last executing test programs: 2m53.718764077s ago: executing program 1 (id=877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x1}}, 0x5) 2m53.555213834s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x801, 0x70bd2a, 0x3f000000, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 2m53.374160493s ago: executing program 1 (id=880): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x129801, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000d00)=0x4) 2m53.140461225s ago: executing program 1 (id=886): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 2m52.63940408s ago: executing program 1 (id=894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000000800020003000000240004"], 0x48}}, 0x0) 2m51.965071024s ago: executing program 1 (id=901): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0) 2m51.488526427s ago: executing program 32 (id=901): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0) 2m33.621021224s ago: executing program 2 (id=1086): r0 = syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000002d00)=""/4102, 0x1000}], 0x10) 2m33.372014596s ago: executing program 2 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8f}, {0xc, 0x90, 0xd}}]}, 0x54}}, 0x0) 2m33.029885963s ago: executing program 2 (id=1091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 2m32.782300035s ago: executing program 2 (id=1094): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 2m32.584484235s ago: executing program 2 (id=1096): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m31.502776609s ago: executing program 2 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000180)={0x9f, 0x0, 0x1}) 2m16.280522705s ago: executing program 33 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000180)={0x9f, 0x0, 0x1}) 1m51.545469822s ago: executing program 0 (id=1504): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 1m50.984049801s ago: executing program 0 (id=1508): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m50.796420849s ago: executing program 0 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2000800}, 0x8000) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0xa000) 1m50.554774891s ago: executing program 0 (id=1512): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000002c0)='./file0\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xff, 0x2ce, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000380)={[{}]}) 1m50.015215428s ago: executing program 0 (id=1516): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r1 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000014}) 1m49.534668042s ago: executing program 0 (id=1518): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 1m49.16519625s ago: executing program 34 (id=1518): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 1m31.527237496s ago: executing program 6 (id=1651): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 1m30.491681187s ago: executing program 6 (id=1658): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001e40)={0x2, 0x2, {0x7f, @usage=0x1, 0x0, 0x4, 0x2, 0x3fe5, 0x25b, 0x13f, 0x10, @usage=0x6, 0x9, 0xfff, [0x70a, 0xfffffffffffffff7, 0x7, 0x20fc6c1e, 0x0, 0xb8]}, {0x6, @usage=0x5, 0x0, 0x2000000000000004, 0x100000001, 0xa, 0x0, 0x40000100, 0x10, @struct={0x3ff, 0xfffffffe}, 0x0, 0x2, [0x4, 0x4, 0x5, 0xf, 0x8, 0x44]}, {0x0, @struct={0x101, 0x2}, 0x0, 0x6, 0x6, 0x400, 0xf, 0x4, 0x22, @usage=0x1, 0x7, 0x3, [0x200, 0x3, 0x8, 0x9, 0x40000000009, 0x3]}, {0x9, 0x10001, 0x9}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) 1m28.962149053s ago: executing program 6 (id=1668): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) 1m28.600006511s ago: executing program 6 (id=1670): r0 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m28.299264066s ago: executing program 6 (id=1671): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5) 1m28.03226336s ago: executing program 6 (id=1675): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000240)) 1m12.967540747s ago: executing program 35 (id=1675): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000240)) 2.918851724s ago: executing program 5 (id=2496): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x100, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x14, "c4363c16"}, 0x0, 0x2, {0x0}, 0x5000000}) 2.824407489s ago: executing program 5 (id=2499): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000", @ANYRESHEX], 0x30}}, 0x0) 2.551308322s ago: executing program 5 (id=2502): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@nointegrity}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) 2.307065775s ago: executing program 8 (id=2507): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffcdd}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004) 2.031011469s ago: executing program 8 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 1.702634015s ago: executing program 8 (id=2514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000440)={0x18, {"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", 0x1000}}, 0x1006) 1.365854792s ago: executing program 5 (id=2518): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000040000000400000000000000", @ANYRES32=r0], 0x48) 1.320362434s ago: executing program 7 (id=2519): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1.269311427s ago: executing program 8 (id=2521): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x20, 0x4, @loopback={0xffffffffffff0000}, 0xc}, {0xa, 0x4e20, 0xf7, @empty, 0xd}, r1, 0x40099c}}, 0x48) 1.267003677s ago: executing program 4 (id=2522): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.147850963s ago: executing program 5 (id=2523): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.072001526s ago: executing program 3 (id=2524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}}, 0x80) 1.040643478s ago: executing program 4 (id=2525): r0 = msgget$private(0x0, 0x101) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x5800) 997.53582ms ago: executing program 7 (id=2526): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 986.058641ms ago: executing program 8 (id=2527): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x22}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts={0x3c}, 0x8) 912.418644ms ago: executing program 5 (id=2528): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='pagemap\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 819.963319ms ago: executing program 4 (id=2529): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000001240)={[{@nodecompose}, {}, {@type={'type', 0x3d, "4d99459f"}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x1, 0x6b3, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147842, 0x61) sendfile(r0, r0, 0x0, 0x80000000) 816.439749ms ago: executing program 3 (id=2530): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 769.528431ms ago: executing program 7 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 713.562964ms ago: executing program 8 (id=2532): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=") lsetxattr$security_ima(&(0x7f0000000b00)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140), 0x1, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x0) 579.62479ms ago: executing program 3 (id=2533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x8850) 536.814713ms ago: executing program 4 (id=2534): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) 507.474874ms ago: executing program 7 (id=2535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) 339.904122ms ago: executing program 3 (id=2536): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 319.252643ms ago: executing program 4 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 276.873866ms ago: executing program 7 (id=2538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000015c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20020090) 200.735629ms ago: executing program 3 (id=2539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 103.224744ms ago: executing program 7 (id=2540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x40, r1, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}}, 0x44004) 67.700046ms ago: executing program 3 (id=2541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=2542): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setuid(0xee00) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) kernel console output (not intermixed with test programs): o 512 [ 220.252025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.261478][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.268614][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.321660][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.333143][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.350278][ T8659] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1591: couldn't read orphan inode 26 (err -116) [ 220.378566][ T8659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.393872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.415576][ T8659] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.435499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.475653][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.524706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.554891][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.597387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.621207][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 220.633533][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 220.642516][ T8675] loop4: detected capacity change from 0 to 164 [ 220.676274][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.738654][ T8471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.787397][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.818236][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.829458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.102986][ T8655] loop5: detected capacity change from 0 to 32768 [ 221.181816][ T8655] JBD2: Ignoring recovery information on journal [ 221.311426][ T8655] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 221.477296][ T8655] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 4106 [ 221.481984][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1602'. [ 221.510682][ T8655] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 221.537633][ T8655] OCFS2: File system is now read-only. [ 221.558449][ T8655] (syz.5.1589,8655,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 221.589366][ T8655] (syz.5.1589,8655,0):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 221.590344][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.626316][ T8655] (syz.5.1589,8655,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 221.636543][ T8655] (syz.5.1589,8655,1):ocfs2_symlink:1871 ERROR: status = -30 [ 221.643995][ T8655] (syz.5.1589,8655,1):ocfs2_symlink:2065 ERROR: status = -30 [ 221.651035][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.688010][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.695117][ T6658] ocfs2: Unmounting device (7,5) on (node local) [ 221.719387][ T8703] loop3: detected capacity change from 0 to 64 [ 222.408732][ T8725] loop5: detected capacity change from 0 to 256 [ 222.421333][ T8726] loop4: detected capacity change from 0 to 512 [ 222.440021][ T8725] exfat: Deprecated parameter 'namecase' [ 222.471152][ T8725] exfat: Deprecated parameter 'namecase' [ 222.490965][ T8726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.513635][ T8726] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 222.525759][ T8725] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 222.550308][ T8726] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 222.619088][ T8726] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 222.649955][ T8726] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 222.668271][ T8726] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 222.706985][ T8726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.728424][ T8726] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.1609: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 222.781465][ T8726] EXT4-fs error (device loop4): ext4_quota_enable:7046: comm syz.4.1609: Bad quota inode: 4, type: 1 [ 222.807486][ T8726] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.862469][ T8726] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 222.869218][ T8726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.871013][ T8710] loop3: detected capacity change from 0 to 32768 [ 222.880630][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.903707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.996154][ T8726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1609: bg 0: block 34: padding at end of block bitmap is not set [ 223.024287][ T8710] JBD2: Ignoring recovery information on journal [ 223.033033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.057096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.104167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.149991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.168976][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 223.194255][ T8471] device veth0_vlan entered promiscuous mode [ 223.215142][ T8710] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.261253][ T8471] device veth1_vlan entered promiscuous mode [ 223.351896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.369833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.412609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.450269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.487501][ T8471] device veth0_macvtap entered promiscuous mode [ 223.497585][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 223.548525][ T8471] device veth1_macvtap entered promiscuous mode [ 223.613658][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.633980][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.668868][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.690484][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.707516][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.722381][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.740698][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.751578][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.774463][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.787917][ T8750] loop3: detected capacity change from 0 to 1024 [ 223.791135][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.833483][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.842664][ T8750] EXT4-fs: Ignoring removed bh option [ 223.842997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.868953][ T8750] ext4: Bad value for 'init_itable' [ 223.879923][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.913238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.959169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.000342][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.040927][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.077944][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.105212][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.131643][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.143828][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.155058][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.161488][ T8743] loop5: detected capacity change from 0 to 32768 [ 224.165949][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.165968][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.165982][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.167438][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.195695][ T8743] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1612 (8743) [ 224.223108][ T5062] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.233840][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.242845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.259499][ T8471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.273125][ T8743] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 224.284883][ T8743] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 224.287144][ T8471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.294689][ T8743] BTRFS info (device loop5): using free space tree [ 224.303534][ T5056] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.312822][ T8471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.329277][ T8471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.415320][ T5062] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 101 [ 224.438207][ T5062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.459147][ T5062] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 224.480662][ T5062] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 224.496581][ T5062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.504851][ T5056] usb 5-1: Using ep0 maxpacket: 32 [ 224.514290][ T5056] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 224.542130][ T5062] usb 4-1: Product: syz [ 224.546842][ T5062] usb 4-1: Manufacturer: syz [ 224.551444][ T5062] usb 4-1: SerialNumber: syz [ 224.556624][ T5056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.565190][ T5056] usb 5-1: Product: syz [ 224.569425][ T8743] BTRFS info (device loop5): enabling ssd optimizations [ 224.599875][ T5056] usb 5-1: Manufacturer: syz [ 224.605917][ T5062] usb 4-1: config 0 descriptor?? [ 224.619849][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.624451][ T5062] usb-storage 4-1:0.0: USB Mass Storage device detected [ 224.640359][ T5056] usb 5-1: SerialNumber: syz [ 224.651479][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.655966][ T5056] usb 5-1: config 0 descriptor?? [ 224.689318][ T5056] dw2102: su3000_identify_state [ 224.702778][ T5056] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 224.733928][ T5062] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 224.746355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.771348][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.775625][ T5056] dw2102: su3000_power_ctrl: 1, initialized 0 [ 224.784632][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.817559][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.879175][ T5056] dvb-usb: bulk message failed: -22 (2/0) [ 224.928185][ T5056] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.954926][ T4313] usb 4-1: USB disconnect, device number 13 [ 224.964846][ T5056] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 225.002850][ T5056] usb 5-1: media controller created [ 225.011453][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.029807][ T5056] dw2102: i2c transfer failed. [ 225.049977][ T8785] loop7: detected capacity change from 0 to 64 [ 225.066827][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.090592][ T5056] dw2102: i2c transfer failed. [ 225.110836][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.128957][ T5056] dw2102: i2c transfer failed. [ 225.146479][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.161448][ T5056] dw2102: i2c transfer failed. [ 225.189664][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.201624][ T5056] dw2102: i2c transfer failed. [ 225.221841][ T5056] dvb-usb: bulk message failed: -22 (6/0) [ 225.228357][ T5056] dw2102: i2c transfer failed. [ 225.242118][ T5056] dvb-usb: MAC address: 02:02:02:02:02:02 [ 225.278052][ T5056] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.299141][ T5056] dvb-usb: bulk message failed: -22 (3/0) [ 225.305090][ T5056] dw2102: command 0x0e transfer failed. [ 225.311691][ T5056] dvb-usb: bulk message failed: -22 (3/0) [ 225.318064][ T5056] dw2102: command 0x0e transfer failed. [ 225.384297][ T6658] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 225.642431][ T5056] dvb-usb: bulk message failed: -22 (3/0) [ 225.648205][ T5056] dw2102: command 0x0e transfer failed. [ 225.654759][ T5056] dvb-usb: bulk message failed: -22 (3/0) [ 225.660502][ T5056] dw2102: command 0x0e transfer failed. [ 225.682110][ T5056] dvb-usb: bulk message failed: -22 (1/0) [ 225.687863][ T5056] dw2102: command 0x51 transfer failed. [ 225.937806][ T8810] loop5: detected capacity change from 0 to 256 [ 225.950918][ T5056] DVB: Unable to find symbol ds3000_attach() [ 225.960288][ T5056] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 226.132175][ T4316] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 226.248358][ T5056] rc_core: IR keymap rc-su3000 not found [ 226.254168][ T5056] Registered IR keymap rc-empty [ 226.260435][ T5056] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 226.315418][ T5056] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 226.328832][ T4316] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.348359][ T4316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.381312][ T4316] usb 8-1: config 0 descriptor?? [ 226.400323][ T5056] dvb-usb: schedule remote query interval to 150 msecs. [ 226.412992][ T5056] dw2102: su3000_power_ctrl: 0, initialized 1 [ 226.423083][ T4316] cp210x 8-1:0.0: cp210x converter detected [ 226.462159][ T5056] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 226.506140][ T5056] usb 5-1: USB disconnect, device number 9 [ 226.638553][ T5056] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 226.659751][ T8803] loop3: detected capacity change from 0 to 32768 [ 226.759915][ T8803] MetaData crosses page boundary!! [ 226.772176][ T8803] lblock = 6300000010, size = -820051968 [ 226.780644][ T8803] CPU: 1 PID: 8803 Comm: syz.3.1625 Not tainted syzkaller #0 [ 226.788064][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.798146][ T8803] Call Trace: [ 226.801446][ T8803] [ 226.804391][ T8803] dump_stack_lvl+0x188/0x24e [ 226.809098][ T8803] ? __wake_up_bit+0x210/0x210 [ 226.813888][ T8803] ? show_regs_print_info+0x12/0x12 [ 226.819114][ T8803] ? load_image+0x400/0x400 [ 226.823649][ T8803] __get_metapage+0xaa8/0xfa0 [ 226.828362][ T8803] dtSearch+0x5d5/0x2050 [ 226.832657][ T8803] jfs_mkdir+0x30b/0xad0 [ 226.836938][ T8803] ? jfs_symlink+0xfb0/0xfb0 [ 226.841576][ T8803] ? make_kgid+0x660/0x660 [ 226.846016][ T8803] ? apparmor_path_mkdir+0x1ac/0x230 [ 226.851326][ T8803] ? generic_permission+0x230/0x510 [ 226.856551][ T8803] ? inode_permission+0xef/0x480 [ 226.861507][ T8803] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 226.866552][ T8803] ? security_inode_mkdir+0xb3/0x100 [ 226.871862][ T8803] vfs_mkdir+0x387/0x570 [ 226.876128][ T8803] do_mkdirat+0x1d8/0x440 [ 226.880477][ T8803] ? vfs_mkdir+0x570/0x570 [ 226.884911][ T8803] __x64_sys_mkdirat+0x85/0x90 [ 226.889686][ T8803] do_syscall_64+0x4c/0xa0 [ 226.894187][ T8803] ? clear_bhb_loop+0x60/0xb0 [ 226.898880][ T8803] ? clear_bhb_loop+0x60/0xb0 [ 226.903562][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.909448][ T8803] RIP: 0033:0x7f7d44b9b607 [ 226.913867][ T8803] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.933471][ T8803] RSP: 002b:00007f7d45aa4e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 226.941879][ T8803] RAX: ffffffffffffffda RBX: 00007f7d45aa4ee0 RCX: 00007f7d44b9b607 [ 226.949843][ T8803] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c [ 226.957803][ T8803] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 [ 226.965770][ T8803] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 [ 226.973739][ T8803] R13: 00007f7d45aa4ea0 R14: 0000000000000000 R15: 0000000000000000 [ 226.981730][ T8803] [ 227.028945][ T4316] usb 8-1: cp210x converter now attached to ttyUSB0 [ 227.042380][ T8803] bread failed! [ 227.046038][ T8803] jfs_mkdir: dtSearch returned -5 [ 227.211079][ T4316] usb 8-1: USB disconnect, device number 2 [ 227.250077][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.321388][ T4316] cp210x 8-1:0.0: device disconnected [ 228.172194][ T7843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.240072][ T8860] loop4: detected capacity change from 0 to 64 [ 228.275426][ T8860] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 228.300415][ T8832] loop3: detected capacity change from 0 to 40427 [ 228.341957][ T8832] F2FS-fs (loop3): invalid crc value [ 228.362675][ T7843] usb 6-1: Using ep0 maxpacket: 16 [ 228.374862][ T7843] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.386522][ T8832] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.417043][ T7843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 228.454113][ T7843] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 228.502178][ T7843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.512644][ T7843] usb 6-1: Product: syz [ 228.516841][ T7843] usb 6-1: Manufacturer: syz [ 228.550951][ T7843] usb 6-1: SerialNumber: syz [ 228.565316][ T8832] F2FS-fs (loop3): Start checkpoint disabled! [ 228.578893][ T7843] usb 6-1: config 0 descriptor?? [ 228.598979][ T8832] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 228.820074][ T7843] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 229.029017][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 229.092147][ T8880] loop6: detected capacity change from 0 to 1024 [ 229.123033][ T11] kworker/u4:1: attempt to access beyond end of device [ 229.123033][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 229.232544][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 229.244959][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 229.252364][ T7843] imon:send_packet: packet tx failed (-71) [ 229.274830][ T7843] imon 6-1:0.0: panel buttons/knobs setup failed [ 229.305877][ T4296] hfsplus: b-tree write err: -5, ino 25 [ 229.317397][ T4296] hfsplus: b-tree write err: -5, ino 4 [ 229.371973][ T4296] hfsplus: b-tree write err: -5, ino 2 [ 229.642343][ T7843] rc_core: IR keymap rc-imon-pad not found [ 229.649058][ T7843] Registered IR keymap rc-empty [ 229.668544][ T7843] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 229.693858][ T8896] loop4: detected capacity change from 0 to 64 [ 229.713631][ T7843] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 229.764312][ T7843] imon:send_packet: packet tx failed (-71) [ 229.822184][ T7843] imon 6-1:0.0: remote input dev register failed [ 229.837389][ T7843] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 229.966623][ T8878] loop7: detected capacity change from 0 to 32768 [ 230.010074][ T8878] (syz.7.1647,8878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 230.030173][ T7843] imon 6-1:0.0: unable to initialize intf0, err 0 [ 230.060387][ T7843] imon:imon_probe: failed to initialize context! [ 230.082415][ T8878] (syz.7.1647,8878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 230.101555][ T7843] imon 6-1:0.0: unable to register, err -19 [ 230.143024][ T7843] usb 6-1: USB disconnect, device number 6 [ 230.273219][ T8878] JBD2: Ignoring recovery information on journal [ 230.528824][ T8878] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 230.682943][ T8878] syz.7.1647: attempt to access beyond end of device [ 230.682943][ T8878] loop7: rw=2051, sector=28680, nr_sectors = 28664 limit=32768 [ 230.711410][ T8878] (syz.7.1647,8878,1):ocfs2_trim_group:7510 ERROR: status = -5 [ 230.760618][ T8878] (syz.7.1647,8878,1):ocfs2_trim_mainbm:7621 ERROR: status = -5 [ 230.896608][ T8910] loop3: detected capacity change from 0 to 32768 [ 230.919567][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 230.969127][ T8471] ocfs2: Unmounting device (7,7) on (node local) [ 231.077677][ T8910] XFS (loop3): Mounting V5 Filesystem [ 231.173059][ T8910] XFS (loop3): Ending clean mount [ 231.177920][ T8940] loop4: detected capacity change from 0 to 64 [ 231.207180][ T8910] XFS (loop3): Quotacheck needed: Please wait. [ 231.359179][ T8910] XFS (loop3): Quotacheck: Done. [ 231.519570][ T4280] XFS (loop3): Unmounting Filesystem [ 231.587984][ T8916] loop6: detected capacity change from 0 to 32768 [ 231.653991][ T8916] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 13 [ 231.989827][ T4261] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 13 [ 232.182141][ T4318] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 232.383335][ T4318] usb 8-1: Using ep0 maxpacket: 8 [ 232.394333][ T4318] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 232.419439][ T8938] loop5: detected capacity change from 0 to 32768 [ 232.441422][ T4318] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 232.491277][ T4318] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 232.544409][ T4318] usb 8-1: config 250 has no interface number 0 [ 232.550725][ T4318] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 232.570977][ T4318] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 232.586639][ T4318] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.597486][ T4318] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.608074][ T4318] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 232.637336][ T8938] XFS (loop5): Mounting V5 Filesystem [ 232.683677][ T4318] usb 8-1: config 250 interface 228 has no altsetting 0 [ 232.741662][ T4318] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 232.793074][ T8938] XFS (loop5): Ending clean mount [ 232.818522][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 232.822944][ T8938] XFS (loop5): Quotacheck needed: Please wait. [ 232.868462][ T4318] usb 8-1: Product: syz [ 232.883322][ T4318] usb 8-1: SerialNumber: syz [ 232.936066][ T4318] hub 8-1:250.228: bad descriptor, ignoring hub [ 232.972135][ T4318] hub: probe of 8-1:250.228 failed with error -5 [ 233.057087][ T8938] XFS (loop5): Quotacheck: Done. [ 233.131647][ T4318] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 233.281532][ T6658] XFS (loop5): Unmounting Filesystem [ 233.553894][ T7843] usb 8-1: USB disconnect, device number 3 [ 233.604957][ T7843] usblp0: removed [ 233.657422][ T8981] loop3: detected capacity change from 0 to 32768 [ 233.685387][ T8981] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 233.874322][ T8996] smc: net device bond0 applied user defined pnetid SYZ0 [ 234.024762][ T5687] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 234.180183][ T8999] loop4: detected capacity change from 0 to 2048 [ 234.257359][ T8999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.587644][ T9012] loop4: detected capacity change from 0 to 1024 [ 234.991562][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 234.992331][ T7843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 235.020733][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 235.064156][ T9026] netlink: 'syz.3.1691': attribute type 12 has an invalid length. [ 235.102337][ T5562] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 235.193890][ T7843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.222773][ T7843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.234000][ T7843] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.268363][ T7843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 235.285482][ T7843] usb 5-1: SerialNumber: syz [ 235.312144][ T5562] usb 8-1: Using ep0 maxpacket: 32 [ 235.318831][ T5562] usb 8-1: config 0 has an invalid interface number: 167 but max is 0 [ 235.347292][ T5562] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.374343][ T5562] usb 8-1: config 0 has no interface number 0 [ 235.391678][ T5562] usb 8-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 235.422616][ T5562] usb 8-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 235.442129][ T5562] usb 8-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 235.479041][ T5562] usb 8-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.530317][ T7843] usb 5-1: 0:2 : does not exist [ 235.532083][ T5562] usb 