last executing test programs: 6.282438052s ago: executing program 0 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff}, 0x48) 6.135488536s ago: executing program 2 (id=1021): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x8) 6.046246885s ago: executing program 0 (id=1022): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x1, &(0x7f0000000180)={[{@nogrpid}]}, 0x0, 0x97ab, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZVERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQBGQnHPOOeecc8455/2eZXcV1wN63+++L957znmenZ2urq6p/v+6qmamerqXmnfxuQYGxhwY1pQDI3fLnXMtvMlOc12xz857nTLl2BNOMXzy8BtMNvziZIOG/z/KwMDAKMOXM3zaOI+eeNIoA6O9M/3vjTPW2IPGGxiYfvjFOYb/P/Ow/yZ5bMR8Q0Zq5BUd9LeLg3YY9u+dJhj6JYZ+sszNF54zMDAw4btuP/Qm0/7THZW21Jzzzft3q7+5DbUaPPzzd/8bfdi/SR4YGJjk3gF+fLx73kEfwF0a+jUn3OnBMdf7AL72/7iWmnO++UfyH7otjjp82sxDt/GRt0FjIz/Ob151tj2GD+E7j7eBgaG7uH/YVv5HtNSc8y448N77+YGHxx7/jCHv7DfHeXZgYJznBgbGeX5gYJwXBgbGeXFgYJyXPmiX+v/XnHPNMNfQ7X3E5eHsIx7LE9LjYp81Xtx7YGBgjGHzjPP2sOPFuFOOOCZUVVXVf3ZzzjXD3HD8H/P9jv9bbzPnrR3/q6qq/uc2/5xzzTD0OD7S8X/c9zv+f/fGG9cc9rv/OWYedqu3P9g7UVVVVf+l5p0fj/8Tvt/xf4Idr9+/439VVdX/3BZb6J3j/7gjHf8nfb/j/5oL3HnZ8PlGfN/w1rsW+c7zx4ZPf+Nd00d91/TX3zV98LuW8+75R3/X9FffNX3MgYFxHh0+/c2/Tx7n2aG3+efljPPy35+PM9lo75r+yrumj/6u6a8OX6eh08d41/S33jX/mH+fPu7QD1MO/7qvvc9QV1VV/ce02Azzzj3wrufZD5884on9+LzQY47Z5q4Pan2rqqqqqqqq6r/e20+dfvbf/+b7EwPv+tvVv/0N6/DfCww69txrr/3AVvQ/o0H//PuQLT/odfr/21DnMQ+fcmBg7SU/6FWpD6D/MX+rXv9Xyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3H+f+//f3/wL1f3HH4rLNOfud9i//9lpMNrD78s1vunGvh1T+Adf8A+t96/n9g9UEDA8N9JxxqufCciy0x9cDAwOL33Tn5TAN/u26WodfNNvGo7/wx58DA1O98HDzZeyx5+LssvPPmDpP+bRnHvrP8+YfsN+qgkVbiXc1+zv0HrbbUKzOO/P/n3/t+/O39JZZ+eb+pRvwtyygjzTTme9x4xPJH3JeRnYev+9RD132aDddad5oNNtn0K6uvtcKqK6+68trTTz/djDPMNOP0X5t1mlVWX3PlaYd9fI8xG/bWFaP+O2M27shj9tSc7x6zke/bRCcfhGP2z+/q8Q+LeGeJ583+8OUjxmy0f3PMRny9Ud9/zKZcffgXmmxg8MDy7wzNoIGByUYbPLDx0AvTjTEwMNng4fNONnTeb0w8ysDATn+/o4OGv9josHkGbTl0nv+w9y2ZdfiIbDZivpFfZ33kFf1X71tywri73jnS+5b83+r/6Pj/T16zDPrbQI14A4Th8wzz+oDfZ+Kf1nfK0d45yL3X+r7P6+K8Ez2+1lrtsSX/u14Xh9Z33PdZ3/d5Hb/3XN+pp3tmz2GL+m9b35H2dQsOu/Lf2dcNvP++blS6/cpXTTHyvm6B917Ff9iOR4zRGCPN9F77up0WOG+LocsfeP993YKrD3/xgL/v60YZGJhs1BH7uqE7vtEHD+w09ML0Qy+MMXjg0KEXZnjnwlgD5w698NUV11lzpUHvvMzA8OVOO3S5c0w8aNgGdNNBq42x65Ahow1fl5fH+cd1Hf74mPLdx/M5Jx4+mMNvO2K5Q2cdsdxXtx123ejDl/vKf2G5I25L6zvZWcOuG2P4cl8dabmD32e5I277T9vD1IP+4YmqsL/5QN/XiLbfMd9nfd/ndbjx8faO+1TLPfzf8Drcg95rfUd7//V9r/cNec/1ffzyJ/b973rdcHqc3bvPsMfKmMMfZ2/9Fx6/I2478n5s2AuBDNvtj/nv7Mem/Kf92FajjjLSYL+r9/o+dyWYf/gW8belrXTgK6uPGPvBIy33X32f+677Mgj2YxOO9PPcoC32HRhEY/7omi9s9PYu7z/mgwf+8WeLEWM+4rbvN+Zj/Dtj/vH3H/ORv09+rzGf+jPDrh880vq/e8wX3X2Om0aM+egjLfdfjfkY73/s+OcxHxgYTGO+0+TDxu399qfvNeYjbjtizId+ndkmHm1gnoGBgamGj/no/86YT/bf8zgfG+Yf9vnKf5v07EyLfHnEmI88xv9qzEf/L4755vf+7XE+1TvXfXqUgdFHH9h4hQ03XH+6YR9HXJx+2EfeFz270rBxfr9j6XsZjbjt+20Xo/07RhP+W0aD/pXR5KO9l9HfN61RD1rsuf/TfdFo/1Wjc3lfdOp8w8bt/b4veq8xH3FbOg5O+q7bj/xz6Pu8fhbep3fGZ4HtRvy895/w+lkjft79H/n6WSN+J7n6yDv5+nfr9//u8neXv7v83eUv7j3O/0854vz/kHEP+PDwHzoHXzXLrXN80Ov7Afe/+vz/cN9/OP8/x62zXDX0R6vh173v+dlh8/xHnp+dedh/kzw2Yr6Rzw+OvKL/6vzsPrtteNX/o/Oz/0eN2Fb/jZ+L2/+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3H+f9pRzwP4KElFv7e8BOhgzeb7qjNPuj1/YD7X33+f7jvP5z/3+yo6TYbZeBv173v+f9h8zjO/9+/0BbL/ief/x+xrXb+v/5F+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/z/HiOcBHDH7PJ8d8XyAG7bfb88Pen0/4P63nv/v/f+9tf93l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt+/n9gpLdJXKTHBQbn//9n9x7+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf/7+WMW/x/kj1n8l8ofs/gvnT9m8f9h/pjF/0f5Yxb/ZfLHLP7L5o9Z/JfLH7P4/zh/zOK/fP6YxX+F/DGL/0/yxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/n+aPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Wf6Yxf/n+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/0X+mMX/l/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8zi/6v8MYv/1vljFv9f549Z/LfJH7P4/yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP6/zR+z+P8uf8ziv2P+mMX/9/ljFv8/5I9Z/HfKH7P475w/ZvH/Y/6YxX+X/DGL/675Yxb/3fLHLP5/yh+z+P85f8ziv3v+mMX/L/ljFv898scs/nvmj1n898ofs/j/NX/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjFf0j+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/D+WPWfw/nD9m8f9I/pjFf7L8MYv/R/PHLP6T549Z/D+WP2bx/3j+mMV/ivwxi/8n8scs/p/MH7P4T5k/ZvH/VP6Yxf/T+WMW/8/kj1n8p8ofs/h/Nn/M4v+5/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/+z5Yxb/b+aPWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/2/nj1n858kfs/jPmz9m8Z8vf8zi/538MYv//PljFv/v5o9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/3v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF//v5Yxb/H+SPWfyXyh+z+C+dP2bx/2H+mMX/R/ljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9Z/pjF/+f5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Rf6Yxf+X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/q/wxi//W+WMW/1/nj1n8t8kfs/j/Jn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/r/NH7P4/y5/zOK/Y/6Yxf/3+WMW/z/kj1n8d3ov/zH/H63Xf2gW/53b/jGL/x/zxyz+u+SPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