last executing test programs: 6m7.386514359s ago: executing program 32 (id=208): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) read(r0, &(0x7f0000000180)=""/187, 0xbb) 3m32.39083396s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 3m28.602836644s ago: executing program 2 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file1\x00', 0x2200000, &(0x7f0000000100), 0x81, 0xba51, &(0x7f000000c280)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8dG0ZG2VQkAlUx2tAGZPBDFsUBpGiMaCETCW+Qoy8RAzEB874AMPUwEACG0EYiAomMsCEt2GogZrTe27X3nXN+t/+/zr6+STruefc/s5u77f/cylZ2+55CzuyrCYr6c0qXb/imGcbb2j/wTen3Xv4kmuqXi8dbZtU3N1QbPcttlOy/pO15berS4dqvrPmF9X5TvXg8+5WX1/1nix7X7HbVmxbS5vLmsrv11ehODy5fH/1wMOo+mrpz4D6/M2X5045d/B58nfMsuzQrT7Qcaq7ff684jnJBnWbUNxdteW+/m1N6c+cP2bZnHXZNj8/xlT+OCefvvoLT4z1A9kVdLfP76zo31Z0rirWY0PlGhyPKj/PzzmjaXnxFFYNvh7tarrb5x2XjbCO//mXb/T2la6btVmW1WVZNjHLsklj3YOdo72jpSO/5pf3i+zl9T95uM+LO/571c+yLHt38TpxWPm1ANi1tHe0HDXM+q8baf3feeyGG7dj/c9J+5EAo9XZ3tGSr/WK9T9ppPU/7a6jFxVfdLeWpt4e2w8CAAAAABjWiktXXbB42bKei91www03Bm6M9ZUJiG3Loh/rRwKkluI/J8b6YwQAAIDxrrOr/cUJVUMOTRi8s/dDPf3bmZu7z19119zjy9vi7gXDnHLI9/n39fX1rTlt2dnF7sSK75edVDmcn3/pvYsvKXYbKr//oLb/aG121nlLl/Ucmv9VU2uzS/Kdpvy802qzr+U7zfnO9NrstnynpX+nPlub7xxyzvJl5+YHDgh8xt5ZOrt6swlDimVDPhsG9196b++vytsRTlk+W/8Plcj7v9F0850V95Vto//A+ff9P/z5Au8oo+t/9dXl7Qin3Gr9b1gyq2m4+7bdf+D8U/SPa5jr/5BGldf9iut/wzCnHJj/9alffzbvP+On668pDtVsz/V/0PmnVvbvP/nA9T8/1X7l63/+2rL/Dj0Z41Bn15UvjrT+R+5f86Hi3aoHzQ6craXv1s/k/e++tu2x4lDtKPvvN9L6r2rY6nrCKHV23dhXsf5H0T+bPswpB5q8a27nmrz/q289/Mig+0bTf//K/o0rL/xs44pLV81YeuHiJT1Lei5qaZ7V2tzaNHv2rMb+S0Lp7Y49KePIjq3/bLeKmaos239gfvblR2/M+//5plNuKQ5NGmX/aSOu/7OGPlYGmVKd1dVllyxeufLiptLb8m5z6W3p3YbpP4rX/6nlL6Lqi21Vln1wYP7AK14/OO9/x8bXbi4O1Y2y//SR+tdt+XsJtIPr/9yKmSH9H3y456a8/4qDPnxBcWi0r/8HjLj+e63/HdXZVfE/fHayvP9JbxyxKXD8QF//xZWif/2m1tWB4x/RP64U/de+0HJb4PhB+seVov899zWeHjh+sP5xpej/uQcOWhU4PkP/uFL0n/Hk9D0Dxw/RP64U/f/x+NSZgeON+seVov+Jz1xwVeD4ofrHlaL/d19efkPgeJP+caXo//u+cx4IHG/WP64U/Xd/ZclLgeMt+seVov/Kpy/bK3B8pv5xpej/2w1XHBk4/lH940rRf9PaFScHjs/SP64U/RvXf/7iwPFW/eNK0f+F53/4m8Dx2frHlaJ/w3M3fy9w/DD940rR/7LNP/lX4Pjh+seVov+db97+aOD4EfrHlaL/Qxt/OS1w/Ej940rRv+aJn4f+O82P6R9Xiv5n3n/P+YHjH9c/rhT9v7XurhMCx+dsu3/NznqI41qK/n3PnPBM4Hib9R9Xiv6zXl4Q+vuh2/WPK0X/C/vm/zhwvEP/uFL0v+WVo74SOH6U/nGl6P/U02deHjg+V/+4UvR/74ZFiwLHj9Y/rhT9O9ee2hw4Pk//uFL0712/8P2B4/P1jytF/3nPf+mvgePH6B9Xiv6rn7vqP4HjnfrHlaL/nzZfc13g+LH6x5Wi/95vrl4TOL5A/7hS9D9743XtgePH6R9Xiv63P/Ht8wLHj9c/rhT9X7n/+j0Cx7v0jytF/8PWfT/0h62foH9cKfpf++rG6wPHT9Q/rhT957796N2B45/QP64U/fd56enHAsdP0j+uFP0f//tTrwWOL9Q/rhT9f/TwuomB45/UP64U/c/63R+G+z0h2+Nk/eNK0f+IR9Z3Bo6fon9cKfq/9rcHLwocP1X/uFL0n/nvvW4NHO/WP64U/d96Y58rA8c/pX9cKfrfumnP5wPHP61/XCn6L3/hA+sDxxfpH1eK/pPv2/3wwPHT9I8rRf8nH9hj78Dx0/WPK0X/Lz45YWXg+Bn6x5Wi/4LHJy4MHD9TfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27gTe8rnw//iZ1YwkpJKisWsVKkplqUhpQ6HFkl227FuhRZYWS4q02EmbQoUsFSkiayqVIi1KQpLI/B9j5jLGe6bx+1cz3ffz+Xi4Z/vO8Tmf1/mce+Z+7/kOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAcrb/6OqsNBqOnXNrvUbcfs/Orb1nm2FVPOnLJi1+y5SEj7pp87Srjptw8YeI0Bg/e2SqTbhs5eZPRR5150shJF0ZOfb9zjh8/Yu7BiPnzqPbe8F8Me56hM5PvdMJgMBhx8OT/HjJ+0peVb7rpun9xX9XWX3WN1SdN3uT/Huo2asrNU65/6Pzoyf+ttNFgsNLbB9N9fsx6a996w92zegz/C9ZfdY01p+k/mNL5we7Tru9W0z7Pz75625Vmabh/k/VXXX2tSa2nt45PWW+VkyY++Lo++tjBYPRxg8Ho4weD0SfM6h78e6y62vKrTXrNH7o8ufp+Q28I0uv7iEXW2WDOwWAwZvL3idEnDn0vAP63rLra8q8I63/s0O1p/a9809wLWv/wv2/NVVdbfjDV+/zJ1+439Pf7uP5vGfWmw2bdiAEAAIDH6oHbzjl/yr6+kYPBwoNp9vc+aMrPBUacfuGVV86ygc4ewn6yR//OxP+YSZ3HnTZhMNj+zbN6KMwCI2b1AJil9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YtPZ/z/P0OmqR6z78imbLrHC/OudOe2fn3TduP/6qGeZ4br/f7D1iMktJzXfejAYvH7VtdddejAYnLne/CssOnjothUn3bbSfKOmHCBg6Qe/LjGdO54w9emcD93H6Q/e/5oTjxs1YppBTOV1rzx3r63Wv+cF054uNf3H8dDxJc5c85VzDX2WZeQ0G03vuTp0/0OPZdrOU8a+9KSxL7PLdjsus/Oeez136+022XLzLTfffvnlXrTCcissu+KKL1pmi6233fz5k79OZ84mz8piMzNnY6eds9tWnXrOpn1s05uzCTOeswfv8ZbD1jt7aM5GP8Y5W2zGczZh66GxThgz2PjBqZn0v1x8zGCPSReWnWOq15YFJm370vlGDgaHPvxAJ52b46Hn4Ij9tv43HLdkyukiU04XjcctOWt6xy0ZDB23ZOiACS+efLLLeUPbTfs56ylXz/RxS3Zf7f5FB4/6XNZ/xP/p+/+jeq044qGJGjpoyJRtJvd6+DgTQ9O2ylTHmVghHUvm3+lR450w8qHndRrvlM/FjZhm/mf0ubjBllvss8SUqCtM/lMP/J+j5NeOtR78Or31PGGa0xm9dox6+OzD125++ULTvna8dvpDfMS6GJqjOabZaHqvHXtscvHWU782Tee1Y62tp3zQ+OHXjkn/28WGXjsmjX3JMYNDJ11YbtKFpcYMTp10YfkHL4wfXDjpwvM23WHbzUY8+P3qUc+DpUc84hcew/N29WmetzNxfJyVLx0MVr4kPa7pT2eWnrdjZzDe/HnuwQw/z33BJoucMRgMHj/lcb14aOz/F2m8o2c83nD8icGMjj8xOO7K3U74N4/3oXX24HNtysv00tP5M49YZ/M8ap3tP2qqlTGz72s2C9tPPr/AQ/d2/OZXXDY0R2Omud9/9T166LGk/kPv+aY2Yr/BiBnNzfTehz1ibuae8dzM7PuXpae8wRg/g7l5zl37PnNobsY+xrlZajpzM/X74amNHQzGP3JuRg9eNekdzZS5WXJm5mauf8/zZs6w/eTzSzx01fWv2mfFobkJcxG//w/d/5KPcW5GbPzQ82bxB29bdORg7NjBHpvssstOy07+OnRxuclfZ7wGF5+ZuRz375nLBae86ox89OQ8dNU2J09c/v+6Bhd/rHM5YTBy6O/cW0+7WP59/Pynm/7d9O+mfzf9u+nfTf9u+hebzv7/CUM/FzxoxInrTPlhzJiL7pl3l1k93llsWO//n9L3Efv/d5n3notGDh66bYb7ZydvM1vun11h8sneyw5tN+3+wSlXz/T+2bsPuWSDwX9n/+z/ydBanYmfG3r976Z/N/276d9N/276d3us/Vf+D42DWcP676Z/N/276d9N/276d9O/2HT2/z9/6PcArtr5/hOn7Agds/O6K903q8c7iw3r/f9T+j5i//99K62788jBQ7fNcP//5G069v+vdOPRBwxm4/3/Q2vV/n/+Bf276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv9h09v+vMvR7AGO2X2yxod8HuOb2A0fN6vHOYsN1/79//7+X1/9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/sSn7/wfT/LOHb/S8iML+//9t0+n/Jv2jlv5r6x+19F9H/6il/7r6Ry3936x/1NL/LY/sP71/2bxOS//1rP+opf/6+kct/TfQP2rp/1b9o5b+b9M/aun/dv2jlv7vmHH/Mf/pYc2uWvpvaP1HLf030j9q6b+x/lFL/030j1r6v1P/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7v0j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/476Ry39361/1NJ/J/2jlv476x+19N9F/6il/676Ry39d9M/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfTfR/+opf979I9a+r9X/6il/776Ry3999M/aum/v/5RS//36R+19H+//lFL/w/oH7X0/6D+UUv/A/SPWvp/SP+opf+B+kct/Q/SP2rpf7D+UUv/Q/SPWvp/WP+opf9H9I9a+n9U/6il/8f0j1r6H1rWf+xMbtfS/7Cy/jOrpf/h+kct/Y/QP2rp/3H9o5b+R+oftfT/hP5RS/9P6h+19D9K/6il/9H6Ry39P6V/1NL/GP2jlv6f1j9q6f8Z/aOW/p/VP2rp/zn9o5b+x+oftfQ/Tv+opf/x+kct/U/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0/7z+UUv/0/SPWvp/Qf+opf8X9Y9a+n9J/6il/5f1j1r6f0X/ZI4pp8O+/+n6Ry3r/6v6Ry39v6Z/1NL/DP2jlv5n6h+19D9L/6il/9f1j1r6f0P/qKX/N/WPWvqfrX/U0v8c/aOW/ufqH7X0/5b+UUv/8/SPWvqfr3/U0v8C/aOW/hfqH7X0/7b+UUv/7+gftfT/rv5RS/+L9I9a+l+sf9TS/3v6Ry39L9E/aun/ff2jlv4/0D9q6X+p/lFL/8v0j1r6/1D/qKX/5fpHLf2v0D9q6f8j/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6X+t/lFL/+v0j1r6/1j/qKX/9fpHLf1/on/U0v+n+kct/X+mf9TS/wb9o5b+P9c/aun/C/2jlv6/1D9q6X+j/lFL/1/pH7X0/7X+UUv/m/SPWvrfrH/U0v83+kct/W/RP2rp/1v9o5b+v9M/aun/e/2jlv5/0D9q6X+r/lFL/z/qH7X0/5P+UUv/2/SPWvr/Wf+opf/t+kct/f+if9TS/w79o5b+d+oftfS/S/+opf9f9Y9a+t+tf9TS/2/6Ry3979E/aun/d/2jlv736h+19P+H/lFJ//ED/aOS/oP79Y9a+v9T/6il/wP6Ry39J+oflfQfMdA/auk/Qv+opf9I/aOW/qP0j1r6j9Y/auk/Rv+opf9Y/aOW/nPoH7X0H6d/1NJ/vP5RS/859Y9a+j9O/6il/1z6Ry39H69/1NJ/bv2jlv5P0D9q6T+P/lFL/3n1j1r6z6d/1NL/ifpHLf3n1z9q6f8k/aOW/k/WP2rp/xT9o5b+C+gftfR/qv5RS/8F9Y9a+j9N/6il/9P1j1r6L6R/1NJ/Yf2jlv7P0D9q6T9hsJ/+QUv/Raz/qKX/ovpHLf0X0z9q6b+4/lFL/yX0j1r6L6l/1NJ/Kf2jlv5L6x+19H+m/lFL/2fpH7X0f7b+UUv/5+gftfR/rv5RS//ntfe/b+Jk01zd0n+Z9v7T0dL/+fpHLf2X1T9q6b+c/lFL/+X1j1r6v0D/qKX/C/WPWvq/SP+opf8K+kct/VfUP2rp/2L9o5b+L9E/aum/kv6PMDQXLf1fqn/U0v9l+kct/V+uf9TSf2X9o5b+q+gftfRfVf+opf9q+kct/V+hf9TS/5X6Ry39X6V/1NJ/df2jlv5r6B+19H+1/lFL/zX1j1r6v0b/qKX/a/WPWvqvpX/U0v91+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf3X1j9q6b+O/lFL/3X1j1r6v1n/qKX/W/SPWvqvp3/U0n99/aOW/hvoH7X0f6v+UUv/t+kftfR/u/7Rw/3HDAaD4dv/HfpHLet/Q/2jlv4b6R+19N9Y/6il/yb6Ry3936l/1NJ/U/2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+t9Y9a+m+jf9TS/136Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf8fp9x//XxnXbKql/7ut/6il/076Ry39d9Y/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf9e+kct/ffWP2rpv4/+UUv/9+gftfR/r/5RS/999Y9a+u/X1n8mf6uhpf/+bf1nUkv/9+kftfR/v/5RS/8P6B+19P+g/lFL/wP0j1r6f0j/qKX/gfpHLf0P0j9q6X+w/lFL/0P0j1r6f1j/qKX/R/SPWvp/VP9oePbfb9Rgmv4f0z8anv0nm7r/ofpHLf0P0/8hU89DS//D9Y9a+h+hf9TS/+P6Ry39j9Q/aun/Cf2jlv6f1D9q6X+U/lFL/6P1j1r6f0r/qKX/MfpHLf0/rX/U0v8z+kct/T+rf9TS/3P6Ry39j9U/aul/nP5RS//j9Y9a+p+gf9TS/0T9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rp/3n9o5b+p+kftfT/gv5RS/8v6h+19P+S/lFL/y/rH7X0/4r+UUv/0/WPWvp/Vf+opf/X9I9a+p+hf9TS/0z9o5b+Z+kftfT/uv5RS/9v6B+19P+m/lFL/7P1j1r6n6N/1NL/XP2jlv7f0j9q6X+e/lFL//P1j1r6X6B/1NL/Qv2jlv7f1j9q6f8d/aOW/t/VP2rpf5H+UUv/i/WPWvp/T/+opf8l+kct/b+vf9TS/wf6Ry39L9U/aul/mf5RS/8f6h+19L9c/6il/xX6Ry39f6R/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39r9U/aul/nf5RS/8f6x+19L9e/6il/08Gg8HYWTWm2VhL/59a/1FL/5/pH7X0v0H/qKX/z/WPWvr/Qv+opf8v9Y9a+t+of9TS/1f6Ry39f61/1NL/Jv2jlv436x+19P+N/lFL/1v0j1r6/1b/qKX/7/SPWvr/Xv+opf8f9I9a+t+qf9TS/4/6Ry39/6R/1NL/Nv2jlv5/1j9q6X+7/lFL/7/oH7X0v0P/qKX/nfpHLf3v0j9q6f9X/aOW/nfrH7X0/5v+UUv/e/SPWvr/Xf+opf+9+kct/f+hf9TS/z79o5b+9+sftfT/p/7RpP4TRwwGw73/A/pHLet/ov5RSf8Hz+r/aC39R+gftfQfqX/U0n+U/lFL/9H6Ry39x+gftfQfq3/U0n8O/aOW/uP0j1r6j9c/auk/p/5RS//H6R+19J9L/6il/+P1j1r6z61/1NL/CfpHLf3n0T9q6T+v/lFL//n0j1r6P1H/qKX//PpHLf2fpH/U0v/J+kct/Z+if9TSfwH9o5b+T9U/aum/oP5RS/+n6R+19H+6/lFL/4X0j1r6L6x/1NL/GfpHLf0n6B+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TSfyn9o5b+S89E/wn/yXHNplr6P9P6j1r6P0v/qKX/s/WPWvo/R/+opf9z9Y9a+j9P/6il/zL6Ry39n69/1NJ/Wf2jlv7L6R9N3f+Ns3ow/w7T6b+8/lHL+n+B/lFL/xfqH7X0f5H+UUv/FfSPWvqvqH/U0v/F+kct/V+if9TSfyX9o2Hff47JZ1+qfzTs+085+zL9o5b+L9c/aum/sv5RS/9VptN/vmX+WwObPbX0X9X6j1r6r6Z/1NL/FfpHLf1fqX/U0v9V+kct/VfXP2rpv4b+UUv/V+sftfRfU/+opf9r9I9a+r9W/6il/1r6Ry39X6d/1NL/9fpHLf3foH/U0v+N+kct/d+kf9TSf239o5b+6+gftfRfV/+opf+b9Y9a+r9F/6il/3r6Ry3919c/aum/gf5RS/+36h+19H+b/lFL/7frH7X0f4f+UUv/DfWPWvpvpH/U0n9j/aOW/pvoH7X0f6f+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/3fpH7X031b/qKX/dvpHLf231z9q6b+D/lFL/x31j1r6v1v/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176Ry3999Y/aum/j/5RS//36B+19H+v/lFL/331j1r676d/1NJ/f/2jlv7v0z9q6f9+/aOW/h/QP2rp/0H9o5b+B+gftfT/kP5RS/8D9Y9a+h+kf9TS/2D9o5b+h+gftfT/sP5RS/+P6B+19P+o/lFL/4/pH7X0P1T/qKX/YfpHLf0P1z9q6X+E/lFL/4/rH7X0P1L/qKX/J/SPWvp/sqz/fjO5XUv/o8r6z6yW/kfrH7X0/5T+UUv/Y/SPWvp/Wv+opf9n9I9a+n9W/6il/+f0j1r6H6t/1NL/OP2jlv7H6x+19D9B/6il/4n6Ry39T9I/aul/sv5RS/9T9I9a+p+qf9TS//P6Ry39T9M/emT/wbDt/wX9o5b1/0X9o5b+X9I/aun/Zf2jlv5f0T9q6X+6/lFL/6/qH7X0/5r+UUv/M/SPWvqfqX/U0v8s/aOW/l/XP2rp/w39o5b+39Q/aul/tv5RS/9z9I9a+p+rf9TS/1v6Ry39z9M/aul/vv5RS/8L9I9a+l+o/yMsPOW0pf+39Y9a+n9H/6il/3f1j1r6X6R/1NL/Yv2jlv7f0z9q6X+J/lFL/+/rH7X0/4H+UUv/S/WPWvpfpn/U0v+H+kct/S/XP2rpf4X+UUv/H+kftfS/Uv+opf9V+kct/a/Wf7KXP/JiS/9r9I9a+l+rf9TS/zr9o5b+P9Y/aul/vf5RS/+f6B+19P+p/lFL/5/pH7X0v0H/qKX/z/WPWvr/Qv+opf8v9Y9a+t+of9TS/1f6Ry39f61/1NL/Jv2jlv436x+19P+N/lFL/1v0j1r6/1b/qKX/7/SPWvr/Xv+opf8f9I9a+t+qf9TS/4/6Ry39/6R/1NL/Nv2jlv5/1j9q6X+7/lFL/7/oH7X0v0P/qKX/nfpHLf3v0j9q6f9X/aOW/nfrH7X0/5v+UUv/e/SPWvr/Xf+opf+9+kct/f+hf9TS/z79o5b+9+sftfT/p/5RS/8H9I9a+k/UPyrpP2qgf9TSf4T+UUv/kfpHLf1H6R+19B+tf9TSf4z+UUv/sfpHLf3n0D9q6T9O/6il/3j9o5b+c+oftfR/nP5RS/+59I9a+j9e/6il/9z6Ry39n6B/1NJ/Hv2jlv7z6h+19J9P/6il/xP1j1r6z69/1NL/SfpHLf2frH/U0v8p+kct/RfQP2rp/1T9o5b+C+oftfR/mv5RS/+nT3qs42fVoGZfLf0Xsv6jlv4L6x+19H+G/lFL/wn6Ry39F9E/aum/qP5RS//F9I9a+i+uf9TSfwn9o5b+S+oftfRfSv+opf/S+kct/Z+pf9TS/1n6Ry39n61/1NL/OfpHLf2fq3/U0v95+kct/ZfRP2rp/3z9o5b+y+oftfRfTv+opf/y+kct/V+gf9TS/4X6Ry39X6R/1NJ/Bf2jlv4r9vafY0Y3tvR/cW//GWrp/xL9o5b+K+kftfR/qf5RS/+X6R+19H+5/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19H+F/lFL/1fqH7X0f5X+UUv/1fWPWvqvoX/U0v/V+kct/dfUP2rp/xr9o5b+r9U/aum/lv5RS//X6R+19H+9/lFL/zfoH7X0f6P+UUv/N+kftfRfW/+opf86+kct/dfVP2rp/2b9o5b+b9E/aum/nv5RS//19Y8m9x83GO79N9A/aln/b9U/aun/Nv2jlv5v1z9q6f8O/aOW/hvqH7X030j/qKX/xvpHLf030T9q6f9O/aOW/pvqH7X030z/qKX/5vpHLf230D9q6b+l/lFL/630j1r6b61/1NJ/G/2jlv7v0j9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv476h+19H+3/lFL/530j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+79E/aun/Xv2jlv77Tt1/p1kwrtlUS//9rP+opf/++kct/d+nf9TS//36Ry39P6B/1NL/g/pHLf0P0H/IxIlTXWjp/yH9o5b+B+oftfQ/SP+opf/B+kcjjrl34sSJw7//IfpHLev/w/pHLf0/on/U0v+j+kct/T+mf9TS/1D9o5b+h+kftfQ/XP+opf8R+kct/T+uf9TS/0j9o5b+n9A/aun/Sf2jlv5H6R+19D9a/6il/6f0j1r6H6N/1NL/0/pHLf0/o3/U0v+z+kct/T+nf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/p/XP2rpf5r+UUv/L+gftfT/ov5RS/8v6R+19P+y/lFL/6/oH7X0P13/qKX/V/WPWvp/Tf+opf8Z+kct/c/UP2rpf5b+UUv/r+sftfT/hv5RS/9v6h+19D9b/6il/zn6Ry39z9U/Gs79V3n42lHf0j8azv2nXv/n6R+19D9f/6il/wX6Ry39L9Q/aun/bf2jlv7f0T9q6f9d/aOW/hfpH7X0v1j/aNj1v2AQ+39P/2jY9Z/O+r9E/6il//f1j1r6/0D/qKX/pfpHLf0v0z9q6f9D/aOW/pfrH7X0v0L/qKX/j/SPWvpfqX/U0v8q/aOW/lfrH7X0v0b/qKX/tfpHLf2v0z9q6f9j/aOW/tfrH7X0/4n+UUv/n+oftfT/Wew/8r83rtlUS/8brP+opf/P9Y9a+v9C/6il/y/1j1r636h/1NL/V/pHLf1/rX/U0v8m/aOW/jfrH7X0/43+UUv/W/SPWvr/Vv+opf/v9I9a+v9e/6il/x/0j1r636p/1NL/j/pHLf3/pH/U0v82/aOW/n/WP2rpf7v+UUv/v+gftfS/Q/+opf+d+kct/e/SP2rp/1f9o5b+d+sftfT/m/5RS/979I9a+v9d/6il/736Ry39/6F/1NL/Pv2jlv736x+19P+n/lFL/wf0j1r6T9Q/Kuk/eqB/1NJ/hP5RS/+R/7L/qP/suGZTLf1HWf9RS//R+kct/cfoH7X0H6t/1NJ/Dv2jlv7j9I9a+o/XP2rpP6f+UUv/x+kftfSfS/+opf/j9Y9a+s+tf9TS/wn6Ry3959E/auk/r/5RS//59I9a+j9R/6il//z6Ry39n6R/1NL/yfpHLf2fon/U0n8B/aOW/k/VP2rpv6D+UUv/p+kftfR/uv5RS/+F9I9a+i+sf9TS/xn6Ry39J+gftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0f6b+UUv/Z+kftfR/tv5RS//n6B+19H+u/lFL/+fpH7X0X0b/qKX/8/WPWvovq3/U0n85/aOW/svrHw3j/uOnunb0C/SPhnH/R6z/F+oftfR/kf5RS/8V9I9a+q+of9TS/8X6Ry39X1LTf9xj2rql/0o1/R+blv4v1T9q6f8y/aOW/i/XP2rpv7L+UUv/VfSPWvqvqn/U0n81/aOW/q/QP2rp/0r9o5b+r9I/aum/uv5RS/819I9a+r9a/6il/5r6Ry39X6N/1NL/tfpHLf3X0j9q6f86/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv5r6x+19F9H/6il/7r6Ry3936x/1NL/LfpHLf3X0z9q6b++/lFL/w30j1r6v1X/qKX/2/SPWvq/Xf+opf879J/GmAe/tvTfUP+opf9G+kct/TfWP2rpv4n+UUv/d+oftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvpvpX/U0n9r/aOW/tvoH7X0f5f+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/u/WPWvrvpH/U0n9n/aOW/rvoH7X031X/qKX/bvpHLf131z9q6b+H/lFL/z31j1r676V/1NJ/b/2jlv776B+19H+P/lFL//fqH7X031f/qKX/fvpHLf331z9q6f8+/aOW/u/XP2rp/wH9o5b+H9Q/aul/gP5RS/8P6R+19D9Q/6il/0H6Ry39D9Y/aul/iP5RS/8P6x+19P+I/lFL/4/qH7X0/5j+UUv/Q/WPWvofpn/U0v9w/aOW/kfoH7X0/7j+UUv/I/WPWvp/Qv+opf8n9Y9a+h+lf9TS/2j9o5b+n9I/aul/jP5RS/9P6x+19P+M/lFL/8/qH7X0/5z+UUv/Y/WPWvofp3/U0v94/aNh2H/fobNT9z9B/2gY9o/r/0T9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rp/3n9o+Hcf9zD144+Tf/48Idz/6nX/xf0j1r6f1H/qKX/l/SPWvp/Wf+opf9X9I9a+p+uf9TS/6v6Ry39v6Z/1NL/DP2jlv5n6h+19D9L/6il/9f1j1r6f0P/qKX/N/WPWvqfrX/U0v8c/aOW/ufqH7X0/5b+UUv/8/SPWvqfr3/U0v8C/aOW/hfqH7X0/7b+g4n7Pvq6lv7f0T9q6f9d/aOW/hfpH7X0v1j/qKX/9/SPWvpfon/U0v/7+kct/X+gf9TS/1L9o5b+l+kftfT/of5RS//L9Y+Gcf/xU/e/Qv9oGPd/xPr/kf5RS/8r9Y9a+l+lf9TS/2r9o5b+19T1v27izGzV0v/auv4zp6X/dfpHLf1/rH/U0v/6f9l/rv/suGZTLf1/Yv1HLf1/qn/U0v9n+kct/W/QP2rp/3P9o5b+v9A/aun/S/2jlv436h+19P+V/lFL/1/rH7X0v0n/qKX/zfpHLf1/o3/U0v8W/aOW/r/VP2rp/zv9o5b+v9c/aun/B/2jlv636h+19P+j/lFL/z/pH7X0v03/qKX/n/WPWvrfrn/U0v8v+kct/e/QP2rpf6f+UUv/u/SPWvr/Vf+opf/d+kct/f+mf9TS/x79o5b+f9c/aul/r/5RS/9/6D/FzWtMfaml/336Ry3979c/aun/T/2jlv4P6B+19J+of1TSf8xA/6il/wj9o5b+I/WPWvqP0j9q6T9a/6il/xj9o5b+Y/WPWvrPoX/U0n+c/lFL//H6Ry3959Q/aun/OP2jlv5z6R891P9tIwaDYdz/8fpHLet/bv2jlv5P0D9q6T+P/lFL/3n1j1r6z6d/1NL/ifpHLf3nL+1/8b+4vaX/k0r7/yst/Z+sf9TS/yn6Ry39F9A/aun/VP2jlv4L6h+19H+a/lFL/6frH7X0X0j/qKX/wvpHLf2foX/U0n+C/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9n6h+19H+W/lFL/2frH7X0f47+UUv/5+oftfR/nv5RS/9l9I9a+j//4f4T950lA5s9tfRf1vqPWvovp3/U0n95/aOW/i/QP2rp/0L9o5b+L9I/aum/gv5RS/8V9Y9a+r9Y/6il/0v0j1r6r6R/1NL/pfpHLf1fpn/U0v/l+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0v8V+kct/V+pf9TS/1X6Ry39V9c/aum/hv5RS/9X6x+19F9T/6il/2v0j1r6v1b/qKX/WvpHLf1fp3/U0v/1+kct/d+gf9TS/436Ry3936R/NKn/tYPBYLj3X1v/qGX9r6N/1NJ/3eb+46Z/U0v/Nzf3n4GW/m/RP2rpv57+UUv/9fWPWvpvoH/U0v+t+kct/d+mf9TS/+36Ry3936F/1NJ/Q/2jlv4b6R+19N9Y/6il/yb6Ry3936l/1NJ/U/2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+t9Y9a+m+jf9TS/136Ry39t9U/aum/nf5RRf9xl8668czmKvoPBmN2sP6jlv476h+19H+3/lFL/530j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+79E/Gp79J06besx79Y+GZ//Jpl7/++oftfTfT/+opf/++kct/d+nf9TS//36Ry39P6B/1NL/g/pHLf0P0D9q6f8h/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6f9h/aOW/h/RP2rp/1H9o5b+H9M/aul/qP5RS//D9I9a+h+uf9TS/wj9o5b+H9c/aul/pP5RS/9P6B+19P+k/lFL/6P0j1r6H61/1NL/U/pHLf2P0T9q6f9p/aOW/p/RP2rp/1n9o5b+n9M/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/z+sftfQ/Tf+opf8Xqvq/+qCZ3bKl/xer+s+8lv5f0j9q6f9l/aOW/l/RP2rpf7r+UUv/r+oftfT/mv5RS/8z9I9a+p+pf9TS/yz9o5b+X9c/aun/Df2jlv7f1D9q6X+2/lFL/3P0j1r6n6t/1NL/W/pHLf3P0z9q6X++/lFL/wv0j1r6X6h/1NL/2/pHLf2/o3/U0v+7+kct/S/SP2rpf7H+UUv/7+kftfS/RP+opf/39Y9a+v9A/6il/6X6Ry39L9M/aun/Q/2jlv6X6x+19L9C/6il/4/0j1r6X6l/1NL/Kv2jlv5X6x+19L9G/6il/7X6Ry39r9M/aun/Y/2jlv7X6x+19P+J/lFL/5/qH7X0/5n+UUv/G/SPWvr/XP+opf8v9I9a+v9S/6il/436Ry39f6V/1NL/1/pHLf1v0j9q6X+z/lFL/9/oH7X0v0X/qKX/b/WPWvr/Tv+opf/v9Y9a+v9B/6il/636Ry39/6h/1NL/T/pHLf1v0z9q6f9n/aOW/rfrH7X0/4v+UUv/O/SPWvrfqX/U0v8u/aOW/n/VP2rpf7f+UUv/v+kftfS/R/+opf/f9Y9a+t+rf9TS/x/6Ry3979M/aul/v/5RS/9/6h+19H9A/6il/0T9o5L+Ywf6Ry39R+gftfQfqX/U0n+U/lFL/9H6Ry39x+gftfQfq3/U0n8O/aOW/uP0j1r6j9c/auk/p/5RS//H6R+19J9L/6il/+P1j1r6z61/1NL/CfpHLf3n0T8aXdJ/Xv2jlvU/n/5RS/8n6h+19J9f/6il/5P0j1r6P1n/qKX/U/SPWvovoH/U0v+p+kct/RfUP2rp/7RH9R/93x3XbKql/9Ot/6il/0L6Ry39F9Y/aun/DP2jlv4T9I9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/ZfUP2rpv9Sj+o/7745rNtXSf2nrP2rp/0z9o5b+z9I/aun/bP2jlv7P0T9q6f9c/aOW/s/TP2rpv4z+UUv/5+sftfRfVv+opf9y+kct/ZfXP2rp/wL9o5b+L9Q/aun/Iv2jlv4r6B+19F9R/6il/4v1j1r6v0T/qKX/SvpHLf1fqn/U0v9l+kct/V+uf9TSf2X9o5b+q+gftfRfVf+opf9q+kct/V+hf9TS/5X6Ry39X6V/1NJ/df2jlv5r6B+19H+1/lFL/zX1j1r6v0b/qKX/a/WPWvqvpX/U0v91+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf3X1j9q6b+O/lFL/3X1j1r6v1n/qKX/W/SPWvqvp3/U0n99/aOW/hvoH7X0f6v+UUv/t+kftfR/u/5RS/936B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/936h+19N9U/6il/2b6Ry39N9c/aum/hf5RS/8t9Y9a+m+lf9TSf2v9o5b+2+gftfR/l/5RS/9t9Y9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf+79Y9a+u+kf9TSf2f9o5b+u+gftfTfVf+opf9u+kct/XfXP2rpv4f+UUv/PfWPWvrvpX/U0n9v/aOW/vvoH7X0f4/+UUv/9+oftfTfV/+opf9++kct/ffXP2rp/z79o5b+79c/aun/Af2jlv4f1D+auv9gMHz7H6B/1LL+P6R/1NL/QP2jlv4H6R+19D9Y/6il/yH6Ry39P6x/1NL/I/pHLf0/qn/U0v9j+kct/Q/VP2rpf5j+UUv/w/WPWvofoX/U0v/j+kct/Y/UP2rp/wn9o5b+n9Q/aul/lP5RS/+j9Y9a+n9K/6il/zH6Ry39P61/1NL/M/pHLf0/q3/U0v9z+kct/Y/VP2rpf5z+UUv/4/WPWvqfoH80uf+I0cO9/4n6Ry3r/yT9o5b+J+sftfQ/Rf+opf+p+kct/T+vf9TS/zT9o5b+X9A/aun/Rf2jlv5f0j9q6f9l/aOW/l/RP2rpf7r+UUv/r+oftfT/mv5RS/8znjWrBjR7a+l/pvUftfQ/S/+opf/X9Y9a+n9D/6il/zf1j1r6n61/1NL/HP2jlv7n6h+19P+W/lFL//P0j1r6n1/Yf9RMbNPS/4LC/jOjpf+Fxf2fMYPbWvp/u7j/jLT0/47+UUv/7+oftfS/SP+opf/F+kct/b+nf9TS/xL9o2Hcf46prh37ff2jYdz/Eev/B/pHLf0v1T9q6X+Z/lFL/x/qH7X0v1z/qKX/FfpHLf1/pH/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/x/rH7X0v17/qKX/T/SPWvr/VP+opf/P9I9a+t+gf9TS/+f6Ry39fzFT/cf/58Y1m2rp/0vrP2rpf6P+UUv/X+kftfT/tf5RS/+b9I9a+t+sf9TS/zf6Ry39b9E/aun/W/2jlv6/0z9q6f97/aOW/n/QP2rpf6v+UUv/P+oftfT/k/5RS//b9I9a+v9Z/6il/+36Ry39/6J/1NL/Dv2jlv536h+19L9L/6il/1/1j1r6361/1NL/b/pHLf3v0T9q6f93/aOW/vfqH7X0/4f+UUv/+/SPWvrfr3/U0v+f+kct/R/QP2rpP1H/qKT/g/8WoP6P1tJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/jP5RS/+x+kct/efQP2rpP07/qKX/eP2jlv5z6h+19H+c/lFL/7n0j1r6P17/qKX/3PpHLf2foH/U0n8e/aOW/vPqH7X0n0//qKX/E/WPWvrPr3/U0v9J+kct/Z+sf9TS/yn6Ry39F9A/aun/VP2jlv4L6h+19H+a/lFL/6frH7X0X0j/qKX/wtX9p//IW/o/o7r/9LX0n6B/1NJ/Ef2jlv6L6h+19F9M/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+i+tf9TS/5n6Ry39n6V/1NL/2fpHLf2fo3/U0v+5+kct/Z+nf9TSfxn9o5b+z9c/aum/rP5RS//l9I9a+i+vf9TS/wX6Ry39X6h/1NL/RfpHLf1XmIn+d8z9nxzY7Kml/4rWf9TS/8X6Ry39X6J/1NJ/Jf2jlv4v1T9q6f8y/aOW/i/XP2rpv7L+UUv/VfSPWvqvqn/U0n81/aOW/q/QP2rp/0r9o5b+r9I/aum/eln/l83kdi391yjrP7Na+r9a/6il/5r6Ry39X6N/1NL/tfpHLf3X0j9q6f86/aOW/q/XP2rp/wb9o5b+b9Q/aun/Jv2jlv5r6x+19F9H/6il/7r6Ry3936x/1NL/LfpHLf3X0z9q6b++/lFL/w30j1r6v1X/qKX/2/SPWvq/Xf+opf879I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf879Y9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvq/S/+opf+2+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0v/d+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/nvpHLf330j9q6b+3/lFL/330j1r6v0f/qKX/e/WPWvrvq3/U0n8//aOW/vvrH7X0f5/+UUv/9+sftfT/gP5RS/8P6h+19D9A/yGjp77Q0v9D+kcP9j98+Pc/UP+oZf0fpH/U0v9g/aOW/ofoH7X0/7D+UUv/j+gftfT/qP5RS/+P6R+19D9U/6il/2H6Ry39D9c/aul/hP5RS/+P6x+19D9S/6il/yf0j1r6f1L/qKX/UfpHLf2P1j9q6f8p/aOW/sfoH7X0/7T+UUv/z+gftfT/rP5RS//P6R+19D9W/6il/3H6Ry39j9c/aul/gv5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf/n9Y9a+p+mf9TS/wv6Ry39v6h/1NL/S/pHLf2/rH/U0v8r+kct/U/XP2rp/1X9o5b+X9M/aul/hv5RS/8z9Y9a+p+lf9TS/+v6Ry39v6F/1NL/m/pHLf3P1j9q6X+O/lFL/3P1j1r6f0v/qKX/efpHLf3P1z9q6X+B/lFL/wv1j1r6f1v/qKX/d/SPWvp/V/+opf9F+kct/S/WP2rp/z39o5b+l+gftfT/vv5RS/8f6B+19L9U/6il/2X6Ry39f6h/1NL/cv2jlv5X6B+19P+R/lFL/yv1j1r6X6V/1NL/av2jlv7X6B+19L9W/6il/3X6Ry39f6x/1NL/ev2jlv4/0T9q6f9T/aOW/j/TP2rpf4P+UUv/n+sftfT/hf5RS/9fxv4T/3vjmk219L/R+o9a+v9K/6il/6/1j1r636R/1NL/Zv2jlv6/0T9q6X+L/lFL/9/qH7X0/53+UUv/3+sftfT/g/5RS/9b9Y9a+v9R/6il/5/0j1r636Z/1NL/z/pHLf1v1z9q6f8X/aOW/nfoH7X0v1P/qKX/XfpHLf3/qn/U0v9u/aOW/n/TP2rpf4/+UUv/v+sftfS/V/+opf8/9I9a+t+nf9TS/379o5b+/9Q/aun/gP5RS/+J+kcl/ccN9I9a+o/QP2rpP1L/qKX/KP2jlv6j9Y9a+o/RP2rpP1b/qKX/HPo/bKGHz7b0H6d/1NJ/vP5RS/859Y9a+j9O/6il/1z6Ry39H69/1NJ/bv2jlv5P0D9q6T+P/lFL/3n1j1r6z6d/1NL/ifpHLf3n1z9q6f8k/aOW/k/WP2rp/xT9o5b+C+gftfR/qv5RS/8F9Y9a+j9N/6il/9P1j1r6L6R/1NJ/Yf2jlv7P0D9q6T9B/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+i+hf9TSf0n9o5b+S+kftfRfWv+opf8z9Y9a+j9L/6il/7P1j1r6P0f/qKX/c/WPWvo/T/+opf8y+kct/Z+vf9TSf1n9o5b+y+kftfRfXv+opf8LYv//+Uf7/62l/wut/6il/4v0j1r6r6B/1NJ/Rf2jlv4v1j9q6f8S/aOW/ivpH7X0f6n+UUv/l+kftfR/ee5/539tXLOplv4rW/9RS/9V9I9a+q+qf9TSfzX9o5b+r9A/aun/Sv2jlv6v0j9q6b+6/lFL/zX0j1r6v1r/qKX/mvpHLf1fo3/U0v+1+kct/dfSP2rp/zr9o5b+r9c/aun/Bv2jlv5v1D9q6f8m/aOW/mvrH7X0X0f/qKX/uvpHLf3frH/U0v8t+kct/dfTP2rpv77+UUv/DfSPWvq/Vf+opf/b9I9a+r9d/2jY9R83iP3foX807PpPZ/1vqH/U0n8j/aOW/hvrH7X030T/qKX/O/WPWvpvqn/U0n8z/aOW/pvrH7X030L/qKX/lvpHLf230j9q6b+1/lFL/230j1r6v0v/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NL/3fpHLf130j9q6b+z/lFL/130j1r676p/1NJ/N/2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/999I9a+r9H/6il/3v1j1r676t/1NJ/P/2jlv776x+19H+f/lFL//frH7X0/4D+UUv/D9b3nzNe29L/gPr+WUv/DxX13/UxbNvS/8Ci/o9FS/+D9I9a+h+sf9TS/xD9o5b+H9Y/aun/Ef2jlv4f1T9q6f8x/aOW/ofqH7X0P0z/qKX/4fpHLf2P0D9q6f9x/aOW/kfqH7X0/4T+UUv/T+oftfQ/Sv+opf/R+kct/T+lf9TS/xj9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19P+8/lFL/9MGg8H4WTWm2VhL/y9Y/1FL/y/qH7X0/5L+UUv/L+sftfT/iv5RS//T9Y9a+n9V/2jY9Z/qL/lT9/+a/tGw6z+d9X+G/lFL/zOnewT0bi39z7L+o5b+X9c/aun/Df2jlv7f1D9q6X+2/lFL/3P0j1r6n6t/1NL/W/pHLf3P0z9q6X++/lFL/wv0j1r6X6h/1NL/2/pHLf2/o3/U0v+7+kct/S/SP2rpf7H+UUv/7+kftfS/RP+opf/39Y9a+v9A/6il/6X6Ry39L9M/aun/Q/2jlv6X6x+19L9C/6il/4/0j1r6X6l/NKn/0Eemh3P/q/SPWtb/1fpHLf2v0T9q6X+t/lFL/+v0j1r6/1j/qKX/9fpHLf1/on/U0v+n+kct/X+mf9TS/wb9o5b+P9c/aun/C/2jlv6/1D9q6X+j/lFL/1/pH7X0/7X+UUv/m/SPWvrfrH/U0v83+kct/W/RP2rp/1v9o5b+v9M/aun/e/2jlv5/0D9q6X+r/lFL/z/qH7X0/5P+UUv/2/SPWvr/Wf+opf/t+kct/f+if9TS/w79o5b+d+oftfS/S/+opf9f9Y+G+g+Gef+79Y9a1v/f9I9a+t+jf9TS/+/6Ry3979U/aun/D/2jlv736R+19L9f/6il/z/1j1r6P6B/1NJ/ov5RSf8HD3Gv/6O19B+hf9TSf6T+UUv/UfpHLf1H6x+19B+jf9TSf6z+UUv/OfSPWvqP0z9q6T9e/6il/5z6Ry39H6d/NKX/yOHefy79o5b1/3j9o5b+c+sftfR/gv5RS/959I9a+s+rf9TSfz79o5b+T9Q/auk/v/5RS/8n6R+19H+y/lFL/6foH7X0X0D/qKX/U/WPWvovqH/U0v9p+kct/Z+uf9TSfyH9o5b+C+sftfR/hv5RS/8J+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2fqX/U0v9Z+kct/Z+tf9TS/zn6Ry39n6t/1NL/efpHLf2X0T8adv0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCmAAAA//8revj/") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x4008586f, &(0x7f0000000080)={0x20000, 