8-1: config 0 interface 167 has no altsetting 0 [ 235.550343][ T5562] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 235.579178][ T5562] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.601499][ T7843] usb 5-1: USB disconnect, device number 10 [ 235.607743][ T5562] usb 8-1: Product: syz [ 235.607762][ T5562] usb 8-1: Manufacturer: syz [ 235.607776][ T5562] usb 8-1: SerialNumber: syz [ 235.623559][ T5562] usb 8-1: config 0 descriptor?? [ 235.639343][ T9020] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 235.896780][ T5562] usbtest 8-1:0.167: couldn't get endpoints, -22 [ 235.905383][ T5562] usbtest: probe of 8-1:0.167 failed with error -22 [ 235.930650][ T5562] usb 8-1: USB disconnect, device number 4 [ 236.336454][ T9043] loop5: detected capacity change from 0 to 32768 [ 236.434558][ T9043] XFS (loop5): Mounting V5 Filesystem [ 236.602991][ T9043] XFS (loop5): Ending clean mount [ 236.743891][ T6658] XFS (loop5): Unmounting Filesystem [ 236.865586][ T9056] loop3: detected capacity change from 0 to 32768 [ 236.920561][ T9056] [ 236.920561][ T9056] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.920561][ T9056] [ 236.989109][ T9056] ERROR: (device loop3): diWrite: ixpxd invalid [ 236.989109][ T9056] [ 237.057512][ T9056] ERROR: (device loop3): txCommit: [ 237.057512][ T9056] [ 237.156798][ T9069] loop7: detected capacity change from 0 to 256 [ 237.203759][ T9069] exfat: Deprecated parameter 'utf8' [ 237.244384][ T4280] [ 237.244384][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.244384][ T4280] [ 237.261404][ T4280] [ 237.261404][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.261404][ T4280] [ 237.378911][ T9052] loop4: detected capacity change from 0 to 40427 [ 237.447164][ T9052] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 237.510184][ T9052] F2FS-fs (loop4): invalid crc value [ 237.573713][ T9052] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.764491][ T9052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.962796][ T4269] syz-executor: attempt to access beyond end of device [ 237.962796][ T4269] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.299976][ T9083] loop5: detected capacity change from 0 to 8192 [ 238.330280][ T9083] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 238.409945][ T9083] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 238.457062][ T9083] ntfs3: loop5: Failed to load $Extend. [ 238.865423][ T9105] loop5: detected capacity change from 0 to 1024 [ 238.973167][ T9107] ALSA: mixer_oss: invalid index 100000 [ 239.093174][ T4326] hfsplus: b-tree write err: -5, ino 25 [ 239.098914][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 239.143440][ T4326] hfsplus: b-tree write err: -5, ino 2 [ 239.637649][ T9127] loop5: detected capacity change from 0 to 4096 [ 239.741786][ T9136] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.896966][ T26] audit: type=1400 audit(1774270984.484:128): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=9138 comm="syz.4.1728" [ 240.209385][ T9154] loop4: detected capacity change from 0 to 64 [ 240.283873][ T9157] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1733'. [ 240.429993][ T9159] loop7: detected capacity change from 0 to 512 [ 240.471789][ T9159] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1734: inode has both inline data and extents flags [ 240.492687][ T9159] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1734: couldn't read orphan inode 15 (err -117) [ 240.590979][ T9159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 240.615893][ T9164] loop3: detected capacity change from 0 to 512 [ 240.626132][ T9167] syz.5.1737 uses obsolete (PF_INET,SOCK_PACKET) [ 240.660877][ T9164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.694290][ T9164] EXT4-fs (loop3): 1 truncate cleaned up [ 240.699975][ T9164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.732294][ T9164] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 240.735831][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 240.765048][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 240.912339][ T5056] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 240.946243][ T9177] xt_policy: too many policy elements [ 241.123803][ T5056] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.135642][ T5056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.182303][ T5056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.212401][ T5056] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 241.221483][ T5056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.233384][ T5056] usb 5-1: config 0 descriptor?? [ 241.316880][ T9188] loop3: detected capacity change from 0 to 64 [ 241.337963][ T9188] hfs: unable to locate alternate MDB [ 241.338019][ T9188] hfs: continuing without an alternate MDB [ 241.644031][ T5056] hid-rmi 0003:0461:4E72.0010: unbalanced collection at end of report description [ 241.692809][ T5056] hid-rmi 0003:0461:4E72.0010: parse failed [ 241.698755][ T5056] hid-rmi: probe of 0003:0461:4E72.0010 failed with error -22 [ 241.858019][ T27] usb 5-1: USB disconnect, device number 11 [ 242.434557][ T9193] loop5: detected capacity change from 0 to 32768 [ 242.471167][ T9193] [ 242.471167][ T9193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.471167][ T9193] [ 242.581632][ T9193] read_mapping_page failed! [ 242.599342][ T9193] ERROR: (device loop5): txCommit: [ 242.599342][ T9193] [ 242.639720][ T9222] jfs_rmdir: dtDelete returned -2 [ 242.744268][ T4338] ERROR: (device loop5): diWrite: ixpxd invalid [ 242.744268][ T4338] [ 242.768396][ T4338] ERROR: (device loop5): txCommit: [ 242.768396][ T4338] [ 242.789687][ T4338] jfs_write_inode: jfs_commit_inode failed! [ 242.797144][ T6658] [ 242.797144][ T6658] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.797144][ T6658] [ 242.817825][ T6658] [ 242.817825][ T6658] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.817825][ T6658] [ 242.822345][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.032172][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 243.041832][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.094799][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.101252][ T9227] loop3: detected capacity change from 0 to 512 [ 243.126554][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 243.154643][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.180042][ T9227] EXT4-fs: inline encryption not supported [ 243.198571][ T27] usb 5-1: config 0 descriptor?? [ 243.200767][ T9217] loop7: detected capacity change from 0 to 32768 [ 243.271432][ T9217] add_index: next_index = 0. Resetting! [ 243.286484][ T9227] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1758: bad orphan inode 15 [ 243.292359][ T9217] non-latin1 character 0x3ff found in JFS file name [ 243.309110][ T9217] mount with iocharset=utf8 to access [ 243.393645][ T9227] ext4_test_bit(bit=14, block=5) = 0 [ 243.412149][ T9227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 243.441279][ T9227] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.1758: reserved inode found cleared - inode=1 [ 243.554873][ T9236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 243.595836][ T9236] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 243.628182][ T27] wacom 0003:056A:0084.0011: unbalanced delimiter at end of report description [ 243.651048][ T27] wacom 0003:056A:0084.0011: parse failed [ 243.662592][ T27] wacom: probe of 0003:056A:0084.0011 failed with error -22 [ 243.779267][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 243.852772][ T5056] usb 5-1: USB disconnect, device number 12 [ 244.154075][ T9235] loop7: detected capacity change from 0 to 32768 [ 244.195505][ T9235] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 13 [ 244.498316][ T4261] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 13 [ 245.219552][ T9268] loop3: detected capacity change from 0 to 512 [ 245.301763][ T9268] EXT4-fs: Ignoring removed nobh option [ 245.367455][ T9268] EXT4-fs (loop3): Test dummy encryption mode enabled [ 245.415008][ T9268] EXT4-fs error (device loop3): __ext4_iget:5095: inode #11: block 1: comm syz.3.1773: invalid block [ 245.481003][ T9254] loop5: detected capacity change from 0 to 40427 [ 245.524091][ T9268] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1773: couldn't read orphan inode 11 (err -117) [ 245.609855][ T9268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 245.660329][ T9254] F2FS-fs (loop5): Found nat_bits in checkpoint [ 245.864064][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 245.898149][ T9254] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 245.972644][ T9254] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 246.611351][ T9313] vivid-004: disconnect [ 246.642620][ T9312] vivid-004: reconnect [ 247.162196][ T4314] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 247.341845][ T9308] loop7: detected capacity change from 0 to 32768 [ 247.363680][ T4314] usb 6-1: config 0 has an invalid interface number: 250 but max is 0 [ 247.383423][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.395525][ T9308] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 247.429053][ T4314] usb 6-1: config 0 has no interface number 0 [ 247.449340][ T4314] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 247.500070][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.548739][ T4314] usb 6-1: config 0 descriptor?? [ 247.748314][ T4261] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 11 [ 247.775255][ T4314] usb 6-1: string descriptor 0 read error: -71 [ 248.123521][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1801'. [ 248.223629][ T9357] loop3: detected capacity change from 0 to 256 [ 248.257395][ T9357] exfat: Deprecated parameter 'utf8' [ 248.328432][ T9357] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 248.416033][ T9361] loop7: detected capacity change from 0 to 64 [ 248.502134][ T4314] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 248.833140][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.876072][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.885169][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.906032][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.918145][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.925552][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.017755][ T5562] usb 6-1: USB disconnect, device number 7 [ 249.055023][ T4314] kernel write not supported for file /amidi2 (pid: 4314 comm: kworker/0:4) [ 249.145565][ T4338] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.150055][ T9383] loop4: detected capacity change from 0 to 64 [ 249.324324][ T4338] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.484076][ T4338] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.677111][ T4338] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.790001][ T9405] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 249.867427][ T9409] loop5: detected capacity change from 0 to 512 [ 249.949315][ T9409] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 250.018712][ T9409] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 250.081281][ T9409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 250.153680][ T9409] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1821: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=9, size=1024 fake=1 [ 250.222616][ T9414] loop4: detected capacity change from 0 to 4096 [ 250.253005][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 250.344561][ T9422] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.455139][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 250.880084][ T9397] loop7: detected capacity change from 0 to 40427 [ 250.971661][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 250.992414][ T9443] loop4: detected capacity change from 0 to 64 [ 251.079965][ T9397] F2FS-fs (loop7): Found nat_bits in checkpoint [ 251.099307][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.114243][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.161848][ T9368] device bridge_slave_0 entered promiscuous mode [ 251.205264][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 251.299346][ T9397] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 251.402520][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.419907][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.453247][ T9368] device bridge_slave_1 entered promiscuous mode [ 251.488323][ T9465] loop3: detected capacity change from 0 to 128 [ 251.502683][ T8471] syz-executor: attempt to access beyond end of device [ 251.502683][ T8471] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.705398][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.868995][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.000849][ T9368] team0: Port device team_slave_0 added [ 252.070904][ T9368] team0: Port device team_slave_1 added [ 252.084921][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1838'. [ 252.251667][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.318739][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.421670][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.549172][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.557214][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.601498][ T9460] loop5: detected capacity change from 0 to 40427 [ 252.603146][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.659445][ T9460] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 252.668076][ T9460] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 252.791124][ T9460] F2FS-fs (loop5): Found nat_bits in checkpoint [ 252.964248][ T9460] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 253.004481][ T9460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 253.017886][ T9368] device hsr_slave_0 entered promiscuous mode [ 253.035526][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 253.109655][ T9368] device hsr_slave_1 entered promiscuous mode [ 253.151640][ T9510] loop7: detected capacity change from 0 to 2048 [ 253.158928][ T9368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.188967][ T9368] Cannot create hsr debugfs directory [ 253.269053][ T9510] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.322350][ T9510] NILFS (loop7): mounting unchecked fs [ 253.392645][ T5687] udevd[5687]: incorrect nilfs2 checksum on /dev/loop7 [ 253.453277][ T9510] NILFS (loop7): recovery complete [ 253.496295][ T9518] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.661714][ T4338] device hsr_slave_0 left promiscuous mode [ 253.688116][ T4338] device hsr_slave_1 left promiscuous mode [ 253.704459][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.722099][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.752988][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.770831][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.863434][ T4338] device bridge_slave_1 left promiscuous mode [ 253.869664][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.954514][ T4338] device bridge_slave_0 left promiscuous mode [ 253.960781][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.030595][ T9531] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 254.065133][ T9532] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 254.102490][ T9531] CIFS mount error: No usable UNC path provided in device string! [ 254.102490][ T9531] [ 254.160411][ T9531] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.173885][ T4338] device veth1_macvtap left promiscuous mode [ 254.190181][ T4338] device veth0_macvtap left promiscuous mode [ 254.222296][ T4338] device veth1_vlan left promiscuous mode [ 254.229475][ T4338] device veth0_vlan left promiscuous mode [ 254.657933][ T9549] loop4: detected capacity