last executing test programs: 1m27.923666235s ago: executing program 0 (id=2336): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8) 1m27.768426108s ago: executing program 0 (id=2341): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@attr2}, {@largeio}]}, 0x1, 0x979b, &(0x7f0000009780)="$eJzs3QWcrWWheP85cOhGEEQEpMQkJUSRDkWUFCUEaUkBEVA6lFBBEZDu7u5u6e7ukO76fw4cUHHB9d6/v4vXtdbHM3t2zJ5nP9/3eZ0977D3kvMuOufAwJgD7/be6V+7aNd7l11stAXXPXnnwbfsvcNCTwy9ePh3T8aafejpHENP5xwYGBg09H4GvXvZ4NlOOnmYgcEDQ/7310YdaeRhRh0YGHno2aH3MzDTuyejHPLe7d7+QDzQSYZ8u+3f/fdOow25kyGfLL3cm2sNDAyM+DdfP2Rc0/zDA5W25BzzzftXq/fdhhl69aC/XvfO6eB3/41ywMDAKPsNfPj2MeS2w/3N1/5vNuR7jjnZwOL3fgzf+/9cS84x3wIf8B+yFocdetlMQ9b4B9egsQ9u5zssuvpjQ6dw0NCJG/w36+Xj2O7/Ry05x7wLDnz4Oh5YaJ5NHn37nf3m4LkHBgbPMzAweN6BgcHzfdwe9a/pY934qqqq6mNpjjmnH/KcfZgP/Dww4ns/19LPhZe9Me2DAwODF3r3eeLg5d57LlhVVVVVVVVV/57NMef0c8Hz/zE/6vn/JGduPVbP/6uqqqqqqqr+77TAHHNOP+S5/gee/4//Uc//n3n86IPf/dv/2Wd696ve+ngfRFVVVVVVVVV9ZPMugM//J/mo5/9XnDTJ1T3/r6qqqqqqqvq/0yJvv/32Zn/zOntDL57qvevp+f/Zj9y9zMc24Kqqqqqqqqr6b/fWU2ec89fXfJ9o4AOv9/5OQ38vMOi486699mMb6L9Hg/7x9yGbf9xj+v/bEOcRj5hkYGCtxT/uodTH0P+Z16qv/yfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iPuT4//uv/3/2CSu8917wn5ti+lvP+OtXvvPe/4MXWuCpLT6moX8c/ace/x9YbdDAwFDfMVcbGBhYaI5FFptqYGDgjFunn2Lygfevm3nIdbOOPew7bxD/3n8mMs9YfMebT/ru6ZANZWCc9+/juHfuf4G39x920AcG8TeNdcrBB6+65MszfPB0yg9/HMO8/9loJz/+3n/LMswHbjTih3zxe/f/3mP5oPPQsU81ZOxTr7/mOlOvt9HGX15tzeVXWWmVldaaZboZp51hlllmnHHqlVdbY6Vp3v34YXM2yTsf5/pn5mzUD87ZU3P87Zx98LF92JxN8tFz9s497nL5iN98b84G/zfnbK6PnrNJVhv6jcaafbiB5d6Zm0EDA2PNPdzAhkPOTDvCwMBY8wy97fhDbvv1sYcZGNjprw90yGcjvL8NDtp8yG2WnHfROd/dTQ0M/PX0r33I+9kPP3Tksw89nWPo6ZzvfpsxB/66KQ6e7aSThxkyF383HaOONPIwow4MjDz07ND7GZjl3ZORz3zvdh/yPusfGOg7L7Oy/bv/3mm0gYGBUYZ8MtHyZ28zZOr/F96n/X/0////4DXzoPe3x0FD/w29zbtec8y3wF+/1zvTMGTuhh162UxDTP7Fb23/d/3DeCcZcWCSjxjvR7wuzjvR9rXGGeNu+a96XRwa7/gfMd6PeB3fDx3vEg/u/ti7d/UvG+8H9nULvvNx9n9mXzfw0fu6YekOVrrqMx/c1337w4f4d7vL9+ZohA/c6MP2dePvNfHmQ+5/9o/e1y04ZOzD/d2+bpiBgbHmem9fN2THN+9wAzsNOTPdkDPzDTdw2JAz079zZqSB84ac+coKa6+x4pAL5v/H7WCqQX/3B5qwzub9wDob9DePfdAH/r5z8Lunoxzw3ns4fch+c9DQh/Vf7itoux3zI8b7Ee8/hfM85LIVjx9x3H/V+0/ReEf86PF+2Ptlf+h4d3zp7Hv/xeN9f50N9zfTNf8/s84m+ft1NuQhDvs3K+Of/TlsRbj9u5+P//69bbDp4+//TDHcB+73v/qZYv6PXmdjrvaBr9tuv4FBHzU38/0zczPhP+yDtvjbuflnf96aarJ3rx/2I+ZmhFmWnfK9uRn+vzk38/1352b2gWH/fm4GD8wzMDAw+dD9w7z/zNyM/9Fz889uNyPD7d/9fKX3L5p7hyMueW9uPjgX/9XczPvfnZtJ3t9uJn/nukmHGRh++IENl19//XWnfffje2ene/fjR6/Buf+ZuRzzXzOXEwz+sLn866Y66oNXH/BfrMF/2Ke/d/9z/3fncuD9uRxY7YOLpf5d6/d/7vJ3l7+7/N3l7y5/d/mL+5Dj/++//v9uY86689Bfbgx39cTjbftxj/dj7j/6+P9Q3787/r/teBNfPczA+9d95PHZd2/zb3l8dqZ3T0Y55L3bffD4IA/0w4/P7jfLTFv/Lx2f/R/13lr9J34P1/7fXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5Djv9P897fATwy7cLPDT0QOtwTWy218Mc93o+5/+jj/0N9/+74/8JLbfXEMAPvX/eRx//fvY3j+P/9r8+747/z8f/31mrH/+u/KH93+bvL393/3P/ef+k46uOp9e8uf3f5u8vfXf7u8neXv7v83eUv7kOO/8/+3t8BHH307hu/9/cAN461/Rkf93g/5v5Tj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ09/j/wgbe3/F7bBQbH//9v9yH+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+S+aPWfx/kD9m8f9h/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5Q/ZvFfLn/M4r98/pjF/8f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/PHLP7r5o9Z/NfLH7P4r58/ZvH/Wf6YxX+D/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx/0X+mMX/l/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/lT9m8f91/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5M/ZvH/bf6Yxf93+WMW/53yxyz+O+ePWfx/nz9m8f9D/pjFf5f8MYv/H/PHLP675o9Z/HfLH7P4754/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4/yV/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/0ED+mMV/UP6YxX+Y/DGL/7D5Yxb/wfljFv/h8scs/sPnj1n8R8gfs/iPmD9m8R8pf8ziP3L+mMV/lPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6Yxf8T+WMW/3Hyxyz+4+aPWfw/mT9m8R8vf8ziP37+mMX/U/ljFv8J8scs/p/OH7P4T5g/ZvH/TP6YxX+i/DGL/8T5Yxb/SfLHLP6fzR+z+E/6nv+IH9O4/k2z+E/W+scs/pPnj1n8p8gfs/hPmT9m8f9c/pjFf6r8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzR+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fyxyz+s+aPWfy/nj9m8f9G/pjFf7b8MYv/N/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/K3/M4v/t/DGL/4L5Yxb/7+SPWfwXyh+z+H83f8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/kvljFv8f5I9Z/H+YP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+WPWfyXyx+z+C+fP2bx/3H+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/k/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/0/wxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8d8gf8zi//P8MYv/hvljFv+N8scs/hvnj1n8f5E/ZvH/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5Y9Z/H+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx/mz9m8f9d/pjFf6f8MYv/zvljFv/f549Z/P+QP2bx3yV/zOL/x/wxi/+u+WMW/93yxyz+u+ePWfz/lD9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H/r3/w//r4/o3zeJ/WOsfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/TOL/Tvn/YxL/QVfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+P8lf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5D08XWvxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5YxL/dz7N/x+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyJ/zOI/Tv6YxX/c/DGL/yfzxyz+4+WPWfzHzx+z+H8qf8ziP0H+mMX/0/ljFv8J88cs/p/JH7P4T5Q/ZvGfOH/M4j9J/pjF/7P5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+5/DGL/1T5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8Z86f8ziP03+2KCLdh1uYGDgP95/2vwxy/qfLn/M4j99/pjFf4b8MYv/V/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+1/DGL/6z5Yxb/r+ePWfy/kT9m8Z8tf8zi/838MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38ofs/h/O3/M4r9g/pjF/zv5Yxb/hfLHLP7fzR+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8ziv2T+mMX/B/ljFv8f5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/0f5Yxb/5fLHLP7L549Z/H+cP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/zR/zOK/bv6YxX+9/DGL//r5Yxb/n+WPWfw3yB+z+P88f8ziv2H+mMV/o/wxi//G+WMW/1/kj1n8f5k/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/V/ljFv9f549Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/zf5Yxb/3+aPWfx/lz9m8d8pf8ziv3P+mMX/9/ljFv8/5I9Z/HfJH7P4/zF/zOK/a/6YxX+3/DGL/+75Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P85f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/1/yxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8hx3IH7P4D8ofs/gPkz9m8R82f8ziPzh/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+WPWfxnzR+z+H89f8zi/438MYv/bPljFv9v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9W/pjF/9v5Yxb/BfPHLP7fyR+z+C+UP2bx/27+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8l88cs/j/IH7P4/zB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/yh+z+C+XP2bxXz5/zOL/4/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8n+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf+n+WMW/3Xzxyz+6+WPWfzXzx+z+P8sf8ziv0H+mMX/5/ljFv8N88cs/hvlj1n8N84fs/j/In/M4v/L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/KH7P4/zp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/yR+z+P82f8zi/7v8MYv/TvljFv+d88cs/r/PH7P4/yF/zOK/S/6Yxf+P+WMW/13zxyz+u+WPWfx3zx+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/z/ljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfz/kj9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j94IH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/4n8MYv/OPljFv9x88cs/p/MH7P4j5c/ZvEfP3/M4v+p/DGL/wT5Yxb/T+ePWfwnzB+z+H8mf8ziP1H+mMV/4vwxi/8k+WMW/8/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi//n8scs/lPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/n+aPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Kn/M4v/r/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/yZ/zOL/2/wxi//v8scs/jvlj1n8d84fs/j/Pn/M4v+H/DGL/y75Yxb/P+aPWfx3zR+z+O+WP2bx3z1/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/z/nj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfFPu//REP3OL/lNj/o7L4D+SPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/gPN5A/ZvEflD9m8R8mf8ziP2z+mMV/cP6YxX+4/DGL//D5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8f9E/pjFf5z8MYv/uPljFv9P5o9Z/MfLH7P4j58/ZvH/VP6YxX+C/DGL/6fzxyz+E+aPWfw/kz9m8Z8of8ziP3H+mMV/kvwxi/9n88cs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/c/ljFv+p8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzV/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyx+z+M+aP2bx/3r+mMX/G/ljFv/Z8scs/t/MH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/638MYv/t/PHLP4L5o9Z/L+TP2bxXyh/zOL/3fwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/kvmj1n8f5A/ZvH/Yf6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+UP2bxXy5/zOK/fP6Yxf/H+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/0/zxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjF/5f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5U/ZvH/df6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+TP2bx/23+mMX/d/ljFv+d8scs/jvnj1n8f58/ZvH/Q/6YxX+X/DGL/x/zxyz+u+aPWfx3yx+z+O+eP2bx/1P+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+f88cs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X/E6z/sR11p8X/U6/+RWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/1/yxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8hx/IH7P4D8ofs/gPkz9m8R82f8ziPzh/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+WPWfxnzR+z+H89f8zi/438MYv/bPljFv9v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9W/pjF/9v5Yxb/BfPHLP7fyR+z+C+UP2bx/27+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8l88cs/j/IH7P4/zB/zOK/VP7Yf6j/oA9YD790/th/qP87/e36XyZ/zOK/bP6Yxf9H+WMW/+Xyxyz+y+ePWfx/nD9m8V8hf2zQRYOGzsx/tv+K+WOW9b9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5I/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8f5o/ZvFfN3/M4r9e/pjFf/38MYv/z/LHLP4b5I9Z/H+eP2bx3zB/zOK/Uf6YxX/j/DGL/y/yxyz+v8wfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/q/wxi/+v88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/b/PHLP6/yx+z+O+UP2bx3zl/zOL/+/wxi/8f8scs/rvkj1n8/5g/ZvHfNX/M4r9b/pjFf/f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/P+cP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/y/5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/gMjwWUW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4jzCQP2bxH5Q/ZvEfJn/M4j9s/pjFf3D+mMV/uPwxi//w+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKf2gj/t05i//Y+WMW/0/kj1n8x8kfs/iPmz9m8f9k/pjFf7z8MYv/+PljFv9P5Y9Z/CfIH7P4fzp/zOI/Yf6Yxf8z+WMW/4nyxyz+E+ePWfwnyR+z+H82f8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfw/lz9m8Z8qf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/V/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+1/DGL/6z5Yxb/r+ePWfy/kT9m8Z8tf8zi/838MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38ofs/h/O3/M4r9g/pjF/zv5Yxb/hfLHLP7fzR+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8ziv2T+mMX/B/ljFv8f5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/0f5Yxb/5fLHLP7L549Z/H+cP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/zR/zOK/bv6YxX+9/DGL//r5Yxb/n+WPWfw3yB+z+P88f8ziv2H+mMV/o/wxi//G+WMW/1/kj1n8f5k/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8G/dsiLP7bpo1Z/H+VP2bx/3X+mMV/u/wxi//2+WMW/x3e9X/z7Y9rXP+mWfx3bP1jFv/f5I9Z/H+bP2bx/13+mMV/p/wxi//O+WMW/9/nj1n8/5A/ZvHfJX/M4v/H/DGL/675Yxb/3fLHLP67549Z/P+UP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/5/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5/yR+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9xIH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/4n8MYv/OPljFv9x88cs/p/MH7P4j5c/ZvEfP3/M4v+p/DGL/wT5Yxb/T+ePWfwnzB+z+H8mf8ziP1H+mMV/4vwxi/8k+WMW/8/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi//n8scs/lPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/n+aPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Kn/M4v/r/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/yZ/zOL/2/wxi//v8scs/jvlj1n8d84fs/j/Pn/M4v+H/DGL/y75Yxb/P+aPWfx3zR+z+O+WP2bx3z1/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/z/nj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bwHzR4YMS/5I8Z/Ies/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/iMN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5E/ZvEfJ3/M4j9u/pjF/5P5Yxb/8fLHLP7j549Z/D+VP2bxnyB/zOL/6fwxi/+E+WMW/8/kj1n8J8ofs/hPnD9m8Z8kf8zi/9n8MYv/pPljFv/J8scs/pPnj1n8p8gfs/hPmT9m8f9c/pjFf6r8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+E+dP2bxn2ZgYLOPa0j/zln8p239Yxb/6fLHLP7T549Z/GfIH7P4fzV/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyx+z+M+aP2bx/3r+mMX/G/ljFv/Z8scs/t/MH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/638MYv/t/PHLP4L5o9Z/L+TP2bxXyh/zOL/3fwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/kvmj1n8f5A/ZvH/Yf6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+UP2bxXy5/zOK/fP6Yxf/H+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/0/zxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjF/5f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5U/ZvH/df6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+TP2bx/23+mMX/d/ljFv+d8scs/jvnj1n8f58/ZvH/Q/6YxX+X/DGL/x/zxyz+u+aPWfx3yx+z+O+eP2bx/1P+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hf/M/6vv/322/8Ph/bvmMX/ktY/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8/549Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8f9L/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGJ/8gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+SPWfzHyR+z+I+bP2bx/2T+mMV/vPwxi//4+WMW/0/lj1n8J8gfs/h/On/M4j9h/pjF/zP5Yxb/ifLHLP4T549Z/CfJH7P4fzZ/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/D+XP2bxnyp/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/9X88cs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/7X8MYv/rPljFv+v549Z/L+RP2bxny1/zOL/zfwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP7fyh+z+H87f8ziv2D+mMX/O/ljFv+F8scs/t/NH7P4fy9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fz9/zOK/ZP6Yxf8H+WMW/x/mj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/R/ljFv/l8scs/svnj1n8f5w/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/JH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/NH/M4r9u/pjFf738MYv/+vljFv+f5Y9Z/DfIH7P4/zx/zOK/Yf6YxX+j/DGL/8b5Yxb/X+SPWfx/mT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf9X+WMW/1/nj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/N/ljFv/f5o9Z/H+XP2bx3yl/zOK/c/6Yxf/3+WMW/z/kj1n8d8kfs/j/MX/M4r9r/pjFf7f8MYv/7vljFv8/5Y9Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zl/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v/k3/u3KQzN4v9U6JjF/y/5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+owzkj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/kT9m8R8nf8ziP27+mMX/k/ljFv/x8scs/uPnj1n8P5U/ZvGfIH/M4v/p/DGL/4T5Yxb/z+SPWfwnyh+z+E+cP2bxnyR/zOL/2fwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/1z+mMV/qvwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/NH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/LHLP6z5o9Z/L+eP2bx/0b+mMV/tvwxi/8388cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8rf8zi/+38MYv/gvljFv/v5I9Z/BfKH7P4fzd/zOL/vfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL//fwxi/+S+WMW/x/kj1n8f5g/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f5Y9Z/JfLH7P4L58/ZvH/cf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+T/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFf5+/9R/hfH9e/aRb/n7b+MYv/uvljFv/18scs/uvnj1n8f5Y/ZvHfIH/M4v/z/DGL/4b5Yxb/jfLHLP4b549Z/H+RP2bx/2X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+WPWfx/nT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/kj1n8f5s/ZvH/Xf6YxX+n/DGL/875Yxb/3+ePWfz/kD9m8d8lf8zi/8f8MYv/rvljFv/d8scs/rvnj1n8/5Q/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+2Hv+AyMODPwn+5+VP2ZZ/2fnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGHf/IflsN/YJQn2gowi/+T+WMW/6fyxyz+f8kfs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/JvEfdSB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+J/DGL/zj5Yxb/cfPHLP6fzB+z+I+XP2bxHz9/zOL/qfwxi/8E+WMW/0/nj1n8J8wfs/h/Jn/M4j9R/pjFf+L8MYv/JPljFv/P5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/5/LHLP5T5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMV/6g/zf/t/aVz/pln8p2n9Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXNPr/Ew/Y4r+S0f+fyOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/yR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/zR+z+K+bP2bxXy9/zOK/fv6Yxf9n+WMW/w3yxyz+P88fs/hvmD9m8d8of8ziv3H+mMX/F/ljFv9f5o9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9V/pjF/9f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Tf6Yxf+3+WMW/9/lj1n8d8ofs/jvnD9m8f99/pjF/w/5Yxb/XfLHLP5/zB+z+O+aP2bx3y1/zOK/e/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f84fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/l/wxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4vy73H+5DLrf4vyH3/7As/m/mj1n838ofs/i/nT8m8R9tIH/M4j8of8ziP0z+mMV/2Pwxi//g/P+2Yd/7xOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/LG/8x962Zgf85j+f/Uh/rPkj1nW/9fyxyz+s+aPWfy/nj9m8f9G/pjFf7b8MYv/N/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/K3/M4v/t/DGL/4L5Yxb/7+SPWfwXyh+z+H83f8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/kvljFv8f5I9Z/H+YP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+WPWfyXyx+z+C+fP2bx/3H+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/k/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/0/wxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8d8gf8zi//P8MYv/hvljFv+N8scs/hvnj1n8f5E/ZvH/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5Y9Z/H+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx/mz9m8f9d/pjFf6f8MYv/zvlj/6n+I37A//f5Y/+p/gMf8P9D/pjFf5f8MYv/H/PHLP675o9Z/HfLH7P4754/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxf+SD/pv/L4/r3zSL/6Otf8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfz/kj9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j/6QP6YxX9Q/pjFf5j8MYv/sPljFv/B+WMW/+Hyxyz+w+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjF/xP5Yxb/cfLHLP7j5o9Z/D+ZP2bxHy9/zOI/fv6Yxf9T+WMW/wnyxyz+n84fs/hPmD9m8f9M/pjFf6L8MYv/xPljFv9J8scs/p/NH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv/P5Y9Z/KfKH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/1fwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8tf8ziP2v+mMX/6/ljFv9v5I9Z/GfLH7P4fzN/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/t/LHLP7fzh+z+C+YP2bx/07+mMV/ofwxi/9388cs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4L5k/ZvH/Qf6Yxf+H+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