0x2000003, 0x3ff000}) 3m27.589715675s ago: executing program 2 (id=1280): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x9, 0x2) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) 3m26.503501082s ago: executing program 2 (id=1282): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x3fff, 0x1, &(0x7f0000000240)='\x00', 0x4}) 3m26.072870537s ago: executing program 2 (id=1285): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000740)={[{@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_lower}, {@fat=@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x376, &(0x7f00000003c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x11, 0x0, 0x2000) 3m24.803857262s ago: executing program 2 (id=1290): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./bus\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 3m22.772470458s ago: executing program 2 (id=1302): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 3m21.989020411s ago: executing program 33 (id=1302): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 2m49.70174517s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 2m29.33347177s ago: executing program 5 (id=1537): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) 2m28.928154377s ago: executing program 5 (id=1540): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x38) 2m28.250871793s ago: executing program 5 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 2m9.89428135s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 1m58.566089524s ago: executing program 1 (id=1683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x5) 1m54.017438374s ago: executing program 1 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1m53.69359317s ago: executing program 1 (id=1700): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 1m53.413286743s ago: executing program 1 (id=1701): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000740)={[{@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_lower}, {@fat=@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x376, &(0x7f00000003c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x11, 0x0, 0x2000) 1m52.142618219s ago: executing program 1 (id=1705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x3) 1m51.312142258s ago: executing program 1 (id=1709): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) 1m50.765056507s ago: executing program 34 (id=1709): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) 1m41.939817479s ago: executing program 5 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 1m28.055211859s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 1m21.331528116s ago: executing program 7 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a9646004d060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 1m21.06293136s ago: executing program 7 (id=1823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) 1m19.823945865s ago: executing program 7 (id=1827): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000180), 0x3, 0x446, &(0x7f0000000b80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m19.228887358s ago: executing program 7 (id=1828): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x800850, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="1e0534e9c8ed25d9"], 0x1, 0x5964, &(0x7f0000000400)="$eJzs3X2MXGX9KPDnzMx2p7t92RaQCrJdClUEtVvegi/R6vUtgKQGo5RbhYVusdqWpi0CBaV4wQsBDBqNov6BBslFqyGBq1Qi8nJbrqKEq5fcILn6E/1Dg/xoBCox/txfduc8s7Nn5+yZnZ0tBT6ftHvmPHPm+zznOc+cOd9nZncCAAAArwp7r922/6wj3veLzw+/cNUHf7Lp6tBbHiuvxg360uVlL1ULOZC6K0vGltlx8YYrvvengQvf8/M7e7774p51R6//7XsPufDeT52++5ZvPvD8/Lv/9VTTYJXxm3E8HT++njyThFD96b6vfmHPI4ePliUhhHLStzOERcniBxYlmWiD/wghrEtXjsjcedcLJ60fXV59Q/eE8oWZ7Yz3V7dqOs527L/0hPC7d6+55ldLf/iDrl1P7xzfJKk2jKcQFpzf+PiuEMLc9P+oONqWxAeny9UhhJ6Gx51W0K5jWmz/ipz1I9PlnHTZWxAn3r8ss17KbJddj7oyy56C+mYqrx3tbldkXmY9ezKaqbx2xvJF6fLH6fL4acYvx/9JKCWhUm/+xmR8jISG45aEZOxYVuvrpfqxDen+Z9aTzHops17uyuzXWL3pQCsnycTyuF2mPJ6OK2n50Y3n6ibOzil/bbqspk/UF+N6yN6o6Z10o75fY2K79k3RlgOh1HAOalZeP/DpwehNy3qTxZMeM9JEvG/PmhuXl9c+uLcvpx3JnUkaP2kr/o5fLpr3ie9ff8mSvPjnl9L4pbbi//6MR5899/rvfCM3/s0xfrmt+Cfe1/PMGQ9duyy3f/bF/qm0FX/oqYdvWnroBbty239rjF9tK/6q3Y92z99/3/257R+M/TO3rfhPvv39f7zj8Xuezo0fYvyetuKv3b3li939+4/LjX9/7J/e9sbPc7tOfaK//88DefEfi/HntxX/9p23vO22hTecnnt8V8f+6Wsr/pnH3nvNvP33HJV37kxu7dQrJ8Cr0yHpNdZ16frEPPMP72w1z5yphnzh6wOV2jXfvPT//E5WlLn4HK1nQSfjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA5hMNO+N8f+MNH+56ppEXd6Y0nS7VlLJ8TQjI3hLBt+9DW7Rs2XzTwqYsv2bp5aOPA0PaB4c3bt14+cPKbBrYOb9k4dPnovYNvPqn2uMUhqS2ToyZV3z0yMlLqm1gW6/svx+763fLT/vLXEAYP+01/JXcXVtyy6bZDm/zMSFaNvGvTJWf95pRvp/vVl7arr0m7RkZGRkJOu/79nH/e9uV9fzouhMHXTNWuh598588mNGisYDxOqtQdag3qTnqatqPe6rQ9sb8q6zdsHB6cun9HH1/O2Y//esXT/1h/2Zf+Wevfau5+tNi/c1eNbCx9bc2Z//G1K2sFRe16qY57UX/HvYjti/1XTft7QbpfC3L2q5KzXzuT8PhPj7j++Z1hsPLc0sl1F+1XVzoAupLXtlRvrKEnWTShvJpuX820b8X2TVtWbLt8x5s3bBq6aPii4c1vXXnyylMHTzn1lBVje75ihvt/7a/un7D/sf7Xt7j/B2Y8LfzMzh/Hn62Np6J2FfXHaLuK+6OxRXnPv56zv/CVt97y0Fm1gqJxHreun0/SZc/ocV4ZGsbb5L5qtl9F/RBCGGjWD88+f3o4/P9tuKboPNR4ZBp/ZiSrRh5Z9rdvn/atJe+oFRyQ83xjg9o8z9dbPd6esf6qpsdj5CDt3+7Ri4ix/ept2q6VjzzUdePev3623r45c8JlQ9u3b11Z+zkvbem85Mim7cqWxv1aOvazHNJuCfVh2mS8juoKtfZlz59x82yv9qb39SaLm+5XVrxvz5obl5fXPrg3r6eTO2s1zg3za8vkdTlbbsw8sFxvcLP6D9bnX9H46P/At+7+6N0/OnnS+Dix9rNov5Kc/frh47d/5btf+u8/6tx+feCdj/b97f9/cnmt4OVyXqm3Om1P0nheOTGEouff0tB8P3Kff6Xm+1P0/MvWM75983gDmfXeUG7r+XrifT3PnPHQtctyn6/7Wn2+XjlhrVzwfD1Yxk/2+ZVUJrZj9p5fEwZKsmrk59cdsvOBq1YfUSsoGtf1rZuN65NayD9y9utn5z7Rf/HAf/u/nTtvfO9Nd53326FVn6sVtH/cY1s6c9yraf9Wc/q33uqYdzb271suvHjjulr5wXv9my4L8p94Ktl2+Y5PD23cOLx1W2v71erraawn28vtvp7Gs9vigv0qTdqv2bvRSn+1+nyL7V/Xdn9NfL71hqSt14Udv1w07xPfv/6SvkmPSis6v5TGL7UV//dnPPrsudd/5xu58W+O8SttxR966uGblh56wa7c+LcmafxqW/FX7X60e/7+++7PjT8Y2z+3rfhPvv39f7zj8Xuezo0fYvze9vr/uV2nPtHf/+fc+I8laT2j10gh3PXCSetr60noSp9vsR1dE9oVsutJZr2UWS83rpdqc631CspJMrE8bpeWH93QlmY+llMer8KqS2rLF+N6yN6YuvxgU2o49zcrL7pOBQB4pYvv/8dr0Pj+/3B6oZQ/0wDjZpqHLcmJG/Ow8fmcORPuX5LGj4+P84D9bwmDo8urB2oX+tN9HyE+H7LznLGe446ZGKPdec6i+fdlmfXYrtp8eaUhD01NzmsqoYX598n1TD3/ntn94vnxgesmNWugYd4qe/y60hmzZp93yLS3Mhohb3xk58Xi5zn6F4TVY/W1OD6yn6OJxyH7OZpYzxGZE2e7n6OZ6fiIzZ5ifIw1ufj9jcnHL0zRv+PHr3m07PGbxvGujm4/2+/PdmDesOkp7cDNG87u+2HmJXPip0+wg33eMJbH/ai0OJ/40ZzyTs0nxtNFbNe+KdpyIJhPBF6pYv4fXyNG8//RC/C/Z7Yrug7NXjXGeLmfEyo3b09R3jH5c3o9bb2Or9295Yvd/fuPy73Oub/Vz/1smbDWU/C5n6n7MQnLMyWF/ZgzQZP2YyXk5HvZeor6Pfu5jN4wv61+v33nLW+7beENp+f2++raC2lxv39lwtr8gn5/GeQLzePLF9rNF/7SSvyDJV+Y7fmzlywfST/4NFv5yEdyyqebj/RMulHfrzEvu3yk68C2CwB4+Yj5f/39szT//7e4QXodUZT/H59Zj/Fy89ac65O89yk/lC4vy2zfm/5GxXSvm8889t5r5u2/56jcvOXWVvPQ/zFhra8wD51Z3pybR6zuzOfFc/OIep41szwxt/31PHFmeXpu/HqePrM8Ord/6nn0zOYBcuPX5wEOovfF5o7f13qeWzBfl6ksrrY6X/eKzaPTX5+drTz67Jzy6ebRvZNu1PdrjDwaAOClFfP/eBkX8/+HMtvN9H323LygQ9ft2b8HUo//2IHKK2c775vtvHW28/rZnpc4iPLitt7/ne15odmdJ3vV58VppfJiAAAOZjH/j2/l5ef/M8tPmuVvXRPyE/l50/iv1Py8r7X4B09+/nKf/5L/e1+8mPwfAOCVLeb/8dce49//+1/pevbv1svTc+K/UvP0FuPL0zuVp3d+ni34HMBLOw/Q8HsS5gEAAHgpdI1lSpN/z/7j6TL7e/Z5v5d/bs72raqkl8cXbN86PHzeJVvWDW0fPm/zxeuGt5136dYN27cPb65tN9O8MTdvSfPGrlBJ+6P5dtm8bWH69xAW5vw9hOz2MeyRYzcm/z2EbLVzC/6OwPjxa629ecevNMX2zcZH3vHOi/+xnO2j+vG/8JMnnrd+23kbNm/YvmFo44YdwxO3G81ae6bxvZmxW6b1famZH5OUpv/9nZ1pR2lSO7rS/sj7fvYk045FaUsW5X3/QU67f/F/vvyZY0f+eUcIg4eVXzf9/mtID5NVI//znOEPbd/7my2j5aUp21/fMm1X0feVZreP+1PZePG27Sesv/iSzdlvlGxPnM8o1ddnaT4jffqXW5yfWJtTPt3PKZQn3Tg4tTw/AQDABPH9/3g9G98//FJ6ARXLW8/TZ/b+cW6ePthanp79XrKiPD27fdzfVvP06gzz9Gz9RXl6s+2b5el5eXde/I/kbD9drY+TmX3OI3ecnN/aOMl+n0HROMluP91xksxwnGTrLxonzbZvNk7yjnte/A/nbJ+n9fEws8/l5I6Hm1sbD2/MrBeNh+z20x0PpRmOh2z9ReOh2fbNxkPe8c2Lf1bO9q2aOD5GB8bYuBg+79KLt366YbvZ/v6Lmbdvdr//o12tt392P/c1++2f3c+VzX77Z/a5stz2PzazmbDW2z+73+/SrgM2XzunOjYxXfT5s6J53DU55dOdx50z6cbByTwuvHRi/h/f7on5/w3pstNvA738vyfN9x43jd+h7zEruo45cK/ntXWv59Pj9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNd2VJWPLvddu23/WEe/7xeeHX7jqgz/ZdPUbrvjenwYufM/P7+z57ot71h29/rfvPeTCez91+u5bvvnA8/Pv/tdThYH7xn5Wjk9XqyEkzyQhVH+676tf2PPI4aNlSQihnPTtDGFRsviBRUkmwuA/Qgjr6u2ceOddL5y0fnR59Q3dE8oXZoJk9yv0lmN7GtsZwmWFe8TLUDUdZzv2X3pC+N2711zzq6U//EHXrqd3jm+SVBvGUwgLzm98fFcIYW76f1QcbUvig9Pl6hBCT8PjTito1zEttn9FzvqR6XJOuuwtiBPvX5ZZL2W2y65HXZllT0F9M5XXjna3KzIvs549GeXInm5y5bUzli9Klz9Ol8e3GjhVjv+TUEpCpd78jcn4GAkNxy0JydixrNbXS/VjG9L9H18fu5Vk7i9l1stdmf0aqzcdaOUkmVget8uUx9NxJS0/uvFc3cTZOeWvTZfV9In6YlwP2Rs1vZNu1PdrTGzXvinaciCUGs5BzcrrBz49GL1pWW+yeNJjRpqI9+1Zc+Py8toH9/bltCO5M0njJ23F3/HLRfM+8f3rL1mSF//8Uhq/1Fb835/x6LPnXv+db+TGvznGL7cV/8T7ep4546Frl+X2z77YP5W24g899fBNSw+9YFdu+2+N8attxV+1+9Hu+fvvuz+3/YOxf+a2Ff/Jt7//j3c8fs/TufFDjN/TVvy1u7d8sbt//3G58e+P/dPb3vh5btepT/T3/3kgL/5jMf78tuLfvvOWt9228IbTc4/v6tg/fW3FP/PYe6+Zt/+eo/LOncmtDa9InXoRBXgVOSS9xrouXW83z5yphnzh6wOV2jXfvPT//E5WlDFaz4JZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCvTr688+ePnvOvDaypJCEnONiNNxPvKc1atGmij3qGnHr5p6aEX7GosW9JGHAAAAKBYzMNL9ZJqWBIuTeaGI5tuH+cIjoxrycTy7BxCjJOdI2g3TqlDccodilPpUJyuDsWZ06E43R2KUy2IUw2txZk7RZzK6KhosT09U7an9Ti9HYozr0Nx5ncozoIOxVnYoTh9U8ZpfRwu6lCcxR2Kc0iH4hzaapy/j0wZ57AOtec1HYpzeIfiZOeUpzsO56dbHpEXZ+xGuTBOJSnX72g2n354Ws9RM6ynt6Ce+UWvxy3WM7fFeo7JPK40zXqqLdbz+hnWk7RYzxtnWE+poJ44bi/Lti/WE9daHP+XdyjOjg7FuaJDca7sUJzPdijO5zoU56oZxkmDARSK+f94vtcXuivvCD3pGSc7CxDz3aVjPye/3jU/IYV6vNdlyucUxcsm6pl4S6fbvuwEQibeskx514R4lXo+MkW8amO85Zk7C/c3O6GQad/xmfLuonjZiQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmEW/vvLkj5/zrg+vCUkY/dfUSBPxvvKcVasG2qh3z5obl5fXPri3say70kYgAAAAoFDMw7vqJdXQXVkZupM5E7arpvMA1XS93Fdb9i8Iq0eXyUBpbL0nWTTl4yrp41Zs37RlxbbLd7x5w6ahi4YvGt781pUnrzx18JRTT1mxfsPG4cHRn3NDCN0F8UIIY9MP2y7f8emhjRuHt26rFWbbvyR93JJ0PUkf1/+WMDi6vDpt/+KC+kqT6pu9G8VHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pNd+w1166zjAP6cJDfJ7tb1yv5lZb0N/TOqDm3rnXQ6lgOCg60tvQwkmV5HcS0Ob9eytaPOuBXcZosibBRKpS+s1OHm8M3+uCHuD4XKrBa8tcg2dC/0hbLppBt9IR2R3puTm+QmTQxdu3Wfz4tzTp7ze57feUIpfM8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAuTVVHZsol8Yrw1EIUZeaWgfJvXQ2josD9P3aC1t/lBs9ubx5LJcZYCEAAACgpySHDzVG8iGXSYd0uHr60+LQdCPM5n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjZ6o6NlEujVcujkKIutTUOkjupbNxXByg75vvPvX510ZH/9E8VhhgHQAAAKC3JIenGiP5UAhLwlB0dUtd8m5gQdv89rpknYV91rW/O+hWtySEoX7qru1zvU/2qFtXP+8IAAAA8NGX5P9MY2Qk5DLzuub/Xrk+qVvUVpeun/v6rUC3HyIAAAAAA0nyf64xUgi5TKGR1/vN+4vb6pL5S/qcv6zL/F5/z19bP/s7PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dExVxybKpfFKOgoh6lJT6yC5l87GcXGAvqteHP7XrYceXtw8lssMsBAAAADQU5LDZ6N3PuQyw2EoXDyd+0dv3v/MV555biyEMBPzs9mwY8O2bfesmjkOhWi6buWRQ0M/PPz2d+fUrZw5nrcNAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ81UdWyiXBqvXBSFEHWpqXWQ3Etn47g4QN83vvjlvz1x/Pm3mscKA6wDAAAA9Jbk8Nnsnw+FkA3ZcOX0p+asf1qqbX63dwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhePeb9//rQ2TkxvvOWcXlyYXtfkzj3BOu7twcfYudp7+53v+H+MDuTjf/zMBAABn26IQhdr/6ar15/upAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAD4Op6thEuTReyUchRF1qah0k99LZOC4O0Dd+4Whu3skXX24eKwywDgAAANBbksNns38+FMJQGApXTH/q9E5gOv+PnMOHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5UpqpjE+XSeGVeFELUpabWQXIvnY3j4gB9H9+57wsH5//gluaxXGaAhQAAAICekhyebYzkQy7zqZAL19Q/T7ZOiNL1c+f3ArPztrZMG+57XrVlXrrvebvadpap72ZmXj5Zb2Tm3JhXnDuv2DSvEBrtiy3zwp6WWfN6PGcAAACA8yjJ/7nGyEjIZXJNOffnLfUjci4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0MVUdWyiXBqvRFEIUZeaWgfJvXQ2josD9L3/95+45Ou/2L29eawwwDoAAABAb0kOn83++VAIC8OlYeF07g8jrfVJ3b/Lpw4+9p+/Lw9hxZXHRjPty/4kufjtGze91H4IIdVanQphfr1f1KXf7/742H1La6eeCGHFFelr5vQLZ+7XumRce7a8ce22w8e29vhyAAAA4AKR5P+hxshIyGXu7pr/k+TdI/83TAfw+fft/NXl9WM9kbfNSI3U+6W69PvS0qf+umz1P98+nf/P1O+z+zYfvLyl4cxImyiulTZvX3fs+gOpZNcz/dNt/ZPv5avfeeu/m3Y8emqmfz7k6+MLMp36zz22uSiuTab2Vta8v7fa2j/TZf8P/+Hl479ZsPu90/3fXTTc6H/tGfZ/5v7Dtz2y54Z9h9a19g8hFDv1f+e9W8JVf77rofb9D7ct3PzNNx/bRHHtyOITB1bvL9zY2j9q6598/788/vienz36/eeS/slvRZYv6bd/qq3/q7su2/nKg+sXtPZPddn/S7e/Nrql+L0/te//zpZVM12fYu7+n7zu6Tte3xA/0H4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwjJVHZsol8YrqSiEqEtNrYPkXjobx8UB+r5569F3bt/90x83jxUGWAcAAADoLcnhs9k/HwohG7JheDr3P1veuHbb4WNbw8jM3ah+zkxuuXfbpzdt2X73nX12Sn8ATw8AAAD0I8n/mcbISMhlloahev4vbd6+7tj1B1JJ/k8l+X/TXZMbV4RG3au7Ltv5yoPrFzTeE4Qw/bOA/Om6z83W3XzT0ZETf/nmso51q2brjiw+cWD1/sKNSV1orlsZGu8nnrzu6Tte3xA/0Hi+5rrPfGPLZP31RLLu8G2P7Llh36F1jX3Uz8P1dZO6ydTeypr391aTunT9nK/vGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYa6o6NlEujVdCOoSoS02tg+ReOhvHxQH6rln664cuOfn8wuaxXGaAhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdivvxCpqjgO4OfMzLbjzq7uatBWtK5WFPaQFETUS0VFaITQkyFhaT5EQRBR2ENraCRW9BJkvUhUUG0hFOQmiRZr9E966aGCAushEGmhXKSHip05d529O7epuxaUnw8MZ8+Ze7/3d+85c2YHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/pbc23GwP73hw+rbzbvrk8XtOPHbLe/dvu+TR138Y3XTDx3v7Xjk5uXnFlq9vXLZp/71rJna/eOiXgXd+O9o1+JFWsyp16yHE4zGE+vtTzz0x+ek5M2MxhFCNg2MhDMWlh4ZiLmH1ryGEzbN1zn3z7RNXbplpt+3qnTO+JBeSv6/QqGb1tAzOrZf/l3paZ1unH74sfHv9+u2fL3/rzZ7xY2OnDon1tvUUwuKN7ef3hBAWpdeMbLUNZyendl0Ioa/tvKu71HXhX6z/8oL++ak9K7WNLjnZ+ytz/UruuHw/05Nr+7pcb6GK6ih7XDf9uX5+M1qoojqz8aHUvpvaVX8zv5q9YqjEUJst/754ao2EtnmLITbnsrkP1ubnxba5Tv2Y61dy/WpP7r6a100LrRrj3PHsuNx4th3X0viK9r26g9sLxs9NbT19UE9m/ZD/o6Ux74/Z+2rK6pr6k1r+DZW2PajT+OzEp8lopLFGXDrvnN87yN6bXP/UxdUNHxweLKgj7o0pP5bK3/rZUP+db+x8aLgof2Ml5VdK5X+39shPd+x86YXC/Gez/Gqp/CsO9B1f++GOlYXPZyp7PrVS+Xcd/ejp5WffPd5prpv5e7L8eqn86yaO9A5MHzhYWP/q7PksKpX/zbU3f//al/uOFeaHLL+vVP6GiQee6R2ZvrQw/2Dro9BortAS6+fn8au+Ghn5cbQo/4vs+Q90yI9d818d233Ny0t2rSlcn+uy5zNYqv5bL9q/vX963wVFe2fcc7q+OQHOTMvS/1hPpn7Z35kL1fZ74fnRWusbqD+9Bk7nhXJmrrP4H8wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqQAAAP//qlwh3Q==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m17.504264541s ago: executing program 3 (id=1831): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/3, 0x3, 0x0, 0x4, 0x0, 0x4, 0xc08}}, 0x120) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000140)=""/12, 0xc}], 0x2) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 1m16.823170466s ago: executing program 7 (id=1832): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1m16.499330578s ago: executing program 3 (id=1833): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000001680)={[{@grpid}, {@usrjquota_path}]}, 0x4, 0x500, &(0x7f0000001180)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x20004044) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m16.020398085s ago: executing program 3 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x730ebbf01f6353f6, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 1m15.093169786s ago: executing program 3 (id=1835): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m13.769268393s ago: executing program 3 (id=1838): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r0, r1, 0x3, 0x0) 1m13.052409354s ago: executing program 3 (id=1841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x200}) 1m12.52579953s ago: executing program 35 (id=1841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x200}) 1m11.578053247s ago: executing program 7 (id=1847): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "8e00"}, @global=@item_012={0x1, 0x1, 0x1, "f5"}, @global=@item_012={0x2, 0x1, 0x2, "05f3"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) 1m10.545329098s ago: executing program 36 (id=1847): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "8e00"}, @global=@item_012={0x1, 0x1, 0x1, "f5"}, @global=@item_012={0x2, 0x1, 0x2, "05f3"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) 1m0.772758331s ago: executing program 5 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 38.599721699s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 21.678789908s ago: executing program 5 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 8.77124602s ago: executing program 4 (id=2024): io_uring_setup(0x3eae, 0x0) ioperm(0x9, 0x40, 0x8001) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) 8.037621921s ago: executing program 4 (id=2027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x200, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x4040010, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0xf00}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)="7d9c", 0xffbc}], 0x1}}], 0x3, 0x40080) 7.352738845s ago: executing program 4 (id=2031): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="00301c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x0, 0x10, 0x28, "e84d1e75ef11c03105207b174ead1ee50c5bde33e8a6a80fa6290ed6099b215461035b0367072d1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x15, 0x6, "653c8303b37f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.500884693s ago: executing program 8 (id=2039): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}]}}) 5.261771536s ago: executing program 9 (id=2041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r2, 0x7, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x2, 0x7d}, @void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x28}}, 0x0) 4.869808977s ago: executing program 8 (id=2042): creat(&(0x7f0000000340)='./file0\x00', 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.80565095s ago: executing program 6 (id=2043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r1 = epoll_create1(0x80000) poll(&(0x7f0000000300)=[{r1, 0x1107}], 0x1, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x8}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.594539707s ago: executing program 9 (id=2044): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1, 0x0, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 4.563408308s ago: executing program 4 (id=2045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x78}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.344401722s ago: executing program 6 (id=2046): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) close(0x3) 4.124960771s ago: executing program 4 (id=2047): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0), 0x1, 