last executing test programs:

2m51.236528922s ago: executing program 3 (id=249):
userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000040b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)

2m51.068759072s ago: executing program 3 (id=253):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x2, 0x0, 0x0, 0x3}, 0x20)

2m50.946750119s ago: executing program 3 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc)

2m50.855209204s ago: executing program 3 (id=256):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

2m50.590139329s ago: executing program 3 (id=258):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000080, 0x0, 0x5}]})

2m50.030874952s ago: executing program 3 (id=263):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101)

2m49.660489933s ago: executing program 32 (id=263):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101)

3.782955961s ago: executing program 1 (id=1720):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000240)={{@any, 0x6}, 0x1, 0x0, 0xfffffdfd})

3.734258334s ago: executing program 1 (id=1721):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendto$inet6(r0, 0x0, 0x500, 0x4, 0x0, 0x0)

3.490803338s ago: executing program 1 (id=1723):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x11, &(0x7f0000000000)="11106e00", 0x4)

3.389303544s ago: executing program 1 (id=1724):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100007a982a08cd0ca310a223010203170902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="40fc08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.669460686s ago: executing program 2 (id=1728):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4e4b8, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40)

2.386811482s ago: executing program 0 (id=1732):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xa4)

2.335407805s ago: executing program 4 (id=1733):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=1,errors=remount-ro,check=strict,codepage=932,nonumtail=0,shortname=mixed,shortname=lower,iocharset=cp834,shortname=mixed,nonumtail=0,iocharset=cp866,rodir,\x00'], 0x2a, 0x33c, &(0x7f0000000a40)="$eJzs3T1sW1UUAODjvjROI5V4QKpgMmxIqGqCGGBKVBWpIgMUWfwtWDTlJzaVYmEpDHG9gBhBLEgwsXWAsTNiQIiNgZUioQJioVukVjxkvxf7+SfUgJzy831DdXTuOb73vV7FL1F889J6bF88Hpdu3rwRS0ulWFg/ux77pajEsUgicyUAgP+S/TSNX9PMnavfXz6IFue8LgBgfvrv/6+cHCbKd3M1AMBRmPH7/6emZi/PbVkAwBztx9j7/4Mjw2M/5l8Y/E4AAPDv9czzLzy5sRlxoVpdimi+0661a/H4cHzjUrwWjdiKM7EStyOyB4XsaaH37xPnN8+dqfb8WIlar6Ndi2h22rXsSWEj6feXYzVWopL3p4P+pNe/2u+vRsSVTn/+aJbateOxnM//3XJsxVqsxL0T/RHnN8+tVfMXqDUP+jsR3Vg6uIje+k/HSnzzclyORlyMXu9w/Xur1erZdHOkv3213K8DAAAAAAAAAAAAAAAAAAAAAIB5OF0dqAzOv0mbnfbbF8YLKiPn49Sy4fx8oG52PlBaPjid591k/Hyg0fN52rWFOHZXrxwAAAAAAAAAAAAAAAAAAAD+OVq7i1FvNLZ2WrtvbReDTiHzxleffnEixmteT4aZWMhebqQmz0WhK4lBezpoT5ORmjxIIobFV68NVlysKQ+uYqK9F5Qnhkr5muqNxskHfvhoWtdvw0wSE7dlNCjl8xeGmvdkqT/oOjxYu0PN9TRND2vf+3CyK0oRCxP/cX8nWMyDL2+8et8jrVOP9oc+zw99eOjhlWevf/DJz9v1RuS3ptFY3GndTv/ypElh/5Ty+1yashOmB91hprvT2q0n3/7y3P3vfT1WnEzfP2kx8+bhc302nlnMgt4yZ7nS41M2//TgxVuD3fvnb+apj9fr1/a+/2nWrsIXCQd1AAAAAAAAAAAAAAAAAADAkSh8Vnwm2WevH3t6vqsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKM1/Pv/haA7kZkluNWJyaHy1k7r0MlPHOmlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/Z7AAAA///zeHd6")
syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000100)='.\x00', 0x3a0a4b5, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./file0/../file0\x00', 0x0)
chdir(&(0x7f0000000340)='./file0\x00')

2.24223357s ago: executing program 0 (id=1734):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x70, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x6, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)

2.104637538s ago: executing program 2 (id=1735):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

2.063585541s ago: executing program 0 (id=1736):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000280), &(0x7f0000002000)=0x4)

1.793282486s ago: executing program 2 (id=1737):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1}, &(0x7f0000000040)=0x8)

1.686914483s ago: executing program 4 (id=1738):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

1.559494519s ago: executing program 2 (id=1739):
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
setuid(0xee00)
setns(r1, 0x6020000)

1.445870436s ago: executing program 2 (id=1740):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x12, 0x0, 0x1c}]})

1.330876233s ago: executing program 4 (id=1741):
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x207a98, 0x363, 0xc, 0x0, 0x0)

1.280263926s ago: executing program 0 (id=1742):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002280)={0x3, 0x0, [{0x1, 0xc, 0x2, 0xbb, 0x7ff, 0x36bb, 0xb}, {0x7, 0xc, 0x4, 0x8, 0x3, 0x799, 0x40}, {0xc0000000, 0x3, 0x2, 0x80000000, 0x8, 0x2, 0x5}]})

1.224393349s ago: executing program 2 (id=1743):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8008)

1.170701362s ago: executing program 4 (id=1744):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xc})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)

1.161774483s ago: executing program 1 (id=1745):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xb00)
setsockopt$inet_buf(r0, 0x0, 0x2a, 0x0, 0x0)

1.008049942s ago: executing program 4 (id=1746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x34, r2, 0xd03, 0x2, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

860.09526ms ago: executing program 0 (id=1747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0)

