last executing test programs: 4.784977618s ago: executing program 0 (id=534): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x15) 4.560066684s ago: executing program 0 (id=536): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) 4.436839347s ago: executing program 0 (id=540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x6, 0x7168, 0xd0b, 0x5, 0x9, 0xa, 0x0, 0x8001, 0x83, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x10, 0xcc3, 0x3, 0x4, 0x9, 0xbb, 0x8, 0x8, 0x7, 0xfffffffffff7fffc, 0x3, 0x6}) 4.263771541s ago: executing program 0 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4.205723543s ago: executing program 0 (id=543): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x942, 0xfa, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7d, 0xc4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00233700000037048307fc050000000000004580", @ANYRES64], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.91371284s ago: executing program 4 (id=546): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [], 0x2c}) r0 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.635169308s ago: executing program 4 (id=548): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.596460564s ago: executing program 2 (id=558): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x5a45, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2.469715397s ago: executing program 2 (id=561): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x7f, "42fce3753785259206be0000000000000000005600"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000200)=0xffffabe6) 2.38574932s ago: executing program 2 (id=562): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x40, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xbd, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.119929866s ago: executing program 0 (id=565): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x942, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf3, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x0, 0x10, 0x29, {0x29, 0x2a, "832bb930f01842562348d180df827ff0479c37f525cde319a134ae9fe86eeb545753a0afee938b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.57263076s ago: executing program 1 (id=572): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x0, 0x0, r1}) 1.476946612s ago: executing program 1 (id=574): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x34, 0x3) 1.114955132s ago: executing program 4 (id=579): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) 1.051986173s ago: executing program 1 (id=581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) close(0x3) 1.008428104s ago: executing program 4 (id=583): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x4000e, 0x2f) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) 864.125988ms ago: executing program 3 (id=584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26000050) 854.385458ms ago: executing program 4 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 767.49583ms ago: executing program 4 (id=586): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x6218840, &(0x7f0000000040), 0x1, 0x9877, &(0x7f0000012f80)="$eJzs3QWcpWXBuP9Z2IUlBRTBAqTEJCVEkQ5FlBQlBGlJARFQOpRQQRFQQQEFEUUBAelu6e7u7o7/Z2EXcb2WF/+vP+Hd67o+7pw5MWfuc3+f+3HOPMM5yy+89PwDAxMNvNaI03901t63rrzMBItvfMyeg6/Zf7clHhh+8VivnUw87/DT+Yafzj8wMDBo+P0Meu2ywfMcfcwYA4MHhv3vH40/zrhjjD8wMO7ws8PvZ2CO107GO2TE7V4ZKR7oVMO+3a6v/Xu1CYbdybBPVlzlpQ0GBgaGvuHrh41rpn95oNKWn2+Rhf9h9brbGMOvHvSP6149Hfzav/EOGhgY74CBUW8fw2475A1f+99s2PecaJqBZW99G773/7mWn2+RxUbyH7YWxxx+2RzD1vjIa9DYyNv5bkuve9/wKRw0fOIGv2G9vB3b/f+vlp9v4cUHRr2OB5ZYaKt7X3l1vzl4wYGBwQsNDAxeeGBg8CJvt0f9Z3pbN76qqqp6W5pv/lmHPWcfY6SfB4aO+LmWfi4878WZ7xwYGLzEa88TB68y4rlgVVVVVVVVVb0zm2/+WReA5/8Tvdnz/6lO3HHinv9XVVVVVVVV/d9psfnmn3XYc/2Rnv9P/mbP/x+9//CDX/vb/3nneO2rXn57H0RVVVVVVVVVvWkLL4bP/6d6s+f/Fxw91cU9/6+qqqqqqqr6v9NSr7zyyjZveJ294RfPMOJ6ev5/8j03r/S2Dbiqqqqqqqqq/u1efuiEU/7xmu9TDIz0eu+vNvz3AoOOOO3SS9+2gb4zGvSvvw/Z9u0e0/+2Yc5DD5tqYGCDZd/uodTb0P+Z16qv/yfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRnH8//XX/z/5qNVGvBf8R6ab9doT/vGVr773/+AlFntou7dp6G9Ho+vx/4F1Bg0MDPedaJ2BgYEl5ltqmRkGBgZOuHbW6aYdeP26OYddN/ckY776BvEj/jORhSbmO9526tdOh20oA+95/T6OePX+F3vlwDEHjTSINzTxsQcfvPbyz8w28un0o34cY7z+2QTH3D/iv2UZY6QbDR3FF4+4/xGPZWTn4WOfYdjYZ9x0/Y1m3GSLLT+5zvqrrrXGWmtsMNcss88821xzzT77jGuus94aM732cVRzNtWrHxd4K3M2/shz9tB8b5yzkR/bqOZsqjefs1fvca/zh35+xJwN/jfnbIE3n7Op1hn+jSaed8jAKq/OzaCBgYkXHDKw+bAzM489MDDxQsNvO/mw2352kjEGBvb4xwMd9tnYr2+Dg7YddpvlF156/td2UwMD/zj9R6N4P/uxho983uGn8w0/nf+1bzPRwD82xcHzHH3MGMPm4p+mY/xxxh1j/IGBcYefHX4/A3O9djLuiSNuN4r3WR9poK++zMqur/17tQkGBgbGG/bJFKuevNOwqf8vvE/7/6////8XrzkHvb49Dhr+b/htXvOab5HF/vG9Xp2GYXM35vDL5hhm8h9+a/t/6l/GO9XQganeZLxv8ro4r0bb13onTLr9f+p1cWi8k7/JeN/kdXxHOd7l7tz3vtfu6j823pH2dYu/+nHet7KvG3jzfd2YdAdrXPShkfd1Xxz1EP9pdzlijsYe6Uaj2tdNvt+U2w67/3nffF+3+LCxD/mnfd0YAwMTLzBiXzdsx7fwkIE9hp2ZZdiZRYYMHDrszKyvnhln4LRhZz612obrrT7sgkX/dTuYYdA//YEmrLOFR1png97w2AeN9Pedg187He+gEe/hNIr95qDhD+t/3FfQdjvRm4z3Td5/Cud52GWrHzl00v/U+0/ReIe++XhH9X7Zoxzv7k+ffOt/eLyvr7Mhb5iuRd/KOpvqn9fZsIc45htWxlv9OWx1uP1rn0/++r1ttvX9r/9MMWSk+/2ffqZY9M3X2UTrjPR1uxwwMOjN5maRtzI3H/yXfdB2b5ybt/rz1gzTvHb9mG8yN2PPtfL0I+ZmrH9zbhb5d+dm3oEx/3luBg8sNDAwMO3w/cPCb2VuJn/zuXmr2824cPvXPl/j9YsW3O2wc0bMzchz8T/NzcL/7txM9fp2M+2r1009xsBYYw1svuqmm24882sfR5yd5bWPb74GF3wrcznRf2Yu3z94VHP5j011/DsvPuh/WIP/sk8fcf8L/rtzOfD6XA6sM/JiqXdq/f7PXf7u8neXv7v83eXvLn9xozj+//rr/+8z0dx7Dv/lxpCLp5xs57d7vG9zo/Xx/+G+/3T8f+fJprx4jIHXr3vT47Ov3eYdeXx2jtdOxjtkxO1GPj7IAx318dkD5ppjx//S8dn/X41Yq2/h93Dt/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRnH8f6YRfwdwz8xLPj78QOiQB3ZYYcm3e7xvc6P18f/hvv90/H/JFXZ4YIyB16970+P/r93Gcfz/9hcW3v2dfPx/xFrt+H/9D+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGcfx/3hF/B3D44ftuOeLvAa6ceNcT3u7xvs2Nrsf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGH/8fGOntLb/SdoHB8f//243Cf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8f9q/pjFf/n8MYv/1/LHLP5fzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/zfyxyz+q+SPWfxXzR+z+H8zf8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bx/1b+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/3b+mMV/4/wxi/8m+WMW/03zxyz+38kfs/hvlj9m8f9u/pjFf/P8MYv/FvljFv8t88cs/t/LH7P4fz9/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/D/LHLP4/zB+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/4/yxyz+P84fs/j/JH/M4r9H/pjFf8/8MYv/T/PHLP4/yx+z+O+VP2bx/3n+mMV/7/wxi/8++WMW/33zxyz+v8gfs/j/Mn/M4v+r/DGL/375Yxb//fPHLP6/zh+z+P8mf8zif0D+mMX/wPwxi/9B+WMW/9/mj1n8f5c/ZvE/OH/M4n9I/pjF//f5Yxb/Q/PHLP5/yB+z+B+WP2bx/2P+mMX/T/ljFv/D88cs/n/OH7P4/yV/zOJ/RP6Yxf/I/DGL/1H5Yxb/v+aPWfyPzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxP/If/tm/HsN6pWfxPav1jFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/v+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Y6Op/5CRL74yf2w09X+1N67/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+T+A8ayB+z+A/KH7P4j5E/ZvEfM3/M4j84f8ziPyR/zOI/Vv6YxX/s/DGL/9D8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8zi/678MYv/RPljFv+J88cs/pPkj1n8350/ZvF/T/6YxX/S/DGL/3vzxyz+k+WPWfwnzx+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8ziP0X+mMV/yvwxi/9U+WMW/w/nj1n8px7hP/RtGtc7NIv/NK1/zOI/bf6YxX+6/DGL//T5Yxb/j+SPWfxnyB+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8zi/+n8MYv/7PljFv858scs/nPmj1n858ofs/h/Jn/M4j93/pjF/7P5Yxb/z+WPWfznyR+z+H8+f8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cPzYa+7+Re9Ai+WOjsf8/rf9F88cs/ovlj1n8v5A/ZvH/Yv6YxX/x/DGL/5f+Z//B/0/H9Q7N4r9E6x+z+H85f8zi/5X8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/9X8MYv/8vljFv+v5Y9Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/b+SPWfxXyR+z+K+aP2bx/2b+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/rfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/7fwxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8zi/938MYv/5vljFv8t8scs/lvmj1n8v5c/ZvH/fv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv8f5I9Z/H+YP2bx3yV/zOK/a/6YxX+3/N84H69n8d89f8zi/6P8MYv/j/PHLP4/yR+z+O+RP2bx3zN/zOL/0/wxi//P8scs/nvlj1n8f54/ZvHfO3/M4r9P/pjFf9/8MYv/L/LHLP6/zB+z+P8qf8ziv1/+mMV///wxi/+v88cs/r/JH7P4H5A/ZvE/MH/M4n9Q/pjF/7f5Yxb/3+WPWfwPzh+z+B+SP2bx//0/+9/9Xx/XOzSL/6Gtf8zi/4f8MYv/YfljFv8/5o9Z/P+UP2bxPzx/zOL/5/wxi/9f8scs/kfkj1n8j8wfs/gflT9m8f9r/pjF/+j8MYv/MfljFv9j88cs/n/LH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6YxP/V8v/XJP6DLswfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/mPRRda/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljEv9XP83/X7P4D8ofs/iP4fafd1RXWPzHdPuPMov/4Pwxi/+Q/DGL/1j5Yxb/sfPHLP5D88cs/uPkj1n8x80fs/iPlz82+vm/hP7j54+Nfv68/ifIH7P4T5g/ZvF/V/6YxX+i/DGL/8T5Yxb/SfLHLP7vzh+z+L8nf8ziP2n+mMX/vfljFv/J8scs/pPnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfIn/M4j+lzh9f7utfsvhPpfN/a1n8P5w/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/h/JH7P4z5A/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/xnzxyz+M+WPDTpr7yEDAwOjvf/M+WOW9T9L/pjFf9b8MYv/bPljFv9P549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/zP5Yxb/ufPHLP6fzR+z+H8uf8ziP0/+mMX/8/ljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfy/kD9m8f9i/pjFf/H8MYv/l/LHLP5L5I9Z/L+cP2bx/0r+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/2r+mMV/+fwxi//X8scs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/N/LHLP6r5I9Z/FfNHyfA4v/N/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/1v5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/9v5Yxb/jfPHLP6b5I9Z/DfNH7P4fyd/zOK/Wf6Yxf+7+WMW/83zxyz+W+SPWfy3zB+z+H8vf8zi//38MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+P8gfs/j/MH/M4r9L/pjFf9f8MYv/bvljFv/d88cs/j/KH7P4/zh/zOL/k/wxi/8e+WMW/z3zxyz+P80fs/j/LH/M4r9X/pjF/+f5Yxb/vfPHLP775I9Z/PfNH7P4/yJ/zOL/y/wxi/+v8scs/vvlj1n8988fs/j/On/M4v+b/DGL/wH5Yxb/A/PHLP4H5Y9Z/H+bP2bx/13+mMX/4Pwxi/8h+WMW/9/nj1n8D80fs/j/IX/M4n9Y/pjF/4/5Yxb/P+WPWfwPzx+z+P85f8zi/5f8MYv/EfljFv8j88cs/kflj1n8/5o/ZvE/On/M4n9M/pjF/9j8MYv/3/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bx/3v+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvVfufNsprLP6Xqf1HncX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj8m8R9zIH/M4j8of8ziP0b+mMV/zPwxi//g/DGL/5D8MYv/WPljFv+x88cs/kPzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/7vyxyz+E+WPWfwnzh+z+E+SP2bxf3f+mMX/PfljFv9J88cs/u/NH7P4T5Y/ZvGfPH/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+cP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4fyR+z+M+QP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/0/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9M/pjFf+78MYv/Z/PHLP6fyx+z+M+TP2bx/3z+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/L+SPWfy/mD9m8V88f8zi/6X8MYv/EvljFv8v549Z/L+SP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+aP2bxXz5/zOL/tfwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8zi/438MYv/KvljFv9V88cs/t/MH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188dGa/9Bg0dcOuY6+WOjtf8/Lh3zW/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP4/yB+z+P8wf8ziv0v+2Kv+g0Z//13zxyzrf7f8MYv/7vljFv8f5Y9Z/H+cP2bx/0n+mMV/j/wxi/+e+WMW/5/mj1n8f5Y/ZvHfK3/M4v/z/DGL/975Yxb/ffLHLP775o9Z/H+RP2bx/2X+mMX/V/ljFv/98scs/vvnj1n8f50/ZvH/Tf6Yxf+A/DGL/4H5Yxb/g/LHLP6/zR+z+P8uf8zif3D+mMX/kPwxi//v88cs/ofmj1n8/5A/ZvE/LH/M4v/H/DGL/5/yxyz+h+ePWfz/nD9m8f9L/pjF/4j8MYv/kfljFv+j8scs/n/NH7P4H50/ZvE/Jn/M4n9s/pjF/2/5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+P89f8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/If+BgYFx/uUSi/+N/6P/tv9vx/UOzeJ/U+sfs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/TOI/eCB/zOI/KH/M4j9G/pjFf8z8MYv/4Pwxi/+Q/DGL/1j5Yxb/sfPHLP5D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/+78scs/hPlj1n8J84fs/hPkj9m8X93/pjF/z35Yxb/SfPHLP7vzR+z+E+WP2bxnzx/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/8U+WMW/ynzxyz+U+WPWfw/nD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+H8kfs/jPkD9m8f9o/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfddT+Q/8r43qHZvGfrfWPWfw/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/8/kj1n8584fs/h/Nn/M4v+5/DGL/zz5Yxb/z+ePWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvH/Qv6Yxf+L+WMW/8Xzxyz+X8ofs/gvkT9m8f9y/pjF/yv5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/6v5Yxb/5fPHLP5fyx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+38gfs/ivkj9m8V81f8zi/838MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/W/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP4/yB+z+P8wf8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+P8ofs/j/OH/M4v+T/DGL/x75Yxb/PfPHLP4/zR+z+P8sf8ziv1f+mMX/5/ljFv+988cs/vvkj1n8980fs/j/In/M4v/L/DGL/6/yxyz+++WPWfz3zx+z+P86f8zi/5v8MYv/AfljFv8D88cs/gflj1n8f5s/ZvH/Xf6Yxf/g/DGL/yH5Yxb/3+ePWfwPzR+z+P8hf8zif1j+mMX/j/ljFv8/5Y9Z/A/PH7P4/zl/zOL/l/wxi/8R+WMW/yPzxyz+R+WPWfz/mj9m8T86f8zif0z+mMX/2Pwxi//f8scs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvH/e/6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9NJv9t3/pNLf43m/z/jSz