0x5101, &(0x7f0000005140)="$eJzs3U+IVVUcB/Dz5s04k4LzEgJbZRFItXBwExHRUyaoKHrlYjACpxZBunASJFoIYov+LXwlRS0kV1KLZBZGUBsXUhiB29AwF24UA8lFO4159547753ru+/NpI3p5yMz9577u+fc8x538b7PufcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCG88Ptnh6rqp65Nnzk309x5YMvM5X3T606HUOtsr+X1HVuffeXNbTtenIgdZl/Olo1GvyGzruezxqqejQv9en9eDyGMJQPU8+Uza0qjdq/uKQ9Y6frF3Uc37W1uPH64Xb966ezJ8ktnwcRKT2Cl5OfVhcVzqdn5PZLsUbS7Tr1azyma9U9PuP/kRQAASzLV6iyKj6P5R9yivT+tJ+1m0m4n7fgJod3dWI5s3FX95rkhra/QPJtZVBjvO8+knr//RbuV9k/aSdRYwjx7d80jzUS/ec4l9ZWaJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDt5JG3Rx+qqp+6Nn3m3Exz54EtM5f3Ta87HUKjs72WlWur3z/c/OvbrccO/Lj5q+MXnn+s3tncLPqPdu0cfosrT0yG8EZX5UIc9uLaEFq9hU4zfFkuvNVZeS4WAAAAuJPc3/k9UrSzODjW06510mSt8y/KwuL1i7uPbtrb3Hj8cLt+9dLZk8sfr9VnvOYNxyvajcWfWlcwjvE3HW+xHnfdUxqnWjpimucfPz/1d1X/Uv5vVOf/+M7V86X8DwAAwHLI/+k41Qbl/+9e++OTqv6l/L+h55Cl/B9nHPP/SFhe/gcAAIDb2a3O/83SONUG5f/xl8a+rupfyv9Tw+X/0e5px42/xgnvmgxhatDUAQAAgD7i/7svfrUQ83r2zUGa15969OC5qvFK+b85XP4fu6mvCgAAAPg3jnyx/eGqein/t4bL/+O3dNYAAADAUrzz4cQHVfVS/p8dLv+vzpf5lQ9Zp5/iXyEcmgxhYmFlLiv8HNpPFwUAAADgJok5/c9Pd/5QtV8p/89V3/8/3ukgXv/fc/+/0vX/XYXsrn9PujEAAAAAd6Py9fzx9vjZkwtu/Pz94a//f+Ceg69WHb+U//cPl//r3cub+fw/AAAAWIb/2/P/tpfGqTbo/v/3ffTuL1X9S/m/PVz+j8s13S/vRK2WvT/vTYawfmElv5vgN/Fwu5LC/FhXoaOV9NgWe+SF+fGuQsdc0mPzZAgPLqzsTwr3xkI7KVxZmxeOJIXTsZCfD0XhWFI4Ec+0z9fm000L38dCfoHFfLyCYk1xSUTS42q/HguFG/Y4WxwcAADgrhLDc55lx3qbIY2y87VBO6wetMPIoB3qg3YYTXZId+y3Pcz2FuL29pmNS3v+/5Hh8n98K1Zli37X/4d4/X/+XMPi+v/ZWGgkhflYaKV3DGjFY2Rh9+N4jEYr73FlfVEAAACAO1r8XqC+wvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h717j5Grug8HfvY53ofXC8lPIfyiZJPUOG7i9domJGqpsqZUjUhp1g0FVRHFxl6TxQt2bFNiFCJjE9EIQWmDlPxRhFEU1fwBtQIRSQHhIsURKo+IqiiAQKE1REGklCQiTZBCNXvvmb1z7s7DjzVe+Hwk75yZ73neeXjOvXfOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J3h4Fev/ttm8Ud+d+4zz180fvmetRe9cu25pz4RwsTM4x1ZuKP/htvGf3HXOXfvuX/17fcePu+jvXm5PB4Gqn868zvXx1oPLw7hvo4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HH7QF8K+MBuoVfX9vhAGC4ELnnz4oZuqiVv7QlgaQqikbTxXydroSwNn9GaB/jSwtTsL/PrNTC3wvc4sAMcsvhlqL/oDE/UZhucu1+D113PcOvbWSofXFRPDjfP9fO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvMtnrbiF6n8G8qbs6FK6Nw0uXnDVdM74yOdYXS0q1FN8/Q8P/3alzceSXrBvA5jB4aPy+vw5seX3tW1/PzH7l2x9KX9H9v78rF288eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM1f+L3PNouX5v/Dzef/8eUcbzvrcsda3xjK5ubxkcGYeHUom5sDAADAgrEQ9ppuHX3wk83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4E7Y3OXLgnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+H8sB4EjgUAxNJ4NsxcEsSuD4GDiSBjTFwMAmcEwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvh2JrybZ6tlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt/3qbz4XmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/feFbzeKl+f94e+f/x30iXYXM4dG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz6wvll/S/P/ifbO/++vv806cSj24utLQlhUCPww9rIamDESAz/5VH0gH/+huAFujFXlJybUqroxllgfA2NJYF+jEj+qlTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+u/rqZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwaH+2MGAMDHbkiQf7s7q60qqu6w/h7OrA0qpeyNf/707XGHyyL6sqBk770P7XzqgmvtUXwspi4KnP3/HxamJnEqg1/pd9IXygOtq08e8uyhrvSRv/xqIQ3l8I1Kq6dFEI1cZ606oeruTXMUir+udKCO8qBGpVnVUJYVcAYIGK/5VuKj64Y9c1WzZMT09un8dE3IffFzZPTU+Obtw6vanSoE+bkj7XLWN0XXlM7V755tl8iaIL71k32E669jvBsWJb+X780omD+f34XahnZpyre+rurkmH/JEPl5sIhW9SjYbcOc9D7i9WMvskluqP+XvDQFh01Y7J7aNf2rBz5/ZV2d92s6/O/sbDTNm2WpVuq/65+tbGy6PhalmJo91Wy4qVrNx5xbaVO3Zds2Lqig2XTV42eeWqs1aPnTm2ZuwTZ66sjmos+9tiqMvmqjoZ6pt3tDmu4zjU07sLlZyITw0JCYmFltg6sKzp/8ml+f+25vP/+KkTP/nz9RkaHf8fjof5s8dnD/Ovj4F97R7/H250NL92YsBIEtgdA7sd5gcAAODtIU7y497MuFf6Z8u/+1KzcqX5/+72fv9/nNb/ry1df16jZf6XxxJjjdb/T5f5r63/v7vR+v/pMv+19f/3vQXr/19VCySb5JfW/wcAAN4OTtz6/y2X908vEFDK0HJ5//QCAaUMLZfxb/cCAUe8/v9z//lX/x2aKM3/b2lv/m/hfgAAADh5fOXPrv5/zeKl+f++9ub/J379v9Do/P+RRoGJRgsDWv8PAACABarR+n/DN/Rf0qxcaf5/oL35fzztorMud6z1jaFsTbuQrmn36lDtJwMAAACwMHSG0dGeNvPWrYy69ujbfDpfCrRZuuiFPzl8ZOf/H2xv/l/3u4ybH196V9fy8x97494VS1/a/7G9L88e/wcAAADmT7v7JQAAAAAAAAAAAAAAgLfeC/+xZ02zeOn3/2HdzOONfv8fr/sXf1/w7rrcsdbW6//l9y/4zN27ZpYsfHQohA8XA1v2bDkl5NfmX1YMPHTx8vdUE3vSEg88f86L1cQlaeDTK059vZo4Owmsj4skvjcNxKsqvr44CcTlFf89DcTtcSAN9OaBry3OxtGRbqufDWbbqiPdVs8MhrCkEKhtq/sGszY60gHemgRqA/xiGogD/PM80Jn26u6BrFcxMBiL3j6Q9QoAgJNW/BbYEzZPTU+Oxa/w8fb07vrbqG7JsuvK1Xa02fyz+dJkF96zbrCddFf6XXT2WuM9oVIdwqrS19Vilo6ZUR6fWlpsunc3GHKr1d46G5RLHemm6208or5sRKMbt05v6mk58DWts6zubpllVWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rjy899fN6ivN/4fbm/9XiuN6Pb8YwO54Zb2/W2KZfwAAAJhfX1v7m2/Gf5+74ZGnmuUtzf9H2pv/xz1Y+aHgbG/HwXj9/71LQpi5tP5wFrgzNnfpkhA+OJOaiCWyC+qfF0uMZYE74w6T5bHE+on6qhbFwIEk8NOhPHAwCRyKgXwvxf6Q78r5+6EQPj6TWldfYlssMZwEPhsDI0lgNAbGksDiGBhPAq8szgMTSeDfYiBM1W+rexbn2woAAOBI5POsnvq7IZ3nHehulaGjVYb+Vhk6W2WotMrQaBTx/ndihp7k5JWOQqaetNa+pJZShngx/CPuVylD+FF9zrRgeprAgXj+Qe18g476mu//ZHclNFGa/4+1N//vr7/NWj8U5/+z1//LAj+M3ft6PHV8JAZ+8qn6QL5j4FCc7N5Yq2oiL5FP2m+MJcZjYCQJbIuB8SSwfl0e2Pee+kA+0641vrfW+FReohAAAACAEy7uIIi7aeL8//YdXx1oVq40/x9vb/4f2xsoNnZ9rPXw4hDu65jtTS2wYjALxP0Yg/Hn8e8bDOGUwg6OWonJ/qxEb9Jw+EFf9gv13rSq7/dlPz6I9y948uGHbqombu0LYWlh70utjecqWRt9aeCM3izQnwa2dmeBuOenFvheZxaAY1bb2xdfUPmpLjXDc5dr8Pp7u1wTNB1eaR/oHPnm+s3VfCntcM33qdYc2dPWdP8tx03p7XHQu20hvtuG34nvtr70gdoXqfwbypuzoUro3DS5ecNV0zvjI8VfspbM0/Nc/JVqO+nj8DrcffS9ba2SdmAs+fgYm7vc3K/DjljdzY8vvatr+fmP3bti6Uv7P7b35ba70UD8ofDD1/7r4I8Lm3e+VUL+mltwnycT78TPk5IF97SNeNpCCOte+caNzeKl+f9Ee/P/7uR2xm/ixtyxJISPFDbuo3Hz//GS7HOwEMg+Jd9VDmSH3P9rqOEnJwAAABxvtd0dtf0FU/ltdkJ4Ok8u5584wvxxf8X4nPnb7Xf/X1+8tFm8NP9f33z+vyjppuP/jv8zTxz/n9PJvit6UfrA7mPaFV2qjnnh+P+cTvZ3m+P/c3L83/H/uTj+34Lj/3M62Z+20rekbb50hRBe+qMHn2kWL83/t7U3/7f+39yL9tXW/1vfaP2/bY3W/9tt/T8AAGBeNVhoLp3nlVbvK2VIV+8rZWi5QGDLJQat/1dqutX6fy+e/txvQxOl+f/u9ub/8eUwUGx9oaz/N7KuQVW3xMA2CwMCAABwMmq0gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC31v3/8D+bmsUf+d25zzx/0fjle9Ze9Mq15576RAhTM493ZOGO/htuG//FXefcvef+1bffe/i8j1bycj357f+vyx1rfWMohH2FRwZj4tWh6p3ZwAWfuXtXdzXx6FAIHy4GtuzZcko18e2hEJYVAw9dvPw91cSetMQDz5/zYjVxSRr49IpTX68mzs4DHWl3/3Fx1t2OtLs3LQ5hSSFQ6+7li+urqrXxp3mgM23jnwazNmJgMBb95mDWRgxMxxJTi0JY2R1CV1rVI5Wsqq60qn+pZFV1pVV9pRLC2SGE7rSq53uzqrrTkT/Rm1UVA6d9aP9rZ1QT+3pDWFkMPPX5Oz5eTXwxCdQa/4veED5QfcmkjX+nJ2u8J2381p4Q3h9C6E1L/Ko7K9GblnihO4R3FQK1xr/QHcKuwNtC/PCp+0TbseuaLRumpye3z2OiN2+rL2yemp4c3bh1elMl6VMjHYX0m9cd/diffe3LG6u3F96zbrCddHdermemy6t76u6uOdl7H/vVX6xk9vko1R/z94aBsOiqHZPbR7+0YefO7auyv+1mX5397cqj2bZatVC21bJiJSt3XrFt5Y5d16yYumLDZZOXTV656qzVY2eOrRn7xJkrq6May/4ej6HeceKHenp3oZIT8QEgISGx0BKddZ9uYyf7B3npi/5sR3tCZeYDujStKGbpmBnl8Rj02qMc8dF8T2k5olWliUMpy+o5slxXn2VNaTIxW0tflmXme11pclhsrHNmk8b7nWF0tKvRdhiuv1vcvD8/hs37dL7p2k0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqMng0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//O24jzg==") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 3.9536381s ago: executing program 6 (id=2048): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TCXONC(r0, 0x4b3a, 0x2) 3.693489749s ago: executing program 8 (id=2049): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.334114367s ago: executing program 8 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.180220455s ago: executing program 6 (id=2051): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(r0, &(0x7f0000000100)='mnt\x00', 0x10a) r1 = openat(r0, &(0x7f0000000680)='mnt\x00', 0x800, 0x100) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x4, '\x00', @b}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) 2.79377694s ago: executing program 9 (id=2052): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.497270542s ago: executing program 8 (id=2053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x80, 0x8, 0x40}, 0x10) 2.424987308s ago: executing program 6 (id=2054): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x374, 0x3, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620ac8c9d2d26d91db26fe7750bec8d8d3ddb2555bcf9ad6c0823fd10dcafac746936bec42c3f0b46caa357d70ee438f901d7645c3f87e4b01482b76f2ad8eaac090272081f98fd2e3e5a63e006204df005e731a5bfcf142f4529517455b18de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb34100daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.217319452s ago: executing program 9 (id=2055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x9}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) 1.726873684s ago: executing program 9 (id=2056): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x88000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.490382665s ago: executing program 0 (id=1247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x60bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 9.465791ms ago: executing program 8 (id=2057): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 6.373973ms ago: executing program 4 (id=2058): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 1.229631ms ago: executing program 9 (id=2059): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 0s ago: executing program 6 (id=2060): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001"], 0x0}) kernel console output (not intermixed with test programs): oop6): write_blk: dquota write failed [ 418.490740][T11279] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 418.538076][T11279] EXT4-fs error (device loop6): ext4_acquire_dquot:6931: comm syz.6.1680: Failed to acquire dquot type 1 [ 418.599999][T11279] EXT4-fs (loop6): 1 truncate cleaned up [ 418.644353][T11279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.810153][T11279] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 418.899100][T11279] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 418.950663][T11285] Quota error (device loop6): do_check_range: Getting block 1536 out of range 0-5 [ 419.130158][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.988435][T11302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.339761][T11298] loop6: detected capacity change from 0 to 32768 [ 420.372213][T11298] XFS: ikeep mount option is deprecated. [ 420.486131][T11298] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 420.582955][T11298] XFS (loop6): Ending clean mount [ 420.611254][T11298] XFS (loop6): Quotacheck needed: Please wait. [ 420.700953][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 420.746173][T11298] XFS (loop6): Quotacheck: Done. [ 420.857979][T11304] loop7: detected capacity change from 0 to 32768 [ 420.871690][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 420.895613][T11304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1688 (11304) [ 420.960280][T11304] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 420.995061][T11304] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 421.022554][T11304] BTRFS info (device loop7): using free-space-tree [ 421.072177][ T6859] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 421.233661][T11304] BTRFS info (device loop7): rebuilding free space tree [ 421.551878][T11332] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 421.778466][T10031] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.009979][ T5896] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 422.180818][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 422.204888][ T5896] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 422.224843][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.260962][ T5896] usb 7-1: config 0 descriptor?? [ 422.284433][T11334] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 422.746096][ T5896] elan 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 422.907172][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.915427][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.945641][T11151] bridge_slave_0: entered allmulticast mode [ 422.967729][ T10] usb 7-1: USB disconnect, device number 9 [ 422.967880][T11151] bridge_slave_0: entered promiscuous mode [ 423.045520][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.060038][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.097697][T11151] bridge_slave_1: entered allmulticast mode [ 423.106234][T11151] bridge_slave_1: entered promiscuous mode [ 423.328824][T11151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.380670][T10907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.406683][T11151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.809705][T11151] team0: Port device team_slave_0 added [ 423.880667][T11151] team0: Port device team_slave_1 added [ 423.930923][T11360] loop7: detected capacity change from 0 to 512 [ 423.981400][T11360] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.010355][T11360] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.1698: bg 0: block 248: padding at end of block bitmap is not set [ 424.041605][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 424.054657][T11360] Quota error (device loop7): write_blk: dquota write failed [ 424.102683][T11360] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 424.145060][T11151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.149353][T11360] EXT4-fs error (device loop7): ext4_acquire_dquot:6931: comm syz.7.1698: Failed to acquire dquot type 1 [ 424.186648][T11364] loop1: detected capacity change from 0 to 256 [ 424.191139][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.225176][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.236628][T11151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.273275][T11360] EXT4-fs (loop7): 1 truncate cleaned up [ 424.288617][T11151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.306213][T11360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.331381][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.333834][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.405650][T11364] FAT-fs (loop1): Directory bread(block 64) failed [ 424.415551][T11364] FAT-fs (loop1): Directory bread(block 65) failed [ 424.431597][T11151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.444195][T11364] FAT-fs (loop1): Directory bread(block 66) failed [ 424.455973][T11364] FAT-fs (loop1): Directory bread(block 67) failed [ 424.490597][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.493767][T11364] FAT-fs (loop1): Directory bread(block 68) failed [ 424.547782][T11360] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 424.558366][T11364] FAT-fs (loop1): Directory bread(block 69) failed [ 424.581660][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.605977][T11364] FAT-fs (loop1): Directory bread(block 70) failed [ 424.619227][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.657933][T11364] FAT-fs (loop1): Directory bread(block 71) failed [ 424.665769][T11360] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 424.678129][T11364] FAT-fs (loop1): Directory bread(block 72) failed [ 424.704048][ T43] usb 7-1: config 0 descriptor?? [ 424.718313][T11367] Quota error (device loop7): do_check_range: Getting block 1536 out of range 0-5 [ 424.725345][T11369] loop3: detected capacity change from 0 to 2048 [ 424.740965][T11364] FAT-fs (loop1): Directory bread(block 73) failed [ 424.825263][T11369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.921726][T11151] hsr_slave_0: entered promiscuous mode [ 424.962055][T11151] hsr_slave_1: entered promiscuous mode [ 424.968521][T11151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.011498][T11151] Cannot create hsr debugfs directory [ 425.053045][T10031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.151867][ T43] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 425.238282][ T5837] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 425.256974][ T5837] FAT-fs (loop1): Filesystem has been set read-only [ 425.261978][ T43] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 425.594620][ T10] usb 7-1: USB disconnect, device number 10 [ 425.615217][T11372] fido_id[11372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 425.640270][T10907] veth0_vlan: entered promiscuous mode [ 425.912898][T10907] veth1_vlan: entered promiscuous mode [ 425.992369][ T5896] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 426.044125][T11382] loop7: detected capacity change from 0 to 64 [ 426.181499][ T5896] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 426.190643][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.221427][ T5896] usb 4-1: Product: syz [ 426.225666][ T5896] usb 4-1: Manufacturer: syz [ 426.259926][ T5896] usb 4-1: SerialNumber: syz [ 426.293081][ T5896] usb 4-1: config 0 descriptor?? [ 426.314029][ T5896] ch341 4-1:0.0: ch341-uart converter detected [ 426.327059][ T5913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.524040][ T5913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.635961][T10907] veth0_macvtap: entered promiscuous mode [ 426.729636][ T5913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.789959][T10907] veth1_macvtap: entered promiscuous mode [ 427.029425][ T5913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.120014][T10907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.193319][T10907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.308046][T10907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.317023][ T5895] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 427.328489][ T5896] ch341-uart ttyUSB0: failed to read break control: -71 [ 427.347579][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 427.352030][T10907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.362732][ T5896] usb 4-1: USB disconnect, device number 24 [ 427.375425][T10907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.388212][T10907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.410978][ T5896] ch341 4-1:0.0: device disconnected [ 427.418603][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.433297][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.448700][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.461977][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.469980][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.522528][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 427.559838][T11151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.575414][ T5895] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 427.591631][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.621861][ T5895] usb 8-1: config 0 descriptor?? [ 427.642179][T11390] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 427.690647][T11151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.721012][T11151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.778408][T11151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.868857][ T5913] bridge_slave_1: left allmulticast mode [ 427.889579][ T5913] bridge_slave_1: left promiscuous mode [ 427.896357][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.934248][ T5913] bridge_slave_0: left allmulticast mode [ 427.940299][ T5913] bridge_slave_0: left promiscuous mode [ 427.949541][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.090443][ T5895] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 428.316574][T11398] input: syz0 as /devices/virtual/input/input28 [ 428.348398][ T5898] usb 8-1: USB disconnect, device number 3 [ 428.563263][ T5895] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 428.618530][ T5897] kernel write not supported for file /uhid (pid: 5897 comm: kworker/0:5) [ 428.726562][T11403] loop3: detected capacity change from 0 to 512 [ 428.760389][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.773697][ T5895] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.784781][ T5895] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.795151][T11403] EXT4-fs (loop3): orphan cleanup on readonly fs [ 428.805194][ T5895] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 428.818637][ T5895] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.829125][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.829493][T11403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.1716: bg 0: block 248: padding at end of block bitmap is not set [ 428.837314][ T5895] usb 7-1: Product: syz [ 428.837355][ T5895] usb 7-1: Manufacturer: syz [ 428.837392][ T5895] usb 7-1: SerialNumber: syz [ 428.934660][T11403] Quota error (device loop3): write_blk: dquota write failed [ 428.965850][T11403] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 429.000626][T11403] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.1716: Failed to acquire dquot type 1 [ 429.045497][T11403] EXT4-fs (loop3): 1 truncate cleaned up [ 429.053822][T11403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.118109][T11403] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 429.123936][T11399] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.174364][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.191051][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.192388][T11403] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 429.212147][T11407] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 429.229225][ T5913] bond0 (unregistering): Released all slaves [ 429.368205][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.522556][ T5843] Bluetooth: hci5: command tx timeout [ 429.614393][ T5913] tipc: Disabling bearer [ 429.632682][ T5913] tipc: Left network mode [ 429.781716][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.789610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.811601][T11399] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.877705][T11411] loop7: detected capacity change from 0 to 32768 [ 429.910357][T11411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1718 (11411) [ 429.979182][T11411] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.992444][T11411] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 430.002459][T11411] BTRFS info (device loop7): using free-space-tree [ 430.025764][ T5895] cdc_ncm 7-1:1.0: bind() failure [ 430.054390][ T5895] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 430.077809][T11392] chnl_net:caif_netlink_parms(): no params data found [ 430.084728][ T5895] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 430.124490][ T5895] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 430.192034][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.200011][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.207993][ T5895] usb 7-1: USB disconnect, device number 11 [ 430.330562][ T5913] hsr_slave_0: left promiscuous mode [ 430.349543][ T5913] hsr_slave_1: left promiscuous mode [ 430.356766][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.381480][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.393042][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.400576][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.408333][T10031] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.516643][ T5913] veth1_macvtap: left promiscuous mode [ 430.540860][ T5913] veth0_macvtap: left promiscuous mode [ 430.563819][ T5913] veth1_vlan: left promiscuous mode [ 430.570473][ T5913] veth0_vlan: left promiscuous mode [ 430.920120][T11436] loop6: detected capacity change from 0 to 64 [ 431.602372][ T5843] Bluetooth: hci5: command tx timeout [ 431.611756][T11445] loop6: detected capacity change from 0 to 128 [ 431.696352][T11445] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.755981][T11445] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.771555][T11448] loop7: detected capacity change from 0 to 1024 [ 431.779761][T11448] EXT4-fs: Ignoring removed nobh option [ 431.811083][T11448] EXT4-fs: Ignoring removed bh option [ 431.893907][T11448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.158884][T10031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.248456][T11456] loop3: detected capacity change from 0 to 1024 [ 432.542735][ T6859] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.775823][T11463] loop6: detected capacity change from 0 to 512 [ 432.847735][T11463] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 432.979431][T11463] block device autoloading is deprecated and will be removed. [ 433.001920][T11463] syz.6.1733: attempt to access beyond end of device [ 433.001920][T11463] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 433.061597][T11463] EXT4-fs (loop6): couldn't read superblock of external journal [ 433.395692][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 433.611032][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 433.682582][ T5843] Bluetooth: hci5: command tx timeout [ 434.315583][T11479] Falling back ldisc for ttyprintk. [ 435.194287][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.211905][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.219157][T11392] bridge_slave_0: entered allmulticast mode [ 435.262235][T11392] bridge_slave_0: entered promiscuous mode [ 