733.753137ms ago: executing program 4 (id=1748):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x5, 0x97a1, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBVEBKTFJCFOlQRElRQpCWFBABpUMJFRQBle7u7i7p7u7ujvezYYOKFxzP7z3/g4fruj7uWbNi1tzr/j7346x5hrWWnHfROQcGxhp4p3dP/94Fu9697GKjL7juiTsPvmnPHRZ6bNjFI75zMvbsw07nGHY658DAwKBh9zPoncsGz3bCicMNDB4Y+r+/N9rIoww32sDAKMPODrufgZneORn1oHdv99b74oFOMvTbbf/Ov7cbfeidDP1k6eXeWGtgYGDIP3z90HFN8y8PVNqSc8w379+t3nMbbtjVg/5+3dung9/5N+p+AwOj7jPwwdvH0NuO8A9f+7/Z0O851mQDi9/9EXzv/3MtOcd8C7zPf+haHH7YZTMNXePvX4PG3r+d77Do6o8Mm8JBwyZu8D+sl49iu/9/ask55l1w4IPX8cBC82zy8Ftv7zcHzz0wMHiegYHB8w4MDJ7vo/ao/5k+0o2vqqqqPpLmmHP6oc/Zh3vfzwND3v25ln4uvOT1ae8fGBi80DvPEwcv9+5zwaqqqqqqqqr6z2yOOaefC57/j/Vhz/8nOX3rsXv+X1VVVVVVVfV/pwXmmHP6oc/13/f8f4IPe/7/9KNHHvjO3/7PPtM7X/XmR/sgqqqqqqqqqupDm3cBfP4/yYc9/7/shEmu7Pl/VVVVVVVV1f+dFnnrrbc2+4fX2Rt28VTvXk/P/8986M5lPrIBV1VVVVVVVdV/uzefOO2sv7/m+0QD73u997cb9nuBQcecc/XVH9lA/9caZdQPuXLQv/4+ZPP/xbH9f9JQ5yGHTTIwsNbiH/VQ6iPo/8xr1df/J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/e6//f+ZxK7z7XvCfn2L6m0/7+1e+/d7/gxda4IktPqKhfxR9XI//D6w2aGBgmO9Yqw0MDCw0xyKLTTUwMHDazdNPMfnAe9fNPPS6WccZ/u03iH/3PxOZZ2y+480nfed06IYyMO5793HM2/e/wFv7Dj/ofYP4h8Y+6cADV13ypRnefzrlBz+O4d77bPQTH333v2UZ7n03GvIBX/zu/b/7WN7vPGzsUw0d+9Trr7nO1OtttPFXVltz+VVWWmWltWaZbsZpZ5hllhlnnHrl1dZYaZp3Pn7QnE3y9se5/p05G+39c/bEHP84Z+9/bB80Z5N8+Jy9fY+7XDrkW+/O2eD/5pzN9eFzNslqw77R2LOPMLDc23MzaGBg7LlHGNhw6JlpRxoYGHueYbedYOhtvzHOcAMDO/39gQ79bKT3tsFBmw+9zZLzLjrnO7upgYG/n/69D3g/+xGHjXz2YadzDDud851vM9bA3zfFwbOdcOJwQ+fin6ZjtJFHGW60gYFRhp0ddj8Ds7xzMsrp797uA95n/X0DfftlVrZ/59/bjT4wMPD23x9NtPyZ2wyd+v+F92n/f/r//3/xmnnQe9vjoGH/ht3mHa855lvg79/r7WkYOnfDD7tspqEm/8Nvbf9P/ct4JxkyMMmHjPdDXhfn7Wj7WuO08bb8n3pdHBrvBB8y3g95Hd8PHO8S9+/+yDt39T823vft6xZ8++Ps/86+buDD93XD0x2sdMVn37+v+84HD/GfdpfvztFI77vRB+3rJthj4s2H3v/sH76vW3Do2Ef4p33dcAMDY8/17r5u6I5v3hEGdhp6ZrqhZ+YbYeCQoWemf/vMyAPnDD3z1RXWXmPFoRfM/6/bwVSD/ukPNGGdzfu+dTboHx77oPf9fefgd05H3e/d93D6gP3moGEP67/cV9B2O9aHjPdD3n8K53noZSseO2S8/6n3n6LxDvnw8X7Q+2V/4Hh3fPHMu/+Hx/veOhvhH6Zr/n9nnU3yz+ts6EMc/h9Wxr/7c9iKcPt3Pp/gvXvbYNNH3/uZYoT33e9/9TPF/B++zsZa7X1ft90+A4M+bG7m+3fm5jP/sg/a4h/n5t/9eWuqyd65fvgPmZuRZll2ynfnZsT/5tzM99+dm9kHhv/nuRk8MM/AwMDkw/YP8/47czPBh8/Nv7vdjAK3f+fzld67aO4dDrvo3bl5/1z8V3Mz7393biZ5b7uZ/O3rJh1uYMQRBzZcfv311532nY/vnp3unY8fvgbn/nfmcqz/mbmccPAHzeXfN9XR7r9yv/9iDf7LPv3d+5/7vzuXA+/N5cBq718s9Z9av/9zl7+7/N3l7y5/d/m7y1/cBxz/f+/1/3cba9adh/1yY4QrJx5/2496vB9xH+vj/8N8/+n4/7bjT3zlcAPvXfehx2ffuc1/5PHZmd45GfWgd2/3/uODPNAPPj67zywzbf2/dHz2/6l31+q/8Xu49v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/H+ad/8O4KFpF3522IHQER7baqmFP+rxfsR9rI//D/P9p+P/Cy+11WPDDbx33Yce/3/nNo7j//e+Nu+O/8nH/99dqx3/r/+i/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Acc/5/93b8DOPLI3Td+9+8Brh97+9M+6vF+xH1cj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ07/j/wvre3/H7bBQbH//9v9wH+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/oIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z/0Xf8hH9G4/kOz+E/W+scs/pPnj1n8p8gfs/hPmT9m8f98/pjFf6r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8f9m/pjFf7b8MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/O3/M4v+d/DGL/4L5Yxb/7+aPWfwXyh+z+H8vf8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/kvljFv8f5o9Z/H+UP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/s/wxi/+6+WMW//Xyxyz+6+ePWfx/nj9m8d8gf8zi/4v8MYv/hvljFv+N8scs/hvnj1n8f5k/ZvH/Vf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f549Z/H+TP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+aPWfx/lz9m8f99/pjFf6f8MYv/zvljFv8/5I9Z/P+YP2bx3yV/zOL/p/wxi/+u+WMW/93yxyz+u+ePWfz/nD9m8f9L/pjF/6/5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gf/M/+D/6vj+s/NIv/Ia1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYn/2+X/r0n8B12eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyH5EutPi/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+b3+a/79m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/kPyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4fyJ/zOI/bv6YxX+8/DGL/yfzxyz+4+ePWfwnyB+z+H8qf8ziP2H+mMX/0/ljFv/P5I9Z/D+bP2bxnyh/zOI/cf6YxX+S/DGL/+fyxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf/z+WMW/6nyxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j91/pjFf5r8sUEX7DrCwMDAx95/2vwxy/qfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfy/mT9m8Z8tf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+384fs/h/J3/M4r9g/pjF/7v5Yxb/hfLHLP7fyx+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8ziv2T+mMX/h/ljFv8f5Y9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/yx/zOK/bv6YxX+9/DGL//r5Yxb/n+ePWfw3yB+z+P8if8ziv2H+mMV/o/wxi//G+WMW/1/mj1n8f5U/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/1/ljFv/f5I9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/7f5Yxb/3+WPWfx/nz9m8d8pf8ziv3P+mMX/D/ljFv8/5o9Z/HfJH7P4/yl/zOK/a/6YxX+3/DGL/+75Yxb/P+ePWfz/kj9m8f9r/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4v+3/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WPv+U/y8fa/I3/Msv7vzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEffiB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8f9E/pjFf9z8MYv/ePljFv9P5o9Z/MfPH7P4T5A/ZvH/VP6YxX/C/DGL/6fzxyz+n8kfs/h/Nn/M4j9R/pjFf+L8MYv/JPljFv/P5Y9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/5/PHLP5T5Y9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/6vwxi/80Kv8R/+1bWvynVfn/+1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/b+aPWfxnyx+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/7fzxyz+38kfs/gvmD9m8f9u/pjFf6H8MYv/9/LHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+C+ZP2bx/2H+mMX/R/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/LH7P4r5s/ZvFfL3/M4r9+/pjF/+f5Yxb/DfLHLP6/yB+z+G+YP2bx3yh/zOK/cf6Yxf+X+WMW/1/lj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/3X+mMX/N/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9t/pjF/3f5Yxb/3+ePWfx3yh+z+O+cP2bx/0P+mMX/j/ljFv9d8scs/n/KH7P475o/ZvHfLX/M4r97/pjF/8/5Yxb/v+SPWfz/mj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/LX/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/oMH8scs/oPyxyz+w+WPve0/4sfff/j8Mcv6H5w/ZvEfIX/M4j9i/pjFf6T8MYv/kPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP6fyB+z+I+bP2bxHy9/zOL/yfwxi//4+WMW/wnyxyz+n8ofs/hPmD9m8f90/pjF/zP5Yxb/z+aPWfwnyh+z+E+cP2bxnyR/zOL/ufwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/3z+mMV/qvwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/LH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/PHLP6z5o9Z/L+RP2bx/2b+mMV/tvwxi/+38scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H87f8zi/538MYv/gvljFv/v5o9Z/BfKH7P4fy9/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/+S+WMW/x/mj1n8f5Q/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f549Z/JfLH7P4L58/ZvH/Sf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/T/DGL/+r5Yxb/NfLHLP5r5o+95z/ywMDAx9h/rfwxy/pfO3/M4r9O/pjF/2f5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zx/zOK/Qf6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+P8yf8zi/6v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v84fs/j/Jn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/NH7P4/y5/zOL/+/wxi/9O+WMW/53zxyz+f8gfs/j/MX/M4r9L/pjF/0/5Yxb/XfPHLP675Y9Z/HfPH7P4/zl/zOL/l/wxi/9f88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv+/5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf4SB/DGL/6D8MYv/cPljFv/h88cs/oPzxyz+I+SPWfxHzB+z+I+UP2bxH5I/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/E/ljFv9x88cs/uPlj1n8P5k/ZvEfP3/M4j9B/pjF/1P5Yxb/CfPHLP6fzh+z+H8mf8zi/9n8MYv/RPljFv+J88cs/pPkj1n8P5c/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/p/PH7P4T5U/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/M4v+H/DGL/x/zxyz+u+SPWfz/lD9m8d81f8ziv1v+mMV/9/wxi/+f88cs/n/JH7P4/zV/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bx/1v+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfxHHMgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv8h+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/D+RP2bxHzd/zOI/Xv6Yxf+T+WMW//Hzxyz+E+SPWfw/lT9m8Z8wf8zi/+n8MYv/Z/LHLP6fzR+z+E+UP2bxnzh/zOI/Sf6Yxf9z+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOL/zfwxi/9s+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/3b+mMX/O/ljFv8F88cs/t/NH7P4L5Q/ZvH/Xv6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/yXzxyz+P8wfs/j/KH/M4r9U/tjH1H/Q+6xHXDp/7GPq/3b/uP6XyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfG3TBoGEz8/H2XzF/zLL+V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//P8scs/uvmj1n818sfs/ivnz9m8f95/pjFf4P8MYv/L/LHLP4b5o9Z/DfKH7P4b5w/ZvH/Zf6Yxf9X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+dP2bx/03+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/mz9m8f9d/pjF//f5Yxb/nfLHLP47549Z/P+QP2bx/2P+mMV/l/wxi/+f8scs/rvmj1n8d8sfs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+f8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P5//wMhwmcX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP4jDeSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PkPa8g/nbP4j5M/ZvH/RP6YxX/c/DGL/3j5Yxb/T+aPWfzHzx+z+E+QP2bx/1T+mMV/wvwxi/+n88cs/p/JH7P4fzZ/zOI/Uf6YxX/i/DGL/yT5Yxb/z+WPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/+fzxyz+U+WPWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9a/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v54/ZvGfNX/M4v+N/DGL/zfzxyz+s+WPWfy/lT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf/b+WMW/+/kj1n8F8wfs/h/N3/M4r9Q/pjF/3v5Yxb/7+ePWfwXzh+z+C+SP2bxXzT/93przL9/bvFfLH/M4r94/pjFf4n8MYv/D/LHLP5L5o9Z/H+YP2bx/1H+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n81zD7D/rgh27xX9Ps/yFZ/NfKH7P4r50/ZvFfJ3/M4v+z/DGL/7r5Yxb/9fLHLP7r549Z/H+eP2bx3yB/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfx/mT9m8f9V/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/G/Rvi7D4b5s2ZvH/df6Yxf83+WMW/+3yxyz+2+ePWfx3eMf/jbc+qnH9h2bx37H1j1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/kIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+38wfs/jPlj9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/2/nj1n8v5M/ZvFfMH/M4v/d/DGL/0L5Yxb/7+WPWfy/nz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfx/kD9m8V8yf8zi/8P8MYv/j/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/H+WP2bxXzd/zOK/Xv6YxX/9/DGL/8/zxyz+G+SPWfx/kT9m8d8wf8ziv1H+mMV/4/wxi/8v88cs/r/KH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+v8MYv/b/LHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v/b/DGL/+/yxyz+v88fs/jvlD9m8d85f8zi/4f8MYv/H/PHLP675I9Z/P+UP2bx3zV/zOK/W/6YxX/3/DGL/5/zxyz+f8kfs/j/NX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/W/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljBv9BgweGPJk/ZvAfuv6fyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPPJA/ZvEflD9m8R8uf8ziP3z+mMV/cP6YxX+E/DGL/4j5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+H8if8ziP27+mMV/vPwxi/8n88cs/uPnj1n8J8gfs/h/Kn/M4j9h/pjF/9P5Yxb/z+SPWfw/mz9m8Z8of8ziP3H+mMV/kvwxi//n8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/8/ljFv+p8scs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/df6YxX+agYHNPqoh/Sdn8Z+29Y9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jDOSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/9P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/7P8MYv/uvljFv/18scs/uvnj1n8f54/ZvHfIH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/H+ZP2bx/1X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+ePWfx/kz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/mj1n8f5c/ZvH/ff6YxX+n/DGL/875Yxb/P+SPWfz/mD9m8d8lf8zi/6f8MYv/rvljFv/d8scs/rvnj1n8/5w/ZvH/S/6Yxf+v+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//f8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP+pA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/ifwxi/+4+WMW//Hyxyz+n8wfs/iPnz9m8Z8gf8zi/6n8MYv/hPljFv9P549Z/D+TP2bx/2z+mMV/ovwxi//E+WMW/0nyxyz+n8sfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n/i3/1f+kjG9R+axf+k1j9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzx971HxgyMPBx9j8jf8yy/s/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMO/+Q/KIf/wKiPtRVgFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfbSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj318/ae/6R8uHW3s/LGPr/8/r/9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ikb/f+MBW/xXMvr/G1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/Z/ljFv9188cs/uvlj1n8188fs/j/PH/M4r9B/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zJ/zOL/q/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zh+z+P8mf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v80fs/j/Ln/M4v/7/DGL/075Yxb/nfPHLP5/yB+z+P8xf8ziv0v+mMX/T/ljFv9d88cs/rvlj1n8d88fs/j/OX/M4v+X/DGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/9IH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH/sn/2GXjfURj+n/rz7Af5b8Mcv6/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/s4+o/5H3+f8gf+7j6D7zP/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h97vv/n/8rj+Q7P4P9z6xyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/zEG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf0j+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/T+SPWfzHzR+z+I+XP2bx/2T+mMV//Pwxi/8E+WMW/0/lj1n8J8wfs/h/On/M4v+Z/DGL/2fzxyz+E+WPWfwnzh+z+E+SP2bx/1z+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+H8+f8ziP1X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+H8zf8ziP1v+mMX/W3r/IXipxX92vT9n8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/7fwxi/938scs/gvmj1n8v5s/ZvFfKH/M4v+9/DGL//fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/mAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/JH/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/8n8scs/uPmj1n8x8sfs/h/Mn/M4j9+/pjFf4L8MYv/p/LHLP4T5o9Z/D+d//+PnbsP97qu7zj+454sZ592Xeo1bTg05tqMREajFqKieLw5ZaKZ96iHm+RGbiTAFNhopY5Nl7pZsImFY85WLXG4ue5WNCxrtkZsrXKKa2GMOVhkzth14ByCs7fn2vmy79et9+PxB+f8fsf3L+V5vfz9vLiuQln6H61/KEv/V+sfytL/Z/UPZek/TP9Qlv7H6B/K0v/n9A9l6T9c/1CW/sfqH8rS/zj9Q1n6v0b/UJb+I/QPZen/8/qHsvQ/Xv9Qlv6/oH8oS//X6h/K0v8X9Q9l6f9L+oey9D9B/1CW/q/TP5Sl/0j9Q1n6v17/UJb+J+ofytJ/lP6hLP1P0j+Upf9o/UNZ+v+y/qEs/cfoH8rS/w36h7L0/xX9Q1n6j9U/lKX/G/UPZen/Jv1DWfr/qv6hLP3frH8oS/9x+oey9D9Z/1CW/uP1D2Xpf4r+oSz9T9U/lKX/afqHsvSfoH8oS//T9Q9l6X+G/qEs/SfqH8rS/0z9Q1n6t+kfytL/LP1DWfqfrX8oS/9z9A9l6X+u/qEs/dv1D2Xp/xb9Q1n6v1X/UJb+5+kfytL/bfqHsvQ/X/9Qlv6T9A9l6X+B/qEs/S/UP5Sl/9v1D2Xpf5H+oSz936F/KEv/i/UPZel/if6hLP0v1T+Upf9l+oey9L9c/1CW/lfoH8rS/0r9Q1n6T9Y/lKX/VfqHsvS/Wv9Qlv7X6B/K0r9D/1CW/lP0D2XpP1X/UJb+0/QPZek/Xf9Qlv7v1D+Upf+1+oey9J+hfyhL/5n6h7L0n6V/KEv/2fqHsvS/Tv9Qlv5z9A9l6T9X/1CW/vP0D2XpP1//UJb+1+sfytJ/gf6hLP3fpX8oS/+F+oey9F+kfyhL/8X6h7L0v0H/UJb+79Y/lKX/jfqHsvS/Sf9Qlv5L9A9l6b9U/1CW/sv0D2Xp/2v6h7L0/3X9Q1n6L9c/lKX/e/QPZen/G/qHsvR/r/6hLP3fp38oS/+b9Q9l6X+L/qEs/W/VP5Sl/2/qH8rSf4X+oSz9f0v/UJb+v61/KEv/2/QPZel/u/6hLP1/R/9Qlv7v1z+Upf8d+oey9L9T/1CW/nfpH8rS/3f1D2Xp/3v6h7L0v1v/UJb+H9A/lKX/B/UPZem/Uv9Qlv6r9A9l6f/7+oey9P8D/UNZ+t+jfyhL/9X6h7L0v1f/UJb+H9I/lKX/h/UPZem/Rv9Qlv736R/K0v8P9Q9l6b9W/1CW/n+kfyhL//v1D2Xp/8f6h7L0f0D/UJb+H9E/lKX/n+gfytL/o/qHsvT/mP6hLP0/rn8oS/8/1T+Upf8n9A9l6f+g/qEs/dfpH8rS/yH9Q1n6/5n+oSz91+sfytL/Yf1DWfr/uf6hLP3/Qv9Qlv6P6B/K0v8v9Q9l6f9J/UNZ+n9K/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6/5X+oSz9P6d/KEv/z+sfytJ/g/6hLP2/oH8oS/+/1j+Upf9G/UNZ+j+qfyhL/y/qH8rS/0v6h7L0f0z/UJb+X9Y/lKX/V/QPZen/N/qHsvR/XP9Qlv5f1T+Upf/f6h/K0v9r+oey9P87/UNZ+m/SP5Sl/9f1D2Xpv1n/UJb+f69/KEv/f9A/lKX/N/QPZen/j/qHsvT/pv6hLP2/pX8oS/9v6x/K0v8J/UNZ+v+T/qEs/Z/UP5Sl/1P6h7L036J/KEv/p/UPZen/z/qHsvT/jv6hLP3/Rf9Qlv7f1T+Upf9W/UNZ+j+jfyhL/+/pH8rSf5v+oSz9/1X/UJb+2/UPZen/b/qHsvR/Vv9Qlv7/rn8oS/8d+oey9N+pfyhL///QP5Sl//f1D2Xpv0v/UJb+P9A/lKX/c/qHsvT/of6hLP2f1z+Upf9/6h/K0v8F/UNZ+v9I/1CW/rv1DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv/Q/QPZen/cv1DWfq/Qv9Qlv6H6h/K0v+n9A9l6X+Y/qGfuP4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/18xbtPjayTNmdMz1jW9845t937zU/2YCAAD+t/34Q/9L/XcCAAAAAAAAAAAAAAAAAAAAeTXxfyf2Uv8zAgAAAAAAAAAAAADA/3dt7adsG9DvgKcG7P/g1Y917Pk6etdF09aseah0f+368dnBS/bf/8Hu3bt3r3p23ISuh0NarVbn/9orux4P7Xnc+fpLh608cu+jMv5zdz1x+aRDz5m77vaBX191a/szg/Y8O6h15ZTpMzpe37/VKqcNai3sfHBiv1arnDGodVvng1GdDyYOaq3tfHDSngcva32688Hrrp4945rOJ86s/HsGPyna2pe2Bhyw2NYB/zbYf/9Lhz05rftrLy/Z/WoDW137H77ui0f0+Fm3F9l/9+uXU3ruv8//gMCL6tv+n9vc/bWXl/xv7/8f2rhrcfSzF99/9+uXU+0f6hN8/j9goz0/9/f4/H9M8JL77k8euvGOzv23XXD/0V1PDfyffP7/8euX03ruv/8Bn/87P8dP6P78P6TVKqcf5G8HpNLWvmxbb+//ve9/4M/0uOm3//7v/fKWV3Tu/77nW8u7nhrUx/1P6O39/+Yef69A37S1r97d4/2/D/tvjQhect/+t647dM/n/y0PXH34fj/ry/5P77n/kfNnXjdy3qLFJ0yfOXlqx9SOWWNHjTlx9NixY8aM3POJYO+vB/mbAkkc3Pt/65AeN/1arY599xvuv3VC5/63P7z8w11PDe3j/s/o9f3/GO//EBrevzV4cGvh5Pnz556499fuh6P2/rr3Lwv234f//j/2+K6/rPvPDPu1Wkfuux9x+dghnfu/YU5Z3/XU4D7uf2Kv+x9/4J9VAn1zkO//1/S4OWD/J2+9aUHn/o/7/qu2dD3V1//+P7PX/d/j/R8ORlt7q9Y30c79nzRk2VnVrkubP/+D+jSx/2E7bttZ7bqcZf9Qnyb2P2nFm66qdl3Otn+oTxP7f2jmFSuqXZdz7B/q08T+X/jpnUdVuy7n2j/Up4n9P/6dp9dUuy7t9g/1aWL/H7i7/aRq1+Ut9g/1aWL/J1z/g3HVrstb7R/q08T+p7z8/LXVrst59g/1aWL/Z+0+9fBq1+Vt9g/1aWL//ZZ9d2m163K+/UN9mtj/U5NXzK52XSbZP9Snif2vHTbiuWrX5QL7h/o0sf/lz7xhYrXrcqH9Q32a2P9X7lz5eLXr8nb7h/o0sf+PX/qqldWuy0X2D/VpYv8/HP7wIdWuyzvsH+rTxP43bVr7YLXrcrH9Q32a2P+qtQOGV7sul9g/1KeJ/S85c+pj1a7LpfYP9Wli/6PHfOmSatflMvuH+jSx/yM/+82nq12Xy+0f6tPE/s9/ZMG8atflCvuH+jSx/wVHfexH1a7LlfYP9Wli/2/uOGpatesy2f6hPk3sv9x+yKZq1+Uq+4f6NLH/i7evHl/tulxt/1CfJva//rDPf7TadbnG/qE+Tex/x5xZY6tdlw77h/o0sf9vv2fJe6tdlyn2D/VpYv93PP+1Uu26TLV/qE8T+9866uJLq12XafYP9Wli/6vPefbRatdluv1DfZrY/4r1T8yvdl3eaf9Qnyb2v2HD2U9Wuy7X2j/Up4n9Hzdi5KHVrssM+4f6NLH/2Rct/2C16zLT/qE+Tez/tAfufE216zLL/qE+Tex/6FfHfaLadZlt/1CfJvb/qXHv+2S163Kd/UN9mtj/zvHHHl/tusyxf6hPE/vf/OCou6pdl7n2D/VpYv/vf/Tuitdlnv1DfZrY/5zXvrC92nWZb/9Qnyb2/8ZJFy6qdl2ut3+oTxP7P/yeiV+odl0W2D/Up4n9X/at751X7bq8y/6hPk3s/9gjrjq62nVZaP9Qnyb2P236xluqXZdF9g/1aWL/E1ZtHl3tuiy2f6hPE/s/7Kl591a7LjfYP9Snif1vG3DEudWuy7vtH+rTxP7vu/GRb1S7LjfaP9Snif3fcvNHOqpdl5vsH+rTxP4/s2vwjmrXZYn9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rIHo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA///+TOkC")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x11100, 0x0, 0x0, 0x80000001, 0x1000})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20000)