/1H+mMV/ufwxi//y+WMW/x/nj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P8kfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+P80fs/ivmz9m8V8vf8ziv37+mMX/Z/ljFv8N8scs/j/PH7P4b5g/ZvHfKH/M4r9x/pjF/xf5Yxb/X+aPWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvH/Vf6Yxf/X+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx/03+mMX/t/ljFv/f5Y9Z/HfKH7P475w/ZvH/ff6Yxf8P+WMW/13yxyz+f8wfs/jvmj9m8d8tf8ziv3v+mMX/T/ljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/n/OH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/5f8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5YxL/MQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyB+z+I+TP2bxHzd/zOL/yfwxi/94+WMW//Hzxyz+n8ofs/hPkD9m8f90/pjFf8L8MYv//8fO3Yd7Xdd3HP9xT5azT7su9Zo1HBpzbUYio1ELUVE83pwy0cx71MNNciM3EmAKbLRSx6ZL3SzYxMIxZ6uWONxcdysaljVbI7ZWOcW1MMYcLDJn7DpwDsHZ23PtfNn36+b78fiDc36/4/uX8rxe/n5eXFev0T+Upf/P6h/K0n+Y/qEs/Y/WP5Sl/8/pH8rSf7j+oSz9j9E/lKX/sfqHsvR/rf6hLP1H6B/K0v/n9Q9l6X+c/qEs/X9B/1CW/q/TP5Sl/y/qH8rS/5f0D2Xpf7z+oSz9X69/KEv/kfqHsvR/g/6hLP1P0D+Upf8o/UNZ+p+ofyhL/9H6h7L0/2X9Q1n6j9E/lKX/G/UPZen/K/qHsvQfq38oS/836R/K0v/N+oey9P9V/UNZ+r9F/1CW/uP0D2Xpf5L+oSz9x+sfytL/ZP1DWfqfon8oS/9T9Q9l6T9B/1CW/qfpH8rS/3T9Q1n6T9Q/lKX/GfqHsvRv0z+Upf+Z+oey9D9L/1CW/mfrH8rS/xz9Q1n6t+sfytL/rfqHsvR/m/6hLP3P1T+Upf/b9Q9l6X+e/qEs/SfpH8rS/3z9Q1n6X6B/KEv/d+gfytL/Qv1DWfq/U/9Qlv4X6R/K0v9i/UNZ+l+ifyhL/0v1D2Xpf5n+oSz9L9c/lKX/FfqHsvSfrH8oS/8r9Q9l6X+V/qEs/a/WP5Slf4f+oSz9p+gfytJ/qv6hLP2n6R/K0n+6/qEs/d+lfyhL/2v0D2XpP0P/UJb+M/UPZek/S/9Qlv6z9Q9l6X+t/qEs/efoH8rSf67+oSz95+kfytJ/vv6hLP2v0z+Upf8C/UNZ+r9b/1CW/gv1D2Xpv0j/UJb+i/UPZel/vf6hLP3fo38oS/8b9A9l6X+j/qEs/ZfoH8rSf6n+oSz9l+kfytL/1/QPZen/6/qHsvRfrn8oS//36h/K0v839A9l6f8+/UNZ+r9f/1CW/jfpH8rS/2b9Q1n636J/KEv/39Q/lKX/Cv1DWfr/lv6hLP1/W/9Qlv636h/K0v82/UNZ+v+O/qEs/T+gfyhL/9v1D2Xpf4f+oSz979Q/lKX/7+ofytL/9/QPZel/l/6hLP0/qH8oS/8P6R/K0n+l/qEs/VfpH8rS//f1D2Xp/wf6h7L0v1v/UJb+q/UPZel/j/6hLP0/rH8oS/+P6B/K0n+N/qEs/e/VP5Sl/x/qH8rSf63+oSz9/0j/UJb+9+kfytL/j/UPZel/v/6hLP0/qn8oS/8/0T+Upf/H9A9l6f9x/UNZ+n9C/1CW/n+qfyhL/0/qH8rS/wH9Q1n6r9M/lKX/g/qHsvT/M/1DWfqv1z+Upf9D+oey9P9z/UNZ+v+F/qEs/R/WP5Sl/1/qH8rS/1P6h7L0/7T+oSz9P6N/KEv/z+ofytL/c/qHsvT/K/1DWfp/Xv9Qlv5f0D+Upf8G/UNZ+n9R/1CW/n+tfyhL/436h7L0f0T/UJb+X9I/lKX/l/UPZen/qP6hLP2/on8oS/+v6h/K0v9v9A9l6f+Y/qEs/b+mfyhL/7/VP5Sl/9f1D2Xp/3f6h7L036R/KEv/b+gfytJ/s/6hLP3/Xv9Qlv7/oH8oS/9v6h/K0v8f9Q9l6f8t/UNZ+n9b/1CW/t/RP5Sl/+P6h7L0/yf9Q1n6P6F/KEv/J/UPZem/Rf9Qlv5P6R/K0v+f9Q9l6f9d/UNZ+v+L/qEs/b+nfyhL/636h7L0f1r/UJb+39c/lKX/Nv1DWfr/q/6hLP236x/K0v/f9A9l6f+M/qEs/f9d/1CW/jv0D2Xpv1P/UJb+/6F/KEv/H+gfytJ/l/6hLP1/qH8oS/9n9Q9l6f8j/UNZ+j+nfyhL///UP5Sl//P6h7L0/7H+oSz9d+sfStL/lS39Q1n699M/lKV/f/1DWfoP0D+Upf9A/UNZ+g/SP5Sl/2D9Q1n6D9E/lKX/UP1DWfq/TP9Qlv6H6B/K0v/l+oey9H+F/qEs/Q/VP5Sl/0/pH8rS/zD9Qy+5/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XzFu0+JrJM2Z0zPWNb3zjm33fvNj/ZgIAAP63/eRD/4v9dwIAAAAAAAAAAAAAAAAAAAB5NfF/J/Zi/zMCAAAAAAAAAAAAAMD/d23tJ28b0O+Apwbs/+A1j3bs+Tp614XT1qx5sHR/7frxWcFL9t//we7du3evembchK6HQ1qtVuf/2iu7Hg/tedz5+kuHrTxy76My/vN3Pn7ZpEPPnrvutoHfWHVL+9OD9jw7qHXFlOkzOt7Qv9Uqpw5qLex8cEK/VqucPqh1a+eDUZ0PJg5qre18cOKeBy9rfabzweuvmj3j6s4nzqj8ewYvFW3tS1sDDlhs64B/G+y//6XDnpjW/bWXl+x+tYGtrv0PX/elI3r8rNsL7L/79cvJPfff539A4AX1bf/Pbu7+2stL/rf3/w9v3LU4+tkL77/79csp9g/1CT7/H7DRnp/7e3z+Pzp4yX33Jw3deHvn/tvOv+/VXU8N/J98/v/J65dTe+6//wGf/zs/x0/o/vw/pNUqpx3kbwek0ta+bFtv7/+973/gz/S46bf//u/5ypZXdO7/3uday7ueGtTH/U/o7f3/ph5/r0DftLWv3t3j/b8P+2+NCF5y3/63rjt0z+f/Lfdfdfh+P+vL/k/ruf+R82deO3LeosXHT585eWrH1I5ZY0eNOWH02LFjxozc84lg768H+ZsCSRzc+3/rkB43/Vqtjn33G+67ZULn/rc/tPwjXU8N7eP+T+/1/f9o7/8QGt6/NXhwa+Hk+fPnnrD31+6Ho/b+uvcvC/bfh//+P+a4rr+s+88M+7VaR+67H3HZ2CGd+79+Tlnf9dTgPu5/Yq/7H3/gn1UCfXOQ7/9X97g5YP8nbb1xQef+j/3Bq7Z0PdXX//4/o9f93+39Hw5GW3ur1jfRzv2fOGTZmdWuS5s//4P6NLH/YTtu3Vntupxp/1CfJvY/acWbr6x2Xc6yf6hPE/t/cOblK6pdl7PtH+rTxP6f/+mdR1W7LufYP9Snif0/9t2n1lS7Lu32D/VpYv8fvKv9xGrX5a32D/VpYv/HX/fDcdWuy9vsH+rTxP6nvPy8tdWuy7n2D/VpYv9n7j7l8GrX5e32D/VpYv/9ln1vabXrcp79Q32a2P+Tk1fMrnZdJtk/1KeJ/a8dNuLZatflfPuH+jSx/+VPv3Fitetygf1DfZrY/1fvWPlYtevyDvuH+jSx/09c8qqV1a7LhfYP9Wli/z8a/tAh1a7LO+0f6tPE/jdtWvtAtetykf1DfZrY/6q1A4ZXuy4X2z/Up4n9Lzlj6qPVrssl9g/1aWL/o8d8+eJq1+VS+4f6NLH/Iz/3raeqXZfL7B/q08T+z3t4wbxq1+Vy+4f6NLH/BUd9/MfVrssV9g/1aWL/b+k4alq16zLZ/qE+Tey/3HbIpmrX5Ur7h/o0sf+Ltq8eX+26XGX/UJ8m9r/+sC98rNp1udr+oT5N7H/HnFljq12XDvuH+jSx/++8d8n7ql2XKfYP9Wli/7c/9/VS7bpMtX+oTxP73zrqokuqXZdp9g/1aWL/q89+5pFq12W6/UN9mtj/ivWPz692Xd5l/1CfJva/YcNZT1S7LtfYP9Snif0fO2LkodWuywz7h/o0sf/ZFy7/ULXrMtP+oT5N7P/U++94bbXrMsv+oT5N7H/o18Z9stp1mW3/UJ8m9v/pce//VLXrcq39Q32a2P/O8cccV+26zLF/qE8T+9/8wKg7q12XufYP9Wli/x945K6K12We/UN9mtj/nNc9v73adZlv/1CfJvb/pkkXLKp2Xa6zf6hPE/s//O6JX6x2XRbYP9Snif1f+u3vn1vturzb/qE+Tez/mCOufHW167LQ/qE+Tex/2vSNN1e7LovsH+rTxP4nrNo8utp1WWz/UJ8m9n/Yk/PuqXZdrrd/qE8T+9824Ihzql2X99g/1KeJ/d97w8PfrHZdbrB/qE8T+7/5po92VLsuN9o/1KeJ/X921+Ad1a7LEvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUTvBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//83u+7H") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m26.276039505s ago: executing program 0 (id=2354): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xb, 0x200000, 0xffffffff, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd2f, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20044884) 1m25.530095119s ago: executing program 0 (id=2368): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m25.078312096s ago: executing program 0 (id=2377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 1m24.692150695s ago: executing program 0 (id=2384): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 1m24.409405252s ago: executing program 32 (id=2384): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 6.133046236s ago: executing program 5 (id=3418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 5.909484325s ago: executing program 5 (id=3420): openat$random(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 4.857068032s ago: executing program 5 (id=3440): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 4.65983533s ago: executing program 5 (id=3446): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5939, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) 4.592112526s ago: executing program 6 (id=3447): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@loopback, @empty}, 0xc) 4.458820981s ago: executing program 6 (id=3451): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x0, 0x400) 4.223062163s ago: executing program 6 (id=3456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "6e21bdda"}]}}, 0x0}, 0x0) 2.791604886s ago: executing program 1 (id=3471): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x10, 0x0) 2.72601033s ago: executing program 1 (id=3472): setuid(0xee01) r0 = semget$private(0x0, 0x4000000009, 0x232) semop(r0, &(0x7f00000003c0)=[{0x2, 0xf, 0x1000}], 0x1f4) 2.669660904s ago: executing program 1 (id=3473): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)={0x20, 0x18, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.244074435s ago: executing program 5 (id=3476): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa}}) 1.654170236s ago: executing program 3 (id=3480): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x6) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"\x00\x00\x00Q'], 0xd800) 1.651903757s ago: executing program 3 (id=3481): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) 1.578239236s ago: executing program 3 (id=3483): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x7171ed59c4fc1e89, {0x42, 0x3, 0x4}}, 0x10) 1.529406989s ago: executing program 3 (id=3485): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xe49a, 0x4) 1.255615763s ago: executing program 3 (id=3489): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1.143180756s ago: executing program 3 (id=3492): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x0, 0xc, 0xd, {0xd, 0x22, "669e9d68424717c8e879b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.069617813s ago: executing program 2 (id=3493): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xc}}], 0x1, 0x0) 1.069476183s ago: executing program 6 (id=3494): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 1.010553079s ago: executing program 2 (id=3496): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x11, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 946.157662ms ago: executing program 6 (id=3497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000020305000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x5ffffff, 0x200}}]}, 0x20}}, 0x0) 922.707097ms ago: executing program 1 (id=3498): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 920.36139ms ago: executing program 2 (id=3499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x4}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}}, 0x0) 876.678768ms ago: executing program 6 (id=3500): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 754.011236ms ago: executing program 4 (id=3501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x68) 681.791766ms ago: executing program 2 (id=3502): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 599.527102ms ago: executing program 4 (id=3503): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) 490.069663ms ago: executing program 4 (id=3504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f00000003c0)=""/61}, 0x20) 456.134396ms ago: executing program 2 (id=3505): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 369.374543ms ago: executing program 5 (id=3506): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000104c05c40500000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "018364d1"}]}}, 0x0}, 0x0) 318.940044ms ago: executing program 4 (id=3507): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 186.863539ms ago: executing program 4 (id=3508): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000008780)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f00000026c0)=""/167, 0xa7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x40000020, 0x0) 118.563571ms ago: executing program 1 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x30d}, 0x14}}, 0x0) 80.651465ms ago: executing program 2 (id=3510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) 64.40764ms ago: executing program 1 (id=3511): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) 0s ago: executing program 4 (id=3512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x20, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x20000000) kernel console output (not intermixed with test programs): -0000-0000-0000-000000000000. [ 222.095415][T12593] ldusb 7-1:0.55: Write buffer overflow, 1 bytes dropped [ 222.143866][ T5863] usb 7-1: USB disconnect, device number 2 [ 222.155005][ T5863] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 222.308529][T12645] loop5: detected capacity change from 0 to 1024 [ 222.396319][T12644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.516696][T12653] loop1: detected capacity change from 0 to 512 [ 222.541671][T12653] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.562935][T12653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.617036][T12621] loop4: detected capacity change from 0 to 40427 [ 222.680624][T12621] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 222.711277][T12653] EXT4-fs (loop1): 1 truncate cleaned up [ 222.718322][T12621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.738212][T12653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.780731][T12621] F2FS-fs (loop4): build fault injection rate: 18446 [ 222.814550][T12657] loop6: detected capacity change from 0 to 2048 [ 222.846927][T12657] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.870390][T12621] F2FS-fs (loop4): invalid crc value [ 222.888487][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.899667][ T5877] udevd[5877]: incorrect nilfs2 checksum on /dev/loop6 [ 223.019497][ T5877] udevd[5877]: incorrect nilfs2 checksum on /dev/loop6 [ 223.039036][T12664] program syz.2.2719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.056731][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 223.057355][T12621] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 223.090936][T12621] F2FS-fs (loop4): Start checkpoint disabled! [ 223.150212][T12621] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 223.202350][T12621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 223.423319][ T1083] kworker/u8:5: attempt to access beyond end of device [ 223.423319][ T1083] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.465647][ T1083] CPU: 1 UID: 0 PID: 1083 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 223.465681][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.465698][ T1083] Workqueue: writeback wb_workfn (flush-7:4) [ 223.465734][ T1083] Call Trace: [ 223.465743][ T1083] [ 223.465753][ T1083] dump_stack_lvl+0x189/0x250 [ 223.465785][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.465816][ T1083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.465846][ T1083] ? __pfx_queue_work_on+0x10/0x10 [ 223.465871][ T1083] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 223.465904][ T1083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 223.465943][ T1083] f2fs_handle_critical_error+0x37c/0x540 [ 223.465982][ T1083] f2fs_write_end_io+0x886/0xb60 [ 223.466017][ T1083] __submit_merged_bio+0x27a/0x6a0 [ 223.466054][ T1083] __submit_merged_write_cond+0x255/0x530 [ 223.466093][ T1083] f2fs_write_data_pages+0x261d/0x3000 [ 223.466152][ T1083] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.466199][ T1083] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 223.466251][ T1083] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 223.466295][ T1083] ? trace_f2fs_writepages+0x7f/0x200 [ 223.466330][ T1083] ? f2fs_write_node_pages+0x478/0x6e0 [ 223.466362][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466394][ T1083] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 223.466430][ T1083] ? f2fs_update_inode+0x13d9/0x2620 [ 223.466466][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466494][ T1083] ? rcu_qs+0xc4/0x170 [ 223.466517][ T1083] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 223.466557][ T1083] do_writepages+0x32e/0x550 [ 223.466594][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466628][ T1083] __writeback_single_inode+0x145/0xff0 [ 223.466665][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466694][ T1083] ? do_raw_spin_unlock+0x122/0x240 [ 223.466727][ T1083] writeback_sb_inodes+0x6c7/0x1010 [ 223.466763][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466793][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466830][ T1083] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 223.466887][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466915][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.466939][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.466973][ T1083] wb_writeback+0x43b/0xaf0 [ 223.467007][ T1083] ? queue_io+0x341/0x590 [ 223.467039][ T1083] ? __pfx_wb_writeback+0x10/0x10 [ 223.467075][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467102][ T1083] wb_workfn+0x409/0xef0 [ 223.467135][ T1083] ? __pfx_wb_workfn+0x10/0x10 [ 223.467159][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467186][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467211][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467245][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467268][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467301][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467328][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467350][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467379][ T1083] ? lock_acquire+0x5f/0x360 [ 223.467416][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467447][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467470][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 223.467494][ T1083] ? process_scheduled_works+0x9ef/0x17b0 [ 223.467518][ T1083] process_scheduled_works+0xae1/0x17b0 [ 223.467560][ T1083] ? __pfx_process_scheduled_works+0x10/0x10 [ 223.467589][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467623][ T1083] worker_thread+0x8a0/0xda0 [ 223.467664][ T1083] kthread+0x711/0x8a0 [ 223.467696][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 223.467721][ T1083] ? __pfx_kthread+0x10/0x10 [ 223.467749][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467779][ T1083] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.467808][ T1083] ? rcu_is_watching+0x15/0xb0 [ 223.467849][ T1083] ? __pfx_kthread+0x10/0x10 [ 223.467880][ T1083] ret_from_fork+0x3fc/0x770 [ 223.467906][ T1083] ? __pfx_ret_from_fork+0x10/0x10 [ 223.467935][ T1083] ? __switch_to_asm+0x39/0x70 [ 223.467968][ T1083] ? __switch_to_asm+0x33/0x70 [ 223.467999][ T1083] ? __pfx_kthread+0x10/0x10 [ 223.468030][ T1083] ret_from_fork_asm+0x1a/0x30 [ 223.468074][ T1083] [ 223.910884][ T1083] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 223.954633][T12686] netlink: 'syz.3.2729': attribute type 13 has an invalid length. [ 224.078739][T12672] loop1: detected capacity change from 0 to 32768 [ 224.117989][T12672] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 224.154081][T12672] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 224.215659][T12672] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 224.268600][ T30] audit: type=1326 audit(1755730044.374:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.301395][ T30] audit: type=1326 audit(1755730044.374:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.336017][ T30] audit: type=1326 audit(1755730044.444:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.401643][ T30] audit: type=1326 audit(1755730044.444:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.434118][T12672] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 224.451841][ T30] audit: type=1326 audit(1755730044.444:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.596798][ T30] audit: type=1326 audit(1755730044.444:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.655316][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.657899][ T30] audit: type=1326 audit(1755730044.444:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.662787][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.704178][T12704] loop5: detected capacity change from 0 to 16 [ 224.732064][T12704] erofs (device loop5): algorithm 1 isn't enabled on this kernel [ 224.763930][ T30] audit: type=1326 audit(1755730044.444:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.6.