435.384647][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.404730][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.421728][T11392] bridge_slave_1: entered allmulticast mode [ 435.444651][T11392] bridge_slave_1: entered promiscuous mode [ 435.633019][ T5894] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 435.702086][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.735917][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.762052][ T5843] Bluetooth: hci5: command tx timeout [ 435.819069][T11151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.852162][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.880880][ T5913] IPVS: stop unused estimator thread 0... [ 435.897190][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.927821][ T5894] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.970022][T11392] team0: Port device team_slave_0 added [ 435.981614][ T5894] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.007462][T11392] team0: Port device team_slave_1 added [ 436.013459][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.037031][ T5894] usb 8-1: config 0 descriptor?? [ 436.244761][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.278137][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.346876][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.350435][T11503] loop6: detected capacity change from 0 to 32768 [ 436.386574][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.411269][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.449071][T11503] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 436.473476][ T5894] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 436.479231][T11503] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 436.513723][ T5894] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 436.546416][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.682239][T11503] XFS (loop6): Ending clean mount [ 436.756488][T11503] XFS (loop6): Quotacheck needed: Please wait. [ 436.770066][ T5913] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.863726][ T5982] usb 8-1: USB disconnect, device number 4 [ 436.896137][T11503] XFS (loop6): Quotacheck: Done. [ 436.933004][T11516] fido_id[11516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 436.970953][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.984695][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.989263][T11151] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.994041][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.008582][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.027419][T11507] loop3: detected capacity change from 0 to 32768 [ 437.087065][T11507] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 437.106933][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.190241][T11507] XFS (loop3): Ending clean mount [ 437.278174][ T5913] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.318877][ T5833] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 437.343229][ T6859] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 437.400347][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.407628][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.525699][T11392] hsr_slave_0: entered promiscuous mode [ 437.578478][T11392] hsr_slave_1: entered promiscuous mode [ 437.627268][T11392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.671404][T11392] Cannot create hsr debugfs directory [ 437.855001][ T5913] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.939256][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.946597][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.074063][ T5913] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.102526][T11531] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 438.556093][T11540] loop6: detected capacity change from 0 to 1764 [ 438.607205][T11541] netlink: 'syz.7.1755': attribute type 10 has an invalid length. [ 438.620403][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1755'. [ 438.724994][T11541] dummy0: entered promiscuous mode [ 438.737913][T11541] bridge0: port 3(dummy0) entered blocking state [ 438.746412][T11541] bridge0: port 3(dummy0) entered disabled state [ 438.754309][T11541] dummy0: entered allmulticast mode [ 438.764071][T11541] bridge0: port 3(dummy0) entered blocking state [ 438.771106][T11541] bridge0: port 3(dummy0) entered forwarding state [ 439.034816][ T5913] bridge_slave_1: left allmulticast mode [ 439.045386][ T5913] bridge_slave_1: left promiscuous mode [ 439.059701][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.076432][ T5913] bridge_slave_0: left allmulticast mode [ 439.083706][ T5913] bridge_slave_0: left promiscuous mode [ 439.089454][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.118726][T11550] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1758'. [ 439.202113][ T51] Bluetooth: hci1: command tx timeout [ 439.301717][ T5898] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 439.453758][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 439.462618][ T5898] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.473712][ T5898] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.513864][ T5898] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.525200][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.533346][ T5898] usb 7-1: Product: syz [ 439.537646][ T5898] usb 7-1: Manufacturer: syz [ 439.542568][ T5898] usb 7-1: SerialNumber: syz [ 439.748416][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.760234][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.783772][ T5898] usb 7-1: 0:2 : does not exist [ 439.785980][ T5913] bond0 (unregistering): Released all slaves [ 439.813048][ T5898] usb 7-1: USB disconnect, device number 12 [ 439.866432][ T5949] udevd[5949]: setting mode of /dev/bus/usb/007/012 to 020664 failed: No such file or directory [ 439.890482][ T5949] udevd[5949]: setting owner of /dev/bus/usb/007/012 to uid=0, gid=0 failed: No such file or directory [ 439.969525][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.019945][T11518] chnl_net:caif_netlink_parms(): no params data found [ 441.094515][T11575] loop6: detected capacity change from 0 to 512 [ 441.162941][T11575] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.1766: corrupted in-inode xattr: invalid ea_ino [ 441.196268][T11575] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1766: couldn't read orphan inode 15 (err -117) [ 441.220677][T11575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.282868][ T51] Bluetooth: hci1: command tx timeout [ 441.459935][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.514949][T11151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.532138][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1769'. [ 441.566261][ T5913] hsr_slave_0: left promiscuous mode [ 441.589355][ T5913] hsr_slave_1: left promiscuous mode [ 441.614319][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.622163][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.630456][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.638641][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.678025][ T5913] veth1_macvtap: left promiscuous mode [ 441.684161][ T5913] veth0_macvtap: left promiscuous mode [ 441.691138][ T5913] veth1_vlan: left promiscuous mode [ 441.697167][ T5913] veth0_vlan: left promiscuous mode [ 442.299867][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 442.347613][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 442.976239][T11392] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.077512][T11593] loop7: detected capacity change from 0 to 128 [ 443.085281][T11593] EXT4-fs: Ignoring removed nobh option [ 443.153511][T11593] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.187133][T11593] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 443.242516][T11392] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 443.372209][ T51] Bluetooth: hci1: command tx timeout [ 443.402696][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.412836][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.429065][T10031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.438561][T11518] bridge_slave_0: entered allmulticast mode [ 443.446343][T11518] bridge_slave_0: entered promiscuous mode [ 443.466960][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.481260][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.496162][T11518] bridge_slave_1: entered allmulticast mode [ 443.504918][T11518] bridge_slave_1: entered promiscuous mode [ 443.512403][T11392] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 443.594419][T11392] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 443.855466][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.894990][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.322090][T11518] team0: Port device team_slave_0 added [ 444.336813][T11151] veth0_vlan: entered promiscuous mode [ 444.380503][T11612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 444.380931][T11518] team0: Port device team_slave_1 added [ 444.476809][T11612] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 444.537806][T11612] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 444.583670][T11151] veth1_vlan: entered promiscuous mode [ 444.634842][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.662468][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.723572][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.768063][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.802759][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.884354][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.931832][ T5897] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 445.114783][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.153289][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.201334][ T5897] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 445.210444][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.233727][T11518] hsr_slave_0: entered promiscuous mode [ 445.240539][T11518] hsr_slave_1: entered promiscuous mode [ 445.292558][T11518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.310496][T11518] Cannot create hsr debugfs directory [ 445.312997][ T5897] usb 8-1: config 0 descriptor?? [ 445.437083][T11610] loop3: detected capacity change from 0 to 32768 [ 445.444911][ T51] Bluetooth: hci1: command tx timeout [ 445.783671][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.790888][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.850136][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.862318][T11151] veth0_macvtap: entered promiscuous mode [ 445.884966][T11151] veth1_macvtap: entered promiscuous mode [ 445.891022][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.922047][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.929265][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.983150][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 445.990742][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 446.053262][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 446.060397][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 446.099600][ T5897] hid-rmi 0003:0461:4E72.002B: unknown main item tag 0x0 [ 446.148488][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.161225][ T5897] hid-rmi 0003:0461:4E72.002B: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.7-1/input0 [ 446.266767][ T5897] usb 8-1: USB disconnect, device number 5 [ 446.374532][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.524687][T11627] fido_id[11627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 446.575250][T11631] loop3: detected capacity change from 0 to 128 [ 446.670006][T11151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.692826][T11631] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.751960][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.759142][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.784992][T11631] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.856747][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.864003][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.960038][T11151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.139285][T11151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.163612][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.201898][T11151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.232408][T11151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.241176][T11151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.929738][T11643] loop6: detected capacity change from 0 to 512 [ 447.934850][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.985254][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.018887][T11643] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 448.136306][T11643] EXT4-fs (loop6): 1 truncate cleaned up [ 448.164710][T11643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.446055][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.484130][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.518798][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.591498][ T5982] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 448.602951][T11518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.685360][T11518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.791508][ T5982] usb 8-1: Using ep0 maxpacket: 16 [ 448.792982][T11518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.829839][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.873317][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.875303][T11518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.913546][ T5982] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 448.922935][ T5982] usb 8-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 448.938786][ T5982] usb 8-1: Product: syz [ 448.948788][ T5982] usb 8-1: Manufacturer: syz [ 448.978423][ T5982] usb 8-1: config 0 descriptor?? [ 449.061477][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 449.119553][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.281058][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.316858][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.351439][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.391504][ T5897] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.404460][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.449636][ T5897] usb 7-1: config 0 descriptor?? [ 449.485821][ T5982] kovaplus 0003:1E7D:2D50.002C: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.7-1/input0 [ 449.649688][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.688838][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.695465][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.851448][ T5982] kovaplus 0003:1E7D:2D50.002C: couldn't init struct kovaplus_device [ 449.862193][ T5982] kovaplus 0003:1E7D:2D50.002C: couldn't install mouse [ 449.910022][ T5897] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 449.913782][ T5982] kovaplus 0003:1E7D:2D50.002C: probe with driver kovaplus failed with error -71 [ 449.983420][ T5982] usb 8-1: USB disconnect, device number 6 [ 450.039230][ T5897] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 450.164329][ T5896] usb 7-1: USB disconnect, device number 13 [ 450.170040][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.436312][T11664] fido_id[11664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 450.477811][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.615268][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.659143][T11659] loop3: detected capacity change from 0 to 32768 [ 450.741481][T11659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1797 (11659) [ 450.790347][T11659] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.842767][T11659] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 450.870567][T11667] fido_id[11667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 450.927282][T11659] BTRFS info (device loop3): using free-space-tree [ 450.939918][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.185282][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.226673][T11659] BTRFS info (device loop3): rebuilding free space tree [ 451.338737][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.346469][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.564381][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.571812][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.670155][T11659] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 451.864879][T11392] veth0_vlan: entered promiscuous mode [ 451.989275][ T5833] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.273169][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.301901][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.321818][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.332931][T11392] veth1_vlan: entered promiscuous mode [ 452.341654][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.349777][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.643285][ T49] bridge_slave_1: left allmulticast mode [ 452.649069][ T49] bridge_slave_1: left promiscuous mode [ 452.706411][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.771829][ T5898] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 452.852586][ T49] bridge_slave_0: left allmulticast mode [ 452.858311][ T49] bridge_slave_0: left promiscuous mode [ 452.892429][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.955260][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 452.967314][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 453.030182][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 453.078302][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 453.096685][ T5898] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 453.137129][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.168581][ T5898] usb 4-1: Product: syz [ 453.187912][ T5898] usb 4-1: Manufacturer: syz [ 453.192830][ T5898] usb 4-1: SerialNumber: syz [ 453.204855][ T5898] usb 4-1: config 0 descriptor?? [ 453.456051][ T5898] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 453.722156][ T5898] usb 4-1: USB disconnect, device number 25 [ 454.486836][ T51] Bluetooth: hci4: command tx timeout [ 454.600707][T11728] loop6: detected capacity change from 0 to 1024 [ 454.686958][T11728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.053582][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.131442][ T5896] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 455.148061][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.163954][T11734] loop6: detected capacity change from 0 to 128 [ 455.173128][ T49] bond0 (unregistering): Released all slaves [ 455.187067][T11734] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 455.245427][T11734] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 455.321952][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 455.371552][ T5896] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 455.379763][ T5896] usb 4-1: config 0 has no interface number 0 [ 455.435274][ T13] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 455.471753][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 455.481053][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.537386][ T5896] usb 4-1: Product: syz [ 455.547328][ T5896] usb 4-1: Manufacturer: syz [ 455.569795][ T5896] usb 4-1: SerialNumber: syz [ 455.586860][ T5896] usb 4-1: config 0 descriptor?? [ 455.599062][ T5896] smsc95xx v2.0.0 [ 455.830355][T11392] veth0_macvtap: entered promiscuous mode [ 455.889309][T11392] veth1_macvtap: entered promiscuous mode [ 456.442678][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 456.535959][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.562074][ T51] Bluetooth: hci4: command tx timeout [ 456.612882][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.674370][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 456.741822][ T5896] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 456.763264][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.808252][T11392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.845785][ T5896] usb 4-1: USB disconnect, device number 26 [ 456.856894][T11392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.901402][T11392] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.910185][T11392] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.026031][ T49] hsr_slave_0: left promiscuous mode [ 457.049916][ T49] hsr_slave_1: left promiscuous mode [ 457.070437][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.121554][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.163170][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.184127][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.222678][ T49] veth1_macvtap: left promiscuous mode [ 457.230636][ T49] veth0_macvtap: left promiscuous mode [ 457.239743][ T49] veth1_vlan: left promiscuous mode [ 457.248076][ T49] veth0_vlan: left promiscuous mode [ 457.699446][T11762] loop7: detected capacity change from 0 to 512 [ 457.730473][T11762] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 457.844198][T11762] EXT4-fs (loop7): 1 truncate cleaned up [ 457.851629][ T5895] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 457.912043][T11762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.001465][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 458.015524][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 458.028817][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.075397][ T5895] usb 4-1: config 0 descriptor?? [ 458.179073][T10031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.352543][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 458.644515][ T51] Bluetooth: hci4: command tx timeout [ 459.184771][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 459.204435][ T5895] asix 4-1:0.0: probe with driver asix failed with error -71 [ 459.253300][ T5895] usb 4-1: USB disconnect, device number 27 [ 459.520759][T11767] loop7: detected capacity change from 0 to 32768 [ 459.654836][T11767] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 459.822357][T11767] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 459.822357][T11767] allowing incompatible features above 0.0: (unknown version) [ 459.822357][T11767] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 459.907260][T11767] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 459.927499][ T43] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0 [ 459.936031][ T43] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0 [ 459.944278][T11767] bcachefs (loop7): Version upgrade required: [ 459.944278][T11767] Version upgrade from 0.26: lru_v2 to 1.7: mi_btree_bitmap incomplete [ 459.944278][T11767] Doing incompatible version upgrade from 0.26: lru_v2 to 1.28: inode_has_case_insensitive [ 459.944278][T11767] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 460.015939][ T43] hid-generic 0000:0004:0000.002E: unknown main item tag 0x0 [ 460.044758][ T43] hid-generic 0000:0004:0000.002E: hidraw0: HID v0.04 Device [syz0] on syz1 [ 460.080342][T11767] bcachefs (loop7): dropping and reconstructing all alloc info [ 460.138947][T11767] bcachefs (loop7): accounting_read... done [ 460.169987][T11767] bcachefs (loop7): alloc_read... done [ 460.190182][T11767] bcachefs (loop7): snapshots_read... done [ 460.216081][T11767] bcachefs (loop7): done starting filesystem [ 460.289721][ T49] team0 (unregistering): Port device team_slave_1 removed [ 460.366180][T11779] fido_id[11779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 460.573974][ T49] team0 (unregistering): Port device team_slave_0 removed [ 460.738626][ T51] Bluetooth: hci4: command tx timeout [ 461.016097][T11781] loop3: detected capacity change from 0 to 512 [ 461.048546][T11781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.147031][T11781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.187362][T11781] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.234193][T11781] Quota error (device loop3): do_check_range: Getting block 4294966274 out of range 1-5 [ 461.246976][T11781] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 461.256721][T11781] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.1833: Failed to acquire dquot type 1 [ 461.317304][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.486494][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 462.257003][T10031] bcachefs (loop7): shutting down [ 462.479919][T10031] bcachefs (loop7): shutdown complete [ 462.601555][T11793] loop3: detected capacity change from 0 to 1024 [ 462.753386][T11793] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 462.771775][T11793] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 462.826577][T11793] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.1835: Failed to acquire dquot type 0 [ 462.859621][T11793] EXT4-fs (loop3): 1 truncate cleaned up [ 462.900532][T11793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.928112][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.969553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.221522][T11793] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 463.237012][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.246763][T11699] chnl_net:caif_netlink_parms(): no params data found [ 463.259556][T11798] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 463.264968][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.299135][T11798] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 463.325706][T11798] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 463.338278][T11798] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.1835: Failed to acquire dquot type 0 [ 463.408994][T11798] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 463.880158][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.463646][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.504575][T11518] veth0_vlan: entered promiscuous mode [ 464.549723][T11518] veth1_vlan: entered promiscuous mode [ 464.799545][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.836181][T11699] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.870095][T11699] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.892892][T11699] bridge_slave_0: entered allmulticast mode [ 464.928276][T11699] bridge_slave_0: entered promiscuous mode [ 464.954915][T11699] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.988815][T11699] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.011982][T11699] bridge_slave_1: entered allmulticast mode [ 465.019945][T11699] bridge_slave_1: entered promiscuous mode [ 465.215735][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.231619][ T5897] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 465.425291][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 465.469739][ T5897] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 465.489246][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.540514][ T5897] usb 7-1: config 0 descriptor?? [ 465.588557][T11814] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 465.637077][T11518] veth0_macvtap: entered promiscuous mode [ 465.693628][T11699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.766184][T11699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.095108][T11518] veth1_macvtap: entered promiscuous mode [ 466.108678][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.122847][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.133187][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.135282][ T5897] elan 0003:04F3:0755.002F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 466.152995][ T5898] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 466.171029][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.183835][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.322139][T11699] team0: Port device team_slave_0 added [ 466.342942][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.374156][ T10] usb 7-1: USB disconnect, device number 14 [ 466.392054][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 466.427197][ T5898] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 466.436710][T11699] team0: Port device team_slave_1 added [ 466.472284][ T5898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.511837][ T5898] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.544343][ T5898] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.553731][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.568687][ T5898] usb 9-1: Product: syz [ 466.573192][ T5898] usb 9-1: Manufacturer: syz [ 466.577841][ T5898] usb 9-1: SerialNumber: syz [ 466.605490][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.645859][T11822] fido_id[11822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 466.917526][T11518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.942738][T11518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.962253][T11518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.981337][T11518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.054524][ T5898] usb 9-1: 0:2 : does not exist [ 467.085268][T11699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.117931][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.163047][T11699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.211190][T11699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.247691][T11699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.326868][T11699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.373786][ T49] dummy0: left allmulticast mode [ 467.380910][ T49] bridge0: port 3(dummy0) entered disabled state [ 467.394525][ T49] bridge_slave_1: left allmulticast mode [ 467.400204][ T49] bridge_slave_1: left promiscuous mode [ 467.407843][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.435317][ T49] bridge_slave_0: left allmulticast mode [ 467.441263][ T49] bridge_slave_0: left promiscuous mode [ 467.454312][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.703713][ T5898] usb 9-1: USB disconnect, device number 2 [ 467.703928][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.731093][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.748994][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.758903][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.774207][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.816350][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.330650][ T5843] Bluetooth: hci0: command tx timeout [ 468.483017][T11832] loop6: detected capacity change from 0 to 4096 [ 468.596579][T11832] ntfs3(loop6): ino=1a, mi_enum_attr [ 468.626052][T11832] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 469.343396][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.417808][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.446038][ T49] bond0 (unregistering): Released all slaves [ 469.848814][ T5843] Bluetooth: hci3: command tx timeout [ 470.009724][T11699] hsr_slave_0: entered promiscuous mode [ 470.030464][T11699] hsr_slave_1: entered promiscuous mode [ 470.047531][T11699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.057146][T11699] Cannot create hsr debugfs directory [ 470.405350][ T5843] Bluetooth: hci0: command tx timeout [ 470.502171][ T49] hsr_slave_0: left promiscuous mode [ 470.510791][ T49] hsr_slave_1: left promiscuous mode [ 470.520031][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.554440][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.586868][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.612288][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.637826][T11846] ALSA: seq fatal error: cannot create timer (-19) [ 470.714191][ T49] veth1_macvtap: left promiscuous mode [ 470.719815][ T49] veth0_macvtap: left promiscuous mode [ 470.742307][ T49] veth1_vlan: left promiscuous mode [ 470.771234][ T49] veth0_vlan: left promiscuous mode [ 470.960815][ T30] audit: type=1326 audit(1748705010.062:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.077947][ T30] audit: type=1326 audit(1748705010.062:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651f78e969 code=0x7ffc0000 [ 471.141400][ T30] audit: type=1326 audit(1748705010.062:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651f78e969 code=0x7ffc0000 [ 471.381562][ T30] audit: type=1326 audit(1748705010.062:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.411506][T11854] loop8: detected capacity change from 0 to 4096 [ 471.500868][ T30] audit: type=1326 audit(1748705010.062:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.529309][ T30] audit: type=1326 audit(1748705010.062:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.553102][ T30] audit: type=1326 audit(1748705010.062:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.582601][T11854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.605259][ T30] audit: type=1326 audit(1748705010.062:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651f78e969 code=0x7ffc0000 [ 471.629714][ T30] audit: type=1326 audit(1748705010.062:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f651f72ab39 code=0x7ffc0000 [ 471.653052][ T30] audit: type=1326 audit(1748705010.062:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651f78e969 code=0x7ffc0000 [ 471.885056][T11392] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.925888][ T5843] Bluetooth: hci3: command tx timeout [ 472.219555][T11860] loop6: detected capacity change from 0 to 256 [ 472.496900][ T5843] Bluetooth: hci0: command tx timeout [ 473.011429][ T2145] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 473.202043][ T2145] usb 7-1: Using ep0 maxpacket: 16 [ 473.219845][ T2145] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.242662][ T2145] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.254056][ T2145] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.301989][ T2145] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.311148][ T2145] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.347817][ T2145] usb 7-1: Product: syz [ 473.352564][ T2145] usb 7-1: Manufacturer: syz [ 473.357200][ T2145] usb 7-1: SerialNumber: syz [ 473.553259][ T49] team0 (unregistering): Port device team_slave_1 removed [ 473.633812][ T49] team0 (unregistering): Port device team_slave_0 removed [ 473.804652][ T2145] usb 7-1: 0:2 : does not exist [ 474.002293][ T5843] Bluetooth: hci3: command tx timeout [ 474.447916][ T2145] usb 7-1: USB disconnect, device number 15 [ 474.508021][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.562059][ T5843] Bluetooth: hci0: command tx timeout [ 475.308717][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.331874][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.697762][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.706669][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.865747][T11820] chnl_net:caif_netlink_parms(): no params data found [ 476.041382][ T5982] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 476.083379][ T5843] Bluetooth: hci3: command tx timeout [ 476.231813][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 476.242050][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 476.250386][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.272830][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.283521][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.295068][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.309847][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.319908][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.577412][ T5982] usb 7-1: usb_control_msg returned -32 [ 476.611375][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 476.985598][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.005845][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.013828][T11820] bridge_slave_0: entered allmulticast mode [ 477.022919][T11820] bridge_slave_0: entered promiscuous mode [ 477.104616][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.130512][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.151706][T11820] bridge_slave_1: entered allmulticast mode [ 477.160315][T11820] bridge_slave_1: entered promiscuous mode [ 477.181006][ T5897] usb 7-1: USB disconnect, device number 16 [ 477.377766][T11827] chnl_net:caif_netlink_parms(): no params data found [ 477.610756][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.886561][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.114114][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.158636][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.228258][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.239539][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.248586][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.257247][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.265379][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.687614][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.243086][T11820] team0: Port device team_slave_0 added [ 479.603676][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 479.603703][ T30] audit: type=1326 audit(1748705018.712:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 479.604676][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.631902][ T30] audit: type=1326 audit(1748705018.712:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 479.719218][T11820] team0: Port device team_slave_1 added [ 479.751470][ T30] audit: type=1326 audit(1748705018.712:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 479.848620][ T30] audit: type=1326 audit(1748705018.712:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 479.942948][ T30] audit: type=1326 audit(1748705018.712:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.021640][ T30] audit: type=1326 audit(1748705018.712:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.081654][ T30] audit: type=1326 audit(1748705018.712:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.134317][ T30] audit: type=1326 audit(1748705018.722:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.168969][ T30] audit: type=1326 audit(1748705018.722:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.195269][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.223464][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.256611][ T30] audit: type=1326 audit(1748705018.722:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.8.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10e0d2ab39 code=0x7ffc0000 [ 480.331833][ T5843] Bluetooth: hci1: command tx timeout [ 480.392002][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.479065][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.524772][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.532581][T11827] bridge_slave_0: entered allmulticast mode [ 480.596430][T11827] bridge_slave_0: entered promiscuous mode [ 480.662307][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.669322][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.749997][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.807054][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.821986][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.845465][T11827] bridge_slave_1: entered allmulticast mode [ 480.870142][T11827] bridge_slave_1: entered promiscuous mode [ 481.266454][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.474335][T11820] hsr_slave_0: entered promiscuous mode [ 481.481164][T11820] hsr_slave_1: entered promiscuous mode [ 481.529892][T11820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.562448][T11820] Cannot create hsr debugfs directory [ 481.647316][T11699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.680852][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.791663][ T5898] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 481.900548][T11699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.942375][T11699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.994226][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 482.032335][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.051846][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.063638][ T5898] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.085440][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.102656][T11827] team0: Port device team_slave_0 added [ 482.127911][ T5898] usb 7-1: config 0 descriptor?? [ 482.228483][T11699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.255925][T11827] team0: Port device team_slave_1 added [ 482.401571][ T5843] Bluetooth: hci1: command tx timeout [ 482.533520][ T49] bridge_slave_1: left allmulticast mode [ 482.539241][ T49] bridge_slave_1: left promiscuous mode [ 482.557815][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.622102][ T5898] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 482.649735][ T49] bridge_slave_0: left allmulticast mode [ 482.668780][ T49] bridge_slave_0: left promiscuous mode [ 482.689260][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.928790][ T5898] usb 7-1: USB disconnect, device number 17 [ 483.941416][ T5814] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 483.961006][ T5897] IPVS: starting estimator thread 0... [ 484.088773][T11937] IPVS: using max 21 ests per chain, 50400 per kthread [ 484.114951][ T5814] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 484.123634][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.155482][ T5814] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 484.172948][ T5814] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 484.181143][ T5814] usb 7-1: Manufacturer: syz [ 484.222828][ T5814] usb 7-1: config 0 descriptor?? [ 484.336019][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.349407][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.362554][ T49] bond0 (unregistering): Released all slaves [ 484.370766][ T5814] rc_core: IR keymap rc-hauppauge not found [ 484.401530][ T5814] Registered IR keymap rc-empty [ 484.413710][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.421009][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.432446][ T5814] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 484.475373][ T5814] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30 [ 484.495378][ T5843] Bluetooth: hci1: command tx timeout [ 484.520973][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.545808][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.553456][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 484.580819][ T5814] usb 7-1: USB disconnect, device number 18 [ 484.591470][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.680456][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.391436][ T2145] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 485.450837][T11946] loop6: detected capacity change from 0 to 1024 [ 485.479113][T11827] hsr_slave_0: entered promiscuous mode [ 485.523522][T11827] hsr_slave_1: entered promiscuous mode [ 485.529957][T11827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.538886][T11946] EXT4-fs: Ignoring removed oldalloc option [ 485.567425][T11946] EXT4-fs: Ignoring removed orlov option [ 485.576131][T11827] Cannot create hsr debugfs directory [ 485.591417][ T2145] usb 9-1: Using ep0 maxpacket: 32 [ 485.627806][T11946] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 485.647017][T11900] chnl_net:caif_netlink_parms(): no params data found [ 485.661632][ T2145] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.682720][ T2145] usb 9-1: config 0 interface 0 has no altsetting 0 [ 485.689399][ T2145] usb 9-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 485.736883][T11946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.772209][ T2145] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.819702][ T2145] usb 9-1: config 0 descriptor?? [ 485.866190][ T49] hsr_slave_0: left promiscuous mode [ 485.893643][ T49] hsr_slave_1: left promiscuous mode [ 485.903134][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.921894][T11946] EXT4-fs: Ignoring removed orlov option [ 485.941542][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.941995][T11946] EXT4-fs (loop6): can't enable nombcache during remount [ 485.967029][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.981048][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.046245][ T49] veth1_macvtap: left promiscuous mode [ 486.075134][ T49] veth0_macvtap: left promiscuous mode [ 486.080846][ T49] veth1_vlan: left promiscuous mode [ 486.111958][ T49] veth0_vlan: left promiscuous mode [ 486.136426][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.304502][ T2145] uclogic 0003:5543:0781.0031: ignoring exceeding usage max [ 486.333932][ T2145] uclogic 0003:5543:0781.0031: unbalanced collection at end of report description [ 486.407438][ T2145] uclogic 0003:5543:0781.0031: parse failed [ 486.424037][ T2145] uclogic 0003:5543:0781.0031: probe with driver uclogic failed with error -22 [ 486.561568][ T5843] Bluetooth: hci1: command tx timeout [ 486.578579][ T5898] usb 9-1: USB disconnect, device number 3 [ 487.581899][ T49] team0 (unregistering): Port device team_slave_1 removed [ 487.707245][T11958] loop6: detected capacity change from 0 to 1024 [ 487.714622][ T49] team0 (unregistering): Port device team_slave_0 removed [ 487.788431][T11958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.829537][T11958] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4112: comm syz.6.1891: Allocating blocks 385-513 which overlap fs metadata [ 487.902693][T11958] EXT4-fs (loop6): pa ffff88807b818910: logic 16, phys. 129, len 24 [ 487.911185][T11958] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8 [ 488.366835][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.518315][T11973] loop6: detected capacity change from 0 to 256 [ 489.537269][T11820] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 489.600744][T11820] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 489.636784][T11973] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 490.038992][T11820] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 490.151227][T11820] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 490.283890][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.291104][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.352168][T11900] bridge_slave_0: entered allmulticast mode [ 490.408565][T11900] bridge_slave_0: entered promiscuous mode [ 490.515790][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.557444][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.567971][T11900] bridge_slave_1: entered allmulticast mode [ 490.637562][T11900] bridge_slave_1: entered promiscuous mode [ 490.870386][T11986] loop8: detected capacity change from 0 to 512 [ 490.895399][T11986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.905357][T11986] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.967808][T11986] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 491.034747][T11986] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 491.045856][T11990] loop6: detected capacity change from 0 to 256 [ 491.095351][T11986] EXT4-fs (loop8): 1 truncate cleaned up [ 491.151852][T11986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.309052][T11392] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.653463][T11900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.728198][T11900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.084748][T11699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.463961][T11900] team0: Port device team_slave_0 added [ 492.515698][T11900] team0: Port device team_slave_1 added [ 492.591015][T11699] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.720284][T11900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.732527][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.787754][T11900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.826810][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.834003][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.954868][T11900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.979637][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.078827][T11900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.137805][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.145150][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.369282][T11900] hsr_slave_0: entered promiscuous mode [ 493.388080][T11900] hsr_slave_1: entered promiscuous mode [ 493.415985][T11900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.439933][T11900] Cannot create hsr debugfs directory [ 493.548520][T11827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.622722][T11827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.656773][T11827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.783927][T11827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.997145][T11820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.260331][T12017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.421114][T11820] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.643182][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.650426][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.790134][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.797449][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.009077][T11699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.340852][T11699] veth0_vlan: entered promiscuous mode [ 495.447777][T11699] veth1_vlan: entered promiscuous mode [ 495.496728][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.603296][T11900] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.648785][T11900] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.690866][T11900] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.738748][T11900] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.804822][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.902014][ T5894] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 495.969745][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.976965][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.038443][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.045657][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.072380][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 496.083678][ T5894] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 496.093406][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.131567][ T5894] usb 9-1: Product: syz [ 496.143051][ T5894] usb 9-1: Manufacturer: syz [ 496.151395][ T5894] usb 9-1: SerialNumber: syz [ 496.152009][T11699] veth0_macvtap: entered promiscuous mode [ 496.170286][ T5894] usb 9-1: config 0 descriptor?? [ 496.193064][ T5894] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 496.213282][ T5894] usb 9-1: Detected FT-X [ 496.224922][T11699] veth1_macvtap: entered promiscuous mode [ 496.262236][ T5814] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 496.286017][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.421552][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 496.435854][ T5894] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 496.441939][T11699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.450054][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 496.488165][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 496.514281][ T5814] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 496.539591][T11699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.554523][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.582102][ T5814] usb 7-1: Product: syz [ 496.586359][ T5814] usb 7-1: Manufacturer: syz [ 496.590977][ T5814] usb 7-1: SerialNumber: syz [ 496.617665][ T5814] usb 7-1: config 0 descriptor?? [ 496.626267][T11699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.657129][ T5814] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 496.667088][T11699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.687109][T11699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.696092][ T5814] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 496.723844][T11699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.873463][ T5894] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 496.925211][T11900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.118025][ T5894] usb 9-1: USB disconnect, device number 4 [ 497.200653][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 497.215428][ T5894] ftdi_sio 9-1:0.0: device disconnected [ 497.238808][T11900] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.285432][ T5814] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 497.301448][ T5814] em28xx 7-1:0.0: Config register raw data: 0x56 [ 497.416590][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.455455][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.507908][ T5814] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 497.528190][ T5814] em28xx 7-1:0.0: No AC97 audio processor [ 497.564854][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.572104][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.593723][ T5814] usb 7-1: USB disconnect, device number 19 [ 497.630031][ T5814] em28xx 7-1:0.0: Disconnecting em28xx [ 497.660706][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.664366][ T5814] em28xx 7-1:0.0: Freeing device [ 497.667944][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.755921][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.803811][T11827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.815325][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.130237][T11820] veth0_vlan: entered promiscuous mode [ 498.218777][T11820] veth1_vlan: entered promiscuous mode [ 498.768487][T12058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.238024][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.350271][T11820] veth0_macvtap: entered promiscuous mode [ 499.468083][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.537635][T11820] veth1_macvtap: entered promiscuous mode [ 499.571018][T11900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.758307][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.959647][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.036107][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.136897][T11827] veth0_vlan: entered promiscuous mode [ 500.175590][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.247584][T11820] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.293817][T11820] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.341358][T11820] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.350985][T11820] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.467460][T11827] veth1_vlan: entered promiscuous mode [ 500.601473][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 500.794668][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.834937][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.876761][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.957080][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.020369][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.075761][ T43] usb 7-1: config 0 descriptor?? [ 501.097407][T10899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.126412][T10899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.153337][ T49] bridge_slave_1: left allmulticast mode [ 501.181469][ T49] bridge_slave_1: left promiscuous mode [ 501.187334][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.255048][T12083] input: syz0 as /devices/virtual/input/input31 [ 501.271794][T12083] input: failed to attach handler leds to device input31, error: -6 [ 501.278993][ T49] bridge_slave_0: left allmulticast mode [ 501.327754][ T49] bridge_slave_0: left promiscuous mode [ 501.358853][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.548569][ T43] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 501.557524][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.575551][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.592140][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.600894][ T43] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 501.616166][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.636417][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.873166][ T5897] usb 7-1: USB disconnect, device number 20 [ 502.406939][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.442047][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.453922][ T49] bond0 (unregistering): Released all slaves [ 502.517600][T11827] veth0_macvtap: entered promiscuous mode [ 502.665168][T11827] veth1_macvtap: entered promiscuous mode [ 502.771056][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.800087][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.829084][T12092] loop8: detected capacity change from 0 to 64 [ 503.155026][T12096] loop6: detected capacity change from 0 to 512 [ 503.170562][T12096] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.181108][T12096] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.196486][T12096] EXT4-fs (loop6): Test dummy encryption mode enabled [ 503.247448][T12096] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 503.338075][T12096] EXT4-fs (loop6): 1 truncate cleaned up [ 503.394255][T12096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.432937][T11827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.754748][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.818170][ T5843] Bluetooth: hci4: command tx timeout [ 503.938230][T11827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.149420][ T49] hsr_slave_0: left promiscuous mode [ 504.183237][ T49] hsr_slave_1: left promiscuous mode [ 504.202269][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.231589][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.260396][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.288559][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.349848][T12105] loop8: detected capacity change from 0 to 65536 [ 504.374442][ T49] veth1_macvtap: left promiscuous mode [ 504.380053][ T49] veth0_macvtap: left promiscuous mode [ 504.419938][ T49] veth1_vlan: left promiscuous mode [ 504.430912][T12105] XFS (loop8): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 504.463176][ T49] veth0_vlan: left promiscuous mode [ 504.484277][T12105] XFS (loop8): Ending clean mount [ 504.604832][T11392] XFS (loop8): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 505.101492][ T5982] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 505.284140][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.305524][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.336053][ T5982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.349374][ T5982] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.358849][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.454420][ T5982] usb 7-1: config 0 descriptor?? [ 505.851772][ T5843] Bluetooth: hci4: command tx timeout [ 505.906770][ T5982] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 505.963909][ T5982] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 506.235824][ T5982] usb 7-1: USB disconnect, device number 21 [ 506.902474][ T49] team0 (unregistering): Port device team_slave_1 removed [ 507.164681][ T49] team0 (unregistering): Port device team_slave_0 removed [ 507.930596][ T5843] Bluetooth: hci4: command tx timeout [ 508.521106][T11827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.531753][T11827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.541041][T11827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.552549][T11827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.567971][T11900] veth0_vlan: entered promiscuous mode [ 508.870418][T11900] veth1_vlan: entered promiscuous mode [ 509.070944][T12152] loop9: detected capacity change from 0 to 256 [ 509.575629][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.612874][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.705824][T11900] veth0_macvtap: entered promiscuous mode [ 509.766998][T11900] veth1_macvtap: entered promiscuous mode [ 509.811464][T12084] chnl_net:caif_netlink_parms(): no params data found [ 509.907784][T12162] loop8: detected capacity change from 0 to 1024 [ 509.929412][T12162] EXT4-fs: Ignoring removed bh option [ 509.938612][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.959298][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.981721][T12162] EXT4-fs: inline encryption not supported [ 509.998918][T12162] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 510.019862][ T5843] Bluetooth: hci4: command tx timeout [ 510.048952][T12162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 510.108251][T12162] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.1947: lblock 2 mapped to illegal pblock 2 (length 1) [ 510.206809][T11900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.301893][T12162] __quota_error: 114 callbacks suppressed [ 510.301920][T12162] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 510.359751][T12172] loop9: detected capacity change from 0 to 256 [ 510.415725][T12162] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.1947: lblock 0 mapped to illegal pblock 48 (length 1) [ 510.513716][T12162] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 510.522340][T11900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.530818][T12162] EXT4-fs error (device loop8): ext4_acquire_dquot:6931: comm syz.8.1947: Failed to acquire dquot type 0 [ 510.548986][T12162] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 510.598544][T12162] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1947: mark_inode_dirty error [ 510.647017][T12162] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 510.687037][T12162] EXT4-fs (loop8): 1 orphan inode deleted [ 510.701928][ T5913] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 510.754366][T12162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.844818][ T5913] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 510.877347][T11900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.880291][ T5913] EXT4-fs error (device loop8): ext4_release_dquot:6967: comm kworker/u8:8: Failed to release dquot type 0 [ 510.941478][T11900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.950267][T11900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.009691][T11900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.062547][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.083309][T12162] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 511.092065][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.099359][T12084] bridge_slave_0: entered allmulticast mode [ 511.126299][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.132781][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.172622][T12084] bridge_slave_0: entered promiscuous mode [ 511.197008][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.201239][T12162] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 511.235286][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.262962][T12084] bridge_slave_1: entered allmulticast mode [ 511.264057][T12162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 511.271155][T12084] bridge_slave_1: entered promiscuous mode [ 511.320947][T12162] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.1947: lblock 0 mapped to illegal pblock 48 (length 1) [ 511.425843][T12162] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 511.446847][T12162] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 511.727981][T12190] loop9: detected capacity change from 0 to 16 [ 511.728959][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.783384][T11392] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.792536][T12190] erofs (device loop9): mounted with root inode @ nid 36. [ 511.854905][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.269072][T12084] team0: Port device team_slave_0 added [ 512.342017][T12084] team0: Port device team_slave_1 added [ 512.558754][T12084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.594993][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.722480][T12084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.790189][T12084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.837282][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.875198][T12084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.039803][T12189] loop4: detected capacity change from 0 to 32768 [ 513.111684][T12189] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1956 (12189) [ 513.166699][T12189] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 513.194902][T12210] veth0: entered promiscuous mode [ 513.205737][T12189] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 513.245559][T12189] BTRFS info (device loop4): using free-space-tree [ 513.404319][T12209] veth0: left promiscuous mode [ 513.533189][T12084] hsr_slave_0: entered promiscuous mode [ 513.539946][T12084] hsr_slave_1: entered promiscuous mode [ 513.621492][T12084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.629180][T12084] Cannot create hsr debugfs directory [ 