlv6f0j9q6X+M/lFL/0/rH7X0/4z+UUv/z+oftfT/nP5RS/9j9Y9a+h+nf9TS/3j9o2HYf9+hq1P3P0H/aBj2j+v/RP2jlv4n6R+19D9Z/6il/yn6Ry39T9U/aun/ef2j4dx/3CNbR5+mfzSc+0+9/r+gf9TS/4v6Ry39v6R/1NL/y/pHLf2/on/U0v90/aOW/l/VP2rp/zX9o5b+Z+gftfQ/U/+opf9Z+kct/b+uf9TS/xv6Ry39v6l/1NL/bP2jlv7n6B+19D9X/6il/7f0j1r6n6d/1NL/fP2jlv4X6B+19L9Q/6il/7f1H0zc97HbWvp/R/+opf939Y9a+l+kf9TS/2L9o5b+39M/aul/if5RS//v6x+19P/BI/3HzZRxzaJa+l9q/Uct/S/TP2rp/0P9o5b+l+sftfS/Qv+opf+P9I9a+l+pf9TS/yr9o5b+V+sftfS/pq7/dRNnZK+W/tfW9Z8xLf2v0z9q6f9j/aOW/tfrH7X0/4n+UUv/n+oftfT/mf5RS/8b9I9a+v9c/6il/y/0j1r6/1L/qKX/jfpHLf1/pX/U0v/X+kct/W/SP2rpf7P+UUv/3+gftfS/Rf+opf9v9Y9a+v9O/6il/+/1j1r6/0H/qKX/rfpHLf3/qH/U0v9P+kct/W/TP2rp/2f9o5b+t+sftfT/i/5RS/879I9a+t+pf9TS/y79o5b+f9U/aul/t/5RS/+/6R+19L9H/6il/736Ry3979M/aun/d/2nuHm1qW+19L9/+v3vnaET5Q1TLf0fsP6jlv7/0D9q6f+g/lFL/4n6RyX9xwz0j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6j9E/auk/Vv+opf9s+kct/cfpH7X0H69/1NJ/dv2jlv5P0D9q6T+H/tHD/TcYMRgM4/5P1D9qWf9z6h+19H+S/lFL/7n0j1r6z61/1NJ/Hv2jlv5P1j9q6T+v/lFL/6foH7X0f6r+UUv/p+kftfSfT/+opf/T9Y9a+s+vf9TS/xnt/Y/Pz76l/zPb+09HS/8F9I9a+i+of9TS/1n6Ry39J+gftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0f7b+UUv/5+gftfR/rv5RS//n6R+19H++/lFL/xfoH7X0X0r/qKX/Cx/pP3HfmTKwWVNL/6Wt/6il/zL6Ry39l9U/aun/Iv2jlv4v1j9q6f8S/aOW/svpH7X0X17/qKX/S/WPWvq/TP+opf8K+kct/V+uf9TS/xX6Ry39X6l/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39X6V/1NL/1fpHLf1fo3/U0n9V/aOW/qvpH7X0f63+UUv/1fWPWvq/Tv+opf/r9Y9a+q+hf9TS/w36Ry3936h/1NL/TfpHLf3frH/U0v8t+keT+l87GAyGe/819Y9a1v9a+kct/dfWP2rpv47+UUv/t+oftfRfV/+opf96+kct/dfXP2rp/zb9o5b+G+gftfTfUP+opf/b9Y9a+m+kf9TSf2P9o5b+m+gftfTfVP+opf879I9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvq/U/+opf92+kct/bfXP6roP+7SmTeeWVxF/8FgzI7Wf9TSfyf9o5b+79I/aum/s/5RS/9d9I9a+u+qf9TS/936Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf979I+GZ/+J06Ye8179o+HZf7Kp1/+++kct/ffTP2rpv7/+UUv/9+kftfR/v/5RS/8P6B+19P+g/lFL/wP0j1r6f0j/qKX/gfpHLf0P0j9q6X+w/lFL/0P0j1r6f1j/qKX/R/SPWvp/VP+opf/H9I9a+h+qf9TS/zD9o5b+h+sftfQ/Qv+opf/H9Y9a+h+pf9TS/xP6Ry39P6l/1NL/KP2jlv5H6x+19P+U/lFL/2P0j1r6f1r/qKX/Z/SPWvp/Vv+opf/n9I9a+h+rf9TS/zj9o5b+x+sftfQ/Qf+opf+J+kct/U/SP2rpf7L+UUv/U/SPWvqfqn/U0v/z+kct/U/TP2rp/4Wq/q89aEb3bOn/xar+M66l/5f0j1r6f1n/qKX/V/SPWvqfrn/U0v+r+kct/b+mf9TS/wz9o5b+Z+oftfQ/S/+opf/X9Y9a+n9D/6il/zf1j1r6n61/1NL/HP2jlv7n6h+19P+W/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19P+2/lFL/+/oH7X0/67+UUv/i/SPWvpfrH/U0v97+kct/S/RP2rp/339o5b+P9A/aul/qf5RS//L9I9a+v9Q/6il/+X6Ry39r9A/aun/I/2jlv5X6h+19L9K/6il/9X6Ry39r9E/aul/rf5RS//r9I9a+v9Y/6il//X6Ry39f6J/1NL/p/pHLf1/pn/U0v8G/aOW/j/XP2rp/wv9o5b+v9Q/aul/o/5RS/9f6R+19P+1/lFL/5v0j1r636x/1NL/N/pHLf1v0T9q6f9b/aOW/r/TP2rp/3v9o5b+f9A/aul/q/5RS/8/6h+19P9T6P/gxP/mwGZNLf1vs/6jlv5/1j9q6X+7/lFL/7/oH7X0v0P/qKX/nfpHLf3v0j9q6f9X/aOW/nfrH7X0/5v+UUv/e/SPWvrfq3/U0v8+/aOW/n/XP2rpf7/+UUv/B/SPWvr/Q/+opf+D+kct/SfqH5X0HzvQP2rpP0L/qKX/SP2jlv6j9I9a+o/WP2rpP0b/qKX/WP2jlv6z6R+19B+nf9TSf7z+UUv/2fWPWvo/Qf+opf8c+kct/Z+of9TSf079o5b+T9I/auk/l/7R6JL+c+sftaz/efSPWvo/Wf+opf+8+kct/Z+if9TS/6n6Ry39n6Z/1NJ/Pv2jlv5P1z9q6T+//lFL/2foH7X0f6b+UUv/BfSPWvovqH/U0v9Z+kct/SfoH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv5L6h+19H+2/lFL/+foH7X0f67+UUv/5+kftfR/vv5RS/8X6B+19F9K/6il/wv1j1r6L61/1NJ/Gf2jlv7L6h+19H+R/lFL/xfrH7X0f4n+UUv/5fSPWvovr3/U0v+l+kct/V+mf9TSfwX9o5b+L9c/aun/Cv2jlv6v1D9q6b+i/lFL/5X0j1r6r6x/1NJ/Ff2jlv6v0j9q6f9q/aOW/q/RP2rpv6r+UUv/1fSPWvq/Vv+opf/q+kct/V+nf9TS//X6Ry3919A/aun/Bv2jlv5v1D9q6f8m/aOW/m/WP2rp/xb9o5b+a+oftfRfS/+opf/a+kct/dfRP2rp/1b9o5b+6+oftfRfT/+opf/6+kct/d+mf9TSfwP9o5b+G+oftfR/u/5RS/+N9I9a+m+sf9TSfxP9o5b+m/7T/vv9Z8c1i2rp/w7rP2rpv5n+UUv/zfWPWvpvoX/U0n9L/aOW/lvpH7X031r/qKX/NvpHLf231T9q6f9O/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/3fpH7X031n/qKX/LvpHLf131T9q6f9u/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/731j1r676N/1NL/PfpHLf3fq3/U0n9f/aOW/vvpH7X031//qKX/+/SPWvq/X/+opf8H9I9a+n9Q/2jq/oPB8O1/gP5Ry/r/kP5RS/8D9Y9a+h+kf9TS/2D9o5b+h+gftfT/sP5RS/+P6B+19P+o/lFL/4/pH7X0P1T/qKX/YfpHLf0P1z9q6X+E/lFL/4/rH7X0P1L/qKX/J/SPWvp/Uv+opf9R+kct/Y/WP2rp/yn9o5b+x+gftfT/tP5RS//P6B+19P+s/lFL/8/pH7X0P1b/qKX/cfpHLf2P1z9q6X+C/lFL/xP1j1r6n6R/1NL/ZP2jlv6n6B+19D9V/6il/+f1j1r6n6Z/1NL/C/pHLf2/qH/U0v9L+kct/b+sf9TS/yv6Ry39T9c/aun/Vf2jlv5f0z9q6X/Gc2bWgGZtLf3PtP6jlv5n6R+19P+6/lFL/2/oH7X0/6b+UUv/s/WPWvqfo3/U0v9c/aOW/t/SP2rpf57+UUv/8/WPWvpfoH/U0v/C4v7Pepz7Wvp/u7j/42np/x39o5b+39U/aul/kf5RS/+L9Y9a+n9P/6il/yX6R8O4/2xTbR37ff2jYdz/Uev/B/pHLf0v1T9q6X+Z/lFL/x/qH7X0v1z/qKX/FfpHLf1/pH/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/x/rH7X0v17/qKX/T/SPWvr/VP+opf/P9I9a+t+gf9TS/+f6Ry39f6F/1NL/l/pHLf1v1D9q6f8r/aOW/r/WP2rpf5P+UUv/m/WPWvr/Rv+opf8t+kct/X+rf9TS/3f6Ry39f69/1NL/D/pHLf1v1T9q6f9H/aOW/n/SP2rpf5v+UUv/P+sftfS/Xf+opf9f9I9a+t+hf9TS/079o5b+d+kftfT/q/5RS/+79Y9a+v9N/6il/z36Ry3979U/aul/n/5RS/+/6x+19L9f/6il/wP6Ry39/6F/1NL/Qf2jlv4T9Y9K+j/0bwHq/1gt/UfoH7X0H6l/1NJ/lP5RS//R+kct/cfoH7X0H6t/1NJ/Nv2jlv7j9I9a+o/XP2rpP7v+UUv/J+gftfSfQ/+opf8T9Y9a+s+pf9TS/0n6Ry3959I/auk/t/5RS/959I9a+j9Z/6il/7z6Ry39n6J/1NL/qfpHLf2fpn/U0n8+/aOW/k/XP2rpP7/+UUv/Z+gftfR/pv5RS/8F9I9a+i+of9TS/1n6Ry39J+gftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0f7b+UUv/5+gftfR/rv5RS//n6R+19H++/lFL/xfoH7X0X0r/qKX/C/WPWvovrX/U0n8Z/aOW/svqH7X0f5H+UUv/F+sftfR/if5RS//lZqD/HXP+Jwc2a2rpv7z1H7X0f6n+UUv/l+kftfRfQf+opf/L9Y9a+r9C/6il/yv1j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/6v0j1r6v1r/qKX/a/SPWvqvWtb/FTO4X0v/1cr6z6iW/q/VP2rpv7r+UUv/1+kftfR/vf5RS/819I9a+r9B/6il/xv1j1r6v0n/qKX/m/WPWvq/Rf+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvq/Vf+opf+6+kct/dfTP2rpv77+UUv/t+kftfTfQP+opf+G+kct/d+uf9TSfyP9o5b+G+sftfTfRP+opf+m+kct/d+hf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvpvq3/U0v+d+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n8n/aOW/u/SP2rpv7P+UUv/XfSPWvrvqn/U0v/d+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0n8v/aOW/nvrH7X030f/qKX/e/SPWvq/V/+opf+++kct/ffTP2rpv7/+UUv/9+kftfR/v/5RS/8P6B+19P+g/lFL/wP0HzJ66hst/T+kf/RQ/8OHf/8D9Y9a1v9B+kct/Q/WP2rpf4j+UUv/D+sftfT/iP5RS/+P6h+19P+Y/lFL/0P1j1r6H6Z/1NL/cP2jlv5H6B+19P+4/lFL/yP1j1r6f0L/qKX/J/WPWvofpX/U0v9o/aOW/p/SP2rpf4z+UUv/T+sftfT/jP5RS//P6h+19P+c/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+n9e/6il/2n6Ry39v6B/1NL/i/pHLf2/pH/U0v/L+kct/b+if9TS/3T9o5b+X9U/aun/Nf2jlv5n6B+19D9T/6il/1n6Ry39v65/1NL/G/pHLf2/qX/U0v9s/aOW/ufoH7X0P1f/qKX/t/SPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/t/WPWvp/R/+opf939Y9a+l+kf9TS/2L9o5b+39M/aul/if5RS//v6x+19P+B/lFL/0v1j1r6X6Z/1NL/h/pHLf0v1z9q6X+F/lFL/x/pH7X0v1L/qKX/VfpHLf2v1j9q6X+N/lFL/2v1j1r6X6d/1NL/x/pHLf2v1z9q6f8T/aOW/j/VP2rp/zP9o5b+N+gftfT/uf5RS/9f6B+19P9l7D/xvzeuWVRL/xut/6il/6/0j1r6/1r/qKX/TfpHLf1v1j9q6f8b/aOW/rfoH7X0/63+UUv/3+kftfT/vf5RS/8/6B+19L9V/6il/x/1j1r6/0n/qKX/bfpHLf3/rH/U0v92/aOW/n/RP2rpf4f+UUv/O/WPWvrfpX/U0v+v+kct/e/WP2rp/zf9o5b+9+gftfS/V/+opf99+kct/f+uf9TS/379o5b+D+gftfT/h/5RS/8H9Y9a+k/UPyrpP26gf9TSf4T+UUv/kfpHLf1H6R+19B+tf9TSf4z+UUv/sfpHLf1n0/8RCzxytaX/OP2jlv7j9Y9a+s+uf9TS/wn6Ry3959A/aun/RP2jlv5z6h+19H+S/lFL/7n0j1r6z61/1NJ/Hv2jlv5P1j9q6T+v/lFL/6foH7X0f6r+UUv/p+kftfSfT/+opf/T9Y9a+s+vf9TS/xn6Ry39n6l/1NJ/Af2jlv4L6h+19H+W/lFL/wn6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfRfQv+opf+S+kct/Z+tf9TS/zn6Ry39n6t/1NL/efpHLf2fr3/U0v8F+kct/ZfSP2rp/0L9o5b+S+sftfRfRv+opf+y+kct/V8U+//PP9v/by39X2z9Ry39X6J/1NJ/Of2jlv7L6x+19H+p/lFL/5fpH7X0X0H/qKX/y/WPWvq/Qv+opf8rc/87/2vjmkW19F/R+o9a+q+kf9TSf2X9o5b+q+gftfR/lf5RS/9X6x+19H+N/lFL/1X1j1r6r6Z/1NL/tfpHLf1X1z9q6f86/aOW/q/XP2rpv4b+UUv/N+gftfR/o/5RS/836R+19H+z/lFL/7foH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/7fqH7X0X1f/qKX/evpHLf3X1z9q6f82/aOW/hvoH7X031D/aNj1HzeI/d+ufzTs+k9n/W+kf9TSf2P9o5b+m+gftfTfVP+opf879I9a+m+mf9TSf3P9pzVqUNR/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS/936h+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+r9L/6il/876Ry39d9E/aum/q/5RS/936x+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+79E/aun/Xv2jlv776h+19N9P/6il//76Ry3936d/1NL//fpHLf0/oH/U0v+D9f1nj1tb+h9Q3z9r6f8h/aOW/gfqH7X0P0j/R1tp8kVL/4P1j1r6H6J/1NL/w3X995uhvVr6f6Su/4xp6f9R/aOW/h/TP2rpf6j+UUv/w/SPWvofPkP9Z/vPjWsW1dL/COs/aun/cf2jlv5H6h+19P+E/lFL/0/qH7X0P0r/qKX/0fpHLf0/pX/U0v8Y/aOW/p/WP2rp/xn9o5b+n9U/aun/Of2jlv7H6h+19D9O/6il//H6Ry39T9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+p+oftfT/vP5RS//TBoPB+Jk1pllYS/8vWP9RS/8v6h+19P+S/lFL/y/rH7X0/4r+UUv/0/WPWvp/Vf9o2PWf6i/5U/f/mv7RsOs/nfV/hv5RS/8zp3sG9G4t/c+y/qOW/l/XP2rp/w39o5b+39Q/aul/tv5RS/9z9I9a+p+rf9TS/1v6Ry39z9M/aul/vv5RS/8L9I9a+l+of9TS/9v6Ry39v6N/1NL/u/pHLf0v0j9q6X+x/lFL/+/pH7X0v0T/qKX/9/WPWvr/QP+opf+l+kct/S/TP2rp/0P9o5b+l+sftfS/Qv+opf+P9I9a+l+pfzSp/9CvTA/n/lfpH7Ws/6v1j1r6X6N/1NL/Wv2jlv7X6R+19P+x/lFL/+v1j1r6/0T/qKX/T/WPWvr/TP+opf8N+kct/X+uf9TS/xf6Ry39f6l/1NL/Rv2jlv6/0j9q6f9r/aOW/jfpH7X0v1n/qKX/b/SPWvrfon/U0v+3+kct/X+nf9TS//f6Ry39/6B/1NL/Vv2jlv5/1D9q6f8n/aOW/rfpH7X0/7P+UUv/2/WPWvr/Rf+opf8d+kct/e/UP2rpf5f+UUv/v+ofDfUfDPP+d+sftaz/v+kftfS/R/+opf+9+kct/e/TP2rp/3f9o5b+9+sftfR/QP+opf8/9I9a+j+of9TSf6L+UUn/h05xr/9jtfQfoX/U0n+k/lFL/1H6Ry39R+sftfQfo3/U0n+s/lFL/9n0j1r6j9M/auk/Xv+opf/s+kct/Z+gfzSl/8jh3n8O/aOW9f9E/aOW/nPqH7X0f5L+UUv/ufSPWvrPrX/U0n8e/aOW/k/WP2rpP6/+UUv/p+gftfR/qv5RS/+n6R+19J9P/6il/9P1j1r6z69/1NL/GfpHLf2fqX/U0n8B/aOW/gvqH7X0f5b+UUv/CfpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39n61/1NL/OfpHLf2fq3/U0v95+kct/Z+vf9TS/wX6Ry39l9I/Gnb9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpgAAAP//dsT32w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 5.006696747s ago: executing program 8 (id=10846): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 5.006376301s ago: executing program 3 (id=10847): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x3}) 4.342131214s ago: executing program 3 (id=10848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100, @val=0x80}, "580f20af9978"}}}}}}}, 0x0) 4.146118175s ago: executing program 7 (id=10849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4004f51b, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 4.145849335s ago: executing program 5 (id=10850): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x178) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) lseek(r1, 0x4, 0x4) 3.949161227s ago: executing program 3 (id=10852): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.782563409s ago: executing program 4 (id=10853): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 3.721716411s ago: executing program 5 (id=10854): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x34, 0x102, 0xf}, 0x2c) 3.667830819s ago: executing program 8 (id=10855): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.388464886s ago: executing program 0 (id=10856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 3.278821394s ago: executing program 8 (id=10857): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.224948387s ago: executing program 5 (id=10858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.137171572s ago: executing program 4 (id=10859): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.915496157s ago: executing program 0 (id=10860): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 2.777634577s ago: executing program 5 (id=10861): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) 2.7028642s ago: executing program 4 (id=10862): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 2.49562889s ago: executing program 5 (id=10863): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x10020004, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 2.446034838s ago: executing program 4 (id=10864): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xfe9) 2.218393909s ago: executing program 0 (id=10865): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000921) read(r0, 0x0, 0x20) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 1.61136682s ago: executing program 4 (id=10866): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time\x00') 874.130041ms ago: executing program 4 (id=10867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x4000001, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) accept4(r0, 0x0, 0x0, 0x80800) 871.960668ms ago: executing program 0 (id=10868): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="d2", 0x1}], 0x1, 0x100dfd, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101900, 0x124) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x10) 654.747087ms ago: executing program 7 (id=10869): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) 652.077522ms ago: executing program 8 (id=10870): r0 = socket$inet6(0xa, 0x3, 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 633.212076ms ago: executing program 3 (id=10871): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4e0, &(0x7f0000000040)={0x0, 0x36d, 0xc010, 0x3, 0x16e}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) rt_tgsigqueueinfo(0x0, 0x0, 0x1d, &(0x7f0000000000)={0x21, 0x7fff, 0xd}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 383.303069ms ago: executing program 8 (id=10872): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 336.581258ms ago: executing program 3 (id=10873): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x65) fcntl$setsig(r1, 0xa, 0x1d) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 187.653634ms ago: executing program 5 (id=10874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 39.33589ms ago: executing program 3 (id=10875): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=maccroatian,umask=00000000000000000000006,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000010,discard,fmask=00000000000000000000007,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030300235c6b6bfd905ecd26f3030303134373237302c006c8455dde900fe549d082f5efab4565df7f856f64e9bdae3ee8d93c0d8436a59aca30c4c85130ecbe953c725570c89fbbc378dd7090f7fdfd1589479dae0f3838b7591e1721dbe58c8b10f6366df8f0953b2c7543248c3b4863b"], 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bpf(0x0, 0x0, 0x0, 0x1800040, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=000000000020100001,\x00\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 0s ago: executing program 8 (id=10876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): :440 [ 1178.919900][ T5840] kaweth 4-1:0.182: MTU: 0 [ 1178.955923][ T5840] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1179.109060][T31645] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1179.161261][T31645] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.9883: Failed to acquire dquot type 1 [ 1179.195667][T31645] loop8: lost filesystem error report for type 5 error -117 [ 1179.201911][T31645] EXT4-fs (loop8): 1 truncate cleaned up [ 1179.238978][T31645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1179.394687][T31645] EXT4-fs (loop8): shut down requested (0) [ 1179.432678][ T5840] kaweth 4-1:0.182: Error setting receive filter [ 1179.444317][ T5840] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 1179.474733][ T5840] usb 4-1: USB disconnect, device number 69 [ 1179.479274][T31670] EXT4-fs (loop8): shut down requested (0) [ 1179.645375][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.880263][T27460] net_ratelimit: 6 callbacks suppressed [ 1179.880291][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.894803][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.953896][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.156514][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.196246][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.217187][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.236731][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.247687][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.262926][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.270665][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.278908][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.287293][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.295229][T27460] hid-generic 0006:0004:0009.005D: unknown main item tag 0x0 [ 1180.322880][T27460] hid-generic 0006:0004:0009.005D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1180.595525][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.675435][T31692] fido_id[31692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1180.926026][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.934680][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.839365][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9911'. [ 