last executing test programs: 4m22.611805824s ago: executing program 1 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0xe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 4m22.494763947s ago: executing program 1 (id=736): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0xfffffeff, 0x2, {0x1, @raw_data="d1726cfa71d4ed4a810d74ff07ffc9488c698dc4e2b2cff7f2f005ff0fc1da163d964d1ecd6f9f91c61257338d3a02f2243bb2d85ccbaacc4812de079f6b6d42fe5cbbe2b284f9a8e552408c8f46173ce0571ae46e206ba928c34e1c27059ff9d5409ed4440954d1dd4a48452bb880a71684e6270228a478d0e5e4a8de37a918bdf2e18069ff646d4d6edc1ab8b608b5efa46408362badc01775247fd8a0ea6e823c3e0b7cc8438902987e2a0726ec864c6106bb58de94971887df9f5be363eab7f3b1af43096e79"}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x6, 0x8, 0x1, {0x9, @win={{0x1, 0x4ec0, 0x2, 0x5}, 0x2, 0xe, 0x0, 0x4, 0x0, 0x1}}, 0x4}) 4m22.197558743s ago: executing program 1 (id=737): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) close(r0) 4m21.903943665s ago: executing program 1 (id=742): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') close(0x3) 4m21.614413083s ago: executing program 1 (id=746): r0 = syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa4e478, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="4ea4164323d0136eb511b12a2291c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0b1230751ab4f5a0a0e534317a6966e83ce615c95af5aecc2e04a42b83b6c722a5849ba823ebc75abf6d436ee40d0000d9d095cbd2eb8a982eb3140257f971d3cd3343704372c5d549c9112e77eba95f84bb5997582b4a397e5d961a636b6dee95bf01261b669c55706daab553cbf1e0611078c94a612bab627d9e6c2bcd4cc27bcf0a848c16ad6022b17c7d73160094e20e27fe5af770d90d044ac583500356464edfd077a2d4ae86b09ee23c7da5b99ef3e3b1206da8e64917ba594644f982eb06245a49370f5ba8824580a3", @ANYBLOB="b33c2eccb337d507fdcb1f677a3fe3ee97310cdbd73fb1f04fe91f9bd474a7c6dcefa73615b1a19b3f6cd228dda607e0cd8bb81233907a213019c2ab188636ef61d4d947bf857949a9aebbd1eb62c119b4229389b19d2fbf3882b101cdf60b8605719592bd0297da3e87c664d4163fe0b272053ce9a56a9a50ed7878d5fd1d647c49a4c386e733e54a672ac27fc323ef156b", @ANYRESHEX, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d632310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded5222d3e1f98bea4c11ed226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb5000000000000000000", @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES8, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000480)) 4m19.391618945s ago: executing program 1 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 4m4.123580766s ago: executing program 32 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 2m50.56784271s ago: executing program 2 (id=1602): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, &(0x7f0000000940), 0x1, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 6.728589311s ago: executing program 0 (id=2771): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./bus\x00', 0x3010846, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@discard}, {@errors_remount}, {@errors_remount}, {@uid}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x24, 0x62d7, &(0x7f0000021240)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD+eM2fmvHPmnTPz7Po/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZre8Zu4TQ1mWNf7kf23Psuc1/r11cnu+7JWbPUIAAABgvX6R//3c9WnB4VXcqGmdf37Jt768uLi4mL175M/HPrO4mK6YzLKxLVmWXxc99YP3DDWvEzyWTQwNN10e7rH5kR7Xj/a4fqzH9eM9rt/S4/qJHtcv2wHLbC1+HpPf2e78n9uLXZrdkI3l1+3ucKvHhrYMD8ef5eSG8tssjp3I5rNT2Vw207J+se5Qvv5Xb2ls641Z3NZw07Z2NmbITx49HscwFPbx7pZtLd1n9KNXZ5M//cmjx//2/LM3dao9d0PL/RXjvH1XY5wfC0uKsQ5lW9I+ieMcbhrnzg7PyUjLOIfy2zX+3T7O51Y5zpGlYW6o9ud8IhvO//3tfD+NNv9YL+2nnWHZz27NsuzS0rDb11m2rWw429ayZHjp+ZkoZmTjPhpT6QXZ6Jrm6S2rmKeNOru7dZ62vybi839LuN3oCmNofpp+9NHxpuf954tXMk+jxqNe6bXSPgf7/VopyxyM8+Lb+YN+vOMc3B0e/6O3rTwHO86dDnMwPe6mObir1xwcHh/Jx5yehKH8NktzcE/L+iP5loby+sxt3efg9PmHz04vfPgjd80/fOzk3Mm50/v27JnZt3//wYMHp0/Mn5qbKf6+wr1dftuy4fQa2BX2XXwNvLxt3eapuvj58WXH3yt9HU50eR1ub1u336/D0fYHN7QxL8jlc7p4bbyzsdMnLg9nK7zG8ufnjvW/DtPjbnodjja9Dju+p3R4HY6u4nXYWOfsHav7zDLa9KfTGFZ+L1jfHNzeNAfbP4+0z8F+fx4pyxycCPPiu3es/F6wM4z38am1fh4ZWTYH08MNx57GkvR5f+JgXjrNy5sbV1wznl1YmDt39yPHzp8/tycLZUO8sGmutM/XbU2PKVs2X4fXPF8Pz7/k8Zs7LN8e9tXEXY2/JlZ8rhrr3HN39+cqf3frvD9blu7NQumzjd6fnd7NG/tzPMs++42PPvi1Rz/7mhX3Z6Pf/Nj0+j+Lp7606fg7tsLxN/b9vyy2l+7qsZGx0eL1O5L2zljL8bj1qRrNj11D+bafm17d8Xgs/Nno4/ENXY7HO9rW7ffxeKz9wcXj8VCvn3asT/vzORHmyamZ7sfjxjo79q51To52PR7fGupQ2P+vCJ1C6oua5s5K8zZta3R0LDyu0biF1nm6r2X9sdCbNbb15N7woTCNcnXz9PZbi/VHmm4XbdQ8nWxbt9/zNP3sa6V5OtTrp29Xpv35nAjz4oZ93edpY52n71n/sXNr/GfTsXO81xwcGxlvjHksTcL8eJ8tbo1z8O7seHYmO5XN5teO5/NpKN/W1L2rO1aOhz8bfazc0WUO3t62br/nYHofW2nuDY0uf/B90P58ToR58cS93edgY53XHujvZ9fbiyVLP4pu+uza/vO1lX7mdXPbbrpac6UxksZj+caB7j+bbaxz6uBa+8zu++nOsOSaDvup/fW70mtqNtuY/bQjjPPZgyvvp8Z4Gut85tAq59PhLMsufvD+/Oe94fcrFy9858stv3fp9Dudix+8/8fXnvintYwfgMH3y6JsK97rmn4ztZrf/wMAAAADIfb9w6Em+n8AAACojNj3x/8Vnuj/AQAAoDJi3z8aalKF/v+Pe6+y47XPzv/yYpaS+YtBvD7thgeK9WLGdSZcnlxc0lh+/xfn/ucfL65ueMNZlv38gT/quP6OB+K4CpNhnE+9rnX5Ml++a1XbPvrQxbTd5vz658L9x8ez2mnQKYI7k2XZV6//VL6dyfdczuvTDxzN64OXHn+ssc5zh4rL8fbPvLBY/69C+PfwiWMtt38m7Icfhjrzps77I97uS5dfsfPAu5a2F283tOu6/GE/8d7ifuP35Hz6sWL9uJ9XGv/XPvnklxrrP/KyzuO/ONx5/E+G+/1iqP/74mL95uegcTne7uNh/HF78XZ3f+HrHcf/1CeK9c++vljvaKhx+7eHy7tf/+x88/56ZOhYy+PK3lCsF7c/850/za+P9xfvv338E0cut+yP9vnx9L8X9zPdtn5cHrcT/UPb9hv30zw/4/af/JOjLfu51/afevCZFzfut337d7atd/aDd+TbX7q/1m9s+uuPf6rj9uJ4Dv/92ZbHc/jt4XUctv/Ee8N8DNf/31PF/bV/u8LRt7cef+L6n9t+seXxRG/8abH9p151Mq9bJrZuu+Z511536aWNfZdl395S3F+v7Z/8mzMt4//8jcX+iNfHjH779lcSt3/uQ1OnzyxcmJ9Ne/XR6/PvznlzMZ443uvDsbX98pEz5983d25yZnImyyar+xV6V+wLof64KJe6r7247Ah6x0Ph+bz5L7+67bZ/+2Rc/h/vLJZfflPxvvXysN6nw/Lt4flb2/aXe+KWG/PX99DTYYSLy78veD127v7vg72+3zcXHn/754I438++6H35fmhcl79vxNf1Osf/vdnifr4S9uti+GbmXTcuba95/fjdCJffUbze173/wmEuPq9/F57vt/ywuP84rvh4vxc+x3x9R+vxLs6Pr1wcbr///Fs8LoXjSXapuD6uFff35edu7Di8+D0k2aWb8st/lu7npjU9zJUsfHhh+tT86QuPTJ+fWzg/vfDhjxx5+MyF0+eP5N/leeT9vW6/dHzalh+fZuf235PlR6szRbnKNnv8Zx86Pntg5rbZuRPHLpw4/9DZuXMnjy8sHJ+bXbjt2IkTcx/qdfv52fv27D2078DeqZPzs/cdPHRo36Gp+dNnGsMoBtXD/pkPTJ0+dyS/ycJ99xzac++998xMPXxmdu6+AzMzUxd63T5/b5pq3PoPp87NnTp2fv7huamF+Y/M3bfn0P79e3t+G+DDZ08sTE6fu3B6+sLC3Lnp4rFMns8XN977et2ealr4fvF5tt1Q8UV82dvu3J++n7Xhix9d8a6KVdq+QPTZ8F0033z+2YOruRz7/rFQkyr0/wAAAEAu9v3joSb6fwAAAKiM2PdvCTXR/wMAAEBlxL5/ItT0XwJq0v9XLv+/4+Kqti//L//fvL/k/2uW/39H2fL/xfFC/r8/1pu/r0P+f1Uryv/L/8v/y//L/9MHZcv/x75/a5b5/T8AAABUVOz7t4Wa6P8BAACgMmLff02oif4fAAAAKiP2/c8LNalJ/y//L/8v/y//L//fefvy/4NJ/r+7kuX/J9oXyP9vfv4/q1f+/1I/x78J+f+tzRfk/ymjsuX/Y99/bahJTfp/AAAAqIPY918XaqL/BwAAgMqIff/1oSb6fwAAAKiM2PdvDzWpSf8v/7+u/H/KXA1u/r/Ysvy//L/8v/x/Vcj/d1ey/P8y8v+bn/93/v+Byv+3kP+njMqW/499//NDTWrS/wMAAEAdxL7/BaEm+n8AAAAon9Eru1ns+18YarKs/7/CDQAAAACbLvb9N2RtQfCa/P5f/t/5/0t7/v8x+X/5/0L58/8jmfx/ecj/dyf/30M/8v+X5P/l/+X/5f+Jypb/z/v+bCJ7UahJTfp/AAAAqIPY998YaqL/BwAAgMqIff+vhJro/wEAAKAyYt+/I9SkJv2//H9l8v8/a37qKpH/d/5/+f+g/Pl/5/8vE/n/7uT/e3D+f/l/+X/5f/pqoWOntHn5/9j33xRqUpP+HwAAAOog9v03h5ro/wEAAKAyYt//q6Em+n8AAACojNj37ww1qUn/L/9f8vx/TI7W8fz/8v/y/0GZ8/8T8v+lI//fnfx/D/L/8v/y//L/9NXC94vPs+02K/8f+/4Xh5rUpP8HAACAOoh9/0tCTfT/AAAAUBmx739pqIn+HwAAACoj9v2ToSY16f/Xkv8fuiT/v5KrfP7/8VWc/7+F/P+m5P9H5f8Ldcr/Z/L/pSP/3538fw/y//L/8v/y//RV2fL/se+/JdSkJv0/AAAA1EHs+3eFmuj/AQAAoDJi339rqIn+HwAAACoj9v27Q01q0v87//9A5P8z+f+ByP87/38g/9+Z/P/GkP/vTv6/B/l/+X/5f/l/+qps+f/Y978s1KQm/T8AAADUQez7bws10f8DAABAZcS+/+WhJvp/AAAAqIzY998ealKT/l/+X/5f/l/+X/6/8/Y3PP9/Sf6/H+T/u5P/70H+X/5f/l/+n74qW/4/9v2vCDWpSf8PAAAAdRD7/jtCTfT/AAAAUBmx778z1ET/DwAAAJUR+/6pUJOa9P/y//L/1cz//6f8f5fty/+XNP/v/P99If/fnfx/D/L/8v/9yP+PhQXy//L/bHr+P35ei5dj339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f+rmf93/v9u219X/v+lS/cr/1+Q/y8X+f/u5P976Gf+f4v8f23z/+s6//+Y/D+Vstn5//bLse/fE2pSk/4fAAAA6iD2/XtDTfT/AAAAUBmx798XaqL/BwAAgMqIff89oSY16f/l/+X/5f/l/53/v/P25f8Hk/x/d/3P/8eHKP/v/P/y//3J/zv/P9VStvx/7PvvDTWpSf8PAAAAdRD7/v2hJvp/AAAAqIzY9x8INdH/AwAAQGXEvv9gqElN+n/5f/l/+X/5f/n/ztuX/x9M8v/dOf9/D/L/8v8DnP9vzC35f8qmbPn/2PcfCjWpSf8PAAAAdRD7/leGmuj/AQAAoDJi3/9roSb6fwAAACih8Su6Vez7fz3UpCb9v/y//L/8v/z/Juf/x3rl/8fl/+X/10D+vzv5/x7k/+X/Bzj/v8L5/68NV8v/synKlv+Pff99oSY16f8BAACgDmLf/xuhJvp/AAAAqIzY978q1ET/DwAAAJUR+/7DoSY16f/l/zco/x8Xljb/H5PM8v/5Avl/5/+X/x9Y8v/dyf/3IP8v/1+9/H+/z//f/jadyP/TSdny/7Hvf3WoSU36fwAAAKiD2PffH2qi/wcAAIDKiH3/a0JN9P8AAABQGbHvf22oSU36f/l/5//f/PP/j7WMXf5/6Xby/wX5f/n/tZD/707+vwf5f/l/+X/n/6evypb/j33/60JNatL/AwAAQB3Evv/1oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/+X/9/8/L/z/8v/F+T/5f/7Qf6/O/n/HuT/5f/l/+X/6auy5f9j3/+boSY16f8BAACgDmLf/0Coif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/5f/l/+X/O29f/n8wyf93N2D5/19cF5bL/xfk/8s9/rXm/0fbLl+V/P8PVsr/L25pv738P1dD2fL/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H93Kf//XKd3riblyP87/38b+f9yj9/5/+X/Wa5s+f/Y97891KQm/T8AAADUQez7Hww10f8DAABAZcS+/x2hJvp/AAAAqIzY978z1KQm/b/8v/P/y//L/8v/d96+/P9gkv/vbsDO/y//30b+v9zjvyr5//+S/2ewlS3/H/v+h0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/707+vwf5f/n/suX/nf+fAVe2/H/s+98TarL6/n9i1WsCAAAAV1P7r5OS2Pf/TqhJTX7/DwAAAHUQ+/7fDTXR/wMAAEBlxL7/90JNatL/y/8PSv7f+f8z5/+X/297PPL/8v+dbFz+Px551pT/39Jr+/L/8v/y/4M7fvl/+X+WK1v+P/b9vx9qUpP+HwAAAOog9v3vDTXR/wMAAMBA6PR/stvFvv9IqIn+HwAAACoj9v1HQ01q0v/L/8v/y/+XNP//F7v+5bvfeuvRPfL/8v/y/2uyoef/b7z4nf9f/l/+P5H/l/+X/6dd2fL/se8/Fmqy1Pi92Qn+AQAAYLDFvv8PQk1q8vt/AAAAqIPY9x8PNdH/AwAAQGXEvn821KQm/b/8/ybm/0ezLJP/l/+v4Pn/4/4YpPz/1JYByv/Hg678f0cbmv9/11JOXP5/rfn/8Y5L2/P/Q/L/LeT/1zz+b2ZZtmHjv/iv8v/y/7QrW/4/9v1zoSY16f8BAACgDkLfP3yiqEtX6P8BAACgMmLffzLURP8PAAAAlRH7/veFmtSk/5f/d/5/+X/5f+f/77z90ub/nf+/K/n/7sqT/+/M+f/l/wd5/M7/L//PcmXL/8e+fz7UpCb9PwAAANRB7PvfH2qi/wcAAIDKiH3/B0JN9P/w/+zdyZNlZZnH8ZuQRFUF0RG960Uvuve96k1vWDSrXnT/Ab1gw6YjulvFAeeJwnnEeR7QUBEHHEARUVGcBScUcUTFGcQJJ0SlDCqf56kcTp6bWXUz77nv+/ksfIqE5F4IrOJXybcOAABAM3L3Pzhu6WT/6//1/032/0f0/2Ovr//X/7dM/z9O/z+H/l//r//X/7NQU+v/c/c/JG7pZP8DAABAD3L3XxS32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+v8n+/z/u/r/7/13/v9vr6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+i+MW+x8AAACakbv/kXFLJ/t/W/+/Nuuz/8+MV//fUv/v+f+7vr7+X//fssPt/y994Hs+/b/+X/8f9P/6f/0/202t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7n9M3GL/AwAAQDNy9z82bulk/3v+v+f/6//1//r/4dfX/68mz/8f11P/f/Gt5150z7X/eN1+Xl//r//X/+v/Wayp9f+5+x8Xt3Sy/wEAAKAHufsfH7fY/wAAANCM3P1PiFvsfwAAAFhBxwY/mrv/iXFLJ/tf/6//1/9H/39U/6//1/+3QP8/btn9/9CPl5t5/n/7/f+DFvJOl/f+x+j/9f/sNLX+P3f/k+KWTvY/AAAA9CB3/5PjFvsfAAAApmvef1i2Te7+S+IW+x8AAACakbv/eNzSyf7X/x98//9X/f9q9P+e/6//1/83Qf8/btn9/zz6//b7/4O07Pev/9f/s9PU+v/c/ZfGLZ3sfwAAAOhB7v6nxC32PwAAADQjd/9T4xb7HwAAAJqRu/9pcUsn+1//7/n/+n/9/+H3/xvf2er/T/1d1f8vjv5/nP5/Dv3/mfbz5+j/9f/6fzbbZ/9/38h32wvp/3P3Pz1u6WT/AwAAQA9y9z8jbrH/AQAAoBm5+58Zt9j/AAAA0Izc/c+KWzrZ//p//b/+X/9/2v3/zn/0TvL8/2H6/8Oh/x83mf5/bX3ww/r/le//Pf9f/6//Z4upPf8/d/+z45ZO9j8AAAD0IHf/c+KWkf2/75/MBwAAAJYqd/9z4xZf/wcAAICVl9VZ7v7nxS2d7H/9v/5f/6//P/zn/69+/3/dpven/58W/f+4yfT/u9D/6/9X+f3r//X/7DS1/j93//Pjlk72PwAAAPQgd/9lcYv9DwAAAM3I3f+CuMX+BwAAgGbk7n9h3NLJ/h/u/0/9/kn3/9sj4Zn+P+n/2+7/88+o/x/t/8/3/P8+6f/H6f/n0P/r//X/u/X/x+Z9vv6fIVPr/3P3vyhu6WT/AwAAQA9y9784brH/AQAAoBm5+18St9j/AAAA0Izc/S+NWzrZ/57/r//X/69e/+/5/xuW+fz/2aH3/+v6/z1abv+/dn/+CKr/P733r//X/6/y+2+y/z9ntvX5/yO/CoD+nyFT6/9z978sbulk/wMAAEAPcve/PG6x/wEAAGA1bP5vB4aeFTeb1e5/Rdxi/wMAAEAzcve/Mm5pZ/+PPqtT/6//1/+f/HT9v/5/oP9fn02n//f8/73y/P9x+v859P8H0c+vN9b/X77b50+h/7/k4J7//6/zPl//z5At/f8Npz6+rP4/d/+r4pZ29j8AAAB0L3f/q+MW+x8AAACakbv/NXGL/Q8AAADNyN3/2rilk/1/4P3/yK8+oP/X/0+k//f8f/3/4OtP6/n/+v+90v+P0//Pof/3/H/P/9f/c+Y2/Svjlv5/k2X1/7n7Xxe3dLL/AQAAoAe5+18ft9j/AAAA0Izc/ZfHLfY/AAAANCN3/xvilk72v+f/6//1//p//f/w6+v/V9MZ9fdn6f+L/l//r//X/+v/WYCp9f9bd39/+x8AAAB68MaT/3s0fr7e/gcAAIAW5e5/U9xi/wMAAEAzcve/OW7pZP/r/w+2/8+P6//1/zP9v/5f/38oun3+/9rQj0Q77dL/3/y/x/9r60f0//p//b/+X//PHv39yO+bRP9/4tS/Xebuf0vc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+98at9j/AAAA0Izc/VfGLfvc/2PNw5Tp/z3/X/+v/9f/D7++/n81ddv/75Hn/8+h/9f/6//1/yzUJPr/Tb+du/9tcYuv/wMAAEAzcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/8ffn39/2rS/4/T/8+xSv3/lWfQ/68Pf3jZ/fyZWvb71//r/9lpav1/7v6r4pZO9j8AAAD0IHf/u+IW+x8AAACakbv/3XGL/Q8AAADNyN3/nrilk/2v/9f/6//1//r/4dfX/68m/f84/f9sNrt65A0M9f8njkyz//f8/8m9f/2//p+dptb/5+5/b9zSyf4HAACAHuTuvzpusf8BAACgGbn7r4lb7H8AAABoRu7+98Utnex//b/+X/+v/9f/D7++/n816f/H6f/nWKXn/+v/J/f+9f/6f3aaWv+fu//9cUsn+x8AAAB6kLv/2rjF/gcAAIBm5O7/QNxi/wMAAEAzcvdfF7d0sv/1//p//b/+f6D/P/l/df2//n8VHVz/P9P/6//1/3Po//X/+n+2m1r/n7v/g3FLJ/sfAAAAepC7//q4xf4HAACAZuTu/1DcYv8DAABAM3L3fzhu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9/xz6f/2//l//z0IN9/+XLK3/z93/kbilk/0PAAAAPcjdf0PcYv8DAABAM3L3fzRusf8BAACgGbn7Pxa3dLL/9f/6/639/2ym/9f/6/83DPT/t917xd/Vby+g/z860/8vnP5/nP5/Dv1/m/3/WbOG+v9ju36+/p8pmtrz/3P33xi3dLL/AQAAoAe5+z8et9j/AAAA0Izc/Z+IW+x/AAAAaEbu/k/GLZ3sf/2//n/Bz/+/68KB96H/36D/X/n+3/P/V4D+f5z+fw79f5v9v+f/6/9Zmqn1/7n7PxW3dLL/AQAAoAe5+z8dt9j/AAAA0Izc/Z+JW+x/AAAAaEbu/s/GLZ3sf/2//n/B/b/n/+v/9f+70P8fDv3/OP3/HPr/5vr//Ld7/b/+n+WYWv+fu/9zcUsn+x8AAAB6kLv/prjF/gcAAIBm5O6/OW6x/wEAAKAZufs/H7d0sv/1//p//f9q9v9Ht/T/Z8/0/6f+eP1/36bS/5933n/eov/X/+v/l9//e/6//p/lmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+39n/nzPbKFQ3DPX/0ajp/zfR/299//r/4X8+PP9f/6//P3hT6f89///03r/+X/+/yu9/X/3/P+/8fP0/LZpa/5+7/5a4pZP9DwAAAD3I3f+VuMX+BwAAgGbk7v9q3GL/AwAAQDNy998at3Sy/z3/X/+v/9f/L7z/v/7OjW/o/7fQ/x+O0+zv/+3G+Ib+P+j/9f/6/36f/3+2/p/FmVr/n7v/a3FLJ/sfAAAAepC7/7a4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9f9n+l7ahn/7/6NAHl93Pn6llv/9m+n/P/2eBptb/5+7/ZtzSyf4HAACAHuTu/1bcYv8DAABAM3L3fztusf8BAACgGbn7vxO3dLL/9f/6//b7/wv1/9teX/+v/2+Z/j9/RB+m/5+jn/5/0LL7+VV///p//T87Ta3/z91/e9zSyf4HAACAHuTu/27cYv8DAABAM3L3fy9usf8BAACgGbn7vx+3dLL/9f999f9rsx77f8//1//r/3ui/x+n/59D/6//1//r/1moqfX/ufvvWFvvcv8DAADAqvrvf/n/2/f6x95x8n+Pzn4Qt5w/O7HHL2MDAAAAE/fA7l9bn81+ePK3fP0fAAAAWpS7/0dxSyf7X//fV//f5/P/9f/6f/1/T4b6+6Hvo3ej/w/6f/2//l//r/9nAabW/+fu/3Hcsmn4re/7rxIAAACYktz9P4lbOvn6PwAAAPQgd/9P45Yd+98vBwgAAACrKnf/z+KWTr7+r/+feP8/O6D+P/44/f8G/b/+f+j19f+ryfP/x51h/39iTf+v/x+h/9f/6//Zbmr9f+7+O+OWTvY/AAAANGrLzyjk7r8rbrH/AQAAoBm5+38et9j/AAAA0Izc/XfHLZ3sf/3/off/maof4PP/j9W3PP+/8/7/sqODr6//1/+3TP8/zvP/59D/t9L/H9H/6/+Zhqn1/7n7fxG3dLL/AQAAoAe5+38Zt9j/AAAA0Izc/b+KW+x/AAAAaEbu/l/HLZ3sf/3/xJ//f1r9/x6e/6//76P/3+X12+n//+Hc4zdd8D/XXKX/55TD7P/zn4VD7v+P7PfPuZn+fw79fyv9v+f/6/+ZiMX3/+tbPrjf/j93/2/ilk72PwAAAPQgd/89cYv9DwAAAM3I3f/buMX+BwAAgGbk7v9d3NLJ/tf/6/+n0v/n3+sl9P/HT7v/PzabzZbS/2dT3Hv/7/n/+v+dPP9/nP5/Dv2//l//r/9noRbf/2/94H77/9z9v49bOtn/AAAA0IPc/X+IW3L/r+37p+4BAACAicnd/8e4xdf/AQAAoBm5+++NWzrZ//p//f9U+v/k+f+nPq+t5/9fUHFqn/3/P9W39P8HS/8/Tv8/h/5f/6//1/+zUFPr/3P3/ylu6WT/AwAAQA9y998Xt9j/AAAA0Izc/X+OW+x/AAAAaEbu/r/ELZ3sf/1/q/1/FvH6f/3/VPp/z//3/P/Dof8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xYAAP//2HxcCQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.151561844s ago: executing program 7 (id=2774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 5.74421057s ago: executing program 7 (id=2776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x20000400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.382926611s ago: executing program 7 (id=2778): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 4.870247934s ago: executing program 6 (id=2781): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0x4, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) 4.835596692s ago: executing program 7 (id=2782): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 4.75581881s ago: executing program 0 (id=2784): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) close(r0) 4.575204137s ago: executing program 3 (id=2785): unshare(0x6020400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001d00)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.308823109s ago: executing program 7 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000880), &(0x7f0000000100)=""/55}, 0x20) 4.275756949s ago: executing program 3 (id=2787): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 3.958813199s ago: executing program 7 (id=2789): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.541274414s ago: executing program 0 (id=2790): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 3.100831464s ago: executing program 3 (id=2792): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0xdd7, 0x10, 0x40, 0x106, 0x8, 0xfffffeff, 0x2174]}}) 2.973926653s ago: executing program 6 (id=2793): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 2.971823088s ago: executing program 5 (id=2794): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) syz_pidfd_open(r0, 0x0) 2.721252741s ago: executing program 3 (id=2795): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000540)={[{@gid}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@gid}, {@gid}, {@keep_last_dots}, {@errors_continue}]}, 