580.956717ms ago: executing program 0 (id=1749):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x40, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x2, 0x3})

0s ago: executing program 1 (id=1750):
keyctl$update(0x2, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8)

kernel console output (not intermixed with test programs):

79.048619][ T8803] EXT4-fs (loop0): Remounting filesystem read-only
[  179.090534][ T8810] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  179.131302][ T8810] REISERFS (device loop4): using ordered data mode
[  179.171644][ T8810] reiserfs: using flush barriers
[  179.246631][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.257254][ T8810] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  179.317793][ T8810] REISERFS (device loop4): checking transaction log (loop4)
[  179.360804][ T8810] REISERFS (device loop4): Using r5 hash to sort names
[  179.393094][ T8810] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  179.425785][ T8810] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  179.516024][ T8810] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  179.573521][ T8810] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  179.602136][ T8824] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  179.665043][ T8810] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  180.175046][ T8819] loop1: detected capacity change from 0 to 40427
[  180.206457][ T8819] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  180.248626][ T8819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  180.283735][ T8819] F2FS-fs (loop1): invalid crc value
[  180.340014][ T8819] F2FS-fs (loop1): Found nat_bits in checkpoint
[  180.512533][ T8819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  180.526645][ T8819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.701786][ T8853] loop2: detected capacity change from 0 to 32768
[  181.724202][ T8853] JBD2: Ignoring recovery information on journal
[  181.872574][ T8853] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  182.141923][ T8853] syz.2.960 (8853) used greatest stack depth: 17712 bytes left
[  182.229670][ T8879] loop4: detected capacity change from 0 to 512
[  182.249725][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  182.787595][ T8895] netlink: 56 bytes leftover after parsing attributes in process `syz.4.976'.
[  182.814290][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'.
[  183.944949][ T8931] loop0: detected capacity change from 0 to 4096
[  184.044249][ T8931] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  184.079309][ T8937] loop4: detected capacity change from 0 to 512
[  184.095611][ T8931] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  184.311726][ T2939] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  184.350565][ T5767] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  184.387180][ T5767] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  184.394189][ T5767] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  184.451037][ T2952] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  184.697394][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  184.705707][ T8950] loop1: detected capacity change from 0 to 512
[  184.720305][ T8950] EXT4-fs: Ignoring removed oldalloc option
[  184.766655][ T8950] EXT4-fs (loop1): 1 truncate cleaned up
[  184.781165][ T8950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.799543][ T8954] nbd0: detected capacity change from 0 to 127
[  184.848580][ T8950] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1003: invalid indirect mapped block 234881024 (level 0)
[  184.869748][ T5084] block nbd0: Receive control failed (result -104)
[  184.877297][ T8950] EXT4-fs (loop1): Remounting filesystem read-only
[  184.917927][    T9] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  184.927162][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.938557][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  184.949838][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  184.958699][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.984222][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.990344][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.004663][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.013528][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.022740][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.034460][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.043116][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.079969][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.117363][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.143909][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.156727][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.173736][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.184479][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.194006][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.216457][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.249871][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.277253][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.315065][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.334071][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.349789][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  185.375982][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.399556][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  185.427187][    T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  185.440782][    T9] usb 5-1: Product: syz
[  185.444991][    T9] usb 5-1: Manufacturer: syz
[  185.455237][    T9] usb 5-1: SerialNumber: syz
[  185.473686][    T9] usb 5-1: config 0 descriptor??
[  185.519104][    T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  185.646224][ T8971] loop0: detected capacity change from 0 to 4096
[  185.694719][ T8971] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  185.779494][    T9] usb 5-1: USB disconnect, device number 7
[  185.817285][    T9] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  185.834829][ T8962] loop2: detected capacity change from 0 to 32768
[  185.902471][ T8962] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.009293][ T8962] XFS (loop2): Ending clean mount
[  186.041507][ T8962] XFS (loop2): Quotacheck needed: Please wait.
[  186.077699][ T8985] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1014'.
[  186.145582][ T8962] XFS (loop2): Quotacheck: Done.
[  186.261230][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  186.261245][ T5778] Bluetooth: hci1: command 0x0406 tx timeout
[  186.268834][ T5778] Bluetooth: hci3: command 0x0406 tx timeout
[  186.478294][ T5764] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.910351][ T8999] loop0: detected capacity change from 0 to 2048
[  186.974737][ T8999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.550105][ T9015] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  187.650696][ T9021] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1030'.
[  187.834470][ T9027] program syz.2.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.035969][ T9035] loop2: detected capacity change from 0 to 128
[  188.224539][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'.
[  188.237265][   T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  188.358493][ T9047] loop0: detected capacity change from 0 to 128
[  188.374473][ T9047] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  188.399195][ T9047] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.421843][   T42] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  188.447440][   T42] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.467017][   T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.479377][   T42] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  188.507255][   T42] usb 5-1: Product: syz
[  188.521729][   T42] usb 5-1: Manufacturer: syz
[  188.526376][   T42] usb 5-1: SerialNumber: syz
[  188.568810][  T171] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.578928][   T42] usb 5-1: config 0 descriptor??
[  188.605243][   T42] usb 5-1: selecting invalid altsetting 0
[  188.622942][  T967] kernel write not supported for file /vbi9 (pid: 967 comm: kworker/1:2)
[  188.928955][  T787] usb 5-1: USB disconnect, device number 8
[  189.500992][ T9076] loop1: detected capacity change from 0 to 4096
[  189.530920][ T9076] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  190.091538][ T9092] netlink: 'syz.1.1064': attribute type 4 has an invalid length.
[  190.101335][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'.
[  190.255990][ T9084] loop4: detected capacity change from 0 to 32768
[  190.358099][ T9084] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.374172][ T9105] loop0: detected capacity change from 0 to 512
[  190.467932][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.486626][ T9084] XFS (loop4): Ending clean mount
[  190.495173][ T9105] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.525972][ T9084] XFS (loop4): Quotacheck needed: Please wait.
[  190.653912][ T9084] XFS (loop4): Quotacheck: Done.
[  190.657442][   T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  190.750701][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.794187][ T9084] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x28 
[  190.824671][ T9084] XFS (loop4): Unmount and run xfs_repair
[  190.847492][   T42] usb 3-1: Using ep0 maxpacket: 16
[  190.853195][ T9084] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  190.864747][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  190.883374][ T9084] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  190.894796][ T9084] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  190.915778][ T9084] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  190.925355][   T42] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  190.939586][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.957235][ T9084] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  190.972576][   T42] usb 3-1: Product: syz
[  190.976780][   T42] usb 3-1: Manufacturer: syz
[  190.983403][ T9084] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  190.992938][   T42] usb 3-1: SerialNumber: syz
[  191.003968][ T9084] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  191.014267][   T42] usb 3-1: config 0 descriptor??
[  191.021001][ T9084] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  191.033792][   T42] hub 3-1:0.0: bad descriptor, ignoring hub
[  191.044184][   T42] hub: probe of 3-1:0.0 failed with error -5
[  191.050348][ T9084] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  191.062029][   T42] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  191.069630][ T9084] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x28 len 8 error 74
[  191.122336][ T9084] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[  191.159150][ T9084] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  191.382650][    T9] usb 3-1: USB disconnect, device number 14
[  191.779225][ T6644] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.097718][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1081'.
[  192.146821][ T9136] loop0: detected capacity change from 0 to 32768
[  192.170451][ T9136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1078 (9136)
[  192.246430][ T9136] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.267297][  T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  192.277928][ T9136] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  192.297288][ T9136] BTRFS info (device loop0): using free space tree
[  192.364823][ T9154] loop2: detected capacity change from 0 to 2048
[  192.417003][ T9154] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  192.447034][ T9136] BTRFS info (device loop0): enabling ssd optimizations
[  192.454779][ T9136] BTRFS info (device loop0): auto enabling async discard
[  192.497358][  T787] usb 2-1: Using ep0 maxpacket: 32
[  192.516889][  T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  192.570117][  T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  192.573135][ T9170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.637206][  T787] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  192.666111][  T787] usb 2-1: config 0 interface 0 has no altsetting 1
[  192.685931][  T787] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  192.713450][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  192.731821][  T787] usb 2-1: SerialNumber: syz
[  192.783189][  T787] usb 2-1: config 0 descriptor??
[  192.813056][  T787] usb-storage 2-1:0.0: USB Mass Storage device detected
[  192.859915][ T5767] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.879838][  T787] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  192.936173][ T9177] Bluetooth: MGMT ver 1.22
[  193.140568][  T967] usb 2-1: USB disconnect, device number 11
[  193.154710][ T9183] loop2: detected capacity change from 0 to 64
[  193.244746][   T27] audit: type=1800 audit(1770640974.902:10): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1091" name="file1" dev="loop2" ino=21 res=0 errno=0
[  193.534417][ T9191] loop2: detected capacity change from 0 to 22
[  193.558315][ T9191] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  193.574312][ T9191] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  193.625300][ T9193] loop4: detected capacity change from 0 to 1024
[  193.644331][ T9193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.732757][ T9195] vlan2: entered allmulticast mode
[  193.742603][ T9195] veth0_to_bond: entered allmulticast mode
[  194.297292][  T787] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  194.429764][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.436128][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.442150][ T9199] loop1: detected capacity change from 0 to 32768
[  194.484874][ T9199] JBD2: Ignoring recovery information on journal
[  194.507962][  T787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.557503][  T787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.612909][  T787] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  194.626678][ T9216] syzkaller1: tun_chr_ioctl cmd 1074025677
[  194.645272][ T9199] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  194.667804][ T9216] syzkaller1: linktype set to 0
[  194.673038][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.703696][  T787] usb 5-1: SerialNumber: syz
[  194.836595][ T9213] loop2: detected capacity change from 0 to 40427
[  194.873700][ T9213] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  194.903480][ T9213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  194.926663][ T9213] F2FS-fs (loop2): invalid crc value
[  194.941128][ T9213] F2FS-fs (loop2): Found nat_bits in checkpoint
[  194.951828][  T787] usb 5-1: 0:2 : does not exist
[  195.013961][  T787] usb 5-1: USB disconnect, device number 9
[  195.091829][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  195.096262][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.147184][ T9213] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  195.154333][ T9213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  195.612046][ T9223] loop0: detected capacity change from 0 to 32768
[  195.661586][ T9223] (syz.0.1107,9223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  195.702980][ T9223] (syz.0.1107,9223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  195.707813][ T9228] loop4: detected capacity change from 0 to 128
[  195.732305][   T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  195.768783][ T9223] JBD2: Ignoring recovery information on journal
[  195.835455][ T9223] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  195.931564][   T42] usb 2-1: Using ep0 maxpacket: 16
[  195.979277][   T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  195.997598][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.015910][   T42] usb 2-1: Product: syz
[  196.022387][   T42] usb 2-1: Manufacturer: syz
[  196.032534][   T42] usb 2-1: SerialNumber: syz
[  196.050448][   T42] usb 2-1: config 0 descriptor??
[  196.081318][   T42] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  196.241334][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  196.499842][ T9244] loop2: detected capacity change from 0 to 1024
[  196.531540][ T9244] hfsplus: invalid length 32517 has been corrected to 255
[  196.594920][ T9244] hfsplus: invalid length 32517 has been corrected to 255
[  196.613525][ T5767] ocfs2: Unmounting device (7,0) on (node local)
[  196.633320][ T9244] hfsplus: invalid length 32517 has been corrected to 255
[  196.800180][ T2930] hfsplus: b-tree write err: -5, ino 4
[  196.826005][ T9250] loop4: detected capacity change from 0 to 1024
[  196.915979][   T42] ssu100: probe of 2-1:0.0 failed with error -71
[  196.943845][   T42] usb 2-1: USB disconnect, device number 12
[  197.651527][ T9263] loop4: detected capacity change from 0 to 4096
[  197.734878][ T9263] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  197.777548][ T9263] UDF-fs: Scanning with blocksize 512 failed
[  197.839068][ T9272] loop1: detected capacity change from 0 to 16
[  197.866702][ T9272] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  197.875797][ T9263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.994393][   T27] audit: type=1800 audit(1770640980.668:11): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1124" name="file1" dev="loop4" ino=1334 res=0 errno=0
[  198.391728][ T9287] loop4: detected capacity change from 0 to 64
[  198.463530][   T27] audit: type=1800 audit(1770640981.128:12): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1135" name="file1" dev="loop4" ino=21 res=0 errno=0
[  198.587293][   T42] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  198.747323][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'.
[  198.787221][   T42] usb 3-1: Using ep0 maxpacket: 16
[  198.796662][   T42] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  198.826887][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.847150][   T42] usb 3-1: Product: syz
[  198.851360][   T42] usb 3-1: Manufacturer: syz
[  198.855968][   T42] usb 3-1: SerialNumber: syz
[  199.091966][   T42] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  199.138566][   T42] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  199.158958][   T42] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  199.176620][ T9290] loop1: detected capacity change from 0 to 32768
[  199.197258][   T42] usb 3-1: media controller created
[  199.224904][   T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.268891][ T9290] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.378609][ T9290] XFS (loop1): Ending clean mount
[  199.449931][ T9290] XFS (loop1): Quotacheck needed: Please wait.
[  199.462167][   T42] zl10353_read_register: readreg error (reg=127, ret==-110)
[  199.567659][   T42] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5
[  199.595356][ T9290] XFS (loop1): Quotacheck: Done.
[  199.643629][   T42] usb 3-1: USB disconnect, device number 15
[  199.745286][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.220715][ T9305] loop0: detected capacity change from 0 to 32768
[  200.261734][ T9305] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1143 (9305)
[  200.300281][ T9322] loop1: detected capacity change from 0 to 64
[  200.330832][ T9305] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.381373][ T9305] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  200.404611][   T27] audit: type=1800 audit(1770640983.078:13): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1147" name="file1" dev="loop1" ino=21 res=0 errno=0