1Xv4T/4/9V6/Ydm8b+67f/dbTXiE4v/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/kPwxif87n+b/z1n8B+WPWfxHyR+z+I+aP2bxHy1/zOI/OH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1D+mMX/w/ljFv+P5I9Z/CfLH7P4fzR/zOI/ef6Yxf9j+WMW/4/nj1n8p8gfs/h/In/M4v/J/DGL/5T5Yxb/T+WPWfw/nT9m8f9M/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8ziP3X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+v5Y9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/+v5Yxb/2fLHLP7fyB+z+M+eP2bx/2b+mMX/W/ljFv858scs/nPmj1n858ofs/jPnT9m8f92/pjFf578MYv/vPljFv/58scs/t/JH7P4z58/ZvH/bv6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+XP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/L+fP2bx/0H+mMV/qfwxi//S+WMW/x/mj1n8f5Q/ZvFfJn/M4r9s/pjFf7n8MYv/j/PHLP7L549Z/FfIH7P4/yR/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvH/af6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+f5Y9Z/H+eP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/X+SPWfx/mT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+v8of+7v/wMD/Zv+t88cs2/+v88cs/tvkj1n8f5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv/f5o9Z/H+XP2bx3zF/zOL/+/wxi/8f9P6j4VSL/056f87iv3P+mMX/j/ljFv9d8scs/rvmj1n8d8sfs/j/KX/M4v/n/DGL/+75Yxb/v+SPWfz3yB+z+O+ZP2bx3yt/zOL/1/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/yH5YxL/UQfyxyz+g/LHLP6j5I9Z/EfNH7P4j5Y/ZvEfnD9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyh/zOL/4fwxi/9H8scs/pPlj1n8P5o/ZvGfPH/M4v+x/DGL/8fzxyz+U+SPWfw/kT9m8f9k/pjFf8r8MYv/p/LHLP6fzh+z+H8mf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//X8scs/jPlj1n8Z84fs/jPkj9m8Z81f8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4fzN/zOL/rfwxi/8c+Y/U4Hc+WvznzB+z+M+VP2bxnzt/zOL/7fwxi/88+WMW/3nzxyz+8+WPWfy/kz9m8Z8/f8zi/938MYv/AvljFv8F88cs/gvlj1n8F84fs/h/L3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/P3/M4v+D/DGL/1L5Yxb/pfPHLP4/zB+z+P8of8ziv0z+mMV/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/9P8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+P8sfs/j/PH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/r/IH7P4/zJ/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+VP2bx3zp/zOL/6/wxi/82+WMW/9/kj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/t/ljFv/f5Y9Z/HfMH7P4/z5/zOL/h/wxi/9O+WMW/53zxyz+f8wfs/jvkj9m8d81f8ziv1v+mMX/T/ljFv8/549Z/HfPH7P4/yV/zOK/R/6YxX/P/DGL/175Yxb/v+aPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF/3CV/5AJ/t05Lf5HqPz//Sz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvEfkj8m8R9tIH/M4j8of8ziP0r+mMV/1Pwxi/9o+WMW/8H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/+H8scs/h/OH7P4fyR/zOI/Wf6Yxf+j+WMW/8nzxyz+H8sfs/h/PH/M4j9F/pjF/xP5Yxb/T+aPWfynzB+z+H8qf8zi/+n8MYv/Z/LHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMV/9vwxi/8388cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/t/PHLP7z5I9Z/OfNH7P4z5c/ZvH/Tv6YxX/+/DGL/3fzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/vfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL//fwxi/8P8scs/kvlj1n8l84fs/j/MH/M4v+j/DGL/zL5Yxb/ZfPHLP7L5Y9Z/H+cP2bxXz5/zOK/Qv6Yxf8n+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/0/zxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4/yx/zOL/8/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+P8if8zi/8v8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8f9V/pjFf+v8MYv/r/PHLP7b5I9Z/H+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/3+aPWfx/lz9m8d8xf8zi//v8MYv/H/LHLP475Y9Z/HfOH7P4/zF/zOK/S/6YxX/X/DGL/275Yxb/P+WPWfz/nD9m8d89f8zi/5f8MYv/HvljFv8988cs/nvlj1n8/5o/ZvHfO3/M4r9P/pjFf9/8MYv/flL/Mf7F9Rb//aX+/yqL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+A/JH5P4Dx7IH7P4D8ofs/iPkj9m8R81f8ziP1r+mMV/cP6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/6H8MYv/h/PHLP4fyR+z+E+WP2bx/2j+mMV/8vwxi//H8scs/h/PH7P4T5E/ZvH/RP6Yxf+T+WMW/ynzxyz+n8ofs/h/On/M4v+Z/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8Z89f8zi/838MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4v/t/DGL/zz5Yxb/efPHLP7z5Y9Z/L+TP2bxnz9/zOL/3fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8vf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/j/MH7P4/yh/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXH+4/yge1Xv+hWfxXaPvHLP4/yR+z+K+YP2bxXyl/zOK/8r/0d35naPFfpe0fs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfx/lj9m8f95/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8f5E/ZvH/Zf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/yp/zOK/df6Yxf/X+WMW/23yxyz+v8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9v88cs/r/LH7P475g/ZvH/ff6Yxf8P+WMW/53yxyz+O+ePWfz/mD9m8d8lf8ziv2v+mMV/t/wxi/+f8scs/n/OH7P4754/ZvH/S/6YxX+P/DGL/575Yxb/vfLHLP5/zR+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxH5I/JvEffSB/zOI/KH/M4j9K/pjFf9T8MYv/aPljFv/B+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/h/LHLP4fzh+z+H8kf8ziP1n+mMX/o/ljFv/J88cs/h/LH7P4fzx/zOI/Rf6Yxf8T+WMW/0/mj1n8p8wfs/h/Kn/M4v/p/DGL/2fyxyz+U+WPWfw/mz9m8f9c/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8tf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+X88fs/jPlj9m8f9G/pjFf/b8MYv/N/PHLP