1181.886541][T31726] vlan4: entered allmulticast mode [ 1181.923121][T31726] dummy0: entered allmulticast mode [ 1181.950207][T31726] bridge0: port 2(vlan4) entered blocking state [ 1181.960273][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.973327][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.003222][T31726] bridge0: port 2(vlan4) entered disabled state [ 1182.026916][T31726] vlan4: entered promiscuous mode [ 1182.037990][T31726] dummy0: entered promiscuous mode [ 1182.363145][T31742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9917'. [ 1182.452692][T31743] netlink: 6 bytes leftover after parsing attributes in process `syz.7.9918'. [ 1182.483043][T31743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.865997][T31751] loop8: detected capacity change from 0 to 512 [ 1182.970825][T31751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1183.013576][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.078555][T31751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.167215][T31751] ext4 filesystem being mounted at /730/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.236226][ T30] audit: type=1800 audit(1771531871.095:421): pid=31751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9922" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1183.414694][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.597361][T31768] netlink: 11 bytes leftover after parsing attributes in process `syz.8.9928'. [ 1184.257147][T31783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1185.075986][T27460] net_ratelimit: 8 callbacks suppressed [ 1185.076012][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.084518][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.097948][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.239056][T27460] kernel write not supported for file bpf-map (pid: 27460 comm: kworker/1:0) [ 1185.293449][ T5842] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1185.495120][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1185.524074][ T5842] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1185.556367][ T5842] usb 5-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.40 [ 1185.568757][T31817] loop3: detected capacity change from 0 to 4096 [ 1185.576416][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.591536][ T5842] usb 5-1: Product: syz [ 1185.615209][ T5842] usb 5-1: Manufacturer: syz [ 1185.640932][ T5842] usb 5-1: SerialNumber: syz [ 1185.685050][ T5842] cdc_mbim 5-1:1.0: skipping garbage [ 1185.709717][ T5842] cdc_mbim 5-1:1.0: skipping garbage [ 1185.889720][T31803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1185.938794][ T30] audit: type=1800 audit(1771531873.805:422): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9947" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 1186.114202][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.122722][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.458015][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9953'. [ 1186.618380][T31803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1186.873497][ T5842] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1186.931478][ T5842] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1186.964567][ T5842] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1187.062624][ T5842] usb 5-1: USB disconnect, device number 65 [ 1187.066396][T31839] ceph: No mds server is up or the cluster is laggy [ 1187.076580][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1187.082733][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1187.153946][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.162462][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.333449][ T5842] hid_parser_main: 7 callbacks suppressed [ 1187.333484][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.350020][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9961'. [ 1187.371528][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9961'. [ 1187.391367][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.402913][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.410359][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.483255][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.515323][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.546363][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.572097][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.591809][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.616470][ T5842] hid-generic 0006:0004:0009.005E: unknown main item tag 0x0 [ 1187.674005][ T5842] hid-generic 0006:0004:0009.005E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1187.919258][T31858] fido_id[31858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1188.128097][ T30] audit: type=1800 audit(1771531875.995:423): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9966" name="file2" dev="tmpfs" ino=8961 res=0 errno=0 [ 1188.194760][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.203240][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.889340][T31884] ceph: No mds server is up or the cluster is laggy [ 1188.896910][ T5842] libceph: connect (1)[c::]:6789 error -22 [ 1188.907637][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 1188.914914][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.228899][ T5842] libceph: connect (1)[c::]:6789 error -22 [ 1189.255474][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 1190.355045][ T5982] net_ratelimit: 6 callbacks suppressed [ 1190.355074][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.369593][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.516061][T31928] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9991'. [ 1190.837804][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.200203][T31948] loop4: detected capacity change from 0 to 4096 [ 1191.222727][T31948] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1191.394076][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.402402][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.715681][T31965] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10010'. [ 1191.764174][ T5912] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1191.957295][ T5912] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1191.973901][ T5912] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1192.002167][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1192.033100][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1192.076696][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1192.136086][ T5912] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1192.152973][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1192.171793][ T5912] usb 1-1: Product: syz [ 1192.181911][ T5912] usb 1-1: Manufacturer: syz [ 1192.196312][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 1192.201553][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 1192.227761][ T5912] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1192.242997][ T5912] cdc_wdm 1-1:1.0: Unknown control protocol [ 1192.293093][ T5982] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1192.443779][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.452458][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.492999][ T5982] usb 9-1: Using ep0 maxpacket: 32 [ 1192.501522][ T5982] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1192.525409][ T5982] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1192.542979][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.566605][ T5982] usb 9-1: Product: syz [ 1192.570921][ T5982] usb 9-1: Manufacturer: syz [ 1192.586010][ T5982] usb 9-1: SerialNumber: syz [ 1193.547553][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.556384][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.921002][T31990] loop4: detected capacity change from 0 to 131072 [ 1194.004572][T31990] F2FS-fs (loop4): invalid crc value [ 1194.136642][T31990] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1194.152067][T31990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1194.191843][T27492] usb 1-1: USB disconnect, device number 59 [ 1194.258757][ T5982] usb 9-1: config 0 descriptor?? [ 1194.605064][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.733262][ T5982] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1195.416836][ T5982] usb 9-1: USB disconnect, device number 34 [ 1195.634036][ T5842] net_ratelimit: 6 callbacks suppressed [ 1195.634063][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.648176][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.757406][T27460] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1195.954695][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.975117][T27460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.023050][T27460] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1196.078579][T27460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.127928][T27460] usb 5-1: config 0 descriptor?? [ 1196.627914][T27460] keytouch 0003:0926:3333.005F: fixing up Keytouch IEC report descriptor [ 1196.673646][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.682008][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.716019][T27460] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.005F/input/input90 [ 1196.758846][T32040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.788391][T32041] loop8: detected capacity change from 0 to 256 [ 1196.810170][T32040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.885698][T32040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.965882][T32041] FAT-fs (loop8): Directory bread(block 64) failed [ 1196.965941][T32040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.013422][T32041] FAT-fs (loop8): Directory bread(block 65) failed [ 1197.037687][T32041] FAT-fs (loop8): Directory bread(block 66) failed [ 1197.066811][T32040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.089606][T32041] FAT-fs (loop8): Directory bread(block 67) failed [ 1197.150949][T32041] FAT-fs (loop8): Directory bread(block 68) failed [ 1197.202922][T32041] FAT-fs (loop8): Directory bread(block 69) failed [ 1197.209596][T32041] FAT-fs (loop8): Directory bread(block 70) failed [ 1197.236966][T27460] keytouch 0003:0926:3333.005F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1197.272617][T32050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10043'. [ 1197.292439][T32041] FAT-fs (loop8): Directory bread(block 71) failed [ 1197.320587][T27460] usb 5-1: USB disconnect, device number 66 [ 1197.330927][T32041] FAT-fs (loop8): Directory bread(block 72) failed [ 1197.381892][T32041] FAT-fs (loop8): Directory bread(block 73) failed [ 1197.655338][T32053] fido_id[32053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1197.914415][T27492] hid_parser_main: 7 callbacks suppressed [ 1197.914448][T27492] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1197.961858][T32063] loop7: detected capacity change from 0 to 2048 [ 1197.970460][T27492] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1198.002280][T32063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1198.161161][ T1003] bio_check_eod: 20 callbacks suppressed [ 1198.161188][ T1003] kworker/u8:8: attempt to access beyond end of device [ 1198.161188][ T1003] loop8: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 1198.188247][T32066] loop3: detected capacity change from 0 to 4096 [ 1198.386076][T32066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.538188][T32067] fido_id[32067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1198.866097][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.218892][T32094] loop8: detected capacity change from 0 to 32768 [ 1200.369869][T32111] loop4: detected capacity change from 0 to 32768 [ 1200.398581][T32094] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1200.444920][T32111] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1200.453465][T32111] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1200.487096][T32111] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1200.580041][T32111] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1200.580564][T32094] XFS (loop8): Ending clean mount [ 1200.674406][T32094] XFS (loop8): Quotacheck needed: Please wait. [ 1200.843073][ T5842] net_ratelimit: 15 callbacks suppressed [ 1200.843101][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.857254][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.896434][T32094] XFS (loop8): Quotacheck: Done. [ 1201.088800][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.287028][T32138] loop3: detected capacity change from 0 to 256 [ 1201.297605][T18888] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1201.887546][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.896147][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.523430][ T5982] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1202.716155][ T5982] usb 1-1: Using ep0 maxpacket: 32 [ 1202.764207][ T5982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1202.781844][ T5982] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1202.806430][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.827273][ T5982] usb 1-1: Product: syz [ 1202.838389][ T5982] usb 1-1: Manufacturer: syz [ 1202.858868][ T5982] usb 1-1: SerialNumber: syz [ 1202.881336][ T5982] usb 1-1: config 0 descriptor?? [ 1202.915496][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.924416][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.354184][ T5982] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1203.954252][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.973320][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.002789][ T5842] usb 1-1: USB disconnect, device number 60 [ 1204.284622][ T1205] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1204.459886][ T1205] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.487580][ T1205] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1204.509627][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.557473][ T1205] usb 9-1: config 0 descriptor?? [ 1204.834061][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.860296][T32193] loop7: detected capacity change from 0 to 32768 [ 1204.935908][T32193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10092 (32193) [ 1205.001546][T32193] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1205.027600][T32193] BTRFS info (device loop7): using crc32c checksum algorithm [ 1205.048260][ T1205] keytouch 0003:0926:3333.0061: fixing up Keytouch IEC report descriptor [ 1205.110120][ T1205] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0061/input/input91 [ 1205.268507][ T61] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1205.408448][T32193] BTRFS warning (device loop7): couldn't read tree root [ 1205.434997][T32193] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1205.478185][ T61] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1205.563515][T32193] BTRFS warning (device loop7): couldn't read tree root [ 1205.571048][T32193] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1205.641205][ T49] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1205.673372][T32193] BTRFS warning (device loop7): couldn't read tree root [ 1205.702129][T32193] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1205.804021][T32193] BTRFS info (device loop7): checking UUID tree [ 1205.845961][T32193] BTRFS info (device loop7): setting nodatasum [ 1205.852349][T32193] BTRFS info (device loop7): enabling ssd optimizations [ 1205.911922][ T1205] keytouch 0003:0926:3333.0061: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1205.943164][T32193] BTRFS info (device loop7): turning on flush-on-commit [ 1206.003487][ T1205] usb 9-1: USB disconnect, device number 35 [ 1206.018023][T32193] BTRFS info (device loop7): turning on async discard [ 1206.060093][ T5842] net_ratelimit: 7 callbacks suppressed [ 