change from 0 to 2048 [ 254.664680][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 254.680276][ T9549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.047330][ T9559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1866'. [ 255.122301][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 255.407424][ T9569] loop3: detected capacity change from 0 to 16 [ 255.424502][ T9569] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version [ 255.524609][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530934][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.703052][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 255.745953][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 255.793222][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.836493][ T4316] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 255.845407][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.043736][ T4316] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.051749][ T4316] usb 4-1: config 0 has no interface number 0 [ 256.068215][ T4316] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.081023][ T4316] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.091174][ T4316] usb 4-1: config 0 interface 1 has no altsetting 0 [ 256.098277][ T4316] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 256.107376][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.117765][ T4316] usb 4-1: config 0 descriptor?? [ 256.256162][ T4338] bond0 (unregistering): Released all slaves [ 256.724717][ T9368] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.742209][ T4316] uclogic 0003:2179:0053.0012: failed retrieving string descriptor #100: -71 [ 256.751042][ T4316] uclogic 0003:2179:0053.0012: failed retrieving pen parameters: -71 [ 256.789839][ T4316] uclogic 0003:2179:0053.0012: pen probing failed: -71 [ 256.807461][ T4316] uclogic 0003:2179:0053.0012: failed probing parameters: -71 [ 256.850147][ T4316] uclogic: probe of 0003:2179:0053.0012 failed with error -71 [ 256.881789][ T4316] usb 4-1: USB disconnect, device number 14 [ 256.948795][ T9368] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.992298][ T9368] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.036096][ T9368] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.192131][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 257.309907][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.376465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.397840][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.427394][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.447204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.464379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.493209][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.500317][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.517455][ T9603] loop3: detected capacity change from 0 to 2048 [ 257.546386][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.587845][ T9603] Alternate GPT is invalid, using primary GPT. [ 257.597342][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.613885][ T9603] loop3: p1 p2 p3 [ 257.619484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.627195][ T9587] loop7: detected capacity change from 0 to 32768 [ 257.646441][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.653607][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.691478][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.726945][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.756313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.789476][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.825879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.840540][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 257.851349][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 257.855035][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 257.886800][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.930866][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.942542][ T5062] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 257.976045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.023137][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.062580][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.079864][ T9615] loop3: detected capacity change from 0 to 512 [ 258.096311][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.118901][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.148367][ T5062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.169049][ T5062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.188751][ T5062] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.199062][ T5062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.268061][ T5062] usb 5-1: config 0 descriptor?? [ 258.290021][ T5062] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.332424][ T5062] dvb-usb: bulk message failed: -22 (3/0) [ 258.386219][ T5062] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.414999][ T5062] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.429247][ T5062] usb 5-1: media controller created [ 258.443435][ T5062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.469529][ T5062] dvb-usb: bulk message failed: -22 (6/0) [ 258.492213][ T5062] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.521960][ T5062] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 258.559241][ T5062] dvb-usb: schedule remote query interval to 150 msecs. [ 258.567851][ T5062] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.624465][ T5062] usb 5-1: USB disconnect, device number 13 [ 258.674987][ T5062] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 259.058501][ T9645] loop7: detected capacity change from 0 to 1024 [ 259.095339][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.113093][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.121316][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.514371][ T33] hfsplus: b-tree write err: -5, ino 25 [ 259.520106][ T33] hfsplus: b-tree write err: -5, ino 4 [ 259.549399][ T33] hfsplus: b-tree write err: -5, ino 2 [ 259.620038][ T33] hfsplus: b-tree write err: -5, ino 26 [ 259.790806][ T9673] loop7: detected capacity change from 0 to 512 [ 259.873045][ T9673] EXT4-fs (loop7): Test dummy encryption mode enabled [ 259.956085][ T9673] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 260.061926][ T9673] CIFS: iocharset name too long [ 260.190821][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 260.207517][ T9690] loop4: detected capacity change from 0 to 256 [ 260.255389][ T9690] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.467775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.497016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.550690][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.571797][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.598830][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.622482][ T5062] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 260.635125][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.680631][ T9368] device veth0_vlan entered promiscuous mode [ 260.733232][ T9368] device veth1_vlan entered promiscuous mode [ 260.833836][ T5062] usb 8-1: config 0 has an invalid interface number: 250 but max is 0 [ 260.843354][ T5062] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.854635][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.878851][ T5062] usb 8-1: config 0 has no interface number 0 [ 260.895716][ T5062] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 260.896833][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.937726][ T5062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.955916][ T9368] device veth0_macvtap entered promiscuous mode [ 260.982874][ T9368] device veth1_macvtap entered promiscuous mode [ 260.987399][ T5062] usb 8-1: config 0 descriptor?? [ 261.043107][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.098324][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.136312][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.182453][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.201965][ T9694] loop3: detected capacity change from 0 to 32768 [ 261.210206][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.239784][ T5062] usb 8-1: string descriptor 0 read error: -71 [ 261.290149][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.316132][ T9711] loop5: detected capacity change from 0 to 256 [ 261.369640][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.431634][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.456909][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.502430][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.544549][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.621943][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.638304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.678434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.718898][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.758658][ T9715] netlink: 'syz.4.1919': attribute type 2 has an invalid length. [ 261.792224][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 261.853718][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.882231][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.922699][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.932144][ T5062] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 262.000954][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.041437][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.082701][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.106764][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.125347][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.151787][ T9368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.177587][ T9368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.198225][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.210016][ T9728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.261653][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.298623][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.335669][ T9368] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.362110][ T9368] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.382308][ T4318] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 262.386598][ T9368] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.407568][ T7332] usb 8-1: USB disconnect, device number 5 [ 262.412142][ T9368] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.460602][ T4314] kernel write not supported for file /867/uid_map (pid: 4314 comm: kworker/0:4) [ 262.592249][ T4318] usb 6-1: Using ep0 maxpacket: 16 [ 262.599562][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.612790][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.632279][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.649957][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.663257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.680193][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.709962][ T4318] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.715953][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.726477][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.743868][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.761610][ T4318] usb 6-1: config 0 descriptor?? [ 262.782916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.960033][ T9731] loop3: detected capacity change from 0 to 32768 [ 263.047658][ T9731] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 263.098121][ T9731] JBD2: Ignoring recovery information on journal [ 263.182464][ T4318] microsoft 0003:045E:07DA.0013: report is too long [ 263.189113][ T4318] microsoft 0003:045E:07DA.0013: item 0 4 0 8 parsing failed [ 263.264461][ T4318] microsoft 0003:045E:07DA.0013: parse failed [ 263.294493][ T9731] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 263.308996][ T4318] microsoft: probe of 0003:045E:07DA.0013 failed with error -22 [ 263.408617][ T4318] usb 6-1: USB disconnect, device number 8 [ 263.586634][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 263.918603][ T9769] loop8: detected capacity change from 0 to 2048 [ 264.088699][ T9773] loop7: detected capacity change from 0 to 512 [ 264.137251][ T9773] EXT4-fs: Ignoring removed nobh option [ 264.153482][ T9778] loop4: detected capacity change from 0 to 256 [ 264.158630][ T9769] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 264.246477][ T9773] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 264.346842][ T9773] EXT4-fs (loop7): 1 truncate cleaned up [ 264.372887][ T9773] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 264.440182][ T9368] EXT4-fs (loop8): unmounting filesystem. [ 264.471940][ T26] audit: type=1800 audit(1774271009.054:129): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1934" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 264.562322][ T9773] EXT4-fs warning (device loop7): verify_group_input:151: Cannot add at group 1025 (only 1 groups) [ 264.666626][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 264.859756][ T9765] loop3: detected capacity change from 0 to 32768 [ 265.037445][ T9807] netlink: 'syz.7.1945': attribute type 6 has an invalid length. [ 265.076621][ T9807] netlink: 'syz.7.1945': attribute type 6 has an invalid length. [ 265.323694][ T4316] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 265.360998][ T4316] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 265.379528][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 265.745582][ T9816] fido_id[9816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 266.177499][ T9836] loop5: detected capacity change from 0 to 128 [ 266.272813][ T9836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 266.283170][ T9836] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.438224][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 267.017467][ T26] audit: type=1326 audit(1774271011.604:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d44b9c799 code=0x7fc00000 [ 267.271618][ T9877] loop3: detected capacity change from 0 to 1024 [ 267.328920][ T9877] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.355114][ T9858] loop7: detected capacity change from 0 to 32768 [ 267.427975][ T9877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 267.509770][ T9877] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1969: bg 0: block 315: padding at end of block bitmap is not set [ 267.733697][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 268.077227][ T9899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 268.193507][ T9899] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 268.995541][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 269.018064][ T9942] netlink: 'syz.3.1995': attribute type 2 has an invalid length. [ 269.110013][ T9947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1997'. [ 269.249505][ T9952] loop8: detected capacity change from 0 to 128 [ 269.305562][ T9952] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 269.323489][ T9952] hpfs: filesystem error: improperly stopped [ 269.329510][ T9952] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 269.378175][ T9952] hpfs: You really don't want any checks? You are crazy... [ 269.398742][ T9952] hpfs: hpfs_map_sector(): read error [ 269.417035][ T9956] loop4: detected capacity change from 0 to 256 [ 269.418701][ T9952] hpfs: code page support is disabled [ 269.449424][ T9952] hpfs: hpfs_map_4sectors(): unaligned read [ 269.496875][ T9952] hpfs: hpfs_map_4sectors(): unaligned read [ 269.501287][ T9956] FAT-fs (loop4): Directory bread(block 64) failed [ 269.527365][ T9956] FAT-fs (loop4): Directory bread(block 65) failed [ 