7fyh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/7fzxyz+8+SPWfznzR+z+M+XP2bx/07+mMV//vwxi/9388cs/gvkj1n8F8wfs/gvlD9m8V84f8zi/738MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi//38MYv/D/LHLP5L5Y9Z/JfOH7P4/zB/zOL/o/wxi/8y+WMW/2Xzxyz+y+WPWfx/nD9m8V8+f8ziv0L+mMX/J/ljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/9P88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+P8sf8zi//P8MYv/RvljFv+N88cs/pvkj1n8N80fs/j/In/M4v/L/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Vf6YxX/r/DGL/6/zxyz+2+SPWfx/kz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/9/mj1n8f5c/ZvHfMX/M4v/7/DGL/x/yxyz+O+WPWfx3zh+z+P8xf8ziv0v+mMV/1/wxi/9u+WMW/z/lj1n8/5w/ZvHfPX/M4v+X/DGL/x75Yxb/PfPHLP575Y9Z/P+aP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOI/JH9M4j/GQP6YxX9Q/pjFf5T8MYv/qPljFv/R8scs/oPzxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv8P5Y9Z/D+cP2bx/0j+mMV/svwxi/9H88cs/pPnj1n8P5Y/ZvH/eP6YxX+K/DGL/yfyxyz+n8wfs/hPmT9m8f9U/pjF/9P5Yxb/z+SPWfynyh+z+H82f8zi/7n8MYv/5/P/54YMGTJE4j91/phl+/9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2v5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfy/mT9m8f9W/pjFf478MYv/nPljFv+58scs/nPnj1n8v50/ZvGfJ3/M4j9v/pjFf778MYv/d/LHLP7z549Z/L+bP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/7+WPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMX/h/ljFv8f5Y9Z/JfJH7P4L5s/ZvFfLn/M4v/j/DGL//L5Yxb/FfLHLP4/yR+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+aP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/2f5Yxb/n+ePWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf8X+WMW/1/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/+v8scs/lvnj1n8f50/ZvHfJn/M4v+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zZ/zOL/u/wxi/+O+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/XfLHLP675o9Z/HfLH7P4/yl/zOL/5/wxi//u+WMW/7/kj1n898gfs/jvmT9m8d8rf8zi/9f8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv8h+WMS/zEH8scs/oPyxyz+o+SPWfxHzR+z+I+WP2bxH5w/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nF/kO2eO/rLP6TiP3fL4v/pPljFv8P5Y9Z/D+cP2bx/0j+mMV/svwxi/9H88cs/pPnj1n8P5Y/ZvH/eP6YxX+K/DGL/yfyxyz+n8wfs/hPmT9m8f9U/pjF/9P5Yxb/z+SPWfynyh+z+H82f8zi/7n8MYv/5/PHLP5T549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/mvwxi/+0+WMW/+nyxyz+0+eP/e/3f+fjmDPkj/3v93+nMWfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMV/9vwxi/8388cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/t/PHLP7z5I9Z/OfNH7P4z5c/ZvH/Tv6YxX/+/DGL/3fzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/vfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL//fwxi/8P8scs/kvlj1n8l84fs/j/MH/M4v+j/DGL/zL5Yxb/ZfPHLP7L5Y9Z/H+cP2bxXz5/zOK/Qv6Yxf8n+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/0/zxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4/yx/zOL/8/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+P8if8zi/8v8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8f9V/pjFf+v8MYv/r/PHLP7b5I9Z/H+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/3+aPWfx/lz9m8d8xf8zi//v8MYv/H/LHLP475Y9Z/HfOH7P4/zF/zOK/S/6YxX/X/DGL/275Yxb/P+WPWfz/nD9m8d89f8zi/5f8MYv/HvljFv8988cs/nvlj1n8/5o/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4j8kf0ziP9ZA/pjFf1D+mMV/lPwxi/+o+WMW/9Hyxyz+g/PHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/w/lj1n8P5w/ZvH/SP6YxX+y/DGL/0fzxyz+k+ePWfw/lj9m8f94/pjFf4r8MYv/J/LHLP6fzB+z+E+ZP2bx/1T+mMX/0/ljFv/P5I9Z/KfKH7P4fzZ/zOL/ufwxi//n88cs/lPnj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/Wv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+eP2bxny1/zOL/jfwxi//s+WMW/2/mj1n8v5U/ZvGfI3/M4j9n/pjFf678MYv/3PljFv9v549Z/OfJH7P4z5s/ZvGfL3/M4v+d/DGL//z5Yxb/7+aPWfwXyB+z+C+YP2bxXyh/zOK/cP6Yxf97+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf/7+WMW/x/kj1n8l8ofs/gvnT9m8f9h/pjF/0f5Yxb/ZfLHLP7L5o9Z/JfLH7P4/zh/zOK/fP6YxX+F/DGL/0/yxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/n+aPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Wf6Yxf/n+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/0X+mMX/l/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8zi/6v8MYv/1vljFv9f549Z/LfJH7P4/yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP6/zR+z+P8uf8ziv2P+mMX/9/ljFv8/5I9Z/HfKH7P475w/ZvH/Y/6YxX+X/DGL/675Yxb/3fLHLP5/yh+z+P85f8ziv3v+mMX/L/ljFv898scs/nvmj1n898ofs/j/NX/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjFf0j+mMR/7IH8MYv/oPwxi/8o+WMW/1Hzxyz+o+WPWfwH549Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+H8ofs/h/OH/M4v+R/DGL/2T5Yxb/j+aPWfwnzx+z+H8sf8zi//H8MYv/FPljFv9P5I9Z/D+ZP2bxnzJ/zOL/qfwxi/+n88cs/p/JH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8p84fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+1/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fz1/zOI/W/6Yxf8b+WMW/9nzxyz+38wfs/h/K3/M4j9H/pjFf878MYv/XPljFv+588cs/t/OH7P4z5M/ZvGfN3/M4j9f/pjF/zv5Yxb/+fPHLP7fzR+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL//fyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL//fzxyz+P8gfs/gvlT9m8V86f8zi/8P8MYv/j/LHLP7L5I9Z/JfNH7P4L5c/ZvH/cf6YxX/5/DGL/wr5Yxb/n+