1206.060120][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.075149][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.113374][T32193] BTRFS info (device loop7): enabling free space tree [ 1206.120336][T32193] BTRFS info (device loop7): trying to use backup root at mount time [ 1206.173774][T32193] BTRFS info (device loop7): max_inline set to 0 [ 1206.202409][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.371113][T32251] fido_id[32251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1206.780970][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10107'. [ 1206.864137][T17541] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1207.103184][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.163132][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.341080][T32286] loop8: detected capacity change from 0 to 512 [ 1207.571940][T32286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.693131][T32286] ext4 filesystem being mounted at /754/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.048389][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.114231][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.193697][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.293797][ T5982] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1208.467273][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.520959][ T5982] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1208.549001][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.621834][ T5982] usb 1-1: config 0 descriptor?? [ 1209.154706][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.166628][ T5982] keytouch 0003:0926:3333.0062: fixing up Keytouch IEC report descriptor [ 1209.202090][ T5982] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0062/input/input92 [ 1209.218474][T32332] loop4: detected capacity change from 0 to 256 [ 1209.234102][ T5842] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1209.253275][T27460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.435037][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1209.479411][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.513983][ T5982] keytouch 0003:0926:3333.0062: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1209.533726][ T5842] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1209.542833][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.597110][ T5842] usb 4-1: config 0 descriptor?? [ 1209.739609][T32210] usb 1-1: USB disconnect, device number 61 [ 1209.816093][ T5842] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1209.845801][T32340] fido_id[32340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1210.006068][T32343] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1210.296636][T32351] binder: 32350:32351 ioctl c0306201 200000000680 returned -14 [ 1210.309850][T32210] usb 4-1: USB disconnect, device number 70 [ 1211.083038][T32356] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1211.236138][ T5843] net_ratelimit: 3 callbacks suppressed [ 1211.236166][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.253060][T32356] usb 9-1: Using ep0 maxpacket: 32 [ 1211.261328][T32356] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1211.271975][T32356] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1211.287199][T32356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.304942][T32356] usb 9-1: Product: syz [ 1211.311612][T32356] usb 9-1: Manufacturer: syz [ 1211.316971][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.328377][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.336849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.345010][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.345488][T32356] usb 9-1: SerialNumber: syz [ 1211.353592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.366062][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.384425][T32356] usb 9-1: config 0 descriptor?? [ 1211.747181][T32394] netlink: 'syz.4.10151': attribute type 12 has an invalid length. [ 1211.763561][T32394] netlink: 'syz.4.10151': attribute type 29 has an invalid length. [ 1211.775083][T32394] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1211.805539][T32394] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1211.823391][T32356] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1211.960829][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.278842][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.353499][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.354779][T32409] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10158'. [ 1212.441890][T32356] usb 9-1: USB disconnect, device number 36 [ 1212.732449][T32418] loop3: detected capacity change from 0 to 8 [ 1213.639920][T32452] binder: 32450:32452 ioctl c0306201 200000000680 returned -14 [ 1214.539527][T32481] loop8: detected capacity change from 0 to 512 [ 1214.555111][T32482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10187'. [ 1214.633501][T32210] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1214.637459][T32482] dummy0: entered promiscuous mode [ 1214.648500][T32482] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1214.661109][T32482] hsr2: entered promiscuous mode [ 1214.698051][T32481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.716400][T32481] ext4 filesystem being mounted at /764/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1214.897646][T32210] usb 5-1: Using ep0 maxpacket: 32 [ 1214.926040][T32210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1214.946529][T32210] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1214.970090][T32494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1214.982177][T32210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.999490][T32210] usb 5-1: Product: syz [ 1215.016562][T32210] usb 5-1: Manufacturer: syz [ 1215.020189][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.032746][T32494] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1215.039888][T32210] usb 5-1: SerialNumber: syz [ 1215.085633][T32210] usb 5-1: config 0 descriptor?? [ 1215.547177][T32210] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1216.188216][T32210] usb 5-1: USB disconnect, device number 67 [ 1216.434572][T32356] net_ratelimit: 7 callbacks suppressed [ 1216.434599][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.448521][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.496513][T32535] input input93: cannot allocate more than FF_MAX_EFFECTS effects [ 1216.513272][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.774432][T32540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10204'. [ 1216.866611][T32547] loop3: detected capacity change from 0 to 512 [ 1217.069688][T32547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.095443][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.103884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.111997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.120186][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.128771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.163170][T32547] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1217.326005][T32560] loop7: detected capacity change from 0 to 8 [ 1217.414911][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.473680][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.553230][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.165973][T32582] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10217'. [ 1219.523115][T32210] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1219.540018][T32628] loop7: detected capacity change from 0 to 512 [ 1219.629157][T32628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.703042][T32210] usb 9-1: Using ep0 maxpacket: 16 [ 1219.725687][T32210] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1219.744712][T32628] ext4 filesystem being mounted at /821/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.791946][T32210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.835118][T32210] usb 9-1: Product: syz [ 1219.856897][T32210] usb 9-1: Manufacturer: syz [ 1219.873931][T32210] usb 9-1: SerialNumber: syz [ 1219.901388][T32210] usb 9-1: config 0 descriptor?? [ 1220.025364][T17541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.365973][T32210] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1220.397234][T32210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1220.428975][T32210] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1220.456407][T32210] usb 9-1: media controller created [ 1220.546110][T32210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.710287][T32210] zl10353_read_register: readreg error (reg=127, ret==0) [ 1220.733533][T32210] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1220.760051][T32210] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1220.824240][T32210] usb 9-1: USB disconnect, device number 37 [ 1220.953180][T32661] loop4: detected capacity change from 0 to 512 [ 1221.015134][T32210] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1221.019382][T32661] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.10252: bad orphan inode 16 [ 1221.052054][T32661] loop4: lost filesystem error report for type 5 error -117 [ 1221.052899][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1221.066790][ C0] EXT4-fs (loop4): initial error at time 1771531908: ext4_orphan_get:1417 [ 1221.075465][ C0] EXT4-fs (loop4): last error at time 1771531908: ext4_orphan_get:1417 [ 1221.086793][T32661] ext4_test_bit(bit=15, block=18) = 0 [ 1221.126933][T32661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.155030][T32665] netlink: 'syz.7.10253': attribute type 12 has an invalid length. [ 1221.183559][T32661] ext4 filesystem being mounted at /1671/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.198829][T32665] netlink: 'syz.7.10253': attribute type 29 has an invalid length. [ 1221.240898][T32665] netlink: 148 bytes leftover after parsing attributes in process `syz.7.10253'. [ 1221.242446][T32661] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.10252: Directory hole found for htree leaf block 0 [ 1221.285809][T32665] netlink: 'syz.7.10253': attribute type 2 has an invalid length. [ 1221.323059][T32665] netlink: 23 bytes leftover after parsing attributes in process `syz.7.10253'. [ 1221.461807][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.505305][T25487] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1221.537383][T25487] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 1221.561912][T32669] input: syz1 as /devices/virtual/input/input94 [ 1221.596039][T25487] loop4: lost filesystem error report for type 5 error -117 [ 1221.633614][ T49] net_ratelimit: 8 callbacks suppressed [ 1221.633642][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.664220][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.714216][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.925831][T32678] loop7: detected capacity change from 0 to 7 [ 1221.983770][T32678] Dev loop7: unable to read RDB block 7 [ 1221.983825][T32678] loop7: unable to read partition table [ 1221.984082][T32678] loop7: partition table beyond EOD, truncated [ 1221.984115][T32678] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1222.616523][T32691] loop3: detected capacity change from 0 to 4096 [ 1222.645473][T32691] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1222.650061][T32693] loop8: detected capacity change from 0 to 1024 [ 1222.675052][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.736677][T32693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.753237][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.827937][T32691] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1222.835888][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.874939][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.883609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.895553][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.904031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.957102][T32693] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.10267: error while reading EA inode 27 err=-116 [ 1222.980009][ T30] audit: type=1800 audit(1771531910.845:424): pid=32691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10266" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1223.028654][T32693] EXT4-fs error (device loop8): ext4_xattr_block_find:1879: inode #15: comm syz.8.10267: corrupted xattr block 113: invalid header [ 1223.146819][T32703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10271'. [ 1223.302562][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.387903][T32705] loop7: detected capacity change from 0 to 256 [ 1223.461601][ T30] audit: type=1800 audit(1771531911.325:425): pid=32705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10272" name="file1" dev="loop7" ino=1048899 res=0 errno=0 [ 1223.486550][T32705] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1223.513359][T32705] FAT-fs (loop7): Filesystem has been set read-only [ 1223.923245][ T5843] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1224.129550][ T5843] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1224.159277][ T5843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1224.169737][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1224.178417][ T5843] usb 4-1: SerialNumber: syz [ 1224.866897][ T5843] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1225.025178][T32210] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1225.200071][T32210] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1225.240346][T32210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.249228][T32210] usb 5-1: Product: syz [ 1225.254582][T32210] usb 5-1: Manufacturer: syz [ 1225.259301][T32210] usb 5-1: SerialNumber: syz [ 1225.314668][T32210] usb 5-1: config 0 descriptor?? [ 1225.683899][ T5843] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1225.790658][T32210] airspy 5-1:0.0: Board ID: 00 [ 1225.796432][T32210] airspy 5-1:0.0: Firmware version: [ 1225.846942][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 1225.857199][ T5843] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1225.884435][ T5843] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1225.925789][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1225.950218][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1225.985693][ T5843] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.027222][ T5843] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1226.051144][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.323920][ T5843] usb 1-1: usb_control_msg returned -32 [ 1226.345297][ T5843] usbtmc 1-1:16.0: can't read capabilities [ 1226.416576][T32210] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1226.474757][T32210] airspy 5-1:0.0: Registered as swradio24 [ 1226.480554][T32210] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1226.508508][T32210] usb 5-1: USB disconnect, device number 68 [ 1226.711993][ T1205] usb 4-1: USB disconnect, device number 71 [ 1226.743172][ T304] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 1226.748473][ T1205] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1226.759288][ T305] loop7: detected capacity change from 0 to 512 [ 1226.760868][ T49] net_ratelimit: 7 callbacks suppressed [ 1226.760891][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.809868][T32210] usb 1-1: USB disconnect, device number 62 [ 1226.833879][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.932289][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.325759][ T322] loop4: detected capacity change from 0 to 128 [ 1227.448061][ T322] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.577000][ T322] ext4 filesystem being mounted at /1680/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.810648][ T322] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 1227.834650][ T337] loop3: detected capacity change from 0 to 128 [ 1227.873596][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.935772][ T30] audit: type=1800 audit(1771531915.805:426): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10304" name="file1" dev="loop3" ino=1048900 