513.902444][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.959282][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.468492][T11827] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 514.573990][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.611985][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.805975][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 515.011452][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 515.056703][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.081357][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.134108][ T43] usb 10-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 515.206865][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.283273][ T43] usb 10-1: config 0 descriptor?? [ 515.597398][T12257] input: syz0 as /devices/virtual/input/input34 [ 515.783391][ T43] hid_mf 0003:0079:1801.0034: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.9-1/input0 [ 515.843630][ T43] hid_mf 0003:0079:1801.0034: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 515.952290][ T43] usb 10-1: USB disconnect, device number 2 [ 516.274616][T12263] fido_id[12263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 516.377235][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.623225][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.846553][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.947297][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.466047][T12084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 517.699658][ T30] audit: type=1326 audit(1748705056.802:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 517.741859][ T30] audit: type=1326 audit(1748705056.832:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 517.769962][ T30] audit: type=1326 audit(1748705056.842:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 517.870516][ T30] audit: type=1326 audit(1748705056.842:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 517.973241][T12084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.980266][ T30] audit: type=1326 audit(1748705056.842:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.055217][ T30] audit: type=1326 audit(1748705056.842:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.111456][T12084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.158627][ T30] audit: type=1326 audit(1748705056.842:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.183737][ T30] audit: type=1326 audit(1748705056.842:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.206358][ T30] audit: type=1326 audit(1748705056.842:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.229955][ T30] audit: type=1326 audit(1748705056.842:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 518.238408][T12084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.443833][ T12] bridge_slave_1: left allmulticast mode [ 518.449690][ T12] bridge_slave_1: left promiscuous mode [ 518.491736][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.569592][ T12] bridge_slave_0: left allmulticast mode [ 518.613946][ T12] bridge_slave_0: left promiscuous mode [ 518.619670][T12286] netlink: 'syz.9.1986': attribute type 1 has an invalid length. [ 518.642513][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.658373][T12286] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.1986'. [ 518.730863][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.748635][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.756982][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.772831][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.784924][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.024114][T12302] loop9: detected capacity change from 0 to 32768 [ 520.167324][T12305] loop8: detected capacity change from 0 to 2048 [ 520.232056][T12302] JBD2: Ignoring recovery information on journal [ 520.279432][T12305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.390977][T12302] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 520.501468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.562855][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.620803][ T12] bond0 (unregistering): Released all slaves [ 520.883299][ T51] Bluetooth: hci1: command tx timeout [ 521.213417][T11820] ocfs2: Unmounting device (7,9) on (node local) [ 521.510738][T12321] team0: Device gre1 is of different type [ 522.499747][T12340] loop6: detected capacity change from 0 to 512 [ 522.530345][ T12] hsr_slave_0: left promiscuous mode [ 522.548285][ T12] hsr_slave_1: left promiscuous mode [ 522.560331][T12340] EXT4-fs: Ignoring removed oldalloc option [ 522.582155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.585897][T12340] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 522.589969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.639000][T12340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 522.662335][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.669797][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.679412][T12340] System zones: 1-12 [ 522.731560][T12340] EXT4-fs error (device loop6): ext4_iget_extra_inode:5034: inode #15: comm syz.6.2005: corrupted in-inode xattr: e_value size too large [ 522.763107][ T12] veth1_macvtap: left promiscuous mode [ 522.768823][ T12] veth0_macvtap: left promiscuous mode [ 522.795570][T12340] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2005: couldn't read orphan inode 15 (err -117) [ 522.801552][ T12] veth1_vlan: left promiscuous mode [ 522.851182][T12340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.853783][ T12] veth0_vlan: left promiscuous mode [ 522.914478][T12340] EXT4-fs (loop6): shut down requested (1) [ 522.961557][ T51] Bluetooth: hci1: command tx timeout [ 522.997571][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.068279][T12357] loop8: detected capacity change from 0 to 4096 [ 525.042331][ T51] Bluetooth: hci1: command tx timeout [ 525.150120][T12367] loop8: detected capacity change from 0 to 4096 [ 525.317458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 525.467511][ T12] team0 (unregistering): Port device team_slave_0 removed [ 526.999910][T12353] vlan2: entered allmulticast mode [ 527.041476][T12353] vlan1: entered allmulticast mode [ 527.046659][T12353] veth0_vlan: entered allmulticast mode [ 527.075903][T12353] bridge0: port 3(vlan2) entered blocking state [ 527.101851][T12353] bridge0: port 3(vlan2) entered disabled state [ 527.122663][ T51] Bluetooth: hci1: command tx timeout [ 527.168655][T12353] vlan2: entered promiscuous mode [ 527.219665][T12353] vlan1: entered promiscuous mode [ 527.235199][T12353] bridge0: port 3(vlan2) entered blocking state [ 527.241887][T12353] bridge0: port 3(vlan2) entered forwarding state [ 527.388506][T12084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.471601][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 527.691491][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 527.703403][T12084] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.730600][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.765502][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.787729][T12290] chnl_net:caif_netlink_parms(): no params data found [ 527.795540][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.822938][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.830191][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.839316][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.895738][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.911355][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.940424][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.947666][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.170175][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 528.175921][ T10] usbtmc 7-1:16.0: can't read capabilities [ 528.399270][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.408817][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.418736][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.432685][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.441815][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.450920][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.460825][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.473840][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.482958][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.492329][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.502497][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.511608][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.520719][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.529848][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.557041][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.566267][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 528.686757][ T5898] usb 7-1: USB disconnect, device number 22 [ 528.856174][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.889892][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.915125][T12290] bridge_slave_0: entered allmulticast mode [ 528.931490][T12290] bridge_slave_0: entered promiscuous mode [ 528.940673][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.955479][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.971734][T12290] bridge_slave_1: entered allmulticast mode [ 528.999142][T12290] bridge_slave_1: entered promiscuous mode [ 529.256524][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.326010][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.612592][T12391] loop9: detected capacity change from 0 to 32768 [ 529.696907][T12290] team0: Port device team_slave_0 added [ 529.731625][T12391] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 529.748040][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 529.748063][ T30] audit: type=1326 audit(1748705068.852:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.748778][T12290] team0: Port device team_slave_1 added [ 529.762206][ T30] audit: type=1326 audit(1748705068.872:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.860065][ T30] audit: type=1326 audit(1748705068.962:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.893263][ T30] audit: type=1326 audit(1748705068.962:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.915892][ T30] audit: type=1326 audit(1748705068.962:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.943736][ T30] audit: type=1326 audit(1748705068.962:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 529.966326][ T30] audit: type=1326 audit(1748705069.022:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 530.063906][ T30] audit: type=1326 audit(1748705069.152:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 530.103336][T12391] XFS (loop9): Ending clean mount [ 530.191428][ T30] audit: type=1326 audit(1748705069.212:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 530.226164][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.248370][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.292169][ T30] audit: type=1326 audit(1748705069.302:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f10e0d8e969 code=0x7ffc0000 [ 530.351084][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.473249][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.508070][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.542285][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 530.555397][T11820] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.577395][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.741425][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 530.792395][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 530.888419][ T5895] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 530.911377][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.919417][ T5895] usb 5-1: Product: syz [ 530.951357][ T5895] usb 5-1: Manufacturer: syz [ 530.955999][ T5895] usb 5-1: SerialNumber: syz [ 530.980720][T12290] hsr_slave_0: entered promiscuous mode [ 531.046373][ T5895] usb 5-1: config 0 descriptor?? [ 531.092262][T12290] hsr_slave_1: entered promiscuous mode [ 531.119053][T12290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.178416][T12290] Cannot create hsr debugfs directory [ 531.488048][ T5895] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 531.620189][T12435] loop9: detected capacity change from 0 to 512 [ 531.733446][T12435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.754570][T12435] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.894685][T12084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.092802][ T5895] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 532.135859][ T5895] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 532.137894][T11820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.201202][T12445] 9p: Unknown uid 00000000004294967295 [ 532.227845][ T5895] usb 5-1: USB disconnect, device number 2 [ 532.664555][T12084] veth0_vlan: entered promiscuous mode [ 532.789876][T12084] veth1_vlan: entered promiscuous mode [ 533.014279][T12084] veth0_macvtap: entered promiscuous mode [ 533.110203][T12457] vlan2: entered allmulticast mode [ 533.161879][T12457] hsr_slave_0: entered allmulticast mode [ 533.197216][T12084] veth1_macvtap: entered promiscuous mode [ 533.311491][ T5894] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 533.349161][T12084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.429567][T12084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.513771][ T5894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.567477][T12084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.581130][ T5894] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.602359][T12084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.611095][T12084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.635341][ T5894] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 533.661194][T12084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.666515][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 533.709579][ T5894] usb 10-1: SerialNumber: syz [ 533.769709][T12290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 533.807169][T12290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 533.862498][T12290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 533.932009][T12290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 533.987706][ T5894] usb 10-1: 0:2 : does not exist [ 534.094685][ T5894] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 534.151249][ T5894] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 534.271523][ T5894] usb 10-1: USB disconnect, device number 3 [ 534.360374][T12470] loop6: detected capacity change from 0 to 128 [ 534.452776][T12470] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.540428][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.560158][T10899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.599145][T12470] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 534.610118][T10899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.800648][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.821979][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.994769][ T6859] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.037396][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.077281][T12462] loop4: detected capacity change from 0 to 32768 [ 535.146397][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.163960][T12462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2047 (12462) [ 535.237780][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.245047][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.301954][T12462] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 535.334007][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.341236][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.367760][T12479] loop6: detected capacity change from 0 to 128 [ 535.389338][T12462] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 535.430973][T12479] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 535.461642][T12462] BTRFS info (device loop4): using free-space-tree [ 535.543573][T12479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.506395][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.542234][T11827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 536.889160][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.151191][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.350340][T12290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.568890][T12512] [ 537.571284][T12512] ===================================================== [ 537.578226][T12512] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 537.585709][T12512] 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 Not tainted [ 537.592497][T12512] ----------------------------------------------------- [ 537.599441][T12512] syz.8.2057/12512 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 537.607198][T12512] ffff88806b0ab360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 537.615983][T12512] [ 537.615983][T12512] and this task is already holding: [ 537.623360][T12512] ffff888028038028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 537.633266][T12512] which would create a new lock dependency: [ 537.639168][T12512] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 537.647357][T12512] [ 537.647357][T12512] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 537.656826][T12512] (&client->buffer_lock){..-.}-{3:3} [ 537.656880][T12512] [ 537.656880][T12512] ... which became SOFTIRQ-irq-safe at: [ 537.669960][T12512] lock_acquire+0x179/0x350 [ 537.674589][T12512] _raw_spin_lock+0x2e/0x40 [ 537.679206][T12512] evdev_pass_values+0x10e/0x9b0 [ 537.684251][T12512] evdev_events+0x1bb/0x390 [ 537.688862][T12512] input_pass_values+0x6c7/0x890 [ 537.693906][T12512] input_handle_event+0xb29/0x14d0 [ 537.699127][T12512] input_inject_event+0x1cd/0x390 [ 537.704262][T12512] kd_sound_helper+0x20f/0x280 [ 537.709142][T12512] input_handler_for_each_handle+0xd7/0x250 [ 537.715190][T12512] call_timer_fn+0x19a/0x620 [ 537.719905][T12512] __run_timers+0x6ef/0x960 [ 537.724576][T12512] run_timer_base+0x114/0x190 [ 537.729377][T12512] run_timer_softirq+0x1a/0x40 [ 537.734275][T12512] handle_softirqs+0x219/0x8e0 [ 537.739202][T12512] __irq_exit_rcu+0x109/0x170 [ 537.744009][T12512] irq_exit_rcu+0x9/0x30 [ 537.748358][T12512] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 537.754104][T12512] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.760238][T12512] smp_call_function_many_cond+0xd0f/0x1490 [ 537.766267][T12512] on_each_cpu_cond_mask+0x40/0x90 [ 537.771513][T12512] flush_tlb_mm_range+0x4a0/0x1790 [ 537.776741][T12512] copy_process+0x791a/0x9170 [ 537.781532][T12512] kernel_clone+0xfc/0x960 [ 537.786057][T12512] __do_sys_clone+0xce/0x120 [ 537.790754][T12512] do_syscall_64+0xcd/0x4c0 [ 537.795376][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.801373][T12512] [ 537.801373][T12512] to a SOFTIRQ-irq-unsafe lock: [ 537.808392][T12512] (tasklist_lock){.+.+}-{3:3} [ 537.808442][T12512] [ 537.808442][T12512] ... which became SOFTIRQ-irq-unsafe at: [ 537.821075][T12512] ... [ 537.821087][T12512] lock_acquire+0x179/0x350 [ 537.828283][T12512] _raw_read_lock+0x5f/0x70 [ 537.832898][T12512] __do_wait+0x105/0x890 [ 537.837258][T12512] do_wait+0x21e/0x5a0 [ 537.841449][T12512] kernel_wait+0x9f/0x160 [ 537.845895][T12512] call_usermodehelper_exec_work+0xf1/0x170 [ 537.851919][T12512] process_one_work+0x9cf/0x1b70 [ 537.856982][T12512] worker_thread+0x6c8/0xf10 [ 537.861700][T12512] kthread+0x3c5/0x780 [ 537.865888][T12512] ret_from_fork+0x5d7/0x6f0 [ 537.870587][T12512] ret_from_fork_asm+0x1a/0x30 [ 537.875463][T12512] [ 537.875463][T12512] other info that might help us debug this: [ 537.875463][T12512] [ 537.885699][T12512] Chain exists of: [ 537.885699][T12512] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 537.885699][T12512] [ 537.898879][T12512] Possible interrupt unsafe locking scenario: [ 537.898879][T12512] [ 537.907196][T12512] CPU0 CPU1 [ 537.912562][T12512] ---- ---- [ 537.917926][T12512] lock(tasklist_lock); [ 537.922191][T12512] local_irq_disable(); [ 537.928950][T12512] lock(&client->buffer_lock); [ 537.936359][T12512] lock(&new->fa_lock); [ 537.943146][T12512] [ 537.946598][T12512] lock(&client->buffer_lock); [ 537.951647][T12512] [ 537.951647][T12512] *** DEADLOCK *** [ 537.951647][T12512] [ 537.959792][T12512] 7 locks held by syz.8.2057/12512: [ 537.964995][T12512] #0: ffff88802a2cd118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 537.974210][T12512] #1: ffff88802a2c8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 537.984398][T12512] #2: ffffffff8e3c4780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 537.994127][T12512] #3: ffffffff8e3c4780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x890 [ 538.003779][T12512] #4: ffffffff8e3c4780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 538.012986][T12512] #5: ffff888028038028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 538.023409][T12512] #6: ffffffff8e3c4780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 538.032528][T12512] [ 538.032528][T12512] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 538.042940][T12512] -> (&client->buffer_lock){..-.