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zR+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+z/DGL/8/zxyz+G+WPWfw3lvmP8W/OZ/HfROb/72bx3zR/zOL/i/wxi/8v88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/V/ljFv+t88cs/r/OH7P4b5M/ZvH/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+bP2bx/13+mMV/x/wxi//v88cs/n/IH7P475Q/ZvHfOX/M4v/H/DGL/y75Yxb/XfPHLP675Y9Z/P+UP2bx/3P+mMV/9/wxi/9f8scs/nvkj1n898wfs/jvlT9m8f9r/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/kPwxif84A/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lD9m8f9w/pjF/yP5Yxb/yfLHLP4fzR+z+E+eP2bx/1j+mMX/4/ljFv8p8scs/p/IH7P4fzJ/zOI/Zf6Yxf9T+WMW/0/nj1n8P5M/ZvGfKn/M4v/Z/DGL/+fyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2v5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfy/mT9m8f9W/pjFf478MYv/nPljFv+58scs/nPnj1n8v50/ZvGfJ3/M4j9v/pjFf778MYv/d/LHLP7z549Z/L+bP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/7+WPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMX/h/ljFv8f5Y9Z/JfJH7P4L5s/ZvFfLn/M4v/j/DGL//L5Yxb/FfLHLP4/yR+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+aP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/2f5Yxb/n+ePWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf8X+WMW/1/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/+v8scs/lvnj1n8f50/ZvHfJn/M4v+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zZ/zOL/u/wxi/+O+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/XfLHLP675o9Z/HfLH7P4/yl/zOL/5/wxi//u+WMW/7/kj1n898gfs/jvmT9m8d8rf8zi/9f8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/4u/+o30g6/UfmsX/yrZ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/5D8MYn/uAP5Yxb/QfljFv9R8scs/qPmj1n8R8sfs/gPzh+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5Q/ZvH/8Hv6vz1kyJD/N6v2n5jF/yNt/5jFf7L8MYv/R/PHLP6T549Z/D+WP2bx/3j+mMV/ivwxi/8n8scs/p/MH7P4T5k/ZvH/VP6Yxf/T+WMW/8/kj1n8p8ofs/h/Nn/M4v+5/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/+z5Yxb/b+aPWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/2/nj1n858kfs/jPmz9m8Z8vf8zi/538MYv//PljFv/v5o9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/3v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF//v5Yxb/H+SPWfyXyh+z+C+dP2bx/2H+mMX/R/ljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9Z/pjF/+f5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Rf6Yxf+X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/q/wxi//W+WMW/1/nj1n8t8kfs/j/Jn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/r/NH7P4/y5/zOK/Y/6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjFf5f8MYv/rvljFv/d8scs/n/KH7P4/zl/zOK/e/6Yxf8v+WMW/z3yxyz+e+aPWfz3yh+z+P81f8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8o/6ENGnkMLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/Ifkj0n8xxvIH7P4D8ofs/iPkj9m8R81f8ziP1r+mMV/cP6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/6H8MYv/h/PHLP4fyR+z+E+WP2bx/2j+mMV/8vwxi//H8scs/h/PH7P4T5E/ZvH/RP6Yxf+T+WMW/ynzxyz+n8ofs/h/On/M4v+Z/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8Z89f8zi/838MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4v/t/DGL/zz5Yxb/efPHLP7z5Y9Z/L+TP2bxnz9/zOL/3fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8vf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/j/MH7P4/yh/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4/yx+z+P88f8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+v8gfs/j/Mn/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5U/ZvHfOn/M4v/r/DGL/zb5Yxb/3+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6Yxf+3+WMW/9/lj1n8d8wfs/j/Pn/M4v+H/DGL/075Yxb/nfPHLP5/zB+z+O+SP2bx3zV/zOK/W/6Yxf9P+WMW/z/nj1n8d88fs/j/JX/M4r9H/pjFf8/8MYv/XvljFv+/5o9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4D8kfk/iPP5A/ZvEflD9m8R8lf8ziP2r+mMV/tPwxi//g/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/Q/ljFv8P549Z/D+SP2bxnyx/zOL/0fwxi//k+WMW/4/lj1n8P54/ZvGfIn/M4v+J/DGL/yfzxyz+U+aPWfw/lT9m8f90/pjF/zP5Yxb/qfLHLP6fzR+z+H8uf8zi//n8MYv/1PljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/L+WP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+ePWfxnyx+z+H8jf8ziP3v+mMX/m/ljFv9v5Y9Z/OfIH7P4z5k/ZvGfK3/M4j93/pjF/9v5Yxb/efLHLP7z5o9Z/OfLH7P4fyd/zOI/f/6Yxf+7+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bx/17+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/37+mMX/B/ljFv+l8scs/kvnj1n8f5g/ZvH/Uf6YxX+Z/DGL/7L5Yxb/5fLHLP4/zh+z+C+fP2bxXyF/zOL/k/wxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf+n+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/H+WP2bx/3n+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/kT9m8f9l/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Kn/M4r91/pjF/9f5Yxb/bfLHLP6/yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/2/zxyz+v8sfs/jvmD9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx3yV/zOK/a/6YxX+3/DGL/5/yxyz+f84fs/jvnj9m8f9L/pjFf4/8MYv/nvljFv+98scs/n/NH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvEfkj8m8Z9gIH/M4j8of8ziP0r+mMV/1Pwxi/9o+WMW/8H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84//+PPXpaAsUwoAB42962cTIT27Zt27Zt27Zt27Zt27aN98z5gpzdX9