0x1, 0x1536, &(0x7f0000006800)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltCkuSVhMSQW9KQhOQyJJchJJeJSeN+v18SkqRJkpDckvX/TMxfvfX+3/f91Zvf/53n+/nsz6znrP2svfZ5ztln730O33QZWqNRzaoNiAj+ELz4JwEAYgFgIABcAwABAJSNKxuX0Z9dYsIf2wj7cz2UfKVnwK4krn/WxvXP2rj+WRvXP2vj+mdtXP+sjeuftXH9GcvKNk/Pfy0vWXfh+/9ZGX/+/xdJLzn2i7Ulr+8KEPOvpnD9//+HfyCX6/9fK/hXVuL6Z21c/6wq9kpPgP0vwO//rCDbP+zh+mdtXH/GsrJf3guOhSt/P/qvXiDyn/wOxPe6+Cxf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZLav9LwYY4wxxhhjjDH25/HZrvQMGGOMMcYYY4wx9p+HIECCggBiIBvEQnbIAQIgJrP/WoiD6yA3XA95IC/kg/wQDwWgIGgwYIEghEJQGKJwAxSBG6EoFIPiUAIclIRScBOUhpuhDNwCZeFWKAe3QXmoABWhEtwOleEOqAJ3QlW4C6pBdagBNeFuqAX3QG24F+rAfVAX7od68ADUhwehATwEDeFhaASPQGN4FJpAU2gGzaHF/yj/BegBL0JP6AUJ0Bv6wEvQF/pBfxgAA+FlGASvwGB4FRJhCAyF12AYvA7D4Q0YASNhFLwJo+EtGANjYRyMhySYABPhbZgE78BkmAJTYRokw3SYAe/CTJgFs+E9mAPvw1yYB/NhAaTAB7AQFkEqfAiL4SNIgyWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF22AE74WPYBZ/AbtgDe+FT2Aef/Zv5p/8uvysCAgoUqFBhDMZgLMZiDsyBOTEn5sJcGMEIxmEc5sbcmAfzYD7Mh/EYjwWxIBo0SEhYCAthFKNYBItgUSyKxbE4OnRYCkthabwZy2AZLItlsRyWw/JYAStgJayElbEyVsEqWBWrYjWshjWwBt6Nd2NvrI21sQ7WwbpYN/P2FDbABtgQG2IjbISNsTE2wSbYDJthC2yBLbEltsJW2AbbYFtsi+2wHbbH9tgBO2BH7IidsBN2xs7YBbtgV+yG3dJfyAb4Ir6IvbCa6I19sA/2xcRs/XEADsCXcRC+gq/gq5iIQ3Aovoav4es4HE/hCByJo3AUVhZv4RgciyTGYxIm4USciJNwEk7GKTgFp2EyTscZOANn4iyche/hHHwf38d5OA8XYAqm4EJchKmYiovxNKbhElyKy3A5rsDluApX4ypci+twLW7ADbgJN+EW3ILbcBvuwB34MSoA/AT34B5MxH24D/fjfjyAB/AgHsR0TMdDeAgP42E8gkfwKB7FY3gcT+BxPIkn8RSexjN4Bs/hOTyPz8V/1fDjYmsSQWRQQokYESNiRazIIXKInCKnyCVyiYiIiDgRJ3KL3CKPyCPyiXwiXsSLgqKgMMIIEmHGkUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjMo3EEGwshmIT0VTIS0eolmI4thKtRRvxhBiJI7CdaOnai6dFBzEGO4q/ibH4rOgsxmMX8bzoKrqJ7uIF0UO0cj1FLzEZe4s+Yhr2Ff1EfzFAzMTq4j2ck72GeFUkiiFiqHhNLMDXxXDxhhghRopR4k0xWrwlxoixYpwYL5LEBDFRvC0miXfEZDFFTBXTRLKYLmaId8VMMUvMFu+JOeJ9MVfME/PFApEiPhALxSKRKj4Ui8VHIk0sEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQO8XHYpf4ROwWe8Re8anYJz4T+8Xn4oD4QhwUX4p08ZU4JL4Wh8U34oj4VhwV34lj4rg4Ib4XJ8UP4pQ4Lc6Is+Kc+FGcFz+JC8ILkCiFlFLJQMbIbDJWZpc55FUypwwyj/8yTl4nc8vrZR6ZV+aT+WW8LCALSi2NtJJkKAvJwjIqb5BF5I2yqCwmi8sS0smSspS8SZaWN8sy8hZZVt4qy8nbZHlZQVaUleTtsrK8Q0Lk4jaqyeqyhqwp75YJcI+sLe+VdeR9sq68X9aTD8j68kHZQD4kG8qHZSP5iGwsH5VNZFPZTDaXLeRjsqV8XLaSrWUb+YRsK5+U7eRTsr18WnaQ/tJL5FnZWT4nu8jnZVfZTXaXP8kL0suespeE3iD7yJdkX9lP9pcD5ED5shwkX5GD5asyUQ6RQ+Vrcph8XQ6Xb8gRcqQcJd+Uo+VbcowcK8fJ8TJJTpAT5dtyknxHTpZT5FQ5TSbL6bL/pZFmS/lP89/+nfzBP299k9wst8itcpvcLnfInfJjuUvukrvlbrlX7pX75D65X+6XB+QBeVAelOkyXR6Sh+RheVgekUfkUXlUHpPH5Vn5vTwpf5Cn5Gl5Wp6V5+Q5ef7ScwAKlVBSKRWoGJVNxarsKoe6SuVUV6tc6hoVUdeqOHWdyq2uV3lUXpVP5VfxqoAqqLQyyipSoSqkCquougEvvWBUcVVCOVVSlVI3/Tv5qoi6URVVxX6Vnzm/hH8wvxaqhWqpWqpWqpVqo9qotqqtaqfaqfaqveqgOqiOqqPqpDqpzqqz6qK6qK6qq+quuqseqofqqXqqBJWg+qiXVF/VT/VXA9RA9bLI2IfBarBKVIlqqBqqhqlhargarkaoEWqUGqVGq9FqjBqjxqlxKkklqYlqopqkJqnJarKaqqaqZJWsZqgZaqaaqWar2WqOmqPmqrlqvpqvUlSKWqgWqlSVqharxSpNLVFL1DK1TK1QK9QqtUqtUWvUOrVObVAbVJrarDarrWqr2q62q51qp9qldqndarfaq/aqfWqf2q/2qwPqgDqoDqp0la4OqUPqsDqsjqgj6qg6qo6pY+qEOqFOqpPqlDqlzqgz6pw6p86r8+qCupBx2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFB7uD6IE+QN8gX5A/igwJBwUAHJrCBuFT0aHBDUCS4MSgaFAuKByUCF5QMSgU3BaWDm4MywS1B2eDWoFxwW1A+qBBUDCoFtweVgzuCKsGdQdXgrqBaUD2oEdQM7g5qBfcEtYN7gzrBfUHd4P6gXvBAUD94MGgQPBQ0DB4OGgWPBI2DR4MmQdOgWdA8aPGnju/9qbyPu566l07QvXUf/ZLuq/vp/nqAHqhf1oP0K3qwflUn6iF6qH5ND9Ov6+H6DT1Cj9Sj9Jt6tH5Lj9Fj9Tg9XifpCXqifltP0u/oyXqKnqqn6WQ9Xc/Q7+qZepaerd/Tc/T7eq6ep+frBTpFf6AX6kU6VX+oF+uPdJpeopfqZXq5XqFX6lV6tV6j1+p1er3eoDfqTXqz3qK36m16u96hd+qP9S79id6t9+i9+lO9T3+m9+vP9QH9hT6ov9Tp+it9SH+tD+tv9BH9rT6qv9PH9HFdRn+vT+of9Cl9Wp/RZ/U5/aM+r3/SF7TPOLnP+Hg3yigTY2JMrIk1OUwOk9PkNLlMLhMxERNn4kxuk9vkMXlMPpPPxJt4U9AUNBnIkClkCpmoiZoipogpaoqa4qa4ccaZUqaUKW1KmzKmjClryppyppwpb8qbiqaiud3cbu4wd5g7zZ3mLnOXqW6qm5qmpqllapnaprapY+qYuqauqWfqmfqmvmlgGpiGpqFpZBqZxqaxaWKamGammWlhWpiWpqVpZVqZNqaNaWvamnamnWlv2psOpoPpaDqaTqaT6Ww6my6mi+lqupruprvpYXqYnqanSTAJpo/pY/qavqa/6W8GmoFmkBlkBpvBJtEkmqFmqBlmhpnhZrgZYUaaURknquYtM8aMNePMeJNkksxEM9FMMpPMZDPZTDVTTbJJNjPMDDPTzDSzzWwzx8wxc81cM9/MNykmxSw0C02qSTWLzWKTZtLMUrPULDfLzUqz0qw2q81as9ash/Vmo9loNpvNZqvZarab7Wan2Wl2mV1mt9lt9pq9Zp/ZZ/ab/eaAOWAOmoMm3aSbQ+aQOWwOmyPmiDlqjppj5pg5YU6Yk+akOWVOmTPmjDln8l76vPQm1ma3OexVNqe92uay19i/j/PZ/DbeFrAFrbZ5bN5fxcZaW9QWs8VtCetsSVvK3vSbuLytYCvaSvZ2W9neYav8Jq5l77G17b22jr3P1rR3/yqua++39ewjtj4igG1qG9rmtpF9xDa2j9omtqltZpvbtvZJ284+Zdvbp20H+8xv4oV2kV1t19i1dp3dbffYM/asPWy/sefsj7an7WUH2pftIPuKHWxftYl2yG/iUfZNO9q+ZcfYsXacHf+beKqdZpPtdDvDvmtn2lm/iVPsB3aOTbVz7Tw73y74Oc6YU6r90C62H9k0G8BSu8wutyvsSrvq/851md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhj/47Yb+1R+509Zo/bE/Z7e9L+oDKzM/b9e/uTvWC9BUICkqQooBjKRrGUnXLQVZSTrqZcdA1F6FqKo+soN11PeSgv5aP8FE8FqCBpMmSJKKRCVJiidANlTq84lSBHJakU3USl6WYqQ7dQWbqVytFtVJ4qUEWqRLdTZbqDqtCdVJXuompUnWpQTbqbatE9VJvupTp0H9Wl+6kePUD16UFqQA9RQ3qYGtEj1JgepSbUlJpRc2pBj1FLepxaUWtqQ09QW3qS2tFT1J6epg70DHWkv1EnepY603PUhZ6nrtSNutML1INepJ7UixKoN/Whl6gv9aP+NIAG0ss0iF6hwfQqJdIQGkqv0TB6nYbTGzSCRtIoepNG01s0hsbSOBpPSTSBJtLbNIneock0habSNEqm6TSD3qWZNItm03s0h96nuTSP5tMCSqEPaCEtolT6kBbTR5RGS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSx7SLPqHdtIf20qe0jz6j/fQ5HaAv6CB9Sen0FR2ir+kwfUNH6Fvfi76jY3ScTtD3dJJ+oFN0ms7QWTpHP9J5+okukCcIMRShDFUYhDFhtjA2zB7mCK8Kc4ZXh7nCa8JIeG0YF14X5g6vD/OEecN8Yf4wPiwQFgx1aEIbUhiGhcLCYTS8ISwS3hgWDYuFxcMSoQtLhqXCm8LS4c1hmfCWsGx4a1guvC0sH1YIH7mvUnh7WDm8I6wS3hlWDe8Kq4XVwxphzfDusFZ4T1g7vDesE94XlgnvD+uFD4T1wwfDBuFDYcPw4bBR+EjYOHw0bBI2DZuFzcMW4WNhy/DxsFXYOmwTXhW2DZ8M24VPhe3Dp8MO4TM/99+/KLP/id/0J4S9wz7hS+FLoff3yvnRBdGU6AfRhdFF0dToh9HF0Y+iadEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTVHva2YDh0446ZQLXIzL5mJddpfDXeVyuqtdLneNi7hrXZy7zuV217s8Lq/L5/K7eFfAFXTaGWcdudAVcoVd1N3girgbXVFXzBV3JZxzJV0p19y1cC1cS/e4a+VauzbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBNyXXxPJrg+ro/r6/q6/q6/G+gGukFukBvsBrtEl+iGuqFumBvmhrvhboQb4Ua5UW60G+3GuDFunBvnklySm+gmuklukpvsJrupbqpLdsluhpvhZrqZrvKsi1uZ6+a6+W6+S3EpbqHLOGdMdYvdYpfm0txSt9Qtd8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXfb3U630+1yu9xuf83FQd0+t9/tdwfcAXfQfenS3VfukPvaHXbfuCPuW3fUfeeOuePuhPvenXQ/uFPutDvjzrpz7kd33v3kLjjvkiITIhMjb0cmRd6JTI5MiUyNTIskR6ZHZkTejcyMzIrMjrwXmRN5PzI3Mi8yP7IgkhL5ILIwsiiSGvkwsjjyUSQtsiSyNLIssjyyIuJ9ga2hL+QL+6i/wRfxN/qivpgv7kt450v6Uv4mX9rf7Mv4W3xZf6sv52/z5X0FX9E/6pv4pr6Zb+5b+Md8S/+4b+Vb+zb+Cd/WP+nb+ad8e/+07+Cf8R3933wn/6zv7J/zXfzzvqvv5rv7F3wP/6Lv6Xv5BN/b9/Ev+b6+n+/vB/iB/mU/yL/iB/tXfaIf4of61/ww/7of7t/wI/xIPyrmTT868xIZxvskP8FP9G/7Sf4dP9lP8VP9NJ/sp/sZ/l0/08/ys/17fo5/38/18/x8v8Cn+A/8Qr/Ip/oP/WL/kU/zSzJvGvuVfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4nf5jv8t/4nf7PX6v/9Tv85/5/f5zf8B/4Q/6L326/8of8l/7w/4bf8R/64/67/wxf9yf8N/7k/4Hf8qf9mf8WX/O/+jP+5/8Bf43a4wxxhhj/5IJl5vi1z0Xb+f3/p0c8YuV+wDA1dvyp/+yP+OMcn2ei+1+Ij424+/Tvbo8lLlUq5aQkHBp3TQJQeF5AJnfBGX4+acHl+Il0AaehPbQGkr/7vz7iW7n6J+MH70VIMcvcjImlBlfHv9zAEz4nfEfe2LUwnLhmbj/x/jzAIoWvpyTHS7HS6DNz/dXWkOZfzD/vC3/yfyzf5EE0OoXOTnhcnx5/qXgcXgG2v9qTcYYY4wxxhhj7KJ+omKnzOvPzF98/t71eby6nJMNLsf/7PqcMcYYY4wxxhhjV96z3bo/9Vj79q07/fuNKv+jrH+50Rj+UyNz43cb3gNkPqIA4A8OCJDRkH/lXmz5S7aVeOmt8/ddy8/6AP53lPLPaFzhAxNjjDHGGGPsT3f5pP/Xj6srNSHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA///Pq/0S") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) chdir(&(0x7f0000000400)='./file0\x00') 2.715087185s ago: executing program 6 (id=2796): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c007db9b87a3b22e5cdbfd3408bf7f26c6f9e2e5a33a3de79757cd012da0fa08b018021308de4ff8e18c85136d66ca70f9e0202d9f4ae6ea8be44247a411f017b3641e72534ed28887e107245165398cb2190b1c94e503b949600a547d22bd1f5389f7d4c9888f5cf2358d4258a2647e5563c5bf7447ab02ee8751259a8c6ee852e305393a69052893580c4820d1ce2dcfccf9b1f8250ea0de206b8ef12366ebe20bc74087f57f579b70bd08afcf902e41a55b58f624e5ce5a03cf74baddfb64769c330584e79449ff96c074b0065a305dd039b056c50c00d1d6a"], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.631595468s ago: executing program 5 (id=2797): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0xfff, 0x1000}], 0x1, &(0x7f0000000500)={0x77359400}) 2.11053825s ago: executing program 3 (id=2798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) personality(0x5400004) remap_file_pages(&(0x7f0000d94000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x2000) 2.060105061s ago: executing program 6 (id=2799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.862616317s ago: executing program 5 (id=2800): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000005c0)=@known='user.incfs.size\x00') 1.516002385s ago: executing program 5 (id=2801): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file0\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6572726f72733d636f6e74696e75652c636173653d617369732c636865636b3d6e6f6e652c00d2455c6e2c8cb12d399c5198329fa97725ba435c0e338f52084f233b60f7f6d89c31d3c1faf4ce0197cb45b8e0310b54a8a059d244"], 0x1, 0x9e25, &(0x7f000000a040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) lseek(r0, 0x3, 0x3) 1.438127963s ago: executing program 6 (id=2802): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfc, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x28, {0x28, 0x5, "f70ba385038de583bb48fd16a2cb4fd4a0560fb30d54f3e5c5b1d43e2f40f4809166714c75ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 956.023312ms ago: executing program 3 (id=2803): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 669.791284ms ago: executing program 5 (id=2804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70000000000004dfffff13000600ff0200000000000000000000000000011400050020010000000000000000f08be97100020800020005"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) 70.75564ms ago: executing program 0 (id=2805): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) open(&(0x7f0000000000)='./file0\x00', 0xca1c0, 0x104) utime(&(0x7f0000000100)='./file0\x00', 0x0) 0s ago: executing program 5 (id=2806): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x0, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xfffffffd}, 0xd0, 0x9}}) kernel console output (not intermixed with test programs): 4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.1784: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 305.222741][T10133] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 305.246242][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 305.246302][ C1] EXT4-fs (loop0): last error at time 1777997594: ext4_ext_check_inode:521: inode 13 [ 305.287279][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.450943][T10133] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1784: couldn't read orphan inode 13 (err -117) [ 305.450978][T10133] loop0: lost filesystem error report for type 5 error -117 [ 305.483836][T10133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.490712][T10139] loop4: detected capacity change from 0 to 64 [ 305.548579][ T1465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.584044][ T5618] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 305.660817][ T39] audit: type=1800 audit(1777997594.491:25): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1792" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 305.732687][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.774647][ T5618] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 305.774677][ T5618] usb 6-1: config 8 has no interface number 0 [ 305.774724][ T5618] usb 6-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 305.774762][ T5618] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 305.774796][ T5618] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 305.774813][ T5618] usb 6-1: config 8 interface 177 has no altsetting 0 [ 305.774838][ T5618] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 305.774855][ T5618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.917288][T10136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.147639][ T5618] usb 6-1: string descriptor 0 read error: -71 [ 306.166354][ T5618] ir_toy 6-1:8.177: required endpoints not found [ 306.240152][ T5618] usb 6-1: USB disconnect, device number 6 [ 306.405049][T10150] loop4: detected capacity change from 0 to 512 [ 306.434769][T10150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1794: invalid indirect mapped block 256 (level 2) [ 306.434807][T10150] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 306.452016][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 306.452039][ C1] EXT4-fs (loop4): initial error at time 1777997595: ext4_free_branches:1023: inode 11 [ 306.452067][ C1] EXT4-fs (loop4): last error at time 1777997595: ext4_free_branches:1023: inode 11 [ 306.453508][T10150] EXT4-fs (loop4): 2 truncates cleaned up [ 306.502827][T10150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.745701][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.832181][ T5628] Bluetooth: hci4: command tx timeout [ 306.893561][T10164] loop4: detected capacity change from 0 to 64 [ 307.204962][ T1465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.241027][T10164] syz.4.1798: attempt to access beyond end of device [ 307.241027][T10164] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 307.247385][T10164] Buffer I/O error on dev loop4, logical block 512, async page read [ 307.250889][T10164] syz.4.1798: attempt to access beyond end of device [ 307.250889][T10164] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 307.250961][T10164] Buffer I/O error on dev loop4, logical block 56576, async page read [ 307.457599][T10172] netlink: 'syz.0.1802': attribute type 29 has an invalid length. [ 307.823181][ T1465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.048095][T10172] netlink: 'syz.0.1802': attribute type 29 has an invalid length. [ 308.912704][ T5622] Bluetooth: hci4: command tx timeout [ 309.997747][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.001343][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.001666][T10042] bridge_slave_0: entered allmulticast mode [ 310.043317][T10042] bridge_slave_0: entered promiscuous mode [ 310.101913][T10232] loop4: detected capacity change from 0 to 512 [ 310.105542][T10233] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1826'. [ 310.166623][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.167045][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.167404][T10042] bridge_slave_1: entered allmulticast mode [ 310.203282][T10042] bridge_slave_1: entered promiscuous mode [ 310.390153][T10232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.390299][T10232] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.852373][T10236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 311.038108][ T39] audit: type=1800 audit(1777997599.801:26): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1827" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 311.038858][ T1465] bridge_slave_1: left allmulticast mode [ 311.038993][ T1465] bridge_slave_1: left promiscuous mode [ 311.106140][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.277636][ T1465] bridge_slave_0: left allmulticast mode [ 311.277670][ T1465] bridge_slave_0: left promiscuous mode [ 311.277956][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.391888][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.583989][T10260] loop3: detected capacity change from 0 to 16 [ 311.675782][T10242] loop0: detected capacity change from 0 to 32768 [ 311.689599][T10260] erofs (device loop3): mounted with root inode @ nid 36. [ 311.845732][T10263] loop4: detected capacity change from 0 to 1024 [ 312.019887][T10262] ialloc: diAlloc returned -5! [ 313.107085][T10276] loop0: detected capacity change from 0 to 512 [ 313.109783][T10276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.136504][T10276] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1844: iget: bad i_size value: 38620345925642 [ 313.136539][T10276] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.138439][T10276] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1844: couldn't read orphan inode 15 (err -117) [ 313.138519][T10276] loop0: lost filesystem error report for type 5 error -117 [ 313.149132][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 313.149166][ C0] EXT4-fs (loop0): initial error at time 1777997601: ext4_orphan_get:1397: inode 15 [ 313.149191][ C0] EXT4-fs (loop0): last error at time 1777997601: ext4_orphan_get:1397: inode 15 [ 