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 224.928683][T12697] loop2: detected capacity change from 0 to 32768 [ 224.957964][T12707] netlink: 'syz.5.2739': attribute type 1 has an invalid length. [ 224.968643][T12697] JBD2: Ignoring recovery information on journal [ 225.006463][T12697] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 225.138007][ T30] audit: type=1326 audit(1755730045.244:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.182694][T12716] loop5: detected capacity change from 0 to 512 [ 225.208631][ T5856] ocfs2: Unmounting device (7,2) on (node local) [ 225.226142][ T30] audit: type=1326 audit(1755730045.274:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.238246][T12716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.272949][T12686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.292946][T12686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.304370][ T30] audit: type=1326 audit(1755730045.284:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.350466][T12716] EXT4-fs (loop5): 1 truncate cleaned up [ 225.375337][ T30] audit: type=1326 audit(1755730045.284:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.381450][T12716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.415956][ T30] audit: type=1326 audit(1755730045.284:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.479273][ T30] audit: type=1326 audit(1755730045.284:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.479324][ T30] audit: type=1326 audit(1755730045.284:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388d8ebe9 code=0x7ffc0000 [ 225.664236][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.667178][ T12] netdevsim netdevsim3 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.667231][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.667270][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.667309][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.054190][ T915] kernel write not supported for file [eventfd] (pid: 915 comm: kworker/1:2) [ 226.092061][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.127248][T12725] loop2: detected capacity change from 0 to 32768 [ 226.137879][T12725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2745 (12725) [ 226.153080][T12725] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 226.153146][T12725] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 226.261453][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.261493][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.261519][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.261564][ T5863] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.261590][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.263140][ T5863] usb 6-1: config 0 descriptor?? [ 226.263643][T12725] BTRFS info (device loop2): enabling ssd optimizations [ 226.263667][T12725] BTRFS info (device loop2): enabling free space tree [ 226.645152][T12768] loop4: detected capacity change from 0 to 512 [ 226.667417][T12768] EXT4-fs: Ignoring removed i_version option [ 226.672751][ T5863] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 226.684854][T12768] EXT4-fs: inline encryption not supported [ 226.706909][ T5863] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description [ 226.738944][T12768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2758: bg 0: block 131: padding at end of block bitmap is not set [ 226.739265][ T5863] plantronics 0003:047F:FFFF.000A: parse failed [ 226.768652][T12762] loop1: detected capacity change from 0 to 32768 [ 226.786777][T12768] EXT4-fs (loop4): Remounting filesystem read-only [ 226.820774][T12768] EXT4-fs (loop4): 1 truncate cleaned up [ 226.858276][T12768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.871298][ T5863] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 226.928454][ T5863] usb 6-1: USB disconnect, device number 8 [ 227.022031][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.102276][T12725] BTRFS info (device loop2 state M): setting nodatasum [ 227.111517][T12725] BTRFS info (device loop2 state M): allowing degraded mounts [ 227.135701][T12725] BTRFS info (device loop2 state M): turning on async discard [ 227.148257][T12725] BTRFS info (device loop2 state M): force clearing of disk cache [ 227.169328][T12725] BTRFS info (device loop2 state M): use zlib compression, level 3 [ 227.248715][ T5856] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 227.565168][T12795] rdma_op ffff888020edd9f0 conn xmit_rdma 0000000000000000 [ 227.738289][T12784] loop4: detected capacity change from 0 to 32768 [ 227.786493][T12784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2766 (12784) [ 227.903198][T12784] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.940296][T12784] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 228.065435][T12784] BTRFS info (device loop4): enabling ssd optimizations [ 228.091311][T12784] BTRFS info (device loop4): enabling free space tree [ 228.314612][ T5854] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.356038][ T5863] IPVS: starting estimator thread 0... [ 228.481399][T12845] IPVS: using max 33 ests per chain, 79200 per kthread [ 228.537203][T12849] loop6: detected capacity change from 0 to 512 [ 228.633596][T12849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 228.723650][T12849] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 228.758992][T12849] EXT4-fs (loop6): 1 truncate cleaned up [ 228.782430][T12849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.901528][T12857] Bluetooth: MGMT ver 1.23 [ 228.917841][T12858] loop4: detected capacity change from 0 to 1024 [ 229.018027][T12854] loop1: detected capacity change from 0 to 4096 [ 229.062003][T12854] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 229.099337][T12863] openvswitch: netlink: IPv6 tunnel dst address is zero [ 229.444113][T11695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.477267][T12877] loop5: detected capacity change from 0 to 1024 [ 229.653518][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 229.786749][T12889] loop5: detected capacity change from 0 to 256 [ 229.816524][T12889] exfat: Deprecated parameter 'namecase' [ 229.881535][T12889] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 229.963632][T12893] program syz.6.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.139454][T12896] loop5: detected capacity change from 0 to 128 [ 230.163231][T12896] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 230.394109][T12885] loop4: detected capacity change from 0 to 32768 [ 230.411854][T12882] loop1: detected capacity change from 0 to 32768 [ 230.444486][T12885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2805 (12885) [ 230.501312][T12882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2803 (12882) [ 230.531515][T12885] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.557920][T12885] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 230.566988][T12882] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.587242][T12882] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 230.605984][ T5863] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 230.700228][ T6016] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 230.737890][T12885] BTRFS info (device loop4): enabling ssd optimizations [ 230.772285][ T5863] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 230.779142][T12885] BTRFS info (device loop4): enabling free space tree [ 230.788100][ T5863] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 230.806450][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.807089][T12882] BTRFS info (device loop1): rebuilding free space tree [ 230.824729][ T5863] usb 6-1: Product: syz [ 230.829066][ T5863] usb 6-1: Manufacturer: syz [ 230.844944][ T5863] usb 6-1: SerialNumber: syz [ 230.861701][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 230.870799][ T5863] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 230.895260][T12882] BTRFS info (device loop1): setting nodatasum [ 230.903195][T12882] BTRFS info (device loop1): enabling ssd optimizations [ 230.930221][T12882] BTRFS info (device loop1): turning off barriers [ 230.936803][ T6016] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 230.946883][T12882] BTRFS info (device loop1): turning on flush-on-commit [ 230.954692][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.972147][T12882] BTRFS info (device loop1): turning on sync discard [ 230.980392][ T6016] usb 7-1: Product: syz [ 231.004678][ T6016] usb 7-1: Manufacturer: syz [ 231.009453][T12882] BTRFS info (device loop1): enabling free space tree [ 231.018221][ T6016] usb 7-1: SerialNumber: syz [ 231.027290][T12882] BTRFS info (device loop1): force clearing of disk cache [ 231.040916][ T6016] usb 7-1: config 0 descriptor?? [ 231.053191][ T5854] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.057728][T12882] BTRFS info (device loop1): doing ref verification [ 231.082850][ T6016] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 231.102898][ T6016] usb 7-1: setting power ON [ 231.121682][ T6016] dvb-usb: bulk message failed: -22 (2/0) [ 231.138988][ T6016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.169001][ T6016] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 231.190511][ T6016] usb 7-1: media controller created [ 231.219312][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.267129][T12905] dvb-usb: bulk message failed: -22 (3/0) [ 231.299334][T12905] cxusb: i2c wr: len=79 is too big! [ 231.299334][T12905] [ 231.344914][ T6016] usb 7-1: selecting invalid altsetting 6 [ 231.380402][ T6016] usb 7-1: digital interface selection failed (-22) [ 231.400437][ T6016] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 231.429301][ T5852] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.431577][ T6016] usb 7-1: setting power OFF [ 231.464584][ T6016] dvb-usb: bulk message failed: -22 (2/0) [ 231.482727][ T6016] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 231.493920][ T5863] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 231.524217][ T6016] (NULL device *): no alternate interface [ 231.584667][ T5863] usb 6-1: USB disconnect, device number 9 [ 231.586605][T12961] loop2: detected capacity change from 0 to 256 [ 231.611258][ T6016] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 231.661386][ T6016] usb 7-1: USB disconnect, device number 3 [ 231.708145][T12961] FAT-fs (loop2): Directory bread(block 64) failed [ 231.757769][T12965] loop4: detected capacity change from 0 to 256 [ 231.760261][T12961] FAT-fs (loop2): Directory bread(block 65) failed [ 231.820272][T12961] FAT-fs (loop2): Directory bread(block 66) failed [ 231.826839][T12961] FAT-fs (loop2): Directory bread(block 67) failed [ 231.835571][T12965] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 231.880568][T12961] FAT-fs (loop2): Directory bread(block 68) failed [ 231.887095][T12961] FAT-fs (loop2): Directory bread(block 69) failed [ 231.928079][T12961] FAT-fs (loop2): Directory bread(block 70) failed [ 231.944512][T12961] FAT-fs (loop2): Directory bread(block 71) failed [ 231.969556][T12961] FAT-fs (loop2): Directory bread(block 72) failed [ 232.014719][T12961] FAT-fs (loop2): Directory bread(block 73) failed [ 232.152630][T12980] loop1: detected capacity change from 0 to 128 [ 232.251432][T12983] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 232.388515][T12993] loop1: detected capacity change from 0 to 64 [ 233.325468][T13009] loop2: detected capacity change from 0 to 32768 [ 233.360194][T13009] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.477302][T13009] XFS (loop2): Ending clean mount [ 233.498305][T13009] XFS (loop2): Quotacheck needed: Please wait. [ 233.530205][T13011] loop6: detected capacity change from 0 to 40427 [ 233.539813][T13009] XFS (loop2): Quotacheck: Done. [ 233.578477][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 233.578496][ T30] audit: type=1800 audit(1755730053.684:3958): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2849" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 233.626441][T13011] F2FS-fs (loop6): invalid crc value [ 233.709872][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.815592][T13011] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 233.859795][T13011] F2FS-fs (loop6): Start checkpoint disabled! [ 233.893588][T13011] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 234.025206][T13065] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2868'. [ 234.134519][ T1097] kworker/u8:6: attempt to access beyond end of device [ 234.134519][ T1097] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.158713][ T1097] CPU: 0 UID: 0 PID: 1097 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 234.158745][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.158762][ T1097] Workqueue: writeback wb_workfn (flush-7:6) [ 234.158796][ T1097] Call Trace: [ 234.158805][ T1097] [ 234.158815][ T1097] dump_stack_lvl+0x189/0x250 [ 234.158846][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.158877][ T1097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.158907][ T1097] ? __pfx_queue_work_on+0x10/0x10 [ 234.158932][ T1097] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 234.158964][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.159013][ T1097] f2fs_handle_critical_error+0x37c/0x540 [ 234.159053][ T1097] f2fs_write_end_io+0x886/0xb60 [ 234.159088][ T1097] __submit_merged_bio+0x27a/0x6a0 [ 234.159127][ T1097] __submit_merged_write_cond+0x255/0x530 [ 234.159165][ T1097] f2fs_write_data_pages+0x261d/0x3000 [ 234.159227][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.159274][ T1097] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 234.159325][ T1097] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 234.159369][ T1097] ? trace_f2fs_writepages+0x7f/0x200 [ 234.159406][ T1097] ? f2fs_write_node_pages+0x478/0x6e0 [ 234.159435][ T1097] ? xa_load+0x60/0x210 [ 234.159478][ T1097] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 234.159508][ T1097] ? do_raw_spin_lock+0x121/0x290 [ 234.159542][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.159566][ T1097] ? set_shrinker_bit+0x7c/0x350 [ 234.159592][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.159623][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.159663][ T1097] do_writepages+0x32e/0x550 [ 234.159698][ T1097] ? unwind_next_frame+0xa5/0x2390 [ 234.159730][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.159766][ T1097] __writeback_single_inode+0x145/0xff0 [ 234.159799][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.159827][ T1097] ? do_raw_spin_unlock+0x122/0x240 [ 234.159861][ T1097] writeback_sb_inodes+0x6c7/0x1010 [ 234.159901][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.159935][ T1097] ? fprop_reflect_period_percpu+0x6b/0x330 [ 234.159970][ T1097] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 234.160033][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160057][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160078][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160112][ T1097] wb_writeback+0x43b/0xaf0 [ 234.160150][ T1097] ? queue_io+0x341/0x590 [ 234.160182][ T1097] ? __pfx_wb_writeback+0x10/0x10 [ 234.160218][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160245][ T1097] wb_workfn+0x409/0xef0 [ 234.160280][ T1097] ? __pfx_wb_workfn+0x10/0x10 [ 234.160304][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160332][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160356][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160384][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160406][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160436][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160464][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160488][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160515][ T1097] ? lock_acquire+0x5f/0x360 [ 234.160551][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160583][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160605][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 234.160628][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 234.160651][ T1097] process_scheduled_works+0xae1/0x17b0 [ 234.160692][ T1097] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.160717][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160748][ T1097] worker_thread+0x8a0/0xda0 [ 234.160787][ T1097] kthread+0x711/0x8a0 [ 234.160816][ T1097] ? __pfx_worker_thread+0x10/0x10 [ 234.160838][ T1097] ? __pfx_kthread+0x10/0x10 [ 234.160863][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160890][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.160914][ T1097] ? rcu_is_watching+0x15/0xb0 [ 234.160935][ T1097] ? __pfx_kthread+0x10/0x10 [ 234.160963][ T1097] ret_from_fork+0x3fc/0x770 [ 234.160997][ T1097] ? __pfx_ret_from_fork+0x10/0x10 [ 234.161027][ T1097] ? __switch_to_asm+0x39/0x70 [ 234.161060][ T1097] ? __switch_to_asm+0x33/0x70 [ 234.161092][ T1097] ? __pfx_kthread+0x10/0x10 [ 234.161123][ T1097] ret_from_fork_asm+0x1a/0x30 [ 234.161168][ T1097] [ 234.619779][T13069] loop2: detected capacity change from 0 to 64 [ 234.716793][T13059] loop4: detected capacity change from 0 to 32768 [ 234.724561][ T1097] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 234.732572][T13059] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2866 (13059) [ 234.748334][T13059] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.758889][T13059] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 234.768350][T13059] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 234.892527][T13059] BTRFS info (device loop4): rebuilding free space tree [ 234.969958][T13059] BTRFS