io5X9Y/1HL/3D+o5b/4f1HLf8j+I9a/kf0H7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iPWv4P9B+1/B/kP2r5P9h/1PJ/iP+o5f9Q/1HL/2H+o5b/w/1HLf9H+I9a/o/0H7X8H+U/avk/2n/U8n+M/6jl/1j/Ucv/cf6jlv/j/Uct/yf4j1r+T/Qftfyf5D9q+T/Zf9Tyf4r/qOX/VP9Ry/9p/qOW/9P9Ry3/Z/iPWv7P9B+1/J/lP2r5P9t/1PJ/jv+o5f9c/1HL/3n+o5b/8/1HLf8X+I9a/i/0H7X8X+Q/avm/2H/U8n+J/6jl/1L/Ucv/Zf6jlv/L/Uct/1f4j1r+r/Qftfxf5T9q+b/af9Tyf43/qOX/Wv9Ry/91/qOW/+v9Ry3/N/iPWv5v9B+1/N/kP2r5v9l/1PJ/i/+o5f9W/1HL/23+o5b/2/1HLf93+I9a/u/0H7X83+U/avm/23/U8n+P/6jl/17/Ucv/ff6jlv/7/Uct/w/4j1r+H/Qftfw/5D9q+X/Yf9Ty/4j/qOX/Uf9Ry/9j/qOW/8f9Ry3/T/iPWv6f9B+1/D/lP2r5f9p/1PL/jP+o5f9Z/1HL/3P+o5b/5/1HLf8v+I9a/l/0H7X8v+Q/avl/2X/U8v+K/6jl/1X/Ucv/a/6jlv/X/Uct/2/4j1r+3/Qftfy/5T9q+X/bf9Ty/47/qOX/Xf9Ry/97/qOW//f9Ry3/H/iPWv4/9B+1/H/kP2r5/9h/1PL/if+o5f9T/383cEDR/2f+o5b/z/1HLf9f+I9a/r/0H7X8f+U/avn/2n/U8v+N/6jl/1v/Ucv/d/6jlv/v/Uct/z/4j1r+f/Qftfz/5D9q+f/Zf9Ty/4v/qOX/V/9Ry/9v/qOW/9/9Ry3/f/iPWv7/9B+V/A8zwH/U8v8v/1HL/7/9Ry3///EftfwP9B+1/P/Xf9Ty/z//Ucv///1HLf+D+I9a/gf1H7X8D+Y/avkf3H/U8j+E/6jlf0j/Ucv/UP6jlv+h/Uf/uH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C/27jY2r7Lw4/jp2u7pz/7dnMNryGCw6SaubO3KZLD5UB8LpupYDJhAtrAyKoW5h+AGajUoMRjDZCSIqNvUTSAxZrwYJiCsJCpxKhonoiEOQV3E1DCREY1Lzd32Lu29tlmvel17sc/nRXufU36n25LvzilbMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//J03VaA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x4}) 5.868588943s ago: executing program 2 (id=1026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001b4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) 4.573893861s ago: executing program 0 (id=1040): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000480)={0x0, 0xfb, 0xfcd, 0x0, 0x3, "401f0c85b46cc006e542d7e7672f4430", "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"}, 0xfcd, 0x2) 4.57380509s ago: executing program 2 (id=1041): r0 = eventfd2(0xfffffffc, 0x80000) ppoll(&(0x7f0000000100)=[{r0, 0x1500}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="011c7d77192bf9bc21", 0x9}], 0x1) 3.776005249s ago: executing program 3 (id=1042): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 3.550661701s ago: executing program 2 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000180)={[{@quota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x982d, &(0x7f000001c700)="$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") 2.785305436s ago: executing program 4 (id=1047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x6, 0x0, 0x0) 2.677555617s ago: executing program 3 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)='\x00'}, {0x0, 0x58}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)="e6", 0x1}], 0x1}}], 0x2, 0x20080058) 2.186378256s ago: executing program 4 (id=1049): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x28, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) 2.085853145s ago: executing program 3 (id=1050): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000700)) 1.978179276s ago: executing program 0 (id=1051): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182c000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x99}, 0x94) 1.898439483s ago: executing program 4 (id=1052): syz_clone3(&(0x7f0000000640)={0x182841600, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") pidfd_getfd(r0, r0, 0x0) 1.898086803s ago: executing program 2 (id=1053): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IQ/+AHrhy48SJSDYSqCcGjfd54tnNbteu45215/WS7JnPPDP2M37v7A/vzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDtVZE3Ph5WrAS8X/RiWhHLJX1akQsra7k9bsR8VzsNcezEdFbiCi33/v2dMSrEfHx2Yid3c31cvHlA/bju3/82+9+eOatv/6hd/E/f7rXeW3Sevfv/+rff35wtH0GAACApimKomill/nn0uv7dt2dAgBmIj/+F0lefurrX//jrb/MU3/UarVarZ5BXVWM96BaRMRWdZvyOYO34wHghNmKT+ruAjWSf6N1I+JM3Z0A5lqr7g5wLHZ2N9dbKd9W9fFgddCezwUZyn+r9ej6jknTaUbPMZnV7Ws7OvHMhP4szagP8yTn3x7N/8agvZ/WO+78Z2VS/v3BpU+Nk/PvjOY/4vTk3x6bf1Pl/LuHyr8jfwAAAAAAmGP5//8rNb//u3D0XTmQT3v/d3VGfQAAAAAAAACAJ+2o4/89Yvw/AAAAmFvla/XSb87uL5v0WWzl8uutiKdG1gca5qPBZLnufgAAAAAAAAAAAABAk3QH5/Beb0X0IuKp5eWiKMqvqtH6sI66/UnX9P2HJqv7Th4AAAY+PjtyLX8rYjEirkd777P+esvLy0WxuLRcLBdLC/n5bH9hsViqvK7N03LZQv8AT4i7/aL8YYuV7aqmvV6e1j7688rf1S86B+jYE9JLf80JzTWFDQDJ4NFoxyPSKVMUT0968gFDHP+n0Eqs1H27Yv7VfTMFAAAAjl9RFEUrDfN3Lo3v1667UwDATOTH/9H3BQ5UR4xvbx9yfbVarVar1TOpq4rxHlSLiNiqblM+ZzAcPwCcMFvxSd1doEbyb7RuRDxXdyeAudaquwMci53dzfVWyrdVfTxYHbTnc0GG8t9q7W2Xtx83nWb0HJNZ3b62oxPPTOjPszPqwzzJ+bdH878xaO+n9Y47/1mZlH9/75K55sn5d0bzH3F68m+Pzb+pcv7dQ+XfkT8AAAAAAMyx/P//Fe//5l0GAAAAAAAAgBNnZ3dzPV/3mt///9yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy//LIep3K/MM394//f+1urv/+3j//P08Pmv9CnmmlW1Yr3SJa6Te1uml6lL173Hav0y9/U6/V7nTTOT9F7524FbdjIy4NrdtOf4/99rWh9rKnvaH2y0Pt3cfarwy199LnDhRLuf1CrMdP4na8vddeti1M2f/FKe3FlPacf8f9fyPl/LuVrzL/5dTeGpmWHn7Yfuy4r07H/Z43bn3+l5eOf3em2o7Oo32rKvfvfA392fubnOnHz+5u3Llw/+a9e3fWIk2Gll6ONHnCcv69va+F/fv/Fwbt+X6/erw+/LB/6PznxXZ0J+b/QmW+3N+XZty3OuT8++kr5/92ah9//J/k/Ccf/y/X0B8AAAAAAAAAAAAAAAD4NEVR7F0i+kZEXE3X/9R1bSYAMFv58b9I8nK1Wq1Wz0sdK3vf56Y/6pNcVxXjvV4tIuKj6jblc4ZfjPthAMA8+29E/L3uTlAb+TdY/ry