}-{3:3} { [ 538.048716][T12512] IN-SOFTIRQ-W at: [ 538.052708][T12512] lock_acquire+0x179/0x350 [ 538.058891][T12512] _raw_spin_lock+0x2e/0x40 [ 538.065059][T12512] evdev_pass_values+0x10e/0x9b0 [ 538.071668][T12512] evdev_events+0x1bb/0x390 [ 538.077840][T12512] input_pass_values+0x6c7/0x890 [ 538.084451][T12512] input_handle_event+0xb29/0x14d0 [ 538.091236][T12512] input_inject_event+0x1cd/0x390 [ 538.097936][T12512] kd_sound_helper+0x20f/0x280 [ 538.104383][T12512] input_handler_for_each_handle+0xd7/0x250 [ 538.111950][T12512] call_timer_fn+0x19a/0x620 [ 538.118210][T12512] __run_timers+0x6ef/0x960 [ 538.124387][T12512] run_timer_base+0x114/0x190 [ 538.130740][T12512] run_timer_softirq+0x1a/0x40 [ 538.137180][T12512] handle_softirqs+0x219/0x8e0 [ 538.143635][T12512] __irq_exit_rcu+0x109/0x170 [ 538.150007][T12512] irq_exit_rcu+0x9/0x30 [ 538.155923][T12512] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.163230][T12512] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.170882][T12512] smp_call_function_many_cond+0xd0f/0x1490 [ 538.178471][T12512] on_each_cpu_cond_mask+0x40/0x90 [ 538.185278][T12512] flush_tlb_mm_range+0x4a0/0x1790 [ 538.192062][T12512] copy_process+0x791a/0x9170 [ 538.198408][T12512] kernel_clone+0xfc/0x960 [ 538.204492][T12512] __do_sys_clone+0xce/0x120 [ 538.210750][T12512] do_syscall_64+0xcd/0x4c0 [ 538.216933][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.224501][T12512] INITIAL USE at: [ 538.228409][T12512] lock_acquire+0x179/0x350 [ 538.234503][T12512] _raw_spin_lock+0x2e/0x40 [ 538.240588][T12512] evdev_pass_values+0x10e/0x9b0 [ 538.247151][T12512] evdev_events+0x1bb/0x390 [ 538.253240][T12512] input_pass_values+0x6c7/0x890 [ 538.259767][T12512] input_handle_event+0xb29/0x14d0 [ 538.266465][T12512] input_inject_event+0x1cd/0x390 [ 538.273079][T12512] kd_sound_helper+0x20f/0x280 [ 538.279435][T12512] input_handler_for_each_handle+0xd7/0x250 [ 538.286926][T12512] call_timer_fn+0x19a/0x620 [ 538.293111][T12512] __run_timers+0x6ef/0x960 [ 538.299205][T12512] run_timer_base+0x114/0x190 [ 538.305475][T12512] run_timer_softirq+0x1a/0x40 [ 538.311828][T12512] handle_softirqs+0x219/0x8e0 [ 538.318192][T12512] __irq_exit_rcu+0x109/0x170 [ 538.324475][T12512] irq_exit_rcu+0x9/0x30 [ 538.330292][T12512] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.337508][T12512] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.345074][T12512] smp_call_function_many_cond+0xd0f/0x1490 [ 538.352574][T12512] on_each_cpu_cond_mask+0x40/0x90 [ 538.359287][T12512] flush_tlb_mm_range+0x4a0/0x1790 [ 538.365984][T12512] copy_process+0x791a/0x9170 [ 538.372241][T12512] kernel_clone+0xfc/0x960 [ 538.378236][T12512] __do_sys_clone+0xce/0x120 [ 538.384402][T12512] do_syscall_64+0xcd/0x4c0 [ 538.390502][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.397974][T12512] } [ 538.400470][T12512] ... key at: [] __key.1+0x0/0x40 [ 538.407604][T12512] [ 538.407604][T12512] the dependencies between the lock to be acquired [ 538.407621][T12512] and SOFTIRQ-irq-unsafe lock: [ 538.421157][T12512] -> (tasklist_lock){.+.+}-{3:3} { [ 538.426495][T12512] HARDIRQ-ON-R at: [ 538.430663][T12512] lock_acquire+0x179/0x350 [ 538.437191][T12512] _raw_read_lock+0x5f/0x70 [ 538.443712][T12512] __do_wait+0x105/0x890 [ 538.449978][T12512] do_wait+0x21e/0x5a0 [ 538.456068][T12512] kernel_wait+0x9f/0x160 [ 538.462597][T12512] call_usermodehelper_exec_work+0xf1/0x170 [ 538.470528][T12512] process_one_work+0x9cf/0x1b70 [ 538.477502][T12512] worker_thread+0x6c8/0xf10 [ 538.484134][T12512] kthread+0x3c5/0x780 [ 538.490233][T12512] ret_from_fork+0x5d7/0x6f0 [ 538.496846][T12512] ret_from_fork_asm+0x1a/0x30 [ 538.503628][T12512] SOFTIRQ-ON-R at: [ 538.507800][T12512] lock_acquire+0x179/0x350 [ 538.514329][T12512] _raw_read_lock+0x5f/0x70 [ 538.520849][T12512] __do_wait+0x105/0x890 [ 538.527116][T12512] do_wait+0x21e/0x5a0 [ 538.533381][T12512] kernel_wait+0x9f/0x160 [ 538.539733][T12512] call_usermodehelper_exec_work+0xf1/0x170 [ 538.547689][T12512] process_one_work+0x9cf/0x1b70 [ 538.554659][T12512] worker_thread+0x6c8/0xf10 [ 538.561278][T12512] kthread+0x3c5/0x780 [ 538.567377][T12512] ret_from_fork+0x5d7/0x6f0 [ 538.573991][T12512] ret_from_fork_asm+0x1a/0x30 [ 538.580811][T12512] INITIAL USE at: [ 538.584894][T12512] lock_acquire+0x179/0x350 [ 538.591337][T12512] _raw_write_lock_irq+0x36/0x50 [ 538.598208][T12512] copy_process+0x3ef4/0x9170 [ 538.604821][T12512] kernel_clone+0xfc/0x960 [ 538.611166][T12512] user_mode_thread+0xc7/0x110 [ 538.617865][T12512] rest_init+0x23/0x2b0 [ 538.623971][T12512] start_kernel+0x3e9/0x4d0 [ 538.630412][T12512] x86_64_start_reservations+0x18/0x30 [ 538.637814][T12512] x86_64_start_kernel+0x130/0x190 [ 538.644866][T12512] common_startup_64+0x13e/0x148 [ 538.651753][T12512] INITIAL READ USE at: [ 538.656272][T12512] lock_acquire+0x179/0x350 [ 538.663147][T12512] _raw_read_lock+0x5f/0x70 [ 538.670016][T12512] __do_wait+0x105/0x890 [ 538.676624][T12512] do_wait+0x21e/0x5a0 [ 538.683064][T12512] kernel_wait+0x9f/0x160 [ 538.689768][T12512] call_usermodehelper_exec_work+0xf1/0x170 [ 538.698050][T12512] process_one_work+0x9cf/0x1b70 [ 538.705367][T12512] worker_thread+0x6c8/0xf10 [ 538.712337][T12512] kthread+0x3c5/0x780 [ 538.718781][T12512] ret_from_fork+0x5d7/0x6f0 [ 538.725744][T12512] ret_from_fork_asm+0x1a/0x30 [ 538.732876][T12512] } [ 538.735548][T12512] ... key at: [] tasklist_lock+0x18/0x40 [ 538.743461][T12512] ... acquired at: [ 538.747440][T12512] _raw_read_lock+0x5f/0x70 [ 538.752139][T12512] send_sigurg+0xed/0xc80 [ 538.756663][T12512] sk_send_sigurg+0x76/0x360 [ 538.761448][T12512] unix_stream_sendmsg+0xeb3/0x11d0 [ 538.766841][T12512] ____sys_sendmsg+0xa98/0xc70 [ 538.771818][T12512] ___sys_sendmsg+0x134/0x1d0 [ 538.776692][T12512] __sys_sendmmsg+0x200/0x420 [ 538.781562][T12512] __x64_sys_sendmmsg+0x9c/0x100 [ 538.786705][T12512] do_syscall_64+0xcd/0x4c0 [ 538.791410][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.797494][T12512] [ 538.799818][T12512] -> (&f_owner->lock){....}-{3:3} { [ 538.805155][T12512] INITIAL USE at: [ 538.809149][T12512] lock_acquire+0x179/0x350 [ 538.815415][T12512] _raw_write_lock_irq+0x36/0x50 [ 538.822115][T12512] __f_setown+0x61/0x3c0 [ 538.828112][T12512] f_setown+0x122/0x290 [ 538.834021][T12512] do_fcntl+0xfa6/0x15a0 [ 538.840020][T12512] __x64_sys_fcntl+0x163/0x200 [ 538.846543][T12512] do_syscall_64+0xcd/0x4c0 [ 538.852828][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.860479][T12512] INITIAL READ USE at: [ 538.864913][T12512] lock_acquire+0x179/0x350 [ 538.871619][T12512] _raw_read_lock_irqsave+0x74/0x90 [ 538.879014][T12512] send_sigurg+0x5f/0xc80 [ 538.885549][T12512] sk_send_sigurg+0x76/0x360 [ 538.892341][T12512] unix_stream_sendmsg+0xeb3/0x11d0 [ 538.899734][T12512] ____sys_sendmsg+0xa98/0xc70 [ 538.906795][T12512] ___sys_sendmsg+0x134/0x1d0 [ 538.913671][T12512] __sys_sendmmsg+0x200/0x420 [ 538.920544][T12512] __x64_sys_sendmmsg+0x9c/0x100 [ 538.927685][T12512] do_syscall_64+0xcd/0x4c0 [ 538.934389][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.942473][T12512] } [ 538.945059][T12512] ... key at: [] __key.1+0x0/0x40 [ 538.952278][T12512] ... acquired at: [ 538.956170][T12512] _raw_read_lock_irqsave+0x74/0x90 [ 538.961565][T12512] send_sigio+0x31/0x3e0 [ 538.966047][T12512] kill_fasync+0x214/0x510 [ 538.970662][T12512] sock_wake_async+0x132/0x160 [ 538.975632][T12512] sock_def_readable+0x522/0x600 [ 538.980766][T12512] unix_stream_sendmsg+0xeeb/0x11d0 [ 538.986163][T12512] ____sys_sendmsg+0xa98/0xc70 [ 538.991137][T12512] ___sys_sendmsg+0x134/0x1d0 [ 538.996010][T12512] __sys_sendmmsg+0x200/0x420 [ 539.000889][T12512] __x64_sys_sendmmsg+0x9c/0x100 [ 539.006029][T12512] do_syscall_64+0xcd/0x4c0 [ 539.010731][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.016816][T12512] [ 539.019139][T12512] -> (&new->fa_lock){....}-{3:3} { [ 539.024308][T12512] INITIAL USE at: [ 539.028219][T12512] lock_acquire+0x179/0x350 [ 539.034317][T12512] _raw_write_lock_irq+0x36/0x50 [ 539.040839][T12512] fasync_remove_entry+0xb2/0x1e0 [ 539.047449][T12512] fasync_helper+0xaf/0xd0 [ 539.053451][T12512] fsnotify_fasync+0x48/0x70 [ 539.059641][T12512] __fput+0x96b/0xb70 [ 539.065206][T12512] task_work_run+0x150/0x240 [ 539.071398][T12512] exit_to_user_mode_loop+0xeb/0x110 [ 539.078291][T12512] do_syscall_64+0x3f6/0x4c0 [ 539.084474][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.091951][T12512] INITIAL READ USE at: [ 539.096296][T12512] lock_acquire+0x179/0x350 [ 539.102827][T12512] _raw_read_lock_irqsave+0x74/0x90 [ 539.110050][T12512] kill_fasync+0x138/0x510 [ 539.116486][T12512] sock_wake_async+0xf1/0x160 [ 539.123194][T12512] sk_send_sigurg+0x179/0x360 [ 539.129895][T12512] unix_stream_sendmsg+0xeb3/0x11d0 [ 539.137116][T12512] ____sys_sendmsg+0xa98/0xc70 [ 539.143956][T12512] ___sys_sendmsg+0x134/0x1d0 [ 539.150660][T12512] __sys_sendmmsg+0x200/0x420 [ 539.157363][T12512] __x64_sys_sendmmsg+0x9c/0x100 [ 539.164330][T12512] do_syscall_64+0xcd/0x4c0 [ 539.170860][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.178771][T12512] } [ 539.181274][T12512] ... key at: [] __key.0+0x0/0x40 [ 539.188410][T12512] ... acquired at: [ 539.192214][T12512] lock_acquire+0x179/0x350 [ 539.196921][T12512] _raw_read_lock_irqsave+0x74/0x90 [ 539.202315][T12512] kill_fasync+0x138/0x510 [ 539.206929][T12512] evdev_pass_values+0x619/0x9b0 [ 539.212065][T12512] evdev_events+0x1bb/0x390 [ 539.216767][T12512] input_pass_values+0x6c7/0x890 [ 539.221903][T12512] input_handle_event+0xf00/0x14d0 [ 539.227213][T12512] input_inject_event+0x1cd/0x390 [ 539.232436][T12512] evdev_write+0x457/0x750 [ 539.237050][T12512] vfs_write+0x2a0/0x1150 [ 539.241586][T12512] ksys_write+0x1f8/0x250 [ 539.246162][T12512] do_syscall_64+0xcd/0x4c0 [ 539.250868][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.256957][T12512] [ 539.259285][T12512] [ 539.259285][T12512] stack backtrace: [ 539.265183][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.8.2057 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 539.265230][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.265253][T12512] Call Trace: [ 539.265264][T12512] [ 539.265280][T12512] dump_stack_lvl+0x116/0x1f0 [ 539.265326][T12512] check_irq_usage+0x7dc/0x920 [ 539.265369][T12512] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 539.265437][T12512] ? check_path.constprop.0+0x24/0x50 [ 539.265484][T12512] ? __lock_acquire+0x1285/0x1c90 [ 539.265526][T12512] __lock_acquire+0x1285/0x1c90 [ 539.265580][T12512] lock_acquire+0x179/0x350 [ 539.265623][T12512] ? kill_fasync+0x138/0x510 [ 539.265665][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.265711][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.265759][T12512] _raw_read_lock_irqsave+0x74/0x90 [ 539.265799][T12512] ? kill_fasync+0x138/0x510 [ 539.265838][T12512] kill_fasync+0x138/0x510 [ 539.265879][T12512] evdev_pass_values+0x619/0x9b0 [ 539.265928][T12512] evdev_events+0x1bb/0x390 [ 539.265969][T12512] input_pass_values+0x6c7/0x890 [ 539.266011][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266063][T12512] input_handle_event+0xf00/0x14d0 [ 539.266103][T12512] ? _copy_from_user+0x59/0xd0 [ 539.266160][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266209][T12512] input_inject_event+0x1cd/0x390 [ 539.266256][T12512] evdev_write+0x457/0x750 [ 539.266300][T12512] ? __pfx_evdev_write+0x10/0x10 [ 539.266343][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266387][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266431][T12512] ? security_file_permission+0x71/0x210 [ 539.266475][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266519][T12512] ? rw_verify_area+0xcf/0x680 [ 539.266566][T12512] ? __pfx_evdev_write+0x10/0x10 [ 539.266606][T12512] vfs_write+0x2a0/0x1150 [ 539.266660][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266705][T12512] ? __pfx_vfs_write+0x10/0x10 [ 539.266754][T12512] ? find_held_lock+0x2b/0x80 [ 539.266815][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266863][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.266907][T12512] ? __fget_files+0x20e/0x3c0 [ 539.266969][T12512] ksys_write+0x1f8/0x250 [ 539.267020][T12512] ? __pfx_ksys_write+0x10/0x10 [ 539.267077][T12512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.267126][T12512] do_syscall_64+0xcd/0x4c0 [ 539.267174][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.267211][T12512] RIP: 0033:0x7f10e0d8e969 [ 539.267240][T12512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.267276][T12512] RSP: 002b:00007f10e1c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.267310][T12512] RAX: ffffffffffffffda RBX: 00007f10e0fb5fa0 RCX: 00007f10e0d8e969 [ 539.267335][T12512] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 539.267359][T12512] RBP: 00007f10e0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 539.267382][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.267405][T12512] R13: 0000000000000000 R14: 00007f10e0fb5fa0 R15: 00007fff8f1c8238 [ 539.267441][T12512] [ 539.578347][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.743440][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.893967][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.904776][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.974190][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.004557][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.012218][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 540.116919][ T5898] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 540.341449][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 541.176476][ T12] bridge_slave_1: left allmulticast mode [ 541.185193][ T12] bridge_slave_1: left promiscuous mode [ 541.190940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.200719][ T12] bridge_slave_0: left allmulticast mode [ 541.209144][ T12] bridge_slave_0: left promiscuous mode [ 541.222944][ T5898] usb 7-1: device descriptor read/all, error -71 [ 541.246184][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.399176][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.413848][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.433428][ T12] bond0 (unregistering): Released all slaves [ 541.695264][ T12] hsr_slave_0: left promiscuous mode [ 541.711547][ T12] hsr_slave_1: left promiscuous mode [ 541.717360][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.741811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.749588][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.761476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.781583][ T12] veth1_macvtap: left promiscuous mode [ 541.791526][ T12] veth0_macvtap: left promiscuous mode [ 541.797152][ T12] veth1_vlan: left promiscuous mode [ 541.811578][ T12] veth0_vlan: left promiscuous mode [ 542.210520][ T12] team0 (unregistering): Port device team_slave_1 removed [ 542.230983][ T12] team0 (unregistering): Port device team_slave_0 removed [ 543.045205][ T3978] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.092828][ T3978] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.147392][ T3978] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.217131][ T3978] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.344739][ T3978] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.393507][ T3978] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.448352][ T3978] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.506135][ T3978] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.648155][ T3978] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.697336][ T3978] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.777606][ T3978] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.863718][ T3978] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.000621][ T3978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.038890][ T3978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.124258][ T3978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.178836][ T3978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.259424][ T3978] bridge_slave_1: left allmulticast mode [ 544.270932][ T3978] bridge_slave_1: left promiscuous mode [ 544.279849][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.307531][ T3978] bridge_slave_0: left allmulticast mode [ 544.313314][ T3978] bridge_slave_0: left promiscuous mode [ 544.319020][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.329338][ T3978] bridge_slave_1: left allmulticast mode [ 544.335190][ T3978] bridge_slave_1: left promiscuous mode [ 544.340897][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.350385][ T3978] bridge_slave_0: left allmulticast mode [ 544.356330][ T3978] bridge_slave_0: left promiscuous mode [ 544.363380][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.374798][ T3978] bridge_slave_1: left allmulticast mode [ 544.381716][ T3978] bridge_slave_1: left promiscuous mode [ 544.387435][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.396504][ T3978] bridge_slave_0: left allmulticast mode [ 544.402249][ T3978] bridge_slave_0: left promiscuous mode [ 544.407933][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.419977][ T3978] vlan2: left promiscuous mode [ 544.426267][ T3978] vlan1: left promiscuous mode [ 544.432591][ T3978] bridge0: port 3(vlan2) entered disabled state [ 544.440292][ T3978] bridge_slave_1: left allmulticast mode [ 544.446071][ T3978] bridge_slave_1: left promiscuous mode [ 544.451955][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.460611][ T3978] bridge_slave_0: left allmulticast mode [ 544.466492][ T3978] bridge_slave_0: left promiscuous mode [ 544.472290][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.482278][ T3978] bridge_slave_1: left allmulticast mode [ 544.488186][ T3978] bridge_slave_1: left promiscuous mode [ 544.494707][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.504302][ T3978] bridge_slave_0: left allmulticast mode [ 544.509961][ T3978] bridge_slave_0: left promiscuous mode [ 544.515972][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.805343][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.833889][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.844048][ T3978] bond0 (unregistering): Released all slaves [ 544.967361][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.979879][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.995758][ T3978] bond0 (unregistering): Released all slaves [ 545.093462][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.113536][ T3978] bond_slave_0: left allmulticast mode [ 545.122825][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.142511][ T3978] bond_slave_1: left allmulticast mode [ 545.148981][ T3978] bond0 (unregistering): Released all slaves [ 545.310292][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.323975][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.337630][ T3978] bond0 (unregistering): Released all slaves [ 545.428815][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.439903][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.452596][ T3978] bond0 (unregistering): Released all slaves [ 545.575199][ T3978] tipc: Disabling bearer [ 545.595571][ T3978] tipc: Left network mode [ 546.177296][ T3978] hsr_slave_0: left promiscuous mode [ 546.193695][ T3978] hsr_slave_1: left promiscuous mode [ 546.199551][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.209426][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.220923][ T3978] hsr_slave_0: left promiscuous mode [ 546.226928][ T3978] hsr_slave_1: left promiscuous mode [ 546.232909][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.240313][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.248575][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.256886][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.265104][ T3978] macvlan0: left promiscuous mode [ 546.270724][ T3978] batadv_slave_1: left promiscuous mode [ 546.280161][ T3978] hsr_slave_0: left promiscuous mode [ 546.286198][ T3978] hsr_slave_1: left promiscuous mode [ 546.292332][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.300316][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.308383][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.320053][ T3978] hsr_slave_0: left promiscuous mode [ 546.341949][ T3978] hsr_slave_1: left promiscuous mode [ 546.347655][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.355573][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.364173][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.371648][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.383706][ T3978] hsr_slave_0: left promiscuous mode [ 546.389506][ T3978] hsr_slave_1: left promiscuous mode [ 546.395370][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.402861][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.410624][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.418641][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.447292][ T3978] veth1_macvtap: left promiscuous mode [ 546.461603][ T3978] veth0_macvtap: left promiscuous mode [ 546.467186][ T3978] veth1_vlan: left promiscuous mode [ 546.481459][ T3978] veth0_vlan: left promiscuous mode [ 546.503411][ T3978] veth1_macvtap: left promiscuous mode [ 546.508953][ T3978] veth0_macvtap: left promiscuous mode [ 546.516804][ T3978] veth1_vlan: left promiscuous mode [ 546.522563][ T3978] veth0_vlan: left promiscuous mode [ 546.529163][ T3978] veth1_macvtap: left promiscuous mode [ 546.534892][ T3978] veth0_macvtap: left promiscuous mode [ 546.540517][ T3978] veth1_vlan: left promiscuous mode [ 546.545963][ T3978] veth0_vlan: left promiscuous mode [ 546.554416][ T3978] veth1_macvtap: left promiscuous mode [ 546.559950][ T3978] veth0_macvtap: left promiscuous mode [ 546.565632][ T3978] veth1_vlan: left promiscuous mode [ 546.570940][ T3978] veth0_vlan: left promiscuous mode [ 547.094857][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 547.128563][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 547.401001][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 547.437804][ T3978] team0 (unregistering): Port device team_slave_0 removed