[  200.436981][ T9305] BTRFS info (device loop0): setting nodatacow, compression disabled
[  200.473323][ T9305] BTRFS info (device loop0): force clearing of disk cache
[  200.497321][ T9305] BTRFS info (device loop0): enabling ssd optimizations
[  200.527410][ T9305] BTRFS info (device loop0): using spread ssd allocation scheme
[  200.535138][ T9305] BTRFS info (device loop0): turning off barriers
[  200.576627][ T9305] BTRFS info (device loop0): disabling free space tree
[  200.607311][ T9305] BTRFS info (device loop0): not using ssd optimizations
[  200.614395][ T9305] BTRFS info (device loop0): not using spread ssd allocation scheme
[  200.777183][   T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  200.800238][ T9305] BTRFS info (device loop0): rebuilding free space tree
[  200.848941][ T9305] BTRFS info (device loop0): disabling free space tree
[  200.859727][ T9305] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  200.890291][ T9305] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  200.913238][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'.
[  200.957403][   T42] usb 3-1: Using ep0 maxpacket: 16
[  200.964403][   T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.998843][   T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  201.025229][   T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  201.045848][   T42] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  201.102715][   T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.122575][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.132724][   T42] usb 3-1: SerialNumber: syz
[  201.175620][ T9324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  201.183752][ T9324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  201.215976][   T42] hub 3-1:1.0: bad descriptor, ignoring hub
[  201.234073][   T42] hub: probe of 3-1:1.0 failed with error -5
[  201.438413][ T5767] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.475109][ T9324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  201.515340][ T9324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  201.557835][ T9362] loop4: detected capacity change from 0 to 1024
[  201.626575][ T9362] gfs2: path_lookup on c::;��N���L���;o$: returned error -2
[  201.984751][   T42] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  202.245942][ T9377] loop0: detected capacity change from 0 to 256
[  202.261963][ T9377] FAT-fs (loop0): Unrecognized mount option "uni_xlate?1" or missing value
[  202.303000][ T9377] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  202.367557][  T787] usb 3-1: USB disconnect, device number 16
[  202.389224][  T787] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  202.669649][ T9394] loop0: detected capacity change from 0 to 512
[  202.678153][ T9394] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.698090][ T9394] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  202.729932][ T9394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002]
[  202.750894][ T9394] System zones: 1-12
[  202.754974][ T9394] EXT4-fs (loop0): orphan cleanup on readonly fs
[  202.779316][ T9394] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1169: bg 0: block 361: padding at end of block bitmap is not set
[  202.837886][ T9394] EXT4-fs (loop0): Remounting filesystem read-only
[  202.877335][ T9394] EXT4-fs (loop0): 1 truncate cleaned up
[  202.887406][   T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  202.909930][ T9394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  202.995637][ T9394] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1169: error -117 reading directory block
[  203.021413][ T9394] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1169: error -117 reading directory block
[  203.089875][   T42] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  203.118247][   T42] usb 2-1: config 0 interface 0 has no altsetting 0
[  203.157520][   T42] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  203.179434][   T42] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  203.179624][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  203.198953][   T42] usb 2-1: Product: syz
[  203.205593][   T42] usb 2-1: Manufacturer: syz
[  203.221102][   T42] usb 2-1: SerialNumber: syz
[  203.234594][ T9407] loop4: detected capacity change from 0 to 4096
[  203.251862][   T42] usb 2-1: config 0 descriptor??
[  203.287561][   T42] usb 2-1: selecting invalid altsetting 0
[  203.369605][ T9414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.658693][ T5848] usb 2-1: USB disconnect, device number 13
[  203.661904][ T9419] input: syz1 as /devices/virtual/input/input11
[  204.493905][ T9443] loop1: detected capacity change from 0 to 64
[  204.558021][ T9443] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  204.603701][ T9424] loop4: detected capacity change from 0 to 32768
[  204.681607][ T9446] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  204.708090][ T9424] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.966447][ T9424] XFS (loop4): Ending clean mount
[  205.013219][ T9424] XFS (loop4): Quotacheck needed: Please wait.
[  205.209613][ T9424] XFS (loop4): Quotacheck: Done.
[  205.316726][ T9459] loop2: detected capacity change from 0 to 8192
[  205.364968][ T9459] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  205.404953][ T6644] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.500761][ T9459] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  205.525557][ T9459] ntfs3: loop2: Failed to load $Extend (-2).
[  205.536638][ T9459] ntfs3: loop2: Failed to initialize $Extend.
[  205.550565][ T9469] loop0: detected capacity change from 0 to 256
[  205.586919][ T9469] exfat: Deprecated parameter 'namecase'
[  205.629204][ T9469] exfat: Deprecated parameter 'utf8'
[  205.683786][ T9469] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  205.728931][ T9471] loop1: detected capacity change from 0 to 1024
[  205.885093][ T2939] hfsplus: b-tree write err: -5, ino 4
[  206.431691][   T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  206.473760][ T9486] loop1: detected capacity change from 0 to 32768
[  206.542402][ T9486] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  206.543442][ T9482] loop0: detected capacity change from 0 to 32768
[  206.627593][   T23] usb 3-1: Using ep0 maxpacket: 16
[  206.649933][   T23] usb 3-1: config 0 has an invalid interface number: 65 but max is 0
[  206.665163][   T23] usb 3-1: config 0 has no interface number 0
[  206.673657][ T9482] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.687726][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30
[  206.696793][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.705157][   T23] usb 3-1: Product: syz
[  206.709693][   T23] usb 3-1: Manufacturer: syz
[  206.716327][   T23] usb 3-1: SerialNumber: syz
[  206.735043][ T9486] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has invalid next free chain record 12, but only 1 total
[  206.760983][   T23] usb 3-1: config 0 descriptor??
[  206.769491][   T23] gspca_main: STV06xx-2.14.0 probing 046d:0840
[  206.776723][ T9486] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  206.795496][ T9486] OCFS2: File system is now read-only.
[  206.801470][ T9486] (syz.1.1200,9486,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  206.813613][ T9482] XFS (loop0): Ending clean mount
[  206.822328][ T9486] (syz.1.1200,9486,1):ocfs2_claim_metadata:2018 ERROR: status = -30
[  206.842176][ T9486] (syz.1.1200,9486,1):ocfs2_claim_metadata:2031 ERROR: status = -30
[  206.852135][ T9482] XFS (loop0): Quotacheck needed: Please wait.
[  206.854667][ T9486] (syz.1.1200,9486,1):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  206.907663][ T9486] (syz.1.1200,9486,1):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  206.920649][ T9486] (syz.1.1200,9486,1):ocfs2_extend_dir:3205 ERROR: status = -30
[  206.967274][ T9486] (syz.1.1200,9486,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  206.997335][ T9486] (syz.1.1200,9486,1):ocfs2_mknod:298 ERROR: status = -30
[  207.017322][ T9486] (syz.1.1200,9486,1):ocfs2_mknod:502 ERROR: status = -30
[  207.050362][ T9486] (syz.1.1200,9486,1):ocfs2_create:676 ERROR: status = -30
[  207.114867][ T9482] XFS (loop0): Quotacheck: Done.
[  207.223017][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  207.253913][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.430555][   T23] gspca_stv06xx: vv6410 sensor detected
[  207.719346][   T23] STV06xx: probe of 3-1:0.65 failed with error -71
[  207.744051][   T23] usb 3-1: USB disconnect, device number 17
[  208.070980][ T9520] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  208.126910][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.136003][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.779613][   T27] audit: type=1326 audit(1770640991.458:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  208.802243][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.877143][   T27] audit: type=1326 audit(1770640991.498:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  208.899402][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.966220][   T27] audit: type=1326 audit(1770640991.498:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.037191][   T27] audit: type=1326 audit(1770640991.498:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.087240][   T27] audit: type=1326 audit(1770640991.498:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.157214][   T27] audit: type=1326 audit(1770640991.498:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.207144][   T27] audit: type=1326 audit(1770640991.498:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.262314][   T27] audit: type=1326 audit(1770640991.508:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.284659][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.327203][   T27] audit: type=1326 audit(1770640991.508:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.351554][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.383949][   T27] audit: type=1326 audit(1770640991.508:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbc30f9af79 code=0x7ffc0000
[  209.516865][ T9544] loop1: detected capacity change from 0 to 32768
[  209.560748][ T9544] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  209.581681][ T9544] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.740248][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1228'.
[  209.749887][ T9544] XFS (loop1): Ending clean mount
[  209.816759][ T9544] XFS (loop1): Quotacheck needed: Please wait.
[  209.850540][    T8] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  209.864431][    T8] XFS (loop1): Unmount and run xfs_repair
[  209.877238][    T8] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  209.885886][ T9553] loop0: detected capacity change from 0 to 40427
[  209.894980][    T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  209.923092][ T9553] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  209.924578][    T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  209.954591][ T9553] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  209.964463][    T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  209.985970][    T8] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  210.015508][    T8] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  210.037446][    T8] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  210.050114][ T9553] F2FS-fs (loop0): Found nat_bits in checkpoint
[  210.076314][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.099200][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.125665][ T2985] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  210.187176][ T9544] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  210.257160][ T9553] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  210.292743][ T9553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  210.373637][   T42] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  210.416564][   T42] XFS (loop1): Unmount and run xfs_repair
[  210.426683][   T42] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  210.457582][   T42] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  210.474203][   T42] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  210.485051][   T42] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  210.502288][ T9553] syz.0.1225: attempt to access beyond end of device
[  210.502288][ T9553] loop0: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  210.502982][   T42] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  210.565543][   T42] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  210.596291][   T42] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  210.605738][   T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.624973][   T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.635999][ T9544] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  210.652410][ T9544] XFS (loop1): page discard on page ffffea0001b35cc0, inode 0x1146, pos 61440.
[  210.731507][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.743954][ T5767] syz-executor: attempt to access beyond end of device
[  210.743954][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.758631][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  211.097203][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  211.297496][   T23] usb 5-1: Using ep0 maxpacket: 32
[  211.329397][   T23] usb 5-1: config index 0 descriptor too short (expected 274, got 18)
[  211.348736][   T23] usb 5-1: config 0 has an invalid interface number: 1 but max is -1
[  211.365629][   T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  211.388120][   T23] usb 5-1: config 0 has no interface number 0
[  211.439906][   T23] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  211.460259][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.472186][   T23] usb 5-1: Product: syz
[  211.481096][   T23] usb 5-1: Manufacturer: syz
[  211.515230][   T23] usb 5-1: SerialNumber: syz
[  211.540768][   T23] usb 5-1: config 0 descriptor??
[  211.550774][   T23] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  211.578760][   T23] usb 5-1: selecting invalid altsetting 1
[  211.584539][   T23] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  211.644866][   T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  211.687762][   T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  211.696109][   T23] usb 5-1: media controller created
[  211.707009][ T9600] loop1: detected capacity change from 0 to 8
[  211.767808][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  211.789990][ T9600] squashfs image failed sanity check
[  212.024686][ T9606] loop1: detected capacity change from 0 to 256
[  212.037270][   T23] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  212.045000][   T23] zl10353_read_register: readreg error (reg=127, ret==-71)
[  212.047134][ T9606] exfat: Deprecated parameter 'utf8'
[  212.075958][   T23] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  212.088368][ T9606] exfat: Deprecated parameter 'namecase'
[  212.104583][ T9606] exfat: Deprecated parameter 'utf8'
[  212.198888][   T23] usb 5-1: USB disconnect, device number 10
[  212.225849][ T9606] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  212.403610][ T9606] exFAT-fs (loop1): error, tried to truncate zeroed cluster.
[  212.645250][ T9618] loop2: detected capacity change from 0 to 8192
[  212.658509][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  212.670996][ T9618] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  212.684218][ T9618] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  212.700750][ T9618] REISERFS (device loop2): using ordered data mode
[  212.707834][ T9618] reiserfs: using flush barriers
[  212.731057][ T9618] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.748163][ T9618] REISERFS (device loop2): checking transaction log (loop2)
[  212.758835][ T9618] REISERFS (device loop2): Using r5 hash to sort names
[  212.766679][ T9618] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  212.782317][ T9618] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  212.923340][ T9627] loop1: detected capacity change from 0 to 512
[  213.028798][ T9627] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  213.104920][ T9627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002]
[  213.158271][ T9627] System zones: 1-12
[  213.208368][ T9627] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1253: corrupted in-inode xattr: e_value size too large
[  213.239062][ T9627] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1253: couldn't read orphan inode 15 (err -117)
[  213.274479][ T9627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.310216][ T9640] loop4: detected capacity change from 0 to 1024
[  213.321924][ T9640] EXT4-fs: Ignoring removed oldalloc option
[  213.360215][ T9640] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  213.460761][ T9640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.744724][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.808932][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.958779][ T9654] loop2: detected capacity change from 0 to 2048
[  214.008080][ T9654] EXT4-fs: Ignoring removed i_version option
[  214.071064][ T9661] loop1: detected capacity change from 0 to 128
[  214.074391][ T9657] loop4: detected capacity change from 0 to 4096
[  214.103900][ T9661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  214.116596][ T9657] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  214.154879][ T9661] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.173074][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.206268][ T9661] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2231 (only 1 groups)
[  214.241321][ T9654] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.1266: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  214.283606][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.299340][ T9654] EXT4-fs (loop2): Remounting filesystem read-only
[  214.310061][ T9657] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  214.429791][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  214.429806][   T27] audit: type=1800 audit(1770640997.108:33): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1265" name="file1" dev="loop4" ino=29 res=0 errno=0
[  214.501075][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.907047][ T7370] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 30 seconds
[  214.919967][ T7370] block nbd0: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 30 seconds
[  214.930974][ T7370] block nbd0: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 30 seconds
[  214.942369][ T7370] block nbd0: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 30 seconds
[  215.039823][ T9687] bridge0: port 3(syz_tun) entered blocking state
[  215.048106][ T9687] bridge0: port 3(syz_tun) entered disabled state
[  215.055007][ T9687] syz_tun: entered allmulticast mode
[  215.063473][ T9687] syz_tun: entered promiscuous mode
[  215.070670][ T9687] bridge0: port 3(syz_tun) entered blocking state
[  215.077627][ T9687] bridge0: port 3(syz_tun) entered forwarding state
[  215.987481][ T9695] loop1: detected capacity change from 0 to 32768
[  216.028117][ T9695] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.095173][ T9695] XFS (loop1): Ending clean mount
[  216.143953][ T9695] XFS (loop1): Quotacheck needed: Please wait.
[  216.232996][ T9695] XFS (loop1): Quotacheck: Done.
[  216.355034][ T9709] loop2: detected capacity change from 0 to 32768