res=0 errno=0 [ 1227.972169][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.979698][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.989725][ T337] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 1228.025918][ T337] FAT-fs (loop3): Filesystem has been set read-only [ 1228.032749][ T337] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 1228.062756][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1228.073686][ T30] audit: type=1800 audit(1771531915.825:427): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10304" name="file1" dev="loop3" ino=1048900 res=0 errno=0 [ 1228.599574][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.608279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.617809][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.617911][ T346] loop7: detected capacity change from 0 to 40427 [ 1228.626351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.671669][ T346] F2FS-fs (loop7): invalid crc value [ 1228.810676][ T346] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1228.821745][ T346] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1229.457549][ T379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10319'. [ 1229.791744][ T385] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1230.013051][ T5843] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1230.183325][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1230.191738][ T5843] usb 4-1: config 0 has no interfaces? [ 1230.216158][ T5843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1230.263009][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1230.318943][ T5843] usb 4-1: SerialNumber: syz [ 1230.357988][ T5843] usb 4-1: config 0 descriptor?? [ 1230.901565][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.943906][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.001476][T32210] usb 4-1: USB disconnect, device number 72 [ 1231.139555][ T414] netlink: 'syz.8.10336': attribute type 29 has an invalid length. [ 1231.156843][ T414] netlink: 'syz.8.10336': attribute type 29 has an invalid length. [ 1231.184052][ T414] netlink: 500 bytes leftover after parsing attributes in process `syz.8.10336'. [ 1231.199789][ T414] unsupported nla_type 58 [ 1231.260852][ T421] overlayfs: failed to clone upperpath [ 1231.314145][ T1205] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1231.653577][ T5843] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1231.776361][ T434] ªªªªªª: renamed from vlan0 (while UP) [ 1231.836053][ T5843] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1231.859417][ T5843] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1231.892943][ T5843] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1231.924178][ T5843] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1231.973668][ T5843] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1232.029818][ T5843] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1232.054516][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1232.081236][ T5843] usb 9-1: Product: syz [ 1232.096334][ T5843] usb 9-1: Manufacturer: syz [ 1232.129378][ T5843] cdc_wdm 9-1:1.0: skipping garbage [ 1232.149733][ T5843] cdc_wdm 9-1:1.0: skipping garbage [ 1232.178901][ T5843] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1232.200743][ T5843] cdc_wdm 9-1:1.0: Unknown control protocol [ 1232.387055][ T5843] net_ratelimit: 7 callbacks suppressed [ 1232.387111][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.401534][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.405045][ T1205] usb 5-1: Using ep0 maxpacket: 32 [ 1232.419165][ T1205] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1232.428582][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.441808][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.842989][ T30] audit: type=1326 audit(1771531920.695:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1232.912334][ T30] audit: type=1326 audit(1771531920.695:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1232.972124][ T30] audit: type=1326 audit(1771531920.695:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.040104][ T30] audit: type=1326 audit(1771531920.695:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.075163][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.104793][ T5843] usb 9-1: USB disconnect, device number 38 [ 1233.121185][ T30] audit: type=1326 audit(1771531920.695:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.144993][ T1205] usb 5-1: config 0 descriptor?? [ 1233.152048][ T30] audit: type=1326 audit(1771531920.695:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.176178][ T30] audit: type=1326 audit(1771531920.695:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.198964][ T30] audit: type=1326 audit(1771531920.695:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.258621][ T30] audit: type=1326 audit(1771531920.695:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.289838][ T30] audit: type=1326 audit(1771531920.695:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.325696][ T30] audit: type=1326 audit(1771531920.695:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.380619][ T30] audit: type=1326 audit(1771531920.695:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=449 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64e39c629 code=0x7ffc0000 [ 1233.405983][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.412160][ T1205] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1233.436563][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1233.452040][ T1205] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1233.473673][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.490756][ T1205] usb 5-1: media controller created [ 1233.554636][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1233.778709][ T1205] DVB: Unable to find symbol dib7000p_attach() [ 1233.802985][ T1205] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1234.016700][ T1205] rc_core: IR keymap rc-dib0700-rc5 not found [ 1234.040704][ T1205] Registered IR keymap rc-empty [ 1234.060792][ T1205] dvb-usb: could not initialize remote control. [ 1234.106630][ T1205] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1234.213383][ T1205] usb 5-1: USB disconnect, device number 69 [ 1234.355378][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.363561][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.371981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.380435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.423704][ T1205] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1234.693496][ T481] input: syz1 as /devices/virtual/input/input96 [ 1235.076823][ T493] loop8: detected capacity change from 0 to 256 [ 1235.117200][ T493] exfat: Deprecated parameter 'utf8' [ 1235.122614][ T493] exfat: Deprecated parameter 'namecase' [ 1235.178153][ T493] exfat: Deprecated parameter 'namecase' [ 1235.202508][ T498] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.10373'. [ 1235.202619][ T493] exfat: Deprecated parameter 'utf8' [ 1235.288491][ T493] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 1235.338416][ T493] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1235.384540][ T502] loop3: detected capacity change from 0 to 256 [ 1237.295817][ T522] loop7: detected capacity change from 0 to 40427 [ 1237.328286][ T522] F2FS-fs: heap/no_heap options were deprecated [ 1237.387651][ T522] F2FS-fs (loop7): build fault injection rate: 19 [ 1237.406312][ T522] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1237.429508][ T522] F2FS-fs (loop7): invalid crc value [ 1237.443856][T32212] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1237.503176][ T522] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060 [ 1237.553272][ T5962] net_ratelimit: 7 callbacks suppressed [ 1237.553300][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.613032][T32212] usb 5-1: Using ep0 maxpacket: 8 [ 1237.621112][T32212] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1237.633554][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.639100][T32212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.671009][T32212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.701446][T32212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.746207][T32212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.803223][T32212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1237.844514][T32212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.957249][ T522] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe17/0x1690 [ 1238.042686][ T522] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1238.103360][T32212] usb 5-1: usb_control_msg returned -32 [ 1238.123274][T32212] usbtmc 5-1:16.0: can't read capabilities [ 1238.176071][ T522] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1238.198887][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.199755][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.208094][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.213820][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.337011][ T522] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x2fd0 [ 1238.359637][ T522] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe17/0x1690 [ 1238.359876][ T580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1238.377496][ T522] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe17/0x1690 [ 1238.412114][ T522] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x2fd0 [ 1238.490743][ T585] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1238.576390][ T587] overlayfs: failed to clone upperpath [ 1238.586054][T17541] syz-executor: attempt to access beyond end of device [ 1238.586054][T17541] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1238.609807][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.637861][T17541] CPU: 1 UID: 0 PID: 17541 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1238.637916][T17541] Tainted: [L]=SOFTLOCKUP [ 1238.637929][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1238.637951][T17541] Call Trace: [ 1238.637963][T17541] [ 1238.637977][T17541] dump_stack_lvl+0x100/0x190 [ 1238.638040][T17541] f2fs_handle_critical_error+0x5d7/0x970 [ 1238.638099][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.638146][T17541] ? f2fs_build_fault_attr+0x53/0x280 [ 1238.638216][T17541] f2fs_write_end_io+0xc3f/0xf30 [ 1238.638282][T17541] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1238.638350][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.638409][T17541] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1238.638467][T17541] bio_endio+0x7a3/0x910 [ 1238.638525][T17541] submit_bio_noacct+0x64c/0x2010 [ 1238.638579][T17541] f2fs_submit_write_bio+0x133/0x350 [ 1238.638642][T17541] __submit_merged_bio+0x331/0x7b0 [ 1238.638709][T17541] __submit_merged_write_cond+0x3fe/0x510 [ 1238.638780][T17541] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1238.638855][T17541] ? __pfx___might_resched+0x10/0x10 [ 1238.638893][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.638951][T17541] f2fs_write_cache_pages+0x21c0/0x2720 [ 1238.639023][T17541] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1238.639074][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639125][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639201][T17541] ? find_held_lock+0x2b/0x80 [ 1238.639245][T17541] ? is_bpf_text_address+0x8a/0x1a0 [ 1238.639288][T17541] ? is_bpf_text_address+0x8a/0x1a0 [ 1238.639385][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639479][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639524][T17541] ? __mod_zone_page_state+0xe2/0x190 [ 1238.639588][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639634][T17541] ? rcu_is_watching+0x12/0xc0 [ 1238.639681][T17541] f2fs_write_data_pages+0x799/0x16d0 [ 1238.639741][T17541] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1238.639781][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639841][T17541] ? do_writepages+0x4b5/0x600 [ 1238.639890][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.639944][T17541] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1238.639991][T17541] do_writepages+0x278/0x600 [ 1238.640051][T17541] ? __pfx_do_writepages+0x10/0x10 [ 1238.640100][T17541] ? do_raw_spin_unlock+0x145/0x1e0 [ 1238.640139][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.640193][T17541] ? _raw_spin_unlock+0x28/0x50 [ 1238.640237][T17541] filemap_writeback+0x22d/0x2e0 [ 1238.640296][T17541] ? __pfx_filemap_writeback+0x10/0x10 [ 1238.640417][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.640463][T17541] ? find_held_lock+0x2b/0x80 [ 1238.640506][T17541] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 1238.640548][T17541] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 1238.640589][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.640651][T17541] f2fs_sync_dirty_inodes+0x452/0x990 [ 1238.640715][T17541] block_operations+0x2a6/0xfc0 [ 1238.640755][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.640801][T17541] ? finish_task_switch.isra.0+0x85e/0xb80 [ 1238.640856][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.640907][T17541] ? __pfx_block_operations+0x10/0x10 [ 1238.641015][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641065][T17541] ? ktime_get+0x200/0x300 [ 1238.641109][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641158][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641212][T17541] ? rcu_is_watching+0x12/0xc0 [ 1238.641261][T17541] f2fs_write_checkpoint+0x582/0x5550 [ 1238.641316][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641361][T17541] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1238.641398][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641449][T17541] ? __wait_for_common+0x1f3/0x4c0 [ 1238.641493][T17541] ? __pfx_schedule_timeout+0x10/0x10 [ 1238.641565][T17541] ? __pfx___wait_for_common+0x10/0x10 [ 1238.641609][T17541] ? kasan_quarantine_put+0x104/0x240 [ 1238.641651][T17541] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1238.641693][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641754][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641801][T17541] ? rcu_is_watching+0x12/0xc0 [ 1238.641840][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.641886][T17541] ? kthread_stop+0x280/0x680 [ 1238.641949][T17541] kill_f2fs_super+0x3e5/0x490 [ 1238.641993][T17541] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1238.642057][T17541] ? lockdep_hardirqs_on+0x78/0x100 [ 1238.642104][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.642152][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.642226][T17541] deactivate_locked_super+0xc1/0x1b0 [ 1238.642271][T17541] deactivate_super+0xe7/0x110 [ 1238.642317][T17541] cleanup_mnt+0x21f/0x450 [ 1238.642371][T17541] task_work_run+0x150/0x240 [ 1238.642436][T17541] ? __pfx_task_work_run+0x10/0x10 [ 1238.642499][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.642547][T17541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1238.642604][T17541] exit_to_user_mode_loop+0x100/0x4a0 [ 1238.642669][T17541] do_syscall_64+0x67c/0xf80 [ 1238.642712][T17541] ? irqentry_exit+0x138/0x670 [ 1238.642763][T17541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.642804][T17541] RIP: 0033:0x7f9f8c79d897 [ 1238.642836][T17541] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1238.642873][T17541] RSP: 002b:00007ffe1c08ed88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1238.642908][T17541] RAX: 0000000000000000 RBX: 00007f9f8c831ef0 RCX: 00007f9f8c79d897 [ 1238.642933][T17541] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1c08ee40 [ 1238.642956][T17541] RBP: 00007ffe1c08ee40 R08: 00007ffe1c08fe40 R09: 00000000ffffffff [ 1238.642980][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1c08fed0 [ 1238.643004][T17541] R13: 00007f9f8c831ef0 R14: 000000000012e5a8 R15: 00007ffe1c08ff10 [ 1238.643061][T17541] [ 1239.234938][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.245080][T30750] usb 5-1: USB disconnect, device