info (device loop4): disabling free space tree [ 235.006714][T13059] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.020338][T13059] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.034421][T13098] loop1: detected capacity change from 0 to 64 [ 235.053745][T13059] BTRFS info (device loop4): enabling ssd optimizations [ 235.069553][T13099] loop2: detected capacity change from 0 to 256 [ 235.079544][T13098] hfs: unable to locate alternate MDB [ 235.125953][T13059] BTRFS info (device loop4): turning off barriers [ 235.136033][T13098] hfs: continuing without an alternate MDB [ 235.146524][T13099] vfat: Bad value for 'shortname' [ 235.165917][T13059] BTRFS info (device loop4): enabling disk space caching [ 235.214679][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 235.227971][T13059] BTRFS info (device loop4): force clearing of disk cache [ 235.268317][T13059] BTRFS info (device loop4): doing ref verification [ 235.296460][T13059] BTRFS info (device loop4): force zlib compression, level 3 [ 235.340483][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.410698][T13059] BTRFS info (device loop4): balance: start -d -m [ 235.429250][T13059] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 235.508626][T13059] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 235.532514][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 235.542248][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.583866][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.623281][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.653125][T13059] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 235.694609][ T5863] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.713190][T13059] BTRFS info (device loop4): balance: canceled [ 235.720800][ T6016] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 235.730241][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.758850][ T5863] usb 4-1: config 0 descriptor?? [ 235.849592][T13120] loop6: detected capacity change from 0 to 1024 [ 235.858188][ T5854] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 235.898340][T13120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.914527][ T6016] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.925813][T13120] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.937359][ T6016] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 235.959563][ T6016] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 235.970820][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.980652][ T6016] usb 3-1: Product: syz [ 235.986480][ T6016] usb 3-1: Manufacturer: syz [ 236.007397][ T6016] usb 3-1: SerialNumber: syz [ 236.104125][T11695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.196678][ T5863] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 236.268047][ T5863] microsoft 0003:045E:07DA.000B: no inputs found [ 236.280178][ T5863] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 236.330052][T13135] sp0: Synchronizing with TNC [ 236.396110][ T10] usb 4-1: USB disconnect, device number 8 [ 236.501978][T13142] loop1: detected capacity change from 0 to 512 [ 236.528241][T13142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.586185][T13142] EXT4-fs (loop1): 1 truncate cleaned up [ 236.612173][ T30] audit: type=1326 audit(1755730056.724:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 236.653119][ T30] audit: type=1326 audit(1755730056.724:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 236.676821][T13142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.776444][ T30] audit: type=1326 audit(1755730056.754:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 236.829553][ T30] audit: type=1326 audit(1755730056.754:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 236.871213][ T6016] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 236.936894][ T30] audit: type=1326 audit(1755730056.754:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 236.976125][ T30] audit: type=1326 audit(1755730056.754:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 237.050064][ T30] audit: type=1326 audit(1755730056.754:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 237.052668][ T6016] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.086970][ T30] audit: type=1326 audit(1755730056.754:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.6.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bd58ebe9 code=0x7ffc0000 [ 237.126834][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.137721][ T30] audit: type=1800 audit(1755730056.854:3967): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2894" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 237.199807][T13154] loop5: detected capacity change from 0 to 32768 [ 237.282604][T13154] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.321225][T13154] XFS (loop5): Ending clean mount [ 237.414491][ T5861] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.423858][ T10] usb 3-1: USB disconnect, device number 12 [ 237.573527][T13158] loop6: detected capacity change from 0 to 40427 [ 237.580531][ T1208] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 237.589655][T13158] F2FS-fs (loop6): Image doesn't support compression [ 237.610989][T13158] F2FS-fs (loop6): build fault injection rate: 690 [ 237.632096][T13158] F2FS-fs (loop6): invalid crc value [ 237.706751][T13158] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.719658][T13158] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 237.745019][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.763822][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.785231][ T1208] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 237.810327][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.853676][ T1208] usb 2-1: config 0 descriptor?? [ 238.079294][T13194] vlan2: entered promiscuous mode [ 238.091292][T13194] macvtap0: entered promiscuous mode [ 238.309535][ T1208] stadia 0003:18D1:9400.000C: item fetching failed at offset 2/5 [ 238.354500][ T1208] stadia 0003:18D1:9400.000C: parse failed [ 238.368213][ T1208] stadia 0003:18D1:9400.000C: probe with driver stadia failed with error -22 [ 238.373527][T13206] loop4: detected capacity change from 0 to 512 [ 238.477738][T13206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2920: bg 0: block 393: padding at end of block bitmap is not set [ 238.509541][ T6016] usb 2-1: USB disconnect, device number 13 [ 238.552245][T13206] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 238.570941][T13206] EXT4-fs (loop4): 2 truncates cleaned up [ 238.595892][T13206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.618498][T13215] afs: Unexpected value for 'dyn' [ 238.627783][T13216] loop5: detected capacity change from 0 to 256 [ 238.664401][T13213] loop6: detected capacity change from 0 to 1024 [ 238.670041][T13216] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 238.674124][T13206] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.2920: path /520/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 238.761966][T13213] hfsplus: bad catalog entry type [ 238.888843][ T1125] hfsplus: b-tree write err: -5, ino 4 [ 238.926191][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.955731][T13208] loop2: detected capacity change from 0 to 40427 [ 239.159196][T13208] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 239.171193][T13235] netlink: 372 bytes leftover after parsing attributes in process `syz.5.2931'. [ 239.223045][T13208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.434015][ T5856] syz-executor: attempt to access beyond end of device [ 239.434015][ T5856] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.475927][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 239.475962][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.475978][ T5856] Call Trace: [ 239.475987][ T5856] [ 239.476003][ T5856] dump_stack_lvl+0x189/0x250 [ 239.476039][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476070][ T5856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.476099][ T5856] ? __pfx_queue_work_on+0x10/0x10 [ 239.476124][ T5856] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.476157][ T5856] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.476196][ T5856] f2fs_handle_critical_error+0x37c/0x540 [ 239.476238][ T5856] f2fs_write_end_io+0x886/0xb60 [ 239.476271][ T5856] __submit_merged_bio+0x27a/0x6a0 [ 239.476309][ T5856] __submit_merged_write_cond+0x255/0x530 [ 239.476347][ T5856] f2fs_write_data_pages+0x261d/0x3000 [ 239.476406][ T5856] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.476444][ T5856] ? is_bpf_text_address+0x26/0x2b0 [ 239.476489][ T5856] ? arch_stack_walk+0xfc/0x150 [ 239.476537][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476566][ T5856] ? rcu_is_watching+0x15/0xb0 [ 239.476591][ T5856] ? unwind_next_frame+0xa5/0x2390 [ 239.476619][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476648][ T5856] ? css_rstat_updated+0x23a/0x4f0 [ 239.476678][ T5856] ? __pfx_css_rstat_updated+0x10/0x10 [ 239.476708][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476736][ T5856] ? do_raw_spin_lock+0x121/0x290 [ 239.476770][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476801][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476830][ T5856] ? do_raw_spin_unlock+0x122/0x240 [ 239.476861][ T5856] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.476900][ T5856] do_writepages+0x32e/0x550 [ 239.476935][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.476963][ T5856] ? rcu_is_watching+0x15/0xb0 [ 239.476986][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477023][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477051][ T5856] ? do_raw_spin_unlock+0x122/0x240 [ 239.477085][ T5856] filemap_fdatawrite+0x199/0x240 [ 239.477120][ T5856] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 239.477177][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477206][ T5856] ? rcu_is_watching+0x15/0xb0 [ 239.477229][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477260][ T5856] ? do_raw_spin_unlock+0x122/0x240 [ 239.477293][ T5856] f2fs_sync_dirty_inodes+0x31f/0x830 [ 239.477328][ T5856] f2fs_write_checkpoint+0x95a/0x1df0 [ 239.477367][ T5856] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 239.477391][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477448][ T5856] ? kill_f2fs_super+0x298/0x6c0 [ 239.477476][ T5856] kill_f2fs_super+0x2c3/0x6c0 [ 239.477504][ T5856] ? __pfx_kill_f2fs_super+0x10/0x10 [ 239.477527][ T5856] ? radix_tree_delete_item+0x2b6/0x400 [ 239.477564][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477593][ T5856] ? shrinker_free+0x2ce/0x3e0 [ 239.477621][ T5856] deactivate_locked_super+0xbc/0x130 [ 239.477652][ T5856] cleanup_mnt+0x425/0x4c0 [ 239.477682][ T5856] task_work_run+0x1d4/0x260 [ 239.477718][ T5856] ? __pfx_task_work_run+0x10/0x10 [ 239.477750][ T5856] ? __x64_sys_umount+0x122/0x160 [ 239.477783][ T5856] ? __pfx___x64_sys_umount+0x10/0x10 [ 239.477815][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477845][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.477874][ T5856] ? rcu_is_watching+0x15/0xb0 [ 239.477899][ T5856] exit_to_user_mode_loop+0xec/0x110 [ 239.477936][ T5856] do_syscall_64+0x2bd/0x3b0 [ 239.477973][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.478010][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.478034][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.478062][ T5856] ? exc_page_fault+0x9f/0xf0 [ 239.478095][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.478119][ T5856] RIP: 0033:0x7fd16fb8ff17 [ 239.478140][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 239.478161][ T5856] RSP: 002b:00007fffd3723e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 239.478187][ T5856] RAX: 0000000000000000 RBX: 00007fd16fc11c05 RCX: 00007fd16fb8ff17 [ 239.478204][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd3723f40 [ 239.478220][ T5856] RBP: 00007fffd3723f40 R08: 0000000000000000 R09: 0000000000000000 [ 239.478236][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd3724fd0 [ 239.478253][ T5856] R13: 00007fd16fc11c05 R14: 000000000003a6e0 R15: 00007fffd3725010 [ 239.478280][ T5856] [ 239.478290][ T5856] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.996048][T13233] loop4: detected capacity change from 0 to 32768 [ 240.005835][T13233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2928 (13233) [ 240.067556][T13233] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.067625][T13233] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 240.207765][T13245] loop1: detected capacity change from 0 to 32768 [ 240.290430][T13233] BTRFS info (device loop4): rebuilding free space tree [ 240.353258][T13245] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 240.378844][T13233] BTRFS info (device loop4): setting nodatasum [ 240.420562][T13233] BTRFS info (device loop4): setting nodatacow [ 240.426754][T13233] BTRFS info (device loop4): enabling ssd optimizations [ 240.492615][T13233] BTRFS info (device loop4): turning off barriers [ 240.513601][T13233] BTRFS info (device loop4): turning on flush-on-commit [ 240.558251][T13233] BTRFS info (device loop4): enabling free space tree [ 240.567974][ T5852] ocfs2: Unmounting device (7,1) on (node local) [ 240.610954][T13233] BTRFS info (device loop4): force clearing of disk cache [ 240.618136][T13233] BTRFS info (device loop4): doing ref verification [ 240.645522][T13233] BTRFS info (device loop4): max_inline set to 4096 [ 240.711885][T13270] loop5: detected capacity change from 0 to 32768 [ 240.767994][T13270] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.834558][ T5854] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.881025][T13270] XFS (loop5): Ending clean mount [ 240.944967][ T30] audit: type=1800 audit(1755730061.054:3968): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2944" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 240.980922][T13307] loop2: detected capacity change from 0 to 2048 [ 241.027614][T13307] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.081143][ T5861] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.132061][T13312] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.687003][T13335] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2956'. [ 241.920185][ T6015] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 241.960023][ T5863] kernel write not supported for file /media6 (pid: 5863 comm: kworker/1:3) [ 242.120487][ T6015] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 242.147425][T13365] tipc: Started in network mode [ 242.154198][ T6015] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.165582][T13365] tipc: Node identity ac141441, cluster identity 4711 [ 242.170960][ T6015] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 242.193324][T13365] tipc: Enabled bearer , priority 10 [ 242.209863][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.230488][ T6015] usb 2-1: config 0 descriptor?? [ 242.236615][T13337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.419744][T13376] loop6: detected capacity change from 0 to 4096 [ 242.437236][ T5863] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.525681][T13381] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.611890][ T5863] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 242.630223][ T5863] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.634934][T13361] loop5: detected capacity change from 0 to 32768 [ 242.650577][ T5863] usb 3-1: config 220 has no interface number 2 [ 242.657124][ T5863] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.685251][ T6015] uclogic 0003:5543:0042.000D: unknown main item tag 0x0 [ 242.710216][ T5863] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 242.730222][ T6015] uclogic 0003:5543:0042.000D: unknown main item tag 0x0 [ 242.743421][ T6015] uclogic 0003:5543:0042.000D: unknown main item tag 0x0 [ 242.762250][ T5863] usb 3-1: config 220 interface 0 has no altsetting 0 [ 242.772292][ T5863] usb 3-1: config 220 interface 76 has no altsetting 0 [ 242.779164][ T5863] usb 3-1: config 220 interface 1 has no altsetting 0 [ 242.789313][T13387] loop6: detected capacity change from 0 to 2048 [ 242.800877][ T6015] uclogic 0003:5543:0042.000D: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 242.834046][ T5863] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.868905][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.894185][ T5863] usb 3-1: Product: syz [ 242.907811][T13387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.937745][ T5863] usb 3-1: Manufacturer: syz [ 242.942934][ T6015] usb 2-1: USB disconnect, device number 14 [ 242.970342][ T5863] usb 3-1: SerialNumber: syz [ 242.992961][T13391] fido_id[13391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 243.120358][ T5917] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 243.193758][ T5863] usb 3-1: selecting invalid altsetting 0 [ 243.199608][ T5863] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 243.219245][ T5863] usb 3-1: No valid video chain found. [ 243.244699][ T5863] usb 3-1: selecting invalid altsetting 0 [ 243.260514][ T5863] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 243.277499][ T5863] usb 3-1: USB disconnect, device number 13 [ 243.293692][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.314481][ T5917] usb 4-1: config 0 has no interface number 0 [ 243.320756][ T10] tipc: Node number set to 2886997057 [ 243.353455][ T5917] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 243.383048][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.401955][ T5917] usb 4-1: config 0 descriptor?? [ 243.414755][T13395] loop4: detected capacity change from 0 to 32768 [ 243.419532][ T5917] usb 4-1: selecting invalid altsetting 1 [ 243.430265][ T5917] dvb_ttusb_budget: ttusb_init_controller: error [ 243.436591][ T5917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 243.603378][ T5917] DVB: Unable to find symbol cx22700_attach() [ 243.726007][ T5917] DVB: Unable to find symbol tda10046_attach() [ 243.742037][ T5917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 243.800328][ T5917] usb 4-1: USB disconnect, device number 9 [ 243.848628][ T1083] Bluetooth: hci6: Frame reassembly failed (-84) [ 243.865387][T13421] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 243.890910][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.144137][T13431] loop4: detected capacity change from 0 to 4096 [ 244.206440][T13431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.219899][T13409] loop5: detected capacity change from 0 to 32768 [ 244.239487][T13409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2999 (13409) [ 244.273026][T13409] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.283248][T13409] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 244.362153][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.421410][T13458] loop2: detected capacity change from 0 to 512 [ 244.423884][T13409] BTRFS info (device loop5): enabling ssd optimizations [ 244.431290][T13458] EXT4-fs: Ignoring removed oldalloc option [ 244.440299][ T6015] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 244.457447][T13409] BTRFS info (device loop5): enabling free space tree [ 244.485379][T13458] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3016: Parent and EA inode have the same ino 15 [ 244.555889][T13458] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3016: Parent and EA inode have the same ino 15 [ 244.579115][T13466] Device name cannot be null; rc = [-22] [ 244.613264][T13458] EXT4-fs (loop2): 1 orphan inode deleted [ 244.621901][ T6015] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 244.636369][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.647092][T13458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.657463][ T6015] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 244.684411][ T6015] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 244.694566][ T5861] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.696090][ T6015] usb 2-1: Manufacturer: syz [ 244.720793][ T6015] usb 2-1: config 0 descriptor?? [ 244.834349][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.882465][ T6015] rc_core: IR keymap rc-hauppauge not found [ 244.890646][ T6015] Registered IR keymap rc-empty [ 244.896214][ T6015] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 244.939357][ T6015] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 244.951640][T13476] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 245.106997][ T30] audit: type=1326 audit(1755730065.214:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cd8ebe9 code=0x7ffc0000 [ 245.154285][ T30] audit: type=1326 audit(1755730065.214:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cd8ebe9 code=0x7ffc0000 [ 245.220560][ C1] igorplugusb 2-1:0.0: receive overflow invalid: 13 [ 245.240920][ T30] audit: type=1326 audit(1755730065.244:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab3cd8ebe9 code=0x7ffc0000 [ 245.271533][ T30] audit: type=1326 audit(1755730065.244:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cd8ebe9 code=0x7ffc0000 [ 245.310837][ T30] audit: type=1326 audit(1755730065.244:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cd8ebe9 code=0x7ffc0000 [ 245.439333][ T6015] usb 2-1: USB disconnect, device number 15 [ 245.522683][T13497] loop2: detected capacity change from 0 to 8 [ 245.573436][T13499] loop5: detected capacity change from 0 to 1024 [ 245.683055][T13499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.732585][T13499] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.767738][T13499] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.3030: lblock 0 mapped to illegal pblock 0 (length 3) [ 245.788623][T13499] EXT4-fs (loop5): Remounting filesystem read-only [ 245.836217][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.880184][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 245.890187][ T5874] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 245.890239][ T5864] Bluetooth: hci6: command 0xfc11 tx timeout [ 246.041626][T13526] loop6: detected capacity change from 0 to 512 [ 246.044282][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 246.069667][ T5917] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.083534][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.090648][ T5917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 246.113526][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.151305][ T5917] usb 3-1: config 0 descriptor?? [ 246.199393][T13526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.239800][T13526] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.298630][T11695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.422340][T13543] loop1: detected capacity change from 0 to 512 [ 246.462272][T13543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.514192][T13543] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3050: invalid indirect mapped block 4294967295 (level 1) [ 246.552985][T13548] loop5: detected capacity change from 0 to 2048 [ 246.576557][ T5917] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 246.580527][T13543] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3050: invalid indirect mapped block 4294967295 (level 1) [ 246.596325][ T5917] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 246.607498][T13548] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 246.644402][T13548] NILFS (loop5): mounting unchecked fs [ 246.654648][ T5917] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 246.660522][ T6828] udevd[6828]: incorrect nilfs2 checksum on /dev/loop5 [ 246.672125][T13543] EXT4-fs (loop1): 2 truncates cleaned up [ 246.676434][T13548] NILFS (loop5): recovery complete [ 246.678702][T13543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.686195][ T5917] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 246.716390][ T5917] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 246.725882][T13557] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.750637][ T5917] corsair-cpro 0003:1B1C:0C10.000E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 246.831575][ T5917] corsair-cpro 0003:1B1C:0C10.000E: probe with driver corsair-cpro failed with error -38 [ 246.832756][ T6016] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.865626][ T5917] usb 3-1: USB disconnect, device number 14 [ 246.904102][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.011787][ T6016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.030208][ T6016] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.059618][ T6016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.072032][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.092495][ T6016] usb 4-1: Product: syz [ 247.101644][ T6016] usb 4-1: Manufacturer: syz [ 247.106494][ T6016] usb 4-1: SerialNumber: syz [ 247.149324][ T6016] usb 4-1: selecting invalid altsetting 1 [ 247.192884][T13568] netlink: 'syz.1.3060': attribute type 62 has an invalid length. [ 247.556037][ T6016] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 247.585316][ T6016] cdc_ncm 4-1:1.0: bind() failure [ 247.647114][ T6016] usb 4-1: USB disconnect, device number 10 [ 247.936732][T13592] loop1: detected capacity change from 0 to 2048 [ 247.980266][T13592] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 248.014537][ T6828] udevd[6828]: incorrect nilfs2 checksum on /dev/loop1 [ 248.034738][T13597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.286082][ T30] audit: type=1326 audit(1755730068.458:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.389476][ T30] audit: type=1326 audit(1755730068.458:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.490787][ T30] audit: type=1326 audit(1755730068.458:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd16fb8d550 code=0x7ffc0000 [ 248.591385][ T30] audit: type=1326 audit(1755730068.458:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.639195][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3087'. [ 248.657689][ T30] audit: type=1326 audit(1755730068.458:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.700205][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 248.729497][T13624] netlink: 'syz.5.3087': attribute type 7 has an invalid length. [ 248.758819][T13595] loop6: detected capacity change from 0 to 32768 [ 248.775090][ T30] audit: type=1326 audit(1755730068.458:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.799684][T13595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3073 (13595) [ 248.868392][ T30] audit: type=1326 audit(1755730068.458:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 248.916999][T13595] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.958052][T13595] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 248.988301][ T30] audit: type=1326 audit(1755730068.458:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16fb8ebe9 code=0x7ffc0000 [ 249.202406][T13595] BTRFS info (device loop6): enabling ssd optimizations [ 249.220258][T13595] BTRFS info (device loop6): turning on async discard [ 249.266309][T13595] BTRFS info (device loop6): enabling free space tree [ 249.387063][T13661] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 249.398792][T13660] IPVS: stopping master sync thread 13661 ... [ 249.465079][T13620] loop2: detected capacity change from 0 to 32768 [ 249.540386][T13620] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.556687][T13665] loop5: detected capacity change from 0 to 2048 [ 249.569736][T13665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.608503][T11695] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.652996][T13617] loop4: detected capacity change from 0 to 32768 [ 249.673594][T13620] XFS (loop2): Ending clean mount [ 249.725723][T13617] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 249.727795][T13620] XFS (loop2): Quotacheck needed: Please wait. [ 249.736222][T13617] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 249.772115][T13665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.800348][T13617] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 249.832996][ T5917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 249.839823][ T5917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 249.858520][T13683] loop1: detected capacity change from 0 to 64 [ 249.900249][T13620] XFS (loop2): Quotacheck: Done. [ 249.984936][T13687] loop6: detected capacity change from 0 to 1764 [ 249.993344][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.007289][ T5917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 167ms [ 250.038251][ T5917] gfs2: fsid=syz:syz.0: jid=0: Done [ 250.054431][T13617] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 250.137419][T13691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.158538][ T5856] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.645012][T13706] loop2: detected capacity change from 0 to 4096 [ 250.750280][T13706] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 250.822774][T13707] loop5: detected capacity change from 0 to 32768 [ 250.893730][T13707] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.991859][T13707] XFS (loop5): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 251.004530][T13707] XFS (loop5): Unmount and run xfs_repair [ 251.010386][T13707] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 251.017770][T13707] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 251.027551][T13707] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.036515][T13707] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.045429][T13707] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.054508][T13707] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.063430][T13707] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.072406][T13707] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00 ................ [ 251.081309][T13707] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.090248][T13707] XFS (loop5): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117 [ 251.101285][T13707] XFS (loop5): Failed to read root inode 0x1140, error 117 [ 251.108531][T13707] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 251.174795][T13698] loop1: detected capacity change from 0 to 32768 [ 251.215788][T13698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3108 (13698) [ 251.329648][T13698] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.407134][T13698] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 251.611310][T13698] BTRFS info (device loop1): enabling ssd optimizations [ 251.659838][T13751] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3121'. [ 251.679281][T13698] BTRFS info (device loop1): enabling free space tree [ 251.696018][T13751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3121'. [ 251.718148][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3121'. [ 251.766361][T13712] loop6: detected capacity change from 0 to 40427 [ 251.808713][T13712] F2FS-fs (loop6): Image doesn't support compression [ 251.823522][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.850191][T13712] F2FS-fs (loop6): build fault injection rate: 690 [ 251.900327][T13712] F2FS-fs (loop6): invalid crc value [ 252.039724][T13712] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 252.073805][T13712] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 252.616771][T13767] loop5: detected capacity change from 0 to 32768 [ 252.865724][T13767] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names,read_only [ 252.865759][T13767] allowing incompatible features above 0.0: (unknown version) [ 252.865773][T13767] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 253.014437][T13767] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 253.048365][T13767] bcachefs (loop5): initializing new filesystem [ 253.075665][T13767] bcachefs (loop5): going read-write [ 253.109607][T13767] bcachefs (loop5): marking superblocks [ 253.154599][T13767] bcachefs (loop5): initializing freespace [ 253.201929][T13767] bcachefs (loop5): done initializing freespace [ 253.239388][T13767] bcachefs (loop5): reading snapshots table [ 253.249538][T13767] bcachefs (loop5): reading snapshots done [ 253.279441][T13767] bcachefs (loop5): going read-only [ 253.289394][T13767] bcachefs (loop5): finished waiting for writes to stop [ 253.342838][T13767] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2 [ 253.389421][T13767] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 2 [ 253.439586][T13767] bcachefs (loop5): clean shutdown complete, journal seq 3 [ 253.463068][T13767] bcachefs (loop5): marking filesystem clean [ 253.483266][T13767] bcachefs (loop5): done starting filesystem [ 253.565291][T13803] loop2: detected capacity change from 0 to 32768 [ 253.598026][T13803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3139 (13803) [ 253.623696][ T1208] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.638282][ T5861] bcachefs (loop5): shutting down [ 253.678724][T13803] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.701649][T13803] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 253.736477][ T5861] bcachefs (loop5): shutdown complete [ 253.830245][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 253.877434][ T1208] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.910855][T13803] BTRFS info (device loop2): rebuilding free space tree [ 253.926453][ T1208] usb 5-1: config 0 has no interface number 0 [ 253.936432][T13803] BTRFS info (device loop2): setting nodatasum [ 253.948789][T13803] BTRFS info (device loop2): setting nodatacow [ 253.955085][T13803] BTRFS info (device loop2): enabling ssd optimizations [ 253.964099][T13803] BTRFS info (device loop2): turning on sync discard [ 253.971148][T13803] BTRFS info (device loop2): enabling free space tree [ 253.977974][T13803] BTRFS info (device loop2): force clearing of disk cache [ 253.985089][ T1208] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 253.985120][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.985145][ T1208] usb 5-1: Product: syz [ 253.985164][ T1208] usb 5-1: Manufacturer: syz [ 253.985181][ T1208] usb 5-1: SerialNumber: syz [ 253.987309][ T1208] usb 5-1: config 0 descriptor?? [ 253.995695][T13803] BTRFS info (device loop2): enabling auto defrag [ 254.064887][ T1208] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 254.104304][T13803] BTRFS info (device loop2): doing ref verification [ 254.110155][ T1208] usb 5-1: selecting invalid altsetting 1 [ 254.132435][ T1208] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 254.158531][ T1208] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.179558][ T1208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 254.204956][ T1208] usb 5-1: media controller created [ 254.244818][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.270374][ T30] audit: type=1800 audit(1755730074.428:3982): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3139" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 254.354451][ T5856] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.467034][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'. [ 254.590192][T13840] loop6: detected capacity change from 0 to 32768 [ 254.621801][T13840] (syz.6.3153,13840,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.676786][T13840] (syz.6.3153,13840,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 254.709728][ T5917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 254.777045][ T30] audit: type=1326 audit(1755730074.948:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.3162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd388d8ebe9 code=0x0 [ 254.813405][T13840] JBD2: Ignoring recovery information on journal [ 254.843318][T13840] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 254.890309][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 254.897367][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.917471][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 254.926740][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.937078][ T5917] usb 4-1: config 0 descriptor?? [ 254.962443][T11695] ocfs2: Unmounting device (7,6) on (node