[  216.376245][ T9709] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.435601][ T9709] XFS (loop2): Ending clean mount
[  216.456600][ T9709] XFS (loop2): Quotacheck needed: Please wait.
[  216.469006][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  216.477711][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.571524][ T9709] XFS (loop2): Quotacheck: Done.
[  216.677219][    T8] usb 5-1: Using ep0 maxpacket: 16
[  216.687968][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.701194][    T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  216.710579][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.758666][    T8] usb 5-1: config 0 descriptor??
[  216.824284][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.895783][ T9739] loop1: detected capacity change from 0 to 65
[  216.916927][ T9739] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  217.178290][    T8] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  217.397429][ T5829] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  217.595527][  T967] usb 5-1: USB disconnect, device number 11
[  217.609291][ T5829] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.628269][ T5829] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  217.639101][ T5829] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  217.648878][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.663421][ T9743] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  217.675499][ T5829] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  217.906978][ T5829] usb 2-1: USB disconnect, device number 14
[  218.196446][ T9748] loop0: detected capacity change from 0 to 512
[  218.263980][ T9748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.323724][ T9748] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  218.463168][ T9748] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.1305: corrupted inode contents
[  218.475466][ T9759] loop2: detected capacity change from 0 to 64
[  218.511220][ T9748] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #2: comm syz.0.1305: mark_inode_dirty error
[  218.523804][ T9757] loop4: detected capacity change from 0 to 4096
[  218.536869][ T9759] Trying to free block not in datazone
[  218.556617][ T9759] Trying to free block not in datazone
[  218.557467][ T9748] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.1305: corrupted inode contents
[  218.566006][ T9759] Trying to free block not in datazone
[  218.581265][ T9759] Trying to free block not in datazone
[  218.584699][ T9748] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1305: mark_inode_dirty error
[  218.607281][ T9759] Trying to free block not in datazone
[  218.612784][ T9759] Trying to free block not in datazone
[  218.635603][ T9760] syz.2.1298: attempt to access beyond end of device
[  218.635603][ T9760] loop2: rw=0, sector=8192, nr_sectors = 2 limit=64
[  218.651882][ T9757] NILFS (loop4): invalid segment: Checksum error in segment payload
[  218.661674][ T9757] NILFS (loop4): trying rollback from an earlier position
[  218.663976][ T9760] Trying to free block not in datazone
[  218.696413][ T9757] NILFS (loop4): recovery complete
[  218.703737][ T9761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.732222][ T9759] Trying to free block not in datazone
[  218.735428][ T9760] Trying to free block not in datazone
[  218.741654][ T9759] Trying to free block not in datazone
[  218.764910][ T9759] Trying to free block not in datazone
[  218.776789][ T9759] Trying to free block not in datazone
[  218.785282][ T9760] Trying to free block not in datazone
[  218.793712][ T9759] Trying to free block not in datazone
[  218.801286][ T9759] Trying to free block not in datazone
[  218.806858][ T9759] Trying to free block not in datazone
[  218.820875][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.850375][ T9759] Trying to free block not in datazone
[  218.855898][ T9759] Trying to free block not in datazone
[  218.880504][ T9759] Trying to free block not in datazone
[  218.896344][ T9759] Trying to free block not in datazone
[  218.902572][ T9759] Trying to free block not in datazone
[  218.928213][ T9759] Trying to free block not in datazone
[  218.933734][ T9759] Trying to free block not in datazone
[  218.940207][ T9759] Trying to free block not in datazone
[  218.945906][ T9759] Trying to free block not in datazone
[  219.017208][ T9759] Trying to free block not in datazone
[  219.044268][ T9759] Trying to free block not in datazone
[  219.060750][ T9759] Trying to free block not in datazone
[  219.093119][ T9759] Trying to free block not in datazone
[  219.110989][ T9759] Trying to free block not in datazone
[  219.123237][ T9759] Trying to free block not in datazone
[  219.129663][ T9759] Trying to free block not in datazone
[  219.135367][ T9759] Trying to free block not in datazone
[  219.146323][ T9759] Trying to free block not in datazone
[  219.153016][ T9759] Trying to free block not in datazone
[  219.169294][ T9759] Trying to free block not in datazone
[  219.174791][ T9759] Trying to free block not in datazone
[  219.189090][ T9759] Trying to free block not in datazone
[  219.203096][ T9759] Trying to free block not in datazone
[  219.212409][ T9759] Trying to free block not in datazone
[  219.219758][ T9759] Trying to free block not in datazone
[  219.225279][ T9759] Trying to free block not in datazone
[  219.238426][ T9759] Trying to free block not in datazone
[  219.243931][ T9759] Trying to free block not in datazone
[  219.257336][ T9759] Trying to free block not in datazone
[  219.262839][ T9759] Trying to free block not in datazone
[  219.271361][ T9759] Trying to free block not in datazone
[  219.277452][ T9759] Trying to free block not in datazone
[  219.284692][ T9759] Trying to free block not in datazone
[  219.292634][ T9759] Trying to free block not in datazone
[  219.307243][ T9759] Trying to free block not in datazone
[  219.316435][ T9759] Trying to free block not in datazone
[  219.328740][ T9759] Trying to free block not in datazone
[  219.334322][ T9759] Trying to free block not in datazone
[  219.347479][  T967] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  219.356231][ T9759] Trying to free block not in datazone
[  219.366369][ T9759] Trying to free block not in datazone
[  219.376480][ T9759] Trying to free block not in datazone
[  219.408667][ T9759] Trying to free block not in datazone
[  219.414191][ T9759] Trying to free block not in datazone
[  219.420994][ T9759] Trying to free block not in datazone
[  219.426574][ T9759] Trying to free block not in datazone
[  219.432574][ T9759] Trying to free block not in datazone
[  219.438672][ T9759] Trying to free block not in datazone
[  219.444379][ T9759] Trying to free block not in datazone
[  219.449964][ T9759] Trying to free block not in datazone
[  219.455532][ T9759] Trying to free block not in datazone
[  219.468767][ T9759] Trying to free block not in datazone
[  219.499814][ T9759] Trying to free block not in datazone
[  219.505332][ T9759] Trying to free block not in datazone
[  219.517249][ T9759] Trying to free block not in datazone
[  219.527371][ T9759] Trying to free block not in datazone
[  219.532893][ T9759] Trying to free block not in datazone
[  219.544766][ T9759] Trying to free block not in datazone
[  219.551358][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.552823][ T9759] Trying to free block not in datazone
[  219.572867][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.578070][ T9759] Trying to free block not in datazone
[  219.588679][  T967] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  219.588706][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.597976][  T967] usb 1-1: config 0 descriptor??
[  219.618840][ T9782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  219.632038][ T9759] Trying to free block not in datazone
[  219.648401][ T9759] Trying to free block not in datazone
[  219.653893][ T9759] Trying to free block not in datazone
[  219.659467][ T9759] Trying to free block not in datazone
[  219.665112][ T9759] Trying to free block not in datazone
[  219.671312][ T9759] Trying to free block not in datazone
[  219.676888][ T9759] Trying to free block not in datazone
[  219.693684][ T9759] Trying to free block not in datazone
[  219.705110][ T9759] Trying to free block not in datazone
[  219.723830][ T9759] Trying to free block not in datazone
[  219.733636][ T9759] Trying to free block not in datazone
[  219.740310][ T9759] Trying to free block not in datazone
[  219.745846][ T9759] Trying to free block not in datazone
[  219.752206][ T9759] Trying to free block not in datazone
[  219.761220][ T9759] Trying to free block not in datazone
[  219.768869][ T9759] Trying to free block not in datazone
[  219.774354][ T9759] Trying to free block not in datazone
[  219.780181][ T9759] Trying to free block not in datazone
[  219.785656][ T9759] Trying to free block not in datazone
[  219.791654][ T9759] Trying to free block not in datazone
[  219.797217][ T9759] Trying to free block not in datazone
[  219.802778][ T9759] Trying to free block not in datazone
[  219.808380][ T9759] Trying to free block not in datazone
[  219.813853][ T9759] Trying to free block not in datazone
[  219.819385][ T9759] Trying to free block not in datazone
[  219.824853][ T9759] Trying to free block not in datazone
[  219.837145][ T5829] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  219.844842][ T9759] Trying to free block not in datazone
[  219.851433][ T9759] Trying to free block not in datazone
[  219.856942][ T9759] Trying to free block not in datazone
[  219.863772][ T9759] Trying to free block not in datazone
[  219.870996][ T9759] Trying to free block not in datazone
[  219.876654][ T9759] Trying to free block not in datazone
[  219.884881][ T9759] Trying to free block not in datazone
[  219.891614][ T9759] Trying to free block not in datazone
[  219.910870][ T9759] Trying to free block not in datazone
[  219.916397][ T9759] Trying to free block not in datazone
[  219.934583][ T9759] Trying to free block not in datazone
[  219.952919][ T9759] Trying to free block not in datazone
[  219.959419][ T9759] Trying to free block not in datazone
[  219.964917][ T9759] Trying to free block not in datazone
[  219.970742][ T9759] Trying to free block not in datazone
[  219.976216][ T9759] Trying to free block not in datazone
[  219.981889][ T9759] Trying to free block not in datazone
[  219.988522][ T9759] Trying to free block not in datazone
[  219.994075][ T9759] Trying to free block not in datazone
[  220.000647][ T9759] Trying to free block not in datazone
[  220.006781][ T9759] Trying to free block not in datazone
[  220.012666][ T9759] Trying to free block not in datazone
[  220.027297][ T9759] Trying to free block not in datazone
[  220.027385][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  220.032833][ T9759] Trying to free block not in datazone
[  220.039589][ T5829] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  220.055952][ T5829] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.059637][  T967] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  220.065888][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.083224][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.093351][ T5829] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.094397][ T9759] Trying to free block not in datazone
[  220.106763][ T5829] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  220.106789][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.133705][  T967] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  220.153881][  T967] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  220.162618][  T967] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  220.189044][ T9759] Trying to free block not in datazone
[  220.194547][ T9759] Trying to free block not in datazone
[  220.202623][  T967] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  220.212967][  T967] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  220.226186][ T9759] Trying to free block not in datazone
[  220.243076][ T9759] Trying to free block not in datazone
[  220.253183][ T9759] Trying to free block not in datazone
[  220.259923][ T9759] Trying to free block not in datazone
[  220.266436][ T9759] Trying to free block not in datazone
[  220.272677][ T9759] Trying to free block not in datazone
[  220.278980][ T9759] Trying to free block not in datazone
[  220.284937][ T9759] Trying to free block not in datazone
[  220.290923][ T9759] Trying to free block not in datazone
[  220.296516][ T9759] Trying to free block not in datazone
[  220.314409][ T9759] Trying to free block not in datazone
[  220.321073][  T967] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 20 got 0
[  220.337330][ T9759] Trying to free block not in datazone
[  220.343370][  T967] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22
[  220.352918][ T9759] Trying to free block not in datazone
[  220.360562][  T967] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense
[  220.369935][ T9759] Trying to free block not in datazone
[  220.370309][ T5829] usb 2-1: GET_CAPABILITIES returned 0
[  220.375743][ T9759] Trying to free block not in datazone
[  220.375752][ T9759] Trying to free block not in datazone
[  220.375758][ T9759] Trying to free block not in datazone
[  220.375764][ T9759] Trying to free block not in datazone
[  220.375770][ T9759] Trying to free block not in datazone
[  220.375776][ T9759] Trying to free block not in datazone
[  220.375783][ T9759] Trying to free block not in datazone
[  220.396039][ T5829] usbtmc 2-1:16.0: can't read capabilities
[  220.415698][  T967] playstation 0003:054C:0DF2.000A: Failed to create dualsense.
[  220.447760][ T9759] Trying to free block not in datazone
[  220.453358][ T9759] Trying to free block not in datazone
[  220.464442][ T9759] Trying to free block not in datazone
[  220.464476][  T967] playstation: probe of 0003:054C:0DF2.000A failed with error -22
[  220.478417][ T9759] Trying to free block not in datazone
[  220.478428][ T9759] Trying to free block not in datazone
[  220.478436][ T9759] Trying to free block not in datazone
[  220.478443][ T9759] Trying to free block not in datazone
[  220.478450][ T9759] Trying to free block not in datazone
[  220.478457][ T9759] Trying to free block not in datazone
[  220.478464][ T9759] Trying to free block not in datazone
[  220.478471][ T9759] Trying to free block not in datazone
[  220.478478][ T9759] Trying to free block not in datazone
[  220.478485][ T9759] Trying to free block not in datazone
[  220.478492][ T9759] Trying to free block not in datazone
[  220.478499][ T9759] Trying to free block not in datazone
[  220.478505][ T9759] Trying to free block not in datazone
[  220.478512][ T9759] Trying to free block not in datazone
[  220.478519][ T9759] Trying to free block not in datazone
[  220.478526][ T9759] Trying to free block not in datazone
[  220.478533][ T9759] Trying to free block not in datazone
[  220.478540][ T9759] Trying to free block not in datazone
[  220.478547][ T9759] Trying to free block not in datazone
[  220.478554][ T9759] Trying to free block not in datazone
[  220.478561][ T9759] Trying to free block not in datazone
[  220.478568][ T9759] Trying to free block not in datazone
[  220.478575][ T9759] Trying to free block not in datazone
[  220.478581][ T9759] Trying to free block not in datazone
[  220.478589][ T9759] Trying to free block not in datazone
[  220.478596][ T9759] Trying to free block not in datazone
[  220.478602][ T9759] Trying to free block not in datazone
[  220.478609][ T9759] Trying to free block not in datazone
[  220.478616][ T9759] Trying to free block not in datazone
[  220.478623][ T9759] Trying to free block not in datazone
[  220.478630][ T9759] Trying to free block not in datazone
[  220.478637][ T9759] Trying to free block not in datazone
[  220.478644][ T9759] Trying to free block not in datazone
[  220.478651][ T9759] Trying to free block not in datazone
[  220.478659][ T9759] Trying to free block not in datazone
[  220.478665][ T9759] Trying to free block not in datazone
[  220.478673][ T9759] Trying to free block not in datazone
[  220.478679][ T9759] Trying to free block not in datazone
[  220.478686][ T9759] Trying to free block not in datazone
[  220.478693][ T9759] Trying to free block not in datazone
[  220.478700][ T9759] Trying to free block not in datazone
[  220.478707][ T9759] Trying to free block not in datazone
[  220.478714][ T9759] Trying to free block not in datazone
[  220.478719][ T9759] Trying to free block not in datazone
[  220.478726][ T9759] Trying to free block not in datazone
[  220.478733][ T9759] Trying to free block not in datazone
[  220.478740][ T9759] Trying to free block not in datazone
[  220.747228][ T9759] Trying to free block not in datazone
[  220.760481][ T5829] usb 2-1: USB disconnect, device number 15
[  220.767239][ T9759] Trying to free block not in datazone
[  220.793299][ T9759] Trying to free block not in datazone
[  220.803952][  T787] usb 1-1: USB disconnect, device number 10
[  220.806492][ T9759] Trying to free block not in datazone
[  220.819321][ T9759] Trying to free block not in datazone
[  220.825236][ T9759] Trying to free block not in datazone
[  220.830843][ T9759] Trying to free block not in datazone
[  220.836318][ T9759] Trying to free block not in datazone
[  220.845485][ T9759] Trying to free block not in datazone
[  220.858256][ T9759] Trying to free block not in datazone
[  220.863746][ T9759] Trying to free block not in datazone
[  220.873765][ T9759] Trying to free block not in datazone
[  220.883342][ T9759] Trying to free block not in datazone
[  220.894303][ T9759] Trying to free block not in datazone
[  220.903948][ T9759] Trying to free block not in datazone
[  220.914139][ T9759] Trying to free block not in datazone
[  220.922310][ T9759] Trying to free block not in datazone
[  220.932980][ T9759] Trying to free block not in datazone
[  220.938943][ T9759] Trying to free block not in datazone
[  220.944507][ T9759] Trying to free block not in datazone
[  220.959936][ T9759] Trying to free block not in datazone
[  220.965439][ T9759] Trying to free block not in datazone
[  220.975911][ T9759] Trying to free block not in datazone
[  220.981732][ T9759] Trying to free block not in datazone
[  220.993376][ T9759] Trying to free block not in datazone
[  220.999181][ T9759] Trying to free block not in datazone
[  221.004741][ T9759] Trying to free block not in datazone
[  221.014933][ T9759] Trying to free block not in datazone
[  221.027013][ T9759] Trying to free block not in datazone
[  221.045806][ T9759] Trying to free block not in datazone
[  221.053010][ T9759] Trying to free block not in datazone
[  221.058744][ T9759] Trying to free block not in datazone
[  221.064382][ T9759] Trying to free block not in datazone
[  221.076768][ T9759] Trying to free block not in datazone
[  221.087323][ T9759] Trying to free block not in datazone
[  221.092844][ T9759] Trying to free block not in datazone
[  221.107190][ T9759] Trying to free block not in datazone
[  221.112707][ T9759] Trying to free block not in datazone
[  221.127208][ T9759] Trying to free block not in datazone
[  221.132732][ T9759] Trying to free block not in datazone
[  221.139139][ T9759] Trying to free block not in datazone
[  221.144615][ T9759] Trying to free block not in datazone
[  221.150468][ T9759] Trying to free block not in datazone
[  221.155948][ T9759] Trying to free block not in datazone
[  221.162049][ T9759] Trying to free block not in datazone