number 70 [ 1239.289706][ T591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10412'. [ 1239.317463][T17541] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1239.402112][ T591] bond0: ARP target 170.170.170.170 is already present [ 1239.493042][ T591] bond0: option arp_ip_target: invalid value (2863311530) [ 1239.630537][ T595] loop3: detected capacity change from 0 to 4096 [ 1239.637377][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.649045][ T595] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1239.761223][ T595] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1239.833123][ T595] System zones: 0-5 [ 1239.852604][ T595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.044094][T17578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.052600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.113589][T17578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.265155][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.369875][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10422'. [ 1241.209089][ T637] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.10433'. [ 1241.463072][T32212] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1241.686843][T32212] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1241.726763][T32212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.756974][T32212] usb 1-1: Product: syz [ 1241.761223][T32212] usb 1-1: Manufacturer: syz [ 1241.773424][T32212] usb 1-1: SerialNumber: syz [ 1241.811758][T32212] usb 1-1: config 0 descriptor?? [ 1241.982809][ T1205] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 1242.053415][ T1205] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1242.141171][ T654] loop8: detected capacity change from 0 to 7 [ 1242.185396][ T654] Dev loop8: unable to read RDB block 7 [ 1242.204369][T32212] usb 1-1: USB disconnect, device number 63 [ 1242.216793][ T654] loop8: AHDI p1 p2 p3 [ 1242.221056][ T654] loop8: partition table partially beyond EOD, truncated [ 1242.264267][ T654] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1242.305956][ T654] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1242.351388][ T9733] udevd[9733]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.394668][ T9718] Dev loop8: unable to read RDB block 7 [ 1242.400289][ T9718] loop8: AHDI p1 p2 p3 [ 1242.440688][ T9718] loop8: partition table partially beyond EOD, truncated [ 1242.481809][ T9718] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1242.513772][ T9718] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1242.526674][ T655] Dev loop8: unable to read RDB block 7 [ 1242.568655][ T655] loop8: AHDI p1 p2 p3 [ 1242.573454][ T655] loop8: partition table partially beyond EOD, truncated [ 1242.581374][ T655] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1242.597815][ T655] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1242.758102][T32356] net_ratelimit: 14 callbacks suppressed [ 1242.758130][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.886449][ T666] loop8: detected capacity change from 0 to 128 [ 1242.958394][ T666] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1242.983508][ T666] ext4 filesystem being mounted at /801/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1243.151974][T18888] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1243.394614][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.485666][ T680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.554838][ T680] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1243.954777][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.965687][T17578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.076578][ T684] loop7: detected capacity change from 0 to 32768 [ 1244.087449][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.108656][ T684] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1244.116946][ T684] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1244.121221][ T686] loop8: detected capacity change from 0 to 1024 [ 1244.151438][ T660] loop4: detected capacity change from 0 to 32768 [ 1244.212383][ T684] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 1244.216114][ T660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10442 (660) [ 1244.222494][T32356] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1244.243708][ T686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.261161][ T686] ext4 filesystem being mounted at /803/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1244.305481][T32356] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1244.344352][ T660] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1244.412997][ T660] BTRFS info (device loop4): using crc32c checksum algorithm [ 1244.414798][T17578] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 1244.448129][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.542322][T17578] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1244.576047][T17578] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1244.576047][T17578] [ 1244.594478][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1244.667971][ T706] overlayfs: failed to clone upperpath [ 1244.759849][T32356] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 454ms [ 1244.767834][T32356] gfs2: fsid=syz:syz.0: jid=0: Done [ 1244.773190][ T684] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1244.802185][ T660] BTRFS info (device loop4): rebuilding free space tree [ 1245.025040][ T660] BTRFS info (device loop4): checking UUID tree [ 1245.062287][ T660] BTRFS info (device loop4): allowing degraded mounts [ 1245.095122][ T660] BTRFS info (device loop4): enabling ssd optimizations [ 1245.145705][ T660] BTRFS info (device loop4): enabling free space tree [ 1245.152709][ T660] BTRFS info (device loop4): force clearing of disk cache [ 1245.164944][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.223012][ T660] BTRFS info (device loop4): force zlib compression, level 3 [ 1245.235854][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.244634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.481024][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.704491][ T5825] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1246.155934][ T741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1246.200632][ T745] team_slave_0: entered promiscuous mode [ 1246.208219][ T745] team_slave_1: entered promiscuous mode [ 1246.270618][ T746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.279364][ T745] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1246.428692][ T746] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1246.497211][ T747] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1246.737319][ T755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.186417][ T762] loop3: detected capacity change from 0 to 128 [ 1247.207485][ T762] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1247.283425][T32356] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1247.337897][ T762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1247.422442][ T762] ext2 filesystem being mounted at /1765/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.483240][T32356] usb 5-1: Using ep0 maxpacket: 32 [ 1247.494935][T32356] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1247.525553][T32356] usb 5-1: config 0 has no interface number 0 [ 1247.531707][T32356] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1247.575951][T32356] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1247.604119][T32356] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1247.643702][T32356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.651865][T32356] usb 5-1: Product: syz [ 1247.674045][ T772] loop7: detected capacity change from 0 to 128 [ 1247.680676][T32356] usb 5-1: Manufacturer: syz [ 1247.708004][T32356] usb 5-1: SerialNumber: syz [ 1247.735347][T32356] usb 5-1: config 0 descriptor?? [ 1247.789375][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.273785][ T5843] net_ratelimit: 8 callbacks suppressed [ 1248.273829][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.372039][T32356] appletouch 5-1:0.85: Geyser mode initialized. [ 1248.386121][T32356] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input97 [ 1248.509373][ T794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.544541][ T794] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1248.582214][T32356] usb 5-1: USB disconnect, device number 71 [ 1248.593848][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.710222][T32356] appletouch 5-1:0.85: input: appletouch disconnected [ 1249.086535][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.133440][ T798] loop7: detected capacity change from 0 to 4096 [ 1249.323034][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.635404][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.717105][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.354712][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.679010][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.993506][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.002154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.865311][ T849] overlayfs: failed to clone lowerpath [ 1251.875152][ T847] loop3: detected capacity change from 0 to 4096 [ 1252.726029][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10521'. [ 1253.224554][T32356] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1253.422994][T32356] usb 4-1: Using ep0 maxpacket: 16 [ 1253.444090][T32356] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1253.466048][T32356] usb 4-1: config 0 has no interface number 0 [ 1253.494543][T32356] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1253.507225][ T5843] net_ratelimit: 14 callbacks suppressed [ 1253.507252][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.555425][T32356] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1253.617821][T32356] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1253.648313][T32356] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1253.670517][T32356] usb 4-1: Product: syz [ 1253.686189][T32356] usb 4-1: SerialNumber: syz [ 1253.704706][T32356] usb 4-1: config 0 descriptor?? [ 1253.751860][T32356] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1253.780235][T32356] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input98 [ 1253.797669][ T883] loop7: detected capacity change from 0 to 4096 [ 1253.821878][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.065359][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.079775][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.088206][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.096018][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.105594][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.112803][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.120364][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.127802][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.135135][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.142118][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1254.153191][ T5843] usb 4-1: USB disconnect, device number 73 [ 1254.198834][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.253220][ T5843] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1254.513214][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.836996][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.923314][ T902] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.10538'. [ 1255.376719][ T916] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.10542'. [ 1255.525354][ T923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1255.568913][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.776011][ T929] loop7: detected capacity change from 0 to 1024 [ 1255.826882][ T929] EXT4-fs: Ignoring removed orlov option [ 1255.832751][ T929] EXT4-fs: Ignoring removed bh option [ 1256.053520][ T929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.163819][ T947] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1256.415171][T17541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.600380][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.815877][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.824550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.095727][ T1205] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1257.213524][ T5843] kernel write not supported for file /ppp (pid: 5843 comm: kworker/1:5) [ 1257.265390][ T1205] usb 9-1: Using ep0 maxpacket: 32 [ 1257.292411][ T1205] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.348952][ T1205] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1257.614418][ T1205] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1257.639274][ T1205] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1257.724495][ T1205] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1257.733808][ T1205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.741894][ T1205] usb 9-1: Product: syz [ 1257.753032][ T1205] usb 9-1: Manufacturer: syz [ 1257.763336][ T1205] usb 9-1: SerialNumber: syz [ 1257.849289][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1257.876716][ T1205] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input99 [ 1258.071135][ T983] loop7: detected capacity change from 0 to 2048 [ 1258.229077][ T1205] imon:send_packet: packet tx failed (-71) [ 1258.266602][ T992] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1258.293988][ T1205] imon 9-1:155.0: panel buttons/knobs setup failed [ 1258.370236][ T1205] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1258.438056][ T1205] (id 0x00) [ 1258.616931][ T1205] rc_core: IR keymap rc-imon-pad not found [ 1258.652998][ T1205] Registered IR keymap rc-empty [ 1258.661235][ T1205] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1258.701909][ T1205] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1258.727482][ T1205] imon:send_packet: packet tx failed (-71) [ 1258.753222][ T5843] net_ratelimit: 3 callbacks suppressed [ 1258.753250][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.760887][ T1205] imon 9-1:155.0: remote input dev register failed [ 1258.813251][ T1205] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 1258.868503][ T1004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.008129][ T1205] imon 9-1:155.0: unable to initialize intf0, err 0 [ 1259.034032][ T1205] imon:imon_probe: failed to initialize context! [ 1259.050728][ T1205] imon 9-1:155.0: unable to register, err -19 [ 1259.112370][ T1205] usb 9-1: USB disconnect, device number 39 [ 1259.563891][ T1018] loop4: detected capacity change from 0 to 2048 [ 1259.668694][ T1026] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1259.698554][ T1028] loop7: detected capacity change from 0 to 256 [ 1259.726065][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1259.726092][ T30] audit: type=1800 audit(1771531947.595:443): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10580" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1259.809475][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.817877][ T30] audit: type=1800 audit(1771531947.625:444): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10580" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1259.821709][ T1028] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1259.954727][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.135303][ T1028] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 1260.177365][ T1028] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 1260.203116][ T1026] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1260.226310][ T1026] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1260.247666][ T1026] Remounting filesystem read-only [ 1260.285169][ T5825] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1260.831254][ T1036] loop7: detected capacity change from 0 to 4096 [ 1260.839000][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.939328][ T1049] loop3: detected capacity change from 0 to 128 [ 1261.909745][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.954565][ T1003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.963168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.186765][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10599'. [ 1262.203579][ T1083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1262.210244][ T1083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1262.295243][ T1083] vhci_hcd vhci_hcd.0: Device attached [ 1262.495413][ T5843] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1262.543623][T32356] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1262.665119][ T5843] usb 5-1: config 0 has no interfaces? [ 1262.681180][ T5843] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1262.730860][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.840523][ T5843] usb 5-1: config 0 descriptor?? [ 1262.893293][T30750] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1262.914012][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.081443][ T5843] usb 5-1: string descriptor 0 read error: -71 [ 1263.087997][T30750] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.123209][ T1085] usb 41-1: recv xbuf, 0 [ 1263.150707][T30750] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.192416][T17578] vhci_hcd vhci_hcd.4: stop threads [ 1263.198537][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.207428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.236967][ T5843] usb 5-1: USB disconnect, device number 72 [ 1263.257166][T17578] vhci_hcd vhci_hcd.4: release socket [ 1263.299911][T30750] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.309310][T32356] usb 41-1: device descriptor read/64, error -71 [ 1263.323369][T17578] vhci_hcd vhci_hcd.4: disconnect device [ 1263.368274][T30750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.396935][T30750] usb 9-1: Product: syz [ 1263.414368][T30750] usb 9-1: Manufacturer: syz [ 1263.446781][T30750] usb 9-1: SerialNumber: syz [ 1263.482950][ T1091] loop3: detected capacity change from 0 to 131072 [ 1263.495696][ T1091] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1263.503971][ T1091] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1263.515845][ T1091] F2FS-fs (loop3): invalid crc value [ 1263.536790][T32356] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1263.637788][ T1091] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1263.656073][ T1091] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1263.663334][ T1091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1263.795192][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.967699][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.550744][T30750] cdc_ncm 9-1:1.0: bind() failure [ 1264.579715][T30750] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1264.608586][T30750] cdc_ncm 9-1:1.1: bind() failure [ 1264.659329][T30750] usb 9-1: USB disconnect, device number 40 [ 1264.676618][ T1120] loop3: detected capacity change from 0 to 4096 [ 1264.747190][ T1124] sock: sock_set_timeout: `syz.0.10616' (pid 1124) tries to set negative timeout [ 1264.995219][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.483386][ T1132] sctp: [Deprecated]: syz.8.10620 (pid 1132) Use of int in maxseg socket option. [ 1265.483386][ T1132] Use struct sctp_assoc_value instead [ 1265.714027][T17578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.033365][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.698238][ T1156] loop7: detected capacity change from 0 to 256 [ 1266.769354][ T1156] FAT-fs (loop7): Directory bread(block 64) failed [ 1266.789420][ T1156] FAT-fs (loop7): Directory bread(block 65) failed [ 1266.845555][ T1156] FAT-fs (loop7): Directory bread(block 66) failed [ 1266.867500][ T1156] FAT-fs (loop7): Directory bread(block 67) failed [ 1266.909066][ T1156] FAT-fs (loop7): Directory bread(block 68) failed [ 1266.943773][ T1156] FAT-fs (loop7): Directory bread(block 69) failed [ 1266.984056][ T1156] FAT-fs (loop7): Directory bread(block 70) failed [ 1267.015699][ T1156] FAT-fs (loop7): Directory bread(block 71) failed [ 1267.022657][ T1156] FAT-fs (loop7): Directory bread(block 72) failed [ 1267.080608][ T1156] FAT-fs (loop7): Directory bread(block 73) failed [ 1267.083221][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.113604][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.811248][ T1195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1268.915100][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.933213][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.941577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.951395][T32210] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1269.003116][ T1205] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1269.133028][T32210] usb 9-1: Using ep0 maxpacket: 8 [ 1269.153186][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.156296][T32210] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1269.172055][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 1269.191100][ T1205] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1269.201716][T32210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.214790][ T1205] usb 5-1: config 0 has no interface number 0 [ 1269.233809][T32210] usb 9-1: Product: syz [ 1269.238128][ T1205] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.249632][T32210] usb 9-1: Manufacturer: syz [ 1269.263491][T32210] usb 9-1: SerialNumber: syz [ 1269.268216][ T1205] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1269.294459][ T1213] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10653'. [ 1269.298270][T32210] usb 9-1: config 0 descriptor?? [ 1269.324062][ T1205] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1269.372841][T32210] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1269.380404][ T1205] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1269.433114][ T1205] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1269.473242][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.532548][ T1205] usb 5-1: config 0 descriptor?? [ 1269.585831][ T1205] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1269.596192][ T1220] loop3: detected capacity change from 0 to 16 [ 1269.639337][ T1220] erofs (device loop3): mounted with root inode @ nid 36. [ 1269.825721][ T1205] usb 5-1: USB disconnect, device number 73 [ 1269.867786][ T1205] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1270.197997][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.269565][ T1232] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1270.408978][T32210] gspca_sonixj: reg_w err -71 [ 1270.414705][T32210] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1270.472076][T32210] usb 9-1: USB disconnect, device number 41 [ 1271.234089][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.246992][ T1255] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 1271.473576][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.484055][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.492536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.786642][ T1267] tunl0: Caught tx_queue_len zero misconfig [ 1272.083124][T32212] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1272.243084][T32212] usb 5-1: Using ep0 maxpacket: 16 [ 1272.273696][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.274127][T32212] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1272.320974][T32212] usb 5-1: config 0 has no interface number 0 [ 1272.347670][T32212] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.394975][T32212] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1272.450137][T32212] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1272.475867][T32212] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1272.506652][T32212] usb 5-1: Product: syz [ 1272.525856][T32212] usb 5-1: SerialNumber: syz [ 1272.565130][T32212] usb 5-1: config 0 descriptor?? [ 1272.582682][T32212] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1272.625171][T32212] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input101 [ 1273.137100][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1273.138766][ T5962] usb 5-1: USB disconnect, device number 74 [ 1273.144118][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1273.326533][ T5962] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1273.509663][ T1305] loop8: detected capacity change from 0 to 4096 [ 1273.524050][ T1307] veth3: entered promiscuous mode [ 1273.533831][ T1307] veth3: entered allmulticast mode [ 1273.549206][ T1305] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1273.699392][ T1305] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1273.766292][ T1305] ntfs3(loop8): ino=1a, mi_enum_attr [ 1273.810468][ T1305] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1273.939540][ T30] audit: type=1800 audit(1771531961.805:445): pid=1305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10691" name="file1" dev="loop8" ino=24 res=0 errno=0 [ 1274.038565][ T12] net_ratelimit: 1 callbacks suppressed [ 1274.038590][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.354538][T30750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.365041][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.376279][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.386796][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.646888][ T1331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input102 [ 1274.676860][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.685486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.148644][ T1345] loop4: detected capacity change from 0 to 256 [ 1275.213206][ T1345] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1275.341138][ T1348] loop7: detected capacity change from 0 to 256 [ 1275.452655][ T1352] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 1275.473192][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.482046][ T1348] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1275.845645][ T1329] loop8: detected capacity change from 0 to 32768 [ 1275.945536][ T1329] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1276.056710][ T1329] XFS (loop8): Ending clean mount [ 1276.077084][ T1329] XFS (loop8): Quotacheck needed: Please wait. [ 1276.237214][ T1329] XFS (loop8): Quotacheck: Done. [ 1276.435364][ T30] audit: type=1800 audit(1771531964.305:446): pid=1329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10699" name="file1" dev="loop8" ino=4429 res=0 errno=0 [ 1276.523113][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.558893][ T1375] loop7: detected capacity change from 0 to 2048 [ 1276.629794][T18888] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1276.643178][T32212] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1276.687700][ T1375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1276.813880][T32212] usb 5-1: Using ep0 maxpacket: 32 [ 1276.898858][T32212] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 1276.983614][T32212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.991780][T32212] usb 5-1: Product: syz [ 1277.083213][T32212] usb 5-1: Manufacturer: syz [ 1277.092216][T32212] usb 5-1: SerialNumber: syz [ 1277.184590][T32212] usb 5-1: config 0 descriptor?? [ 1277.208449][ T61] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1277.238790][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.257651][ T61] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28 [ 1277.311206][ T61] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1277.311206][ T61] [ 1277.353028][ T61] EXT4-fs (loop7): Total free blocks count 0 [ 1277.359458][ T61] EXT4-fs (loop7): Free/Dirty block details [ 1277.393029][ T61] EXT4-fs (loop7): free_blocks=2415919504 [ 1277.408007][ T61] EXT4-fs (loop7): dirty_blocks=304 [ 1277.432925][ T61] EXT4-fs (loop7): Block reservation details [ 1277.455031][ T61] EXT4-fs (loop7): i_reserved_data_blocks=19 [ 1277.549874][T17541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.659200][ T1390] loop8: detected capacity change from 0 to 512 [ 1277.684851][ T1390] EXT4-fs: Ignoring removed nobh option [ 1277.742576][ T1390] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 1277.777743][ T1390] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 1277.821843][ T1390] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.10716: inode has both inline data and extents flags [ 1277.841032][T32212] mos7840 5-1:0.0: required endpoints missing [ 1277.889936][T32212] usb 5-1: USB disconnect, device number 75 [ 1277.917697][ T1390] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1277.922900][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1277.938658][ C1] EXT4-fs (loop8): initial error at time 1771531965: ext4_orphan_get:1391: inode 13 [ 1277.948295][ C1] EXT4-fs (loop8): last error at time 1771531965: ext4_orphan_get:1391: inode 13 [ 1277.983381][ T1390] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.10716: couldn't read orphan inode 13 (err -117) [ 1278.063370][ T1390] loop8: lost filesystem error report for type 5 error -117 [ 1278.089811][ T1390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1278.203852][ T1390] EXT4-fs (loop8): shut down requested (2) [ 1278.336624][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.649304][ T1408] loop8: detected capacity change from 0 to 256 [ 1278.824157][ T1408] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1278.983867][ T1408] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 1279.009850][ T1421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1279.021483][ T1408] exFAT-fs (loop8): valid_size(150994954) is greater than size(10) [ 1279.030334][ T1421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1279.134796][ T1421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1279.151568][ T1421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1279.586885][ T30] audit: type=1326 audit(1771531967.455:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1279.642948][ T1096] net_ratelimit: 4 callbacks suppressed [ 1279.642976][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.663907][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.683724][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.692521][ T30] audit: type=1326 audit(1771531967.485:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f8c73da19 code=0x7ffc0000 [ 1279.793950][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.814464][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.822927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.823379][ T30] audit: type=1326 audit(1771531967.485:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1280.011571][ T30] audit: type=1326 audit(1771531967.505:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f8c73da19 code=0x7ffc0000 [ 1280.160733][ T30] audit: type=1326 audit(1771531967.505:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f8c73da19 code=0x7ffc0000 [ 1280.266199][ T1440] netlink: 'syz.7.10738': attribute type 10 has an invalid length. [ 1280.323424][ T30] audit: type=1326 audit(1771531967.505:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1280.389664][ T1440] veth0_vlan: entered allmulticast mode [ 1280.395644][ T30] audit: type=1326 audit(1771531967.505:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1280.395722][ T30] audit: type=1326 audit(1771531967.505:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1280.395800][ T30] audit: type=1326 audit(1771531967.505:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f8c73da19 code=0x7ffc0000 [ 1280.395869][ T30] audit: type=1326 audit(1771531967.505:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1427 comm="syz.7.