local) [ 255.008915][T13866] loop2: detected capacity change from 0 to 32768 [ 255.019726][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.055681][T13866] JBD2: Ignoring recovery information on journal [ 255.102826][T13866] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 255.213367][ T5856] ocfs2: Unmounting device (7,2) on (node local) [ 255.334217][T13828] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 255.371225][ T5917] magicmouse 0003:05AC:0265.000F: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 255.390921][ T1208] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 255.408727][ T1208] zl10353_read_register: readreg error (reg=127, ret==-71) [ 255.429436][ T1208] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 255.513070][ T1208] usb 5-1: USB disconnect, device number 10 [ 255.565880][ T5917] usb 4-1: USB disconnect, device number 11 [ 255.794872][T13896] program syz.6.3171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.965696][ T1208] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.075225][T13892] loop1: detected capacity change from 0 to 32768 [ 256.095716][T13892] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3170 (13892) [ 256.140081][T13892] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.160212][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 256.160265][T13892] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 256.208026][ T1208] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 256.210416][T13892] BTRFS error (device loop1): nologreplay must be used with ro mount option [ 256.221163][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.270358][T13892] BTRFS error (device loop1): open_ctree failed: -22 [ 256.290744][ T1208] usb 3-1: config 0 descriptor?? [ 256.303030][ T1208] gspca_main: sq930x-2.14.0 probing 041e:403c [ 256.426473][T13911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3178'. [ 256.595129][T13900] loop6: detected capacity change from 0 to 32768 [ 256.611600][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 256.637369][T13900] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 256.684339][T13900] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 256.752227][T13906] loop5: detected capacity change from 0 to 32768 [ 256.800939][ T30] audit: type=1800 audit(1755730076.958:3984): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3173" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 256.952359][T11695] ocfs2: Unmounting device (7,6) on (node local) [ 256.960202][ T1208] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 256.960271][ T1208] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 256.962759][ T1208] usb 3-1: USB disconnect, device number 15 [ 257.106507][T13904] loop4: detected capacity change from 0 to 40427 [ 257.115192][T13904] F2FS-fs (loop4): build fault injection rate: 690 [ 257.149184][T13904] F2FS-fs (loop4): invalid crc value [ 257.276721][T13904] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 257.278976][T13904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 257.438563][T13913] loop1: detected capacity change from 0 to 32768 [ 257.494786][T13913] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 257.499784][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 257.573161][ T5863] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 257.680060][T13913] XFS (loop1): Ending clean mount [ 257.688042][T13913] XFS (loop1): Quotacheck needed: Please wait. [ 257.696323][T13913] XFS (loop1): Quotacheck: Done. [ 257.765692][ T5863] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 257.765724][ T5863] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 257.765748][ T5863] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 257.765771][ T5863] usb 7-1: config 220 has no interface number 2 [ 257.765818][ T5863] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 257.765851][ T5863] usb 7-1: config 220 interface 0 has no altsetting 0 [ 257.765874][ T5863] usb 7-1: config 220 interface 76 has no altsetting 0 [ 257.765896][ T5863] usb 7-1: config 220 interface 1 has no altsetting 0 [ 257.786328][ T5863] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 257.786360][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.786385][ T5863] usb 7-1: Product: syz [ 257.786404][ T5863] usb 7-1: Manufacturer: syz [ 257.786422][ T5863] usb 7-1: SerialNumber: syz [ 257.802781][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 258.024340][ T5863] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 258.024380][ T5863] usb 7-1: No valid video chain found. [ 258.024421][ T5863] usb 7-1: selecting invalid altsetting 0 [ 258.051799][ T5863] usb 7-1: selecting invalid altsetting 0 [ 258.051826][ T5863] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 258.053461][ T5863] usb 7-1: USB disconnect, device number 4 [ 258.174915][T13940] loop5: detected capacity change from 0 to 32768 [ 258.214776][T13938] loop2: detected capacity change from 0 to 32768 [ 258.282806][T13938] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,wide_macs,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only [ 258.282839][T13938] allowing incompatible features above 0.0: (unknown version) [ 258.282854][T13938] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 258.337255][T13940] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,norecovery,nojournal_transaction_names,no_data_io [ 258.339552][T13940] allowing incompatible features above 0.0: (unknown version) [ 258.339569][T13940] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 258.339598][T13940] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 258.339707][T13940] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 258.339832][T13940] bcachefs (loop5): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 258.339832][T13940] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 258.339832][T13940] running recovery passes: check_extents_to_backpointers,check_inodes [ 258.360729][T13940] bcachefs (loop5): btree node read error: no device to read from [ 258.367861][T13938] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 258.459895][T13940] at freespace level 0/0 [ 258.461726][T13938] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 258.472872][T13940] u64s 11 type 255 SPOS_MAX len 0 ver 65535: [ 258.474075][T13938] bcachefs (loop2): Version upgrade required: [ 258.474075][T13938] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 258.474075][T13938] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 258.474075][T13938] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 258.482358][T13940] flagging btree freespace lost data [ 258.503436][T13938] bcachefs (loop2): accounting_read... done [ 258.605212][T13940] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 258.614790][T13940] running recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 258.618287][T13938] bcachefs (loop2): alloc_read... done [ 258.638281][T13938] bcachefs (loop2): done starting filesystem [ 258.668476][T13940] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 258.733026][T13940] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 258.762789][T13940] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 258.775896][ T5856] bcachefs (loop2): shutting down [ 258.799779][T13940] bcachefs (loop5): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 258.818096][ T5856] bcachefs (loop2): shutdown complete [ 258.848695][T13940] bcachefs (loop5): check_topology... done [ 258.870395][T13940] bcachefs (loop5): accounting_read... done [ 258.876804][T13940] bcachefs (loop5): alloc_read... done [ 258.891331][T13940] bcachefs (loop5): snapshots_read... done [ 258.897598][T13940] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 258.908398][T13940] bcachefs (loop5): done starting filesystem [ 258.963414][T13940] bcachefs (loop5): inode 536870912:4294967295 has wrong backpointer: [ 258.963435][T13940] got 4330382808765833931:0 [ 258.963447][T13940] should be 4096:4330382808765833931, fixing [ 258.980213][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 259.109991][T13975] vlan3: entered promiscuous mode [ 259.115817][T13975] macvtap0: entered promiscuous mode [ 259.151745][ T9] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 259.162951][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.171968][ T5861] bcachefs (loop5): shutting down [ 259.199954][ T9] usb 7-1: config 0 descriptor?? [ 259.263659][ T5861] bcachefs (loop5): shutdown complete [ 259.451442][ T9] kaweth 7-1:0.0: Firmware present in device. [ 259.561033][T13998] tipc: Started in network mode [ 259.569851][T13998] tipc: Node identity ac14140f, cluster identity 4711 [ 259.600380][T13998] tipc: New replicast peer: 255.255.255.255 [ 259.611532][T13998] tipc: Enabled bearer , priority 10 [ 259.645161][ T9] kaweth 7-1:0.0: Statistics collection: 0 [ 259.665305][ T9] kaweth 7-1:0.0: Multicast filter limit: 0 [ 259.690375][ T9] kaweth 7-1:0.0: MTU: 0 [ 259.694628][ T9] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 259.842815][ T9] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 259.875693][ T9] usb 7-1: USB disconnect, device number 5 [ 259.898223][T14012] loop4: detected capacity change from 0 to 2048 [ 259.983371][T14017] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.251140][T14010] loop1: detected capacity change from 0 to 32768 [ 260.280330][T14010] JBD2: Ignoring recovery information on journal [ 260.305979][T14010] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 260.338690][T14010] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 260.338741][T14010] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 260.338753][T14010] OCFS2: File system is now read-only. [ 260.338764][T14010] (syz.1.3215,14010,0):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30 [ 260.338792][T14010] (syz.1.3215,14010,0):ocfs2_remove_inode:775 ERROR: status = -30 [ 260.338829][T14010] (syz.1.3215,14010,0):ocfs2_wipe_inode:897 ERROR: status = -30 [ 260.338857][T14010] (syz.1.3215,14010,0):ocfs2_delete_inode:1158 ERROR: status = -30 [ 260.383781][ T5852] ocfs2: Unmounting device (7,1) on (node local) [ 260.571459][T14037] loop6: detected capacity change from 0 to 1024 [ 260.677287][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 260.730384][ T6015] tipc: Node number set to 2886997007 [ 260.878713][T14049] loop4: detected capacity change from 0 to 256 [ 261.145290][T14061] loop1: detected capacity change from 0 to 512 [ 261.177150][T14059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.232037][T14061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.256032][T14061] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.357991][T14061] EXT4-fs: Cannot change journaled quota options when quota turned on [ 261.381838][T14075] vlan2: entered promiscuous mode [ 261.397141][T14075] macvtap0: entered promiscuous mode [ 261.474707][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.550345][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 261.593566][T14077] loop6: detected capacity change from 0 to 512 [ 261.630729][T14081] loop5: detected capacity change from 0 to 512 [ 261.633466][T14077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 261.676926][T14081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.681285][T14083] loop2: detected capacity change from 0 to 64 [ 261.711548][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.722522][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 261.734709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 261.745769][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.769708][T14077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 261.808722][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 261.808946][T14077] System zones: 1-12 [ 261.834760][T14077] EXT4-fs (loop6): 1 truncate cleaned up [ 261.856658][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.867952][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.878746][ T9] usb 5-1: Product: syz [ 261.890870][T14077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.914773][ T9] usb 5-1: Manufacturer: syz [ 261.930029][ T9] usb 5-1: SerialNumber: syz [ 261.945481][ T9] usb 5-1: config 0 descriptor?? [ 261.976276][T14068] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.065656][T14077] EXT4-fs warning (device loop6): ext4_group_extend:1862: can't shrink FS - resize aborted [ 262.130222][ T9] rc_core: IR keymap rc-imon-rsc not found [ 262.146359][ T9] Registered IR keymap rc-empty [ 262.172474][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 262.204554][ T9] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 262.217903][T11695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.237163][T14068] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 262.243673][T14068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.320317][T14068] vhci_hcd vhci_hcd.0: Device attached [ 262.359243][T14105] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 262.365770][T14105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.424960][T14111] loop2: detected capacity change from 0 to 8 [ 262.460529][T14105] vhci_hcd vhci_hcd.0: Device attached [ 262.475315][T14111] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 262.500228][ T6015] vhci_hcd: vhci_device speed not set [ 262.570487][ T6015] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 262.593330][T14106] vhci_hcd: connection closed [ 262.596967][T14101] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 262.601493][ T59] vhci_hcd: stop threads [ 262.603541][ T5863] usb 5-1: USB disconnect, device number 11 [ 262.608044][T14100] vhci_hcd: connection closed [ 262.620201][ T59] vhci_hcd: release socket [ 262.641033][ T59] vhci_hcd: disconnect device [ 262.662383][ T59] vhci_hcd: stop threads [ 262.666653][ T59] vhci_hcd: release socket [ 262.686640][ T59] vhci_hcd: disconnect device [ 262.954765][T14099] loop5: detected capacity change from 0 to 32768 [ 263.363199][T14128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3266'. [ 263.579590][T14117] loop1: detected capacity change from 0 to 32768 [ 263.630500][T14117] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3260 (14117) [ 263.702074][T14117] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.755687][T14117] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 263.810551][T14117] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 263.960029][T14160] loop2: detected capacity change from 0 to 256 [ 263.983577][T14160] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.004814][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 264.052956][T14160] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 264.101442][ T5863] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 264.143114][T14117] BTRFS info (device loop1): rebuilding free space tree [ 264.185965][T14160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 264.198910][T14136] loop4: detected capacity change from 0 to 32768 [ 264.214592][T14117] BTRFS info (device loop1): disabling free space tree [ 264.227401][T14117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.239576][T14136] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3268 (14136) [ 264.269419][T14117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.294072][T14136] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 264.315254][T14136] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 264.323111][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.327914][T14117] BTRFS info (device loop1): setting nodatasum [ 264.354982][ T5863] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 264.361632][T14117] BTRFS info (device loop1): setting nodatacow [ 264.374690][T14117] BTRFS info (device loop1): enabling ssd optimizations [ 264.382821][T14117] BTRFS info (device loop1): enabling disk space caching [ 264.396325][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.410511][T14117] BTRFS info (device loop1): force clearing of disk cache [ 264.438856][ T5863] usb 7-1: config 0 descriptor?? [ 264.454120][T14117] BTRFS info (device loop1): doing ref verification [ 264.563861][T14136] BTRFS info (device loop4): enabling ssd optimizations [ 264.634214][T14136] BTRFS info (device loop4): enabling free space tree [ 264.760424][T14154] loop5: detected capacity change from 0 to 32768 [ 264.784480][ T5854] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 264.801804][T14154] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 264.814750][T14154] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 264.829531][T14154] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 264.868068][ T5863] input: HID 28bd:0933 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0933.0010/input/input17 [ 264.887357][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.896856][ T5863] uclogic 0003:28BD:0933.0010: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.6-1/input0 [ 264.949176][T14154] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 265.091156][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 265.098620][ T9] usb 3-1: config 0 has an invalid interface number: 80 but max is 1 [ 265.128289][ T9] usb 3-1: config 0 has an invalid interface number: 243 but max is 1 [ 265.144292][ T1208] usb 7-1: USB disconnect, device number 6 [ 265.164937][ T9] usb 3-1: config 0 has no interface number 0 [ 265.182105][ T9] usb 3-1: config 0 has no interface number 1 [ 265.215257][ T9] usb 3-1: config 0 interface 80 altsetting 5 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 265.244103][ T9] usb 3-1: config 0 interface 80 has no altsetting 0 [ 265.275764][ T9] usb 3-1: config 0 interface 243 has no altsetting 0 [ 265.293969][ T9] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=1f.c5 [ 265.295395][ T5852] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.310158][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.339329][ T9] usb 3-1: Product: syz [ 265.351413][ T9] usb 3-1: Manufacturer: syz [ 265.367572][ T9] usb 3-1: SerialNumber: syz [ 265.389335][ T9] usb 3-1: config 0 