[  221.167626][ T9759] Trying to free block not in datazone
[  221.173440][ T9759] Trying to free block not in datazone
[  221.179158][ T9759] Trying to free block not in datazone
[  221.184797][ T9759] Trying to free block not in datazone
[  221.190990][ T9759] Trying to free block not in datazone
[  221.196637][ T9759] Trying to free block not in datazone
[  221.202186][ T9759] Trying to free block not in datazone
[  221.207882][ T9759] Trying to free block not in datazone
[  221.213361][ T9759] Trying to free block not in datazone
[  221.219144][ T9759] Trying to free block not in datazone
[  221.225814][ T9759] Trying to free block not in datazone
[  221.231630][ T9759] Trying to free block not in datazone
[  221.237139][ T9759] Trying to free block not in datazone
[  221.242756][ T9759] Trying to free block not in datazone
[  221.248313][ T9759] Trying to free block not in datazone
[  221.259128][ T9759] Trying to free block not in datazone
[  221.602024][ T9811] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1321'.
[  222.019885][  T787] kernel write not supported for file /790/net/ip6_tables_matches (pid: 787 comm: kworker/0:2)
[  222.308913][ T9832] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1330'.
[  222.907335][ T9851] loop0: detected capacity change from 0 to 64
[  223.867267][ T9867] program syz.0.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.268995][   T42] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  224.479428][   T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.497279][   T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.519388][   T42] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.533278][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.573450][   T42] usb 5-1: Product: syz
[  224.581888][   T42] usb 5-1: Manufacturer: syz
[  224.588496][   T42] usb 5-1: SerialNumber: syz
[  224.640726][ T9886] macvtap1: entered allmulticast mode
[  224.646272][ T9886] veth0_macvtap: entered allmulticast mode
[  225.013785][   T42] usb 5-1: 0:2 : does not exist
[  225.049712][ T9894] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  225.502900][  T967] usb 5-1: USB disconnect, device number 12
[  225.564435][ T9909] loop1: detected capacity change from 0 to 2048
[  225.644712][ T9912] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.804060][ T9916] loop0: detected capacity change from 0 to 1024
[  225.804452][ T9909] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  225.844244][ T9909] Remounting filesystem read-only
[  225.886489][ T5766] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  225.896162][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=18
[  225.903432][ T5766] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  225.911014][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  225.921265][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  225.930882][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  225.941843][  T787] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  225.950670][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=2
[  225.957902][ T5766] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  225.965330][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  225.981764][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  225.991135][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.005808][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  226.012607][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  226.020582][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  226.029084][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  226.036992][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  226.044541][ T5766] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  226.058479][ T5766] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  226.085222][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.107488][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.116875][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.136539][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=3
[  226.150947][ T5766] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  226.157134][  T787] usb 3-1: Using ep0 maxpacket: 8
[  226.165538][  T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.176714][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.189759][ T9921] loop0: detected capacity change from 0 to 256
[  226.194946][ T9922] loop4: detected capacity change from 0 to 16
[  226.196900][ T5766] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  226.210169][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  226.220950][ T9921] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  226.232839][ T5766] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  226.241370][  T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.243227][ T9922] erofs: (device loop4): mounted with root inode @ nid 36.
[  226.263173][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.277473][  T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  226.302323][ T9921] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  226.314399][ T5766] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  226.337133][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.357777][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.378443][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.406545][ T5766] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  226.437510][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  226.569766][ T9924] loop4: detected capacity change from 0 to 512
[  226.606965][ T9924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  226.623691][  T787] usb 3-1: GET_CAPABILITIES returned 0
[  226.637177][  T787] usbtmc 3-1:16.0: can't read capabilities
[  226.671882][ T9924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.691597][ T9928] loop1: detected capacity change from 0 to 4096
[  226.703436][ T9924] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.768746][ T9932] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.841257][ T9928] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  226.886100][  T967] usb 3-1: USB disconnect, device number 18
[  226.910388][ T9928] Remounting filesystem read-only
[  226.917497][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.075877][ T9940] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  227.075877][ T9940] The task syz.0.1376 (9940) triggered the difference, watch for misbehavior.
[  227.154970][ T9939] loop1: detected capacity change from 0 to 2048
[  227.203154][ T9939] Alternate GPT is invalid, using primary GPT.
[  227.211378][ T9939]  loop1: p2 p3 p7
[  227.262525][ T9945] loop4: detected capacity change from 0 to 256
[  227.321234][ T9945] FAT-fs (loop4): Directory bread(block 64) failed
[  227.342264][ T9945] FAT-fs (loop4): Directory bread(block 65) failed
[  227.353455][ T9945] FAT-fs (loop4): Directory bread(block 66) failed
[  227.362643][ T9945] FAT-fs (loop4): Directory bread(block 67) failed
[  227.393202][ T9945] FAT-fs (loop4): Directory bread(block 68) failed
[  227.412110][ T9945] FAT-fs (loop4): Directory bread(block 69) failed
[  227.432455][ T9945] FAT-fs (loop4): Directory bread(block 70) failed
[  227.460233][ T9945] FAT-fs (loop4): Directory bread(block 71) failed
[  227.485723][ T9945] FAT-fs (loop4): Directory bread(block 72) failed
[  227.506043][ T9945] FAT-fs (loop4): Directory bread(block 73) failed
[  227.611422][ T6275] udevd[6275]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  227.634857][ T5904] udevd[5904]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  227.645469][ T6578] udevd[6578]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  227.650277][   T27] audit: type=1800 audit(1770641010.328:34): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1379" name="file0" dev="loop4" ino=1048619 res=0 errno=0
[  227.698309][ T9945] syz.4.1379: attempt to access beyond end of device
[  227.698309][ T9945] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  227.735837][   T27] audit: type=1800 audit(1770641010.368:35): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1379" name="file0" dev="loop4" ino=1048619 res=0 errno=0
[  228.009709][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'.
[  228.041829][ T9963] loop4: detected capacity change from 0 to 256
[  228.066855][ T9963] exfat: Deprecated parameter 'utf8'
[  228.078906][ T9963] exfat: Deprecated parameter 'namecase'
[  228.094335][ T9963] exfat: Deprecated parameter 'utf8'
[  228.155410][ T9963] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  228.270432][ T9969] misc userio: Begin command sent, but we're already running
[  228.674921][ T9977] loop1: detected capacity change from 0 to 4096
[  228.725041][ T9977] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  228.754022][ T9977] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  229.146224][ T9990] loop2: detected capacity change from 0 to 256
[  229.172158][ T9990] exfat: Deprecated parameter 'utf8'
[  229.221630][ T9990] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  229.322561][ T9994] loop4: detected capacity change from 0 to 128
[  229.359231][ T9994] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.418184][ T9994] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.640238][ T6644] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.735162][T10018] loop4: detected capacity change from 0 to 32768
[  230.752856][T10018] (syz.4.1412,10018,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  230.775023][T10018] (syz.4.1412,10018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  230.803135][T10018] JBD2: Ignoring recovery information on journal
[  230.855646][T10018] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  230.857706][   T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  231.004936][ T6644] ocfs2: Unmounting device (7,4) on (node local)
[  231.067573][   T23] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  231.088969][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.107152][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.127143][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.135252][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.144831][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.161607][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.170378][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.179723][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.196087][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.204449][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.214892][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.226440][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.234857][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.249591][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.263793][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.272227][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.281484][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.293807][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.312709][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.324106][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.340638][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.351670][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  231.383077][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  231.404869][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.429312][   T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  231.439402][   T23] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  231.449396][   T23] usb 2-1: Product: syz
[  231.453906][   T23] usb 2-1: Manufacturer: syz
[  231.462191][   T23] usb 2-1: SerialNumber: syz
[  231.475439][   T23] usb 2-1: config 0 descriptor??
[  231.501541][   T23] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  231.966486][  T787] usb 2-1: USB disconnect, device number 16
[  231.994873][  T787] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  232.597821][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  232.625906][T10048] loop2: detected capacity change from 0 to 131072
[  232.647849][T10048] F2FS-fs (loop2): invalid crc value
[  232.661571][T10048] F2FS-fs (loop2): Found nat_bits in checkpoint
[  232.712486][T10048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  232.747254][  T787] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  232.798133][    T8] usb 1-1: Using ep0 maxpacket: 32
[  232.823248][    T8] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  232.851323][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.869948][    T8] usb 1-1: Product: syz
[  232.907229][    T8] usb 1-1: Manufacturer: syz
[  232.911880][    T8] usb 1-1: SerialNumber: syz
[  232.930441][    T8] usb 1-1: config 0 descriptor??
[  232.984453][  T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  232.997116][  T787] usb 5-1: config 0 has no interface number 0
[  233.007167][  T787] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.025251][T10074] loop1: detected capacity change from 0 to 4096
[  233.033863][  T787] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.067432][  T787] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  233.094900][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.115626][T10074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.117963][  T787] usb 5-1: config 0 descriptor??
[  233.171103][    T8] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  233.252659][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.357295][    T8] usb 1-1: reset high-speed USB device number 11 using dummy_hcd
[  233.552270][  T787] prodikeys 0003:041E:2801.000B: unknown main item tag 0x5
[  233.571963][  T787] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0
[  233.597186][  T787] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0
[  233.604462][  T787] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0
[  233.642830][  T787] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0
[  233.661958][  T787] prodikeys 0003:041E:2801.000B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1
[  233.695097][  T787] hid_prodikeys: hid-prodikeys: failed to find output report
[  233.695097][  T787] 
[  233.877280][    T8] usb 1-1: device descriptor read/64, error -71
[  233.989772][  T967] usb 5-1: USB disconnect, device number 13
[  234.167345][    T8] usb 1-1: reset high-speed USB device number 11 using dummy_hcd
[  234.442012][T10094] loop4: detected capacity change from 0 to 256
[  234.495156][T10094] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  234.515469][T10094] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  234.586083][    T8] usb 1-1: [UEAGLE-ATM] interface 1 not found
[  234.602334][    T8] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  234.627430][    T8] usb 1-1: USB disconnect, device number 11
[  234.911711][T10109] input: syz0 as /devices/virtual/input/input14
[  235.097264][  T787] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  235.157194][  T967] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  235.299680][  T787] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  235.314122][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.329817][  T787] usb 5-1: config 0 descriptor??
[  235.337340][  T967] usb 2-1: Using ep0 maxpacket: 32
[  235.357345][  T967] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  235.375507][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.408874][  T967] usb 2-1: config 0 descriptor??
[  235.649349][  T967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  235.675963][  T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  235.696292][  T967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  235.727424][  T967] usb 2-1: media controller created
[  235.766981][  T787] hackrf 5-1:0.0: Board ID: 00
[  235.770749][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  235.778336][  T787] hackrf 5-1:0.0: Firmware version: 
[  235.806978][  T787] hackrf 5-1:0.0: Registered as swradio24
[  235.827934][  T787] videodev: could not get a free minor
[  235.840124][  T787] hackrf 5-1:0.0: Failed to register as video device (-23)
[  235.869999][  T787] hackrf: probe of 5-1:0.0 failed with error -23
[  235.887514][  T967] az6027: usb out operation failed. (-71)
[  235.900571][  T967] az6027: usb out operation failed. (-71)
[  235.932534][  T967] stb0899_attach: Driver disabled by Kconfig
[  235.940227][  T967] az6027: no front-end attached
[  235.940227][  T967] 
[  235.951350][  T967] az6027: usb out operation failed. (-71)
[  235.960279][  T967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  236.016578][  T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15
[  236.049455][  T787] usb 5-1: USB disconnect, device number 14
[  236.064433][  T967] dvb-usb: schedule remote query interval to 400 msecs.
[  236.084406][  T967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  236.104282][  T967] usb 2-1: USB disconnect, device number 17
[  236.242894][  T967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  236.671730][T10153] random: crng reseeded on system resumption
[  237.367407][T10167] loop2: detected capacity change from 0 to 4096
[  237.386576][T10167] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  237.411990][T10171] loop1: detected capacity change from 0 to 256
[  237.440228][T10171] exfat: Deprecated parameter 'namecase'
[  237.481195][T10167] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  237.494669][T10171] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  237.522906][T10167] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  237.587219][T10167] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  237.665554][T10167] ntfs: volume version 3.1.
[  237.973150][   T12] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  238.007793][ T5764] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  238.077955][T10155] loop4: detected capacity change from 0 to 32768
[  238.110131][T10179] loop1: detected capacity change from 0 to 1024
[  238.152086][T10179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  238.181585][T10181] loop0: detected capacity change from 0 to 2048
[  238.188956][T10179] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.217473][   T27] audit: type=1800 audit(1770641020.888:36): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1477" name="file1" dev="loop1" ino=15 res=0 errno=0
[  238.241341][T10179] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.1477: lblock 0 mapped to illegal pblock 0 (length 6)
[  238.261268][T10155] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  238.310859][T10179] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.1477: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  238.396445][T10181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.407966][T10195] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.1477: lblock 0 mapped to illegal pblock 0 (length 1)
[  238.510025][T10199] loop2: detected capacity change from 0 to 2048
[  238.535441][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  238.619943][ T6644] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.635758][T10199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.684393][T10199] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.686019][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.785090][T10199] fs-verity: sha512 using implementation "sha512-avx2"
[  238.835110][T10199] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[  238.883977][T10199] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28
