last executing test programs: 9m3.043268683s ago: executing program 3 (id=486): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000a40)="7ec84f73", 0x4}], 0x1}}], 0x1, 0x0) 9m2.964133665s ago: executing program 3 (id=489): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x1d, "09271ceddf0679b4d9c97089b1a9ee410e8072dc778ce70bf2c0ea9720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m0.999812123s ago: executing program 3 (id=505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000a40)={0x8, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) 9m0.836422247s ago: executing program 3 (id=509): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3970461, &(0x7f0000000440)={[{}]}) 9m0.30389807s ago: executing program 3 (id=518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x97) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 8m59.730328514s ago: executing program 3 (id=524): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10fffb, 0xfffffffd}) 8m59.122888598s ago: executing program 32 (id=524): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10fffb, 0xfffffffd}) 8m12.121073114s ago: executing program 0 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r1, 0x401, 0x70bd2c, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 8m11.961597898s ago: executing program 0 (id=951): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000, 0x36, 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x1}, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x6000000000000, 0x81, 0x8, 0x6}}], 0xb0}, 0x0) 8m11.777392102s ago: executing program 0 (id=954): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) 8m11.395506551s ago: executing program 0 (id=957): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8m10.62166103s ago: executing program 0 (id=962): unshare(0xe060400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 8m9.586360775s ago: executing program 0 (id=972): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000900), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000940)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x98f909, 0x300, '\x00', @value64=0x400003}}) 8m8.998337059s ago: executing program 33 (id=972): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000900), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000940)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x98f909, 0x300, '\x00', @value64=0x400003}}) 7m28.954293465s ago: executing program 1 (id=1312): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040), 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000000c0), 0x1, 0x3) 7m27.030323821s ago: executing program 1 (id=1332): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) 7m26.442321036s ago: executing program 1 (id=1338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251000000008000100", @ANYRES32, @ANYBLOB="050010"], 0x44}, 0x1, 0x0, 0x0, 0x8854}, 0x24000040) 7m26.177615122s ago: executing program 1 (id=1342): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nobarrier}, {@barrier}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x1, 0x601, &(0x7f0000026780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) 7m25.788261802s ago: executing program 1 (id=1346): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x9705f691641501d1) 7m25.262136055s ago: executing program 1 (id=1350): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x3018856, &(0x7f0000002e00)={[{@grpquota}, {@nointegrity}, {}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@quota}, {}, {@discard}, {@gid}, {@errors_continue}, {}]}, 0x24, 0x628f, &(0x7f00000065c0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 7m24.666550499s ago: executing program 34 (id=1350): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x3018856, &(0x7f0000002e00)={[{@grpquota}, {@nointegrity}, {}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@quota}, {}, {@discard}, {@gid}, {@errors_continue}, {}]}, 0x24, 0x628f, &(0x7f00000065c0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 5m34.639661759s ago: executing program 4 (id=2319): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) 5m34.449415994s ago: executing program 4 (id=2323): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000400, &(0x7f0000000300)=ANY=[@ANYBLOB="63726561746f723dec38b5a12c696f636861727365743d69736f383835392d342c63726561746f723d103a06a02c636f6465706167653d63703835352c00a8b3e64b1731a7697371d0d2e42116e04dad3fbb97000000"], 0x44, 0x30d, &(0x7f0000000ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 5m34.222827069s ago: executing program 4 (id=2328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x90) 5m33.199900624s ago: executing program 4 (id=2341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 5m32.934532731s ago: executing program 4 (id=2343): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 5m32.791068844s ago: executing program 4 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='127.0.0.1:/\x00', 0x808010, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}, {@part}, {}]}, 0x1, 0x5f7, &(0x7f0000000680)="$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") 5m17.659825643s ago: executing program 35 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='127.0.0.1:/\x00', 0x808010, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}, {@part}, {}]}, 0x1, 0x5f7, &(0x7f0000000680)="$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") 4m21.574217199s ago: executing program 7 (id=2955): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m21.395930553s ago: executing program 7 (id=2956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 4m21.13019117s ago: executing program 7 (id=2959): io_setup(0x2278, &(0x7f0000000000)=0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3800813, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESDEC=0x0], 0x3, 0xa5d, &(0x7f0000000940)="$eJzs3c1vXOW5APDnjO3YONwkhFwuN4J4Em6CAV9n7JSkFgvqeMbOUNtT2Y5E1AWhxKmiuKWFVgJUiSBVXYFaqVVVtTvUVVdIbEoXFZuq3ZVVF5Uq/oJKqKt0NdU5M2PP2DMex/iL8PtZM3M+nvO+z5lz3nk9n2/wxVI92jJXrWaXbc5f/d0eZMwBdrn46fsfvJde3rkTh6Innk1+HzEQEfmI3oh4NKJvqrhQmetS0O2I6xHxcUQSEf1Ru92S65H8NB5cm/84kt+k9XZ0aKsl002VL7X9Pv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAgSqaKhcJYcijK81dfzNdE5DeYKi5UkqhWN65pbFPzUTbqd/JR13ojkvQSAwONob4fPbG2+pGIyJ+Jx2pzj2UDksdAvHX4kWPPPdyba2zfKZvPpX/rxb7+5lu3X15ZWX6t7dok2cGsDpjaOTJTmi8vVspzkzOlfHmxkp+4eLFw/sr0Yn66PFtavLa4VJrLTy2UJpcqC/nhqafyYxMTF/Kl0WuVq/MzxdHZUmPhpf8fLxQu5l8Y/UZpcmGxMn/+hdHFqSvl2dny/EwWk65OYy6lJ+LXy0v5pdLkXD5/89bK8oV1mfXEuvM3DRrrtj9p0Hi3oPHC+PjY2Pj42Dv10bNXF1x8duLZS4VCb6HmwahPxIaIXTppOVge6HyYd/5BHLYpV+v/I2ajHPNxNV6MfNu/qSjGQlRirsP6ukb/f/Z8adNqo6n/r/fyvU3rT6ZXZ+JUfXagQ//fIZe9+3s93oy34na8HCuxEsvx2r5ntLd/M1GK+SjHYlSiHHMxmS3J15fkYyIuxsUoxEtxJYZiMXpjOsoxG6VYjGuxGEtRys6oqViIUkzGUlRiIfIxHFPxVORjLCZiIi5EPkoxGteiEldjPmaiGJNZKTfjVna/X9gkx9Wgsa0EjW8StKEz79T/r1q/SWn9PyfcD37V3zKb2/Qo78KjOGxPtd7/H+oeOjzVMtu7e0kBAAAAO+p//xJHThz/8z8ikng8e19+ujxbKux3WgAAAMAOyj6u91h605dOPR6J5/8AAABwv0my79glETEYQ7WpxjehvAgAAAAA94ns/f9TkQytLfD8HwAAAO4z3X9jv2tEMtL4+d/8jdrtjXpEbS4ZnC7PlkanKrPPjcW57FcGsm8abCitJyLpy75+8HScrkWdHqzdDq6VmNY5kEaNjT43Fk/HmfqODD+R3jwx3CZyvBb5ZC3yyebInmiJvJBGAsD97swm/fFW+/+nY6QWMXIy6/J7T7b0wT1Zz1rQswLAQbE6xs6/60Oaten/T9V+G+BUp/7/K5s8/08jjsfNodpHCkbjlXg1VuJGjET9EwdD7UptjEZQ+xjCSJdXAwbrH1n45FIuRja8HjCwuq/NscsxHiNtXxFoKjdp5HChFtezW0cBAPbWmU374Ub/n71I3rH/H9n8+X9Tn+sjhQBwEKyOYH+vE0NbD97vfQQAWumlAQAAAAAAAAAAAAAAAAAAAAAAAAAAYOdt6Qf8/3ouYmVlOWK7gwW0mfjkT3/4r44x7x6OGLiXDDefyMWO5NwfETuy77s30RMR+1X783HPW6XH+KDcdffTRHIna7Cfq5x9fmACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTyQRPe2W5yL6I6IQEef3Pqvdc2e/E9gp+S7rk972i+/G3XgjjuxKTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2L13//PRe32cG1R9OYizkbE9Yj45n7neC8Guqy/u0d5HDzfya6bfv8/F9EX1SR6o1qtViOSvqniQmUuPRWS/nT9p+9/8F566Vjk242JjaMqpAWkNbQMLlGvoWlJX+tWD2VbDRaXX7/9g1e/ly9ezk7My0vTs8W5mYWvrQU+knxYGwKheRiERr4/OvvHnzUtPlSv/MNoPyRCm3qns3qLG+v9n3Zbd6h3C26tLI+nNS2VXlz64XdzzauOx+mIJ4Yjhltr+nZ66VDT6fX3Z0NSu/4s+UlyJH4Z17Pjn94bSTVJD9HRbP8fuHlrZXn0lVdXbqzm9PatN5qKORZDEXGjtZV1yWmoXnkbh7Na+9JaC0kjzRNdyttUU4lja/dryz48lJ0yg/e0D/nO+5DpeL/X1TK6sD6jatpIfv79h+Pcpke6v02J57rU2FbyWfL35Er8LX7cNP5HLj3+Z6Nt62xTRBbZdKY0r2tpXrmza3s+3rzipfVldmyV7IJ341vx1dXjn8se/5vbzXiHdnM8Tv8zO0ufb1rYod00mlaHdtHf2lI3tIu6bu1iY0v97dENPUprrXFiXY9Uf/TptE09zxO1qA55/nc8E9F78p4eUZ7p8ojSbfvttv9fJ8Pxr7hj/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODgSyJ62i3PRZyNiGMRcTSdz0dU18fc2UZ9ucFkO2numO3k/MWTdNzR5G7cjTfiyF5nBAAAAAAAAMDuuFz89P0P3ksv2fvxPfF/ufqafERvRBxLftE3VVyozHUpqC/ieuMt/YH2IR0Wx/X06sG1+Y/TuUe71Le/Hx8AgC+0/wQAAP//qk5vhA==") fchmod(r1, 0xc0) 4m20.756247538s ago: executing program 7 (id=2961): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x3010808, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'iso8859-5'}}, {}, {@nobarrier}, {@nobarrier}]}, 0x2, 0x5f9, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 4m20.394322588s ago: executing program 7 (id=2966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="570000000600011000200000", 0xc) 4m20.031946647s ago: executing program 7 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b160000000000000000020000083c00048018000180080001006f7366000c000280080001400000000420000180080001006475700014000280080002250000001408000140000000160900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 4m19.643785036s ago: executing program 36 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b160000000000000000020000083c00048018000180080001006f7366000c000280080001400000000420000180080001006475700014000280080002250000001408000140000000160900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m8.434614903s ago: executing program 5 (id=4288): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x0, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r1}) 1m6.657383636s ago: executing program 5 (id=4303): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 1m6.51574175s ago: executing program 5 (id=4306): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c80), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e360d8f9179cf", "20e48560999fd132bff0000000000000000000000000000000000200", 0x7fffffff}) write$sndseq(r0, &(0x7f0000000340)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x5, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) 1m6.334868964s ago: executing program 5 (id=4309): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 1m6.071774791s ago: executing program 5 (id=4313): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000000cbc2ed40000188487aab5e1a", 0x12, 0x0, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="080208486f57"}, 0x14) 1m5.630381882s ago: executing program 5 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303032000080070"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) 1m5.258456871s ago: executing program 37 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303032000080070"], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x0) 3.963199395s ago: executing program 8 (id=4807): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r0 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x257}) rt_sigsuspend(&(0x7f0000000040)={[0x7]}, 0x8) io_uring_enter(r0, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 3.027605258s ago: executing program 8 (id=4814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) 2.879621821s ago: executing program 8 (id=4817): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x80, 0x3, 0xb2, 0x3b, 0x0, 0x6, 0x2, 0x5, 0xb, 0x2, 0x13, 0x51, 0x3}, 0xe) io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)='N', 0x1, 0x200000000004}]) 2.610444547s ago: executing program 8 (id=4821): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./trace\x00', 0x1e000, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)='\t', 0x1}], 0x1) 2.434268032s ago: executing program 8 (id=4825): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044082, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000980), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x20000005) fallocate(r0, 0x11, 0x0, 0x64000) 2.286401575s ago: executing program 2 (id=4828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x40042, 0x1) close(r0) r1 = fanotify_init(0x2, 0x800) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.622374521s ago: executing program 9 (id=4835): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x91b47000) 1.466599775s ago: executing program 9 (id=4836): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0], 0x6, 0x806, &(0x7f0000000200)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x44000160) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.305601219s ago: executing program 2 (id=4837): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00!'], 0x48}, 0x2}, 0x0) 1.070372535s ago: executing program 8 (id=4839): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0xc, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x0, &(0x7f0000000340)) 1.070136475s ago: executing program 9 (id=4840): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x100003fa, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x8}]}, 0x10) listen(r0, 0x50) 1.017657236s ago: executing program 6 (id=4841): set_mempolicy(0x8003, &(0x7f0000000080)=0xff9, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, 0x0, 0xffffff6a) 1.017464406s ago: executing program 2 (id=4842): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 868.23269ms ago: executing program 6 (id=4843): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20004056) 750.419002ms ago: executing program 9 (id=4844): syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x237}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 715.388163ms ago: executing program 2 (id=4845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a310000000058000380540000800c00018006000100d103000044000b802c000180090001006c617374000000001c000280080001400000000508000140000001ff080001400000000614000180090001006c617374"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 631.899995ms ago: executing program 6 (id=4846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x34f, 0x4) 501.781739ms ago: executing program 9 (id=4847): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b51207e19a8ff400"}]}]}, 0x40}}, 0x0) 379.903062ms ago: executing program 6 (id=4848): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x200000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 239.613945ms ago: executing program 9 (id=4849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001e80)=@svm={0x107, 0x1, 0x1080, {0xffe, 0x7}, {"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"}}) 187.170166ms ago: executing program 2 (id=4850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 58.373259ms ago: executing program 6 (id=4851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="6e616d65207e20221d227c", 0xb) 6.13198ms ago: executing program 2 (id=4852): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) shutdown(r1, 0x2) 0s ago: executing program 6 (id=4853): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1', 0x1) kernel console output (not intermixed with test programs): /ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b19e559 code=0x7ffc0000 [ 516.146785][ T28] audit: type=1326 audit(1792425450.499:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16054 comm="syz.6.3573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b19e559 code=0x7ffc0000 [ 516.291630][ T28] audit: type=1326 audit(1792425450.499:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16054 comm="syz.6.3573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1b8b19e559 code=0x7ffc0000 [ 516.426743][ T28] audit: type=1326 audit(1792425450.499:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16054 comm="syz.6.3573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b19e559 code=0x7ffc0000 [ 516.487647][ T49] kworker/u4:3: attempt to access beyond end of device [ 516.487647][ T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 516.550520][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 516.581054][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 517.116129][T16048] loop8: detected capacity change from 0 to 32768 [ 517.372961][T16080] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 517.449118][T16048] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 517.976875][T16048] XFS (loop8): Ending clean mount [ 518.115753][ T28] audit: type=1400 audit(1792425453.069:272): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=16087 comm="syz.5.3584" name="unknown" offset=28 [ 518.417476][T14379] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 519.875187][T16099] loop5: detected capacity change from 0 to 4096 [ 519.911507][T16105] loop2: detected capacity change from 0 to 512 [ 519.968025][T16099] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 520.026836][T16105] EXT4-fs (loop2): bad s_want_extra_isize: 192 [ 520.222906][T16099] ntfs3: loop5: ino=19, mi_enum_attr [ 520.252350][T16099] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 522.983688][T16152] loop5: detected capacity change from 0 to 512 [ 523.123266][T16152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.473010][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6 [ 523.602227][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.799261][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6p1 [ 524.000106][T16172] loop5: detected capacity change from 0 to 128 [ 524.073327][T16172] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.153086][T16172] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.375476][T16178] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3623'. [ 524.398178][ T8611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.718200][ T28] audit: type=1326 audit(1792425459.679:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 524.820829][ T28] audit: type=1326 audit(1792425459.699:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 524.903774][ T28] audit: type=1326 audit(1792425459.719:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 524.949192][T16186] netlink: 'syz.5.3627': attribute type 5 has an invalid length. [ 524.969404][T16186] netlink: 'syz.5.3627': attribute type 1 has an invalid length. [ 524.990014][ T28] audit: type=1326 audit(1792425459.719:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.074109][ T28] audit: type=1326 audit(1792425459.719:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.166700][ T28] audit: type=1326 audit(1792425459.729:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.273287][ T28] audit: type=1326 audit(1792425459.729:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.390025][ T28] audit: type=1326 audit(1792425459.769:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.506219][ T28] audit: type=1326 audit(1792425459.769:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 525.614423][ T28] audit: type=1326 audit(1792425459.769:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16183 comm="syz.8.3626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7ffc0000 [ 526.065704][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 526.449394][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3634'. [ 526.469179][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 528.242754][T16210] loop8: detected capacity change from 0 to 32768 [ 528.781048][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3647'. [ 529.592116][T16240] loop8: detected capacity change from 0 to 4096 [ 529.762178][T16240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.217741][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.740325][T16260] program syz.2.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.129692][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 531.453736][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 531.508634][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3661'. [ 531.543749][T16266] syz_tun: Device is already in use. [ 532.139408][T16278] loop2: detected capacity change from 0 to 512 [ 532.203955][T16279] loop5: detected capacity change from 0 to 1024 [ 532.235026][T16278] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.3667: iget: bad i_size value: 38620345925642 [ 532.361899][T16279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 532.386897][T16278] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3667: couldn't read orphan inode 15 (err -117) [ 532.440306][T16279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 532.501587][T16278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.574395][T16279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 532.617462][T16279] System zones: 0-1, 3-36 [ 532.680386][T16279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.861552][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.014372][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.425837][T16291] kvm: kvm [16289]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001f) = 0x1b2 [ 533.463494][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 533.832432][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 533.868969][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3675'. [ 534.609860][T16286] loop8: detected capacity change from 0 to 40427 [ 534.628327][T16286] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 534.647835][T16286] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 534.700861][T16286] F2FS-fs (loop8): invalid crc value [ 535.158486][T16286] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 535.189555][T16286] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 536.197167][ T173] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 536.447809][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 536.485421][ T173] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 536.531774][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 536.571971][ T173] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 536.612620][ T173] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 536.662540][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.710839][ T173] usb 6-1: config 0 descriptor?? [ 537.060152][ T173] hdpvr 6-1:0.0: firmware version 0x0 dated [ 537.107813][ T173] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 537.147841][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 537.521663][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 537.607860][T16323] loop2: detected capacity change from 0 to 32768 [ 537.840155][ T173] hdpvr 6-1:0.0: Could not setup controls [ 537.886459][ T173] hdpvr 6-1:0.0: registering videodev failed [ 537.973508][ T173] hdpvr: probe of 6-1:0.0 failed with error -71 [ 538.049633][ T173] usb 6-1: USB disconnect, device number 16 [ 539.906529][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3692'. [ 540.170380][T16329] loop2: detected capacity change from 0 to 40427 [ 540.226010][T16329] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 540.286803][T16329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 540.347332][T16329] F2FS-fs (loop2): invalid crc value [ 540.442110][T16329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 540.774759][T16329] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 540.806778][T16329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 541.192911][ T5779] syz-executor: attempt to access beyond end of device [ 541.192911][ T5779] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 541.258717][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 542.828824][T16389] loop8: detected capacity change from 0 to 1024 [ 542.962170][T16389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.082686][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.589429][T16403] loop5: detected capacity change from 0 to 1024 [ 544.521724][T16408] loop5: detected capacity change from 0 to 2048 [ 544.682131][T16408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.723347][T16408] ext4 filesystem being mounted at /712/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.789711][T16408] fs-verity (loop5, inode 13): Unknown hash algorithm number: 32 [ 544.809064][T16401] loop2: detected capacity change from 0 to 40427 [ 544.899396][T16401] F2FS-fs (loop2): invalid crc value [ 544.993976][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.003483][T16401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 545.289204][T16401] F2FS-fs (loop2): Start checkpoint disabled! [ 545.385283][T16401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 545.808877][T16420] bond0: option arp_validate: invalid value () [ 546.017196][ T3480] kworker/u4:9: attempt to access beyond end of device [ 546.017196][ T3480] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 546.145294][ T3480] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 546.192049][ T3480] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 550.441707][T16477] loop8: detected capacity change from 0 to 2048 [ 550.496243][T16477] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 550.551524][T16477] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 550.622457][T16477] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 550.732672][T16477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.877351][T16482] loop2: detected capacity change from 0 to 256 [ 551.673221][T16489] loop8: detected capacity change from 0 to 2048 [ 551.899320][T16489] NILFS (loop8): invalid segment: Magic number mismatch [ 551.929761][T16489] NILFS (loop8): trying rollback from an earlier position [ 552.008125][T16489] NILFS (loop8): recovery complete [ 552.052495][T16496] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.119818][T16495] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3753'. [ 552.914900][T16502] loop2: detected capacity change from 0 to 4096 [ 553.190778][T16502] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 553.352268][T16509] loop5: detected capacity change from 0 to 1024 [ 553.430780][T16509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 553.459470][T16502] ntfs3: loop2: failed to convert "0000" to iso8859-7 [ 553.472318][T16509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 553.508104][T16502] ntfs3: loop2: failed to convert name for inode 1e. [ 553.557603][T16502] ntfs3: loop2: ino=1f, mi_enum_attr [ 553.581356][T16502] ntfs3: loop2: ino=1f, mi_enum_attr [ 553.646827][T16509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 553.700488][T16509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 553.801779][T16509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.300538][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.664922][T16515] ip_tables: iptables: counters copy to user failed while replacing table [ 556.422365][T16533] loop2: detected capacity change from 0 to 256 [ 557.249681][T16506] ftl_cs: FTL header not found. [ 557.389610][T16506] phram: test device: 0x40000000 at 0x400000000 for erasesize 0x1000 [ 557.748806][T16546] loop8: detected capacity change from 0 to 1024 [ 557.833941][T16546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.982574][T16546] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 558.099256][T16546] EXT4-fs (loop8): Remounting filesystem read-only [ 558.118437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.285018][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 558.400773][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.696315][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 558.977516][T16566] netlink: 'syz.6.3786': attribute type 2 has an invalid length. [ 559.678613][T16575] loop5: detected capacity change from 0 to 128 [ 559.764961][T16577] loop8: detected capacity change from 0 to 164 [ 559.837443][T16577] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 560.323674][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3785'. [ 560.642763][T16583] block nbd0: Unsupported socket: should be TCP or UNIX. [ 562.084321][T16607] loop8: detected capacity change from 0 to 2048 [ 562.155969][T16607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.298565][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 562.675804][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 563.244105][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.250784][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.285144][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 563.623270][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 563.829432][T16631] loop5: detected capacity change from 0 to 512 [ 563.883376][T16631] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 564.040966][T16631] EXT4-fs (loop5): 1 truncate cleaned up [ 564.081927][T16631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.240467][T16631] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #15: comm syz.5.3809: bad extra_isize 62 (inode size 256) [ 564.310260][T16631] EXT4-fs (loop5): Remounting filesystem read-only [ 564.509723][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.771886][T16649] loop5: detected capacity change from 0 to 7 [ 564.840354][T16649] Dev loop5: unable to read RDB block 7 [ 564.861511][T16649] loop5: unable to read partition table [ 564.871968][ T3480] loop: Write error at byte offset 4, length 3584. [ 564.890290][T16649] loop5: partition table beyond EOD, truncated [ 564.915678][ C0] blk_print_req_error: 8 callbacks suppressed [ 564.915698][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 564.931408][ C0] buffer_io_error: 6 callbacks suppressed [ 564.931424][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 564.954211][T16649] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 566.012567][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 566.279938][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 566.401477][T16661] loop8: detected capacity change from 0 to 4096 [ 566.466101][T16663] loop2: detected capacity change from 0 to 2048 [ 566.626785][T16664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.699945][T16661] ntfs3: loop8: ino=9, mi_enum_attr [ 566.705266][T16661] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 566.811806][T16661] ntfs3: loop8: ino=9, mi_enum_attr [ 566.845282][T16661] ntfs3: loop8: ino=b, mi_enum_attr [ 566.871983][T16661] ntfs3: loop8: Failed to load $Extend (-22). [ 566.911848][T16661] ntfs3: loop8: Failed to initialize $Extend. [ 568.019254][T16680] tap0: tun_chr_ioctl cmd 1074025677 [ 568.038909][T16680] tap0: linktype set to 1 [ 568.333859][T16690] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3833'. [ 569.946379][T16717] loop2: detected capacity change from 0 to 1024 [ 569.969930][T16717] EXT4-fs: Ignoring removed orlov option [ 570.164930][T16717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.315232][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.508292][T16724] loop2: detected capacity change from 0 to 4096 [ 570.567646][T16725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.139859][T16733] loop2: detected capacity change from 0 to 64 [ 571.728655][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3856'. [ 572.029595][T16744] sctp: [Deprecated]: syz.8.3857 (pid 16744) Use of int in max_burst socket option. [ 572.029595][T16744] Use struct sctp_assoc_value instead [ 573.145154][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6 [ 573.560283][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 574.071197][T16763] loop8: detected capacity change from 0 to 1024 [ 574.369331][T16763] hfsplus: xattr searching failed [ 574.445324][T16745] loop5: detected capacity change from 0 to 32768 [ 574.456542][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6 [ 574.675228][T16745] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 574.792867][ T6252] udevd[6252]: incorrect cramfs checksum on /dev/loop6p1 [ 575.032711][T16745] XFS (loop5): Ending clean mount [ 575.181119][ T8611] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 578.166772][ T5877] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 578.200065][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3880'. [ 578.532772][ T5877] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 578.564509][ T5877] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 578.741925][ T5877] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.756969][T16810] bonding: bond0 is being created... [ 578.790508][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.809972][T16810] bonding: bond0 already exists [ 578.851438][ T5877] usb 9-1: SerialNumber: syz [ 578.971340][T16802] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 579.153838][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6 [ 579.536248][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6p1 [ 579.609647][T16817] program syz.5.3885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.759383][T16802] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 580.544383][ T5877] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 580.640830][ T5877] usb 9-1: USB disconnect, device number 4 [ 580.673004][ T5877] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 580.770054][T16831] loop2: detected capacity change from 0 to 128 [ 581.055199][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6 [ 581.673503][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop6p1 [ 582.123277][T16833] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-4] [ 582.182403][T16833] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-4] [ 582.257273][T16833] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-4] [ 582.283340][T16844] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 582.307790][T16833] Error parsing options; rc = [-22] [ 583.893206][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3901'. [ 587.100720][T16916] loop5: detected capacity change from 0 to 2048 [ 587.346897][T16919] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.948889][T16919] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 588.064505][T16919] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 588.088559][ T5877] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 588.231110][T16919] Remounting filesystem read-only [ 588.259619][ T168] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 588.293608][ T168] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 588.306766][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 588.337651][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.357131][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.386766][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.406126][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.449578][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.467296][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.500795][ T168] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 588.526771][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.544890][ T168] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 588.581584][ T168] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 588.589248][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.636859][ T168] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 588.668417][ T5877] usb 3-1: config 0 descriptor?? [ 588.687942][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.773691][ T168] NILFS (loop5): discard dirty page: offset=65536, ino=3 [ 588.804250][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.865055][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.893425][ T168] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 588.901415][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.916662][ T168] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 588.925228][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 588.966519][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.011285][ T168] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 589.046658][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.091090][ T168] NILFS (loop5): discard dirty page: offset=0, ino=18 [ 589.130827][ T168] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 589.146704][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.190526][ T5877] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 589.203081][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.228383][ T5877] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 589.245043][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.260278][ T5877] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 589.282893][ T168] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 589.313681][ T5877] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 589.336895][ T168] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 589.373635][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.409134][ T5877] microsoft 0003:045E:07DA.0012: no inputs found [ 589.443271][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.456524][ T5877] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 589.497203][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.550474][ T5877] usb 3-1: USB disconnect, device number 18 [ 589.566157][ T168] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 589.617494][ T168] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 589.624917][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.731401][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.772732][T16936] fido_id[16936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 589.800172][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.840098][ T168] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 589.875837][ T168] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 589.914244][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 589.972175][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 590.019837][ T168] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 590.054110][ T8611] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 590.093324][ T8611] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 590.130771][ T8611] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 590.166330][ T8611] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 590.203350][ T8611] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 590.243036][ T8611] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 590.624859][ T3065] kernel write not supported for file /1566/attr/prev (pid: 3065 comm: kworker/1:2) [ 591.275045][T16962] C: renamed from team_slave_0 (while UP) [ 591.311930][T16962] netlink: 'syz.5.3932': attribute type 2 has an invalid length. [ 591.330832][T16962] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3932'. [ 591.353687][T16962] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 591.667099][ T5877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 591.878133][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 591.899292][ T5877] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.936831][ T5877] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.975074][ T5877] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.001911][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.013322][T16968] kAFS: bad VL server IP address [ 592.062214][T16964] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 592.086129][ T5877] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 592.106881][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 592.122213][ T8] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.156874][ T8] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.253641][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 592.279679][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 592.344428][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.404189][ T8] usb 6-1: config 0 descriptor?? [ 592.519871][ T5877] usb 9-1: USB disconnect, device number 5 [ 592.976203][ T8] microsoft 0003:045E:00DC.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.5-1/input0 [ 593.029440][ T8] microsoft 0003:045E:00DC.0013: no inputs found [ 593.035886][ T8] microsoft 0003:045E:00DC.0013: could not initialize ff, continuing anyway [ 593.431752][ T5758] usb 6-1: USB disconnect, device number 17 [ 593.899957][T16984] loop8: detected capacity change from 0 to 8 [ 594.061800][T16984] squashfs image failed sanity check [ 595.172626][T17007] loop2: detected capacity change from 0 to 256 [ 595.376977][T17007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 595.510197][T17007] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 595.523225][T17007] exFAT-fs (loop2): Filesystem has been set read-only [ 595.553407][T17007] exFAT-fs (loop2): hint_cluster is invalid (1), rewind to the first cluster [ 595.607885][T17007] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 595.620048][T17007] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880771748e0 iblock : 9, err : -5) [ 595.641404][T17007] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 595.687705][T17007] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 595.992973][ T28] audit: type=1807 audit(1792425530.949:283): action=appraise func=MODULE_CHECK res=1 [ 596.001351][T17021] ima: policy update completed [ 596.027248][ T28] audit: type=1802 audit(1792425530.989:284): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.3958" res=1 errno=0 [ 596.683744][T17020] loop5: detected capacity change from 0 to 32768 [ 596.936828][ T5758] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 597.120538][ T5758] usb 9-1: Using ep0 maxpacket: 8 [ 597.155135][ T5758] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 597.176754][ T5758] usb 9-1: config 179 has no interface number 0 [ 597.183194][ T5758] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.211788][ T5758] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.241349][T17058] loop6: detected capacity change from 0 to 512 [ 597.244249][ T5758] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.283581][T17058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 597.293120][ T5758] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 597.320154][T17058] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 597.339315][ T5758] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.372262][T17062] loop2: detected capacity change from 0 to 1024 [ 597.386774][ T5758] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.396082][ T5758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.411239][T17043] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 597.430186][T17062] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 597.448513][T17058] EXT4-fs (loop6): 1 truncate cleaned up [ 597.482938][T17062] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 597.495672][T17058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.517154][T17062] EXT4-fs (loop2): invalid journal inode [ 597.547697][T17062] EXT4-fs (loop2): can't get journal size [ 597.583880][T17062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002] [ 597.611777][T17062] System zones: 0-1, 4-36, 102-102 [ 597.623638][T17062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 597.922624][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.942262][ T9821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.070991][T17072] loop5: detected capacity change from 0 to 512 [ 598.187910][T17072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.263793][T17072] ext4 filesystem being mounted at /764/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.294536][ T8] usb 9-1: USB disconnect, device number 6 [ 598.294616][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 598.308917][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 598.358069][T17079] loop6: detected capacity change from 0 to 164 [ 598.454850][T17072] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 598.486309][T17072] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 598.530610][T17072] EXT4-fs (loop5): This should not happen!! Data will be lost [ 598.530610][T17072] [ 598.566386][T17072] EXT4-fs (loop5): Total free blocks count 0 [ 598.593109][T17072] EXT4-fs (loop5): Free/Dirty block details [ 598.626705][T17072] EXT4-fs (loop5): free_blocks=65280 [ 598.632241][T17072] EXT4-fs (loop5): dirty_blocks=1 [ 598.656852][T17072] EXT4-fs (loop5): Block reservation details [ 598.662964][T17072] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 598.736045][T16930] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.749813][T16914] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.772509][T16930] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.784171][T16914] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.800642][T16914] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 598.809131][T16930] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 598.825730][T16914] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.835682][T16930] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.857408][T16914] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 598.865608][T16914] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.876759][T16930] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 598.899045][T16930] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.926360][T16914] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 598.936641][T16930] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 598.944893][T16930] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.964940][T16914] I/O error, dev loop6, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.985196][T16914] Buffer I/O error on dev loop6p1, logical block 11, async page read [ 599.006942][T16930] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 599.021823][T16930] Buffer I/O error on dev loop6p4, logical block 12, async page read [ 599.038559][T16914] Buffer I/O error on dev loop6p1, logical block 12, async page read [ 599.094089][T17094] ip_tables: iptables: counters copy to user failed while replacing table [ 599.120894][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.133336][T17094] ip_tables: iptables: counters copy to user failed while replacing table [ 599.268936][T17100] trusted_key: encrypted_key: keyword 'uew' not recognized [ 599.433026][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 599.473249][T17111] loop8: detected capacity change from 0 to 512 [ 599.486501][T17111] EXT4-fs: Ignoring removed oldalloc option [ 599.504669][T17111] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 599.543200][T17111] EXT4-fs (loop8): 1 truncate cleaned up [ 599.557936][T17114] loop5: detected capacity change from 0 to 128 [ 599.567344][T17114] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 599.601114][T17111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.873175][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'. [ 599.912016][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.978739][T14379] EXT4-fs error (device loop8): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 600.072238][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.260230][T17132] loop8: detected capacity change from 0 to 128 [ 600.368859][T17132] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 600.382721][T17132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.689902][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4006'. [ 600.701702][T17143] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4006'. [ 600.985716][T17152] input: syz1 as /devices/virtual/input/input27 [ 601.097676][T17155] loop6: detected capacity change from 0 to 512 [ 601.123354][ T5782] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 601.134071][ T5782] Bluetooth: hci2: unexpected event for opcode 0x203e [ 601.151031][T17159] netlink: 'syz.5.4013': attribute type 1 has an invalid length. [ 601.176829][T17159] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.4013'. [ 601.241239][T17155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.294200][T17155] ext4 filesystem being mounted at /698/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.341047][T17163] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 601.356558][T17155] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.4011: corrupted inode contents [ 601.375662][T17155] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.4011: mark_inode_dirty error [ 601.403114][T17155] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.4011: corrupted inode contents [ 601.418164][T17163] syz_tun: entered promiscuous mode [ 601.493107][T17155] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.4011: corrupted inode contents [ 601.533409][T17163] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 601.588039][T17155] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.4011: mark_inode_dirty error [ 601.642854][T17155] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.4011: corrupted inode contents [ 601.660703][T17155] EXT4-fs error (device loop6): __ext4_ext_dirty:208: inode #2: comm syz.6.4011: mark_inode_dirty error [ 601.901317][ T9821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.184613][T17176] loop2: detected capacity change from 0 to 2048 [ 602.257696][T17176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.262212][T17178] loop5: detected capacity change from 0 to 4096 [ 602.298697][T17178] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 602.408335][T17178] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 602.417904][T17176] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 602.452387][T17182] loop6: detected capacity change from 0 to 4096 [ 602.475208][T17176] EXT4-fs (loop2): Remounting filesystem read-only [ 602.490212][T17182] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 602.635718][T17182] ntfs3: loop6: ino=19, mi_enum_attr [ 602.659296][T17182] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 602.671570][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.687858][T17187] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 602.728173][T17187] CPU: 1 PID: 17187 Comm: syz.8.4024 Not tainted syzkaller #0 [ 602.735738][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 602.745869][T17187] Call Trace: [ 602.749190][T17187] [ 602.752241][T17187] dump_stack_lvl+0x18c/0x250 [ 602.756998][T17187] ? show_regs_print_info+0x20/0x20 [ 602.762235][T17187] ? load_image+0x420/0x420 [ 602.766840][T17187] sysfs_create_dir_ns+0x26e/0x2a0 [ 602.772049][T17187] ? __lock_acquire+0x7eb0/0x7eb0 [ 602.777210][T17187] ? sysfs_warn_dup+0xa0/0xa0 [ 602.781938][T17187] ? rcu_is_watching+0x15/0xb0 [ 602.786758][T17187] ? do_raw_spin_unlock+0x121/0x230 [ 602.792195][T17187] kobject_add_internal+0x617/0xc90 [ 602.797540][T17187] kobject_add+0x164/0x240 [ 602.802030][T17187] ? kobject_init+0x1d0/0x1d0 [ 602.806764][T17187] ? get_device_parent+0x366/0x390 [ 602.811912][T17187] device_add+0x3fa/0xc40 [ 602.816280][T17187] tty_register_device_attr+0x428/0x990 [ 602.821917][T17187] ? tty_register_device+0x30/0x30 [ 602.827082][T17187] ? tty_port_init+0x132/0x1a0 [ 602.831890][T17187] ? gsm_dlci_alloc+0x32a/0x630 [ 602.836780][T17187] ? __might_fault+0xaa/0x120 [ 602.841562][T17187] gsm_activate_mux+0x110/0x2a0 [ 602.846469][T17187] gsmld_ioctl+0x12ca/0x1900 [ 602.851110][T17187] ? gsmld_write+0x120/0x120 [ 602.855747][T17187] ? __init_ldsem+0x150/0x150 [ 602.860471][T17187] ? __fget_files+0x28/0x460 [ 602.865139][T17187] ? gsmld_write+0x120/0x120 [ 602.869768][T17187] tty_ioctl+0x9b5/0xdc0 [ 602.874063][T17187] ? tty_get_icount+0xb0/0xb0 [ 602.878824][T17187] __se_sys_ioctl+0xfd/0x170 [ 602.883462][T17187] do_syscall_64+0x55/0xb0 [ 602.887910][T17187] ? clear_bhb_loop+0x40/0x90 [ 602.892705][T17187] ? clear_bhb_loop+0x40/0x90 [ 602.897420][T17187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.903415][T17187] RIP: 0033:0x7fe105d9e559 [ 602.907887][T17187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.927557][T17187] RSP: 002b:00007fe106bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.936040][T17187] RAX: ffffffffffffffda RBX: 00007fe106026090 RCX: 00007fe105d9e559 [ 602.944081][T17187] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 602.952087][T17187] RBP: 00007fe105e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 602.960087][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.968113][T17187] R13: 00007fe106026128 R14: 00007fe106026090 R15: 00007ffd9fbf7b88 [ 602.976134][T17187] [ 603.061449][T17182] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 603.083622][T17187] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.119069][ T5857] kernel write not supported for file /sequencer2 (pid: 5857 comm: kworker/1:5) [ 603.401957][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'. [ 603.760482][T17202] loop2: detected capacity change from 0 to 512 [ 603.771813][T17204] loop3: detected capacity change from 0 to 7 [ 603.821063][T17202] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.4030: corrupted in-inode xattr: invalid ea_ino [ 603.936463][T17202] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.4030: couldn't read orphan inode 15 (err -117) [ 603.959751][T17202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.060322][T17202] EXT4-fs warning (device loop2): ext4_empty_dir:3149: inode #2: comm syz.2.4030: directory missing '.' [ 604.089139][T17210] loop6: detected capacity change from 0 to 1024 [ 604.130156][T17210] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 604.190899][T17210] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #11: comm syz.6.4033: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 604.239658][T17210] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4033: couldn't read orphan inode 11 (err -117) [ 604.294842][T17210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.336066][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.526890][T17210] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.4033: lblock 2 mapped to illegal pblock 2 (length 1) [ 604.578495][T17217] loop2: detected capacity change from 0 to 128 [ 604.604931][T17217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 604.617248][T17210] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 604.645712][T17217] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.659153][T17210] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.4033: lblock 0 mapped to illegal pblock 48 (length 1) [ 604.689526][T17221] loop5: detected capacity change from 0 to 512 [ 604.739928][T17221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.771684][T17210] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 604.813508][T17217] ext4 filesystem being mounted at /1099/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 604.846802][T17210] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.4033: Failed to acquire dquot type 0 [ 604.953697][ T9821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.976412][ T9821] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 604.980928][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.000800][ T9821] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 605.021258][ T9821] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 605.061314][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.171456][ T5782] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 605.183172][ T5758] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 605.191032][ T5782] Bluetooth: hci2: Injecting HCI hardware error event [ 605.203331][ T5782] Bluetooth: hci2: hardware error 0x00 [ 605.396766][ T5758] usb 9-1: Using ep0 maxpacket: 32 [ 605.413900][ T5758] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 605.427757][ T5758] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 605.442411][ T5758] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 605.452105][ T5758] usb 9-1: config 1 has no interface number 0 [ 605.458717][ T5758] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.470039][ T5758] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 605.496676][ T5758] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 605.516934][ T5758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.550573][ T5758] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 605.723042][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 605.773820][T17226] loop8: detected capacity change from 0 to 512 [ 605.828037][T17226] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.4039: bg 0: block 16: invalid block bitmap [ 605.898603][T17226] EXT4-fs (loop8): Remounting filesystem read-only [ 605.923354][T17226] EXT4-fs (loop8): 1 truncate cleaned up [ 605.936773][T17244] loop2: detected capacity change from 0 to 4096 [ 605.960367][T17226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.005229][ T5758] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 606.044915][T17244] ntfs3: loop2: ino=b, Correct links count -> 1. [ 606.069117][T17244] ntfs3: loop2: ino=18, mi_enum_attr [ 606.081099][T17244] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 606.349761][T17238] loop5: detected capacity change from 0 to 32768 [ 606.403186][T17238] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 606.432759][T17238] JBD2: Ignoring recovery information on journal [ 606.471837][ T5857] usb 9-1: USB disconnect, device number 7 [ 606.493084][ T5857] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 606.511032][T17238] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 606.807765][ T8611] ocfs2: Unmounting device (7,5) on (node local) [ 607.050826][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.195629][T17262] loop5: detected capacity change from 0 to 128 [ 607.223075][T17262] EXT4-fs (loop5): Test dummy encryption mode enabled [ 607.258693][T17262] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.272129][T17262] ext4 filesystem being mounted at /788/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.317289][ T5782] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 607.408456][ T8611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.544524][T17268] loop2: detected capacity change from 0 to 128 [ 607.716861][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 607.905688][T17278] bcache: register_bcache() error : failed to open device [ 608.234251][T17292] loop8: detected capacity change from 0 to 128 [ 608.263564][T17292] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.366277][T17292] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 608.460547][T17292] fscrypt (loop8, inode 12): Direct key flag not allowed with different contents and filenames modes [ 608.517836][T14379] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.577755][T17303] dvmrp6: entered allmulticast mode [ 608.779651][T17309] loop5: detected capacity change from 0 to 4096 [ 608.796078][T17311] bcache: register_bcache() error : failed to open device [ 608.853029][T17313] loop8: detected capacity change from 0 to 128 [ 608.973395][T17309] ntfs3: loop5: ino=b, Correct links count -> 1. [ 609.015291][T17309] ntfs3: loop5: ino=18, mi_enum_attr [ 609.032598][T17309] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 610.437285][T17251] Bluetooth: hci4: command 0x1003 tx timeout [ 610.445609][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 611.031791][T17349] loop8: detected capacity change from 0 to 32768 [ 611.080460][T17349] Dev loop8 SGI disklabel: csum bad, label corrupted [ 611.520365][T17344] loop2: detected capacity change from 0 to 32768 [ 611.556921][T17344] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 611.557364][ T173] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 611.585373][T17344] JBD2: Ignoring recovery information on journal [ 611.632265][T17344] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 611.816946][ T173] usb 6-1: Using ep0 maxpacket: 32 [ 611.844967][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 611.887541][ T173] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 611.896071][ T173] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 611.914176][ T173] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 611.933564][ T173] usb 6-1: config 1 has no interface number 0 [ 611.943721][ T173] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.975570][ T173] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 612.016666][ T173] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 612.025883][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.059286][ T173] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 612.273812][T17355] loop5: detected capacity change from 0 to 512 [ 612.335048][T17355] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.4103: bg 0: block 16: invalid block bitmap [ 612.415931][T17355] EXT4-fs (loop5): Remounting filesystem read-only [ 612.438776][T17355] EXT4-fs (loop5): 1 truncate cleaned up [ 612.469366][T17355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.533146][T17380] loop6: detected capacity change from 0 to 256 [ 612.583273][T17380] exFAT-fs (loop6): error, The cluster chain has a loop [ 612.592481][ T173] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 612.608723][T17380] exFAT-fs (loop6): Filesystem has been set read-only [ 612.615599][T17380] exFAT-fs (loop6): failed to count the number of clusters in root [ 612.633092][T17380] exFAT-fs (loop6): failed to recognize exfat type [ 612.854146][T17387] loop8: detected capacity change from 0 to 2048 [ 612.898485][T17387] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 612.909601][T17387] UDF-fs: Scanning with blocksize 512 failed [ 612.943231][T17389] loop6: detected capacity change from 0 to 2048 [ 612.955697][T17387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.000175][T17389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.055528][ T173] usb 6-1: USB disconnect, device number 18 [ 613.078288][ T173] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 613.316414][T16914] blk_print_req_error: 26 callbacks suppressed [ 613.316431][T16914] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 613.342407][T17189] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 613.359143][T17189] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.369288][T16914] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.380219][T17189] buffer_io_error: 22 callbacks suppressed [ 613.380234][T17189] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 613.394926][T16914] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 613.412963][T16914] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.422758][T17189] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.439239][T16914] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 613.450591][T17189] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 613.461488][T16914] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.478089][T17189] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.492707][T16914] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 613.501739][T17189] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 613.527212][T16914] I/O error, dev loop6, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.537498][T17189] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.551448][T16914] Buffer I/O error on dev loop6p1, logical block 11, async page read [ 613.574167][T17189] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 613.593033][T16914] Buffer I/O error on dev loop6p1, logical block 12, async page read [ 613.602159][T17189] Buffer I/O error on dev loop6p4, logical block 12, async page read [ 613.741459][ T8611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.949087][T17413] loop8: detected capacity change from 0 to 256 [ 613.968621][T17413] exFAT-fs (loop8): error, The cluster chain has a loop [ 613.975681][T17413] exFAT-fs (loop8): Filesystem has been set read-only [ 613.997086][T17413] exFAT-fs (loop8): failed to count the number of clusters in root [ 614.016688][T17413] exFAT-fs (loop8): failed to recognize exfat type [ 614.484904][T17426] loop6: detected capacity change from 0 to 4096 [ 614.553905][T17430] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.546331][T17440] loop8: detected capacity change from 0 to 40427 [ 615.564942][T17454] loop5: detected capacity change from 0 to 4096 [ 615.582405][T17440] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 615.604281][T17440] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 615.617826][T17440] F2FS-fs (loop8): Image doesn't support compression [ 615.632281][T17440] F2FS-fs (loop8): Image doesn't support compression [ 615.662713][T17440] F2FS-fs (loop8): invalid crc value [ 615.959301][T17440] F2FS-fs (loop8): Start checkpoint disabled! [ 616.066088][T17440] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 616.077483][T17440] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 616.173265][T17440] VFS:Filesystem freeze failed [ 617.646832][ T173] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 617.859113][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 617.875618][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 617.892516][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 617.909619][ T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 617.935167][ T173] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 617.971291][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.982528][ T173] usb 6-1: Product: syz [ 617.992683][ T173] usb 6-1: Manufacturer: syz [ 618.002815][ T173] usb 6-1: SerialNumber: syz [ 618.019998][ T173] usb 6-1: config 0 descriptor?? [ 618.177769][T17510] input: syz0 as /devices/virtual/input/input28 [ 618.227390][ T28] audit: type=1400 audit(1792425553.179:285): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=17513 comm="syz.6.4161" name="p" offset=43 [ 618.288105][ T173] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 618.447101][T17519] loop6: detected capacity change from 0 to 1024 [ 618.496637][T17496] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 618.535118][T17519] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 618.557062][ T5857] usb 6-1: USB disconnect, device number 19 [ 618.587790][T17519] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 618.627668][T17519] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.4163: Failed to acquire dquot type 0 [ 618.661851][T17519] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 618.705744][T17519] EXT4-fs (loop6): 1 truncate cleaned up [ 618.723245][T17519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.790413][T17519] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 618.808584][T17519] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 618.822058][T17519] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.4163: Failed to acquire dquot type 0 [ 618.936231][ T9821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.720235][T17550] binder: 17547:17550 ioctl c0306201 200000000080 returned -14 [ 619.835396][T17537] loop6: detected capacity change from 0 to 32768 [ 619.854388][T17537] [ 619.854388][T17537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 619.854388][T17537] [ 619.951570][ T49] ERROR: (device loop6): diWrite: ixpxd invalid [ 619.951570][ T49] [ 619.998153][ T49] ERROR: (device loop6): remounting filesystem as read-only [ 620.020514][ T49] ERROR: (device loop6): txCommit: [ 620.020514][ T49] [ 620.030626][T17557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.047520][ T49] jfs_write_inode: jfs_commit_inode failed! [ 620.053679][ T9821] [ 620.053679][ T9821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.053679][ T9821] [ 620.081455][ T9821] [ 620.081455][ T9821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.081455][ T9821] [ 620.440362][T16914] blk_print_req_error: 8 callbacks suppressed [ 620.440379][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.461000][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.496858][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.530030][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.546907][T17192] buffer_io_error: 6 callbacks suppressed [ 620.546923][T17192] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 620.566915][T16914] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 620.596731][T16914] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.606042][T16914] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 620.614671][T17192] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.646666][T17192] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 620.654836][T17192] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.677101][T16914] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.710941][T16914] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 620.719213][T17192] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 620.725731][T17573] binder: 17572:17573 ioctl c0306201 200000000080 returned -14 [ 620.736725][T16914] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.746063][T16914] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 620.757484][T17192] I/O error, dev loop6, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.792739][T17192] Buffer I/O error on dev loop6p1, logical block 11, async page read [ 620.824633][T16914] Buffer I/O error on dev loop6p4, logical block 12, async page read [ 620.833246][T17192] Buffer I/O error on dev loop6p1, logical block 12, async page read [ 621.241669][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4193'. [ 621.735221][T17609] input: syz0 as /devices/virtual/input/input29 [ 621.984028][T17614] sctp: [Deprecated]: syz.6.4202 (pid 17614) Use of int in maxseg socket option. [ 621.984028][T17614] Use struct sctp_assoc_value instead [ 622.009442][T17616] IPv6: NLM_F_CREATE should be specified when creating new route [ 622.041811][T17616] IPv6: Can't replace route, no match found [ 622.118672][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4204'. [ 622.234321][T17602] loop8: detected capacity change from 0 to 40427 [ 622.244352][T17602] F2FS-fs (loop8): Corrupted extension count (327717 + 1 > 64) [ 622.252561][T17602] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 622.261409][T17602] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x7ffff [ 622.278333][T17602] F2FS-fs (loop8): invalid crc value [ 622.304158][T17602] F2FS-fs (loop8): Found nat_bits in checkpoint [ 622.389968][T17602] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 622.403765][T17602] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 622.605822][T14379] syz-executor: attempt to access beyond end of device [ 622.605822][T14379] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 622.643483][T14379] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 623.522610][T17654] "syz.6.4217" (17654) uses obsolete ecb(arc4) skcipher [ 623.776777][ T5855] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 623.995256][ T5855] usb 9-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 624.018706][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.051476][ T5855] usb-storage 9-1:1.0: USB Mass Storage device detected [ 624.063403][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4221'. [ 624.502070][ T5855] scsi host1: usb-storage 9-1:1.0 [ 624.553412][ T5855] usb 9-1: USB disconnect, device number 8 [ 624.693164][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.701015][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.809220][T17690] loop2: detected capacity change from 0 to 1024 [ 624.839722][T17692] loop6: detected capacity change from 0 to 164 [ 624.870315][T17690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 624.896324][T17690] ext4 filesystem being mounted at /1145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.923177][T17692] rock: directory entry would overflow storage [ 624.958743][T17692] rock: sig=0x66, size=4, remaining=3 [ 625.188975][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.985885][T17717] loop8: detected capacity change from 0 to 64 [ 626.078627][T17717] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 626.282689][T17702] loop2: detected capacity change from 0 to 40427 [ 626.309028][T17702] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 626.351850][T17702] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 626.377289][T17702] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 626.397224][T17702] F2FS-fs (loop2): invalid crc value [ 626.428884][T17702] F2FS-fs (loop2): Found nat_bits in checkpoint [ 626.466005][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4248'. [ 626.613708][T17702] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 626.634022][T17702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 626.841536][ T5779] syz-executor: attempt to access beyond end of device [ 626.841536][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 626.885991][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 627.001650][T17721] loop5: detected capacity change from 0 to 32768 [ 627.039930][T17735] ftl_cs: FTL header not found. [ 627.045892][T17721] (syz.5.4245,17721,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 627.093129][T17721] (syz.5.4245,17721,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 627.201796][T17721] JBD2: Ignoring recovery information on journal [ 627.241810][T17735] block2mtd: mtd2: [/dev/loop0] erase_size = 4KiB [4096] [ 627.355770][T17721] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 627.868128][ T8611] ocfs2: Unmounting device (7,5) on (node local) [ 628.237196][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4258'. [ 628.412763][T17771] block2mtd: error: cannot open device /dev/loop0 [ 628.626804][ T28] audit: type=1326 audit(1792425563.579:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.8.4257" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe105d9e559 code=0x7fc00000 [ 628.816856][ T5857] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 629.009553][ T5857] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 629.034173][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.066089][ T5857] usb-storage 3-1:1.0: USB Mass Storage device detected [ 629.077148][T17777] loop5: detected capacity change from 0 to 40427 [ 629.118170][T17777] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 629.137296][T17777] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 629.167392][T17777] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 629.194789][T17777] F2FS-fs (loop5): invalid crc value [ 629.226506][T17777] F2FS-fs (loop5): Found nat_bits in checkpoint [ 629.437667][T17777] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 629.452579][T17777] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 629.498516][ T5857] scsi host1: usb-storage 3-1:1.0 [ 629.526221][T17801] block2mtd: error: cannot open device /dev/loop0 [ 629.534247][ T5857] usb 3-1: USB disconnect, device number 19 [ 629.673630][ T8611] syz-executor: attempt to access beyond end of device [ 629.673630][ T8611] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 629.704464][ T8611] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 630.912132][T17819] loop6: detected capacity change from 0 to 32768 [ 630.923658][T17819] (syz.6.4284,17819,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 630.961549][T17819] (syz.6.4284,17819,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.013906][T17819] JBD2: Ignoring recovery information on journal [ 631.199510][T17842] loop2: detected capacity change from 0 to 64 [ 631.210412][T17819] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 631.795633][ T9821] ocfs2: Unmounting device (7,6) on (node local) [ 632.531357][T17880] loop2: detected capacity change from 0 to 256 [ 632.575178][T17880] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 632.694062][T17884] loop5: detected capacity change from 0 to 8 [ 632.890908][ T8611] SQUASHFS error: Unable to read directory block [631:72] [ 632.909703][ T8611] SQUASHFS error: Unable to read inode 0x0 [ 632.929161][ T8611] SQUASHFS error: Unable to read inode 0x0 [ 633.134264][T17669] syz_tun (unregistering): left allmulticast mode [ 633.145481][T17669] syz_tun (unregistering): left promiscuous mode [ 633.170964][T17669] bridge0: port 3(syz_tun) entered disabled state [ 633.237127][T17896] i2c i2c-0: delete_device: Can't find device in list [ 633.473425][T17902] loop2: detected capacity change from 0 to 8 [ 633.482249][T17902] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 633.532200][ T3480] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.552118][T17192] udevd[17192]: incorrect cramfs checksum on /dev/loop2 [ 633.683041][ T3480] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.822072][T17908] loop8: detected capacity change from 0 to 512 [ 633.835685][ T3480] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.854658][T17908] EXT4-fs: Ignoring removed orlov option [ 633.926189][T17908] EXT4-fs error (device loop8): __ext4_iget:5091: inode #11: block 1: comm syz.8.4329: invalid block [ 633.982053][T17908] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.4329: couldn't read orphan inode 11 (err -117) [ 634.062427][T17908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.130626][T17908] EXT4-fs error (device loop8): ext4_add_entry:2488: inode #2: comm syz.8.4329: Directory hole found for htree leaf block 0 [ 634.159383][ T3480] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.212714][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.333781][T17251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.347302][T17251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.356179][T17251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.366043][T17251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 634.384887][ T3480] netdevsim netdevsim5 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.412983][ T3480] netdevsim netdevsim5 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.438429][T17251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 634.451351][T17251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 634.469489][ T3480] netdevsim netdevsim5 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.509389][ T3480] netdevsim netdevsim5 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.601596][T17915] rxe_eth0 speed is unknown, defaulting to 1000 [ 635.304438][T17915] chnl_net:caif_netlink_parms(): no params data found [ 635.487186][T17915] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.494464][T17915] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.502308][T17915] bridge_slave_0: entered allmulticast mode [ 635.510376][T17915] bridge_slave_0: entered promiscuous mode [ 635.547117][T17915] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.554308][T17915] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.564485][T17915] bridge_slave_1: entered allmulticast mode [ 635.572675][T17915] bridge_slave_1: entered promiscuous mode [ 635.612921][T17915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.663138][ T3480] dvmrp6 (unregistering): left allmulticast mode [ 635.679078][T17915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.761538][T17915] team0: Port device team_slave_0 added [ 635.775997][T17915] team0: Port device team_slave_1 added [ 635.858047][T17915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.865072][T17915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.893490][T17915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.932498][T17915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.944288][T17915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.983723][T17915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.151703][T17915] hsr_slave_0: entered promiscuous mode [ 636.167934][T17915] hsr_slave_1: entered promiscuous mode [ 636.187048][T17915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.194697][T17915] Cannot create hsr debugfs directory [ 636.314619][ T3480] hsr_slave_0: left promiscuous mode [ 636.321065][ T3480] hsr_slave_1: left promiscuous mode [ 636.338188][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.345672][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.362870][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.373250][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.388175][ T3480] bridge_slave_1: left allmulticast mode [ 636.393976][ T3480] bridge_slave_1: left promiscuous mode [ 636.404934][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.423979][ T3480] bridge_slave_0: left allmulticast mode [ 636.431011][ T3480] bridge_slave_0: left promiscuous mode [ 636.443879][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.506228][ T3480] veth1_macvtap: left promiscuous mode [ 636.514489][ T3480] veth0_macvtap: left promiscuous mode [ 636.525975][T17251] Bluetooth: hci2: command tx timeout [ 636.545061][ T3480] veth1_vlan: left promiscuous mode [ 636.550664][ T3480] veth0_vlan: left promiscuous mode [ 637.579686][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 637.654980][ T3480] team0 (unregistering): Port device C removed [ 637.735217][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.821415][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.419586][ T3480] bond0 (unregistering): Released all slaves [ 638.597319][T17251] Bluetooth: hci2: command tx timeout [ 638.972644][T17915] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 638.995030][T17915] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 639.046650][T17915] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 639.073161][T17915] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 639.274477][T17915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.310862][T17915] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.338228][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.345416][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.372466][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.379716][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.465270][T17915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.759824][T17915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.342887][T17915] veth0_vlan: entered promiscuous mode [ 640.375424][T17915] veth1_vlan: entered promiscuous mode [ 640.434327][T17915] veth0_macvtap: entered promiscuous mode [ 640.472959][T17915] veth1_macvtap: entered promiscuous mode [ 640.531371][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.543165][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.571089][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.585450][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.597729][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.611972][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.628032][T17915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.650583][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.668518][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.686802][T17251] Bluetooth: hci2: command tx timeout [ 640.716755][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.731178][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.743627][T17915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.754513][T17915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.767297][T17915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.780437][T17915] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.789243][T17915] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.799479][T17915] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.809248][T17915] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.974568][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.007210][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.085925][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.096018][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.380303][T17996] loop2: detected capacity change from 0 to 256 [ 641.399974][T18001] loop9: detected capacity change from 0 to 128 [ 641.472053][T17996] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 642.085858][T18022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4332'. [ 642.756917][T17251] Bluetooth: hci2: command tx timeout [ 643.027676][T18054] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) [ 643.252872][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4347'. [ 643.281734][T18062] tipc: Started in network mode [ 643.298495][T18062] tipc: Node identity 7, cluster identity 4711 [ 643.317761][T18062] tipc: Node number set to 7 [ 643.456870][T18067] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4348'. [ 643.471339][T18067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 643.935907][T18084] netem: change failed [ 644.715110][T18114] loop6: detected capacity change from 0 to 2048 [ 644.839907][T18114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.031452][T18130] loop8: detected capacity change from 0 to 64 [ 645.088513][T18130] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 645.088785][ T9821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.154963][T18130] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 645.416854][T18136] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4373'. [ 645.492378][T18139] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4373'. [ 645.593712][T18103] loop9: detected capacity change from 0 to 32768 [ 645.646853][T18103] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.4361 (18103) [ 645.714273][T18103] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 645.751631][T18103] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 645.779160][T18103] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 645.801899][T18103] BTRFS info (device loop9): use zstd compression, level 3 [ 645.817682][T18103] BTRFS info (device loop9): using free space tree [ 645.963284][T18103] BTRFS info (device loop9): enabling ssd optimizations [ 645.987507][T18103] BTRFS info (device loop9): auto enabling async discard [ 646.014348][T18175] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4380'. [ 646.121407][ T8] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 646.190655][ T8] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 646.315662][T18185] loop6: detected capacity change from 0 to 256 [ 646.443759][T18185] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d) [ 646.850412][T17915] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 647.186842][T17192] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop9 scanned by udevd (17192) [ 647.524242][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 647.758724][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.818488][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.886664][ T8] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 647.937166][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.978774][ T8] usb 9-1: config 0 descriptor?? [ 648.452325][T18222] loop9: detected capacity change from 0 to 256 [ 648.461326][ T8] hid-led 0003:1D34:000A.0015: unbalanced collection at end of report description [ 648.507849][ T8] hid-led: probe of 0003:1D34:000A.0015 failed with error -22 [ 648.664528][ T8] usb 9-1: USB disconnect, device number 9 [ 648.860466][T18227] tap0: tun_chr_ioctl cmd 1074025677 [ 648.876412][T18227] tap0: linktype set to 6 [ 648.958815][T18209] loop6: detected capacity change from 0 to 32768 [ 648.976710][T18209] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by syz.6.4389 (18209) [ 649.044197][T18209] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 649.089657][T18209] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 649.119084][T18209] BTRFS info (device loop6): using free space tree [ 649.261409][T18209] BTRFS info (device loop6): enabling ssd optimizations [ 649.270300][T18209] BTRFS info (device loop6): auto enabling async discard [ 649.518178][ T9821] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 649.964597][ T173] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 650.196162][ T173] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.221640][T18281] loop2: detected capacity change from 0 to 512 [ 650.232563][ T173] usb 9-1: config 0 has no interface number 0 [ 650.279256][ T173] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 650.302232][T17192] blk_print_req_error: 8 callbacks suppressed [ 650.302249][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 650.306983][ T173] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.335365][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 650.349678][T18281] EXT4-fs: Ignoring removed oldalloc option [ 650.352810][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.372661][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.409479][T17192] buffer_io_error: 6 callbacks suppressed [ 650.409497][T17192] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 650.421262][ T173] usb 9-1: Product: syz [ 650.427539][T16914] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 650.427641][T16914] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.427671][T16914] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 650.427779][T16914] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.447030][ T173] usb 9-1: Manufacturer: syz [ 650.468669][T18281] EXT4-fs (loop2): Test dummy encryption mode enabled [ 650.468680][T17192] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.505707][T17192] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 650.514276][T16914] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 650.523264][T17192] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.551859][T16914] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.570244][T17192] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 650.580514][T16914] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 650.589818][T17192] I/O error, dev loop6, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 650.600255][T16914] Buffer I/O error on dev loop6p4, logical block 12, async page read [ 650.610816][ T173] usb 9-1: SerialNumber: syz [ 650.630998][T16914] Buffer I/O error on dev loop6p4, logical block 13, async page read [ 650.631808][T17192] Buffer I/O error on dev loop6p1, logical block 11, async page read [ 650.660123][ T173] usb 9-1: config 0 descriptor?? [ 650.670812][T18281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.711488][T18290] sctp: Trying to GSO but underlying device doesn't support it. [ 650.870368][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.932334][ T173] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 650.974759][ T173] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.986181][ T173] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 650.994629][ T173] usb 9-1: media controller created [ 651.059403][ T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.621316][T18314] sd 0:0:1:0: PR command failed: 1026 [ 651.627685][T18314] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 651.636104][T18314] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 651.928106][T18322] block2mtd: illegal erase size [ 652.198024][ T173] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 652.368014][ T173] usb 9-1: USB disconnect, device number 10 [ 652.751349][T18323] loop2: detected capacity change from 0 to 32768 [ 652.875411][T18323] JBD2: Ignoring recovery information on journal [ 652.987950][T18345] loop8: detected capacity change from 0 to 256 [ 652.998041][T18342] loop9: detected capacity change from 0 to 512 [ 653.005038][T18323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 653.038192][T18345] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 653.077698][T18342] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 653.101325][T18345] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 653.320387][T17251] Bluetooth: hci0: Zero size dump init pkt [ 653.405753][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 655.170956][T18394] loop8: detected capacity change from 0 to 1024 [ 655.187845][T18394] EXT4-fs: inline encryption not supported [ 655.205326][T18394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 655.238210][T18394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 655.293707][T18398] WARNING! power/level is deprecated; use power/control instead [ 655.314451][T18394] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.367158][T18394] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.395809][T18394] EXT4-fs error (device loop8): ext4_free_blocks:6694: comm syz.8.4449: Freeing blocks not in datazone - block = 0, count = 16 [ 655.442398][T18394] EXT4-fs (loop8): Remounting filesystem read-only [ 655.638190][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 656.222234][T18430] loop9: detected capacity change from 0 to 2048 [ 656.302446][T18430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.569124][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.788187][T18417] loop2: detected capacity change from 0 to 32768 [ 656.795249][T18443] netlink: 'syz.6.4467': attribute type 12 has an invalid length. [ 656.825823][T18443] netlink: 'syz.6.4467': attribute type 29 has an invalid length. [ 656.839254][T18443] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4467'. [ 656.848943][T18443] netlink: 'syz.6.4467': attribute type 1 has an invalid length. [ 656.857410][T18443] netlink: 'syz.6.4467': attribute type 2 has an invalid length. [ 656.901752][T18417] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 657.159521][T18417] XFS (loop2): Ending clean mount [ 657.188248][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4468'. [ 657.417341][ T5779] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 657.695753][T18471] loop6: detected capacity change from 0 to 256 [ 657.726485][T18471] exfat: Deprecated parameter 'utf8' [ 657.902616][T18471] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 657.963883][T18471] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4473'. [ 658.001361][T18475] loop2: detected capacity change from 0 to 256 [ 658.072127][T18475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 658.545093][T18482] loop6: detected capacity change from 0 to 64 [ 659.376742][ T173] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 659.576783][ T173] usb 3-1: Using ep0 maxpacket: 32 [ 659.584843][ T173] usb 3-1: config 139 has an invalid interface number: 104 but max is 0 [ 659.598495][ T173] usb 3-1: config 139 has no interface number 0 [ 659.621469][ T173] usb 3-1: config 139 interface 104 has no altsetting 0 [ 659.639979][ T173] usb 3-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 659.656794][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.675110][ T173] usb 3-1: Product: syz [ 659.679501][ T173] usb 3-1: Manufacturer: syz [ 659.684156][ T173] usb 3-1: SerialNumber: syz [ 660.139773][ T173] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 660.530866][ T173] gspca_sn9c20x: Write register 1001 failed -71 [ 660.543366][ T173] gspca_sn9c20x: Device initialization failed [ 660.557306][ T173] gspca_sn9c20x: probe of 3-1:139.104 failed with error -71 [ 660.568670][T18517] loop9: detected capacity change from 0 to 4096 [ 660.581016][ T173] usb 3-1: USB disconnect, device number 20 [ 660.692781][T18517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.981750][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.607594][T18544] program syz.8.4497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.618772][T18541] loop2: detected capacity change from 0 to 16 [ 661.647681][T18541] erofs: (device loop2): mounted with root inode @ nid 36. [ 661.771662][T18548] loop6: detected capacity change from 0 to 256 [ 661.992587][T18548] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 662.286813][ T173] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 662.501630][ T173] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.541631][ T173] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 662.577223][ T173] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.840466][ T173] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 662.950423][ T173] wwan wwan0: port wwan0qmi0 attached [ 662.996225][T18581] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4507'. [ 663.055898][ T173] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 5e:13:c5:22:aa:14 [ 663.055930][T18581] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4507'. [ 663.283345][T13200] usb 9-1: USB disconnect, device number 11 [ 663.317406][T13200] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 663.436884][T13200] wwan wwan0: port wwan0qmi0 disconnected [ 663.636895][ T5857] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 663.826688][ T5857] usb 10-1: Using ep0 maxpacket: 16 [ 663.850846][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.893813][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.935155][ T5857] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 663.967790][ T5857] usb 10-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 663.976140][ T5857] usb 10-1: Manufacturer: syz [ 664.023683][ T5857] usb 10-1: config 0 descriptor?? [ 664.685064][ T5857] letsketch 0003:6161:4D15.0016: Device info: а [ 664.929599][ T5857] usb 10-1: Max retries (5) exceeded reading string descriptor 201 [ 664.966968][ T5857] letsketch: probe of 0003:6161:4D15.0016 failed with error -71 [ 665.013986][ T5857] usb 10-1: USB disconnect, device number 2 [ 665.057810][T18613] loop6: detected capacity change from 0 to 32768 [ 665.116984][T18273] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 665.223276][T18635] serio: Serial port ttyS3 [ 665.313845][T18273] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 665.341296][T18273] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.370885][T18273] usb 9-1: config 0 descriptor?? [ 665.395659][T18273] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 665.638199][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.713090][T18651] loop9: detected capacity change from 0 to 512 [ 665.771191][T16914] blk_print_req_error: 8 callbacks suppressed [ 665.771209][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.806692][T18651] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 665.819909][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.867973][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 665.879408][T18651] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.4526: invalid indirect mapped block 32768 (level 2) [ 665.893369][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 665.907079][T16914] buffer_io_error: 6 callbacks suppressed [ 665.907094][T16914] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 665.937052][T17192] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 665.959081][T18651] EXT4-fs (loop9): Remounting filesystem read-only [ 665.978598][T16914] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 665.988019][T16914] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 665.996184][T16914] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.005638][T16914] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 666.012725][T18651] EXT4-fs (loop9): 1 orphan inode deleted [ 666.017942][T16914] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.027949][T17192] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.029098][T16914] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 666.048684][T16914] I/O error, dev loop6, sector 17 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.066602][T16914] Buffer I/O error on dev loop6p4, logical block 12, async page read [ 666.096665][T17192] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 666.117130][T16914] I/O error, dev loop6, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.126138][T17192] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 666.126509][T16914] Buffer I/O error on dev loop6p4, logical block 13, async page read [ 666.133677][T18651] EXT4-fs (loop9): 1 truncate cleaned up [ 666.166952][T16914] Buffer I/O error on dev loop6p4, logical block 14, async page read [ 666.220955][T18273] gspca_sunplus: reg_w_riv err -71 [ 666.226264][T18273] sunplus: probe of 9-1:0.0 failed with error -71 [ 666.248024][T18651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.278122][T18273] usb 9-1: USB disconnect, device number 12 [ 666.415456][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.783873][T18677] loop9: detected capacity change from 0 to 512 [ 666.855309][T18677] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 666.888623][T18677] System zones: 0-2, 18-18, 34-34 [ 666.982610][T18677] EXT4-fs (loop9): 1 orphan inode deleted [ 667.038506][T18677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.100834][T18677] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.125631][T18677] EXT4-fs (loop9): resizing filesystem from 64 to 2 blocks [ 667.143522][T18677] EXT4-fs warning (device loop9): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 667.270008][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.544938][T18713] loop2: detected capacity change from 0 to 256 [ 667.760411][T18722] loop9: detected capacity change from 0 to 1024 [ 667.816116][T18722] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 667.863546][T18722] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 667.883316][T18722] EXT4-fs (loop9): orphan cleanup on readonly fs [ 667.917961][T18722] EXT4-fs error (device loop9): ext4_free_blocks:6694: comm syz.9.4548: Freeing blocks not in datazone - block = 0, count = 4096 [ 668.005830][T18722] EXT4-fs (loop9): Remounting filesystem read-only [ 668.050211][T18722] EXT4-fs (loop9): 1 orphan inode deleted [ 668.079183][T18722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 668.351538][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.777434][T18754] loop8: detected capacity change from 0 to 1024 [ 668.797749][T18754] EXT4-fs: Ignoring removed oldalloc option [ 668.803732][T18754] EXT4-fs: Ignoring removed orlov option [ 668.999207][T18754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 669.081565][T18754] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.119604][T18728] loop6: detected capacity change from 0 to 40427 [ 669.155854][T18728] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 669.163908][T18728] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 669.192771][T18754] EXT4-fs error (device loop8): ext4_free_blocks:6694: comm syz.8.4556: Freeing blocks not in datazone - block = 0, count = 16 [ 669.206222][T18728] F2FS-fs (loop6): invalid crc value [ 669.367774][ T168] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 669.421384][ T168] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 669.440783][ T168] EXT4-fs (loop8): This should not happen!! Data will be lost [ 669.440783][ T168] [ 669.451486][ T168] EXT4-fs (loop8): Total free blocks count 0 [ 669.457988][ T168] EXT4-fs (loop8): Free/Dirty block details [ 669.470453][T18728] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 669.486724][ T168] EXT4-fs (loop8): free_blocks=16 [ 669.491949][T18728] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 669.502132][ T168] EXT4-fs (loop8): dirty_blocks=16 [ 669.526931][ T168] EXT4-fs (loop8): Block reservation details [ 669.533008][ T168] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 669.562412][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 669.759778][ T9821] syz-executor: attempt to access beyond end of device [ 669.759778][ T9821] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 669.821098][ T9821] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 670.305297][T18771] loop9: detected capacity change from 0 to 32768 [ 670.393355][T18771] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 670.467063][T18771] JBD2: Ignoring recovery information on journal [ 670.580356][T18771] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 670.983861][T17915] ocfs2: Unmounting device (7,9) on (node local) [ 671.717812][T18823] vivid-001: disconnect [ 671.742456][T18819] vivid-001: reconnect [ 671.826679][ T5857] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 671.893803][T18828] block2mtd: illegal erase size [ 672.029661][ T5857] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 672.058438][ T5857] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 672.096682][ T5857] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 672.124141][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 672.131689][T18836] loop2: detected capacity change from 0 to 128 [ 672.150454][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.182828][T18836] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 672.199005][ T5857] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 672.237501][T18836] hpfs: filesystem error: improperly stopped [ 672.243593][T18836] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 672.257108][ T5857] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 672.266336][ T5857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.284001][T18836] hpfs: You really don't want any checks? You are crazy... [ 672.294854][T18836] hpfs: hpfs_map_sector(): read error [ 672.305070][ T5857] usb 10-1: config 0 descriptor?? [ 672.335879][T18836] hpfs: code page support is disabled [ 672.354012][T18836] hpfs: hpfs_map_4sectors(): unaligned read [ 672.392581][T18836] hpfs: hpfs_map_4sectors(): unaligned read [ 672.413651][T18836] hpfs: filesystem error: unable to find root dir [ 672.571330][ T5857] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 672.732372][T14384] usb 10-1: USB disconnect, device number 3 [ 672.750685][T14384] usblp0: removed [ 672.773157][T18853] tap0: tun_chr_ioctl cmd 2147767519 [ 672.991255][T18859] ieee802154 phy0 wpan0: encryption failed: -22 [ 673.003099][T18861] loop6: detected capacity change from 0 to 256 [ 673.069843][T18861] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 673.584981][T18868] C: renamed from team_slave_0 (while UP) [ 673.601031][T18845] loop8: detected capacity change from 0 to 32768 [ 673.610288][T18868] netlink: 'syz.6.4585': attribute type 4 has an invalid length. [ 673.620020][T18870] loop9: detected capacity change from 0 to 512 [ 673.635115][T18845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4578 (18845) [ 673.638869][T18868] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4585'. [ 673.691570][T18845] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.715224][T18868] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 673.730919][T18845] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 673.743026][T18845] BTRFS info (device loop8): setting nodatasum [ 673.749676][T18845] BTRFS info (device loop8): force zlib compression, level 3 [ 673.758592][T18845] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 673.780168][T18845] BTRFS info (device loop8): use lzo compression, level 0 [ 673.837299][T18845] BTRFS info (device loop8): turning on flush-on-commit [ 673.844365][T18845] BTRFS info (device loop8): enabling auto defrag [ 673.897470][T18845] BTRFS info (device loop8): max_inline at 4096 [ 673.903869][T18845] BTRFS info (device loop8): using free space tree [ 674.128228][T18845] BTRFS info (device loop8): enabling ssd optimizations [ 674.570939][T14379] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 674.695508][T18885] loop6: detected capacity change from 0 to 32768 [ 674.816884][T18885] JBD2: Ignoring recovery information on journal [ 674.907589][T17192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop8 scanned by udevd (17192) [ 674.961279][T18885] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 675.474188][ T9821] ocfs2: Unmounting device (7,6) on (node local) [ 675.774299][T18928] loop2: detected capacity change from 0 to 1024 [ 676.403931][T18943] loop6: detected capacity change from 0 to 256 [ 676.435673][T18943] exfat: Deprecated parameter 'utf8' [ 676.478047][T18943] exfat: Deprecated parameter 'utf8' [ 676.503179][T18943] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 676.593845][T18945] loop9: detected capacity change from 0 to 256 [ 676.921561][T18952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4612'. [ 676.963972][T18952] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4612'. [ 677.623606][T18973] loop2: detected capacity change from 0 to 4096 [ 677.636128][T18975] bond0: option lp_interval: invalid value (0) [ 677.667692][T18975] bond0: option lp_interval: allowed values 1 - 2147483647 [ 678.124450][T18961] loop9: detected capacity change from 0 to 40427 [ 678.148369][T18961] F2FS-fs (loop9): invalid crc value [ 678.170213][T18961] F2FS-fs (loop9): Found nat_bits in checkpoint [ 678.338742][T18961] F2FS-fs (loop9): Start checkpoint disabled! [ 678.418524][T18961] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 678.808778][ T3467] kworker/u4:8: attempt to access beyond end of device [ 678.808778][ T3467] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 678.872314][ T3467] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 678.891324][ T3467] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 679.033477][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4638'. [ 679.069619][T19010] netem: unknown loss type 25 [ 679.075365][T19010] netem: change failed [ 679.110537][T19011] option changes via remount are deprecated (pid=19009 comm=syz.2.4639) [ 679.144302][T19011] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 679.257062][T19013] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4641'. [ 679.493368][T19020] loop2: detected capacity change from 0 to 2048 [ 679.540290][T19020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.684863][T19027] kAFS: bad VL server IP address [ 680.061944][T19043] loop9: detected capacity change from 0 to 1024 [ 680.131746][T19043] hfsplus: invalid length 1280 has been corrected to 255 [ 680.192658][T19047] loop2: detected capacity change from 0 to 2048 [ 680.235101][T19047] NILFS (loop2): invalid segment: Magic number mismatch [ 680.269062][T19047] NILFS (loop2): trying rollback from an earlier position [ 680.323730][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4658'. [ 680.337492][T19047] NILFS (loop2): recovery complete [ 680.394290][T19053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.913650][T19070] loop9: detected capacity change from 0 to 256 [ 680.951039][T19070] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 681.278582][T19077] loop8: detected capacity change from 0 to 8 [ 681.351549][T19077] SQUASHFS error: Failed to read block 0x26067d: -5 [ 681.369154][T19077] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 681.382880][T19077] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 681.459552][T19068] loop2: detected capacity change from 0 to 32768 [ 681.503880][T19068] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 681.629386][T19068] XFS (loop2): Ending clean mount [ 681.824962][ T5779] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 683.124542][T19115] loop6: detected capacity change from 0 to 8 [ 683.170020][T19109] loop9: detected capacity change from 0 to 32768 [ 683.261354][T19113] loop8: detected capacity change from 0 to 32768 [ 683.297491][T19111] loop2: detected capacity change from 0 to 32768 [ 683.304689][T19113] XFS: noikeep mount option is deprecated. [ 683.322631][T19109] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 683.347758][T19113] XFS: noikeep mount option is deprecated. [ 683.404273][T19113] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 683.432666][T19111] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 683.572871][T19109] XFS (loop9): Ending clean mount [ 683.737764][T17915] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 683.760330][T19111] XFS (loop2): Ending clean mount [ 683.805859][T19111] XFS (loop2): Quotacheck needed: Please wait. [ 683.816676][T19113] XFS (loop8): Ending clean mount [ 683.850485][T19113] XFS (loop8): Quotacheck needed: Please wait. [ 684.012504][T19111] XFS (loop2): Quotacheck: Done. [ 684.066289][T19113] XFS (loop8): Quotacheck: Done. [ 684.135108][T14379] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 684.195993][ T5779] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 685.160937][T19170] random: crng reseeded on system resumption [ 686.124993][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.133422][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.808046][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4725'. [ 687.136131][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 687.474589][ T28] audit: type=1400 audit(2000000005.180:287): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=19253 comm="syz.2.4733" name="unknown" offset=82 [ 688.078800][T19267] loop2: detected capacity change from 0 to 512 [ 688.153575][T19267] EXT4-fs (loop2): 1 truncate cleaned up [ 688.181702][T19267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.306633][T19249] comedi comedi1: reset error (fatal) [ 688.331451][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.358868][T19273] loop9: detected capacity change from 0 to 4096 [ 688.367097][T19273] EXT4-fs: inline encryption not supported [ 688.375142][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.404466][T19273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 688.432039][T19273] EXT4-fs (loop9): Test dummy encryption mode enabled [ 688.462339][T19273] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 688.484358][T19273] System zones: 0-5 [ 688.491680][T19273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.553981][T19273] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 688.660990][T17915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.930313][T19289] phram: illegal erasesize or len [ 689.595336][T19303] loop2: detected capacity change from 0 to 1024 [ 689.615029][T19303] EXT4-fs: inline encryption not supported [ 689.638132][T19291] loop8: detected capacity change from 0 to 40427 [ 689.664531][T19303] EXT4-fs (loop2): invalid inodes per group: 204800 [ 689.664531][T19303] [ 689.677655][T19291] F2FS-fs (loop8): Invalid log blocks per segment (32) [ 689.694417][T19291] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 689.741175][T19291] F2FS-fs (loop8): heap/no_heap options were deprecated [ 690.161864][T19315] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4757'. [ 690.195368][T19315] netlink: 'syz.6.4757': attribute type 9 has an invalid length. [ 690.217109][T19315] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4757'. [ 690.250516][T19315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4757'. [ 690.782519][T19328] loop8: detected capacity change from 0 to 4096 [ 690.844198][T19328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.978333][T19328] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 691.072150][T19308] loop2: detected capacity change from 0 to 40427 [ 691.126654][T19308] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 691.133794][T19308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 691.204461][T19308] F2FS-fs (loop2): invalid crc value [ 691.211663][T19308] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 691.241343][T14379] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.312525][T19308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 691.528427][T19308] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 691.536355][T19324] loop9: detected capacity change from 0 to 32768 [ 691.551889][T19308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 691.610816][T19308] syz.2.4755: attempt to access beyond end of device [ 691.610816][T19308] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 691.635832][T19324] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 691.655932][T19324] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.688043][ T5779] syz-executor: attempt to access beyond end of device [ 691.688043][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 691.708742][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 691.929086][T19324] XFS (loop9): Ending clean mount [ 691.962423][T19324] XFS (loop9): Quotacheck needed: Please wait. [ 692.184254][T19324] XFS (loop9): Quotacheck: Done. [ 692.232139][T19360] netlink: 'syz.8.4772': attribute type 2 has an invalid length. [ 692.391103][T17915] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 692.429683][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4774'. [ 693.132410][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4785'. [ 693.365990][T19405] program syz.8.4790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.438749][T19406] loop9: detected capacity change from 0 to 2048 [ 693.560452][T19406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.663502][T19406] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 693.716802][T19406] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 693.736332][T19406] EXT4-fs (loop9): This should not happen!! Data will be lost [ 693.736332][T19406] [ 693.770899][T19406] EXT4-fs (loop9): Total free blocks count 0 [ 693.786763][T19406] EXT4-fs (loop9): Free/Dirty block details [ 693.808678][T19406] EXT4-fs (loop9): free_blocks=2415919504 [ 693.827218][T19406] EXT4-fs (loop9): dirty_blocks=48 [ 693.832425][T19406] EXT4-fs (loop9): Block reservation details [ 693.846870][T19406] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 694.364028][ T42] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 694.584242][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 694.618461][T19436] loop9: detected capacity change from 0 to 1024 [ 694.636723][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 694.663822][T19436] hfsplus: invalid length 1033 has been corrected to 255 [ 694.683501][T19436] hfsplus: invalid length 1033 has been corrected to 255 [ 694.708838][T19436] hfsplus: invalid length 1033 has been corrected to 255 [ 694.747919][T19436] hfsplus: b-tree write err: -5, ino 26 [ 694.835805][ T3480] hfsplus: b-tree write err: -5, ino 25 [ 694.847652][ T3480] hfsplus: b-tree write err: -5, ino 4 [ 694.853824][ T3480] hfsplus: b-tree write err: -5, ino 2 [ 695.851874][T19464] loop9: detected capacity change from 0 to 256 [ 695.884895][T19464] exfat: Deprecated parameter 'namecase' [ 695.896921][T19464] exfat: Deprecated parameter 'namecase' [ 695.902682][T19464] exfat: Deprecated parameter 'namecase' [ 695.938619][T19464] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 697.039554][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4833'. [ 697.521417][T19505] loop6: detected capacity change from 0 to 40427 [ 697.532146][T19505] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 697.551635][T19505] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 697.577452][T19505] F2FS-fs (loop6): Unrecognized mount option "0177777777777777777777700000000000000000000000" or missing value [ 697.632102][T19513] loop9: detected capacity change from 0 to 764 [ 698.421450][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4845'. [ 698.439236][T16914] blk_print_req_error: 8 callbacks suppressed [ 698.439254][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.463810][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.499199][T17192] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.499200][T16914] I/O error, dev loop6, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.499237][T16914] buffer_io_error: 6 callbacks suppressed [ 698.499248][T16914] Buffer I/O error on dev loop6p4, logical block 8, async page read [ 698.536438][T17192] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 698.552752][T17192] I/O error, dev loop6, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.586750][T17192] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 698.596060][T16914] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.625575][T17192] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.633099][T16914] Buffer I/O error on dev loop6p4, logical block 9, async page read [ 698.656619][T17192] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 698.656816][T16914] I/O error, dev loop6, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.691258][T17192] I/O error, dev loop6, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.716614][T17192] Buffer I/O error on dev loop6p1, logical block 11, async page read [ 698.726614][T16914] Buffer I/O error on dev loop6p4, logical block 10, async page read [ 698.734858][T16914] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.744838][T17192] Buffer I/O error on dev loop6p1, logical block 12, async page read [ 698.764585][T16914] Buffer I/O error on dev loop6p4, logical block 11, async page read [ 698.776785][T17192] Buffer I/O error on dev loop6p1, logical block 13, async page read [ 699.093273][T19551] ================================================================== [ 699.093292][T19551] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 699.093361][T19551] Write of size 4 at addr ffffc90004159f80 by task syz.6.4853/19551 [ 699.093381][T19551] [ 699.093389][T19551] CPU: 1 PID: 19551 Comm: syz.6.4853 Not tainted syzkaller #0 [ 699.093412][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.093426][T19551] Call Trace: [ 699.093436][T19551] [ 699.093445][T19551] dump_stack_lvl+0x18c/0x250 [ 699.093470][T19551] ? sys_imageblit+0x1bac/0x25d0 [ 699.093495][T19551] ? show_regs_print_info+0x20/0x20 [ 699.093517][T19551] ? load_image+0x420/0x420 [ 699.093554][T19551] print_report+0xa8/0x210 [ 699.093586][T19551] ? sys_imageblit+0x1bac/0x25d0 [ 699.093608][T19551] kasan_report+0x117/0x150 [ 699.093646][T19551] ? sys_imageblit+0x1bac/0x25d0 [ 699.093673][T19551] sys_imageblit+0x1bac/0x25d0 [ 699.093706][T19551] ? sys_copyarea+0x2530/0x2530 [ 699.093733][T19551] ? wq_worker_last_func+0x40/0x40 [ 699.093773][T19551] ? stack_trace_save+0xaa/0x100 [ 699.093801][T19551] ? stack_trace_snprint+0xf0/0xf0 [ 699.093833][T19551] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 699.093875][T19551] cw_putcs+0x15f3/0x18a0 [ 699.093917][T19551] ? cw_clear+0x250/0x250 [ 699.093942][T19551] ? fb_get_color_depth+0x162/0x280 [ 699.093973][T19551] fbcon_putcs+0x35c/0x520 [ 699.094006][T19551] ? cw_clear+0x250/0x250 [ 699.094028][T19551] do_update_region+0x4e9/0x640 [ 699.094064][T19551] ? hide_cursor+0x320/0x320 [ 699.094092][T19551] ? fbcon_invert_region+0x21b/0x240 [ 699.094130][T19551] invert_screen+0x8e2/0xa70 [ 699.094169][T19551] ? do_update_region+0x640/0x640 [ 699.094200][T19551] ? rcu_is_watching+0x15/0xb0 [ 699.094230][T19551] ? vc_do_resize+0x357/0x17f0 [ 699.094256][T19551] ? trace_kmalloc+0x1f/0xa0 [ 699.094289][T19551] clear_selection+0x59/0x70 [ 699.094311][T19551] vc_do_resize+0x6f2/0x17f0 [ 699.094350][T19551] ? mark_lock+0x94/0x320 [ 699.094378][T19551] ? fb_match_mode+0x5f4/0x720 [ 699.094405][T19551] ? vc_resize+0x50/0x50 [ 699.094434][T19551] ? fb_match_mode+0x5f4/0x720 [ 699.094463][T19551] fbcon_modechanged+0x80d/0x12b0 [ 699.094500][T19551] store_rotate_all+0x531/0x620 [ 699.094524][T19551] ? sysfs_kf_read+0x360/0x360 [ 699.094546][T19551] kernfs_fop_write_iter+0x3a4/0x520 [ 699.094571][T19551] vfs_write+0x474/0x9a0 [ 699.094605][T19551] ? file_end_write+0x250/0x250 [ 699.094637][T19551] ? __fget_files+0x3fc/0x460 [ 699.094674][T19551] ? __fdget_pos+0x2a3/0x330 [ 699.094703][T19551] ? ksys_write+0x74/0x260 [ 699.094734][T19551] ksys_write+0x151/0x260 [ 699.094765][T19551] ? __ia32_sys_read+0x90/0x90 [ 699.094798][T19551] ? lockdep_hardirqs_on+0x98/0x150 [ 699.094826][T19551] do_syscall_64+0x55/0xb0 [ 699.094846][T19551] ? clear_bhb_loop+0x40/0x90 [ 699.094868][T19551] ? clear_bhb_loop+0x40/0x90 [ 699.094891][T19551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.094926][T19551] RIP: 0033:0x7f1b8b19e559 [ 699.094947][T19551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.094966][T19551] RSP: 002b:00007f1b893f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.094990][T19551] RAX: ffffffffffffffda RBX: 00007f1b8b425fa0 RCX: 00007f1b8b19e559 [ 699.095007][T19551] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 699.095021][T19551] RBP: 00007f1b8b235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 699.095035][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.095048][T19551] R13: 00007f1b8b426038 R14: 00007f1b8b425fa0 R15: 00007ffda468de18 [ 699.095072][T19551] [ 699.095080][T19551] [ 699.095086][T19551] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc9000415a000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 699.095133][T19551] Memory state around the buggy address: [ 699.095144][T19551] ffffc90004159e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.095169][T19551] ffffc90004159f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.095183][T19551] >ffffc90004159f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 699.095195][T19551] ^ [ 699.095206][T19551] ffffc9000415a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.095220][T19551] ffffc9000415a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 699.095231][T19551] ================================================================== [ 699.095292][T13200] BUG: unable to handle page fault for address: ffffc90004558fc0 [ 699.095307][T13200] #PF: supervisor write access in kernel mode [ 699.095318][T13200] #PF: error_code(0x0002) - not-present page [ 699.095339][T13200] PGD 18800067 P4D 18800067 PUD 1aa4a067 PMD 141b3d067 PTE 0 [ 699.095379][T13200] Oops: 0002 [#1] PREEMPT SMP KASAN [ 699.095396][T13200] CPU: 1 PID: 13200 Comm: kworker/1:6 Not tainted syzkaller #0 [ 699.095417][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.095431][T13200] Workqueue: events drm_fb_helper_damage_work [ 699.095462][T13200] RIP: 0010:memcpy_orig+0x31/0x120 [ 699.095548][T13200] Code: 48 83 fa 20 0f 82 86 00 00 00 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18 48 8d 76 20 <4c> 89 07 4c 89 4f 08 4c 89 57 10 4c 89 5f 18 48 8d 7f 20 73 d4 83 [ 699.095567][T13200] RSP: 0018:ffffc90005447978 EFLAGS: 00010246 [ 699.095585][T13200] RAX: ffffc90004558fc0 RBX: ffffc90004558fc0 RCX: ffffffff84d8552e [ 699.095602][T13200] RDX: 0000000000000000 RSI: ffffc90004257fe0 RDI: ffffc90004558fc0 [ 699.095617][T13200] RBP: ffffc90005447ab0 R08: 0000000000000000 R09: 0000000000000000 [ 699.095632][T13200] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000003ff [ 699.095645][T13200] R13: ffffc90004257fc0 R14: ffffc90005447b46 R15: 0000000000001000 [ 699.095660][T13200] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 699.095679][T13200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.095694][T13200] CR2: ffffc90004558fc0 CR3: 0000000079930000 CR4: 00000000003506e0 [ 699.095714][T13200] Call Trace: [ 699.095721][T13200] [ 699.095729][T13200] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 699.095772][T13200] ? drm_fbdev_generic_helper_fb_probe+0x520/0x520 [ 699.095807][T13200] drm_fb_helper_damage_work+0x22f/0x6f0 [ 699.095838][T13200] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.095867][T13200] ? drm_fb_helper_resume_worker+0x50/0x50 [ 699.095898][T13200] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.096006][T13200] ? process_scheduled_works+0x975/0x1600 [ 699.096035][T13200] ? process_scheduled_works+0x975/0x1600 [ 699.096065][T13200] process_scheduled_works+0xa60/0x1600 [ 699.096109][T13200] ? worker_attach_to_pool+0x370/0x370 [ 699.096146][T13200] ? assign_work+0x3cc/0x5d0 [ 699.096184][T13200] worker_thread+0xa5e/0xfe0 [ 699.096219][T13200] ? _raw_spin_unlock+0x40/0x40 [ 699.096247][T13200] ? __kthread_parkme+0x71/0x1c0 [ 699.096274][T13200] kthread+0x2fa/0x390 [ 699.096295][T13200] ? pr_cont_work+0x550/0x550 [ 699.096323][T13200] ? kthread_blkcg+0xd0/0xd0 [ 699.096346][T13200] ret_from_fork+0x48/0x80 [ 699.096382][T13200] ? kthread_blkcg+0xd0/0xd0 [ 699.096405][T13200] ret_from_fork_asm+0x11/0x20 [ 699.096453][T13200] [ 699.096465][T13200] Modules linked in: [ 699.096489][T13200] CR2: ffffc90004558fc0 [ 699.096506][T13200] ---[ end trace 0000000000000000 ]--- [ 699.096516][T13200] RIP: 0010:memcpy_orig+0x31/0x120 [ 699.096547][T13200] Code: 48 83 fa 20 0f 82 86 00 00 00 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18 48 8d 76 20 <4c> 89 07 4c 89 4f 08 4c 89 57 10 4c 89 5f 18 48 8d 7f 20 73 d4 83 [ 699.096564][T13200] RSP: 0018:ffffc90005447978 EFLAGS: 00010246 [ 699.096582][T13200] RAX: ffffc90004558fc0 RBX: ffffc90004558fc0 RCX: ffffffff84d8552e [ 699.096599][T13200] RDX: 0000000000000000 RSI: ffffc90004257fe0 RDI: ffffc90004558fc0 [ 699.096614][T13200] RBP: ffffc90005447ab0 R08: 0000000000000000 R09: 0000000000000000 [ 699.096627][T13200] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000003ff [ 699.096639][T13200] R13: ffffc90004257fc0 R14: ffffc90005447b46 R15: 0000000000001000 [ 699.096656][T13200] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 699.096675][T13200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.096690][T13200] CR2: ffffc90004558fc0 CR3: 0000000079930000 CR4: 00000000003506e0 [ 699.096711][T13200] Kernel panic - not syncing: Fatal exception [ 699.097301][T13200] Kernel Offset: disabled