descriptor?? [ 265.532382][T14208] loop4: detected capacity change from 0 to 764 [ 265.573499][T14208] rock: directory entry would overflow storage [ 265.579689][T14208] rock: sig=0x5245, size=8, remaining=5 [ 265.700865][ T9] usb 3-1: USB disconnect, device number 16 [ 265.796538][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.80/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.994478][T14228] netlink: 'syz.6.3291': attribute type 3 has an invalid length. [ 266.244185][T14234] loop6: detected capacity change from 0 to 64 [ 266.275743][T14236] loop4: detected capacity change from 0 to 256 [ 266.326962][T14234] hfs: hfs: Invalid key length: 94 [ 266.355466][T14236] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 266.454084][T11695] hfs: node 4:3 still has 1 user(s)! [ 266.598634][T14222] loop1: detected capacity change from 0 to 32768 [ 266.675878][T14222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3289 (14222) [ 266.750219][T14222] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.788978][T14222] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 266.840189][T14222] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 267.072842][T14222] BTRFS info (device loop1): rebuilding free space tree [ 267.116484][T14272] loop4: detected capacity change from 0 to 2048 [ 267.154270][T14246] loop6: detected capacity change from 0 to 32768 [ 267.164017][T14222] BTRFS info (device loop1): disabling free space tree [ 267.190358][T14222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.236070][T14222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.259689][T14222] BTRFS info (device loop1): setting nodatasum [ 267.265905][T14222] BTRFS info (device loop1): setting nodatacow [ 267.272567][T14222] BTRFS info (device loop1): enabling ssd optimizations [ 267.279846][T14222] BTRFS info (device loop1): turning off barriers [ 267.280829][T14272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.287075][T14222] BTRFS info (device loop1): enabling disk space caching [ 267.306951][T14222] BTRFS info (device loop1): force clearing of disk cache [ 267.314326][T14222] BTRFS info (device loop1): doing ref verification [ 267.321654][T14222] BTRFS info (device loop1): max_inline set to 4096 [ 267.362721][T14242] loop2: detected capacity change from 0 to 32768 [ 267.380288][T14242] XFS: ikeep mount option is deprecated. [ 267.396215][T14242] XFS: ikeep mount option is deprecated. [ 267.450850][T14242] XFS: noikeep mount option is deprecated. [ 267.476844][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 267.476878][T14246] allowing incompatible features above 0.0: (unknown version) [ 267.476893][T14246] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 267.476912][T14246] with devices loop6 [ 267.577714][ T5852] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.579251][T14242] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.646435][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 267.657432][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 267.672676][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 267.712567][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 267.724167][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 267.731087][ T6015] vhci_hcd: vhci_device speed not set [ 267.743258][T14242] XFS (loop2): Ending clean mount [ 267.768148][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 267.820582][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 267.857308][ T59] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 267.872598][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 267.882273][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 267.895922][T14309] loop1: detected capacity change from 0 to 512 [ 267.927708][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 267.953934][T14312] program syz.3.3316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.968709][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 267.968709][ T59] [ 267.976543][T14309] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3314: invalid indirect mapped block 4294967295 (level 1) [ 267.980655][ T59] EXT4-fs (loop4): Total free blocks count 0 [ 268.001185][ T59] EXT4-fs (loop4): Free/Dirty block details [ 268.001779][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.007090][ T59] EXT4-fs (loop4): free_blocks=4096 [ 268.007109][ T59] EXT4-fs (loop4): dirty_blocks=528 [ 268.007125][ T59] EXT4-fs (loop4): Block reservation details [ 268.007223][T14246] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 268.044461][ T59] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 268.062164][T14309] EXT4-fs (loop1): Remounting filesystem read-only [ 268.082745][ T1097] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 5 with error 28 [ 268.097756][T14309] EXT4-fs (loop1): 2 truncates cleaned up [ 268.106600][T14309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.320342][T14318] binder: 14316:14318 ioctl c00c6211 0 returned -14 [ 268.330042][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.483531][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 268.511915][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 268.519872][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 268.580574][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 268.608675][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 268.639478][T14333] 9pnet_rdma: rdma_create_trans (14333): problem binding to privport: 13 [ 268.660468][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 268.712727][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 268.751705][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 268.760096][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.776712][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 268.781117][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 268.796202][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 268.822484][ T24] usb 6-1: Manufacturer: syz [ 268.852613][ T24] usb 6-1: config 0 descriptor?? [ 268.931242][T11695] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 268.961630][ T24] rc_core: IR keymap rc-hauppauge not found [ 268.967773][ T24] Registered IR keymap rc-empty [ 268.980933][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 269.013821][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 269.016302][T14350] loop2: detected capacity change from 0 to 128 [ 269.057689][ T6016] usb usb42-port2: attempt power cycle [ 269.076806][T14350] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 269.112832][T14350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.573642][ T9] usb 6-1: USB disconnect, device number 10 [ 269.630974][ T6016] usb usb42-port2: unable to enumerate USB device [ 269.857696][T14368] loop2: detected capacity change from 0 to 32768 [ 269.874622][T14362] loop1: detected capacity change from 0 to 32768 [ 269.918509][T14362] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 269.926818][T14362] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 269.951016][T14368] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.981679][T14362] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 270.011823][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 270.031931][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 270.100379][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 270.108020][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 270.135600][T14362] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 270.154930][T14368] XFS (loop2): Ending clean mount [ 270.194817][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.426158][T14389] loop5: detected capacity change from 0 to 128 [ 270.517110][T14387] syz.5.3347: attempt to access beyond end of device [ 270.517110][T14387] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 271.010616][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 271.059693][T14411] syz_tun: refused to change device tx_queue_len [ 271.070548][T14411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 271.186371][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.218154][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 271.239528][T14423] loop6: detected capacity change from 0 to 16 [ 271.248650][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.274056][T14423] erofs (device loop6): mounted with root inode @ nid 36. [ 271.285218][ T9] usb 4-1: config 220 has no interface number 2 [ 271.302320][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 271.357115][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 271.384771][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 271.416604][T14427] loop5: detected capacity change from 0 to 256 [ 271.424660][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 271.472313][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.485094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.533464][ T9] usb 4-1: Product: syz [ 271.537660][ T9] usb 4-1: Manufacturer: syz [ 271.570263][ T9] usb 4-1: SerialNumber: syz [ 271.718272][T14442] sch_fq: defrate 4294967295 ignored. [ 271.801996][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 271.808474][ T9] usb 4-1: No valid video chain found. [ 271.848904][ T9] usb 4-1: selecting invalid altsetting 0 [ 271.885117][ T9] usb 4-1: selecting invalid altsetting 0 [ 271.892362][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 271.923425][ T9] usb 4-1: USB disconnect, device number 12 [ 271.971507][T14446] loop2: detected capacity change from 0 to 4096 [ 272.034205][T14451] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.055082][ T6016] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.116844][T14446] overlayfs: upper fs does not support tmpfile. [ 272.151047][T14446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 272.164143][T14446] overlayfs: failed to set xattr on upper [ 272.185919][T14446] overlayfs: ...falling back to redirect_dir=nofollow. [ 272.194795][T14446] overlayfs: ...falling back to index=off. [ 272.210776][T14446] overlayfs: ...falling back to uuid=null. [ 272.226679][T14440] loop6: detected capacity change from 0 to 32768 [ 272.233703][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 272.244229][ T6016] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.270243][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.297405][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.312884][T14440] (syz.6.3368,14440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.354366][ T6016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.374216][T14440] (syz.6.3368,14440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.397821][ T6016] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.447918][ T6016] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.458784][ T6016] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.484853][T14440] JBD2: Ignoring recovery information on journal [ 272.505123][ T6016] usb 2-1: Manufacturer: syz [ 272.549740][ T6016] usb 2-1: config 0 descriptor?? [ 272.593835][T14440] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 272.704314][T14469] overlayfs: failed to resolve './file2:/': -2 [ 272.885258][T11695] ocfs2: Unmounting device (7,6) on (node local) [ 272.902604][ T6016] rc_core: IR keymap rc-hauppauge not found [ 272.905573][T14478] loop5: detected capacity change from 0 to 1024 [ 272.915307][ T6016] Registered IR keymap rc-empty [ 272.931734][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.973774][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.024963][ T6016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 273.067393][ T3576] hfsplus: b-tree write err: -5, ino 4 [ 273.074376][ T6016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 273.130383][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.171011][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.230252][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.280264][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.317924][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.362969][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.420292][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.464342][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.510247][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.544291][T14480] loop2: detected capacity change from 0 to 32768 [ 273.551561][ T6016] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.581718][T14480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3388 (14480) [ 273.595846][ T6016] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 273.615809][ T6016] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 273.629765][T14499] netlink: 'syz.5.3395': attribute type 29 has an invalid length. [ 273.647109][ T6016] usb 2-1: USB disconnect, device number 16 [ 273.673090][T14480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.702048][T14502] netlink: 'syz.5.3395': attribute type 29 has an invalid length. [ 273.732697][T14480] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 273.872538][T14480] BTRFS info (device loop2): enabling ssd optimizations [ 273.905971][T14480] BTRFS info (device loop2): enabling free space tree [ 274.000541][ T30] audit: type=1800 audit(1755730094.178:3985): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3388" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 274.059040][T14480] BTRFS info (device loop2): balance: start -sconvert=raid0,soft [ 274.079555][T14480] BTRFS info (device loop2): balance: ended with status: 0 [ 274.262301][ T5856] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.646805][T14552] loop4: detected capacity change from 0 to 16 [ 274.672713][T14552] erofs (device loop4): mounted with root inode @ nid 36. [ 274.805490][T14550] loop1: detected capacity change from 0 to 4096 [ 274.956281][T14550] ntfs3(loop1): failed to convert "0080" to macgaelic [ 274.964225][T14550] ntfs3(loop1): failed to convert name for inode 1e. [ 274.964495][T14550] ntfs3(loop1): ino=1f, mi_enum_attr [ 274.964522][T14550] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 275.579837][T14582] program syz.6.3426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.664454][T14584] netlink: 'syz.4.3428': attribute type 3 has an invalid length. [ 276.731066][T14598] loop1: detected capacity change from 0 to 40427 [ 276.788414][T14598] F2FS-fs (loop1): invalid crc value [ 276.945790][T14622] loop5: detected capacity change from 0 to 32768 [ 276.958511][T14598] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 277.009392][T14598] F2FS-fs (loop1): Start checkpoint disabled! [ 277.033167][T14656] netlink: 'syz.4.3460': attribute type 1 has an invalid length. [ 277.084379][T14598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 277.147283][T14622] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 277.147315][T14622] allowing incompatible features above 0.0: (unknown version) [ 277.147330][T14622] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 277.198748][ T1097] kworker/u8:6: attempt to access beyond end of device [ 277.198748][ T1097] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.198816][ T1097] CPU: 0 UID: 0 PID: 1097 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 277.198844][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.198861][ T1097] Workqueue: writeback wb_workfn (flush-7:1) [ 277.198896][ T1097] Call Trace: [ 277.198904][ T1097] [ 277.198915][ T1097] dump_stack_lvl+0x189/0x250 [ 277.198947][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.198978][ T1097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.199018][ T1097] ? __pfx_queue_work_on+0x10/0x10 [ 277.199043][ T1097] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 277.199076][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.199116][ T1097] f2fs_handle_critical_error+0x37c/0x540 [ 277.199156][ T1097] f2fs_write_end_io+0x886/0xb60 [ 277.199190][ T1097] __submit_merged_bio+0x27a/0x6a0 [ 277.199229][ T1097] __submit_merged_write_cond+0x255/0x530 [ 277.199266][ T1097] f2fs_write_data_pages+0x261d/0x3000 [ 277.199325][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.199372][ T1097] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 277.199419][ T1097] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 277.199462][ T1097] ? trace_f2fs_writepages+0x7f/0x200 [ 277.199497][ T1097] ? f2fs_write_node_pages+0x478/0x6e0 [ 277.199528][ T1097] ? xa_load+0x60/0x210 [ 277.199569][ T1097] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 277.199600][ T1097] ? do_raw_spin_lock+0x121/0x290 [ 277.199632][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.199657][ T1097] ? set_shrinker_bit+0x7c/0x350 [ 277.199683][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.199715][ T1097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.199754][ T1097] do_writepages+0x32e/0x550 [ 277.199788][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.199816][ T1097] ? do_raw_spin_lock+0x121/0x290 [ 277.199848][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.199883][ T1097] __writeback_single_inode+0x145/0xff0 [ 277.199915][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.199944][ T1097] ? do_raw_spin_unlock+0x122/0x240 [ 277.199978][ T1097] writeback_sb_inodes+0x6c7/0x1010 [ 277.200020][ T1097] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 277.200056][ T1097] ? fprop_reflect_period_percpu+0x205/0x330 [ 277.200095][ T1097] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 277.200156][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200186][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200210][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200243][ T1097] wb_writeback+0x43b/0xaf0 [ 277.200279][ T1097] ? queue_io+0x341/0x590 [ 277.200312][ T1097] ? __pfx_wb_writeback+0x10/0x10 [ 277.200348][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200375][ T1097] wb_workfn+0x409/0xef0 [ 277.200409][ T1097] ? __pfx_wb_workfn+0x10/0x10 [ 