/cvpi3Z0BZuru+x/86Obt2xt37tbdEwAAAAAAAADgs8rjf65Wxn9+MSJWRtYbGv/1zVg96vif3TzzaIDRJzzQ9wTb7X6nXRlu/PnYG5/7wqTxv8/H4+N/5zFxO9X9mKA3pb0/pX1hSvvi2KX7aY290KMi5/98ZbzzMv9zI8OvN2H819Ex75sg53++cnsu8//SyHrV/Ivfzl3+WwddcTvaQ/lfvPfeTy/eff+DV269d/PdjXc3fnxlbe3SlatXr127dvGdW7c3Lg2+H0+v50DOP4997TzQZsn558zl3yw5/y+kWv7NkvP/Yqrl3yw5//x8T/7NkvPPr33k3yw5/5dSLf9myfl/JdXyb5ad3c2FMv+XUy3/ZsnH/1dTLf9myfm/kmr5N0vO/0Kq5d8sOf+LqT5A/j4e/hTJ+ed3uBz/zZLzX0v1lPyXZtUvZiPnfznVjv9myflfSbX8myXn/2qq5d8sOf+vpVr+zZLzv5pq+TdLzv/rqZZ/s+T8r6Va/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y/7n/5sxY+aUzfTjM29e9z0TAAAAAAAAAAAAADBqFich172PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOwgRCc1MDaMcY4S3Z9iS+0LiYQLgFKgYRCL9iud20WfMNrl0CRbBookTAqqqiafmgLKGojVRVWxQdapTQfql4+kfYD/VJRVUJqVJkooCK1Fc1WM+d9X8/Mzs6MveP12XN+Pyl5dmfOmfPOmfecnWfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTa/dfaLtSzL6v81/rchy15S/3rtxIbGbW+61SMEAAAAluv/Gv9/YX264VAfKzUt8/ev+e63FhYWFrIPD//e6FcXFtIdE1k2uibLGvdFV/79I7XmZYLHsvHaUNP3Qz02P9zj/pEe94/2uH+sx/1retw/3uP+RTtgkbX572MaD7a18eWGfJdmd2Sjjfu2dljrsdqaoaH4u5yGWmOdhdHj2Vx2MpvNpluWz5etNZZ/enN9W+/M4raGmra1qT5DfvTZY3EMtbCPt7Zs69pjRj98Szbx4x999tifnL96V6facze0PF4+zu1b6uP8fLglH2stW5P2SRznUNM4N3V4TYZbxllrrFf/un2cL/Q5zuFrw1xR7a/5eDbU+PrZxn4aaf61XtpPm8Jt/31PlmWXrg27fZlF28qGsnUttwxde33G8xlZf4z6VHp5NnJd83RzH/O0Xme2ts7T9mMivv6bw3ojS4yh+WX64efGFr3u1ztPo/qzXupYaZ+Dgz5WijIH47x4tvGkH+84B7eG5//ZbUvPwY5zp8McTM+7aQ5u6TUHh8aGG2NOL0Ktsc61ObizZfnhxpZqjfrctu5zcOr8qbNT85/+zBvnTh09MXti9vTunTund+/du3///qnjcydnp/P/3+DeLr512VA6BraEfRePgde3Lds8VRe+PrjjcLzLcbihbdlBH4cj7U+utjIH5OI5nR8bD9d3+vjloWyJY6zx+uxY/nGYnnfTcTjSdBx2/JnS4Tgc6eM4rC9zdkd/71lGmv7rNIab9bNgQ9McbH8/0j4HB/1+pChzcDzMi3/dsfTPgk1hvI9PXu/7keFFczA93XDuqd+S3u+P72+UTvPy7vodt41lF+Znz9336NHz58/tzEJZEa9omivt83Vd03PKFs3Xoeuer4fmXvP43R1u3xD21fgb6/8bX/K1qi+z577ur1Xjp1vn/dly664slAFb6f3Z6ad5fX+mXrLL/qwv8/mp5b8XT31p0/l3dInzb+z7X8y3lx7qseHRkfz4HU57Z7TlfNz6Uo00zl21xrZfmOrvfDwa/lvp8/EdXc7HG9uWHfT5eLT9ycXzca3XbzuWp/31HA/z5OR09/NxfZmNu653To50PR/fE2ot7P83hE4h9UVNc2epeZu2NTIyGp7XSNxC6zzd3bL8aOjN6tt6ateNzdPt9+SPNZye3TUrNU8n2pYd9DxN56ul5mmt12/fbkz76zke5sUdu7vP0/oyz+xZ/rlzbfyy6dw51msOjg6P1cc8miZhfr5fWBvn4H3ZsexMdjKbadw71phPtca2Ju/vbw6Ohf9W+ly5scsc3N627KDnYPo5ttTcq40sfvID0P56jod58cT93edgfZm37Rvse9ft4Za0TNN71/bfry31O6+723bTzfydV32cf7uv++9m68uc3H+9fWb3/XRvuOW2Dvup/fhd6piayVZmP20M47y6f+n9VB9PfZmvHuhzPh3KsuziJx9o/L43/H3lLy5871stf3fp9Dedi5984Pnbj//d9YwfgNXvxbysy3/WNf1lqp+//wMAAACrQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/Gt12de/FilpL5C0G8P+2Gh/LlYsZ1Onw/sXBN/fYHnpz9yV9d7G/bQ1mW/fSh3+y4/MaH4rhyE2GcVx5svX3xihf72v6RR64t15xf/1p4/Ph8+p0GnSK401mWPb3+y43tTHzkcqM+89CRRv3Apccfqy/zwoH8+7j+c6/Il//DEP49dPxoy/rPhf3wg1Cn3915f8T1vnn5DZv2feja9uJ6tS0vbTztJz6aP278nJyvPJYvH/fzUuP/6y899c368o++rvP4Lw51Hv9T4XGffPDqXH3G/c+r8+WbX4P693G9L4Txx+09Gda/7xvf6Tj+K1/Mlz/79ny5I6HG7W8P3299+9W55v31aO1oy/PK3pEvF7c//b3fadwfHy8+fvv4xw9fbtkf7fPjmX/OH2eqbfl4e9xO9Jdt268/TvP8jNt/6rePtOznXtu/8oHnXl1/3Pbt39u23HDb+u2f2PRHX/hyx+3F8Rz687Mtz+fQ+8NxHLb/xEfDfAz3/++VL7dsNzry/tbzT1z+axsutjyf6J0/zrd/5c0nGvU/Jn7yB7e95PaXXnptfd9l2bMfzB+v1/ZP/PGZlvF//c4djdcj3h8z+u3bX0rc/rlPTZ4+M39hbqZprzY+O+c9+XjWjK9dVx/v+nBubf/+8JnzH5s9NzE9MZ1lE+X9CL0b9o1Qn8/Lpetdf8cj4fW8+/efXrftn74Ub/+Xh/PbL787/7n1+rDcV8LtG/LXb6G2zO0/sfnOxvFdeyb/viXHPgCbtv7n/r4WDM+//X1BnO9nX/mxxn6o39f4uRGP62WO//sz+eN8O+zXhfDJzFvuvLa95uXjZyNc/mB+vC97/4XTXHxd/zS83u/9Qf74cVzx+X4/vI/5zsbW812cH9++ONT++I1P8bgUzifZpfz+uFTc35dfuLPj8OLnkGSX7mp8/7vpce66rqe5lPlPz0+dnDt94dGp87Pz56fmP/2Zw6fOXDh9/nDjszwPf7zX+tfOT+sa56eZ2b17sum1WZadyaZX4IR1c8Zf/6q/8Z995NjMvultM7PHj144fv6Rs7PnThybnz82OzO/7ejx47Of6rX+3MzBnbsO7N63a/LE3MzB/QcO7D4wOXf6TH0Y+aB62Dv9icnT5w43Vpk/uOfAzvvv3zM9eerMzOzBfdPTkxd6rd/42TRZX/s3Js/Nnjx6fu7U7OT83GdmD+48sHfvrp6fBnjq7PH5ialzF05PXZifPTeVP5eJ842b6z/7eq1POc3/W/5+tl0t/yC+7H337k2fz1r35OeWfKh8kbYPEL0aPovmH192dn8/38e+fzTUpCL9PwAAAFRB7PvHQk30/wAAAFAase9fE2qi/wcAAIDSiH3/eKhJRfp/+X/5//7y//n9g8z/d8rPZ33l/0fl/1co/3/2k3mudLXn/2N+Xv6/Gm5x/n/Z25f/l/8vX/6///z8ah+//L/8P4sVLf8f+/61WVbJ/h8AAACqIPb960JN9P8AAABQGrHvvy3URP8PAAAApRH7/peEmlSk/5f/7yv/v6tX4Kr8+f/BX///xvP/rv8v/5/rK/8fXxz5/8q47vz9hx5u+Vb+P5D/l/+X/5f/l/9n2UaXvOdW5f9j3397qElF+n8AAACogtj3vzTURP8PAAAApRH7/vWhJvp/AAAAKI3Y928INalI/y//7/r/8v/y/6XO/y/3+v9Ng5H/Xx1c/787+f8ebjj/Pz64/P/6pYcn/z/g8Y8OdvzFzv/3HL78PzdF0a7/H/v+l4WaVKT/BwAAgCqIff/LQ030/wAAAFAase9/RaiJ/h8AAABKI/b9d4SaVKT/X07+P2au5f/l/+X/c/L/uVLl/7te/z//Sv6/WOT/uyt//j9/P+P6/zemcvn/AY+/2Pn/QV//f/TB9vXl/+mkaPn/2Pe/MtSkIv0/AAAAVEHs++8MNdH/AwAAQGnEvv9VoSb6fwAAACiN2PdvDDWpSP/v+v/y//L/8v/y/5233zv/n5P/Lxb5/+7Kn/+/Vdf/l//P5P+rlf/v8OZX/p9Oipb/j33/XaEmFen/AQAAoApi3393qIn+HwAAAEoj9v0/E2qi/wcAAIDSiH3/plCTivT/8v/y//L/1cr/3zsm/y//X27y/93J//cg/y//L//f5/X/F7ue/P+aXg9GaRQt/x/7/leHmlSk/wcAAIAqiH3/a0JN9P8AAABQGrHvf22oif4fAAAASiP2/ROhJhXp/+X/y5X//7O/eeK1mfy//H+P7Zc0/x+ngfx/xcn/dyf/34P8v/z/Ks3/v+u7eV0t+X+qo2j5/9j3bw41qUj/DwAAAFUQ+/4toSb6fwAAACiN2PffE2qi/wcAAIDSiH3/1lCTivT/8v/lyv9H8v/y/922X9L8fyL/X23y/x00HaTy/z3I/8v/r9L8fzaw6//Hd7/y/wxG0fL/se9/XahJl8ZvsJ/EAwAAANxsse/fFmpSkb//AwAAQBXEvv/1oSb6fwAAACiN2PdvDzWpSP8v/y//L/8v/y//33n78v+r0+rK/69ZdEvRrv8/Jv8v/y//X7H8v+v/M1hFy//Hvv8NoSYV6f8BAACgCmLfvyPURP8PAAAApRH/5V3+7171/wAAAFBGse+fDDWpSP8v/y//X6X8f03+X/5f/r/0Vlf+f7Gi5f9d/1/+X/5f/l/+n+UoWv4/9v1vDDWpSP8PAAAAVRD7/vtCTfT/AAAAUBqx758KNdH/AwAAQGnEvn861KQi/b/8v/x/lfL/rv8v/y//X37y/93J//cg/1+q/H+Wyf/XBy//z61UtPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/x/5+3L/69O8v/dyf/3IP+/Mvn/Tm+cVtP4l1DI/L/r/3OLFS3/H/v++0NNKtL/AwAAQBXEvn9vqIn+HwAAAEoj9v37Qk1C/3+T/nkSAAAAsIJi378/1KQif/+X/y9J/v+3/qFl2/L/8v/dtj+Y/P9a+f9Q5f+LpaT5//bD4obJ//cg/3/T8vPZ0ECGeMvGL/8v/8+NKVr+P/b9B0JNKtL/AwAAQBXEvv9NoSb6fwAAACiN2Pf/bKiJ/h8AAABKI/b9PxdqUpH+X/6/JPn/NvL/8v/dtu/6//L/ZVbS/P/AlCr/PyT/v5ry//3k51f7+OX/5f9Z7Obn/+NX/eX/Y99/MNSkIv0/AAAAVEHs+38+1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt9/KNSkIv3/DeT/G3fK/7eS/28dv/x/5/lRrfz/m7N2Rcz/1yeP/H+5FDj/P9rP9uX/Xf9f/n9Fxt/+o2Yg45f/l/9nsaJd/z/2/W8JNalI/w8AAABVEPv+B0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/+/6//L/8v/y/67/33n78v+rU4Hz/32R/5f/l/9fveOX/5f/Z7Gi5f9j3/9gqElF+n8AAACogtj3vz3URP8PAAAApRH7/neEmuj/AQAAoDRi3//OUJOK9P/y//L/8v/y//L/nbcv/786yf93J//fg/y//L/8v/w/A1W0/H/s+98ValKR/h8AAACqIPb9D4Wa6P8BAACgNGLf/+5QE/0/AAAAlEbs+98TalKR/l/+X/5f/l/+X/6/8/bl/1cn+f/uVib/P5oeRv5f/l/+X/5f/r/aipb/j33/e0NNKtL/AwAAQBXEvv8XQk30/wAAAFAase9/X6iJ/h8AAABKI/b9vxhqUpH+X/5f/r9Y+f+Fi83ryf/L/2eDyv/XV5L/rwT5/+5c/7+HDvn/NfL/8v/y//L/3LCi5f9j3//+UJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwAAQGnEvv/hUJOK9P/y/5XM/6enXLz8v+v/95P/H1kv/5+5/r/8/xLk/7uT/+/B9f/l/+X/5f8ZqKLl/2Pf/0ioSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+Xwo10f8DAABAacS+/8OhJhXp/+X/K5n/L/D1/8uW/x9pmR9Vuv7/eNPrmeal/L/8/wqQ/+9O/r8H+X/5/yLn/8NsXrvE+vL/FFHR8v+x7/9IqElF+n8AAACogtj3/3Koif4fAAAASiP2/b8SaqL/BwAAgNKIff+vhppUpP8vYf7/Uib/L/9fmPx/6/yoUv7f9f8Xk/9fGfL/3cn/9yD/L/9f5Px/D/L/FFHR8v+x7/+1UJMlG7/n/6uPpwkAAAAUSOz7PxpqUpG//wMAAEAVxL7/cKiJ/h8AAABKI/b9R0JNKtL/lzD/v8zr/8crqvbK/7deeVX+v3X88v9Zh/kxJP8v/y//vwIGl/9/1e1ZJv8v/y//L/8v/y//z3IULf8f+/6joSYV6f8BAACgCmLf/+uhJvp/AAAAKI3Y9x8LNdH/AwAAQOGNpERwd7Hvnwk1qUj/fwvz/6PFzP+X7fr/tfDYNz///1P5f9f/D+T/O5P/Xxmu/9+d/H8P8v/y//L/8v8MVNHy/7Hvnw01qUj/DwAAACWWfh0c+/7joSb6fwAAACiN2PefCDXR/wMAAEBpxL7/Y6EmFen/Xf+/7Pl/1/8vZv5/pGV5+f+c/L/8/yDI/3c3wPz/WByf/L/8fyT/L/8v/0+7ouX/Y98/F2pSkf4fAAAAqiD2/R8PNdH/AwAAQGnEvv8ToSb6fwAAACiN2Pf/P3v30WTXVfVx+NhYaQQfgbFHDGFkPgJTZlQxxUSTgyRyBpNzMBmTMybYYHLOOZicozHBUCXK0lpLat3b57bUR33P2ft5JgurLPeV3fit/6v6se8Xt3Sy//X/+v/e+//LhuGE9//1/+u+vv5/mfT/47z/v4H+X/+v/9f/M6m59f+5+6+OWzrZ/wAAANCD3P33j1vsfwAAAGhG7v4HxC32PwAAADQjd/8D45ZO9r/+X//fe/8/bOX9/51/vv7/DP2//n8KK/39Fev/vN2i8F37/7vd/Zr76P/1//r/Ufp//b/+n/PNrf/P3f+guKWT/Q8AAAA9yN3/4LjF/gcAAIBm5O5/SNxi/wMAAEAzcvdfE7d0sv/1//p//f8i+v/L8q9xyfv/m/T/+v9l8/7/OP3/Bvp//b/+X//PpObW/+fuf2jc0sn+BwAAgB7k7n9Y3GL/AwAAQDNy9z88brH/AQAAoBm5+x8Rt3Sy//X/+n/9/yL6/9tuOH7Y+//n/Xr0//r/dfT/4/T/G+j/9f/6f/0/k5pb/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/6//1/xP2/yeHYbhk/f+g/z/v16P/1/+vc91w9t8J+v9V+v8NNvT/w6D/H7Pnfn79L285n38X+n/9P6vm1v/n7n9s3HLPYTh8sb9IAAAAYFZy9z8ubunk9/8BAACgB7n7j8ct9j8AAAA0I3f/ibilk/2v/9f/6/+X8v6//l//r//fC+//j9t//3/lXa6+b7/9v/f/x3n/f+r+/47vDP0/yza3/j93/8m4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7n9C3GL/AwAAQDNy9z8xbulk/+v/W+v/77Tj553T/5+uXfT/+v+L6f8P1V9J/6//nz/9/zjv/29w+l9zx+oP9f/6f+//6//Zn7n1/7n7nxS3dLL/AQAAoAe5+58ct9j/AAAA0Izc/U+JW+x/AAAAaEbu/qfGLZ3sf/1/a/3/zp/n/X/9/7qv7/1//X/LLq6/v7L+Zy70/6Hr/r+B9/8v8rtm2/38fm378+v/9f+smlv/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r/5fR/+dX0P/r/y99/5/0/8vk/f9x+v8NWun/L9K2+/mlf379v/6fVXPr/3P3Pytu6WT/AwAAQA9y9z87brH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ//p//f8y+n/v/+v/vf+v/98b/f84/f8G+n/9v/5f/8+k5tb/5+6/Nm7pZP8DAABAD3L3Py9usf8BAACgGbn7nx+3XMj+PzT1pwIAAACmlLv/BXFLJ7//r//X/+v/9f/6//VfX/+/TPr/cfr/DTrv/4cT+n/9v/6fac2o/z/nZx0dXhi3dLL/AQAAoAe5+18Ut9j/AAAA0Izc/S+OW+x/AAAAaEbu/pfELZ3s//b6/yNL7f9P53xt9f/HhmHQ/w+d9v/HzvnnWd+X+n/9/wHQ/4/T/2/Qef+/7X5+6Z9f/6//Z9WM+v/Tf5y7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/m+v//f+/zCb/t/7/+d/f/TU/3v/f5X+/2Do/8fp/zfQ/+v/9f/6fyY1t/4/d/8r46bDhy76lwgAAADMTO7+V8Utnfz+PwAAAPQgd/+r4xb7HwAAABbq2pUfyd3/mrilk/2v/5+2/z98zo/p//X/539/6P/1//r/S29Tf7/pb5n+P+j/9f/6f/2//p8JzK3/z93/2rilk/0PAAAAPcjdf13cYv8DAABAM3L3vy5usf8BAACgGbn7Xx+3dLL/9f/e/9f/6/839f9nn0PV/+v/58/7/+MW0f/frP/X/y/z80/Q/x85+x/1/7ThAvr/U6dOHb/k/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+b4hb7HwAAAJqRu//NcUsn+1//32n/n9/qy+r/TwyD/t/7//p//f84/f+4RfT/3v/X/y/083v/X//Pqrm9/5+7/y1xSyf7HwAAAHqQu/+tcYv9DwAAAM3I3X993GL/AwAAQDNy978tbulk/+v/O+3/vf+v/9f/H3T/f/ug/z8Qi+j/j+3+9efe/5/U/+v/R3TX/9/rHjv+UP+v/2fV3Pr/3P1vj1s62f8AAADQg9z974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KmKzrZ//p//b/+X/+v/1//9Q/4/f/DwzDo/yewiP5/xNz7/2ne/z//v+Vn6f/1/0v+/Pp//T+r5tb/5+5/d9zSyf4HAACAHuTuf0/cdMT+BwAAgGbk7n9v3GL/AwAAQDNy978vbulk/+v/9f/6f/1/8/3/yUX0/97/n4j+f9w8+v/d6f/1/0v+/Pp//T97t63+P3f/++OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/19I/5+fU//fVv9/ZHb9/9Edf71O3v/X/09E/z9O/7+B/l//r/+/Vv/PlOb2/n/u/g/HLZ3sfwAAAOhB7v4b4tb/69b+BwAAgGbk7v9I3GL/AwAAQDNy9380bulk