[  239.011072][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.399153][T10219] loop4: detected capacity change from 0 to 64
[  239.436197][T10219] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  239.833240][T10228] tap0: tun_chr_ioctl cmd 2147767520
[  240.153484][T10217] loop2: detected capacity change from 0 to 40427
[  240.188378][T10217] F2FS-fs (loop2): invalid crc value
[  240.228418][T10217] F2FS-fs (loop2): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root
[  240.274553][T10217] F2FS-fs (loop2): Found nat_bits in checkpoint
[  240.390046][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1500'.
[  240.414628][T10244] loop0: detected capacity change from 0 to 4096
[  240.438685][T10244] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  240.492074][T10217] F2FS-fs (loop2): Start checkpoint disabled!
[  240.509293][T10244] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  240.532529][T10217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  240.537125][T10244] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  240.545249][T10248] loop4: detected capacity change from 0 to 512
[  240.581083][T10244] ntfs: volume version 3.1.
[  240.640409][T10248] EXT4-fs (loop4): 1 truncate cleaned up
[  240.656758][T10217] F2FS-fs (loop2): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root
[  240.698445][T10248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.906443][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.139462][T10240] loop1: detected capacity change from 0 to 32768
[  241.174901][T10240] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1498 (10240)
[  241.211873][T10240] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  241.238453][T10240] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  241.252448][T10240] BTRFS info (device loop1): using free space tree
[  241.445477][T10275] loop0: detected capacity change from 0 to 512
[  241.463565][T10240] BTRFS info (device loop1): enabling ssd optimizations
[  241.511588][T10274] loop2: detected capacity change from 0 to 8192
[  241.519465][T10240] BTRFS info (device loop1): auto enabling async discard
[  241.530644][T10274] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  241.571331][T10275] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  241.585160][T10274] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  241.600210][T10275] EXT4-fs (loop0): orphan cleanup on readonly fs
[  241.625444][T10274] REISERFS (device loop2): using ordered data mode
[  241.648458][T10274] reiserfs: using flush barriers
[  241.676052][T10274] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  241.743841][T10275] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.1507: corrupted inode contents
[  241.758849][T10274] REISERFS (device loop2): checking transaction log (loop2)
[  241.783649][T10275] EXT4-fs (loop0): Remounting filesystem read-only
[  241.798218][T10275] EXT4-fs (loop0): 1 truncate cleaned up
[  241.830751][   T11] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  241.855395][   T11] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  241.871785][   T11] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  241.903588][T10275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  241.924966][ T5766] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.074123][T10274] REISERFS (device loop2): Using tea hash to sort names
[  242.102489][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.117040][T10274] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  242.612029][T10292] loop1: detected capacity change from 0 to 512
[  242.754113][T10296] loop4: detected capacity change from 0 to 128
[  242.901956][T10298] loop2: detected capacity change from 0 to 256
[  243.277356][T10288] loop0: detected capacity change from 0 to 32768
[  243.304972][T10288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1511 (10288)
[  243.389022][T10288] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.429021][T10288] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  243.471753][T10288] BTRFS info (device loop0): turning off barriers
[  243.498620][T10288] BTRFS info (device loop0): setting nodatasum
[  243.518424][T10288] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  243.538938][T10288] BTRFS info (device loop0): use zstd compression, level 3
[  243.546357][T10288] BTRFS info (device loop0): using free space tree
[  243.969233][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.157004][ T6275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (6275)
[  244.988459][ T7370] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 60 seconds
[  244.999310][ T7370] block nbd0: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 60 seconds
[  245.010827][ T7370] block nbd0: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 60 seconds
[  245.022106][ T7370] block nbd0: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 60 seconds
[  245.217722][   T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  245.334250][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  245.334263][   T27] audit: type=1326 audit(1770641028.008:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.342156][   T27] audit: type=1326 audit(1770641028.018:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.343807][   T27] audit: type=1326 audit(1770641028.018:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.344210][   T27] audit: type=1326 audit(1770641028.018:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.344250][   T27] audit: type=1326 audit(1770641028.018:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.346241][   T27] audit: type=1326 audit(1770641028.018:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.346285][   T27] audit: type=1326 audit(1770641028.018:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f399af79 code=0x7ffc0000
[  245.410628][   T23] usb 3-1: Using ep0 maxpacket: 8
[  245.417452][   T23] usb 3-1: config 3 has an invalid interface number: 116 but max is 0
[  245.417478][   T23] usb 3-1: config 3 has no interface number 0
[  245.417517][   T23] usb 3-1: config 3 interface 116 has no altsetting 0
[  245.428274][   T23] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=26.6d
[  245.428304][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.428323][   T23] usb 3-1: Product: syz
[  245.428339][   T23] usb 3-1: Manufacturer: syz
[  245.428354][   T23] usb 3-1: SerialNumber: syz
[  245.582750][T10385] program syz.0.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.617413][T10386] netlink: 'syz.4.1546': attribute type 39 has an invalid length.
[  245.663018][   T23] viperboard 3-1:3.116: version 0.00 found at bus 003 address 019
[  245.723266][   T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  245.723289][   T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  245.731437][   T23] usb 3-1: USB disconnect, device number 19
[  246.180052][T10394] set_capacity_and_notify: 1 callbacks suppressed
[  246.180067][T10394] loop0: detected capacity change from 0 to 2048
[  246.208347][T10398] bond0: option all_slaves_active: invalid value (5)
[  246.209640][T10394] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  246.233363][T10394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.424222][T10402] loop4: detected capacity change from 0 to 256
[  246.463802][T10402] exfat: Deprecated parameter 'namecase'
[  246.517934][T10406] loop0: detected capacity change from 0 to 128
[  246.535820][T10406] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  246.548904][T10402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  246.552946][T10406] hpfs: filesystem error: improperly stopped
[  246.597627][T10406] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  246.621699][T10406] hpfs: You really don't want any checks? You are crazy...
[  246.632235][T10406] hpfs: hpfs_map_sector(): read error
[  246.637601][    T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  246.662690][T10406] hpfs: code page support is disabled
[  246.674445][T10406] hpfs: hpfs_map_4sectors(): unaligned read
[  246.712711][T10406] hpfs: hpfs_map_4sectors(): unaligned read
[  246.723351][T10406] hpfs: filesystem error: unable to find root dir
[  246.814214][T10406] hpfs: hpfs_map_4sectors(): unaligned read
[  246.840731][T10406] hpfs: hpfs_map_sector(): read error
[  246.857185][    T8] usb 2-1: Using ep0 maxpacket: 32
[  246.877320][    T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  246.885584][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  246.927533][T10411] loop4: detected capacity change from 0 to 16
[  246.945099][    T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  246.958791][    T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  246.983084][T10411] erofs: (device loop4): mounted with root inode @ nid 36.
[  247.006193][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  247.024878][   T27] audit: type=1800 audit(1770641029.698:44): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1559" name="file1" dev="loop4" ino=86 res=0 errno=0
[  247.078644][    T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  247.098942][    T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  247.119014][T10415] vivid-000: disconnect
[  247.122104][    T8] usb 2-1: Product: syz
[  247.142763][    T8] usb 2-1: Manufacturer: syz
[  247.152276][T10414] vivid-000: reconnect
[  247.160324][    T8] usb 2-1: SerialNumber: syz
[  247.171084][    T8] usb 2-1: config 0 descriptor??
[  247.186048][    T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  247.218536][    T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  247.407364][   T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  247.587315][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  247.619413][   T42] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  247.629524][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.645902][   T42] usb 3-1: config 0 descriptor??
[  247.683104][T10433] loop4: detected capacity change from 0 to 2048
[  247.716749][  T787] usb 2-1: USB disconnect, device number 18
[  247.728748][T10433]  loop4: p1 < > p3
[  247.736083][  T787] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  247.738590][T10433] loop4: p3 size 134217728 extends beyond EOD, truncated
[  247.793631][    T8] usb 1-1: Using ep0 maxpacket: 16
[  247.803500][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  247.821187][    T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  247.833589][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.842727][    T8] usb 1-1: Product: syz
[  247.854228][    T8] usb 1-1: Manufacturer: syz
[  247.859133][    T8] usb 1-1: SerialNumber: syz
[  247.869985][    T8] usb 1-1: config 0 descriptor??
[  247.881109][    T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  247.902068][    T8] usb 1-1: Detected FT232R
[  248.016001][  T967] IPVS: starting estimator thread 0...
[  248.024525][T10437] IPVS: sed: FWM 3 0x00000003 - no destination available
[  248.032928][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[  248.108613][T10438] IPVS: using max 22 ests per chain, 52800 per kthread
[  248.112401][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  248.241282][T10443] netlink: 'syz.4.1572': attribute type 25 has an invalid length.
[  248.249564][T10443] netlink: 'syz.4.1572': attribute type 7 has an invalid length.
[  248.267216][T10443] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1572'.
[  248.345833][    T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  248.510138][   T42] usb 3-1: Cannot set autoneg
[  248.515035][   T42] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  248.530696][   T42] usb 3-1: USB disconnect, device number 20
[  248.605605][  T967] usb 1-1: USB disconnect, device number 12
[  248.665788][  T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  248.689939][  T967] ftdi_sio 1-1:0.0: device disconnected
[  248.947364][    T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  249.077821][ T5829] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  249.160153][    T8] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  249.188569][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.215886][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1582'.
[  249.215999][    T8] usb 2-1: Product: syz
[  249.235304][    T8] usb 2-1: Manufacturer: syz
[  249.243727][    T8] usb 2-1: SerialNumber: syz
[  249.254088][    T8] hub 2-1:24.0: bad descriptor, ignoring hub
[  249.261994][    T8] hub: probe of 2-1:24.0 failed with error -5
[  249.288658][ T5829] usb 5-1: Using ep0 maxpacket: 16
[  249.302572][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.315110][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.326064][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  249.345599][ T5829] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  249.357755][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.398510][ T5829] usb 5-1: config 0 descriptor??
[  249.464499][    T8] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  249.470322][T10468] erspan0: entered promiscuous mode
[  249.505572][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  249.516377][    T8] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  249.525795][    T8] usb 2-1: media controller created
[  249.608004][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  249.767431][    T8] DVB: Unable to find symbol dib7000p_attach()
[  249.786003][    T8] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  249.834542][ T5829] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.867163][ T5829] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  249.927340][    T8] rc_core: IR keymap rc-dib0700-rc5 not found
[  249.943720][    T8] Registered IR keymap rc-empty
[  249.954152][    T8] dvb-usb: could not initialize remote control.
[  249.967120][    T8] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  250.005527][    T8] usb 2-1: USB disconnect, device number 19
[  250.053697][ T5829] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[  250.104159][ T5829] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  250.127972][    T8] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  250.154364][ T5829] microsoft 0003:045E:07DA.000C: no inputs found
[  250.163905][ T5829] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  250.347296][ T5829] usb 5-1: USB disconnect, device number 15
[  250.487991][T10491] random: crng reseeded on system resumption
[  250.517594][T10477] loop0: detected capacity change from 0 to 40427
[  250.536575][T10477] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  250.546883][T10477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  250.578047][T10477] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff
[  250.614822][T10477] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  250.651117][T10477] F2FS-fs (loop0): invalid crc value
[  250.671102][T10477] F2FS-fs (loop0): Found nat_bits in checkpoint
[  250.751816][T10477] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  250.761045][T10477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  250.865948][T10477] syz.0.1588: attempt to access beyond end of device
[  250.865948][T10477] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.903434][T10477] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  251.259629][T10492] loop2: detected capacity change from 0 to 32768
[  251.334361][T10492] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  251.632879][ T5764] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.059567][T10504] loop1: detected capacity change from 0 to 32768
[  252.095390][T10504] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.179273][T10504] XFS (loop1): Ending clean mount
[  252.194547][T10529] loop4: detected capacity change from 0 to 2048
[  252.209624][T10504] XFS (loop1): Quotacheck needed: Please wait.
[  252.214444][T10529] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.249055][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.392040][T10504] XFS (loop1): Quotacheck: Done.
[  252.504325][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.694022][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.796088][T10545] netlink: 'syz.0.1606': attribute type 39 has an invalid length.
[  253.036455][T10551] loop4: detected capacity change from 0 to 4096
[  253.080715][T10554] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.130646][   T27] audit: type=1800 audit(1770641035.808:45): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1608" name="file1" dev="loop4" ino=15 res=0 errno=0
[  253.313692][T10558] loop1: detected capacity change from 0 to 512
[  253.394550][T10558] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1607: corrupted in-inode xattr: invalid ea_ino
[  253.462249][T10558] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1607: couldn't read orphan inode 15 (err -117)
[  253.500408][T10558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.731458][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.998872][T10577] loop0: detected capacity change from 0 to 47
[  254.220741][T10581] loop4: detected capacity change from 0 to 2048
[  254.279218][T10584] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.447688][T10584] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 1407374883553282) > current cno (= 3)
[  254.495216][T10584] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16)
[  254.547158][T10584] Remounting filesystem read-only
[  254.587868][T10587] NILFS (loop4): error -2 truncating bmap (ino=16)
[  254.666759][ T6644] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  254.686622][ T6644] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  254.704923][ T6644] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  254.729523][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.747443][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.777646][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.808534][ T6644] NILFS (loop4): discard dirty page: offset=0, ino=5
[  254.815835][ T6644] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  254.852898][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.873373][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.887091][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.906922][ T6644] NILFS (loop4): discard dirty page: offset=0, ino=3
[  254.924584][ T6644] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  254.937385][ T6644] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  254.955602][ T6644] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  254.967108][ T6644] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  254.972708][T10579] loop1: detected capacity change from 0 to 40427
[  254.983949][ T6644] NILFS (loop4): discard dirty page: offset=4096, ino=3
[  255.001188][ T6644] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  255.016377][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  255.018674][T10579] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  255.056510][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  255.060673][T10579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  255.077368][ T6644] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  255.084536][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'.
[  255.101676][T10579] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  255.110605][T10579] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8
[  255.153781][T10579] F2FS-fs (loop1): invalid crc value
[  255.181103][T10579] F2FS-fs (loop1): Found nat_bits in checkpoint
[  255.348177][T10579] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  255.356827][T10579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  255.499198][T10579] syz.1.1619: attempt to access beyond end of device