277.200433][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200462][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200487][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200515][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200539][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200570][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200599][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200622][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200651][ T1097] ? lock_acquire+0x5f/0x360 [ 277.200686][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200716][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.200739][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 277.200763][ T1097] ? process_scheduled_works+0x9ef/0x17b0 [ 277.200788][ T1097] process_scheduled_works+0xae1/0x17b0 [ 277.200829][ T1097] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.200858][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.200892][ T1097] worker_thread+0x8a0/0xda0 [ 277.200933][ T1097] kthread+0x711/0x8a0 [ 277.200967][ T1097] ? __pfx_worker_thread+0x10/0x10 [ 277.201002][ T1097] ? __pfx_kthread+0x10/0x10 [ 277.201031][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.201061][ T1097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.201089][ T1097] ? rcu_is_watching+0x15/0xb0 [ 277.201113][ T1097] ? __pfx_kthread+0x10/0x10 [ 277.201144][ T1097] ret_from_fork+0x3fc/0x770 [ 277.201171][ T1097] ? __pfx_ret_from_fork+0x10/0x10 [ 277.201199][ T1097] ? __switch_to_asm+0x39/0x70 [ 277.201233][ T1097] ? __switch_to_asm+0x33/0x70 [ 277.201266][ T1097] ? __pfx_kthread+0x10/0x10 [ 277.201297][ T1097] ret_from_fork_asm+0x1a/0x30 [ 277.201341][ T1097] [ 277.204876][ T1097] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 277.518575][T14640] loop2: detected capacity change from 0 to 40427 [ 277.526917][T14640] F2FS-fs: heap/no_heap options were deprecated [ 277.526955][T14640] f2fs: Invalid uid '0x00000000ffffffff' [ 278.282578][T14667] tty tty1: ldisc open failed (-12), clearing slot 0 [ 278.289418][T14622] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 278.298008][ T6015] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.298752][T14622] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 278.298979][T14622] bcachefs (loop5): Version upgrade required: [ 278.298979][T14622] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 278.298979][T14622] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 278.298979][T14622] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 278.311384][T14622] bcachefs (loop5): dropping and reconstructing all alloc info [ 278.427134][T14622] bcachefs (loop5): accounting_read... done [ 278.434626][T14622] bcachefs (loop5): alloc_read... done [ 278.441144][T14622] bcachefs (loop5): snapshots_read... done [ 278.449309][T14622] bcachefs (loop5): check_allocations... done [ 278.470305][ T6015] usb 3-1: Using ep0 maxpacket: 16 [ 278.479737][T14622] bcachefs (loop5): going read-write [ 278.480189][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.487378][T14622] bcachefs (loop5): insufficient writeable journal devices available: have 0, need 1 [ 278.487378][T14622] rw journal devs: [ 278.498379][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.527654][ T6015] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.543742][T14622] bcachefs (loop5): done starting filesystem [ 278.543936][ T6015] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.550385][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 278.562175][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.614534][ T6015] usb 3-1: config 0 descriptor?? [ 278.650865][ T30] audit: type=1800 audit(1755730098.818:3986): pid=14622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3446" name="file1" dev="loop5" ino=536870912 res=0 errno=0 [ 278.687181][ T5861] bcachefs (loop5): shutting down [ 278.687199][ T5861] bcachefs (loop5): going read-only [ 278.687227][ T5861] bcachefs (loop5): finished waiting for writes to stop [ 278.688154][ T5861] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 278.688244][ T5861] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 278.688423][ T5861] bcachefs (loop5): unclean shutdown complete, journal seq 10 [ 278.689491][ T5861] bcachefs (loop5): done going read-only, filesystem not clean [ 278.704410][ T5861] bcachefs (loop5): shutdown complete [ 278.748644][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 278.768350][ T9] usb 2-1: config 0 has no interface number 0 [ 278.774148][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.774180][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.774205][ T9] usb 2-1: Product: syz [ 278.774223][ T9] usb 2-1: Manufacturer: syz [ 278.774241][ T9] usb 2-1: SerialNumber: syz [ 278.776023][ T9] usb 2-1: config 0 descriptor?? [ 279.049970][ T6015] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 279.050008][ T6015] microsoft 0003:045E:07DA.0011: no inputs found [ 279.050026][ T6015] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 279.259591][ T5917] usb 3-1: USB disconnect, device number 17 [ 279.413840][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 279.437885][ T9] usb 2-1: Please update to version 0.2 or newer [ 279.448859][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 279.512227][ T9] usb 2-1: USB disconnect, device number 17 [ 279.724539][T14732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 279.724539][T14732] program syz.3.3489 not setting count and/or reply_len properly [ 279.806215][T14734] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3491'. [ 279.828960][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'. [ 279.969071][T14744] loop4: detected capacity change from 0 to 256 [ 280.072318][T14744] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 280.084702][ T6016] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 280.095575][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 280.260198][ T6016] usb 4-1: Using ep0 maxpacket: 8 [ 280.293157][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.313205][ T6016] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 280.339798][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.377414][ T6016] usb 4-1: config 0 descriptor?? [ 280.555036][T14765] loop2: detected capacity change from 0 to 512 [ 280.593338][T14765] EXT4-fs: Ignoring removed i_version option [ 280.600858][T14765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.676822][T14765] EXT4-fs (loop2): 1 truncate cleaned up [ 280.691969][T14765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.856907][ T5856] EXT4-fs warning (device loop2): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting [ 280.870248][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 280.870458][ T6016] lenovo 0003:17EF:6062.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 280.919711][ T5856] ------------[ cut here ]------------ [ 280.926240][ T5856] WARNING: CPU: 1 PID: 5856 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 280.937447][ T5856] Modules linked in: [ 280.941682][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 280.951304][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.961397][ T5856] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 280.968362][ T5856] Code: 8b 74 24 10 e9 d4 03 00 00 e8 3c ae 3a ff 48 89 df 48 c7 c6 ec c9 97 8d ba bd 05 00 00 48 c7 c1 40 e3 9f 8b e8 01 26 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 280.988036][ T5856] RSP: 0018:ffffc900030b73e0 EFLAGS: 00010246 [ 280.994199][ T5856] RAX: 88d88a7b829fe200 RBX: ffff88807786e000 RCX: 88d88a7b829fe200 [ 281.002259][ T5856] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 281.010288][ T5856] RBP: ffffc900030b7570 R08: ffffc900030b6fc7 R09: 1ffff92000616df8 [ 281.018260][ T5856] R10: dffffc0000000000 R11: fffff52000616df9 R12: 1ffff92000616e90 [ 281.026805][ T5856] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888054768c50 [ 281.035295][ T5856] FS: 000055556f29f500(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 281.044280][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.050886][ T5856] CR2: 00007f2201d57398 CR3: 0000000057172000 CR4: 0000000000350ef0 [ 281.058855][ T5856] Call Trace: [ 281.060161][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 281.062166][ T5856] [ 281.070254][ T5856] ? __pfx___might_resched+0x10/0x10 [ 281.075547][ T5856] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 281.078759][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.082203][ T5856] ? __filemap_get_folio+0x79f/0xaf0 [ 281.082235][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.082261][ T5856] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 281.082304][ T5856] ext4_xattr_block_set+0x223/0x2ac0 [ 281.113835][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.119474][ T5856] ? __pfx___might_resched+0x10/0x10 [ 281.124801][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.131044][ T5856] ? __pfx_check_xattrs+0x10/0x10 [ 281.136567][ T5856] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 281.140844][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.142374][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.157656][ T5856] ? ext4_xattr_block_find+0x2d4/0x350 [ 281.158008][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 281.163185][ T5856] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 281.174665][T14780] nbd: must specify a size in bytes for the device [ 281.178215][ T5856] __ext4_expand_extra_isize+0x30d/0x400 [ 281.190346][ T5856] __ext4_mark_inode_dirty+0x46c/0x700 [ 281.195825][ T5856] ext4_dirty_inode+0xd0/0x110 [ 281.200637][ T5856] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 281.202677][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.206007][ T5856] __mark_inode_dirty+0x2ec/0xe10 [ 281.206042][ T5856] iput+0x1ee/0x9d0 [ 281.222847][ T5856] __dentry_kill+0x209/0x660 [ 281.227437][ T5856] ? shrink_kill+0x8d/0x2c0 [ 281.232555][ T5856] shrink_kill+0xa9/0x2c0 [ 281.236889][ T5856] shrink_dentry_list+0x2e0/0x5e0 [ 281.242440][ T5856] shrink_dcache_parent+0xa1/0x2c0 [ 281.242833][ T9] usb 6-1: config 0 descriptor?? [ 281.247552][ T5856] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 281.247581][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.263075][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.268717][ T5856] do_one_tree+0x23/0xe0 [ 281.273011][ T5856] shrink_dcache_for_umount+0xa0/0x170 [ 281.278476][ T5856] generic_shutdown_super+0x67/0x2c0 [ 281.283810][ T5856] kill_block_super+0x44/0x90 [ 281.288505][ T5856] ext4_kill_sb+0x68/0xb0 [ 281.292902][ T5856] deactivate_locked_super+0xbc/0x130 [ 281.298283][ T5856] cleanup_mnt+0x425/0x4c0 [ 281.302743][ T5856] task_work_run+0x1d4/0x260 [ 281.307349][ T5856] ? __pfx_task_work_run+0x10/0x10 [ 281.312502][ T5856] ? __x64_sys_umount+0x122/0x160 [ 281.317534][ T5856] ? __pfx___x64_sys_umount+0x10/0x10 [ 281.322994][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.324677][T14752] loop6: detected capacity change from 0 to 40427 [ 281.328632][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.328666][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.346473][ T5856] exit_to_user_mode_loop+0xec/0x110 [ 281.348483][T14752] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 281.351836][ T5856] do_syscall_64+0x2bd/0x3b0 [ 281.351877][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.351909][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.375882][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.381597][ T5856] ? exc_page_fault+0x9f/0xf0 [ 281.386286][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.392216][ T5856] RIP: 0033:0x7fd16fb8ff17 [ 281.396629][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 281.416762][ T5856] RSP: 002b:00007fffd3723e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 281.425345][ T5856] RAX: 0000000000000000 RBX: 00007fd16fc11c05 RCX: 00007fd16fb8ff17 [ 281.433382][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd3723f40 [ 281.441955][ T5856] RBP: 00007fffd3723f40 R08: 0000000000000000 R09: 0000000000000000 [ 281.449935][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd3724fd0 [ 281.458504][ T5856] R13: 00007fd16fc11c05 R14: 00000000000448a6 R15: 00007fffd3725010 [ 281.466549][ T5856] [ 281.469567][ T5856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.476838][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 281.486283][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.496324][ T5856] Call Trace: [ 281.499588][ T5856] [ 281.502504][ T5856] dump_stack_lvl+0x99/0x250 [ 281.507090][ T5856] ? __asan_memcpy+0x40/0x70 [ 281.511702][ T5856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.516921][ T5856] ? __pfx__printk+0x10/0x10 [ 281.521523][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.527153][ T5856] vpanic+0x281/0x750 [ 281.531165][ T5856] ? __pfx__printk+0x10/0x10 [ 281.535751][ T5856] ? __pfx_vpanic+0x10/0x10 [ 281.540250][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.545882][ T5856] ? is_bpf_text_address+0x26/0x2b0 [ 281.551085][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.556713][ T5856] panic+0xb9/0xc0 [ 281.560427][ T5856] ? __pfx_panic+0x10/0x10 [ 281.564846][ T5856] __warn+0x31b/0x4b0 [ 281.568821][ T5856] ? ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 281.575151][ T5856] ? ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 281.581478][ T5856] report_bug+0x2be/0x4f0 [ 281.585812][ T5856] ? ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 281.592150][ T5856] ? ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 281.598479][ T5856] ? ext4_xattr_inode_lookup_create+0xa82/0x1c20 [ 281.604809][ T5856] handle_bug+0x84/0x160 [ 281.609043][ T5856] exc_invalid_op+0x1a/0x50 [ 281.613534][ T5856] asm_exc_invalid_op+0x1a/0x20 [ 281.618370][ T5856] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20 [ 281.625307][ T5856] Code: 8b 74 24 10 e9 d4 03 00 00 e8 3c ae 3a ff 48 89 df 48 c7 c6 ec c9 97 8d ba bd 05 00 00 48 c7 c1 40 e3 9f 8b e8 01 26 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 281.644903][ T5856] RSP: 0018:ffffc900030b73e0 EFLAGS: 00010246 [ 281.650968][ T5856] RAX: 88d88a7b829fe200 RBX: ffff88807786e000 RCX: 88d88a7b829fe200 [ 281.658932][ T5856] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 281.666886][ T5856] RBP: ffffc900030b7570 R08: ffffc900030b6fc7 R09: 1ffff92000616df8 [ 281.674845][ T5856] R10: dffffc0000000000 R11: fffff52000616df9 R12: 1ffff92000616e90 [ 281.682809][ T5856] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888054768c50 [ 281.690788][ T5856] ? __pfx___might_resched+0x10/0x10 [ 281.696067][ T5856] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 281.702655][ T5856] ? __filemap_get_folio+0x79f/0xaf0 [ 281.707930][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.712683][ T5856] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 281.718057][ T5856] ext4_xattr_block_set+0x223/0x2ac0 [ 281.723344][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.728977][ T5856] ? __pfx___might_resched+0x10/0x10 [ 281.734255][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.739888][ T5856] ? __pfx_check_xattrs+0x10/0x10 [ 281.744914][ T5856] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 281.750642][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.756270][ T5856] ? ext4_xattr_block_find+0x2d4/0x350 [ 281.761737][ T5856] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 281.767662][ T5856] __ext4_expand_extra_isize+0x30d/0x400 [ 281.773298][ T5856] __ext4_mark_inode_dirty+0x46c/0x700 [ 281.778767][ T5856] ext4_dirty_inode+0xd0/0x110 [ 281.783519][ T5856] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 281.788906][ T5856] __mark_inode_dirty+0x2ec/0xe10 [ 281.793953][ T5856] iput+0x1ee/0x9d0 [ 281.797796][ T5856] __dentry_kill+0x209/0x660 [ 281.802392][ T5856] ? shrink_kill+0x8d/0x2c0 [ 281.806889][ T5856] shrink_kill+0xa9/0x2c0 [ 281.811215][ T5856] shrink_dentry_list+0x2e0/0x5e0 [ 281.816239][ T5856] shrink_dcache_parent+0xa1/0x2c0 [ 281.821347][ T5856] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 281.827056][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.831809][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.837440][ T5856] do_one_tree+0x23/0xe0 [ 281.841679][ T5856] shrink_dcache_for_umount+0xa0/0x170 [ 281.847136][ T5856] generic_shutdown_super+0x67/0x2c0 [ 281.852423][ T5856] kill_block_super+0x44/0x90 [ 281.857100][ T5856] ext4_kill_sb+0x68/0xb0 [ 281.861417][ T5856] deactivate_locked_super+0xbc/0x130 [ 281.866788][ T5856] cleanup_mnt+0x425/0x4c0 [ 281.871204][ T5856] task_work_run+0x1d4/0x260 [ 281.875796][ T5856] ? __pfx_task_work_run+0x10/0x10 [ 281.880905][ T5856] ? __x64_sys_umount+0x122/0x160 [ 281.885928][ T5856] ? __pfx___x64_sys_umount+0x10/0x10 [ 281.891301][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.896940][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.902571][ T5856] ? rcu_is_watching+0x15/0xb0 [ 281.907345][ T5856] exit_to_user_mode_loop+0xec/0x110 [ 281.912634][ T5856] do_syscall_64+0x2bd/0x3b0 [ 281.917225][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.922854][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.928910][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.934533][ T5856] ? exc_page_fault+0x9f/0xf0 [ 281.939207][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.945089][ T5856] RIP: 0033:0x7fd16fb8ff17 [ 281.949493][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 281.969089][ T5856] RSP: 002b:00007fffd3723e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 281.977501][ T5856] RAX: 0000000000000000 RBX: 00007fd16fc11c05 RCX: 00007fd16fb8ff17 [ 281.985488][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd3723f40 [ 281.993448][ T5856] RBP: 00007fffd3723f40 R08: 0000000000000000 R09: 0000000000000000 [ 282.001408][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd3724fd0 [ 282.009364][ T5856] R13: 00007fd16fc11c05 R14: 00000000000448a6 R15: 00007fffd3725010 [ 282.017334][ T5856] [ 282.020546][ T5856] Kernel Offset: disabled [ 282.024862][ T5856] Rebooting in 86400 seconds..