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9J/IcM5I9Z/Aflj1n8x8gfs/iPmT9m8R+cP2bxH5I/ZvEfK3/M4j92/pjFf2j+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxf1f+mMV/ovwxi//E+WMW/0nyxyz+784fs/i/J3/M4j9p/pjF/735Yxb/yfLHLP6T549Z/N+XP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bxnyJ/zOI/Zf6YxX+q/DGL/4fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6Yxf8j+WMW/xnyxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/On/M4j97/pjFf478MYv/nPljFv+58scs/p/JH7P4z50/ZvH/bP6Yxf9z+WMW/3nyxyz+n88fs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOL/hfwxi/8X88cs/ovnj43u/mMO//xL+WOju//whiyRP2bx/3L+mMX/K/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/q/ljFv/l88cs/l/LH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP7fyB+z+K+SP2bxXzV/zOL/zfwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf9b+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf/b+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMX/u/ljFv/N88cs/lvkj1n8t8wfs/h/L3/M4v/9/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/j/IH7P4/zB/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP4/GoX/Of+tcb1Ds/j/uPWPWfx/kj9m8d8jf8ziv2f+mMX/p/ljFv+f5Y9Z/PfKH7P4/zx/zOK/d/6YxX+f/DGL/775Yxb/X+SPWfx/mT9m8f9V/pjFf7/8MYv//vljFv9f549Z/H+TP2bxPyB/zOJ/YP6Yxf+g/DGL/2/zxyz+v8sfs/gfnD9m8T8kf8zi//v8MYv/ofljFv8/5I9Z/A/LH7P4/zF/zOL/p/wxi//h+WMW/z/nj1n8/5I/ZvE/In/M4n9k/pjF/6j8MYv/X/PHLP5H549Z/I/JH7P4H5s/ZvH/W/6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+f88fs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxif9YA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+VP2bxnyh/zOI/cf6YxX+S/DGL/7vzxyz+78kfs/hPmj9m8X9v/pjFf7L8MYv/5PljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/KfIH7P4T5k/ZvGfKn/M4v/h/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/SP6YxX+G/DGL/0dd/m/5oVr8P+byf8tZ/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv9P549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/zP5Yxb/ufPHLP6fzR+z+H8uf8ziP0/+mMX/8/ljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfy/kD9m8f9i/pjFf/H8MYv/l/LHLP5L5I9Z/L+cP2bx/0r+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/2r+mMV/+fwxi//X8scs/l/PH7P4r5A/Npr6DxrJeqwV88dGU/9Xe+P6Xyl/zOK/cv6Yxf8b+WMW/1Xyxyz+q+aPWfy/mT9m8V8tf2zQWYOGz8zo7b96/phl/a+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/b+WPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/b+ePWfw3zh+z+G+SP2bx3zR/zOL/nfwxi/9m+WMW/+/mj1n8N88fs/hvkT9m8d8yf8zi/738MYv/9/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/j/IH/M4v/D/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4/yh/zOL/4/wxi/9P8scs/nvkj1n898wfs/j/NH/M4v+z/DGL/175Yxb/n+ePWfz3zh+z+O+TP2bx3zd/zOL/i/wxi/8v88cs/r/KH7P475c/ZvHfP3/M4v/r/DGL/2/yxyz+B+SPWfwPzB+z+B+UP2bx/23+mMX/d/ljFv+D88cs/ofkj1n8f58/ZvE/NH/M4v+H/DGL/2H5Yxb/P+aPWfz/lD9m8T88f8zi/+f8MYv/X/LHLP5H5I9Z/I/MH7P4H5U/ZvH/a/6Yxf/o/DGL/zH5Yxb/Y/PHLP5/yx+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/7/ljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/MfGAcus/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6YxH/sgfwxi/+g/DGL/xj5Yxb/MfPHLP6D88cs/kPyxyz+Y+WPWfzHzh+z+A/NH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/u/KH7P4T5Q/ZvGfOP/hDf2ncxb/SfLHLP7vzh+z+L8nf8ziP2n+mMX/vfljFv/J8scs/pPnj1n835c/ZvF/f/6Yxf8D+Y9oqdXecMbi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+mMV/8fwxi/+X8scs/kvkj1n8v5w/ZvH/Sv6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/av6YxX/5/DGL/9fyxyz+X88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/h/M3/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9W/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f92/pjFf+P8MYv/JvljFv9N88cs/t/JH7P4b5Y/ZvH/bv6YxX/z/DGL/xb5Yxb/LfPHLP7fyx+z+H8/f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/E/q3RVj8d04bs/j/IH/M4v/D/DGL/y75Yxb/XfPHLP67veb/0itv17jeoVn8d2/9Yxb/H+WPWfx/nD9m8f9J/pjFf4/8MYv/nvljFv+f5o9Z/H+WP2bx3yt/zOL/8/wxi//e+WMW/33yxyz+++aPWfx/kT9m8f9l/pjF/1f5Yxb//fLHLP77549Z/H+dP2bx/03+mMX/gPwxi/+B+WMW/4Pyxyz+v80fs/j/Ln/M4n9w/pjF/5D8MYv/7/PHLP6H5o9Z/P+QP2bxPyx/zOL/x/wxi/+f8scs/ofnj1n8/5w/ZvH/S/6Yxf+I/DGL/5H5Yxb/o/LHLP5/zR+z+B+dP2bxPyZ/zOJ/bP6Yxf9v+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/j/PX/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/kMH8scs/oPyxyz+Y+SPWfzHzB+z+A/OH7P4D8kfs/iPlT9m8R87f8ziPzR/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vyt/zOI/Uf6YxX/i/DGL/yT5Yxb/d+ePWfzfkz9m8Z80f8zi/978MYv/ZPljFv/J88cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4T5E/ZvGfMn/M4j9V/pjF/8P5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+R/DGL/wz5Yxb/j+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfw/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/8/kj1n8584fs/h/Nn/M4v+5/DGL/zz5Yxb/z+ePWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvH/Qv6Yxf+L+WMW/8Xzxyz+X8ofs/gvkT9m8f9y/pjF/yv5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/6v5Yxb/5fPHLP5fyx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+38gfs/ivkj9m8V81f8zi/838MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/W/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XPzaS/5C3ezz/60bhv33+mGX975A/ZvHfMX/M4r9T/pjFf+f8MYv/D/LHLP4/zB+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/4/yxyz+P84fs/j/JH/M4r9H/pjFf8/8MYv/T/PHLP4/yx+z+O+VP2bx/3n+mMV/7/wxi/8++WMW/33zxyz+v8gfs/j/Mn/M4v+r/DGL/375Yxb//fPHLP6/zh+z+P8mf8zif0D+mMX/wPwxi/9B+WMW/9/mj1n8f5c/ZvE/OH/M4n9I/pjF//f5Yxb/Q/PHLP5/yB+z+B+WP2bx/2P+mMX/T/ljFv/D88cs/n/OH7P4/yV/zOJ/RP6Yxf/I/DGL/1H5Yxb/v+aPWfyPzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efmPaKw3nrH4n58/ZvG/IH/M4v/3/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHXvcfa/T2vzt/zLL+78kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxwz+gwYPDH04f8zgP2z9P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SPybxH2cgf8ziPyh/zOI/Rv6YxX/M/DGL/+D8MYv/kPwxi/9Y+WMW/7Hzxyz+Q/PHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/u/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/d/6Yxf89+WMW/0nzxyz+780fs/hPlj9m8Z88f8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/FPljFv8p88cs/lPlj1n8P5w/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/h/JH7P4z5A/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/xnzxyz+Mw0MbPN2DemdnMV/5tY/ZvGfJX/M4j9r/pjFf7b8MYv/p/PHLP6z549Z/OfIf0TjvPGMxX/O/DGL/1z5Yxb/z+SPWfznzh+z+H82f8zi/7n8MYv/PPljFv/P549Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8f9C/pjF/4v5Yxb/xfPHLP5fyh+z+C+RP2bx/3L+mMX/K/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/q/ljFv/l88cs/l/LH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP7fyB+z+K+SP2bxXzV/zOL/zfwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K9F/mP/F8f1Ds3iv3brH7P4r5M/ZvH/Vv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvH/dv6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx/27+mMV/8/wxi/8W+WMW/y3zxyz+38sfs/h/P3/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8P8scs/j/MH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/j/LHLP4/zh+z+P8kf8ziv0f+mMV/z/wxi/9P88cs/j/LH7P475U/ZvH/ef6YxX/v/DGL/z75Yxb/ffPHLP6/yB+z+P8yf8zi/6v8MYv/fm/mP9Z/YVzv0Cz++7f+MYv/r/PHLP6/yR+z+B+QP2bxPzB/zOJ/UP6Yxf+3+WMW/9/lj1n8D84fs/gfkj9m8f99/pjF/9D8MYv/H/LHLP6H5Y9Z/P+YP2bx/1P+mMX/8Pwxi/+f88cs/n/JH7P4H5E/ZvE/Mn/M4n9U/pjF/6/5Yxb/o/PHLP7H5I9Z/I/NH7P4/y1/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/7/nj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMR/3IH8MYv/oPwxi/8Y+WMW/zHzxyz+g/PHLP5D8scs/mPlj1n8x84fs/gPzR+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP7vyh+z+E+UP2bxnzh/zOI/Sf6Yxf/d+WMW//fkj1n8J80fs/i/N3/M4j9Z/pjFf/L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+2GjnP4j9F88fG+38R7H+v5Q/ZvFfIn/M4v/l/DGL/1fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/1fzxyz+y+ePWfy/lj9m8f96/pjFf4X8MYv/ivljFv+V8scM/l8YGBh35fwxg/+w9f+N/DGL/yr5Yxb/VfPHLP7fzB+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/L+VP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+dP2bx3zh/zOK/Sf6YxX/T/DGL/3fyxyz+m+WPWfy/mz9m8d88f8ziv0X+mMV/y/wxi//38scs/t/PH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/4P8MYv/D/PHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+j/DGL/4/zxyz+P8kfs/jvkT9m8d8zf8zi/9P8MYv/z/LHLP575Y9Z/H+eP2bx3zt/zOK/T/6YxX/f/DGL/y/yxyz+v8wfs/j/Kn/M4r9f/pjFf//8MYv/r/PHLP6/yR+z+B+QP2bxPzB/zOJ/UP6Yxf+3+WMW/9/lj1n8D84fs/gfkj9m8f99/pjF/9D8MYv/H/LHLP6H5Y9Z/P+YP2bx/1P+mMX/8Pwxi/+f88cs/n/JH7P4H5E/ZvE/Mn/M4n9U/pjF/6/5Yxb/o/PHLP7H5I9Z/I/NH7P4/y1/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/7/nj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMR/vIH8MYv/oPwxi/8Y+WMW/zHzxyz+g/PHLP5D8scs/mPlj1n8x84fs/gPzR+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP7vyh+z+E+UP2bxnzh/zOI/Sf6Yxf/d+WMW//fkj1n8J80fs/i/N3/M4j9Z/pjFf/L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+mMV/8fwxi/+X8scs/kvkj1n8v5w/ZvH/Sv6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/av6YxX/5/DGL/9fyxyz+X88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/h/M3/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9W/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f92/pjFf+P8MYv/JvljFv9N88cs/t/JH7P4b5Y/ZvH/bv6YxX/z/DGL/xb5Yxb/LfPHLP7fyx+z+H8/f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/w/yxyz+P8wfs/jvkj9m8d81f8ziv1v+mMV/9/wxi/+P8scs/j/OH7P4/yR/zOK/R/6YxX/P/DGL/0/zxyz+P8sfs/jvlT9m8f95/pjFf+/8MYv/PvljFv9988cs/r/IH7P4/zJ/zOL/q/wxi/9++WMW//3zxyz+v84fs/j/Jn/M4n9A/pjF/8D8MYv/QfljFv/f5o9Z/H+XP2bxPzh/zOJ/SP6Yxf/3+WMW/0Pzxyz+f8gfs/gflj9m8f9j/pjF/0/5Yxb/w/PHLP5/zh+z+P8lf8zif0T+mMX/yPwxi/9R+WOv+48xevv/NX/Msv6Pzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB8b4T8wdGBgdPY/KX/Msv5Pzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv+/549Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljDv/kR5XDf2C8B9oKMIv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH5P4jz+QP2bxH5Q/ZvEfI3/M4j9m/pjFf3D+mMV/SP6YxX+s/DGL/9j5Yxb/ofljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMX/XfljFv+J8scs/hPnj1n8J8kfs/i/O3/M4v+e/DGL/6T5Yxb/9+aPWfwnyx+z+E+eP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+2Mj+A9u+3SP6XzYK/ynyxyzrf8r8MYv/VPljFv8P549Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/R/LHLP4z5I9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bx/1T+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3T+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfw/kz9m8Z87f8zi/9n8MYv/5/LHLP7z5I9Z/D+fP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjF/wv5Yxb/L+aPWfwXzx+z+H8pf8ziv0T+mMX/y/ljFv+v5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v5o9Z/JfPH7P4fy1/zOL/9fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+H8jf8ziv0r+mMV/1fwxi/8388cs/qvlj1n8Vzf6v4UHbPFfw+j/FrL4r5k/ZvFfK3/M4r92/pjFf538MYv/t/LHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/t/PHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/3fzxyz+m+ePWfy3yB+z+G+ZP2bx/17+mMX/+/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx/kD9m8f9h/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8f5Q/ZvH/cf6Yxf8n+WMW/z3yxyz+e+aPWfx/mj9m8f9Z/pjFf6/8MYv/z/PHLP57549Z/PfJH7P475s/ZvH/Rf6Yxf+X+WMW/1/lj1n898sfs/jvnz9m8f91/pjF/zf5Yxb/A/LHLP4H5o9Z/A/KH7P4/zZ/zOL/u/wxi//B+UNjDj8d/f0PyR+zrP/f549Z/A/NH7P4/yF/zOJ/WP6Yxf+P+WMW/z/lj1n8D88fs/j/OX/M4v+X/DGL/xH5Yxb/I/PHLP5H5Y9Z/P+aP2bxPzp/zOJ/TP6Yxf/Y/DGL/9/yxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f97/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v/CKP3n/e+M6x2axf/F1j9m8X8pf8zi/3L+mMX/lfwxif8EA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+VP2bxnyh/zOI/cf6YxX+S/DGL/7vzxyz+78kfs/hPmj9m8X9v/pjFf7L8MYv/5PljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8PWfzH/fdubvGfwuL/b2bxnzJ/zOI/Vf6Yxf/D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/kfwxi/8M+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P50/ZvGfPX/M4j9H/pjFf878sX/yH37ZRG/zmP5XjcJ/rvwxy/r/TP6YxX/u/DGL/2fzxyz+n8sfs/jPkz9m8f98/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f0zgP3iY/yL5YwL/YU2waP6YxX+x/DGL/xfyxyz+X8wfs/gvnj9m8f9S/pjFf4n8MYv/l/PHLP5fyR+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP5fzR+z+C+fP2bx/1r+mMX/6/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9G/pjFf5X8MYv/qvljFv9v5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/KH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/t/OH7P4b5w/ZvHfJH/M4r9p/pjF/zv5Yxb/zfT+4+ClFv/v6v05i//m+WMW/y3yxyz+W+aPWfy/lz9m8f9+/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/x/kj1n8f5g/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv8f5Y9Z/H+cP2bx/0n+mMV/j/wxi/+e+WOjq//Qkfx/mj82uvoPjOT/s/wxi/9e+WMW/5/nj1n8984fs/jvkz9m8d83f8zi/4v8MYv/L/PHLP6/yh+z+O+XP2bx3z9/zOL/6/wxi/9v8scs/gfkj1n8D8wfs/gflD9m8f9t/pjF/3f5Yxb/g/PHLP6H5I9Z/H+fP2bxPzR/zOL/h/wxi/9h+WMW/z/mj1n8/5Q/ZvE/PH/M4v/n/DGL/1/yxyz+R+SPWfyPzB+z+B+VP2bx/2v+mMX/6Pwxi/8x+WMW/2Pzxyz+f8sfs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/+/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P43zOy/7b/5XG9Q7P439v6xyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMS/wkH8scs/oPyxyz+Y+SPWfzHzB+z+A/OH7P4D8kfs/iPlT9m8R87f8ziPzR/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vyt/zOI/Uf6YxX/i/DGL/yT5Yxb/d+ePWfzfkz9m8Z80f8zi/978MYv/ZPljFv/J88cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4T5E/ZvGfMn/M4j9V/pjF/8P5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+R/DGL/wz5Yxb/j+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxwadNXT4Z6O3/2z5Y5b1/+n8MYv/7PljFv858scs/nPmj1n858ofs/h/Jn/M4j93/pjF/7P5Yxb/z+WPWfznyR+z+H8+f8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/xfyxyz+X8wfs/gvnj9m8f9S/pjFf4n8MYv/l/PHLP5fyR+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP5fzR+z+C+fP2bx/1r+mMX/6/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9G/pjFf5X8MYv/qvljFv9v5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/KH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/t/OH7P4b5w/ZvHfJH/M4r9p/pjF/zv5Yxb/zfLHLP7fzR+z+G+eP2bx3yJ/zOK/Zf6Yxf97+WMW/+/nj1n8t8ofs/hvnT9m8d8mf8ziv23+2GjqP2SkSyfcLn9sNPV/tTeu/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOL/g/wxi/8P88cs/rvkj1n8d80fs/jvlj9m8d89f8zi/6P8MYv/j/PHLP4/yR+z+O+RP2bx3zN/zOL/0/wxi//P8scs/nvlj1n8f54/ZvHfO3/M4r9P/pjFf9/8MYv/L/LHLP6/zB+z+P8qf8ziv1/+mMV///wxi/+v88cs/r/JH7P4H5A/ZvE/MH/M4n9Q/pjF/7f5Yxb/3+WPWfwPzh+z+B+SP2bx/33+mMX/0Pwxi/8f8scs/oflj1n8/5g/ZvH/U/6Yxf/w/DGL/5/zxyz+f8kfs/gfkT9m8T8yf8zif1T+mMX/r/ljFv+j88cs/sfkj1n8j80fs/j/LX/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/v+ePWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6YxP9dA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv7/Hzv3H651Xd9x/OY3qaQf29SlDYfGXJuRyGjUQlQUjz9OmWjmb9QjkCDyQxJMxY1W6th0qZslm1o65mzVUoeb69eKhmXN1oitVU5xLYwxB4vM2dl14ByCszfn2vmy79eN9+PxB+fc9/F9pzyvl/ftxXUVytJ/b/1DWfrvo38oS/8R+oey9H+l/qEs/ffVP5Sl/376h7L0L/qHsvTfX/9Qlv6v0j+Upf9P6R/K0v+n9Q9l6X+A/qEs/Q/UP5Sl/0H6h7L0/xn9Q1n6v1r/UJb+B+sfytL/EP1DWfq/Rv9Qlv4/q38oS/+R+oey9D9U/1CW/j+nfyhL/1H6h7L0P0z/UJb+h+sfytL/tfqHsvQfrX8oS/+f1z+Upf8R+oey9P8F/UNZ+r9O/1CW/r+ofyhL/1/SP5Sl/5H6h7L0f73+oSz9x+gfytL/DfqHsvQ/Sv9Qlv5j9Q9l6X+0/qEs/cfpH8rS/5f1D2XpP17/UJb+b9Q/lKX/r+gfytJ/gv6hLP3fpH8oS/836x/K0v9X9Q9l6f8W/UNZ+k/UP5Sl/zH6h7L0n6R/KEv/Y/UPZel/nP6hLP2P1z+Upf9k/UNZ+p+gfyhL/xP1D2XpP0X/UJb+J+kfytK/Tf9Qlv4n6x/K0v8U/UN7XP+hcf9T9Q/tcf13sf/T9A9l6d+ufyhL/7fqH8rS/236h7L0P13/UJb+b9c/lKX/GfqHsvSfqn8oS/8z9Q9l6X+W/qEs/d+hfyhL/7P1D2Xp/079Q1n6n6N/KEv/c/UPZel/nv6hLP3P1z+Upf8F+oey9L9Q/1CW/hfpH8rSf5r+oSz9L9Y/lKX/JfqHsvS/VP9Qlv4d+oey9L9M/1CW/tP1D2XpP0P/UJb+M/UPZen/Lv1DWfpfrn8oS/9Z+oey9J+tfyhL/yv0D2XpP0f/UJb+V+ofytJ/rv6hLP3n6R/K0n++/qEs/RfoH8rS/yr9Q1n6L9Q/lKX/u/UPZel/tf6hLP0X6R/K0n+x/qEs/a/RP5Sl/3v0D2Xpf63+oSz9r9M/lKX/9fqHsvRfon8oS/8b9A9l6f9r+oey9P91/UNZ+i/VP5Sl/3v1D2Xp/xv6h7L0f5/+oSz9369/KEv/G/UPZel/k/6hLP1v1j+Upf9v6h/K0n+Z/qEs/X9L/1CW/r+tfyhL/1v0D2Xpf6v+oSz9f0f/UJb+H9A/lKX/bfqHsvS/Xf9Qlv536B/K0v939Q9l6f97+oey9L9T/1CW/h/UP5Sl/4f0D2Xpf5f+oSz9l+sfytL/9/UPZen/B/qHsvS/W/9Qlv736B/K0v9e/UNZ+n9Y/1CW/h/RP5Sl/336h7L0v1//UJb+f6h/KEv/FfqHsvT/I/1DWfo/oH8oS/8/1j+Upf+D+oey9P+o/qEs/f9E/1CW/h/TP5Sl/8f1D2Xp/wn9Q1n6/6n+oSz9P6l/KEv/h/QPZen/sP6hLP0f0T+Upf+f6R/K0n+l/qEs/R/VP5Sl/5/rH8rS/y/0D2Xp/5j+oSz9/1L/UJb+n9I/lKX/p/UPZen/Gf1DWfp/Vv9Qlv6f0z+Upf9f6R/K0v/z+oey9P+C/qEs/VfpH8rS/4v6h7L0/2v9Q1n6r9Y/lKX/4/qHsvT/kv6hLP2/rH8oS/8n9A9l6f8V/UNZ+n9V/1CW/n+jfyhL/yf1D2Xp/zX9Q1n6/63+oSz9v65/KEv/v9M/lKX/Gv1DWfp/Q/9Qlv5r9Q9l6f/3+oey9P8H/UNZ+n9T/1CW/v+ofyhL/2/pH8rS/9v6h7L0/47+oSz9n9I/lKX/P+kfytL/af1DWfo/o38oS/91+oey9H9W/1CW/v+sfyhL/+/qH8rS/1/0D2Xp/z39Q1n6r9c/lKX/c/qHsvT/vv6hLP036B/K0v9f9Q9l6b9R/1CW/v+mfyhL/+f1D2Xp/+/6h7L036R/KEv/zfqHsvT/D/1DWfr/QP9Qlv5b9A9l6f9D/UNZ+r+gfyhL/x/pH8rS/0X9Q1n6/6f+oSz9X9I/lKX/j/UPZenfqX8oSf/9WvqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvQfpn8oS//h+oey9H+F/qEs/ffSP5Sl/976h7L030f/UJb+I/QPZen/Sv1DWfrvq39oj+sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf838RYsvnzZrVsc83/jGN77Z/s3L/W8mAADgf9tPPvS/3H8nAAAAAAAAAAAAAAAAAAAAkFcT/3diL/c/IwAAAAAAAAAAAAAA/H/X1n7shkEDdnpq0I4PXvNEx9av47acPeO++x4pPV+7f3xK8JIDd3zQ2dnZufz5iZO7Hw5rtVpd/2v7dT8e3vu46/WXjLzroG2PyqTP3/HUBVNHnDrv4VsHf2P5ze3PDdn67JDWRZfNnNXxhoGtVjl+SOvqrgdHDWi1yolDWrd0PRjb9WDKkNaKrgdHb33witZnuh68/pI5sy7teuKkyr9nsKdoa1/SGrTTYls7/dtgx/0vGfn0jJ6vfbxkz6sNbnXvf9TDXzqw18967GL/Pa9fju29/37/AwK71L/9v7C252sfL/nf3v8/vHrL4uhnu95/z+uX4+wf6hN8/t9po70/9/f6/H9o8JLb748Zvvq2rv23nfnAId1PDf6ffP7/yeuX43vvf+BOn/+7PsdP7vn8P6zVKifs5m8HpNLWfsOGvt7/+97/4Ff3uhmw4/7v/cq6fbr2f/+LraXdTw3p5/4n9/X+f2Ovv1egf9ra7+ns9f7fj/23RgcvuX3/6x8esfXz/7oHLzlgh5/1Z/8n9N7/mAWzrxwzf9HiI2fOnja9Y3rHFRPGjj9q3IQJ48eP2fqJYNuvu/mbAkns3vt/a69eNwNarY7t96seuHly1/43Prr0I91PDe/n/k/s8/3/UO//EBo1sDV0aOvqaQsWzDtq2689D8du+3XbXxbsvx///X/YEd1/Wc+fGQ5otQ7afj/6ggnDuvZ/zdyysvupof3c/5Q+9z9p5z+rBPpnN9//L+11s9P+j1l/3cKu/R/+g/3XdT/V3//+P6nP/d/t/R92R1t7q9Y30a79Hz3shpOrXZc2f/4H9Wli/yM33bK52nU52f6hPk3sf+qyN19c7bqcYv9Qnyb2/8jsC5dVuy6n2j/Up4n9v/SqzQdXuy6n2T/Up4n9P/ndZ++rdl3a7R/q08T+P3hn+9HVrstb7R/q08T+j7zqhxOrXZe32T/Up4n9X7b3GSuqXZfT7R/q08T+T+487oBq1+Xt9g/1aWL/A2743pJq1+UM+4f6NLH/Z6Ytm1Ptuky1f6hPE/tfMXL0C9Wuy5n2D/VpYv9Ln3vjlGrX5Sz7h/o0sf+v3n7Xk9WuyzvsH+rTxP4/cd7+d1W7LmfbP9Snif3/aNSje1W7Lu+0f6hPE/tfs2bFQ9Wuyzn2D/VpYv/LVwwaVe26nGv/UJ8m9n/9SdOfqHZdzrN/qE8T+x83/svnVrsu59s/1KeJ/R/0uW89W+26XGD/UJ8a9z+0+2vnGY8tnF/tJcqF9g/1aeL9f+HBH/9xtetykf1DfZrY/1s6Dp5R7bpMs3+oTxP7L7futabadbnY/qE+Tez/nI33TKp2XS6xf6hPE/tfue8XPlbtulxq/1CfJva/ae4VE6pdlw77h/o0sf/vvPf691W7LpfZP9Snif3f9uLXS7XrMt3+oT5N7H/92HPOq3ZdZtg/1KeJ/d9z6vOPV7suM+0f6tPE/petfGpBtevyLvuH+jSx/1WrTnm62nW53P6hPk3s//DRY0ZUuy6z7B/q08T+55y99EPVrsts+4f6NLH/4x+8/bXVrssV9g/1aWL/w7828ZPVrssc+4f6NLH/T098/6eqXZcr7R/q08T+N0867Ihq12Wu/UN9mtj/2ofG3lHtusyzf6hPE/v/wON3Vrwu8+0f6tPE/ue+7qWN1a7LAvuH+jSx/zdNPWtRtetylf1DfZrY/wF3T/liteuy0P6hPk3s//xvf//0atfl3fYP9Wli/4cdePEh1a7L1fYP9Wli/zNmrr6p2nVZZP9Qnyb2P3n52nHVrsti+4f6NLH/fZ+Zf2+163KN/UN9mtj/hkEHnlbturzH/qE+Tez//msf+2a163Kt/UN9mtj/TTd+tKPadbnO/qE+Tez/s1uGbqp2Xa63fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAP//QrTe8A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4008586f, 0x0) 716.100382ms ago: executing program 3 (id=587): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0x1, 0x1}}, 0x0, 0x0, &(0x7f0000000040)}) 567.152875ms ago: executing program 3 (id=588): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0xa, 0x1, 0x3, 0x2a, 0x400, &(0x7f0000000100)="b64a72185a2247721e04a5346c904917e67a8415acaedd3817160476ad60b215de36e6349a5f75bbb875"}) 504.736217ms ago: executing program 3 (id=589): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 416.131399ms ago: executing program 1 (id=590): unshare(0x26020400) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pidfd_send_signal(r0, 0x5, &(0x7f00000000c0)={0xe, 0x20a, 0x4}, 0x0) 398.04644ms ago: executing program 3 (id=591): setregid(0xee01, 0xffffffffffffffff) r0 = getpgrp(0x0) prlimit64(r0, 0xf, 0x0, 0x0) 346.545051ms ago: executing program 3 (id=592): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000e40)={[{@auto_da_alloc_val}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 312.046182ms ago: executing program 1 (id=593): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, 0x0) 208.093005ms ago: executing program 2 (id=594): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000005c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\v-_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c aa 01 31 04 a0 01 14 [ 80.920109][ T2305] dvb-usb: MAC address reading failed. [ 80.966071][ T4567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 80.981002][ T2305] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.993482][ T4567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 81.058968][ T4539] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 81.087531][ T4570] netlink: 'syz.2.112': attribute type 9 has an invalid length. [ 81.104155][ T4539] EXT4-fs (loop4): can't change dax mount option while remounting [ 81.122637][ T4570] netlink: 'syz.2.112': attribute type 23 has an invalid length. [ 81.122840][ T2305] DVB: Unable to find symbol stb0899_attach() [ 81.142970][ T4570] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.112'. [ 81.152253][ T2305] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 81.394254][ T2305] rc_core: IR keymap rc-tt-1500 not found [ 81.400289][ T2305] Registered IR keymap rc-empty [ 81.426547][ T2305] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 81.504009][ T2305] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 81.565787][ T2305] dvb-usb: schedule remote query interval to 100 msecs. [ 81.572834][ T2305] pctv452e: pctv452e_power_ctrl: 0 [ 81.572834][ T2305] [ 81.611479][ T2305] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 81.665488][ T2305] usb 2-1: USB disconnect, device number 3 [ 81.695591][ T4565] loop3: detected capacity change from 0 to 32768 [ 81.817479][ T2305] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 81.867042][ T4605] loop2: detected capacity change from 0 to 8 [ 81.879710][ T4565] XFS (loop3): Mounting V5 Filesystem [ 82.012893][ T4565] XFS (loop3): Ending clean mount [ 82.117955][ T4190] XFS (loop3): Unmounting Filesystem [ 82.312048][ T4624] loop2: detected capacity change from 0 to 4096 [ 82.644832][ T4235] Bluetooth: hci1: command 0x0405 tx timeout [ 82.668643][ T4624] NILFS (loop2): invalid segment: Checksum error in segment payload [ 82.704368][ T4624] NILFS (loop2): trying rollback from an earlier position [ 82.799056][ T4624] NILFS (loop2): recovery complete [ 82.807654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.861764][ T4632] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.973580][ T4622] loop1: detected capacity change from 0 to 40427 [ 83.033086][ T4622] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 83.045581][ T4622] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 83.077533][ T4622] F2FS-fs (loop1): invalid crc_offset: 1 [ 83.175669][ T4622] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.233323][ T4643] binder: 4642:4643 ioctl 80089418 0 returned -22 [ 83.277544][ T4644] binder: 4642:4644 ioctl c0046209 100000000000000 returned -22 [ 83.353238][ T4648] syz.2.144 uses obsolete (PF_INET,SOCK_PACKET) [ 83.449098][ T4622] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 83.482732][ T4622] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.731134][ T4189] attempt to access beyond end of device [ 83.731134][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 83.778437][ T4666] loop4: detected capacity change from 0 to 2048 [ 83.863990][ T4666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.259779][ T4661] loop0: detected capacity change from 0 to 32768 [ 84.440358][ T4661] jfs: Unrecognized mount option "xœìÐÏ‹qÇñ÷wæ;Z¤Xd A)t±$ðu‹p"É „¢K'A§#¡¼¥D·BWËîuYØ¿@W‹à^vÿ‰½x[Øã.ßÝ]vÙÿày]ÄÏ<Ïçæõ‹½´âÜ«vëû¯Óñê©•w¥‡£QÑä!èn_|æÇEø†f¬aч:0:|i4=«Önšÿ‹"˜q÷&w€Øêž×ô5äöÓ`rÏŸ³¸šyï¾7dYà¤q3è»d¦ï°A©ÐòØ›¿åLò®‚î0³µé¼ŸÏÊOŸ¼ôþå" or missing value [ 84.466962][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.607684][ T4680] loop1: detected capacity change from 0 to 4096 [ 84.772390][ T4680] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.966562][ T4680] ntfs3: loop1: failed to convert "0080" to macturkish [ 85.003572][ T4680] ntfs3: loop1: failed to convert name for inode 1e. [ 85.180795][ T4703] mmap: syz.2.170 (4703) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 85.198560][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.274060][ T4705] netlink: 88 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.547235][ T4711] loop1: detected capacity change from 0 to 8192 [ 85.585634][ T4233] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 85.615546][ T4711] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 85.658351][ T4718] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.667529][ T4718] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.676361][ T4718] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.685130][ T4718] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.700851][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.714520][ T4711] REISERFS (device loop1): using ordered data mode [ 85.721191][ T4711] reiserfs: using flush barriers [ 85.733795][ T4711] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.750669][ T4711] REISERFS (device loop1): checking transaction log (loop1) [ 85.762766][ T4718] Zero length message leads to an empty skb [ 85.774335][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.832988][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 85.894850][ T4233] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 85.953230][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.964979][ T4711] REISERFS (device loop1): Using tea hash to sort names [ 85.972373][ T4711] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 85.999435][ T4233] usb 4-1: config 0 descriptor?? [ 