[  255.499198][T10579] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  255.551969][T10579] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  255.763474][T10611] loop0: detected capacity change from 0 to 4096
[  255.832227][T10619] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.862330][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  255.871029][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.432882][T10629] loop0: detected capacity change from 0 to 512
[  256.467204][T10629] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  256.513538][T10629] EXT4-fs (loop0): 1 truncate cleaned up
[  256.579689][T10629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.653232][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'.
[  256.664419][T10616] loop4: detected capacity change from 0 to 32768
[  256.834188][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.647734][  T787] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  257.857518][  T787] usb 1-1: Using ep0 maxpacket: 32
[  257.887821][  T787] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  257.896058][  T787] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  257.909811][  T787] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  257.921359][  T787] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  257.936955][  T787] usb 1-1: config 0 interface 0 has no altsetting 0
[  257.946524][  T787] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  257.958158][  T787] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  257.966627][  T787] usb 1-1: Product: syz
[  257.971060][  T787] usb 1-1: Manufacturer: syz
[  257.975678][  T787] usb 1-1: SerialNumber: syz
[  257.993129][  T787] usb 1-1: config 0 descriptor??
[  258.002668][  T787] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  258.015684][  T787] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  258.538099][  T787] usb 1-1: USB disconnect, device number 13
[  258.559321][  T787] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  258.731728][T10669] loop1: detected capacity change from 0 to 32768
[  258.769414][T10669] JBD2: Ignoring recovery information on journal
[  258.801582][T10684] loop2: detected capacity change from 0 to 1024
[  258.811370][T10684] EXT4-fs: Ignoring removed orlov option
[  258.820042][T10669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  258.924811][T10684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.031148][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.059407][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  259.371481][T10698] loop1: detected capacity change from 0 to 16
[  259.407577][T10698] erofs: (device loop1): mounted with root inode @ nid 36.
[  259.927915][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'.
[  260.897598][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'.
[  261.375520][T10765] input: syz0 as /devices/virtual/input/input17
[  261.414302][T10768] program syz.4.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.279273][T10791] loop2: detected capacity change from 0 to 128
[  262.320351][T10791] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.368446][T10791] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.449005][T10791] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10)
[  262.501445][ T5764] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  262.587188][  T967] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  262.818077][  T967] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  262.826296][  T967] usb 5-1: config 0 has no interface number 0
[  262.849961][  T967] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  262.873140][  T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.882420][  T967] usb 5-1: Product: syz
[  262.891559][T10809] loop2: detected capacity change from 0 to 256
[  262.909984][  T967] usb 5-1: Manufacturer: syz
[  262.914634][  T967] usb 5-1: SerialNumber: syz
[  262.922654][  T967] usb 5-1: config 0 descriptor??
[  263.009431][T10809] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  263.076465][T10813] loop1: detected capacity change from 0 to 2048
[  263.085402][T10813] UDF-fs: bad mount option "vL��olume=000000000063" or missing value
[  263.117219][T10809] syz.2.1717: attempt to access beyond end of device
[  263.117219][T10809] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  263.166060][T10809] syz.2.1717: attempt to access beyond end of device
[  263.166060][T10809] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  263.247190][T10814] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  263.265268][T10814] exFAT-fs (loop2): Filesystem has been set read-only
[  263.286211][   T27] audit: type=1800 audit(1770641045.958:46): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1717" name="file1" dev="loop2" ino=1048636 res=0 errno=0
[  263.566629][  T967] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  263.582921][  T967] asix: probe of 5-1:0.251 failed with error -524
[  263.715155][T10811] loop0: detected capacity change from 0 to 40427
[  263.730919][T10811] F2FS-fs (loop0): invalid crc value
[  263.744250][T10811] F2FS-fs (loop0): Found nat_bits in checkpoint
[  263.784459][  T967] usb 5-1: USB disconnect, device number 16
[  263.832154][T10811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  263.898890][T10811] syz.0.1718: attempt to access beyond end of device
[  263.898890][T10811] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  263.935144][ T5767] syz-executor: attempt to access beyond end of device
[  263.935144][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.950069][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  263.967474][ T5829] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  264.147230][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  264.155840][ T5829] usb 2-1: too many configurations: 23, using maximum allowed: 8
[  264.190833][ T5829] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  264.200667][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.216063][ T5829] usb 2-1: Product: syz
[  264.224614][ T5829] usb 2-1: Manufacturer: syz
[  264.232936][ T5829] usb 2-1: SerialNumber: syz
[  264.258278][ T5829] usb 2-1: config 0 descriptor??
[  264.450673][T10839] loop2: detected capacity change from 0 to 512
[  264.515682][ T5829] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  264.519080][T10839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.722019][T10851] loop4: detected capacity change from 0 to 256
[  264.739102][T10839] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  264.780389][T10839] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  264.825612][T10851] FAT-fs (loop4): Directory bread(block 64) failed
[  264.861760][T10851] FAT-fs (loop4): Directory bread(block 65) failed
[  264.873136][T10854] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1734'.
[  264.877363][T10851] FAT-fs (loop4): Directory bread(block 66) failed
[  264.897838][T10851] FAT-fs (loop4): Directory bread(block 67) failed
[  264.904576][T10851] FAT-fs (loop4): Directory bread(block 68) failed
[  264.916346][T10851] FAT-fs (loop4): Directory bread(block 69) failed
[  264.919962][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.925445][T10851] FAT-fs (loop4): Directory bread(block 70) failed
[  264.940616][T10851] FAT-fs (loop4): Directory bread(block 71) failed
[  264.965147][T10851] FAT-fs (loop4): Directory bread(block 72) failed
[  264.977397][T10851] FAT-fs (loop4): Directory bread(block 73) failed
[  265.142230][ T5829] usb write operation failed. (-71)
[  265.162964][ T5829] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  265.195696][ T5829] dvbdev: DVB: registering new adapter (Terratec H7)
[  265.207980][ T5829] usb 2-1: media controller created
[  265.218063][ T5829] usb read operation failed. (-71)
[  265.242667][ T5829] usb write operation failed. (-71)
[  265.263885][ T5829] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5
[  265.297388][ T5829] usb 2-1: USB disconnect, device number 20
[  265.531507][T10864] dvmrp1: tun_chr_ioctl cmd 1074025677
[  265.545241][T10864] dvmrp1: linktype set to 804
[  266.273601][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'.
[  266.320356][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'.
[  266.342943][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'.
[  266.581877][T10877] loop2: detected capacity change from 0 to 32768
[  266.632747][T10877] JBD2: Ignoring recovery information on journal
[  266.633793][T10891] loop0: detected capacity change from 0 to 512
[  266.763769][T10877] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  266.859959][T10891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.946589][   T27] audit: type=1800 audit(1770641049.608:47): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1743" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  267.049625][T10877] 
[  267.052012][T10877] ======================================================
[  267.059734][T10877] WARNING: possible circular locking dependency detected
[  267.066766][T10877] syzkaller #0 Not tainted
[  267.070358][T10889] loop4: detected capacity change from 0 to 32768
[  267.071170][T10877] ------------------------------------------------------
[  267.071178][T10877] syz.2.1743/10877 is trying to acquire lock:
[  267.091159][T10877] ffff8880590614a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340
[  267.102770][T10877] 
[  267.102770][T10877] but task is already holding lock:
[  267.110144][T10877] ffff888059061538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340
[  267.120876][T10877] 
[  267.120876][T10877] which lock already depends on the new lock.
[  267.120876][T10877] 
[  267.131286][T10877] 
[  267.131286][T10877] the existing dependency chain (in reverse order) is:
[  267.140303][T10877] 
[  267.140303][T10877] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  267.148147][T10877]        down_read+0x46/0x2e0
[  267.152848][T10877]        ocfs2_init_acl+0x30a/0x770
[  267.158072][T10877]        ocfs2_mknod+0x140f/0x2300
[  267.163196][T10877]        ocfs2_mkdir+0x196/0x430
[  267.168148][T10877]        vfs_mkdir+0x296/0x440
[  267.172923][T10877]        do_mkdirat+0x1dc/0x450
[  267.177791][T10877]        __x64_sys_mkdirat+0x89/0xa0
[  267.183093][T10877]        do_syscall_64+0x55/0xa0
[  267.188081][T10877]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.194511][T10877] 
[  267.194511][T10877] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  267.203046][T10877]        down_read+0x46/0x2e0
[  267.207747][T10877]        ocfs2_start_trans+0x3a8/0x6f0
[  267.213212][T10877]        ocfs2_reserve_suballoc_bits+0x7ad/0x44c0
[  267.219639][T10877]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  267.226502][T10877]        ocfs2_extend_dir+0xcca/0x48b0
[  267.231966][T10877]        ocfs2_prepare_dir_for_insert+0x315b/0x56b0
[  267.238563][T10877]        ocfs2_mknod+0x81b/0x2300
[  267.243599][T10877]        ocfs2_mkdir+0x196/0x430
[  267.248541][T10877]        vfs_mkdir+0x296/0x440
[  267.253318][T10877]        do_mkdirat+0x1dc/0x450
[  267.258175][T10877]        __x64_sys_mkdirat+0x89/0xa0
[  267.263650][T10877]        do_syscall_64+0x55/0xa0
[  267.268619][T10877]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.275030][T10877] 
[  267.275030][T10877] -> #1 (sb_internal#6){.+.+}-{0:0}:
[  267.282501][T10877]        ocfs2_start_trans+0x2a9/0x6f0
[  267.287960][T10877]        ocfs2_extend_dir+0x1113/0x48b0
[  267.293496][T10877]        ocfs2_prepare_dir_for_insert+0x3fdc/0x56b0
[  267.300072][T10877]        ocfs2_mknod+0x81b/0x2300
[  267.305093][T10877]        ocfs2_create+0x196/0x430
[  267.310126][T10877]        vfs_create+0x1f4/0x360
[  267.314972][T10877]        do_mknodat+0x3d0/0x500
[  267.319823][T10877]        __x64_sys_mknod+0x8e/0xa0
[  267.324922][T10877]        do_syscall_64+0x55/0xa0
[  267.329856][T10877]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.336260][T10877] 
[  267.336260][T10877] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  267.345116][T10877]        __lock_acquire+0x2df1/0x7d40
[  267.350488][T10877]        lock_acquire+0x19e/0x420
[  267.355512][T10877]        down_write+0x97/0x200
[  267.360276][T10877]        ocfs2_try_remove_refcount_tree+0xb7/0x340
[  267.367120][T10877]        ocfs2_truncate_file+0xde5/0x1440
[  267.372831][T10877]        ocfs2_setattr+0x158d/0x1bc0
[  267.378110][T10877]        notify_change+0xb0d/0xe10
[  267.383213][T10877]        do_truncate+0x1b0/0x240
[  267.388146][T10877]        vfs_truncate+0x266/0x300
[  267.393189][T10877]        do_sys_truncate+0xf6/0x1c0
[  267.398417][T10877]        do_syscall_64+0x55/0xa0
[  267.403448][T10877]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.409865][T10877] 
[  267.409865][T10877] other info that might help us debug this:
[  267.409865][T10877] 
[  267.420085][T10877] Chain exists of:
[  267.420085][T10877]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  267.420085][T10877] 
[  267.435913][T10877]  Possible unsafe locking scenario:
[  267.435913][T10877] 
[  267.443353][T10877]        CPU0                    CPU1
[  267.448703][T10877]        ----                    ----
[  267.454063][T10877]   lock(&oi->ip_xattr_sem);
[  267.458650][T10877]                                lock(&journal->j_trans_barrier);
[  267.466445][T10877]                                lock(&oi->ip_xattr_sem);
[  267.473633][T10877]   lock(&ocfs2_file_ip_alloc_sem_key);
[  267.479177][T10877] 
[  267.479177][T10877]  *** DEADLOCK ***
[  267.479177][T10877] 
[  267.487305][T10877] 3 locks held by syz.2.1743/10877:
[  267.492486][T10877]  #0: ffff8880597f2418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  267.501716][T10877]  #1: ffff888059061818 (&sb->s_type->i_mutex_key#39){+.+.}-{3:3}, at: do_truncate+0x19c/0x240
[  267.512067][T10877]  #2: ffff888059061538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340
[  267.523119][T10877] 
[  267.523119][T10877] stack backtrace:
[  267.529006][T10877] CPU: 0 PID: 10877 Comm: syz.2.1743 Not tainted syzkaller #0
[  267.536456][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  267.547096][T10877] Call Trace:
[  267.550379][T10877]  <TASK>
[  267.553308][T10877]  dump_stack_lvl+0x18c/0x250
[  267.558038][T10877]  ? load_image+0x400/0x400
[  267.564295][T10877]  ? show_regs_print_info+0x20/0x20
[  267.569503][T10877]  ? print_circular_bug+0x12b/0x1a0
[  267.574699][T10877]  check_noncircular+0x2fc/0x400
[  267.579637][T10877]  ? print_deadlock_bug+0x5d0/0x5d0
[  267.588495][T10877]  ? lockdep_lock+0xf5/0x230
[  267.593846][T10877]  ? lockdep_unlock+0x146/0x2e0
[  267.598965][T10877]  ? _find_first_zero_bit+0xd3/0x100
[  267.604454][T10877]  __lock_acquire+0x2df1/0x7d40
[  267.609325][T10877]  ? verify_lock_unused+0x140/0x140
[  267.614638][T10877]  lock_acquire+0x19e/0x420
[  267.619335][T10877]  ? ocfs2_try_remove_refcount_tree+0xb7/0x340
[  267.625499][T10877]  ? __might_sleep+0xe0/0xe0
[  267.630085][T10877]  ? read_lock_is_recursive+0x20/0x20
[  267.635456][T10877]  down_write+0x97/0x200
[  267.639696][T10877]  ? ocfs2_try_remove_refcount_tree+0xb7/0x340
[  267.645860][T10877]  ? down_read_killable+0x340/0x340
[  267.651054][T10877]  ? ocfs2_truncate_file+0xd0b/0x1440
[  267.656436][T10877]  ? __lock_acquire+0x7d40/0x7d40
[  267.661471][T10877]  ocfs2_try_remove_refcount_tree+0xb7/0x340
[  267.667545][T10877]  ? ocfs2_remove_refcount_tree+0xe50/0xe50
[  267.673525][T10877]  ? up_write+0x1c3/0x410
[  267.677847][T10877]  ocfs2_truncate_file+0xde5/0x1440
[  267.683057][T10877]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  267.688776][T10877]  ? do_raw_spin_unlock+0x121/0x230
[  267.693967][T10877]  ? _raw_spin_unlock+0x28/0x40
[  267.698808][T10877]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  267.704615][T10877]  ? ocfs2_inode_lock_atime+0x530/0x530
[  267.710163][T10877]  ? ocfs2_rw_lock+0x138/0x250
[  267.714918][T10877]  ? dquot_initialize+0x20/0x20
[  267.719767][T10877]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  267.725910][T10877]  ? setattr_prepare+0x1e6/0xac0
[  267.730839][T10877]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  267.737464][T10877]  ocfs2_setattr+0x158d/0x1bc0
[  267.742234][T10877]  ? ocfs2_extend_allocation+0x1840/0x1840
[  267.748039][T10877]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  267.753833][T10877]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  267.760068][T10877]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  267.766053][T10877]  ? current_time+0x195/0x280
[  267.770723][T10877]  ? inode_set_ctime_current+0x2e0/0x2e0
[  267.776351][T10877]  ? evm_inode_setattr+0x94/0x6a0
[  267.781374][T10877]  ? bpf_lsm_inode_setattr+0x9/0x10
[  267.786562][T10877]  ? try_break_deleg+0x79/0x120
[  267.791403][T10877]  ? ocfs2_extend_allocation+0x1840/0x1840
[  267.797206][T10877]  notify_change+0xb0d/0xe10
[  267.801791][T10877]  do_truncate+0x1b0/0x240
[  267.806295][T10877]  ? put_page_bootmem+0x2c0/0x2c0
[  267.811308][T10877]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  267.816259][T10877]  ? bpf_lsm_path_truncate+0x9/0x10
[  267.821457][T10877]  vfs_truncate+0x266/0x300
[  267.825953][T10877]  do_sys_truncate+0xf6/0x1c0
[  267.830620][T10877]  ? lock_chain_count+0x20/0x20
[  267.835465][T10877]  ? break_lease+0xd0/0xd0
[  267.839888][T10877]  ? lockdep_hardirqs_on+0x98/0x150
[  267.845088][T10877]  do_syscall_64+0x55/0xa0
[  267.849592][T10877]  ? clear_bhb_loop+0x40/0x90
[  267.854256][T10877]  ? clear_bhb_loop+0x40/0x90
[  267.859361][T10877]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.865242][T10877] RIP: 0033:0x7fbc30f9af79
[  267.869658][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.889340][T10877] RSP: 002b:00007fbc31da8028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  267.897740][T10877] RAX: ffffffffffffffda RBX: 00007fbc31215fa0 RCX: 00007fbc30f9af79
[  267.905701][T10877] RDX: 0000000000000000 RSI: 0000000000008008 RDI: 00002000000000c0
[  267.913662][T10877] RBP: 00007fbc310316e0 R08: 0000000000000000 R09: 0000000000000000
[  267.921621][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.929584][T10877] R13: 00007fbc31216038 R14: 00007fbc31215fa0 R15: 00007ffdd7e059d8
[  267.937553][T10877]  </TASK>
[  267.978591][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.045603][T10889] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.056046][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  268.142207][T10889] XFS (loop4): Ending clean mount
[  268.184320][T10905] loop0: detected capacity change from 0 to 4096
[  268.229846][ T6644] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.307439][T10905] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  268.357700][T10905] ntfs3: loop0: ino=9, attr_set_size
[  268.732100][T10898] loop1: detected capacity change from 0 to 131072
[  268.747948][T10898] F2FS-fs (loop1): invalid crc value
[  268.755817][T10898] F2FS-fs (loop1): Found nat_bits in checkpoint
[  268.799391][T10898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  272.128354][ T5139] udevd[5139]: worker [5755] /devices/virtual/block/nbd0 is taking a long time
[  275.058320][ T7370] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 90 seconds
[  275.069057][ T7370] block nbd0: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 90 seconds
[  275.081261][ T7370] block nbd0: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 90 seconds
[  275.092944][ T7370] block nbd0: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 90 seconds