269.529866][ T9952] hpfs: filesystem error: unable to find root dir [ 269.548720][ T9956] FAT-fs (loop4): Directory bread(block 66) failed [ 269.609301][ T9956] FAT-fs (loop4): Directory bread(block 67) failed [ 269.635758][ T9956] FAT-fs (loop4): Directory bread(block 68) failed [ 269.686655][ T9956] FAT-fs (loop4): Directory bread(block 69) failed [ 269.716964][ T9956] FAT-fs (loop4): Directory bread(block 70) failed [ 269.739246][ T9956] FAT-fs (loop4): Directory bread(block 71) failed [ 269.759410][ T9956] FAT-fs (loop4): Directory bread(block 72) failed [ 269.782707][ T9956] FAT-fs (loop4): Directory bread(block 73) failed [ 270.226421][ T9944] loop5: detected capacity change from 0 to 32768 [ 270.334838][ T9944] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 270.363770][ T9944] XFS (loop5): Mounting V5 Filesystem [ 270.659235][ T9944] XFS (loop5): Ending clean mount [ 270.992879][ T6658] XFS (loop5): Unmounting Filesystem [ 271.423933][ T9997] loop7: detected capacity change from 0 to 32768 [ 271.442203][T10023] netlink: 'syz.8.2025': attribute type 1 has an invalid length. [ 271.587456][ T9997] XFS (loop7): Mounting V5 Filesystem [ 271.656208][T10034] Bluetooth: MGMT ver 1.22 [ 271.694092][T10032] loop5: detected capacity change from 0 to 4096 [ 271.722325][T10032] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 271.750154][ T9997] XFS (loop7): Ending clean mount [ 271.798162][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2027'. [ 271.808129][ T9997] XFS (loop7): Quotacheck needed: Please wait. [ 271.931145][ T9997] XFS (loop7): Quotacheck: Done. [ 272.030585][ T6658] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 272.083781][T10042] loop3: detected capacity change from 0 to 256 [ 272.085326][ T6658] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 272.151917][ T6658] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 272.183032][ T8471] XFS (loop7): Unmounting Filesystem [ 272.306601][T10017] loop4: detected capacity change from 0 to 32768 [ 272.638666][T10056] loop5: detected capacity change from 0 to 512 [ 272.721951][T10056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2036: inode #1: comm syz.5.2036: iget: illegal inode # [ 272.739130][T10056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2036: error while reading EA inode 1 err=-117 [ 272.789972][T10056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2036: inode #1: comm syz.5.2036: iget: illegal inode # [ 272.803902][T10056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2036: error while reading EA inode 1 err=-117 [ 272.833919][T10056] EXT4-fs (loop5): 1 orphan inode deleted [ 272.839758][T10056] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 272.901088][T10066] loop3: detected capacity change from 0 to 512 [ 272.997874][T10066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.011356][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 273.051102][T10066] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.233572][T10066] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.2037: Directory hole found for htree leaf block 0 [ 273.249572][T10069] loop8: detected capacity change from 0 to 8192 [ 273.316356][T10066] EXT4-fs (loop3): Remounting filesystem read-only [ 273.499871][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 273.828466][T10082] loop8: detected capacity change from 0 to 4096 [ 273.912643][T10089] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.646996][T10107] loop5: detected capacity change from 0 to 128 [ 274.724998][T10107] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 274.790435][T10092] loop3: detected capacity change from 0 to 32768 [ 274.869729][T10092] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2044 (10092) [ 274.921584][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2050'. [ 274.942287][ T6658] sysv_free_block: trying to free block not in datazone [ 274.950395][T10092] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.953967][ T6658] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 274.999439][T10092] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 275.029935][T10092] BTRFS info (device loop3): enabling auto defrag [ 275.067789][T10092] BTRFS info (device loop3): use no compression [ 275.092439][T10092] BTRFS info (device loop3): max_inline at 4096 [ 275.110221][T10092] BTRFS info (device loop3): using free space tree [ 275.216043][T10125] siw: device registration error -23 [ 275.346763][T10098] loop8: detected capacity change from 0 to 32768 [ 275.402527][T10098] [ 275.402527][T10098] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.402527][T10098] [ 275.465959][T10092] BTRFS info (device loop3): enabling ssd optimizations [ 275.760380][ T9368] [ 275.760380][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.760380][ T9368] [ 275.849478][ T9368] [ 275.849478][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.849478][ T9368] [ 275.857510][ T4280] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.012281][ T5687] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5687) [ 276.345104][T10166] mkiss: ax0: crc mode is auto. [ 276.466647][T10173] loop8: detected capacity change from 0 to 256 [ 277.058721][T10189] loop4: detected capacity change from 0 to 512 [ 277.121504][T10189] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.498764][T10163] loop5: detected capacity change from 0 to 40427 [ 277.556556][T10163] F2FS-fs (loop5): invalid crc value [ 277.859049][T10204] loop8: detected capacity change from 0 to 256 [ 277.927038][T10204] exfat: Deprecated parameter 'utf8' [ 277.990495][T10204] exfat: Bad value for 'uid' [ 278.089121][T10163] F2FS-fs (loop5): Found nat_bits in checkpoint [ 278.144032][T10196] loop3: detected capacity change from 0 to 131072 [ 278.154658][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 278.182842][T10196] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9) [ 278.191761][T10196] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 278.213105][T10196] F2FS-fs (loop3): invalid crc value [ 278.231723][T10163] F2FS-fs (loop5): Start checkpoint disabled! [ 278.238274][T10196] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 278.289160][T10196] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 278.309514][T10196] F2FS-fs (loop3): Bad quota inode 2:50331648 [ 278.312340][T10163] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 278.316040][T10196] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 278.333652][T10196] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 278.432177][T10196] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 278.439299][T10196] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 278.559992][ T26] audit: type=1800 audit(1774271023.144:131): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2062" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 278.598877][T10193] loop7: detected capacity change from 0 to 32768 [ 278.686975][T10193] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 278.918380][ T4371] kworker/u4:8: attempt to access beyond end of device [ 278.918380][ T4371] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 279.127380][ T5687] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 279.432918][ T7332] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 279.646158][T10239] netlink: 'syz.7.2087': attribute type 12 has an invalid length. [ 279.654428][ T7332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.695212][ T7332] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 279.702632][T10239] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2087'. [ 279.722957][ T7332] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 279.750382][ T7332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.803022][ T7332] usb 5-1: config 0 descriptor?? [ 279.850866][ T7332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 279.859783][T10243] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 279.859783][T10243] The task syz.5.2079 (10243) triggered the difference, watch for misbehavior. [ 279.897911][ T7332] dvb-usb: bulk message failed: -22 (3/0) [ 279.929234][ T7332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 279.957610][ T7332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 279.980265][ T7332] usb 5-1: media controller created [ 280.021935][T10227] dvb-usb: bulk message failed: -22 (4/0) [ 280.036093][ T7332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.051304][T10250] loop7: detected capacity change from 0 to 64 [ 280.100874][ T26] audit: type=1800 audit(1774271024.684:132): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2090" name="file1" dev="loop7" ino=21 res=0 errno=0 [ 280.124345][ T7332] dvb-usb: bulk message failed: -22 (6/0) [ 280.135471][ T7332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 280.195131][ T7332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 280.256398][ T7332] dvb-usb: schedule remote query interval to 150 msecs. [ 280.276119][ T7332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 280.302334][ T7332] usb 5-1: USB disconnect, device number 14 [ 280.347332][ T7332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 280.369482][T10258] loop7: detected capacity change from 0 to 1024 [ 280.417183][ T26] audit: type=1326 audit(1774271025.004:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d44b9c799 code=0x7ffc0000 [ 280.487062][T10258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 280.495269][ T26] audit: type=1326 audit(1774271025.004:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d44b9c799 code=0x7ffc0000 [ 280.518759][ T26] audit: type=1326 audit(1774271025.004:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d44b9c799 code=0x7ffc0000 [ 280.541905][ T26] audit: type=1326 audit(1774271025.004:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f7d44b9c799 code=0x7ffc0000 [ 280.565001][ T26] audit: type=1326 audit(1774271025.004:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d44b9c799 code=0x7ffc0000 [ 280.659203][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 280.861325][T10276] loop8: detected capacity change from 0 to 512 [ 280.891953][T10276] EXT4-fs: Ignoring removed i_version option [ 280.985652][T10276] EXT4-fs (loop8): 1 truncate cleaned up [ 280.991615][T10276] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 281.051412][T10285] loop5: detected capacity change from 0 to 4096 [ 281.080814][T10285] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 281.164185][T10285] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 281.232547][T10285] ntfs: (device loop5): ntfs_read_locked_inode(): Inode is not in use! [ 281.302430][T10290] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.312002][T10290] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.320840][T10290] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.329613][T10290] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.346701][ T9368] EXT4-fs (loop8): unmounting filesystem. [ 281.351427][T10293] loop4: detected capacity change from 0 to 128 [ 281.391183][T10293] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 281.617335][ T4269] sysv_free_block: trying to free block not in datazone [ 281.629875][ T4269] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 281.920729][T10309] loop7: detected capacity change from 0 to 1024 [ 282.043062][T10313] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 282.107450][ T4371] hfsplus: b-tree write err: -5, ino 8 [ 282.169383][T10313] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.376078][ T9368] EXT4-fs (loop8): unmounting filesystem. [ 282.584839][T10335] set_capacity_and_notify: 1 callbacks suppressed [ 282.584854][T10335] loop3: detected capacity change from 0 to 256 [ 282.647441][T10335] FAT-fs (loop3): Directory bread(block 64) failed [ 282.668663][T10335] FAT-fs (loop3): Directory bread(block 65) failed [ 282.702213][T10335] FAT-fs (loop3): Directory bread(block 66) failed [ 282.752160][T10335] FAT-fs (loop3): Directory bread(block 67) failed [ 282.758807][T10335] FAT-fs (loop3): Directory bread(block 68) failed [ 282.782243][T10335] FAT-fs (loop3): Directory bread(block 69) failed [ 282.789482][T10335] FAT-fs (loop3): Directory bread(block 70) failed [ 282.797432][T10305] loop4: detected capacity change from 0 to 32768 [ 282.819252][T10335] FAT-fs (loop3): Directory bread(block 71) failed [ 282.832297][T10335] FAT-fs (loop3): Directory bread(block 72) failed [ 282.880136][T10335] FAT-fs (loop3): Directory bread(block 73) failed [ 283.551418][T10358] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2137'. [ 283.707840][T10339] loop8: detected capacity change from 0 to 32768 [ 283.758545][T10339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2128 (10339) [ 283.822250][T10339] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.853000][T10339] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 283.880324][T10339] BTRFS info (device loop8): setting nodatacow, compression disabled [ 283.899288][T10339] BTRFS info (device loop8): force zlib compression, level 3 [ 283.919022][T10339] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 283.945371][T10339] BTRFS info (device loop8): use lzo compression, level 0 [ 283.960620][T10339] BTRFS info (device loop8): turning on flush-on-commit [ 283.976795][T10339] BTRFS info (device loop8): enabling auto defrag [ 284.004771][T10339] BTRFS info (device loop8): using free space tree [ 284.307476][T10339] BTRFS info (device loop8): enabling ssd optimizations [ 284.647888][ T9368] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.674105][T10408] loop4: detected capacity change from 0 to 4096 [ 284.771915][T10408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.203137][ T4261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop8 scanned by udevd (4261) [ 285.209230][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 285.783975][T10451] netlink: 4348 bytes leftover after parsing attributes in process `syz.5.2165'. [ 285.830568][T10454] loop7: detected capacity change from 0 to 164 [ 285.922172][ T4281] Bluetooth: hci5: command 0x0411 tx timeout [ 286.344641][T10445] loop4: detected capacity change from 0 to 131072 [ 286.354868][T10445] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 286.364134][T10445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 286.373489][T10445] F2FS-fs (loop4): invalid crc value [ 286.433509][T10445] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 286.486278][T10445] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 286.546958][T10445] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 286.553705][T10445] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 286.564019][T10445] F2FS-fs (loop4): Cannot turn on quotas: error -22 [ 286.587382][T10445] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 286.594613][T10445] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 286.687440][T10472] loop5: detected capacity change from 0 to 512 [ 286.781716][T10472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2173: bg 0: block 5: invalid block bitmap [ 286.842286][T10472] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 286.882764][T10472] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2173: invalid indirect mapped block 3 (level 2) [ 286.979954][T10472] EXT4-fs (loop5): 1 orphan inode deleted [ 287.010988][T10472] EXT4-fs (loop5): 1 truncate cleaned up [ 287.032738][T10472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.090173][T10482] loop8: detected capacity change from 0 to 4096 [ 287.143299][T10484] loop7: detected capacity change from 0 to 512 [ 287.183682][T10484] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.212732][T10484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 