313.266733][T10276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.415304][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.580066][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.678292][T10288] loop4: detected capacity change from 0 to 2048 [ 313.705984][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.730193][T10288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.794113][ T1465] bond0 (unregistering): Released all slaves [ 313.905325][T10292] loop0: detected capacity change from 0 to 4096 [ 314.123833][T10293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.374004][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.410782][T10297] binder: 10296:10297 unknown command 1847616617 [ 314.410810][T10297] binder: 10296:10297 ioctl c0306201 200000000080 returned -22 [ 314.453945][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.597539][T10300] netlink: 'syz.5.1856': attribute type 5 has an invalid length. [ 314.597561][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1856'. [ 314.896332][T10308] blktrace: Concurrent blktraces are not allowed on sg0 [ 314.985849][T10311] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1858'. [ 315.045799][T10042] team0: Port device team_slave_0 added [ 315.526426][T10326] loop0: detected capacity change from 0 to 64 [ 316.012702][T10338] loop4: detected capacity change from 0 to 1024 [ 316.060962][T10338] EXT4-fs: Ignoring removed bh option [ 316.129897][T10338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.248811][T10344] loop0: detected capacity change from 0 to 128 [ 316.271463][T10344] FAT-fs (loop0): bogus number of reserved sectors [ 316.271479][T10344] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 316.271489][T10344] FAT-fs (loop0): Can't find a valid FAT filesystem [ 316.654747][T10042] team0: Port device team_slave_1 added [ 317.103121][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.255091][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422683][T10361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1875'. [ 317.481410][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 317.884861][T10371] loop5: detected capacity change from 0 to 32768 [ 317.946499][T10371] gfs2: fsid=gfs2: Trying to join cluster "lock_nolock", "gfs2" [ 317.946521][T10371] gfs2: fsid=gfs2: Now mounting FS (format 0)... [ 318.055652][T10371] gfs2: fsid=gfs2: Unknown on-disk format, unable to mount [ 318.055670][T10371] gfs2: fsid=gfs2: can't read superblock [ 318.055679][T10371] gfs2: fsid=gfs2: can't read superblock: -22 [ 318.124729][T10362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1875'. [ 318.127276][T10375] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1880'. [ 318.427722][T10382] Bluetooth: MGMT ver 1.23 [ 318.510999][T10386] loop0: detected capacity change from 0 to 256 [ 318.512323][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.727034][T10386] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 318.727067][T10386] FAT-fs (loop0): Filesystem has been set read-only [ 318.727766][T10386] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 318.727902][T10386] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 318.944839][T10396] binder: 10395:10396 ioctl 400c620e 200000000180 returned -22 [ 318.982919][ T39] audit: type=1800 audit(1777997607.571:27): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1883" name="file1" dev="loop0" ino=1048666 res=0 errno=0 [ 319.222904][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.222923][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.222952][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.295307][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.295325][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.295351][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.511561][T10386] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 319.756444][T10410] loop4: detected capacity change from 0 to 64 [ 320.359492][T10042] hsr_slave_0: entered promiscuous mode [ 320.380031][T10042] hsr_slave_1: entered promiscuous mode [ 320.396578][T10042] debugfs: 'hsr0' already exists in 'hsr' [ 320.396603][T10042] Cannot create hsr debugfs directory [ 320.902921][ T1465] hsr_slave_0: left promiscuous mode [ 320.988949][ T1465] hsr_slave_1: left promiscuous mode [ 321.048862][ T1465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.048952][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.071694][T10438] netlink: 'syz.5.1903': attribute type 1 has an invalid length. [ 321.102220][ T1465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.102247][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.373092][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1905'. [ 321.833430][T10452] loop3: detected capacity change from 0 to 4096 [ 321.966430][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 322.034648][ T1465] veth1_macvtap: left promiscuous mode [ 322.036095][ T1465] veth0_macvtap: left promiscuous mode [ 322.098343][ T1465] veth1_vlan: left promiscuous mode [ 322.253824][ T1465] veth0_vlan: left promiscuous mode [ 322.743892][T10468] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.158649][T10479] loop3: detected capacity change from 0 to 128 [ 323.235949][T10479] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.561426][ T39] audit: type=1800 audit(1777997612.391:28): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1924" name="bus" dev="tmpfs" ino=2206 res=0 errno=0 [ 323.922741][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 323.983974][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 324.284133][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 324.287419][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1910'. [ 324.287625][T10454] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1910'. [ 324.732157][ T5618] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.902292][ T5618] usb 1-1: Using ep0 maxpacket: 32 [ 324.905827][ T5618] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 324.905874][ T5618] usb 1-1: config 0 has no interface number 0 [ 324.936773][ T5618] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 324.936802][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.936822][ T5618] usb 1-1: Product: syz [ 324.936835][ T5618] usb 1-1: Manufacturer: syz [ 324.936848][ T5618] usb 1-1: SerialNumber: syz [ 324.985691][ T5618] usb 1-1: config 0 descriptor?? [ 325.689367][T10514] program syz.4.1932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.741210][T10515] program syz.4.1932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.756098][T10515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 326.126788][T10497] loop5: detected capacity change from 0 to 32768 [ 326.330341][T10497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1928 (10497) [ 326.373691][T10523] loop4: detected capacity change from 0 to 8 [ 326.627861][T10525] loop3: detected capacity change from 0 to 256 [ 326.649108][T10525] exfat: Deprecated parameter 'utf8' [ 326.902186][T10497] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.902223][T10497] BTRFS info (device loop5): using sha256 checksum algorithm [ 327.086351][T10525] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 327.717502][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 327.717533][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 327.718314][ T5618] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 327.718654][ T5618] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 327.854426][ T5618] usb 1-1: USB disconnect, device number 10 [ 328.401744][T10559] loop3: detected capacity change from 0 to 1024 [ 328.440631][T10559] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 328.502594][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 328.605088][T10497] BTRFS error (device loop5): open_ctree failed: -4 [ 328.922563][T10568] loop4: detected capacity change from 0 to 16 [ 328.953833][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'. [ 329.127289][T10568] erofs (device loop4): mounted with root inode @ nid 36. [ 329.404117][T10568] syz.4.1946: attempt to access beyond end of device [ 329.404117][T10568] loop4: rw=524288, sector=36, nr_sectors = 1 limit=16 [ 329.447531][T10042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.600033][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.638764][T10042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.876966][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.879754][T10568] syz.4.1946: attempt to access beyond end of device [ 329.879754][T10568] loop4: rw=524288, sector=131156, nr_sectors = 1 limit=16 [ 329.879841][T10568] syz.4.1946: attempt to access beyond end of device [ 329.879841][T10568] loop4: rw=524288, sector=36, nr_sectors = 1 limit=16 [ 329.879925][T10568] syz.4.1946: attempt to access beyond end of device [ 329.879925][T10568] loop4: rw=524288, sector=131157, nr_sectors = 1 limit=16 [ 329.879975][T10568] syz.4.1946: attempt to access beyond end of device [ 329.879975][T10568] loop4: rw=524288, sector=41, nr_sectors = 1 limit=16 [ 329.880407][T10568] syz.4.1946: attempt to access beyond end of device [ 329.880407][T10568] loop4: rw=524288, sector=65623, nr_sectors = 1 limit=16 [ 329.880473][T10568] syz.4.1946: attempt to access beyond end of device [ 329.880473][T10568] loop4: rw=524288, sector=46, nr_sectors = 1 limit=16 [ 329.880557][T10568] syz.4.1946: attempt to access beyond end of device [ 329.880557][T10568] loop4: rw=524288, sector=131168, nr_sectors = 1 limit=16 [ 329.880607][T10568] syz.4.1946: attempt to access beyond end of device [ 329.880607][T10568] loop4: rw=524288, sector=86, nr_sectors = 1 limit=16 [ 329.880687][T10568] syz.4.1946: attempt to access beyond end of device [ 329.880687][T10568] loop4: rw=524288, sector=65637, nr_sectors = 1 limit=16 [ 330.222869][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 330.504329][T10594] loop3: detected capacity change from 0 to 4096 [ 330.518686][T10568] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 331.523102][ T1179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.547715][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 331.581831][T10042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.618047][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.618848][T10590] tipc: Started in network mode [ 331.618868][T10590] tipc: Node identity 1, cluster identity 2 [ 331.618882][T10590] tipc: Node number set to 1 [ 331.794036][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 331.797322][T10042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.969008][T10042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.266050][T10632] loop0: detected capacity change from 0 to 256 [ 332.317318][T10632] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.382981][T10635] loop5: detected capacity change from 0 to 1764 [ 332.391445][T10635] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 332.420310][T10636] loop3: detected capacity change from 0 to 256 [ 332.692722][T10636] FAT-fs (loop3): Directory bread(block 64) failed [ 332.692755][T10636] FAT-fs (loop3): Directory bread(block 65) failed [ 332.692857][T10636] FAT-fs (loop3): Directory bread(block 66) failed [ 332.692879][T10636] FAT-fs (loop3): Directory bread(block 67) failed [ 332.692973][T10636] FAT-fs (loop3): Directory bread(block 68) failed [ 332.692995][T10636] FAT-fs (loop3): Directory bread(block 69) failed [ 332.693086][T10636] FAT-fs (loop3): Directory bread(block 70) failed [ 332.693126][T10636] FAT-fs (loop3): Directory bread(block 71) failed [ 332.693221][T10636] FAT-fs (loop3): Directory bread(block 72) failed [ 332.693244][T10636] FAT-fs (loop3): Directory bread(block 73) failed [ 332.812390][ T1179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.340887][T10639] vlan2: entered promiscuous mode [ 333.340927][T10639] bridge0: entered promiscuous mode [ 333.357185][T10639] vlan2: entered allmulticast mode [ 333.357204][T10639] bridge0: entered allmulticast mode [ 333.396976][T10649] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5610] was attempted by "\x22"[10649] [ 333.754415][T10658] loop0: detected capacity change from 0 to 1024 [ 333.859863][T10656] loop4: detected capacity change from 0 to 8192 [ 333.987050][T10656] loop4: p1[EZD] p4 [ 333.987612][T10656] loop4: p1 size 32768 extends beyond EOD, truncated [ 334.026973][T10656] loop4: p4 size 262144 extends beyond EOD, truncated [ 334.096626][ T1179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.263509][T10663] loop5: detected capacity change from 0 to 2048 [ 334.488857][T10663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.732572][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 334.737762][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 334.776909][T10680] loop0: detected capacity change from 0 to 256 [ 334.916945][T10680] FAT-fs (loop0): Directory bread(block 64) failed [ 334.916977][T10680] FAT-fs (loop0): Directory bread(block 65) failed [ 334.917075][T10680] FAT-fs (loop0): Directory bread(block 66) failed [ 334.917098][T10680] FAT-fs (loop0): Directory bread(block 67) failed [ 334.917216][T10680] FAT-fs (loop0): Directory bread(block 68) failed [ 334.917239][T10680] FAT-fs (loop0): Directory bread(block 69) failed [ 334.917331][T10680] FAT-fs (loop0): Directory bread(block 70) failed [ 334.917351][T10680] FAT-fs (loop0): Directory bread(block 71) failed [ 334.917441][T10680] FAT-fs (loop0): Directory bread(block 72) failed [ 334.917462][T10680] FAT-fs (loop0): Directory bread(block 73) failed [ 335.050879][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.065646][ T1179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.314215][T10717] loop5: detected capacity change from 0 to 256 [ 336.315064][T10717] exfat: Deprecated parameter 'namecase' [ 336.528163][T10717] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 336.787680][T10722] loop5: detected capacity change from 0 to 1024 [ 337.369816][T10042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.683041][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.749861][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.750086][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.809358][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.809515][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.946935][T10743] netlink: 'syz.3.2011': attribute type 21 has an invalid length. [ 337.946960][T10743] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2011'. [ 338.388054][ T38] IPVS: starting estimator thread 0... [ 338.540959][T10761] loop4: detected capacity change from 0 to 128 [ 338.615708][T10743] netlink: 'syz.3.2011': attribute type 4 has an invalid length. [ 338.615742][T10743] netlink: 'syz.3.2011': attribute type 3 has an invalid length. [ 338.615755][T10743] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2011'. [ 338.693575][T10761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.772442][T10761] ext4 filesystem being mounted at /445/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.832376][T10758] IPVS: using max 9 ests per chain, 21600 per kthread [ 339.036023][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.866969][T10787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2023'. [ 340.235763][T10795] comedi comedi3: 8255: I/O base address not correctly aligned [ 340.254590][T10769] loop5: detected capacity change from 0 to 32768 [ 340.339776][T10769] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.402666][T10769] XFS (loop5): Ending clean mount [ 340.553528][ T1179] bridge_slave_1: left allmulticast mode [ 340.553564][ T1179] bridge_slave_1: left promiscuous mode [ 340.553838][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.556678][ T7986] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.849576][ T1179] bridge_slave_0: left allmulticast mode [ 340.849696][ T1179] bridge_slave_0: left promiscuous mode [ 340.849988][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.935266][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 341.398227][T10785] loop3: detected capacity change from 0 to 32768 [ 341.532687][T10825] loop5: detected capacity change from 0 to 2048 [ 341.535251][T10785] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.575914][T10825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.675722][T10785] XFS (loop3): Ending clean mount [ 341.844248][ T5609] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 342.306771][T10832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2035'. [ 343.192646][T10846] netlink: 'syz.5.2042': attribute type 10 has an invalid length. [ 343.508305][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.583031][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.624884][ T1179] bond0 (unregistering): Released all slaves [ 343.647203][T10830] bridge_slave_1: default FDB implementation only supports local addresses [ 343.747904][ T39] audit: type=1326 audit(1777997632.581:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.0.2049" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x0 [ 343.834613][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.839826][T10863] loop4: detected capacity change from 0 to 1024 [ 343.879630][T10846] team0: Port device bond0 added [ 344.458058][T10872] loop4: detected capacity change from 0 to 4096 [ 344.509093][T10875] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.591151][T10879] loop5: detected capacity change from 0 to 64 [ 345.090390][T10885] loop4: detected capacity change from 0 to 512 [ 345.094121][T10885] EXT4-fs: Ignoring removed nobh option [ 345.104776][T10885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.126646][T10885] EXT4-fs (loop4): 1 truncate cleaned up [ 345.154056][T10885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.574632][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.784446][T10896] loop5: detected capacity change from 0 to 4096 [ 345.833943][T10896] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 345.906325][T10893] loop0: detected capacity change from 0 to 4096 [ 346.105726][T10893] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 346.399587][T10914] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2066'. [ 346.399640][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 346.751491][T10906] ipvlan3: entered allmulticast mode [ 346.751516][T10906] dummy0: entered allmulticast mode [ 346.947565][T10929] loop3: detected capacity change from 0 to 2048 [ 347.037568][T10929] loop3: p1 < > p4 [ 347.037568][T10929] p4: [ 347.178951][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 347.178979][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2076'. [ 347.277127][T10929] loop3: p4 size 722688 extends beyond EOD, truncated [ 347.612517][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 347.666193][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 347.979847][ T1179] hsr_slave_0: left promiscuous mode [ 348.029943][ T1179] hsr_slave_1: left promiscuous mode [ 348.032471][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.032496][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.103406][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.103433][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.233302][ T1179] macsec0: left allmulticast mode [ 348.233325][ T1179] veth1_macvtap: left allmulticast mode [ 348.234503][ T1179] veth1_macvtap: left promiscuous mode [ 348.234603][ T1179] veth0_macvtap: left promiscuous mode [ 348.234901][ T1179] veth1_vlan: left promiscuous mode [ 348.235098][ T1179] veth0_vlan: left promiscuous mode [ 348.282186][T10942] loop5: detected capacity change from 0 to 32768 [ 348.481725][T10942] JBD2: Ignoring recovery information on journal [ 348.589459][T10964] loop3: detected capacity change from 0 to 2048 [ 348.821361][T10942] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 349.002530][ T5851] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 349.064724][ T7986] ocfs2: Unmounting device (7,5) on (node local) [ 349.178600][ T5851] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 349.178631][ T5851] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 349.178651][ T5851] usb 4-1: config 0 has no interface number 0 [ 349.178668][ T5851] usb 4-1: config 0 has no interface number 1 [ 349.178712][ T5851] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 349.178740][ T5851] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 349.178760][ T5851] usb 4-1: config 0 interface 255 has no altsetting 0 [ 349.180924][ T5851] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 349.180952][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.180965][ T5851] usb 4-1: Product: syz [ 349.180973][ T5851] usb 4-1: Manufacturer: syz [ 349.180982][ T5851] usb 4-1: SerialNumber: syz [ 349.334169][ T5851] usb 4-1: config 0 descriptor?? [ 349.483546][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2087'. [ 349.483568][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2087'. [ 349.566813][ T5851] usb 4-1: USB disconnect, device number 14 [ 349.866528][ T1179] team_slave_1 (unregistering): left allmulticast mode [ 349.902643][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 349.929385][ T1179] team_slave_0 (unregistering): left allmulticast mode [ 349.963904][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 350.284973][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 350.286472][T10954] kthread_run failed with err -4 [ 350.606410][T10981] loop3: detected capacity change from 0 to 256 [ 350.609180][T10981] exfat: Deprecated parameter 'utf8' [ 350.631851][T10967] macsec2: entered promiscuous mode [ 350.631876][T10967] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 350.648618][T10967] macsec2: entered allmulticast mode [ 350.648644][T10967] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 350.651840][T10967] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 350.785706][T10981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 350.839774][T10986] ucma_write: process 453 (syz.5.2092) changed security contexts after opening file descriptor, this is not allowed. [ 351.130347][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2096'. [ 351.307594][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.051290][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 352.051315][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 352.051344][T11028] netlink: 'syz.0.2105': attribute type 15 has an invalid length. [ 352.623851][T10042] veth0_vlan: entered promiscuous mode [ 352.719816][T10042] veth1_vlan: entered promiscuous mode [ 353.024716][T11052] comedi comedi3: multiq3: I/O base address or length out of range [ 353.138816][T11058] loop5: detected capacity change from 0 to 256 [ 353.155759][T10042] veth0_macvtap: entered promiscuous mode [ 353.175990][T11058] exfat: Deprecated parameter 'utf8' [ 353.176023][T11058] exfat: Deprecated parameter 'namecase' [ 353.176085][T11058] exfat: Deprecated parameter 'namecase' [ 353.176100][T11058] exfat: Deprecated parameter 'utf8' [ 353.276141][T10042] veth1_macvtap: entered promiscuous mode [ 353.324035][T11058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 353.324402][T11058] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 353.446965][ T39] audit: type=1800 audit(1777997642.291:30): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2115" name="file1" dev="loop5" ino=1048710 res=0 errno=0 [ 353.449034][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 353.514428][ T39] audit: type=1326 audit(1777997642.341:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11065 comm="syz.0.2119" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x0 [ 353.568384][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.670024][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'. [ 353.697875][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.884808][ T1487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.889956][ T1487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.917319][ T1487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.930518][ T1487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.160148][T11066] loop3: detected capacity change from 0 to 32768 [ 355.221856][T11066] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 355.288876][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.288898][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.367046][T11066] XFS (loop3): Ending clean mount [ 355.539613][T11107] loop4: detected capacity change from 0 to 512 [ 355.579552][T11107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.630783][T11107] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2131: iget: bad i_size value: 38620345925642 [ 355.630815][T11107] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.636368][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 355.636424][ C1] EXT4-fs (loop4): initial error at time 1777997644: ext4_orphan_get:1397: inode 15 [ 355.636498][ C1] EXT4-fs (loop4): last error at time 1777997644: ext4_orphan_get:1397: inode 15 [ 355.649917][T11107] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2131: couldn't read orphan inode 15 (err -117) [ 355.649984][T11107] loop4: lost filesystem error report for type 5 error -117 [ 355.669420][T11107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.789473][ T5609] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 355.807788][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807825][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807853][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807881][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807906][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807934][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807961][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.807987][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.808014][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.808040][ T10] hid-generic 0100:0000:0000.0013: unknown main item tag 0x0 [ 355.924987][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.925007][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.993797][ T10] hid-generic 0100:0000:0000.0013: hidraw0: HID v0.03 Device [syz0] on syz1 [ 356.165675][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.441530][T11126] loop0: detected capacity change from 0 to 512 [ 356.586497][T11126] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2137: bg 0: block 5: invalid block bitmap [ 356.586529][T11126] loop0: lost filesystem error report for type 5 error -117 [ 356.602144][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 356.602165][ C1] EXT4-fs (loop0): initial error at time 1777997645: ext4_validate_block_bitmap:432 [ 356.602187][ C1] EXT4-fs (loop0): last error at time 1777997645: ext4_validate_block_bitmap:432 [ 356.644130][T11126] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 356.644154][T11126] loop0: lost filesystem error report for type 5 error -117 [ 356.649008][T11126] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2137: invalid indirect mapped block 3 (level 2) [ 356.649051][T11126] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 356.651635][T11126] EXT4-fs (loop0): 1 orphan inode deleted [ 356.651654][T11126] EXT4-fs (loop0): 1 truncate cleaned up [ 356.723670][T11126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.044940][T11123] fido_id[11123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.230530][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 357.231395][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.019996][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 358.242512][T11171] loop6: detected capacity change from 0 to 512 [ 358.346558][T11177] loop0: detected capacity change from 0 to 2048 [ 358.368677][T11177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.763372][T11183] loop5: detected capacity change from 0 to 1024 [ 358.830251][T11183] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.883448][T11171] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.883471][T11171] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 358.998833][T11183] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2154: Invalid block bitmap block 0 in block_group 0 [ 358.998870][T11183] loop5: lost filesystem error report for type 5 error -117 [ 359.004365][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 359.004458][ C1] EXT4-fs (loop5): initial error at time 1777997647: ext4_read_block_bitmap_nowait:483 [ 359.004525][ C1] EXT4-fs (loop5): last error at time 1777997647: ext4_read_block_bitmap_nowait:483 [ 359.059790][T11183] Quota error (device loop5): write_blk: dquota write failed [ 359.059847][T11183] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 359.059922][T11183] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2154: Failed to acquire dquot type 0 [ 359.059958][T11183] loop5: lost filesystem error report for type 5 error -117 [ 359.141354][T11183] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2154: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.141392][T11183] loop5: lost filesystem error report for type 5 error -117 [ 359.320277][T11171] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 359.375027][T11171] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 359.375133][T11171] System zones: 0-2, 18-18, 34-35 [ 359.474432][T11171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.481892][T11183] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2154: Invalid inode bitmap blk 0 in block_group 0 [ 359.491615][T11183] loop5: lost filesystem error report for type 5 error -117 [ 359.508804][T11183] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 359.508896][T11183] loop5: lost filesystem error report for type 5 error -117 [ 359.541862][T11183] EXT4-fs (loop5): 1 orphan inode deleted [ 359.557721][ T56] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 359.557779][ T56] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 359.557801][ T56] loop5: lost filesystem error report for type 5 error -117 [ 359.584564][T11183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.615878][T11171] EXT4-fs warning (device loop6): ext4_group_extend:1885: will only finish group (16384 blocks, 16256 new) [ 359.715222][T11171] EXT4-fs warning (device loop6): ext4_group_extend:1890: can't read last block, resize aborted [ 359.857240][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.323896][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.493095][T11217] loop5: detected capacity change from 0 to 256 [ 360.494183][T11217] exfat: Deprecated parameter 'namecase' [ 360.494275][T11217] exfat: Deprecated parameter 'utf8' [ 360.496503][T11217] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 360.523391][T11217] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 361.052092][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 361.224070][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.224102][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 361.224129][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 361.224149][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.292512][ T10] usb 1-1: config 0 descriptor?? [ 361.369811][T11240] loop5: detected capacity change from 0 to 64 [ 361.740140][ T10] hid_parser_main: 101 callbacks suppressed [ 361.740162][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740188][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740207][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740226][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740247][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740270][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740291][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740313][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740335][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.740357][ T10] elecom 0003:056E:00FF.0014: unknown main item tag 0x0 [ 361.828663][ T10] elecom 0003:056E:00FF.0014: hidraw0: USB HID v7f.df Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0 [ 361.943652][ T10] usb 1-1: USB disconnect, device number 11 [ 362.126625][T11257] loop6: detected capacity change from 0 to 8 [ 362.340186][T11257] SQUASHFS error: Failed to read block 0x2d0: -5 [ 362.340208][T11257] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 362.340234][T11257] SQUASHFS error: Unable to read directory block [2ce:0] [ 362.496310][T11264] fido_id[11264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 362.986842][T11280] loop0: detected capacity change from 0 to 512 [ 363.086733][T11280] EXT4-fs (loop0): orphan cleanup on readonly fs [ 