86.023024][ T4728] loop2: detected capacity change from 0 to 2048 [ 86.102214][ T26] audit: type=1800 audit(1785959443.555:3): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 86.182315][ T4731] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.219892][ T4733] loop0: detected capacity change from 0 to 1024 [ 86.273162][ T4728] attempt to access beyond end of device [ 86.273162][ T4728] loop2: rw=0, want=2198922592330, limit=2048 [ 86.295759][ T4728] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 86.514186][ T4233] holtek_kbd 0003:04D9:A055.0004: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 86.648667][ T1324] cfg80211: failed to load regulatory.db [ 86.773057][ T4230] usb 4-1: USB disconnect, device number 2 [ 86.809963][ T4748] fido_id[4748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 86.858266][ T4756] loop1: detected capacity change from 0 to 128 [ 87.154071][ T4235] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 87.338764][ T4771] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 87.570109][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.614090][ T4235] usb 1-1: not running at top speed; connect to a high speed hub [ 87.624063][ T2305] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.714745][ T4235] usb 1-1: config 5 has an invalid interface number: 203 but max is 0 [ 87.722988][ T4235] usb 1-1: config 5 has no interface number 0 [ 87.746172][ T4235] usb 1-1: config 5 interface 203 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 87.777628][ T4235] usb 1-1: config 5 interface 203 altsetting 0 endpoint 0xC has invalid maxpacket 1847, setting to 64 [ 87.819272][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.869638][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.884192][ T2305] usb 4-1: Using ep0 maxpacket: 16 [ 87.976391][ T4791] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.988388][ T4235] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=7d.53 [ 88.004315][ T2305] usb 4-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 88.026003][ T2305] usb 4-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.044333][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.062701][ T4235] usb 1-1: Product: syz [ 88.067225][ T2305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.074272][ T4235] usb 1-1: Manufacturer: syz [ 88.078905][ T4235] usb 1-1: SerialNumber: syz [ 88.094031][ T2305] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 88.114046][ T2305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.124507][ T4758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.134138][ T4791] syz.1.211 (4791) used greatest stack depth: 21136 bytes left [ 88.173830][ T2305] usb 4-1: config 0 descriptor?? [ 88.367935][ T4758] udc-core: couldn't find an available UDC or it's busy [ 88.404221][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.405471][ T4758] udc-core: couldn't find an available UDC or it's busy [ 88.405487][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.485317][ T4235] kobil_sct 1-1:5.203: KOBIL USB smart card terminal converter detected [ 88.488025][ T4235] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 88.490641][ T4235] usb 1-1: USB disconnect, device number 5 [ 88.503845][ T4235] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 88.504705][ T4235] kobil_sct 1-1:5.203: device disconnected [ 88.619032][ T4809] loop2: detected capacity change from 0 to 256 [ 88.658077][ T2305] lenovo 0003:17EF:60A3.0005: unknown main item tag 0x4 [ 88.658113][ T2305] lenovo 0003:17EF:60A3.0005: unknown main item tag 0xd [ 88.659863][ T2305] lenovo 0003:17EF:60A3.0005: hidraw0: USB HID v9.42 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 88.878568][ T4261] usb 4-1: USB disconnect, device number 3 [ 89.001204][ T4799] loop4: detected capacity change from 0 to 40427 [ 89.156938][ T4799] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.258772][ T4799] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 89.272194][ T4799] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 89.352490][ T4799] F2FS-fs (loop4): Start checkpoint disabled! [ 89.436108][ T4799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 89.816709][ T4843] [U]  [ 89.893400][ T4846] loop0: detected capacity change from 0 to 256 [ 90.027042][ T4850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.238'. [ 90.229955][ T4864] netlink: 44 bytes leftover after parsing attributes in process `syz.0.243'. [ 90.274015][ T4864] netlink: 43 bytes leftover after parsing attributes in process `syz.0.243'. [ 90.305473][ T4864] netlink: 'syz.0.243': attribute type 5 has an invalid length. [ 90.318171][ T4864] netlink: 43 bytes leftover after parsing attributes in process `syz.0.243'. [ 90.344689][ T4868] loop1: detected capacity change from 0 to 512 [ 90.408223][ T4868] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 90.501984][ T4868] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 90.522408][ T4868] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.582894][ T4875] [U]  [ 90.625504][ T4868] EXT4-fs error (device loop1): ext4_resize_begin:61: comm syz.1.247: resize_inode disabled but reserved GDT blocks non-zero [ 91.040317][ T4890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 91.064097][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 91.085595][ T4890] netlink: 212 bytes leftover after parsing attributes in process `syz.0.256'. [ 91.112804][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 91.142796][ T4892] netlink: 'syz.1.257': attribute type 14 has an invalid length. [ 91.172623][ T4859] loop3: detected capacity change from 0 to 32768 [ 91.254462][ T4859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.242 (4859) [ 91.321261][ T4902] loop1: detected capacity change from 0 to 128 [ 91.347538][ T4859] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 91.374076][ T4859] BTRFS info (device loop3): using free space tree [ 91.398196][ T4859] BTRFS info (device loop3): has skinny extents [ 91.430127][ T4902] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 91.550772][ T4913] [U]  [ 91.632328][ T4189] sysv_free_block: flc_count > flc_size [ 91.653690][ T4859] BTRFS info (device loop3): enabling ssd optimizations [ 91.735449][ T4189] sysv_free_block: flc_count > flc_size [ 91.741156][ T4189] sysv_free_block: flc_count > flc_size [ 91.794099][ T4189] sysv_free_block: flc_count > flc_size [ 91.818968][ T4932] loop0: detected capacity change from 0 to 1024 [ 91.835848][ T4189] sysv_free_block: flc_count > flc_size [ 91.841584][ T4189] sysv_free_block: flc_count > flc_size [ 91.881252][ T4189] sysv_free_block: flc_count > flc_size [ 91.939936][ T4189] sysv_free_block: flc_count > flc_size [ 91.958417][ T4189] sysv_free_block: flc_count > flc_size [ 91.970549][ T4189] sysv_free_block: flc_count > flc_size [ 91.980960][ T4859] BTRFS info (device loop3): device stats zeroed by syz.3.242 (4859) [ 91.986250][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.020512][ T4932] hfsplus: request for non-existent node 134217728 in B*Tree [ 92.035849][ T4934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 92.051770][ T4932] hfsplus: request for non-existent node 134217728 in B*Tree [ 92.262906][ T4945] loop1: detected capacity change from 0 to 8 [ 92.314797][ T4945] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 92.333647][ T4627] udevd[4627]: incorrect cramfs checksum on /dev/loop1 [ 92.447196][ T4627] udevd[4627]: incorrect cramfs checksum on /dev/loop1 [ 92.936614][ T4964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'. [ 92.975661][ T4966] loop0: detected capacity change from 0 to 128 [ 92.999672][ T4968] loop3: detected capacity change from 0 to 1764 [ 93.111088][ T4966] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 93.217646][ T4191] sysv_free_block: flc_count > flc_size [ 93.236803][ T4191] sysv_free_block: flc_count > flc_size [ 93.242398][ T4191] sysv_free_block: flc_count > flc_size [ 93.295104][ T4191] sysv_free_block: flc_count > flc_size [ 93.309440][ T4191] sysv_free_block: flc_count > flc_size [ 93.325442][ T4191] sysv_free_block: flc_count > flc_size [ 93.346052][ T4191] sysv_free_block: flc_count > flc_size [ 93.357857][ T4970] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 93.362329][ T4191] sysv_free_block: flc_count > flc_size [ 93.380551][ T4191] sysv_free_block: flc_count > flc_size [ 93.394057][ T4191] sysv_free_block: flc_count > flc_size [ 93.404412][ T4970] REISERFS (device loop1): using ordered data mode [ 93.404807][ T4191] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 93.414565][ T4970] reiserfs: using flush barriers [ 93.423850][ T4970] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.440908][ T4970] REISERFS (device loop1): checking transaction log (loop1) [ 93.516610][ T4970] REISERFS (device loop1): Using r5 hash to sort names [ 93.549700][ T4970] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 93.610640][ T4972] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 93.663993][ T4954] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.677186][ T4977] set_capacity_and_notify: 2 callbacks suppressed [ 93.677202][ T4977] loop0: detected capacity change from 0 to 2048 [ 93.753768][ T4979] binder: 4978:4979 ioctl c018620c 200000000280 returned -22 [ 93.833803][ T4977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.880390][ T4972] syz.2.279 (4972) used greatest stack depth: 20464 bytes left [ 94.054354][ T4954] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 94.083181][ T4954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.159234][ T4985] loop1: detected capacity change from 0 to 1024 [ 94.264224][ T4954] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 94.273364][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.297339][ T4985] hfsplus: request for non-existent node 134217728 in B*Tree [ 94.314198][ T4954] usb 4-1: Product: syz [ 94.326693][ T4954] usb 4-1: Manufacturer: syz [ 94.331415][ T4954] usb 4-1: SerialNumber: syz [ 94.384237][ T4985] hfsplus: request for non-existent node 134217728 in B*Tree [ 94.504061][ T4373] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.609366][ T5000] loop4: detected capacity change from 0 to 128 [ 94.647521][ T5000] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 94.704268][ T4954] usb 4-1: 0:1 : does not exist [ 94.731391][ T4954] usb 4-1: cannot request logical cluster ID: 24929 (err: -71) [ 94.754053][ T4373] usb 1-1: Using ep0 maxpacket: 8 [ 94.775533][ T4954] usb 4-1: unit 80 not found! [ 94.784555][ T4188] sysv_free_block: flc_count > flc_size [ 94.790181][ T4188] sysv_free_block: flc_count > flc_size [ 94.811703][ T4188] sysv_free_block: flc_count > flc_size [ 94.818078][ T4188] sysv_free_block: flc_count > flc_size [ 94.823653][ T4188] sysv_free_block: flc_count > flc_size [ 94.844301][ T4188] sysv_free_block: flc_count > flc_size [ 94.849895][ T4188] sysv_free_block: flc_count > flc_size [ 94.864205][ T4188] sysv_free_block: flc_count > flc_size [ 94.869789][ T4188] sysv_free_block: flc_count > flc_size [ 94.876866][ T4954] usb 4-1: USB disconnect, device number 4 [ 94.916075][ T4188] sysv_free_block: flc_count > flc_size [ 94.929481][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 94.941660][ T4373] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.999241][ T5004] loop2: detected capacity change from 0 to 512 [ 95.055302][ T4373] usb 1-1: config 7 has an invalid interface number: 3 but max is 0 [ 95.073601][ T4373] usb 1-1: config 7 has no interface number 0 [ 95.088446][ T4373] usb 1-1: config 7 interface 3 altsetting 129 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 95.109470][ T5004] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.143247][ T4373] usb 1-1: config 7 interface 3 altsetting 129 endpoint 0xA has invalid wMaxPacketSize 0 [ 95.174171][ T4373] usb 1-1: config 7 interface 3 has no altsetting 0 [ 95.180601][ T4627] udevd[4627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.204246][ T5004] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.294: Allocating blocks 41-42 which overlap fs metadata [ 95.252519][ T5004] Quota error (device loop2): write_blk: dquota write failed [ 95.260054][ T5004] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 95.281127][ T5004] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 95.304765][ T5004] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.294: Failed to acquire dquot type 1 [ 95.326435][ T5004] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 95.354202][ T4373] usb 1-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=17.82 [ 95.375345][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.383229][ T5004] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.294: corrupted inode contents [ 95.396434][ T4373] usb 1-1: Product: syz [ 95.404961][ T4373] usb 1-1: Manufacturer: syz [ 95.416132][ T4373] usb 1-1: SerialNumber: syz [ 95.442655][ T5004] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.294: mark_inode_dirty error [ 95.454520][ T4954] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.476770][ T5004] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.294: corrupted inode contents [ 95.489516][ T5004] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.294: mark_inode_dirty error [ 95.502572][ T5004] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.294: corrupted inode contents [ 95.516931][ T5004] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 95.526275][ T5004] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.294: corrupted inode contents [ 95.556595][ T5004] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.294: mark_inode_dirty error [ 95.584181][ T5004] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 95.632449][ T5004] EXT4-fs (loop2): 1 truncate cleaned up [ 95.647177][ T5004] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 95.694136][ T4954] usb 5-1: Using ep0 maxpacket: 8 [ 95.742754][ T5020] loop3: detected capacity change from 0 to 512 [ 95.806053][ T4373] ftdi_sio 1-1:7.3: FTDI USB Serial Device converter detected [ 95.814133][ T4954] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.817162][ T4373] usb 1-1: Detected FT-X [ 95.833478][ T4373] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10 [ 95.862417][ T5020] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.867478][ T4954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.873761][ T4373] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 95.892817][ T4954] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 95.902836][ T4954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.914436][ T4373] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 95.947736][ T4954] usb 5-1: config 0 descriptor?? [ 95.954283][ T4373] ftdi_sio 1-1:7.3: GPIO initialisation failed: -71 [ 95.962813][ T4373] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.983440][ T4373] usb 1-1: USB disconnect, device number 6 [ 95.998970][ T5027] netlink: 'syz.2.303': attribute type 3 has an invalid length. [ 95.998971][ T4373] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.000061][ T4373] ftdi_sio 1-1:7.3: device disconnected [ 96.194337][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.211436][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.229786][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.241501][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.272255][ T5031] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.330607][ T5036] loop3: detected capacity change from 0 to 136 [ 96.419727][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0xd [ 96.434901][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x0 [ 96.463742][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x1 [ 96.464142][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 96.476064][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x0 [ 96.482966][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x0 [ 96.514070][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x3 [ 96.521002][ T4954] wacom 0003:056A:0336.0006: unknown main item tag 0x6 [ 96.546023][ T4954] wacom 0003:056A:0336.0006: hidraw0: USB HID v0.09 Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0 [ 96.654809][ T4230] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 96.681349][ T4230] usb 2-1: config 252 has no interface number 0 [ 96.702581][ T4261] usb 5-1: USB disconnect, device number 2 [ 96.766788][ T5045] loop3: detected capacity change from 0 to 2048 [ 96.818592][ T5045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.870016][ T4230] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 96.880139][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.890076][ T4230] usb 2-1: Product: syz [ 96.894415][ T4230] usb 2-1: Manufacturer: syz [ 96.899117][ T4230] usb 2-1: SerialNumber: syz [ 96.930986][ T5045] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 96.943736][ T5045] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 96.991347][ T4230] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.099458][ T5051] loop3: detected capacity change from 0 to 256 [ 97.219102][ T4954] usb 2-1: USB disconnect, device number 4 [ 97.235522][ T3026] usb 2-1: Failed to submit usb control message: -71 [ 97.242653][ T3026] usb 2-1: unable to send the bmi data to the device: -71 [ 97.309492][ T3026] usb 2-1: unable to get target info from device [ 97.329660][ T3026] usb 2-1: could not get target info (-71) [ 97.343132][ T5055] binder: 5054:5055 ioctl c018620c 200000000280 returned -22 [ 97.383749][ T3026] usb 2-1: could not probe fw (-71) [ 97.536353][ T5065] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.319'. [ 97.562868][ T5065] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 97.726065][ T5072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.322'. [ 97.909651][ T5082] loop0: detected capacity change from 0 to 64 [ 97.995805][ T5053] loop2: detected capacity change from 0 to 32768 [ 98.186599][ T5053] XFS (loop2): Mounting V5 Filesystem [ 98.358368][ T5053] XFS (loop2): Ending clean mount [ 98.493616][ T5097] binder: 5096:5097 ioctl c018620c 200000000280 returned -22 [ 98.507221][ T4187] XFS (loop2): Unmounting Filesystem [ 98.724909][ T5081] loop4: detected capacity change from 0 to 32768 [ 98.817390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.855354][ T5081] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 98.965929][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.331'. [ 99.015695][ T5081] JBD2: Ignoring recovery information on journal [ 99.034401][ T5110] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.054285][ T5110] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1614071250 out of range (1000000..45000000) [ 99.116444][ T5113] loop1: detected capacity change from 0 to 256 [ 99.159641][ T5081] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 99.174625][ T5113] exfat: Deprecated parameter 'utf8' [ 99.180648][ T5113] exfat: Deprecated parameter 'utf8' [ 99.199895][ T5113] exfat: Deprecated parameter 'utf8' [ 99.253238][ T5113] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 99.315839][ T26] audit: type=1800 audit(30985182.775:4): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.327" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 99.433622][ T5121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.337'. [ 99.567078][ T5123] netlink: 88 bytes leftover after parsing attributes in process `syz.2.338'. [ 99.582636][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 99.851425][ T5102] loop0: detected capacity change from 0 to 32768 [ 99.983600][ T5145] loop4: detected capacity change from 0 to 512 [ 100.031468][ T5102] XFS (loop0): Mounting V5 Filesystem [ 100.080677][ T5145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.097473][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.129958][ T5102] XFS (loop0): Ending clean mount [ 100.156648][ T5102] XFS (loop0): Quotacheck needed: Please wait. [ 100.174477][ T4261] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.303024][ T5102] XFS (loop0): Quotacheck: Done. [ 100.394158][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 100.457867][ T5166] syz.4.354 (5166): /proc/5165/oom_adj is deprecated, please use /proc/5165/oom_score_adj instead. [ 100.488772][ T4191] XFS (loop0): Unmounting Filesystem [ 100.521289][ T4230] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 100.551586][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.567696][ T4230] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 100.586941][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.619901][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.634928][ T4230] usb 3-1: config 0 descriptor?? [ 100.646992][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.657527][ T5131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.665237][ T4261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.682923][ T4261] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.692435][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.703458][ T4261] usb 2-1: config 0 descriptor?? [ 100.898048][ T5162] loop3: detected capacity change from 0 to 32768 [ 101.016365][ T5162] XFS (loop3): Mounting V5 Filesystem [ 101.058837][ T5162] XFS (loop3): Ending clean mount [ 101.096159][ T5162] XFS (loop3): Quotacheck needed: Please wait. [ 101.096366][ T5168] loop4: detected capacity change from 0 to 32768 [ 101.114097][ T4230] waltop 0003:172F:0502.0007: ignoring exceeding usage max [ 101.122984][ T4230] waltop 0003:172F:0502.0007: unknown main item tag 0x3 [ 101.130425][ T4230] waltop 0003:172F:0502.0007: unknown main item tag 0x1 [ 101.138090][ T4230] waltop 0003:172F:0502.0007: unknown main item tag 0x2 [ 101.149906][ T4230] waltop 0003:172F:0502.0007: item fetching failed at offset 40/42 [ 101.158648][ T4230] waltop: probe of 0003:172F:0502.0007 failed with error -22 [ 101.200115][ T5168] XFS (loop4): Mounting V5 Filesystem [ 101.206078][ T5162] XFS (loop3): Quotacheck: Done. [ 101.211072][ T4261] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 101.221661][ T4261] plantronics 0003:047F:FFFF.0008: parse failed [ 101.228196][ T4261] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 101.331503][ T4261] usb 3-1: USB disconnect, device number 3 [ 101.413547][ T4190] XFS (loop3): Unmounting Filesystem [ 101.426357][ T5168] XFS (loop4): Ending clean mount [ 101.435424][ T4230] usb 2-1: USB disconnect, device number 5 [ 101.589922][ T4188] XFS (loop4): Unmounting Filesystem [ 101.757752][ T5198] loop0: detected capacity change from 0 to 256 [ 101.794653][ T5198] exfat: Deprecated parameter 'utf8' [ 101.800023][ T5198] exfat: Deprecated parameter 'utf8' [ 101.824545][ T5198] exfat: Deprecated parameter 'utf8' [ 101.834954][ T5198] exfat: Deprecated parameter 'namecase' [ 101.905340][ T5198] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 102.163796][ T5210] loop2: detected capacity change from 0 to 128 [ 102.185053][ T5214] loop1: detected capacity change from 0 to 256 [ 102.301546][ T5210] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.438696][ T5229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.377'. [ 102.456576][ T5229] netlink: 14 bytes leftover after parsing attributes in process `syz.4.377'. [ 102.666235][ T4373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.751426][ T5242] loop4: detected capacity change from 0 to 1024 [ 102.926900][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 102.932176][ T4261] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.069811][ T4373] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 103.087423][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.123178][ T4373] usb 1-1: config 0 descriptor?? [ 103.224195][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 103.317991][ T5232] F2FS-fs (loop3): invalid crc value [ 103.360658][ T4261] usb 3-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 103.360700][ T4261] usb 3-1: config 0 interface 0 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.360743][ T4261] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.360785][ T4261] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 103.360811][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.413284][ T4261] usb 3-1: config 0 descriptor?? [ 103.421448][ T5232] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.465028][ T4261] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 103.495669][ T5232] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 103.524881][ T5232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 103.610610][ T5273] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 103.646563][ T4373] zeroplus 0003:0C12:0030.0009: unknown main item tag 0x4 [ 103.653790][ T4373] zeroplus 0003:0C12:0030.0009: unknown main item tag 0xd [ 103.674847][ T3545] bcm5974 3-1:0.0: could not read from device [ 103.696161][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.708083][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.716833][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.718577][ T4261] usb 3-1: USB disconnect, device number 4 [ 103.724771][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.730481][ T3545] bcm5974 3-1:0.0: could not read from device [ 103.756488][ T4373] zeroplus 0003:0C12:0030.0009: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.0-1/input0 [ 103.769021][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.789676][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.789774][ T4373] zeroplus 0003:0C12:0030.0009: no inputs found [ 103.798649][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.817383][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.825620][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.833149][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.841303][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.849247][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.857226][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.865018][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.872687][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.880559][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.888521][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.896220][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.903864][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.911745][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.921333][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.930390][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.937885][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.945514][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.952935][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.964902][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.972472][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.979963][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.987516][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 103.994990][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.002489][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.010205][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.018541][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.026111][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.033544][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.041065][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.048564][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.056038][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.063462][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.070964][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.078428][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.086269][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.093706][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.101288][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.112950][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.121358][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.128912][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.136382][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.143809][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.151295][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.158826][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.166564][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.174073][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.181496][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.188971][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.196986][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.204497][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.211913][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.228424][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.236529][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.244560][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.251992][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.271940][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.284040][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.291522][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.309859][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.324207][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.341840][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.359433][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.374037][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.391758][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.401870][ T4235] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 104.425678][ T4235] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.03 Device [syz1] on syz1 [ 104.503776][ T4954] usb 1-1: USB disconnect, device number 7 [ 104.585996][ T5289] set_capacity_and_notify: 1 callbacks suppressed [ 104.586011][ T5289] loop4: detected capacity change from 0 to 64 [ 104.707599][ T5294] loop2: detected capacity change from 0 to 512 [ 104.984888][ T5281] loop1: detected capacity change from 0 to 32768 [ 105.012088][ T5294] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.022608][ T5309] loop3: detected capacity change from 0 to 256 [ 105.043885][ T5294] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.055938][ T5294] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.110189][ T5281] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 105.110189][ T5281] [ 105.136912][ T5310] fido_id[5310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.153983][ T5294] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,inode_readahead_blks=0x0000000000000020,i_version,minixdf,nouid32,errors=remount-ro,data_err=abort,test_dummy_encryption,max_dir_size_kb=0x0000000000080008,. Quota mode: none. [ 105.185357][ T5281] ERROR: (device loop1): remounting filesystem as read-only [ 105.214588][ T5309] FAT-fs (loop3): Directory bread(block 64) failed [ 105.221169][ T5309] FAT-fs (loop3): Directory bread(block 65) failed [ 105.245804][ T5315] loop0: detected capacity change from 0 to 512 [ 105.284781][ T5309] FAT-fs (loop3): Directory bread(block 66) failed [ 105.291392][ T5309] FAT-fs (loop3): Directory bread(block 67) failed [ 105.320731][ T5315] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 105.339419][ T5315] EXT4-fs (loop0): inline encryption not supported [ 105.364081][ T5309] FAT-fs (loop3): Directory bread(block 68) failed [ 105.380974][ T5315] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.395253][ T5309] FAT-fs (loop3): Directory bread(block 69) failed [ 105.412233][ T5315] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 105.428406][ T5309] FAT-fs (loop3): Directory bread(block 70) failed [ 105.446804][ T5315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.464325][ T5309] FAT-fs (loop3): Directory bread(block 71) failed [ 105.470971][ T5309] FAT-fs (loop3): Directory bread(block 72) failed [ 105.501288][ T5315] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.519143][ T5309] FAT-fs (loop3): Directory bread(block 73) failed [ 105.589835][ T5315] EXT4-fs (loop0): 1 truncate cleaned up [ 105.611538][ T5319] fido_id[5319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.636909][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 105.946175][ T4954] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.012046][ T5331] loop2: detected capacity change from 0 to 4096 [ 106.076354][ T5331] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.314305][ T4954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.332168][ T5331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 106.354213][ T4954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.386542][ T5331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 106.422451][ T4954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.437052][ T5345] loop3: detected capacity change from 0 to 256 [ 106.441446][ T5331] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 106.464330][ T4954] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 106.482909][ T5346] loop0: detected capacity change from 0 to 512 [ 106.501134][ T4954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.510101][ T5345] exfat: Deprecated parameter 'utf8' [ 106.514208][ T5331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 106.520210][ T5345] exfat: Deprecated parameter 'utf8' [ 106.539467][ T4954] usb 2-1: config 0 descriptor?? [ 106.547827][ T5345] exfat: Deprecated parameter 'utf8' [ 106.557585][ T5348] loop4: detected capacity change from 0 to 512 [ 106.576292][ T5346] EXT4-fs (loop0): Ignoring removed orlov option [ 106.589166][ T5331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 106.610700][ T5346] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.620235][ T5331] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 106.654488][ T5348] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.661436][ T5348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.683020][ T5345] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 106.724385][ T5331] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 106.734539][ T5331] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 106.762097][ T5346] EXT4-fs (loop0): 1 truncate cleaned up [ 106.766117][ T5348] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.425: bad orphan inode 131083 [ 106.778821][ T5331] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 106.798832][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,orlov,data_err=abort,bsdgroups,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 106.818373][ T5348] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 106.916525][ T5331] ntfs: volume version 3.1. [ 107.039432][ T4954] hid-rmi 0003:0461:4E72.000B: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 107.230885][ T5348] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.265321][ T5348] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.425: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 107.289278][ T4261] usb 2-1: USB disconnect, device number 6 [ 107.320524][ T5358] fido_id[5358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.414310][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.487513][ T4952] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.541914][ T5376] netlink: 'syz.4.433': attribute type 21 has an invalid length. [ 107.564208][ T5376] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.583132][ T5376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.590800][ T5376] IPv6: NLM_F_CREATE should be set when creating new route [ 107.598116][ T5376] IPv6: NLM_F_CREATE should be set when creating new route [ 107.605391][ T5376] IPv6: NLM_F_CREATE should be set when creating new route [ 107.642659][ T5379] netlink: 'syz.4.433': attribute type 21 has an invalid length. [ 107.651044][ T5379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.664184][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 107.784381][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.820226][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.833656][ T4235] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.843429][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.852350][ T5387] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 107.869952][ T4235] usb 4-1: config 0 descriptor?? [ 107.875295][ T4952] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 107.923239][ T4952] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 107.954005][ T4952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.004056][ T5391] loop1: detected capacity change from 0 to 4096 [ 108.017045][ T4952] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 108.072950][ T5395] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.192325][ T4235] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.431714][ T5406] sp0: Synchronizing with TNC [ 108.435545][ T5355] iowarrior 4-1:0.0: Error -90 while submitting URB [ 108.460744][ T4374] usb 4-1: USB disconnect, device number 5 [ 108.568228][ T5390] JBD2: Ignoring recovery information on journal [ 108.662657][ T5390] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 108.721774][ T5417] netlink: 180 bytes leftover after parsing attributes in process `syz.1.453'. [ 108.742786][ T5417] nbd: must specify a device to reconfigure [ 108.832481][ T5419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.853318][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 108.926496][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.938039][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.949411][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.960017][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.980924][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.004036][ T4261] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.009901][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.027392][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.041016][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.066999][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.084230][ T4952] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 109.101780][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.112761][ T5421] device batadv_slave_1 entered promiscuous mode [ 109.294164][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 109.297069][ T4952] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 109.330782][ T4952] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 109.360614][ T4952] usb 1-1: USB disconnect, device number 8 [ 109.533749][ T5441] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 109.594592][ T5439] set_capacity_and_notify: 3 callbacks suppressed [ 109.594607][ T5439] loop3: detected capacity change from 0 to 8192 [ 109.626273][ T4261] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.642478][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.651353][ T4261] usb 3-1: Product: syz [ 109.655620][ T4261] usb 3-1: Manufacturer: syz [ 109.658266][ T5439] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 109.660261][ T4261] usb 3-1: SerialNumber: syz [ 109.680640][ T4261] r8152-cfgselector 3-1: config 0 descriptor?? [ 109.697278][ T5439] REISERFS (device loop3): using ordered data mode [ 109.704411][ T5439] reiserfs: using flush barriers [ 109.711222][ T5439] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.729671][ T5439] REISERFS (device loop3): checking transaction log (loop3) [ 109.764701][ T4373] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.781140][ T5439] REISERFS (device loop3): Using r5 hash to sort names [ 109.789534][ T5439] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 110.189974][ T4261] r8152-cfgselector 3-1: Unknown version 0x0000 [ 110.197244][ T4261] r8152-cfgselector 3-1: bad CDC descriptors [ 110.227329][ T4261] r8152-cfgselector 3-1: Unknown version 0x0000 [ 110.242176][ T4261] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 110.344296][ T4373] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 110.353397][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.370120][ T4373] usb 5-1: Product: syz [ 110.381652][ T4373] usb 5-1: Manufacturer: syz [ 110.386516][ T4373] usb 5-1: SerialNumber: syz [ 110.395328][ T4373] usb 5-1: config 0 descriptor?? [ 110.436697][ T4373] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 110.639639][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 110.660686][ T5457] loop0: detected capacity change from 0 to 32768 [ 110.768888][ T5481] loop3: detected capacity change from 0 to 2048 [ 110.796545][ T5457] XFS (loop0): Mounting V5 Filesystem [ 110.807870][ T5481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.946668][ T5493] loop2: detected capacity change from 0 to 256 [ 110.960126][ T5457] XFS (loop0): Ending clean mount [ 110.998243][ T5457] XFS (loop0): Quotacheck needed: Please wait. [ 111.067401][ T4373] gspca_stk1135: reg_w 0x3 err -71 [ 111.073624][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.090269][ T5499] loop3: detected capacity change from 0 to 4096 [ 111.121348][ T5499] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 111.151510][ T4373] gspca_stk1135: Sensor write failed [ 111.183849][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.213518][ T4373] gspca_stk1135: Sensor write failed [ 111.230420][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.247289][ T4373] gspca_stk1135: Sensor read failed [ 111.252590][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.270377][ T4373] gspca_stk1135: Sensor read failed [ 111.279121][ T4373] gspca_stk1135: Detected sensor type unknown (0x0) [ 111.289734][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.299734][ T4373] gspca_stk1135: Sensor read failed [ 111.307902][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.325600][ T4373] gspca_stk1135: Sensor read failed [ 111.330873][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.368130][ T4373] gspca_stk1135: Sensor write failed [ 111.373501][ T4373] gspca_stk1135: serial bus timeout: status=0x00 [ 111.388318][ T4373] gspca_stk1135: Sensor write failed [ 111.395769][ T4373] stk1135: probe of 5-1:0.0 failed with error -71 [ 111.407703][ T4373] usb 5-1: USB disconnect, device number 3 [ 111.418901][ T5457] XFS (loop0): Quotacheck: Done. [ 111.637770][ T4191] XFS (loop0): Unmounting Filesystem [ 111.732218][ T5506] loop4: detected capacity change from 0 to 256 [ 112.304047][ T4952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.554024][ T4952] usb 2-1: Using ep0 maxpacket: 8 [ 112.747894][ T5545] loop3: detected capacity change from 0 to 1024 [ 112.846981][ T5524] loop0: detected capacity change from 0 to 32768 [ 112.852022][ T5545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.855092][ T4952] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 112.878806][ T4952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.887380][ T4952] usb 2-1: Product: syz [ 112.891645][ T4952] usb 2-1: Manufacturer: syz [ 112.913779][ T5545] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.510: Freeing blocks not in datazone - block = 0, count = 16 [ 112.934930][ T4952] usb 2-1: SerialNumber: syz [ 112.969941][ T5545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.510: bg 0: block 112: padding at end of block bitmap is not set [ 112.986494][ T4952] usb 2-1: config 0 descriptor?? [ 112.996013][ T5545] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 113.018550][ T5524] XFS (loop0): Mounting V5 Filesystem [ 113.071607][ T4952] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 113.190580][ T5524] XFS (loop0): Ending clean mount [ 113.249621][ T5566] loop3: detected capacity change from 0 to 1024 [ 113.290889][ T4191] XFS (loop0): Unmounting Filesystem [ 113.308603][ T5566] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.513: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.341233][ T5570] loop2: detected capacity change from 0 to 1024 [ 113.348074][ T5566] __quota_error: 11 callbacks suppressed [ 113.348088][ T5566] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 113.364970][ T5566] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.513: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.380311][ T5566] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 113.392825][ T5566] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.513: Failed to acquire dquot type 0 [ 113.421341][ T5566] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.432867][ T5566] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.513: mark_inode_dirty error [ 113.497867][ T5566] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 113.498270][ T4952] gspca_sonixj: reg_r err -71 [ 113.531967][ T5566] EXT4-fs (loop3): 1 orphan inode deleted [ 113.533613][ T4952] sonixj: probe of 2-1:0.0 failed with error -71 [ 113.550478][ T5566] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 113.593862][ T4952] usb 2-1: USB disconnect, device number 7 [ 113.602720][ T144] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.709951][ T144] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 113.721641][ T144] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 113.767834][ T4190] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.802883][ T4190] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.826772][ T4190] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 113.975005][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 114.076847][ T5586] netlink: 'syz.1.524': attribute type 2 has an invalid length. [ 114.101174][ T5586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.524'. [ 114.149951][ T5589] EXT4-fs (loop3): Ignoring removed nobh option [ 114.157971][ T5589] EXT4-fs (loop3): Ignoring removed orlov option [ 114.205515][ T5589] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.525: invalid block [ 114.226325][ T5589] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.525: couldn't read orphan inode 11 (err -117) [ 114.264440][ T5589] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,bsdgroups,noauto_da_alloc,,errors=continue. Quota mode: none. [ 114.337669][ T5597] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 114.358412][ T5597] EXT4-fs (loop1): 1 truncate cleaned up [ 114.372838][ T5597] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.504136][ T5592] device macsec1 entered promiscuous mode [ 114.709489][ T5590] set_capacity_and_notify: 2 callbacks suppressed [ 114.709504][ T5590] loop2: detected capacity change from 0 to 32768 [ 114.831676][ T5590] ERROR: (device loop2): diAllocAG: free inode not found in summary map [ 114.831676][ T5590] [ 114.884616][ T5590] ERROR: (device loop2): remounting filesystem as read-only [ 114.915044][ T5590] ialloc: diAlloc returned -5! [ 115.262257][ T5632] loop3: detected capacity change from 0 to 2048 [ 115.454455][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.518730][ T5612] loop1: detected capacity change from 0 to 32768 [ 115.557805][ T26] audit: type=1800 audit(30985199.015:6): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.541" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 115.588819][ T5612] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.531 (5612) [ 115.657154][ T5612] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 115.676149][ T5612] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 115.694816][ T4952] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.728550][ T5612] BTRFS info (device loop1): force lzo compression, level 0 [ 115.774164][ T5612] BTRFS info (device loop1): max_inline at 4096 [ 115.792100][ T5612] BTRFS info (device loop1): allowing degraded mounts [ 115.814056][ T5612] BTRFS info (device loop1): using free space tree [ 115.837451][ T5612] BTRFS info (device loop1): has skinny extents [ 115.858869][ T5657] loop3: detected capacity change from 0 to 512 [ 115.934040][ T4952] usb 1-1: Using ep0 maxpacket: 16 [ 115.986585][ T5657] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.054355][ T4952] usb 1-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 116.066725][ T4952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.094012][ T4952] usb 1-1: config 0 descriptor?? [ 116.225333][ T4261] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.412416][ T4627] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (4627) [ 116.514036][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 116.566878][ T4952] logitech-djreceiver 0003:046D:C71C.000C: unknown main item tag 0x0 [ 116.581667][ T4952] logitech-djreceiver 0003:046D:C71C.000C: unknown main item tag 0x0 [ 116.594023][ T4952] logitech-djreceiver 0003:046D:C71C.000C: unknown main item tag 0x0 [ 116.606247][ T4952] logitech-djreceiver 0003:046D:C71C.000C: unknown main item tag 0x0 [ 116.629233][ T4952] logitech-djreceiver 0003:046D:C71C.000C: unknown main item tag 0x0 [ 116.638403][ T4952] logitech-djreceiver 0003:046D:C71C.000C: item fetching failed at offset 14/38 [ 116.658270][ T4952] logitech-djreceiver 0003:046D:C71C.000C: logi_dj_probe: parse failed [ 116.674066][ T4952] logitech-djreceiver: probe of 0003:046D:C71C.000C failed with error -22 [ 116.725069][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.771809][ T4954] usb 1-1: USB disconnect, device number 9 [ 116.799672][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 116.820229][ T5705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 116.834400][ T4261] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 116.861971][ T4261] usb 5-1: config 9 has no interface number 0 [ 116.878377][ T4261] usb 5-1: config 9 interface 57 has no altsetting 0 [ 117.149460][ T5719] loop3: detected capacity change from 0 to 4096 [ 117.174309][ T4261] usb 5-1: string descriptor 0 read error: -22 [ 117.183418][ T4261] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 117.199629][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.290280][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 117.534361][ T4230] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.588941][ T5734] loop1: detected capacity change from 0 to 8192 [ 117.631653][ T5734] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 117.654180][ T5734] REISERFS (device loop1): using ordered data mode [ 117.660746][ T5734] reiserfs: using flush barriers [ 117.668209][ T5734] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.690742][ T5734] REISERFS (device loop1): checking transaction log (loop1) [ 117.701339][ T5734] REISERFS (device loop1): Using r5 hash to sort names [ 117.713079][ T5734] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 117.765886][ T5744] loop3: detected capacity change from 0 to 256 [ 117.804336][ T4373] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.814696][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 117.914260][ T4261] video4linux radio48: keene_cmd_set failed (-71) [ 117.921330][ T4261] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 117.934290][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.951207][ T4230] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 117.962279][ T4261] usb 5-1: USB disconnect, device number 4 [ 117.972262][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.029356][ T4230] usb 3-1: config 0 descriptor?? [ 118.064106][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 118.123720][ T5754] loop1: detected capacity change from 0 to 1024 [ 118.146215][ T5754] EXT4-fs (loop1): Ignoring removed nobh option [ 118.153361][ T5754] EXT4-fs (loop1): Ignoring removed bh option [ 118.184286][ T4373] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 118.196208][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 118.208387][ T4373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 118.222654][ T4373] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 118.232886][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.240594][ T5754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 118.256984][ T5754] System zones: 0-1, 3-12 [ 118.279061][ T4373] usb 1-1: config 0 descriptor?? [ 118.287795][ T5754] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 118.311196][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.506160][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 118.559190][ T4230] waltop 0003:172F:0038.000D: unknown main item tag 0x2 [ 118.595149][ T4230] waltop 0003:172F:0038.000D: unknown main item tag 0x6 [ 118.602376][ T4230] waltop 0003:172F:0038.000D: ignoring exceeding usage max [ 118.667971][ T4230] waltop 0003:172F:0038.000D: hidraw0: USB HID v0.81 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 118.759889][ T4261] usb 3-1: USB disconnect, device number 6 [ 118.846140][ T4373] elecom 0003:056E:00FE.000E: unknown main item tag 0x4 [ 118.872575][ T4373] elecom 0003:056E:00FE.000E: unknown main item tag 0xd [ 118.883334][ T4373] elecom 0003:056E:00FE.000E: item fetching failed at offset 39/40 [ 118.892665][ T5784] fido_id[5784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.904789][ T4373] elecom: probe of 0003:056E:00FE.000E failed with error -22 [ 119.063359][ T4261] usb 1-1: USB disconnect, device number 10 [ 119.121472][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 119.338627][ T5806] loop3: detected capacity change from 0 to 4096 [ 119.402076][ T5806] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 119.460903][ T5787] loop4: detected capacity change from 0 to 32768 [ 119.576361][ T5818] [ 119.578837][ T5818] ====================================================== [ 119.585877][ T5818] WARNING: possible circular locking dependency detected [ 119.592935][ T5818] syzkaller #0 Not tainted [ 119.597367][ T5818] ------------------------------------------------------ [ 119.604408][ T5818] syz.3.592/5818 is trying to acquire lock: [ 119.610316][ T5818] ffff88805f040428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 119.619268][ T5818] [ 119.619268][ T5818] but task is already holding lock: [ 119.626657][ T5818] ffff8880616fdc30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 119.636021][ T5818] [ 119.636021][ T5818] which lock already depends on the new lock. [ 119.636021][ T5818] [ 119.646435][ T5818] [ 119.646435][ T5818] the existing dependency chain (in reverse order) is: [ 119.655469][ T5818] [ 119.655469][ T5818] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 119.663426][ T5818] down_read+0x44/0x2e0 [ 119.668142][ T5818] ext4_map_blocks+0x350/0x1a50 [ 119.673553][ T5818] ext4_getblk+0x176/0x670 [ 119.678541][ T5818] ext4_bread+0x26/0x180 [ 119.683332][ T5818] ext4_quota_read+0x1ac/0x390 [ 119.688660][ T5818] find_tree_dqentry+0x187/0xb30 [ 119.694139][ T5818] find_tree_dqentry+0x3e8/0xb30 [ 119.699630][ T5818] qtree_read_dquot+0x122/0x690 [ 119.705038][ T5818] v2_read_dquot+0xc0/0x110 [ 119.710099][ T5818] dquot_acquire+0x152/0x520 [ 119.715249][ T5818] ext4_acquire_dquot+0x2e3/0x4a0 [ 119.720831][ T5818] dqget+0x713/0xbb0 [ 119.725285][ T5818] __dquot_initialize+0x3a9/0xd00 [ 119.730859][ T5818] ext4_process_orphan+0x4c/0x2e0 [ 119.736432][ T5818] ext4_orphan_cleanup+0xad8/0x1320 [ 119.742185][ T5818] ext4_fill_super+0x8c65/0x93f0 [ 119.747676][ T5818] mount_bdev+0x28a/0x3c0 [ 119.752561][ T5818] legacy_get_tree+0xe6/0x180 [ 119.757795][ T5818] vfs_get_tree+0x88/0x270 [ 119.762764][ T5818] do_new_mount+0x247/0xa40 [ 119.767931][ T5818] __se_sys_mount+0x2e3/0x3d0 [ 119.773159][ T5818] do_syscall_64+0x4c/0xa0 [ 119.778134][ T5818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.784591][ T5818] [ 119.784591][ T5818] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 119.792706][ T5818] down_read+0x44/0x2e0 [ 119.797431][ T5818] v2_read_dquot+0x4a/0x110 [ 119.802575][ T5818] dquot_acquire+0x152/0x520 [ 119.807729][ T5818] ext4_acquire_dquot+0x2e3/0x4a0 [ 119.813314][ T5818] dqget+0x713/0xbb0 [ 119.817757][ T5818] __dquot_initialize+0x3a9/0xd00 [ 119.823334][ T5818] ext4_process_orphan+0x4c/0x2e0 [ 119.828906][ T5818] ext4_orphan_cleanup+0xad8/0x1320 [ 119.834650][ T5818] ext4_fill_super+0x8c65/0x93f0 [ 119.840137][ T5818] mount_bdev+0x28a/0x3c0 [ 119.845033][ T5818] legacy_get_tree+0xe6/0x180 [ 119.850268][ T5818] vfs_get_tree+0x88/0x270 [ 119.855377][ T5818] do_new_mount+0x247/0xa40 [ 119.860423][ T5818] __se_sys_mount+0x2e3/0x3d0 [ 119.865652][ T5818] do_syscall_64+0x4c/0xa0 [ 119.870623][ T5818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.877088][ T5818] [ 119.877088][ T5818] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 119.884773][ T5818] __lock_acquire+0x2c66/0x7b50 [ 119.890189][ T5818] lock_acquire+0x19e/0x400 [ 119.895250][ T5818] __mutex_lock_common+0x1e5/0x2400 [ 119.901015][ T5818] mutex_lock_nested+0x17/0x20 [ 119.906330][ T5818] dquot_commit+0x5a/0x410 [ 119.911325][ T5818] ext4_write_dquot+0x1f0/0x360 [ 119.916729][ T5818] mark_all_dquot_dirty+0xf9/0x400 [ 119.922392][ T5818] __dquot_free_space+0x7c3/0xb80 [ 119.927973][ T5818] ext4_free_blocks+0x1b1b/0x24c0 [ 119.933554][ T5818] ext4_ext_remove_space+0x22bd/0x41a0 [ 119.939606][ T5818] ext4_ext_truncate+0x182/0x230 [ 119.945221][ T5818] ext4_truncate+0xa41/0x1190 [ 119.950446][ T5818] ext4_evict_inode+0xb0f/0x1050 [ 119.955932][ T5818] evict+0x4b6/0x8b0 [ 119.960379][ T5818] __dentry_kill+0x412/0x630 [ 119.965572][ T5818] dentry_kill+0xb8/0x290 [ 119.970457][ T5818] dput+0xd8/0x1a0 [ 119.974726][ T5818] do_renameat2+0x9f9/0xf70 [ 119.979782][ T5818] __x64_sys_rename+0x82/0x90 [ 119.985014][ T5818] do_syscall_64+0x4c/0xa0 [ 119.989979][ T5818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.993577][ T5819] netlink: 'syz.2.597': attribute type 2 has an invalid length. [ 119.996427][ T5818] [ 119.996427][ T5818] other info that might help us debug this: [ 119.996427][ T5818] [ 119.996435][ T5818] Chain exists of: [ 119.996435][ T5818] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 119.996435][ T5818] [ 119.996480][ T5818] Possible unsafe locking scenario: [ 119.996480][ T5818] [ 119.996486][ T5818] CPU0 CPU1 [ 119.996492][ T5818] ---- ---- [ 119.996497][ T5818] lock(&ei->i_data_sem/2); [ 119.996516][ T5818] lock(&s->s_dquot.dqio_sem); [ 120.058277][ T5818] lock(&ei->i_data_sem/2); [ 120.065422][ T5818] lock(&dquot->dq_lock); [ 120.069865][ T5818] [ 120.069865][ T5818] *** DEADLOCK *** [ 120.069865][ T5818] [ 120.078031][ T5818] 5 locks held by syz.3.592/5818: [ 120.083078][ T5818] #0: ffff88807542c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 120.092264][ T5818] #1: ffff8880743dc9b8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_renameat2+0x57c/0xf70 [ 120.102676][ T5818] #2: ffff88807542c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 120.112197][ T5818] #3: ffff8880616fdc30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 120.121987][ T5818] #4: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 120.131087][ T5818] [ 120.131087][ T5818] stack backtrace: [ 120.137009][ T5818] CPU: 1 PID: 5818 Comm: syz.3.592 Not tainted syzkaller #0 [ 120.144311][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.154394][ T5818] Call Trace: [ 120.157689][ T5818] [ 120.160645][ T5818] dump_stack_lvl+0x188/0x250 [ 120.165355][ T5818] ? load_image+0x410/0x410 [ 120.169887][ T5818] ? show_regs_print_info+0x20/0x20 [ 120.175120][ T5818] ? print_circular_bug+0x12b/0x1a0 [ 120.180378][ T5818] check_noncircular+0x296/0x330 [ 120.185346][ T5818] ? kmem_cache_alloc+0x15d/0x280 [ 120.190397][ T5818] ? xas_create+0x5bd/0x15a0 [ 120.195024][ T5818] ? add_chain_block+0x9b0/0x9b0 [ 120.199985][ T5818] ? lockdep_lock+0xf1/0x1f0 [ 120.203813][ T5813] loop1: detected capacity change from 0 to 32768 [ 120.204622][ T5818] ? mark_lock+0x94/0x320 [ 120.204643][ T5818] ? _find_first_zero_bit+0xd1/0xf0 [ 120.204667][ T5818] __lock_acquire+0x2c66/0x7b50 [ 120.204703][ T5818] ? verify_lock_unused+0x140/0x140 [ 120.204727][ T5818] ? check_path+0x21/0x40 [ 120.235072][ T5818] ? check_noncircular+0x189/0x330 [ 120.240222][ T5818] ? add_chain_block+0x9b0/0x9b0 [ 120.245193][ T5818] ? lockdep_lock+0xf1/0x1f0 [ 120.249821][ T5818] lock_acquire+0x19e/0x400 [ 120.254366][ T5818] ? dquot_commit+0x5a/0x410 [ 120.259002][ T5818] ? __might_sleep+0xf0/0xf0 [ 120.263626][ T5818] ? read_lock_is_recursive+0x10/0x10 [ 120.269055][ T5818] __mutex_lock_common+0x1e5/0x2400 [ 120.274280][ T5818] ? dquot_commit+0x5a/0x410 [ 120.278910][ T5818] ? dquot_commit+0x5a/0x410 [ 120.283532][ T5818] ? __might_sleep+0xf0/0xf0 [ 120.288151][ T5818] ? mutex_lock_io_nested+0x60/0x60 [ 120.293400][ T5818] mutex_lock_nested+0x17/0x20 [ 120.298193][ T5818] dquot_commit+0x5a/0x410 [ 120.302642][ T5818] ext4_write_dquot+0x1f0/0x360 [ 120.307525][ T5818] mark_all_dquot_dirty+0xf9/0x400 [ 120.309117][ T5787] XFS (loop4): Mounting V5 Filesystem [ 120.312669][ T5818] __dquot_free_space+0x7c3/0xb80 [ 120.312710][ T5818] ext4_free_blocks+0x1b1b/0x24c0 [ 120.328156][ T5818] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 120.335584][ T5818] ? do_raw_read_unlock+0x39/0x70 [ 120.340638][ T5818] ? _raw_read_unlock+0x24/0x40 [ 120.345527][ T5818] ? ext4_is_pending+0x176/0x1c0 [ 120.350504][ T5818] ext4_ext_remove_space+0x22bd/0x41a0 [ 120.356025][ T5818] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 120.361863][ T5818] ? ext4_es_remove_extent+0x29f/0x430 [ 120.367353][ T5818] ext4_ext_truncate+0x182/0x230 [ 120.372325][ T5818] ext4_truncate+0xa41/0x1190 [ 120.377035][ T5818] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 120.382692][ T5818] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 120.388354][ T5818] ext4_evict_inode+0xb0f/0x1050 [ 120.393324][ T5818] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 120.399242][ T5818] ? do_raw_spin_unlock+0x11d/0x230 [ 120.402661][ T5787] XFS (loop4): Ending clean mount [ 120.404460][ T5818] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 120.404487][ T5818] evict+0x4b6/0x8b0 [ 120.404514][ T5818] ? proc_nr_inodes+0x320/0x320 [ 120.404536][ T5818] ? do_raw_spin_unlock+0x11d/0x230 [ 120.404559][ T5818] ? _raw_spin_unlock+0x24/0x40 [ 120.404584][ T5818] ? iput+0x6ea/0x880 [ 120.438297][ T5818] __dentry_kill+0x412/0x630 [ 120.442918][ T5818] dentry_kill+0xb8/0x290 [ 120.447273][ T5818] dput+0xd8/0x1a0 [ 120.451027][ T5818] do_renameat2+0x9f9/0xf70 [ 120.455564][ T5818] ? fsnotify_move+0x4e0/0x4e0 [ 120.460352][ T5818] ? __check_object_size+0x30c/0x410 [ 120.465672][ T5818] ? strncpy_from_user+0x1f4/0x350 [ 120.470827][ T5818] ? getname_flags+0x1f9/0x4f0 [ 120.475626][ T5818] __x64_sys_rename+0x82/0x90 [ 120.480305][ T5818] do_syscall_64+0x4c/0xa0 [ 120.484726][ T5818] ? clear_bhb_loop+0x30/0x80 [ 120.489430][ T5818] ? clear_bhb_loop+0x30/0x80 [ 120.494148][ T5818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.500097][ T5818] RIP: 0033:0x7f8672e8c0d9 [ 120.504533][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.524174][ T5818] RSP: 002b:00007f86710c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 120.532615][ T5818] RAX: ffffffffffffffda RBX: 00007f8673114090 RCX: 00007f8672e8c0d9 [ 120.540588][ T5818] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000000 [ 120.548563][ T5818] RBP: 00007f8672f23024 R08: 0000000000000000 R09: 0000000000000000 [ 120.556536][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.564517][ T5818] R13: 00007f8673114128 R14: 00007f8673114090 R15: 00007fffaa643bb8 [ 120.572513][ T5818] [ 120.575580][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.584469][ T4188] XFS (loop4): Unmounting Filesystem