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8c79c629 code=0x7ffc0000 [ 1280.561648][ T1440] veth0_vlan: left promiscuous mode [ 1280.574916][ T1440] veth0_vlan: entered promiscuous mode [ 1280.586864][ T1440] team0: Device veth0_vlan failed to register rx_handler [ 1280.706234][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.716978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.753745][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.075276][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 1281.153130][T17192] Bluetooth: hci2: command 0x0405 tx timeout [ 1281.794452][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.163251][T17192] Bluetooth: hci1: command 0x0406 tx timeout [ 1283.251710][T17192] Bluetooth: hci2: command 0x0405 tx timeout [ 1283.816226][ T1497] loop8: detected capacity change from 0 to 131072 [ 1283.825201][ T1497] F2FS-fs (loop8): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 1283.833977][ T1497] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1283.847474][ T1497] F2FS-fs (loop8): invalid crc value [ 1284.033561][ T1497] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1284.050002][ T1497] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 1284.060224][ T1497] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 1284.674271][ T5962] net_ratelimit: 4 callbacks suppressed [ 1284.674302][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.388317][ T1520] loop4: detected capacity change from 0 to 4096 [ 1285.443766][ T1520] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1285.559571][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.568169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.576609][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.584861][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.594504][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.619074][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.713473][T17192] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1286.305973][ T1538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1286.439042][ T1536] loop7: detected capacity change from 0 to 4096 [ 1286.477865][ T1536] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1286.602749][ T1536] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1286.634655][ T1536] ntfs3(loop7): ino=1a, mi_enum_attr [ 1286.653979][ T1536] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 1286.673214][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.780707][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1286.780735][ T30] audit: type=1800 audit(1771531974.645:511): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10787" name="file1" dev="loop7" ino=24 res=0 errno=0 [ 1287.233006][ T5962] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1287.423237][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 1287.444930][ T5962] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1287.475807][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.533174][ T5962] usb 1-1: Product: syz [ 1287.537413][ T5962] usb 1-1: Manufacturer: syz [ 1287.608250][ T5962] usb 1-1: SerialNumber: syz [ 1287.685654][ T5962] usb 1-1: config 0 descriptor?? [ 1287.723124][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.730002][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10789'. [ 1287.779763][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10789'. [ 1288.099830][T32356] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 1288.113915][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.156215][T32356] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1288.201411][ T1575] loop3: detected capacity change from 0 to 2048 [ 1288.262707][ T1575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1288.296249][ T5962] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1288.342822][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1288.400778][ T5962] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1288.455548][ T5962] usb 1-1: media controller created [ 1288.534773][ T1582] fido_id[1582]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1288.541538][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.777777][ T5962] zl10353_read_register: readreg error (reg=127, ret==0) [ 1288.811785][ T5962] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1288.840771][ T5962] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1288.895698][ T5962] usb 1-1: USB disconnect, device number 64 [ 1289.084865][ T5962] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1289.585896][ T1600] bridge1: entered allmulticast mode [ 1289.596992][ T1600] team0: Port device bridge1 added [ 1289.698242][ T1597] loop4: detected capacity change from 0 to 4096 [ 1289.729240][ T1597] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1289.793195][ T5962] net_ratelimit: 3 callbacks suppressed [ 1289.793221][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.884880][ T1597] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1289.929101][ T1597] ntfs3(loop4): ino=1a, mi_enum_attr [ 1289.975756][ T1597] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1290.011197][ T1610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1290.103031][ T30] audit: type=1800 audit(1771531977.965:512): pid=1597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10799" name="file1" dev="loop4" ino=24 res=0 errno=0 [ 1290.526148][ T1617] loop8: detected capacity change from 0 to 1024 [ 1290.563488][ T1620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10812'. [ 1290.574747][ T1617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1290.639491][ T1617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1290.690978][ T5962] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1290.733128][ T1617] System zones: 0-1, 3-36 [ 1290.757376][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.798401][ T1617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.833204][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.893059][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 1290.900676][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.963167][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.980577][ T1205] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1291.013007][ T5962] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1291.022117][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.086044][ T5962] usb 4-1: config 0 descriptor?? [ 1291.163092][ T1205] usb 1-1: device descriptor read/64, error -71 [ 1291.194266][T18888] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.255409][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10816'. [ 1291.280136][ T1634] netlink: 'syz.4.10816': attribute type 30 has an invalid length. [ 1291.321676][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.330572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.348606][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10816'. [ 1291.399243][ T1636] netlink: 'syz.4.10816': attribute type 30 has an invalid length. [ 1291.453519][ T1205] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1291.556499][ T1111] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.611011][ T1205] usb 1-1: device descriptor read/64, error -71 [ 1291.616098][ T1111] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.634428][ T5962] savu 0003:1E7D:2D5A.0065: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1291.673738][ T1111] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.713284][ T5843] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1291.720959][ T1111] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.744081][ T1205] usb usb1-port1: attempt power cycle [ 1291.868781][ T5962] usb 4-1: USB disconnect, device number 74 [ 1291.875858][T32356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.886949][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.922491][ T5843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1291.947961][ T1648] loop4: detected capacity change from 0 to 128 [ 1291.972830][ T5843] usb 9-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1291.999911][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.038108][ T5843] usb 9-1: config 0 descriptor?? [ 1292.038549][ T1648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.090359][ T1648] ext4 filesystem being mounted at /1760/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.153030][ T1205] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1292.184107][ T1205] usb 1-1: device descriptor read/8, error -71 [ 1292.230584][ T1648] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1292.339505][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1292.434752][ T1205] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1292.465126][ T1205] usb 1-1: device descriptor read/8, error -71 [ 1292.489967][ T5843] kye 0003:0458:0087.0066: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.8-1/input0 [ 1292.603290][ T1205] usb usb1-port1: unable to enumerate USB device [ 1292.678620][ T1205] usb 9-1: USB disconnect, device number 42 [ 1292.826521][ T1654] fido_id[1654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1292.915863][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.233923][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.874532][ T1096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.883017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.999845][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10835'. [ 1294.073904][ T1682] hsr_slave_0: left promiscuous mode [ 1294.122184][ T1686] loop4: detected capacity change from 0 to 1024 [ 1294.333322][ T1694] ªªªªªª: renamed from vlan0 (while UP) [ 1294.817315][ T1692] loop7: detected capacity change from 0 to 65536 [ 1294.870506][ T1692] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1294.921506][ T1692] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1294.996139][ T1692] XFS (loop7): Ending clean mount [ 1295.020639][ T5962] net_ratelimit: 1 callbacks suppressed [ 1295.020667][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.058129][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.070933][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.077696][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.085345][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.094263][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.103355][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.112230][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.121247][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.130201][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.139520][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.148504][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.158085][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.174245][ T1692] XFS (loop7): page discard on page ffffea000243aa40, inode 0x26, pos 3072. [ 1295.187515][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.198662][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.205037][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.212445][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.221444][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.230469][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.239510][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.248476][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.257537][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.267146][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.276106][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.285355][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.296982][ T1692] XFS (loop7): page discard on page ffffea000133e6c0, inode 0x26, pos 4096. [ 1295.309899][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.321519][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.327503][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.335050][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.344003][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.353020][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.361900][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.371141][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.380422][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.389764][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.392047][T32212] kernel write not supported for file /vbi5 (pid: 32212 comm: kworker/0:8) [ 1295.398683][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.398772][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.403878][ T1692] XFS (loop7): page discard on page ffffea0002497580, inode 0x26, pos 8192. [ 1295.443449][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.454629][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.460384][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.467981][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.477596][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.486891][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.495856][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.505068][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.514123][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.523113][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.532264][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.541230][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.553375][ T1692] XFS (loop7): page discard on page ffffea000247f100, inode 0x26, pos 16384. [ 1295.564594][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.575696][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.581443][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.589273][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.598202][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.607447][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.616514][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.625466][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.634506][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.643458][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.652517][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.661658][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.673456][ T1692] XFS (loop7): page discard on page ffffea0002497600, inode 0x26, pos 32768. [ 1295.685169][ T1692] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 1295.699630][ T1692] XFS (loop7): Unmount and run xfs_repair [ 1295.706033][ T1692] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1295.713536][ T1692] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1295.722498][ T1692] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 1295.731449][ T1692] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1295.740403][ T1692] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 1295.749320][ T1692] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 1295.758307][ T1692] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1295.768272][ T1692] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.777445][ T1692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1295.786429][ T1692] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 1295.798740][ T1692] XFS (loop7): page discard on page ffffea0000f96900, inode 0x26, pos 65536. [ 1295.811587][ T5962] loop7: writeback error on inode 38, offset 0, sector 22 [ 1295.892530][T17541] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1296.033653][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.042378][T17541] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 1296.042679][T32212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.061778][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.178702][ T1725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1296.187765][ T1725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1296.433475][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.441971][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.450483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.505618][T32212] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1296.634634][ T1740] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1296.673049][T32212] usb 4-1: Using ep0 maxpacket: 16 [ 1296.683516][T32212] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1296.695124][T32212] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1296.742381][T32212] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1296.752502][T32212] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1296.823316][T32212] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1296.832280][T32212] usb 