363.096711][T11280] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 363.096871][T11280] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.102199][T11280] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 363.233661][T11287] loop6: detected capacity change from 0 to 512 [ 363.507013][T11280] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #14: comm syz.0.2187: invalid orphan symlink nlink 1 [ 363.507049][T11280] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 363.513990][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 363.514010][ C0] EXT4-fs (loop0): last error at time 1777997652: ext4_orphan_get:1397: inode 14 [ 363.586397][T11280] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2187: couldn't read orphan inode 14 (err -117) [ 363.586443][T11280] loop0: lost filesystem error report for type 5 error -117 [ 363.633831][T11280] EXT4-fs (loop0): 1 truncate cleaned up [ 363.639421][T11287] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2190: inode has both inline data and extents flags [ 363.639449][T11287] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.639870][T11287] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2190: couldn't read orphan inode 15 (err -117) [ 363.639896][T11287] loop6: lost filesystem error report for type 5 error -117 [ 363.703804][T11280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.750598][T11287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.769450][T11280] tmpfs: Cannot change global quota limit on remount [ 364.108120][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.169667][T11307] loop4: detected capacity change from 0 to 256 [ 364.244430][T11311] loop5: detected capacity change from 0 to 512 [ 364.353057][T11311] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 364.482199][T11318] loop0: detected capacity change from 0 to 64 [ 364.561347][T11307] FAT-fs (loop4): Directory bread(block 64) failed [ 364.561377][T11307] FAT-fs (loop4): Directory bread(block 65) failed [ 364.561470][T11307] FAT-fs (loop4): Directory bread(block 66) failed [ 364.561493][T11307] FAT-fs (loop4): Directory bread(block 67) failed [ 364.561587][T11307] FAT-fs (loop4): Directory bread(block 68) failed [ 364.561610][T11307] FAT-fs (loop4): Directory bread(block 69) failed [ 364.615684][T11307] FAT-fs (loop4): Directory bread(block 70) failed [ 364.615717][T11307] FAT-fs (loop4): Directory bread(block 71) failed [ 364.615819][T11307] FAT-fs (loop4): Directory bread(block 72) failed [ 364.615842][T11307] FAT-fs (loop4): Directory bread(block 73) failed [ 364.681424][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.722835][T11311] EXT4-fs (loop5): invalid journal inode [ 364.723016][T11311] EXT4-fs (loop5): can't get journal size [ 365.023907][T11311] EXT4-fs (loop5): 1 truncate cleaned up [ 365.209005][T11311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.229584][T11335] tmpfs: Bad value for 'nr_inodes' [ 365.852122][ T5598] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.102079][ T5598] usb 7-1: Using ep0 maxpacket: 32 [ 366.104386][ T5598] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.104414][ T5598] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.104446][ T5598] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 366.104466][ T5598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.171792][ T5598] usb 7-1: config 0 descriptor?? [ 366.255810][T11363] loop0: detected capacity change from 0 to 128 [ 366.455446][T11363] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.464722][T11363] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.811339][ T5598] ft260 0003:0403:6030.0015: failed to retrieve chip version [ 366.870192][ T5598] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -71 [ 366.926867][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 366.973657][T11373] loop4: detected capacity change from 0 to 512 [ 367.027879][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.151140][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.151889][ T5598] usb 7-1: USB disconnect, device number 2 [ 367.238437][T11373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.238592][T11373] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.128078][T11403] tipc: Enabling of bearer rejected, failed to enable media [ 368.411711][T11407] loop3: detected capacity change from 0 to 4096 [ 368.544317][T11407] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 368.653305][ T5610] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 368.789254][ T5610] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 368.885549][T11407] ntfs3(loop3): ino=19, mi_enum_attr [ 368.885571][T11407] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 368.924065][T11407] ntfs3(loop3): failed to convert "c46c" to iso8859-6 [ 369.014113][T11422] loop0: detected capacity change from 0 to 4096 [ 369.139907][ T9421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.180120][T11422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.239829][T11407] ntfs3(loop3): ino=20, mi_enum_attr [ 369.575181][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 369.692456][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.374499][ T39] audit: type=1326 audit(1777997659.201:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.374553][ T39] audit: type=1326 audit(1777997659.201:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.374600][ T39] audit: type=1326 audit(1777997659.201:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.374645][ T39] audit: type=1326 audit(1777997659.201:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.395783][ T39] audit: type=1326 audit(1777997659.241:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.396331][ T39] audit: type=1326 audit(1777997659.241:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.411202][ T39] audit: type=1326 audit(1777997659.241:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.411256][ T39] audit: type=1326 audit(1777997659.241:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.411300][ T39] audit: type=1326 audit(1777997659.241:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 370.411345][ T39] audit: type=1326 audit(1777997659.241:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.6.2247" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05b77cdd9 code=0x7ffc0000 [ 371.464750][T11463] loop0: detected capacity change from 0 to 256 [ 371.692380][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 371.855180][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 371.855204][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.884784][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.930697][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.953605][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.961754][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.966524][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.982943][ T10] usb 4-1: config 0 descriptor?? [ 372.130670][ T10] cp210x 4-1:0.0: cp210x converter detected [ 372.280957][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.608347][T11478] loop6: detected capacity change from 0 to 1024 [ 372.678990][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 372.679023][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 372.747288][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 372.765336][ T10] usb 4-1: USB disconnect, device number 15 [ 372.800030][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.800719][ T10] cp210x 4-1:0.0: device disconnected [ 372.860735][T11478] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 374.212443][ T5851] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 374.272121][ T5628] Bluetooth: hci0: command tx timeout [ 374.278384][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.402148][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 374.404449][ T5851] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.404479][ T5851] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.404506][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.404538][ T5851] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 374.404560][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.434654][ T5851] usb 4-1: config 0 descriptor?? [ 374.675469][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 374.721724][T11527] loop5: detected capacity change from 0 to 2048 [ 374.743226][T11527] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 375.014469][ T5851] kye 0003:0458:0138.0016: unexpected long global item [ 375.015110][ T5851] kye 0003:0458:0138.0016: parse failed [ 375.022125][ T5851] kye 0003:0458:0138.0016: probe with driver kye failed with error -22 [ 375.056546][T11527] bio_check_eod: 44 callbacks suppressed [ 375.056562][T11527] syz.5.2273: attempt to access beyond end of device [ 375.056562][T11527] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 375.057343][T11535] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 375.074452][T11537] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.218872][ T5851] usb 4-1: USB disconnect, device number 16 [ 375.441002][T11545] loop0: detected capacity change from 0 to 256 [ 375.501833][T11545] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 375.731221][T11552] loop6: detected capacity change from 0 to 256 [ 375.739243][T11552] exfat: Deprecated parameter 'utf8' [ 375.739384][T11552] exfat: Deprecated parameter 'namecase' [ 375.739546][T11552] exfat: Deprecated parameter 'namecase' [ 375.739568][T11552] exfat: Deprecated parameter 'utf8' [ 375.835040][T11552] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 375.835433][T11552] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 375.960773][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.090627][T11556] loop3: detected capacity change from 0 to 256 [ 376.353914][ T5628] Bluetooth: hci0: command tx timeout [ 376.568887][T11568] loop6: detected capacity change from 0 to 512 [ 376.597229][T11568] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 376.628248][T11568] EXT4-fs (loop6): 1 truncate cleaned up [ 376.791843][T11568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.963112][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.126267][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 377.126284][ T39] audit: type=1326 audit(1777997665.961:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.147956][ T39] audit: type=1326 audit(1777997665.971:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.212315][ T39] audit: type=1326 audit(1777997666.031:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.213258][ T39] audit: type=1326 audit(1777997666.051:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.213290][ T39] audit: type=1326 audit(1777997666.051:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.213319][ T39] audit: type=1326 audit(1777997666.051:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.213347][ T39] audit: type=1326 audit(1777997666.051:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.213386][ T39] audit: type=1326 audit(1777997666.051:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.220808][ T39] audit: type=1326 audit(1777997666.051:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.221042][ T39] audit: type=1326 audit(1777997666.051:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523175cdd9 code=0x7ffc0000 [ 377.693869][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.792131][ T940] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 377.944053][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 377.944158][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 377.944197][ T940] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 377.944217][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.001711][ T940] usb 1-1: config 0 descriptor?? [ 378.007935][T11587] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.438220][ T5628] Bluetooth: hci0: command tx timeout [ 378.456255][ T940] hid_parser_main: 28 callbacks suppressed [ 378.456275][ T940] acrux 0003:1A34:0802.0017: unknown main item tag 0x7 [ 378.456299][ T940] acrux 0003:1A34:0802.0017: item fetching failed at offset 24/40 [ 378.456844][ T940] acrux 0003:1A34:0802.0017: parse failed [ 378.456903][ T940] acrux 0003:1A34:0802.0017: probe with driver acrux failed with error -22 [ 378.730572][ T940] usb 1-1: USB disconnect, device number 12 [ 378.742277][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.429862][T11646] loop5: detected capacity change from 0 to 512 [ 380.488871][T11646] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 380.523931][ T5628] Bluetooth: hci0: command tx timeout [ 380.625729][T11646] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2316: bg 0: block 104: invalid block bitmap [ 380.625766][T11646] loop5: lost filesystem error report for type 5 error -117 [ 380.633985][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 380.634007][ C1] EXT4-fs (loop5): initial error at time 1777997669: ext4_validate_block_bitmap:432 [ 380.634029][ C1] EXT4-fs (loop5): last error at time 1777997669: ext4_validate_block_bitmap:432 [ 380.879142][T11655] loop3: detected capacity change from 0 to 256 [ 380.951192][T11646] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 380.951221][T11646] loop5: lost filesystem error report for type 5 error -117 [ 380.955474][T11646] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2316: invalid indirect mapped block 1 (level 1) [ 380.955574][T11646] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 381.309715][T11646] EXT4-fs (loop5): 1 truncate cleaned up [ 381.447935][T11670] loop3: detected capacity change from 0 to 512 [ 381.471142][T11646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.498408][T11670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 381.614464][ T56] bridge_slave_1: left allmulticast mode [ 381.614503][ T56] bridge_slave_1: left promiscuous mode [ 381.614797][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.765118][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.883838][ T56] bridge_slave_0: left allmulticast mode [ 381.883875][ T56] bridge_slave_0: left promiscuous mode [ 381.884132][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.919691][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.210998][T11687] loop5: detected capacity change from 0 to 24 [ 382.261328][T11690] loop3: detected capacity change from 0 to 2048 [ 382.298061][T11690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.113885][T11706] loop0: detected capacity change from 0 to 2048 [ 383.258583][T11706] loop0: p1 < > p3 [ 383.269361][T11706] loop0: p3 size 134217728 extends beyond EOD, truncated [ 383.570750][T11704] loop5: detected capacity change from 0 to 32768 [ 383.597595][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 383.666343][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 383.991277][T11713] loop5: detected capacity change from 0 to 256 [ 384.173158][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.253209][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.296688][ T56] bond0 (unregistering): Released all slaves [ 384.386255][T11718] loop5: detected capacity change from 0 to 4096 [ 384.434270][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 384.735078][T11729] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.854715][ T56] tipc: Disabling bearer [ 384.952711][ T56] tipc: Disabling bearer [ 384.953006][ T56] tipc: Left network mode [ 385.218736][T11738] loop0: detected capacity change from 0 to 256 [ 385.316911][T11738] FAT-fs (loop0): Directory bread(block 64) failed [ 385.316948][T11738] FAT-fs (loop0): Directory bread(block 65) failed [ 385.317063][T11738] FAT-fs (loop0): Directory bread(block 66) failed [ 385.317086][T11738] FAT-fs (loop0): Directory bread(block 67) failed [ 385.317315][T11738] FAT-fs (loop0): Directory bread(block 68) failed [ 385.317339][T11738] FAT-fs (loop0): Directory bread(block 69) failed [ 385.317448][T11738] FAT-fs (loop0): Directory bread(block 70) failed [ 385.317469][T11738] FAT-fs (loop0): Directory bread(block 71) failed [ 385.317563][T11738] FAT-fs (loop0): Directory bread(block 72) failed [ 385.317584][T11738] FAT-fs (loop0): Directory bread(block 73) failed [ 385.896829][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.897541][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.897848][T11470] bridge_slave_0: entered allmulticast mode [ 385.939208][T11470] bridge_slave_0: entered promiscuous mode [ 385.949883][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.951862][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.967729][T11470] bridge_slave_1: entered allmulticast mode [ 385.980651][T11470] bridge_slave_1: entered promiscuous mode [ 386.250374][T11752] vlan2: entered promiscuous mode [ 386.250400][T11752] syz_tun: entered promiscuous mode [ 386.766680][ T5598] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 386.898203][T11741] loop5: detected capacity change from 0 to 32768 [ 386.914348][ T5598] usb 1-1: Using ep0 maxpacket: 32 [ 386.918822][ T5598] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 386.918853][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.954245][ T5598] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 387.079853][T11741] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 387.195950][T11741] XFS (loop5): Ending clean mount [ 387.295615][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.548226][ T7986] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 387.597445][ T5598] gspca_nw80x: reg_w err -71 [ 387.597549][ T5598] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 387.617522][ T5598] usb 1-1: USB disconnect, device number 13 [ 387.658630][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.188148][ T32] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 388.368916][ T32] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 388.368947][ T32] usb 7-1: config 0 has no interface number 0 [ 388.368996][ T32] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 388.369025][ T32] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.374091][ T32] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 388.374121][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.374140][ T32] usb 7-1: Product: syz [ 388.374152][ T32] usb 7-1: Manufacturer: syz [ 388.374165][ T32] usb 7-1: SerialNumber: syz [ 388.472956][ T32] usb 7-1: config 0 descriptor?? [ 388.473774][T11782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 388.539300][ T32] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 388.650468][ T32] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 388.916137][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.991291][ T940] usb 7-1: USB disconnect, device number 3 [ 389.206788][ T940] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 389.207740][ T940] cyberjack 7-1:0.69: device disconnected [ 389.524544][T11470] team0: Port device team_slave_0 added [ 389.830565][T11820] Bluetooth: MGMT ver 1.23 [ 390.016906][ T56] hsr_slave_0: left promiscuous mode [ 390.062112][ T56] hsr_slave_1: left promiscuous mode [ 390.063311][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.063338][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.113644][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.113679][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.234158][T11826] loop0: detected capacity change from 0 to 1024 [ 390.496907][ T56] veth1_macvtap: left promiscuous mode [ 390.497015][ T56] veth0_macvtap: left promiscuous mode [ 390.497489][ T56] veth1_vlan: left promiscuous mode [ 390.497691][ T56] veth0_vlan: left promiscuous mode [ 390.831562][T11826] hfsplus: bad catalog file entry [ 391.298581][T11831] hfsplus: xattr search failed [ 391.942720][T11859] loop0: detected capacity change from 0 to 4096 [ 391.950123][T11859] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 392.115972][T11863] loop5: detected capacity change from 0 to 512 [ 392.144605][T11863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.169109][T11863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 392.169466][T11863] EXT4-fs (loop5): orphan cleanup on readonly fs [ 392.232845][T11863] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 392.329463][T11863] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 392.329955][T11863] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.2393: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 392.329999][T11863] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 392.331312][T11863] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2393: couldn't read orphan inode 13 (err -117) [ 392.331399][T11863] loop5: lost filesystem error report for type 5 error -117 [ 392.331983][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 392.332027][ C0] EXT4-fs (loop5): last error at time 1777997681: ext4_orphan_get:1402 [ 392.405639][T11863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.482467][T11863] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 392.485751][T11863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 392.521523][T11863] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 392.629434][T11865] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 392.632440][T11865] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 392.675858][T11865] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 392.901122][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.372991][ T56] team0 (unregistering): Port device team_slave_1 removed [ 393.443378][ T56] team0 (unregistering): Port device team_slave_0 removed [ 393.687692][T11470] team0: Port device team_slave_1 added [ 393.698563][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 394.276441][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.276458][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.276485][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.336889][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.336905][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.336935][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.737930][T11906] loop6: detected capacity change from 0 to 2048 [ 394.961999][T11906] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 395.083966][T11906] syz.6.2406: attempt to access beyond end of device [ 395.083966][T11906] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 395.090985][T11908] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.136240][T11909] loop0: detected capacity change from 0 to 8 [ 395.260472][T11909] SQUASHFS error: Failed to read block 0x2d0: -5 [ 395.260492][T11909] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 395.260503][T11909] SQUASHFS error: Unable to read directory block [2ce:0] [ 395.529324][T11470] hsr_slave_0: entered promiscuous mode [ 395.541235][T11470] hsr_slave_1: entered promiscuous mode [ 396.296826][T11931] loop0: detected capacity change from 0 to 512 [ 396.356836][T11931] EXT4-fs (loop0): 1 truncate cleaned up [ 396.397602][T11931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.645909][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2421'. [ 396.645932][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'. [ 396.645959][T11943] netlink: 'syz.6.2421': attribute type 13 has an invalid length. [ 396.699785][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.688231][ T5598] kernel read not supported for file /input/mouse0 (pid: 5598 comm: kworker/0:3) [ 398.091313][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 398.164950][T11984] loop6: detected capacity change from 0 to 512 [ 398.194063][T11984] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.383550][T11984] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 398.412050][ C0] EXT4-fs (loop6): initial error at time 1777997687: ext4_mb_generate_buddy:1317 [ 398.412081][ C0] EXT4-fs (loop6): last error at time 1777997687: ext4_mb_generate_buddy:1317 [ 398.508169][T11984] __quota_error: 4 callbacks suppressed [ 398.508192][T11984] Quota error (device loop6): write_blk: dquota write failed [ 398.508211][T11984] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 398.508330][T11984] Quota error (device loop6): write_blk: dquota write failed [ 398.508446][T11984] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 398.508502][T11984] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2435: Failed to acquire dquot type 1 [ 398.508526][T11984] loop6: lost filesystem error report for type 5 error -28 [ 398.720225][T11984] EXT4-fs (loop6): 1 truncate cleaned up [ 398.738253][T11984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.850194][T11984] EXT4-fs error (device loop6): __ext4_remount:6837: comm syz.6.2435: Abort forced by user [ 398.856206][T11984] EXT4-fs (loop6): Remounting filesystem read-only [ 398.856224][T11984] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 398.965063][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.101496][T11976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.462433][T12005] loop3: detected capacity change from 0 to 256 [ 399.476148][T12005] exfat: Deprecated parameter 'utf8' [ 399.476234][T12005] exfat: Deprecated parameter 'namecase' [ 399.476288][T12005] exfat: Deprecated parameter 'namecase' [ 399.595513][T12005] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 400.089131][T12017] loop6: detected capacity change from 0 to 256 [ 400.090173][T12017] exfat: Deprecated parameter 'utf8' [ 400.090193][T12017] exfat: Deprecated parameter 'utf8' [ 400.090284][T12017] exfat: Deprecated parameter 'utf8' [ 400.134959][T12017] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb63bdf5f, utbl_chksum : 0xe619d30d) [ 400.303963][T12022] loop5: detected capacity change from 0 to 4096 [ 400.521155][T12025] comedi comedi3: 8255: I/O base address not correctly aligned [ 400.950698][T12022] ntfs3(loop5): ino=9, attr_set_size_ex [ 401.020269][T11976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.215477][T12040] fuse: blksize only supported for fuseblk [ 401.215832][T12035] pim6reg: entered allmulticast mode [ 401.240845][T12037] pim6reg: left allmulticast mode [ 401.498036][T12046] loop3: detected capacity change from 0 to 16 [ 401.697378][T12046] erofs (device loop3): mounted with root inode @ nid 36. [ 401.937241][T11976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.047959][T12059] loop3: detected capacity change from 0 to 2048 [ 402.210102][T12062] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.837609][T12074] loop6: detected capacity change from 0 to 64 [ 402.988972][T11976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.334279][T12087] comedi comedi3: 8255: I/O base address not correctly aligned [ 403.595052][T12092] loop5: detected capacity change from 0 to 64 [ 403.822409][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 403.921433][T11470] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.990742][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.050029][T11470] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.216939][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.249589][T11470] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.430319][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.437980][T11470] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.599020][T11470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.701017][T12118] loop6: detected capacity change from 0 to 512 [ 404.764138][T12118] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 404.764549][T12118] EXT4-fs (loop6): orphan cleanup on readonly fs [ 404.859760][T12118] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 404.859852][T12118] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 404.859867][T12118] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2488: Failed to acquire dquot type 1 [ 404.859883][T12118] loop6: lost filesystem error report for type 5 error -5 [ 404.864790][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 404.864878][ C1] EXT4-fs (loop6): initial error at time 1777997693: ext4_acquire_dquot:7034 [ 404.864952][ C1] EXT4-fs (loop6): last error at time 1777997693: ext4_acquire_dquot:7034 [ 405.120472][T12118] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2488: bg 0: block 40: padding at end of block bitmap is not set [ 405.120511][T12118] loop6: lost filesystem error report for type 5 error -117 [ 405.121674][T12118] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 405.121700][T12118] loop6: lost filesystem error report for type 5 error -117 [ 405.235663][T12118] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.2488: data will be lost [ 405.235869][T12118] EXT4-fs (loop6): 1 truncate cleaned up [ 405.277838][T12118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.488415][T12118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.950356][T12146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.361461][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 406.413385][T12156] loop3: detected capacity change from 0 to 128 [ 406.445749][T12156] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 406.445805][T12156] hpfs: filesystem error: improperly stopped [ 406.445822][T12156] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 406.445838][T12156] hpfs: You really don't want any checks? You are crazy... [ 406.446163][T12156] hpfs: hpfs_map_sector(): read error [ 406.446171][T12156] hpfs: code page support is disabled [ 406.457444][T12156] hpfs: hpfs_map_4sectors(): unaligned read [ 406.457661][T12156] hpfs: hpfs_map_4sectors(): unaligned read [ 406.457691][T12156] hpfs: filesystem error: unable to find root dir [ 406.556504][T12156] hpfs: hpfs_map_4sectors(): unaligned read [ 406.836156][T12162] loop6: detected capacity change from 0 to 512 [ 406.933277][T12162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.933397][T12162] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.312694][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.436147][T12178] loop5: detected capacity change from 0 to 512 [ 407.509837][T12178] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 407.543054][T12178] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2503: bad orphan inode 131083 [ 407.543094][T12178] loop5: lost filesystem error report for type 5 error -117 [ 407.589844][T12178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.723825][T12185] loop6: detected capacity change from 0 to 1024 [ 407.778226][T12178] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2503: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 408.020055][ T7986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.022671][T12193] loop3: detected capacity change from 0 to 256 [ 408.041391][T12193] exfat: Deprecated parameter 'utf8' [ 408.211645][T12193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 408.462592][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.668837][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.794614][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.863271][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.938785][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.938985][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.124887][T12208] loop3: detected capacity change from 0 to 32768 [ 410.149658][T12208] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.217854][T12240] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2521'. [ 410.243533][T12249] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2521'. [ 410.281844][T12208] XFS (loop3): Ending clean mount [ 410.636109][ T5609] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.655865][T12260] loop5: detected capacity change from 0 to 64 [ 411.278655][T12275] loop6: detected capacity change from 0 to 64 [ 411.372135][T12270] loop0: detected capacity change from 0 to 4096 [ 411.378715][T12270] EXT4-fs: Ignoring removed orlov option [ 411.394089][T12270] EXT4-fs (loop0): Test dummy encryption mode enabled [ 411.507187][T12270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.903441][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.928047][T12275] minix_free_block (loop6:21): bit already cleared [ 412.249902][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.260745][T12295] [U]  [ 412.260789][T12295] [U] K{ [ 412.261222][T12295] [U] T 1ŠFFˊ`GJǘGO/MC [ 412.285293][T12295] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 412.286213][T12295] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 412.447453][T12295] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 412.551732][T12303] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2536'. [ 