287.236035][T10485] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.247214][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 287.302741][T10484] EXT4-fs (loop7): 1 truncate cleaned up [ 287.312295][T10484] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 287.693781][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 287.819288][T10496] loop7: detected capacity change from 0 to 64 [ 287.940951][T10492] loop3: detected capacity change from 0 to 4096 [ 287.941567][T10498] loop5: detected capacity change from 0 to 16 [ 287.996770][T10492] __ntfs_error: 4 callbacks suppressed [ 287.996786][T10492] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 288.022282][ T4775] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 288.048229][T10498] erofs: (device loop5): mounted with root inode @ nid 36. [ 288.062675][ T4338] kworker/u4:7: attempt to access beyond end of device [ 288.062675][ T4338] loop7: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 288.092069][ T4338] buffer_io_error: 174 callbacks suppressed [ 288.092082][ T4338] Buffer I/O error on dev loop7, logical block 134217734, lost async page write [ 288.094049][T10498] syz.5.2185: attempt to access beyond end of device [ 288.094049][T10498] loop5: rw=0, sector=36, nr_sectors = 1 limit=16 [ 288.108213][T10492] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 288.165083][T10498] syz.5.2185: attempt to access beyond end of device [ 288.165083][T10498] loop5: rw=0, sector=36, nr_sectors = 1 limit=16 [ 288.246764][T10492] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 288.258344][ T4775] usb 9-1: Using ep0 maxpacket: 32 [ 288.270244][ T4775] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 288.302223][ T4775] usb 9-1: config 0 has no interface number 0 [ 288.308436][ T4775] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.332266][T10492] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 288.360118][ T4775] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.381167][T10492] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 288.383426][ T4775] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 288.383453][ T4775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.388154][T10492] ntfs: volume version 3.1. [ 288.414999][T10492] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 288.415156][T10492] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 288.415425][ T4775] usb 9-1: config 0 descriptor?? [ 288.416201][T10492] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 288.416221][T10492] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 288.416235][T10492] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 288.696733][T10511] loop3: detected capacity change from 0 to 1024 [ 288.708885][T10511] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.815522][T10511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.830105][ T4775] koneplus 0003:1E7D:2D51.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input16 [ 288.900906][T10511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.991877][T10518] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2192'. [ 289.031770][ T4775] koneplus 0003:1E7D:2D51.0015: couldn't init struct koneplus_device [ 289.042384][T10518] nbd: illegal input index -28 [ 289.069389][ T4775] koneplus 0003:1E7D:2D51.0015: couldn't install mouse [ 289.117949][ T4775] koneplus: probe of 0003:1E7D:2D51.0015 failed with error -71 [ 289.158864][ T4775] usb 9-1: USB disconnect, device number 2 [ 289.197552][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 289.559518][T10524] fido_id[10524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 289.772912][T10542] loop8: detected capacity change from 0 to 1024 [ 289.797077][ T4316] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 289.854802][T10542] hfsplus: bad catalog entry type [ 289.887022][T10546] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2204'. [ 289.918740][T10546] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2204'. [ 289.992178][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 289.999663][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.059021][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.079312][ T4316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.156295][ T4316] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.180973][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.248275][ T4316] usb 5-1: config 0 descriptor?? [ 290.371413][T10564] loop5: detected capacity change from 0 to 1024 [ 290.403219][T10567] loop8: detected capacity change from 0 to 128 [ 290.452225][T10567] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 290.481806][T10567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.690897][ T9] hfsplus: found bad thread record in catalog [ 290.704292][ T4316] microsoft 0003:045E:07DA.0016: unknown main item tag 0xd [ 290.722365][T10425] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 290.725608][ T4316] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 290.775886][ T4316] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 290.794369][ T4316] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 290.815574][T10577] loop5: detected capacity change from 0 to 256 [ 290.837640][ T4316] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 290.838346][T10577] exfat: Deprecated parameter 'utf8' [ 290.856159][ T4316] microsoft 0003:045E:07DA.0016: no inputs found [ 290.872574][ T4316] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 290.914444][ T4316] usb 5-1: USB disconnect, device number 15 [ 290.928483][T10577] exfat: Deprecated parameter 'utf8' [ 290.934307][T10425] usb 8-1: Using ep0 maxpacket: 16 [ 290.941922][T10425] usb 8-1: config index 0 descriptor too short (expected 49544, got 1289) [ 290.961751][T10425] usb 8-1: config 154 has too many interfaces: 158, using maximum allowed: 32 [ 290.986222][T10577] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 291.004570][T10425] usb 8-1: config 154 has an invalid descriptor of length 0, skipping remainder of the config [ 291.052268][T10425] usb 8-1: config 154 has 0 interfaces, different from the descriptor's value: 158 [ 291.081515][T10580] fido_id[10580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 291.135544][T10425] usb 8-1: config index 1 descriptor too short (expected 49544, got 1289) [ 291.160636][T10425] usb 8-1: config 154 has too many interfaces: 158, using maximum allowed: 32 [ 291.184961][T10425] usb 8-1: config 154 has an invalid descriptor of length 0, skipping remainder of the config [ 291.205493][T10425] usb 8-1: config 154 has 0 interfaces, different from the descriptor's value: 158 [ 291.222991][T10425] usb 8-1: config index 2 descriptor too short (expected 49544, got 1289) [ 291.241719][T10425] usb 8-1: config 154 has too many interfaces: 158, using maximum allowed: 32 [ 291.260348][T10425] usb 8-1: config 154 has an invalid descriptor of length 0, skipping remainder of the config [ 291.288275][T10425] usb 8-1: config 154 has 0 interfaces, different from the descriptor's value: 158 [ 291.338515][T10425] usb 8-1: string descriptor 0 read error: -71 [ 291.351870][T10425] usb 8-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 291.381196][T10425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.408547][T10425] usb 8-1: rejected 3 configurations due to insufficient available bus power [ 291.435707][T10425] usb 8-1: no configuration chosen from 3 choices [ 291.458069][T10425] usb 8-1: USB disconnect, device number 6 [ 291.902308][ T4775] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 292.059083][T10616] loop7: detected capacity change from 0 to 2048 [ 292.095924][ T4775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.112629][T10616] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.136068][ T4775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.167934][ T4775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.204467][T10620] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.204729][T10616] syz.7.2227: attempt to access beyond end of device [ 292.204729][T10616] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 292.250471][ T4775] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 292.265472][T10622] loop3: detected capacity change from 0 to 256 [ 292.278844][ T4775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.327325][ T4775] usb 5-1: config 0 descriptor?? [ 292.341804][T10622] FAT-fs (loop3): Directory bread(block 64) failed [ 292.369278][T10622] FAT-fs (loop3): Directory bread(block 65) failed [ 292.403519][T10622] FAT-fs (loop3): Directory bread(block 66) failed [ 292.430515][T10622] FAT-fs (loop3): Directory bread(block 67) failed [ 292.450874][T10622] FAT-fs (loop3): Directory bread(block 68) failed [ 292.487171][T10622] FAT-fs (loop3): Directory bread(block 69) failed [ 292.499442][T10622] FAT-fs (loop3): Directory bread(block 70) failed [ 292.521452][T10622] FAT-fs (loop3): Directory bread(block 71) failed [ 292.538907][T10626] syz.7.2227: attempt to access beyond end of device [ 292.538907][T10626] loop7: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 292.563353][T10622] FAT-fs (loop3): Directory bread(block 72) failed [ 292.570473][T10622] FAT-fs (loop3): Directory bread(block 73) failed [ 292.635687][T10616] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 292.676924][T10626] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=3) [ 292.724722][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2231'. [ 292.731953][T10616] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16) [ 292.752231][T10626] NILFS (loop7): error -5 reading inode: ino=12 [ 292.819931][ T4775] acrux 0003:1A34:0802.0017: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 292.821737][T10616] Remounting filesystem read-only [ 292.836179][ T4775] acrux 0003:1A34:0802.0017: no inputs found [ 292.878606][ T4775] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 292.947323][T10616] NILFS (loop7): error -5 truncating bmap (ino=16) [ 293.048737][ T4775] usb 5-1: USB disconnect, device number 16 [ 293.104465][ T8471] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 293.248505][T10619] loop5: detected capacity change from 0 to 32768 [ 293.326930][T10638] fido_id[10638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 293.361997][T10619] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 293.374478][T10619] JBD2: Ignoring recovery information on journal [ 293.530276][T10619] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 293.615003][T10644] loop8: detected capacity change from 0 to 8192 [ 293.770548][ T6658] ocfs2: Unmounting device (7,5) on (node local) [ 293.953968][T10661] loop4: detected capacity change from 0 to 1024 [ 294.289140][ T9] hfsplus: b-tree write err: -5, ino 25 [ 294.318185][ T9] hfsplus: b-tree write err: -5, ino 4 [ 294.360206][ T9] hfsplus: b-tree write err: -5, ino 2 [ 294.906818][T10655] loop3: detected capacity change from 0 to 32768 [ 295.073289][T10655] XFS (loop3): Mounting V5 Filesystem [ 295.105997][T10700] loop4: detected capacity change from 0 to 128 [ 295.140143][T10700] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 295.233042][T10655] XFS (loop3): Ending clean mount [ 295.265229][T10655] XFS (loop3): Quotacheck needed: Please wait. [ 295.279423][T10700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.305627][T10684] loop7: detected capacity change from 0 to 32768 [ 295.388759][T10655] XFS (loop3): Quotacheck: Done. [ 295.458079][T10707] loop8: detected capacity change from 0 to 4096 [ 295.570155][T10711] loop5: detected capacity change from 0 to 2048 [ 295.591535][ T4280] XFS (loop3): Unmounting Filesystem [ 295.653452][T10707] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 295.762339][T10711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 295.778249][T10707] EXT4-fs error (device loop8): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.8.2256: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 295.924833][T10707] EXT4-fs error (device loop8): ext4_get_first_dir_block:3605: inode #12: comm syz.8.2256: directory missing '..' [ 296.059590][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 296.156432][ T9368] EXT4-fs (loop8): unmounting filesystem. [ 296.875111][T10749] loop3: detected capacity change from 0 to 2048 [ 296.978619][T10755] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.027221][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 297.027234][ T26] audit: type=1800 audit(1774271041.614:139): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2260" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 297.089908][T10757] loop4: detected capacity change from 0 to 1024 [ 297.106665][T10749] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 297.142206][ T4316] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 297.169414][T10749] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 297.245712][T10749] Remounting filesystem read-only [ 297.272937][ T4296] hfsplus: b-tree write err: -5, ino 8 [ 297.322183][ T4316] usb 8-1: Using ep0 maxpacket: 32 [ 297.343515][ T4316] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 190, changing to 11 [ 297.395473][ T4316] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 297.443630][ T4316] usb 8-1: string descriptor 0 read error: -22 [ 297.472305][ T4316] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 297.472650][ T4280] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 297.488013][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.806734][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.848310][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.910270][ T4316] usb 8-1: USB disconnect, device number 7 [ 297.998575][T10745] XFS (loop8): Mounting V5 Filesystem [ 298.032653][T10745] XFS (loop8): Ending clean mount [ 298.117192][T10745] XFS (loop8): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 298.131333][ T4281] Bluetooth: hci5: link tx timeout [ 298.137976][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.148100][ T4281] Bluetooth: hci5: link tx timeout [ 298.153579][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.386582][ T9368] XFS (loop8): Unmounting Filesystem [ 298.387773][T10789] set_capacity_and_notify: 1 callbacks suppressed [ 298.387787][T10789] loop5: detected capacity change from 0 to 8192 [ 298.468687][T10789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 298.535979][T10789] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 298.556470][T10789] REISERFS (device loop5): using ordered data mode [ 298.563215][T10789] reiserfs: using flush barriers [ 298.592167][T10789] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 298.685669][T10807] loop7: detected capacity change from 0 to 512 [ 298.738393][T10807] EXT4-fs (loop7): 1 truncate cleaned up [ 298.755724][T10789] REISERFS (device loop5): checking transaction log (loop5) [ 298.802082][T10807] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 298.996833][ T8471] EXT4-fs (loop7): unmounting filesystem. [ 299.157332][T10789] REISERFS (device loop5): Using tea hash to sort names [ 299.168308][T10822] netlink: 'syz.7.2291': attribute type 8 has an invalid length. [ 299.196062][T10789] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 299.238349][T10823] loop8: detected capacity change from 0 to 1024 [ 299.444857][ T75] hfsplus: b-tree write err: -5, ino 25 [ 299.450615][ T75] hfsplus: b-tree write err: -5, ino 4 [ 299.491115][ T75] hfsplus: b-tree write err: -5, ino 2 [ 299.521470][ T75] hfsplus: b-tree write err: -5, ino 17 [ 299.564153][T10830] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 300.046118][ T4281] Bluetooth: hci5: link tx timeout [ 300.059273][ T4281] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 