4-1: config 0 has no interface number 0 [ 1296.871308][T32212] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1296.933819][T32212] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1296.983443][T32212] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1297.024206][T32212] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.074088][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.103199][ T1751] netlink: 'syz.4.10859': attribute type 4 has an invalid length. [ 1297.123357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.143686][T32212] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1297.151519][T32356] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1297.165171][T32212] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1297.215963][T32212] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1297.256324][T32212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.300064][T32212] usb 4-1: Product: syz [ 1297.324477][T32212] usb 4-1: Manufacturer: syz [ 1297.329323][T32212] usb 4-1: SerialNumber: syz [ 1297.363086][T32356] usb 9-1: Using ep0 maxpacket: 8 [ 1297.380372][T32212] usb 4-1: config 0 descriptor?? [ 1297.385381][T32356] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1297.385448][T32356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.385486][T32356] usb 9-1: Product: syz [ 1297.385514][T32356] usb 9-1: Manufacturer: syz [ 1297.385543][T32356] usb 9-1: SerialNumber: syz [ 1297.390246][T32356] usb 9-1: config 0 descriptor?? [ 1297.453403][ T30] audit: type=1326 audit(1771531985.315:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1297.479932][T32356] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1297.505868][T32212] usb 4-1: selecting invalid altsetting 2 [ 1297.543008][ T30] audit: type=1326 audit(1771531985.315:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1297.846777][ T1763] loop4: detected capacity change from 0 to 16 [ 1297.900941][ T1763] erofs (device loop4): mounted with root inode @ nid 36. [ 1297.914083][T17192] Bluetooth: hci1: command 0x0406 tx timeout [ 1298.004882][ T1763] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 1298.087784][T17192] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1298.174725][ T1763] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1298.196966][T17192] Bluetooth: hci2: command 0x0405 tx timeout [ 1298.243057][ T1763] erofs (device loop4): read error -117 @ 1 of nid 89 [ 1298.546451][T32212] usb 4-1: USB disconnect, device number 75 [ 1298.558301][ T30] audit: type=1326 audit(1771531985.315:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1298.719043][ T5962] usb 9-1: USB disconnect, device number 43 [ 1298.878399][ T1759] loop7: detected capacity change from 0 to 131072 [ 1298.887695][ T1759] F2FS-fs (loop7): invalid crc value [ 1298.912988][ T30] audit: type=1326 audit(1771531985.315:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.006072][ T30] audit: type=1326 audit(1771531985.315:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.034758][ T1759] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1299.045161][ T30] audit: type=1326 audit(1771531985.315:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.068896][ T1759] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1299.078798][ T30] audit: type=1326 audit(1771531985.315:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.171985][ T30] audit: type=1326 audit(1771531985.315:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.262989][ T30] audit: type=1326 audit(1771531985.315:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.350191][ T30] audit: type=1326 audit(1771531985.315:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1755 comm="syz.4.10862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f222ed9c629 code=0x7ffc0000 [ 1299.641077][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.650430][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.794707][ T1787] vlan3: entered allmulticast mode [ 1299.816375][ T1787] bridge0: port 3(vlan3) entered blocking state [ 1299.836581][ T1787] bridge0: port 3(vlan3) entered disabled state [ 1299.888276][ T1787] vlan3: entered promiscuous mode [ 1300.130542][ T1794] loop3: detected capacity change from 0 to 256 [ 1300.158574][ T1794] exfat: Deprecated parameter 'namecase' [ 1300.183350][ T1794] exfat: Bad value for 'allow_utime' [ 1300.189738][ T1796] ------------[ cut here ]------------ [ 1300.197162][ T1796] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 1300.208946][ T1796] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#0: syz.8.10876/1796 [ 1300.222632][ T1796] Modules linked in: [ 1300.228220][ T1796] CPU: 0 UID: 0 PID: 1796 Comm: syz.8.10876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.239285][ T1796] Tainted: [L]=SOFTLOCKUP [ 1300.243824][ T1796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1300.254244][ T1796] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 1300.260971][ T1796] Code: 00 48 8d 3d f5 aa c2 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 32 f3 e4 fa e8 bd 77 6a 04 [ 1300.281226][ T1796] RSP: 0018:ffffc9000e3a7120 EFLAGS: 00010246 [ 1300.287670][ T1796] RAX: ffff888020feea90 RBX: 0000000000000000 RCX: ffff888041708ec0 [ 1300.295733][ T1796] RDX: 0000000000000000 RSI: ffff888020fef002 RDI: ffffffff90e63270 [ 1300.304009][ T1796] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 1300.312017][ T1796] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 1300.320133][ T1796] R13: ffff888041709090 R14: ffff88805747b100 R15: 0000000000000005 [ 1300.328321][ T1796] FS: 00007f8df2d286c0(0000) GS:ffff888124348000(0000) knlGS:0000000000000000 [ 1300.337815][ T1796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1300.344512][ T1796] CR2: 0000200000001080 CR3: 0000000081a99000 CR4: 0000000000350ef0 [ 1300.352512][ T1796] Call Trace: [ 1300.355954][ T1796] [ 1300.358915][ T1796] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 1300.364960][ T1796] mac80211_hwsim_sta_add+0xc9/0x290 [ 1300.370550][ T1796] drv_sta_state+0x887/0x1960 [ 1300.375377][ T1796] sta_info_insert_rcu+0x170b/0x2fa0 [ 1300.380809][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.386595][ T1796] sta_info_insert+0x16/0xd0 [ 1300.391232][ T1796] ieee80211_add_station+0x471/0x6d0 [ 1300.396683][ T1796] nl80211_new_station+0x145b/0x1dd0 [ 1300.402298][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.408343][ T1796] ? __pfx_nl80211_new_station+0x10/0x10 [ 1300.414134][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.419817][ T1796] ? nl80211_pre_doit+0x19a/0xae0 [ 1300.424979][ T1796] genl_family_rcv_msg_doit+0x214/0x300 [ 1300.430583][ T1796] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1300.436868][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.442549][ T1796] ? genl_get_cmd+0x3ef/0x720 [ 1300.447377][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.453147][ T1796] ? security_capable+0x80/0x260 [ 1300.458143][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.463878][ T1796] ? ns_capable+0xd2/0xf0 [ 1300.468331][ T1796] genl_rcv_msg+0x560/0x800 [ 1300.473031][ T1796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1300.478112][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.484006][ T1796] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1300.489409][ T1796] ? __pfx_nl80211_new_station+0x10/0x10 [ 1300.495277][ T1796] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1300.500964][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.506743][ T1796] netlink_rcv_skb+0x159/0x420 [ 1300.511810][ T1796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1300.517148][ T1796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1300.522508][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.528334][ T1796] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1300.533745][ T1796] genl_rcv+0x28/0x40 [ 1300.537763][ T1796] netlink_unicast+0x5aa/0x870 [ 1300.542587][ T1796] ? __pfx_netlink_unicast+0x10/0x10 [ 1300.548089][ T1796] netlink_sendmsg+0x8b0/0xda0 [ 1300.552981][ T1796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.558309][ T1796] ? __might_fault+0x80/0x140 [ 1300.563128][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.568962][ T1796] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1300.574737][ T1796] ____sys_sendmsg+0xa54/0xc30 [ 1300.579554][ T1796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1300.584970][ T1796] ? __pfx_futex_wake_mark+0x10/0x10 [ 1300.590293][ T1796] ___sys_sendmsg+0x190/0x1e0 [ 1300.595769][ T1796] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.601016][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.607066][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.612779][ T1796] __sys_sendmsg+0x170/0x220 [ 1300.617522][ T1796] ? __pfx___sys_sendmsg+0x10/0x10 [ 1300.622660][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.628423][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.634374][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.640070][ T1796] do_syscall_64+0x106/0xf80 [ 1300.644790][ T1796] ? irqentry_exit+0x138/0x670 [ 1300.649597][ T1796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.655588][ T1796] RIP: 0033:0x7f8df1d9c629 [ 1300.660045][ T1796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.679847][ T1796] RSP: 002b:00007f8df2d28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.696321][ T1796] RAX: ffffffffffffffda RBX: 00007f8df2015fa0 RCX: 00007f8df1d9c629 [ 1300.704454][ T1796] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1300.712688][ T1796] RBP: 00007f8df1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1300.720779][ T1796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.728999][ T1796] R13: 00007f8df2016038 R14: 00007f8df2015fa0 R15: 00007fffb8d7a038 [ 1300.737166][ T1796] [ 1300.740313][ T1796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1300.747638][ T1796] CPU: 0 UID: 0 PID: 1796 Comm: syz.8.10876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.758632][ T1796] Tainted: [L]=SOFTLOCKUP [ 1300.762981][ T1796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1300.773070][ T1796] Call Trace: [ 1300.776372][ T1796] [ 1300.779328][ T1796] dump_stack_lvl+0x100/0x190 [ 1300.784071][ T1796] vpanic+0x552/0x970 [ 1300.788178][ T1796] ? __pfx_vpanic+0x10/0x10 [ 1300.792770][ T1796] panic+0xd1/0xe0 [ 1300.796539][ T1796] ? __pfx_panic+0x10/0x10 [ 1300.801008][ T1796] check_panic_on_warn.cold+0x19/0x34 [ 1300.806415][ T1796] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 1300.812530][ T1796] __warn.cold+0x191/0x348 [ 1300.817011][ T1796] __report_bug+0x296/0x3d0 [ 1300.821556][ T1796] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 1300.827672][ T1796] ? __pfx___report_bug+0x10/0x10 [ 1300.832742][ T1796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1300.838595][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.844279][ T1796] ? lockdep_hardirqs_on+0x78/0x100 [ 1300.849546][ T1796] report_bug_entry+0xe1/0x290 [ 1300.854344][ T1796] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 1300.860473][ T1796] handle_bug+0x1c9/0x2a0 [ 1300.864910][ T1796] exc_invalid_op+0x17/0x50 [ 1300.869462][ T1796] asm_exc_invalid_op+0x1a/0x20 [ 1300.874337][ T1796] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 1300.881040][ T1796] Code: 00 48 8d 3d f5 aa c2 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 32 f3 e4 fa e8 bd 77 6a 04 [ 1300.900671][ T1796] RSP: 0018:ffffc9000e3a7120 EFLAGS: 00010246 [ 1300.906766][ T1796] RAX: ffff888020feea90 RBX: 0000000000000000 RCX: ffff888041708ec0 [ 1300.914766][ T1796] RDX: 0000000000000000 RSI: ffff888020fef002 RDI: ffffffff90e63270 [ 1300.922750][ T1796] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 1300.930731][ T1796] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 1300.938734][ T1796] R13: ffff888041709090 R14: ffff88805747b100 R15: 0000000000000005 [ 1300.946766][ T1796] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 1300.952686][ T1796] mac80211_hwsim_sta_add+0xc9/0x290 [ 1300.957999][ T1796] drv_sta_state+0x887/0x1960 [ 1300.962897][ T1796] sta_info_insert_rcu+0x170b/0x2fa0 [ 1300.968482][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.974153][ T1796] sta_info_insert+0x16/0xd0 [ 1300.978763][ T1796] ieee80211_add_station+0x471/0x6d0 [ 1300.984085][ T1796] nl80211_new_station+0x145b/0x1dd0 [ 1300.989406][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.995070][ T1796] ? __pfx_nl80211_new_station+0x10/0x10 [ 1301.000873][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.006529][ T1796] ? nl80211_pre_doit+0x19a/0xae0 [ 1301.011684][ T1796] genl_family_rcv_msg_doit+0x214/0x300 [ 1301.017294][ T1796] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1301.023406][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.029073][ T1796] ? genl_get_cmd+0x3ef/0x720 [ 1301.033792][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.039449][ T1796] ? security_capable+0x80/0x260 [ 1301.044413][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.050084][ T1796] ? ns_capable+0xd2/0xf0 [ 1301.054434][ T1796] genl_rcv_msg+0x560/0x800 [ 1301.058974][ T1796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.064029][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.069689][ T1796] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1301.075079][ T1796] ? __pfx_nl80211_new_station+0x10/0x10 [ 1301.080730][ T1796] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1301.086212][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.091875][ T1796] netlink_rcv_skb+0x159/0x420 [ 1301.096676][ T1796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.101732][ T1796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1301.107061][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.112720][ T1796] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1301.118042][ T1796] genl_rcv+0x28/0x40 [ 1301.122051][ T1796] netlink_unicast+0x5aa/0x870 [ 1301.126868][ T1796] ? __pfx_netlink_unicast+0x10/0x10 [ 1301.132225][ T1796] netlink_sendmsg+0x8b0/0xda0 [ 1301.137024][ T1796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.142332][ T1796] ? __might_fault+0x80/0x140 [ 1301.147030][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.152684][ T1796] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1301.158356][ T1796] ____sys_sendmsg+0xa54/0xc30 [ 1301.163157][ T1796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.168488][ T1796] ? __pfx_futex_wake_mark+0x10/0x10 [ 1301.173796][ T1796] ___sys_sendmsg+0x190/0x1e0 [ 1301.178513][ T1796] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.183736][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.189411][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.195096][ T1796] __sys_sendmsg+0x170/0x220 [ 1301.199706][ T1796] ? __pfx___sys_sendmsg+0x10/0x10 [ 1301.204830][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.210568][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.216236][ T1796] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.221898][ T1796] do_syscall_64+0x106/0xf80 [ 1301.226514][ T1796] ? irqentry_exit+0x138/0x670 [ 1301.231315][ T1796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.237659][ T1796] RIP: 0033:0x7f8df1d9c629 [ 1301.242086][ T1796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.261802][ T1796] RSP: 002b:00007f8df2d28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.270245][ T1796] RAX: ffffffffffffffda RBX: 00007f8df2015fa0 RCX: 00007f8df1d9c629 [ 1301.278245][ T1796] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1301.286230][ T1796] RBP: 00007f8df1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1301.294210][ T1796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.302191][ T1796] R13: 00007f8df2016038 R14: 00007f8df2015fa0 R15: 00007fffb8d7a038 [ 1301.310206][ T1796] [ 1301.313768][ T1796] Kernel Offset: disabled [ 1301.318094][ T1796] Rebooting in 86400 seconds..