412.551867][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2536'. [ 412.684066][T12295] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 412.691499][T12295] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 412.726441][T12295] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 412.747594][T12295] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 412.850470][T12295] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 412.937456][T12295] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 412.937663][T12295] [U] 22Ʃ۩X?0;3U [ 413.064995][T12295] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 413.065868][T12295] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 413.081365][T12295] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 413.109598][T12295] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 413.153549][T12295] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 413.153620][T12295] [U] EC [ 413.154676][T12295] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 413.218117][T12295] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 413.368759][T12314] gtp0: entered promiscuous mode [ 413.368778][T12314] gtp0: entered allmulticast mode [ 413.627382][T12325] nbd: couldn't find a device at index -503316480 [ 413.780151][T11470] veth0_vlan: entered promiscuous mode [ 413.876542][T11470] veth1_vlan: entered promiscuous mode [ 413.959949][T12335] loop3: detected capacity change from 0 to 128 [ 413.973793][T12335] FAT-fs (loop3): Directory bread(block 524322) failed [ 413.973824][T12335] FAT-fs (loop3): Directory bread(block 524323) failed [ 413.973848][T12335] FAT-fs (loop3): Directory bread(block 524324) failed [ 413.973872][T12335] FAT-fs (loop3): Directory bread(block 524325) failed [ 413.973895][T12335] FAT-fs (loop3): Directory bread(block 524326) failed [ 413.973919][T12335] FAT-fs (loop3): Directory bread(block 524327) failed [ 413.973943][T12335] FAT-fs (loop3): Directory bread(block 524328) failed [ 413.973966][T12335] FAT-fs (loop3): Directory bread(block 524329) failed [ 414.161474][T11470] veth0_macvtap: entered promiscuous mode [ 414.172466][ T940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 414.229144][T12335] FAT-fs (loop3): Directory bread(block 524322) failed [ 414.229193][T12335] FAT-fs (loop3): Directory bread(block 524323) failed [ 414.335117][ T940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.335153][ T940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.335192][ T940] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 414.335216][ T940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.400804][ T940] usb 6-1: config 0 descriptor?? [ 414.419800][T11470] veth1_macvtap: entered promiscuous mode [ 415.055468][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.091146][ T940] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -71 [ 415.148271][ T940] usb 6-1: USB disconnect, device number 7 [ 415.285537][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.469232][ T152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.474143][ T152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.586308][T12338] loop0: detected capacity change from 0 to 32768 [ 415.605324][ T152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.605473][ T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.750163][T12338] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.004320][ T940] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 416.010016][T12338] XFS (loop0): Ending clean mount [ 416.053421][T12379] loop3: detected capacity change from 0 to 256 [ 416.204266][ T940] usb 7-1: Using ep0 maxpacket: 8 [ 416.212322][ T940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 416.212429][ T940] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 416.212472][ T940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.343313][ T940] usb 7-1: config 0 descriptor?? [ 416.419948][ T5611] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.948390][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948425][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948450][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948474][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948499][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948524][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948594][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948619][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948644][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 416.948668][ T940] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 417.087149][ T940] hid-led 0003:0FC5:B080.0019: probe with driver hid-led failed with error -71 [ 417.149922][ T940] usb 7-1: USB disconnect, device number 4 [ 418.025409][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 418.182514][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.182535][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.610165][T12407] loop0: detected capacity change from 0 to 64 [ 418.888537][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.888560][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.091474][T12399] loop5: detected capacity change from 0 to 32768 [ 419.187942][T12399] [ 419.187942][T12399] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 419.187942][T12399] [ 419.561035][T12399] ERROR: (device loop5): diWrite: ixpxd invalid [ 419.561035][T12399] [ 419.577154][T12399] ERROR: (device loop5): txCommit: [ 419.577154][T12399] [ 419.577880][T12399] ERROR: (device loop5): dtSearch: stack overrun! [ 419.577880][T12399] [ 419.577925][T12399] btstack dump: [ 419.577930][T12399] bn = 0, index = 0 [ 419.577940][T12399] bn = 0, index = 0 [ 419.577959][T12399] bn = 0, index = 0 [ 419.577968][T12399] bn = 0, index = 0 [ 419.577976][T12399] bn = 0, index = 0 [ 419.578004][T12399] bn = 0, index = 0 [ 419.578013][T12399] bn = 0, index = 0 [ 419.578023][T12399] bn = 0, index = 0 [ 419.578058][T12399] jfs_lookup: dtSearch returned -5 [ 419.777076][ T5744] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 419.913655][ T7986] [ 419.913655][ T7986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 419.913655][ T7986] [ 419.917925][ T7986] [ 419.917925][ T7986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 419.917925][ T7986] [ 419.955487][ T5744] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.955517][ T5744] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 419.955540][ T5744] usb 4-1: config 1 has no interface number 0 [ 419.955585][ T5744] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.955614][ T5744] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 419.955643][ T5744] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 419.955677][ T5744] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.041471][ T5744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.041503][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.041524][ T5744] usb 4-1: Product: syz [ 420.041539][ T5744] usb 4-1: Manufacturer: syz [ 420.041554][ T5744] usb 4-1: SerialNumber: syz [ 420.097244][T12425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.574009][T12425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.778476][ T5744] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 420.778521][ T5744] cdc_ncm 4-1:1.1: bind() failure [ 420.869027][T12439] loop7: detected capacity change from 0 to 4096 [ 420.921200][ T5744] usb 4-1: USB disconnect, device number 17 [ 421.454968][T12459] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.073649][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 422.835121][T12351] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 422.955494][T12498] loop0: detected capacity change from 0 to 256 [ 422.958324][T12498] exfat: Deprecated parameter 'utf8' [ 422.992117][T12351] usb 7-1: Using ep0 maxpacket: 16 [ 422.994260][T12351] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 422.994282][T12351] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.994300][T12351] usb 7-1: config 1 has no interface number 0 [ 423.034341][T12351] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 423.034371][T12351] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 423.034390][T12351] usb 7-1: Product: syz [ 423.034404][T12351] usb 7-1: Manufacturer: syz [ 423.034418][T12351] usb 7-1: SerialNumber: syz [ 423.236204][T12498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 423.361008][ T5851] usb 7-1: USB disconnect, device number 5 [ 423.473074][T12351] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 423.654007][T12351] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.654032][T12351] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.674655][T12351] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.674684][T12351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.674705][T12351] usb 8-1: SerialNumber: syz [ 423.705624][ T32] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 423.947640][ T32] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 423.947674][ T32] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 423.947696][ T32] usb 4-1: Product: syz [ 423.947712][ T32] usb 4-1: Manufacturer: syz [ 423.947743][ T32] usb 4-1: SerialNumber: syz [ 424.014140][T12351] usb 8-1: 0:2 : does not exist [ 424.326042][ T32] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 424.379331][T12351] usb 8-1: USB disconnect, device number 2 [ 424.567011][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.659505][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 424.659548][ T32] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 424.899612][ T32] usb 4-1: USB disconnect, device number 18 [ 424.957478][T12542] loop6: detected capacity change from 0 to 256 [ 425.090042][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 425.235092][T12542] FAT-fs (loop6): Directory bread(block 64) failed [ 425.235118][T12542] FAT-fs (loop6): Directory bread(block 65) failed [ 425.235188][T12542] FAT-fs (loop6): Directory bread(block 66) failed [ 425.235204][T12542] FAT-fs (loop6): Directory bread(block 67) failed [ 425.235281][T12542] FAT-fs (loop6): Directory bread(block 68) failed [ 425.235297][T12542] FAT-fs (loop6): Directory bread(block 69) failed [ 425.235366][T12542] FAT-fs (loop6): Directory bread(block 70) failed [ 425.235382][T12542] FAT-fs (loop6): Directory bread(block 71) failed [ 425.235453][T12542] FAT-fs (loop6): Directory bread(block 72) failed [ 425.235469][T12542] FAT-fs (loop6): Directory bread(block 73) failed [ 425.603661][T12556] loop7: detected capacity change from 0 to 256 [ 425.604802][T12556] exfat: Deprecated parameter 'utf8' [ 425.604848][T12556] exfat: Deprecated parameter 'utf8' [ 425.606526][T12556] exfat: Deprecated parameter 'utf8' [ 425.940942][T12563] loop3: detected capacity change from 0 to 128 [ 426.048438][T12563] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 426.048474][T12563] hpfs: filesystem error: improperly stopped [ 426.048488][T12563] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 426.048504][T12563] hpfs: You really don't want any checks? You are crazy... [ 426.048520][T12563] hpfs: Code page index out of array [ 426.048528][T12563] hpfs: code page support is disabled [ 426.048891][T12563] hpfs: hpfs_map_4sectors(): unaligned read [ 426.048981][T12563] hpfs: hpfs_map_4sectors(): unaligned read [ 426.048993][T12563] hpfs: filesystem error: unable to find root dir [ 426.151132][T12520] loop5: detected capacity change from 0 to 32768 [ 426.186340][T12556] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 426.367705][T12520] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 426.622370][T12520] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 426.689015][T12520] XFS (loop5): Starting recovery (logdev: internal) [ 426.913253][T12520] XFS (loop5): Ending recovery (logdev: internal) [ 426.985223][T12585] loop6: detected capacity change from 0 to 64 [ 427.033257][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 427.075354][ T7986] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 427.169293][T12584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.396134][ T5622] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 427.396349][ T5622] Bluetooth: hci4: Injecting HCI hardware error event [ 427.411697][ T5622] Bluetooth: hci4: hardware error 0x00 [ 427.997228][T12597] loop3: detected capacity change from 0 to 2048 [ 428.358058][T12597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.818926][T12613] loop5: detected capacity change from 0 to 256 [ 428.954815][T12613] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 429.052948][T12619] comedi comedi3: 8255: I/O base address not correctly aligned [ 430.193054][ T5622] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 430.433536][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 430.743930][T12662] loop5: detected capacity change from 0 to 16 [ 430.826955][T12662] erofs (device loop5): mounted with root inode @ nid 36. [ 430.862940][T12666] loop7: detected capacity change from 0 to 512 [ 430.928717][T12666] EXT4-fs (loop7): 1 truncate cleaned up [ 430.962164][T12666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.572621][T11470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.593571][T12679] loop3: detected capacity change from 0 to 512 [ 431.707273][T12679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.829887][T12679] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 432.063374][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.196034][T12702] netlink: 'syz.0.2664': attribute type 5 has an invalid length. [ 432.289468][T12709] loop6: detected capacity change from 0 to 136 [ 433.089863][T12730] loop7: detected capacity change from 0 to 512 [ 433.125360][T12730] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 433.198881][T12735] loop3: detected capacity change from 0 to 256 [ 433.223314][T12735] exfat: Deprecated parameter 'utf8' [ 433.223381][T12735] exfat: Deprecated parameter 'utf8' [ 433.239915][T12730] EXT4-fs (loop7): 1 truncate cleaned up [ 433.256479][T12735] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 433.267362][T12730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.834694][T11470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.936103][T12746] loop6: detected capacity change from 0 to 4096 [ 434.009832][T12749] loop0: detected capacity change from 0 to 4096 [ 434.181559][T12749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.378964][T12746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.736116][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.953610][ T39] audit: type=1800 audit(1777997723.781:61): pid=12749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2682" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 435.218492][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 435.663261][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.754015][T12781] loop7: detected capacity change from 0 to 256 [ 435.847926][T12781] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 435.930058][T12788] loop6: detected capacity change from 0 to 256 [ 436.012972][T12788] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d) [ 436.252470][ T5744] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.412032][ T5744] usb 1-1: Using ep0 maxpacket: 16 [ 436.415548][ T5744] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 436.415575][ T5744] usb 1-1: config 127 has no interface number 0 [ 436.415608][ T5744] usb 1-1: config 127 interface 124 has no altsetting 0 [ 436.418141][ T5744] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 436.418167][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.418182][ T5744] usb 1-1: Product: syz [ 436.418192][ T5744] usb 1-1: Manufacturer: syz [ 436.418207][ T5744] usb 1-1: SerialNumber: syz [ 437.003554][T12813] loop3: detected capacity change from 0 to 8 [ 437.349186][T12351] kernel write not supported for file /input/mouse0 (pid: 12351 comm: kworker/0:4) [ 437.519722][T12822] loop3: detected capacity change from 0 to 256 [ 437.800011][ T5744] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 438.092491][ T940] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 438.326110][T12840] loop7: detected capacity change from 0 to 2048 [ 438.348815][ T940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.348857][ T940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 438.348949][ T940] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.348992][ T940] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 438.349022][ T940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.438781][T12840] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 438.444046][T12840] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 438.541346][ T940] usb 6-1: config 0 descriptor?? [ 438.542464][T12827] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 438.557601][T12840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.910307][ T5744] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.910457][ T5744] usb 1-1: device firmware changed [ 439.050067][ T940] hid_parser_main: 30 callbacks suppressed [ 439.050095][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x3 [ 439.050127][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050154][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050182][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050430][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050460][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050488][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050515][ T940] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x0 [ 439.050594][ T940] gt683r_led 0003:1770:FF00.001A: unknown global tag 0xe [ 439.050611][ T940] gt683r_led 0003:1770:FF00.001A: item 0 0 1 14 parsing failed [ 439.105839][ T940] gt683r_led 0003:1770:FF00.001A: hid parsing failed [ 439.106200][ T940] gt683r_led 0003:1770:FF00.001A: probe with driver gt683r_led failed with error -22 [ 439.264585][ T940] usb 6-1: USB disconnect, device number 8 [ 439.392031][ T5622] Bluetooth: hci0: link tx timeout [ 439.405594][ T5622] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.530672][ T5744] usb 1-1: USB disconnect, device number 14 [ 439.804382][T12867] netlink: 'syz.3.2727': attribute type 10 has an invalid length. [ 439.892048][ T5851] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.120218][ T5851] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 440.120249][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.159071][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.179377][ T5851] usb 8-1: config 0 descriptor?? [ 440.203483][ T5851] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 440.617652][T12881] macvlan2: entered promiscuous mode [ 440.617677][T12881] team0: entered promiscuous mode [ 440.617758][T12881] team_slave_0: entered promiscuous mode [ 440.618147][T12881] team_slave_1: entered promiscuous mode [ 440.664385][T12881] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.810428][ T5851] gspca_sunplus: reg_w_riv err -71 [ 440.810528][ T5851] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 440.836528][ T5851] usb 8-1: USB disconnect, device number 3 [ 441.017113][T12892] loop5: detected capacity change from 0 to 128 [ 441.079877][ T39] audit: type=1800 audit(1777997729.911:62): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2737" name="file2" dev="loop5" ino=1048771 res=0 errno=0 [ 441.153380][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.153416][T12892] FAT-fs (loop5): Filesystem has been set read-only [ 441.256688][T12900] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2741'. [ 441.269163][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269583][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269658][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269724][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269806][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269869][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269932][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.269994][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.472432][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 441.615100][T12892] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 441.895792][ T5744] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 442.055513][ T5744] usb 8-1: Using ep0 maxpacket: 16 [ 442.067888][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.067914][ T5744] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.067945][ T5744] usb 8-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 442.067962][ T5744] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.137268][ T5744] usb 8-1: config 0 descriptor?? [ 442.495613][T12351] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 442.583339][ T5744] belkin 0003:1020:0006.001B: unknown main item tag 0x0 [ 442.583377][ T5744] belkin 0003:1020:0006.001B: unknown main item tag 0x0 [ 442.669752][T12351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.669788][T12351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.669827][T12351] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 442.669851][T12351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.745091][T12351] usb 1-1: config 0 descriptor?? [ 442.818220][T12931] loop6: detected capacity change from 0 to 512 [ 442.819381][T12931] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.871089][T12931] EXT4-fs (loop6): orphan cleanup on readonly fs [ 442.871105][T12931] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 443.058155][T12931] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2753: attempt to clear invalid blocks 2 len 1 [ 443.058262][T12931] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 443.064820][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 443.064882][ C0] EXT4-fs (loop6): initial error at time 1777997731: ext4_clear_blocks:876: inode 13 [ 443.065016][ C0] EXT4-fs (loop6): last error at time 1777997731: ext4_clear_blocks:876: inode 13 [ 443.230582][T12931] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 443.314258][T12931] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2753: invalid indirect mapped block 1819239214 (level 0) [ 443.314302][T12931] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 443.430064][T12931] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2753: invalid indirect mapped block 1819239214 (level 1) [ 443.430103][T12931] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 443.495129][T12351] hid-generic 0003:0925:8066.001C: unbalanced collection at end of report description [ 443.495668][T12351] hid-generic 0003:0925:8066.001C: probe with driver hid-generic failed with error -22 [ 443.596157][ T5744] belkin 0003:1020:0006.001B: hidraw0: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.7-1/input0 [ 443.597905][T12351] usb 1-1: USB disconnect, device number 15 [ 443.719339][ T5744] usb 8-1: USB disconnect, device number 4 [ 443.784554][T12931] EXT4-fs (loop6): 1 truncate cleaned up [ 443.937321][T12931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.967237][T12940] fido_id[12940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 444.145271][T12931] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 444.403645][T10042] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.441757][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 444.441781][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'. [ 444.441807][T12955] netlink: 'syz.0.2760': attribute type 18 has an invalid length. [ 444.495065][T12934] loop5: detected capacity change from 0 to 32768 [ 444.564165][T12934] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 444.668115][T12965] loop7: detected capacity change from 0 to 256 [ 444.669365][T12965] exfat: Deprecated parameter 'namecase' [ 444.731868][T12934] XFS (loop5): Ending clean mount [ 444.764942][T12965] exFAT-fs (loop7): error, invalid access to FAT bad cluster (entry 0x00000005) [ 444.764969][T12965] exFAT-fs (loop7): failed to count the number of clusters in root [ 444.764980][T12965] exFAT-fs (loop7): failed to recognize exfat type [ 444.812936][T12969] xt_socket: unknown flags 0xe4 [ 444.906238][T12972] loop0: detected capacity change from 0 to 128 [ 444.907396][T12972] msdos: Bad value for 'gid' [ 444.907412][T12972] msdos: Bad value for 'gid' [ 444.983802][ T7986] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.307688][T12995] loop7: detected capacity change from 0 to 2048 [ 446.653561][T12967] loop6: detected capacity change from 0 to 32768 [ 446.811503][T12967] [ 446.811503][T12967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.811503][T12967] [ 446.849742][T13010] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2775'. [ 446.849798][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2775'. [ 447.106175][T13013] loop3: detected capacity change from 0 to 64 [ 447.284485][T13016] [ 447.284485][T13016] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 447.284485][T13016] [ 447.308259][T13016] [ 447.308259][T13016] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 447.308259][T13016] [ 447.511240][T12967] ERROR: (device loop6): diWrite: ixpxd invalid [ 447.511240][T12967] [ 447.672445][T12967] ERROR: (device loop6): txCommit: [ 447.672445][T12967] [ 447.725558][T12994] loop0: detected capacity change from 0 to 32768 [ 448.149863][T10042] [ 448.149863][T10042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.149863][T10042] [ 448.151652][T10042] [ 448.151652][T10042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.151652][T10042] [ 448.850175][ T39] audit: type=1326 audit(1777997737.681:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.886789][ T39] audit: type=1326 audit(1777997737.681:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.928155][ T39] audit: type=1326 audit(1777997737.751:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.928217][ T39] audit: type=1326 audit(1777997737.751:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.972270][ T39] audit: type=1326 audit(1777997737.791:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.972326][ T39] audit: type=1326 audit(1777997737.801:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 448.972371][ T39] audit: type=1326 audit(1777997737.801:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 449.146298][ T39] audit: type=1326 audit(1777997737.981:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0ae5bd60e code=0x7ffc0000 [ 449.146493][ T39] audit: type=1326 audit(1777997737.981:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 449.146641][ T39] audit: type=1326 audit(1777997737.981:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz.5.2788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd0ae5fcdd9 code=0x7ffc0000 [ 450.167827][T13082] loop3: detected capacity change from 0 to 256 [ 450.264270][T13080] loop6: detected capacity change from 0 to 512 [ 450.276976][T13082] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 450.497180][T13084] loop5: detected capacity change from 0 to 1024 [ 450.560487][T13084] hfsplus: failed to load extents file [ 451.060782][T13060] loop0: detected capacity change from 0 to 32768 [ 451.445604][T13099] loop5: detected capacity change from 0 to 128 [ 451.642227][T12351] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 451.681730][T13099] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 451.681792][T13099] hpfs: filesystem error: improperly stopped [ 451.681807][T13099] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 451.681822][T13099] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 451.681832][T13099] hpfs: You really don't want any checks? You are crazy... [ 451.736606][T13099] hpfs: hpfs_map_sector(): read error [ 451.736625][T13099] hpfs: code page support is disabled [ 451.736754][T13099] hpfs: hpfs_map_4sectors(): unaligned read [ 451.736842][T13099] hpfs: hpfs_map_4sectors(): unaligned read [ 451.736853][T13099] hpfs: filesystem error: unable to find root dir [ 451.828767][T12351] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.828806][T12351] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 451.828835][T12351] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.828863][T12351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.828898][T12351] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 451.828924][T12351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.893779][T12351] usb 7-1: config 0 descriptor?? [ 451.894879][T13100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 452.128508][T13060] read_mapping_page failed! [ 452.128738][T13060] ERROR: (device loop0): txCommit: [ 452.128738][T13060] [ 452.318812][T13060] ERROR: (device loop0): remounting filesystem as read-only [ 452.354719][T12351] hid (null): unknown global tag 0xe [ 452.354746][T12351] hid (null): unknown global tag 0xe [ 452.382420][T12351] uclogic 0003:5543:0004.001D: unknown global tag 0xe [ 452.382444][T12351] uclogic 0003:5543:0004.001D: item 0 1 1 14 parsing failed [ 452.383316][T12351] uclogic 0003:5543:0004.001D: parse failed [ 452.383428][T12351] uclogic 0003:5543:0004.001D: probe with driver uclogic failed with error -22 [ 452.599434][ T5739] usb 7-1: USB disconnect, device number 6 [ 452.931996][ T129] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0) [ 452.932497][ T129] ------------[ cut here ]------------ [ 452.932508][ T129] kernel BUG at fs/jfs/jfs_txnmgr.c:933! [ 452.932557][ T129] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 452.932701][ T129] CPU: 1 UID: 0 PID: 129 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.932735][ T129] Tainted: [L]=SOFTLOCKUP [ 452.932743][ T129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.932756][ T129] RIP: 0010:txUnlock+0xd6c/0xdb0 [ 452.932786][ T129] Code: cb fd 90 0f 0b e8 d4 80 68 fe 48 c7 c7 60 b5 8b 8b 48 c7 c6 59 b1 8b 8b ba a5 03 00 00 48 c7 c1 a0 c2 8b 8b e8 c5 30 cb fd 90 <0f> 0b e8 ad 80 68 fe 48 c7 c7 60 b5 8b 8b 48 c7 c6 59 b1 8b 8b ba [ 452.932805][ T129] RSP: 0018:ffffc90003847c50 EFLAGS: 00010246 [ 452.932824][ T129] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 9a714e688c3e9900 [ 452.932839][ T129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.932850][ T129] RBP: ffffc900033aa090 R08: 0000000000000000 R09: 0000000000000000 [ 452.932863][ T129] R10: dffffc0000000000 R11: fffff52000708f39 R12: dffffc0000000000 [ 452.932877][ T129] R13: 1ffff11003e62507 R14: ffff88801f312838 R15: 0000000000000000 [ 452.932890][ T129] FS: 0000000000000000(0000) GS:ffff888126025000(0000) knlGS:0000000000000000 [ 452.932906][ T129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.932919][ T129] CR2: 00007fd0af3ada08 CR3: 000000005d3bc000 CR4: 00000000003526f0 [ 452.932938][ T129] Call Trace: [ 452.932945][ T129] [ 452.932961][ T129] jfs_lazycommit+0x52c/0xa10 [ 452.932991][ T129] ? __pfx_jfs_lazycommit+0x10/0x10 [ 452.933018][ T129] ? __pfx_default_wake_function+0x10/0x10 [ 452.933043][ T129] ? __kthread_parkme+0x7a/0x1f0 [ 452.933075][ T129] kthread+0x388/0x470 [ 452.933104][ T129] ? __pfx_jfs_lazycommit+0x10/0x10 [ 452.933127][ T129] ? __pfx_kthread+0x10/0x10 [ 452.933154][ T129] ret_from_fork+0x514/0xb70 [ 452.933182][ T129] ? __pfx_ret_from_fork+0x10/0x10 [ 452.933207][ T129] ? __switch_to+0xc79/0x1410 [ 452.933229][ T129] ? __pfx_kthread+0x10/0x10 [ 452.933260][ T129] ret_from_fork_asm+0x1a/0x30 [ 452.933297][ T129] [ 452.933315][ T129] Modules linked in: [ 452.933340][ T129] ---[ end trace 0000000000000000 ]--- [ 452.933355][ T129] RIP: 0010:txUnlock+0xd6c/0xdb0 [ 452.933380][ T129] Code: cb fd 90 0f 0b e8 d4 80 68 fe 48 c7 c7 60 b5 8b 8b 48 c7 c6 59 b1 8b 8b ba a5 03 00 00 48 c7 c1 a0 c2 8b 8b e8 c5 30 cb fd 90 <0f> 0b e8 ad 80 68 fe 48 c7 c7 60 b5 8b 8b 48 c7 c6 59 b1 8b 8b ba [ 452.933728][ T129] RSP: 0018:ffffc90003847c50 EFLAGS: 00010246 [ 452.933748][ T129] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 9a714e688c3e9900 [ 452.933763][ T129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.933775][ T129] RBP: ffffc900033aa090 R08: 0000000000000000 R09: 0000000000000000 [ 452.933789][ T129] R10: dffffc0000000000 R11: fffff52000708f39 R12: dffffc0000000000 [ 452.933805][ T129] R13: 1ffff11003e62507 R14: ffff88801f312838 R15: 0000000000000000 [ 452.933820][ T129] FS: 0000000000000000(0000) GS:ffff888126025000(0000) knlGS:0000000000000000 [ 452.933836][ T129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.933850][ T129] CR2: 00007fd0af3ada08 CR3: 0000000034d02000 CR4: 00000000003526f0 [ 452.933876][ T129] Kernel panic - not syncing: Fatal exception [ 452.934497][ T129] Kernel Offset: disabled