300.112315][T10434] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 300.242625][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 300.288710][T10861] loop5: detected capacity change from 0 to 1024 [ 300.315054][T10434] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.337753][T10434] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 300.376834][T10434] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 300.405201][T10868] loop4: detected capacity change from 0 to 64 [ 300.429333][T10434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.461716][T10434] usb 4-1: config 0 descriptor?? [ 300.492837][T10434] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 300.519204][T10434] dvb-usb: bulk message failed: -22 (3/0) [ 300.561393][T10434] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 300.596246][T10434] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 300.604842][ T9] hfsplus: b-tree write err: -5, ino 25 [ 300.611007][ T9] hfsplus: b-tree write err: -5, ino 4 [ 300.623326][ T9] hfsplus: b-tree write err: -5, ino 2 [ 300.629026][T10434] usb 4-1: media controller created [ 300.647852][T10434] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.692681][T10841] dvb-usb: bulk message failed: -22 (2/0) [ 300.723371][T10434] dvb-usb: bulk message failed: -22 (6/0) [ 300.736031][T10434] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 300.790718][T10434] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 300.833459][T10434] dvb-usb: schedule remote query interval to 150 msecs. [ 300.851032][T10434] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 300.877444][T10434] usb 4-1: USB disconnect, device number 15 [ 300.982805][T10434] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 301.068603][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 301.345172][T10896] netlink: 'syz.5.2318': attribute type 3 has an invalid length. [ 301.441736][T10899] loop4: detected capacity change from 0 to 2048 [ 301.509941][T10901] loop3: detected capacity change from 0 to 1024 [ 301.642582][T10899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.974333][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 302.222249][T10425] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 302.386584][T10941] loop5: detected capacity change from 0 to 1024 [ 302.413892][T10425] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.429341][T10941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.440184][T10425] usb 8-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 302.456512][ T4316] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 302.486367][ T4316] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.499774][T10425] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.531106][T10941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 302.577173][T10425] usb 8-1: config 0 descriptor?? [ 302.592514][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 302.631625][T10425] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 302.837840][T10425] usb 8-1: USB disconnect, device number 8 [ 302.919059][T10950] fido_id[10950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 303.058270][T10968] loop8: detected capacity change from 0 to 64 [ 303.298450][ T26] audit: type=1800 audit(1774271047.884:140): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2342" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 303.734415][T10951] loop3: detected capacity change from 0 to 32768 [ 303.767177][T10982] loop8: detected capacity change from 0 to 4096 [ 303.777543][T10951] [ 303.777543][T10951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.777543][T10951] [ 303.852592][T10989] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.922424][T10951] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 303.922424][T10951] [ 303.987260][T10951] ERROR: (device loop3): remounting filesystem as read-only [ 304.012157][T10951] jfs_create: dtInsert returned -EIO [ 304.055685][T10951] ERROR: (device loop3): jfs_create: [ 304.055685][T10951] [ 304.111872][T10995] loop7: detected capacity change from 0 to 164 [ 304.199858][T10995] rock: directory entry would overflow storage [ 304.249821][T10995] rock: sig=0x66, size=4, remaining=3 [ 304.288272][T10971] loop4: detected capacity change from 0 to 32768 [ 304.451539][T10971] JBD2: Ignoring recovery information on journal [ 304.616341][T10971] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 305.009655][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 305.357411][T11036] netlink: 'syz.8.2366': attribute type 3 has an invalid length. [ 305.370411][T11035] loop4: detected capacity change from 0 to 256 [ 305.448968][T11035] FAT-fs (loop4): Directory bread(block 64) failed [ 305.462288][T11035] FAT-fs (loop4): Directory bread(block 65) failed [ 305.468903][T11035] FAT-fs (loop4): Directory bread(block 66) failed [ 305.532571][T11035] FAT-fs (loop4): Directory bread(block 67) failed [ 305.585326][T11035] FAT-fs (loop4): Directory bread(block 68) failed [ 305.613266][T11035] FAT-fs (loop4): Directory bread(block 69) failed [ 305.619898][T11035] FAT-fs (loop4): Directory bread(block 70) failed [ 305.650577][T11035] FAT-fs (loop4): Directory bread(block 71) failed [ 305.670306][T11035] FAT-fs (loop4): Directory bread(block 72) failed [ 305.687222][T11035] FAT-fs (loop4): Directory bread(block 73) failed [ 305.819797][T11047] loop7: detected capacity change from 0 to 4096 [ 305.874383][T11017] loop5: detected capacity change from 0 to 32768 [ 305.891753][T11047] ntfs3: loop7: ino=3, Correct links count -> 2. [ 306.033017][T11047] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 306.098998][T11052] loop3: detected capacity change from 0 to 1024 [ 306.252712][ T75] hfsplus: b-tree write err: -5, ino 25 [ 306.258528][ T75] hfsplus: b-tree write err: -5, ino 4 [ 306.295639][ T75] hfsplus: b-tree write err: -5, ino 2 [ 306.371934][T11055] loop7: detected capacity change from 0 to 64 [ 306.381519][ T4316] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 306.510752][T11043] loop8: detected capacity change from 0 to 32768 [ 306.536546][ T26] audit: type=1800 audit(1774271051.124:141): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2376" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 306.577201][T11043] ERROR: (device loop8): diAllocAG: free inode not found in summary map [ 306.577201][T11043] [ 306.596931][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 306.605796][ T4316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 190, changing to 11 [ 306.624293][T11043] ERROR: (device loop8): remounting filesystem as read-only [ 306.631604][T11043] ialloc: diAlloc returned -5! [ 306.650222][ T4316] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 306.689380][ T4316] usb 5-1: string descriptor 0 read error: -22 [ 306.738068][ T4316] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 306.765531][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.865608][T11062] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 306.944234][T11062] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.2374: Allocating blocks 385-513 which overlap fs metadata [ 307.011887][T11061] EXT4-fs (loop5): pa ffff888075a59000: logic 81920, phys. 129, len 24 [ 307.020976][T11061] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8 [ 307.074138][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.117778][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.129690][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 307.185158][ T4316] usb 5-1: USB disconnect, device number 17 [ 307.200989][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2381'. [ 307.435883][T11080] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.570057][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2379'. [ 307.671508][T11087] Invalid ELF header magic: != ELF [ 308.314310][ T4326] hfsplus: b-tree write err: -5, ino 25 [ 308.321222][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 308.353149][ T4326] hfsplus: b-tree write err: -5, ino 2 [ 308.741654][T11127] exfat: Deprecated parameter 'utf8' [ 308.774759][T11129] set_capacity_and_notify: 4 callbacks suppressed [ 308.774773][T11129] loop4: detected capacity change from 0 to 64 [ 308.831721][T11127] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 308.895947][T11133] device ip6gretap0 entered promiscuous mode [ 308.932788][T11133] device macvtap1 entered promiscuous mode [ 309.000355][T11133] device ip6gretap0 left promiscuous mode [ 309.010132][T11135] loop3: detected capacity change from 0 to 64 [ 309.087597][T11137] loop4: detected capacity change from 0 to 256 [ 309.410788][T11141] lo speed is unknown, defaulting to 1000 [ 309.430683][T11141] lo speed is unknown, defaulting to 1000 [ 309.480622][T11141] lo speed is unknown, defaulting to 1000 [ 309.549176][T11141] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.630264][T11141] lo speed is unknown, defaulting to 1000 [ 309.660148][T11141] lo speed is unknown, defaulting to 1000 [ 309.675868][T11156] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2416'. [ 309.682158][T11125] loop5: detected capacity change from 0 to 32768 [ 309.694864][T11156] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2416'. [ 309.746013][T11156] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2416'. [ 309.757576][T11141] lo speed is unknown, defaulting to 1000 [ 309.784330][T11141] lo speed is unknown, defaulting to 1000 [ 309.829517][T11141] lo speed is unknown, defaulting to 1000 [ 309.843303][T11125] XFS (loop5): Mounting V5 Filesystem [ 309.853170][T11141] lo speed is unknown, defaulting to 1000 [ 309.980462][T11125] XFS (loop5): Ending clean mount [ 310.024088][T11125] XFS (loop5): Quotacheck needed: Please wait. [ 310.145388][T11125] XFS (loop5): Quotacheck: Done. [ 310.224107][ T26] audit: type=1800 audit(1774271054.814:142): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2404" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 310.260329][T11180] netlink: 'syz.7.2426': attribute type 1 has an invalid length. [ 310.566896][ T6658] XFS (loop5): Unmounting Filesystem [ 310.802101][T10425] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 311.002163][T10425] usb 9-1: Using ep0 maxpacket: 8 [ 311.009697][T10425] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 311.032054][T10425] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 311.070704][T10425] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.110696][T10425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.389896][T10434] usb 9-1: USB disconnect, device number 3 [ 311.495448][T11193] loop7: detected capacity change from 0 to 32768 [ 311.696926][T11204] loop5: detected capacity change from 0 to 128 [ 311.962230][T10434] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 312.090221][T11216] loop5: detected capacity change from 0 to 64 [ 312.119034][T11212] loop3: detected capacity change from 0 to 4096 [ 312.119844][T11195] loop4: detected capacity change from 0 to 32768 [ 312.192228][T10434] usb 9-1: Using ep0 maxpacket: 8 [ 312.204679][T10434] usb 9-1: config index 0 descriptor too short (expected 52, got 45) [ 312.222267][T11212] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 312.236540][T10434] usb 9-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 312.289482][T10434] usb 9-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 312.311015][T10434] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.327116][T10434] usb 9-1: Product: syz [ 312.334760][T10434] usb 9-1: Manufacturer: syz [ 312.344932][T10434] usb 9-1: SerialNumber: syz [ 312.371869][ T26] audit: type=1800 audit(1774271056.944:143): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2441" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 312.651531][T11212] ntfs3: Cannot use different iocharset when remounting! [ 312.657840][T10434] usb 9-1: USB disconnect, device number 4 [ 312.962142][ T4778] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 313.172095][ T4778] usb 5-1: Using ep0 maxpacket: 16 [ 313.185172][ T4778] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 313.212176][ T4778] usb 5-1: config 0 has no interface number 0 [ 313.228904][ T4778] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 313.269455][ T4778] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 313.295579][ T4778] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 313.337238][ T4778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.355915][T11248] loop3: detected capacity change from 0 to 1024 [ 313.374253][ T4778] usb 5-1: Product: syz [ 313.378446][ T4778] usb 5-1: Manufacturer: syz [ 313.402657][ T4778] usb 5-1: SerialNumber: syz [ 313.415251][T11248] hfsplus: b-tree write err: -5, ino 2 [ 313.431152][ T4778] usb 5-1: config 0 descriptor?? [ 313.442773][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.450044][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.575199][ T33] hfsplus: b-tree write err: -5, ino 25 [ 313.584180][ T33] hfsplus: b-tree write err: -5, ino 4 [ 313.735777][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.757795][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.808484][T11265] loop7: detected capacity change from 0 to 64 [ 314.002542][ T4778] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 314.043460][ T4778] asix: probe of 5-1:0.34 failed with error -61 [ 314.142122][T11275] loop8: detected capacity change from 0 to 512 [ 314.168961][T11275] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.244633][T10434] usb 5-1: USB disconnect, device number 18 [ 314.298819][T11275] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 314.967992][T11278] loop3: detected capacity change from 0 to 32768 [ 315.021200][T11272] loop7: detected capacity change from 0 to 40427 [ 315.044375][T11272] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 315.057449][T11272] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 315.077176][T11272] F2FS-fs (loop7): invalid crc value [ 315.089875][T11278] XFS (loop3): Mounting V5 Filesystem [ 315.137928][T11300] loop4: detected capacity change from 0 to 1024 [ 315.178452][T11272] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 315.264647][T11278] XFS (loop3): Ending clean mount [ 315.282831][T11278] XFS (loop3): Quotacheck needed: Please wait. [ 315.409707][T11278] XFS (loop3): Quotacheck: Done. [ 315.414843][T11272] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 315.421898][T11272] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 315.623231][ T8471] syz-executor: attempt to access beyond end of device [ 315.623231][ T8471] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.643634][ T4280] XFS (loop3): Unmounting Filesystem [ 315.927034][T11285] loop8: detected capacity change from 0 to 32768 [ 315.981280][T11310] loop5: detected capacity change from 0 to 256 [ 316.035048][T11310] FAT-fs (loop5): Directory bread(block 64) failed [ 316.044455][T11310] FAT-fs (loop5): Directory bread(block 65) failed [ 316.051143][T11310] FAT-fs (loop5): Directory bread(block 66) failed [ 316.076595][T11310] FAT-fs (loop5): Directory bread(block 67) failed [ 316.079765][T11285] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 316.089745][T11310] FAT-fs (loop5): Directory bread(block 68) failed [ 316.102749][T11310] FAT-fs (loop5): Directory bread(block 69) failed [ 316.109532][T11310] FAT-fs (loop5): Directory bread(block 70) failed [ 316.116735][T11310] FAT-fs (loop5): Directory bread(block 71) failed [ 316.122595][T11285] XFS (loop8): Mounting V5 Filesystem [ 316.124496][T11310] FAT-fs (loop5): Directory bread(block 72) failed [ 316.136356][T11310] FAT-fs (loop5): Directory bread(block 73) failed [ 316.211862][T11285] XFS (loop8): Ending clean mount [ 316.252291][T10425] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 316.286499][T11285] XFS (loop8): Quotacheck needed: Please wait. [ 316.343658][T11324] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2484'. [ 316.345745][ T4316] XFS (loop8): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x10 [ 316.413188][T11324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2484'. [ 316.416427][ T4316] XFS (loop8): Unmount and run xfs_repair [ 316.451578][ T4316] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 316.463781][T10425] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.466442][ T4316] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 316.478275][T11326] loop3: detected capacity change from 0 to 128 [ 316.493376][ T4316] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 316.500922][T10425] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.511765][ T4316] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 316.534815][T11326] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.546799][T10425] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 316.547297][ T4316] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 316.558172][T10425] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.586637][T11326] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.601688][ T4316] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 316.607859][T10425] usb 8-1: config 0 descriptor?? [ 316.630860][ T4316] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 316.649379][ T4316] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.671617][ T4316] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.693695][ T4371] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 8 error 74 [ 316.720629][T11285] XFS (loop8): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 316.749563][ T4338] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.892185][ T4778] XFS (loop8): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x10 [ 316.920537][ T4778] XFS (loop8): Unmount and run xfs_repair [ 316.953707][ T4778] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 316.961503][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.967946][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.992654][ T4778] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 317.001328][T11336] loop5: detected capacity change from 0 to 512 [ 317.001510][ T4778] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 317.001527][ T4778] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 317.066680][T10425] arvo 0003:1E7D:30D4.0019: unknown global tag 0xd [ 317.084831][T10425] arvo 0003:1E7D:30D4.0019: item 0 1 1 13 parsing failed [ 317.085277][ T4778] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 317.111249][T10425] arvo 0003:1E7D:30D4.0019: parse failed [ 317.121863][ T4778] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 317.130163][T11336] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.146241][ T4778] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 317.156564][ T4778] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 317.172500][ T4778] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 317.178280][T10425] arvo: probe of 0003:1E7D:30D4.0019 failed with error -22 [ 317.181386][T11285] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 8 error 74 [ 317.191533][T11341] loop3: detected capacity change from 0 to 1024 [ 317.206818][T11336] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.228968][T11285] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 317.277219][T10425] usb 8-1: USB disconnect, device number 9 [ 317.288576][T11285] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 317.321921][T11341] hfsplus: bad catalog entry type [ 317.444481][ T9368] XFS (loop8): Unmounting Filesystem [ 317.488607][ T75] hfsplus: b-tree write err: -5, ino 25 [ 317.495335][ T75] hfsplus: b-tree write err: -5, ino 4 [ 317.507618][ T75] hfsplus: b-tree write err: -5, ino 2 [ 317.544791][ T6658] EXT4-fs (loop5): unmounting filesystem. [ 317.753396][T11348] comedi comedi3: pcl816: I/O port conflict (0x8001,16) [ 318.073451][T11343] XFS (loop4): Mounting V5 Filesystem [ 318.174349][T11343] XFS (loop4): Ending clean mount [ 318.324015][ T4269] XFS (loop4): Unmounting Filesystem [ 318.462460][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 319.090119][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2512'. [ 319.135401][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2512'. [ 319.335917][T11376] set_capacity_and_notify: 2 callbacks suppressed [ 319.335931][T11376] loop5: detected capacity change from 0 to 32768 [ 320.081756][T11433] loop4: detected capacity change from 0 to 1024 [ 320.173263][ T26] audit: type=1800 audit(1774271064.764:144): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2529" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 320.271314][ T4296] hfsplus: b-tree write err: -5, ino 25 [ 320.277637][ T4296] hfsplus: b-tree write err: -5, ino 4 [ 320.315645][ T4296] hfsplus: b-tree write err: -5, ino 2 [ 320.413164][T11446] netlink: 'syz.4.2534': attribute type 30 has an invalid length. [ 320.595251][T11450] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 320.792404][ T28] INFO: task syz-executor:4274 blocked for more than 143 seconds. [ 320.808111][ T28] Not tainted syzkaller #0 [ 320.852047][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.896226][ T28] task:syz-executor state:D stack:22064 pid:4274 ppid:1 flags:0x00004004 [ 320.939905][ T28] Call Trace: [ 320.950644][T11438] loop8: detected capacity change from 0 to 32768 [ 320.957832][ T28] [ 320.960785][ T28] __schedule+0x11d1/0x40e0 [ 320.966817][ T28] ? mark_lock+0x94/0x320 [ 320.971173][ T28] ? __sched_text_start+0x8/0x8 [ 320.983334][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.005357][ T28] ? lock_chain_count+0x20/0x20 [ 321.010898][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 321.017313][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 321.030964][ T28] schedule+0xb9/0x180 [ 321.040008][ T28] io_schedule+0x7c/0xd0 [ 321.044728][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 321.054379][T11438] read_mapping_page failed! [ 321.059307][T11438] ERROR: (device loop8): txCommit: [ 321.059307][T11438] [ 321.067173][ T28] ? folio_wait_bit+0x30/0x30 [ 321.071880][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 321.078864][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 321.086517][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 321.091842][ T28] __filemap_get_folio+0x423/0xdb0 [ 321.097492][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 321.112260][ T28] ? page_cache_prev_miss+0x380/0x380 [ 321.117672][ T28] ? mlock_page_drain_local+0x75/0x490 [ 321.135828][ T28] ? mlock_page_drain_local+0x289/0x490 [ 321.141407][ T28] truncate_inode_pages_range+0x402/0x1090 [ 321.148416][ T28] ? mapping_evict_folio+0x520/0x520 [ 321.153969][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.159985][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.165469][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 321.170691][ T28] evict+0x4dc/0x8d0 [ 321.175938][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 321.180809][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 321.186060][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 321.191330][ T28] evict_inodes+0x60c/0x6a0 [ 321.195879][ T28] ? clear_inode+0x150/0x150 [ 321.200620][ T28] generic_shutdown_super+0x93/0x340 [ 321.205981][ T28] kill_block_super+0x7c/0xe0 [ 321.210722][ T28] deactivate_locked_super+0x93/0xf0 [ 321.216370][ T28] cleanup_mnt+0x42c/0x4b0 [ 321.220802][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 321.226032][ T28] task_work_run+0x1d0/0x260 [ 321.230699][ T28] ? task_work_cancel+0x220/0x220 [ 321.235767][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 321.241298][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 321.246679][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 321.252250][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 321.257693][ T28] do_syscall_64+0x58/0xa0 [ 321.262133][ T28] ? clear_bhb_loop+0x60/0xb0 [ 321.266824][ T28] ? clear_bhb_loop+0x60/0xb0 [ 321.271502][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.277427][ T28] RIP: 0033:0x7f35cbf9d9d7 [ 321.281842][ T28] RSP: 002b:00007ffca519c8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 321.290398][ T28] RAX: 0000000000000000 RBX: 00007f35cc032050 RCX: 00007f35cbf9d9d7 [ 321.298410][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca519c980 [ 321.306440][ T28] RBP: 00007ffca519c980 R08: 00007ffca519d980 R09: 00000000ffffffff [ 321.314786][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca519da10 [ 321.322819][ T28] R13: 00007f35cc032050 R14: 00000000000294b4 R15: 00007ffca519da50 [ 321.330804][ T28] [ 321.334303][ T9368] ERROR: (device loop8): diFree: numfree > numinos [ 321.334303][ T9368] [ 321.343819][ T28] [ 321.343819][ T28] Showing all locks held in the system: [ 321.351530][ T28] 1 lock held by rcu_tasks_kthre/12: [ 321.357013][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 321.367956][ T28] 1 lock held by rcu_tasks_trace/13: [ 321.373588][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 321.385273][ T28] 1 lock held by khungtaskd/28: [ 321.390301][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 321.400611][ T28] 3 locks held by kworker/u4:4/75: [ 321.405877][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 321.417413][ T28] #1: ffffc900015d7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 321.428646][ T28] #2: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 321.461719][ T28] 2 locks held by getty/4030: [ 321.472530][ T28] #0: ffff888030998098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 321.492031][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 321.502419][ T28] 1 lock held by syz-executor/4274: [ 321.507621][ T28] #0: ffff88807c8660e0 (&type->s_umount_key#98){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 321.518146][ T28] 2 locks held by kworker/1:5/4316: [ 321.524005][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 321.534940][ T28] #1: ffffc90003fa7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 321.546636][ T28] 2 locks held by kworker/u4:7/4338: [ 321.551982][ T28] #0: ffff8880b8f3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 321.562298][ T28] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 321.579894][ T28] [ 321.582839][ T28] ============================================= [ 321.582839][ T28] [ 321.591321][ T28] NMI backtrace for cpu 0 [ 321.595645][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 321.602831][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.612882][ T28] Call Trace: [ 321.616141][ T28] [ 321.619052][ T28] dump_stack_lvl+0x188/0x24e [ 321.623727][ T28] ? irq_work_queue+0xbf/0x140 [ 321.628509][ T28] ? show_regs_print_info+0x12/0x12 [ 321.633710][ T28] ? load_image+0x400/0x400 [ 321.638192][ T28] ? vprintk_emit+0x59f/0x6a0 [ 321.642863][ T28] ? printk_sprint+0x460/0x460 [ 321.647645][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 321.652591][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 321.658738][ T28] ? _printk+0xda/0x130 [ 321.662889][ T28] ? load_image+0x400/0x400 [ 321.667383][ T28] ? load_image+0x400/0x400 [ 321.671874][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 321.677936][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 321.683991][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 321.689966][ T28] watchdog+0xeee/0xf30 [ 321.694113][ T28] ? watchdog+0x1ed/0xf30 [ 321.698434][ T28] kthread+0x29d/0x330 [ 321.702488][ T28] ? hungtask_pm_notify+0x40/0x40 [ 321.707506][ T28] ? kthread_blkcg+0xd0/0xd0 [ 321.712091][ T28] ret_from_fork+0x1f/0x30 [ 321.716528][ T28] [ 321.720174][ T28] Sending NMI from CPU 0 to CPUs 1: [ 321.725847][ C1] NMI backtrace for cpu 1 [ 321.725856][ C1] CPU: 1 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 321.725870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.725878][ C1] Workqueue: bat_events batadv_nc_worker [ 321.725897][ C1] RIP: 0010:kasan_check_range+0x84/0x290 [ 321.725917][ C1] Code: 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd [ 321.725929][ C1] RSP: 0018:ffffc90000bb7810 EFLAGS: 00000046 [ 321.725940][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff81644761 [ 321.725950][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af6240 [ 321.725959][ C1] RBP: ffffc90000bb7a90 R08: ffffffff90af6247 R09: 1ffffffff215ec48 [ 321.725970][ C1] R10: dffffc0000000000 R11: fffffbfff215ec48 R12: dffffc0000000001 [ 321.725980][ C1] R13: 0000000000000000 R14: 1ffffffff215ec48 R15: 0000000000000001 [ 321.725989][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 321.726001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.726011][ C1] CR2: 00007f927c1e92f8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 321.726025][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.726033][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.726042][ C1] Call Trace: [ 321.726046][ C1] [ 321.726053][ C1] __lock_acquire+0x541/0x7d10 [ 321.726073][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 321.726092][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x862/0xc30 [ 321.726107][ C1] ? lock_chain_count+0x20/0x20 [ 321.726123][ C1] ? verify_lock_unused+0x140/0x140 [ 321.726142][ C1] ? rcu_read_unlock_special+0x510/0x510 [ 321.726158][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 321.726173][ C1] lock_acquire+0x1bb/0x4a0 [ 321.726189][ C1] ? batadv_nc_worker+0xce/0x600 [ 321.726206][ C1] ? read_lock_is_recursive+0x10/0x10 [ 321.726223][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.726239][ C1] ? batadv_nc_worker+0xce/0x600 [ 321.726253][ C1] ? batadv_nc_worker+0xce/0x600 [ 321.726267][ C1] batadv_nc_worker+0xeb/0x600 [ 321.726281][ C1] ? batadv_nc_worker+0xce/0x600 [ 321.726296][ C1] ? process_one_work+0x7b0/0x1160 [ 321.726311][ C1] process_one_work+0x8a2/0x1160 [ 321.726330][ C1] ? worker_detach_from_pool+0x240/0x240 [ 321.726346][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 321.726359][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 321.726372][ C1] ? kthread_data+0x4b/0xc0 [ 321.726390][ C1] worker_thread+0xaa2/0x1270 [ 321.726410][ C1] ? __kthread_parkme+0x162/0x1c0 [ 321.726428][ C1] kthread+0x29d/0x330 [ 321.726439][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 321.726453][ C1] ? kthread_blkcg+0xd0/0xd0 [ 321.726465][ C1] ret_from_fork+0x1f/0x30 [ 321.726486][ C1] [ 322.015433][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 322.022295][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 322.029497][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.039549][ T28] Call Trace: [ 322.042827][ T28] [ 322.045750][ T28] dump_stack_lvl+0x188/0x24e [ 322.050434][ T28] ? memcpy+0x3c/0x60 [ 322.054409][ T28] ? show_regs_print_info+0x12/0x12 [ 322.059598][ T28] ? load_image+0x400/0x400 [ 322.064094][ T28] panic+0x2e5/0x730 [ 322.067987][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 322.073627][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 322.078131][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 322.083676][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 322.089831][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 322.095976][ T28] watchdog+0xf2d/0xf30 [ 322.100134][ T28] ? watchdog+0x1ed/0xf30 [ 322.104460][ T28] kthread+0x29d/0x330 [ 322.108523][ T28] ? hungtask_pm_notify+0x40/0x40 [ 322.113539][ T28] ? kthread_blkcg+0xd0/0xd0 [ 322.118119][ T28] ret_from_fork+0x1f/0x30 [ 322.122541][ T28] [ 322.125874][ T28] Kernel Offset: disabled [ 322.130194][ T28] Rebooting in 86400 seconds..