/+v/9f/e/9f/N//+v/6/K/r/cfr/DfT/+n/9v/f/mdTc+v/c/R+LWzrZ/wAAANCD3P0fj1vsfwAAAGhG7v4b4xb7HwAAAJqRu/+muKWT/a//1//r//X/+v8z/wz1/23Q/487mP7/mP5f/1/9/GXx3wL9v/5/08+nTXPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+2+OW+x/AAAAWKQr1vxY7v5PxS2d7H/9v/5f/6//1/+v//r6/2XaSv+f3xT6f+//h376/7vu+KOlvf9//v/90v/r/5ne3Pr/3P2fjls62f8AAADQg9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/1399/f8yef9/nP5/A/3/Vt/PX/rn1//r/1k1t/4/d//n45ZO9j8AAAD0IHf/F+IW+x8AAACakbv/i3GL/Q8AAADNOL37My7rcP/r//X/+n/9v/5//dfX/y+T/n+c/n8D/b/+X/+v/2dSc+v/v3T6Zx0dvhy3dLL/AQAAoAe5+78St9j/AAAA0Izc/V+NW+x/AAAAaEbu/q/FLZ3s/733/6cG/f/u9P87P//0/f+pU6eO6//1/zt/PWf7/1v0/xT9/zj9/wb6f/2//l//z6Tm1v/n7v963NLJ/gcAAIAe5O7/Rtxi/wMAAEAzcvd/M26x/wEAAKAZufu/Fbd0sv+9/z+D/v+o/t/7//r/wfv/q/3/5Wf+paz/vzD6/3H6/w1a7P+P7v2Xv+1+fr+2/fn1//p/Vs2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/D67/v+PvXS/v/x8b1n9+/b/+X//v/f9LTf8/Tv+/QYv9/wXYdj+/9M+v/9f/s2pu/X/u/u/HLTuH36EL+1UCAAAAc5K7/wdxSye//w8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/8/g/f8G+3/v/6///tD/z7r/v1z/3wb9/zj9/wb6f/2//n+i/j+/m/X/vZtb/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbjln/69ru1uh/9f/6//1//r/9V9f/79M+v9xe+3/jwz76/+T/l//r//vtf/3/j9nzK3/z93/s7jF7/8DAADA4hza5cdz9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MW269fFsf6UDp//X/+n/9v/5//dfX/y+T/n/cLN//v/7G+o/6/yb6/6v0/230/8Og/2f/5tb/5+7/Vdzi9/8BAACgGbn7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex//b/+f5/9/+k0U/9/hv7/DP3/evr/g6H/HzfL/v8c+v8m+n/v/zfS/3v/nynMrf/P3f+7uKWT/Q8AAAA9yN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvf/MW7pZP9vrf+Pv9X6/8X3/97/1//r//X/s6L/H6f/30D/r//X/+v/mdTc+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v6/xC32PwAAADQjd/9f45ZO9r/3//X/+n/9v/5//dfX/y+T/n+c/n+9+gel/9f/6//1/0xqbv1/7v6/xS2d7H8AAADoQe7+v8ct9j8AAAA0I3f/rXGL/Q8AAADNyN3/j7ilk/2v/9f/6//1//r/9V9f/79M+v9x2+z/733nzV/W+/9b7//zI+j/9f/6fyYxt/4/d/9tcUsn+x8AAAB6kLv/n3GL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7f0P8fqT9R/z9K/7/z8+v/139/NNz/7whc9f/r6f8Phv5/3HLe/4+fr//fwfv/8/78+n/9P6vm1v/n7v9P3NLJ/gcAAIAe5O6/PW6x/wEAAKAZufv/G7fY/wAAANCM3P3/i1s62f/e/19S/3+V/l//P9f+fwf9/3r6/4Oh/x+3nP7f+//r6P/n/fn1//p/Vs2t/8/d//8AAAD//ym6NlQ=") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 1.800380033s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.368298416s ago: executing program 3 (id=1055): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000005300)=0x8) 1.266184296s ago: executing program 4 (id=1056): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.066487966s ago: executing program 1 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.066318376s ago: executing program 3 (id=1058): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "65b56c9b"}]}}, 0x0}, 0x0) 927.818349ms ago: executing program 0 (id=1059): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x99, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) 748.014147ms ago: executing program 0 (id=1060): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 553.870736ms ago: executing program 2 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 553.339946ms ago: executing program 1 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x7fff, 0x4) 354.379776ms ago: executing program 1 (id=1063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 279.584013ms ago: executing program 1 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 212.60134ms ago: executing program 4 (id=1065): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 129.934358ms ago: executing program 1 (id=1066): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}, {0x3, 0x8, 0xe8, 0x2, @tick=0x80, {0x80, 0x10}, {0x2}, @quote={{0x6, 0x3}, 0xc}}], 0x70) 164.681µs ago: executing program 4 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a0104006f2a68730000000a0000010900010073797a31000000002800048024000180090001006d6574610000000014000280080003400000000908000240000000030900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 0s ago: executing program 1 (id=1068): unshare(0x2a020400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): ck ASAP [ 95.021424][ T4693] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.049285][ T4693] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 95.083058][ T4693] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 95.144257][ T4693] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.218693][ T4693] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.255025][ T4708] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.323382][ T4714] loop4: detected capacity change from 0 to 256 [ 95.348016][ T4714] exfat: Deprecated parameter 'utf8' [ 95.353373][ T4714] exfat: Deprecated parameter 'utf8' [ 95.409484][ T4714] exfat: Deprecated parameter 'utf8' [ 95.485677][ T4714] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x185b6804, utbl_chksum : 0xe619d30d) [ 95.853365][ T4731] loop2: detected capacity change from 0 to 512 [ 95.925267][ T4731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.950973][ T4731] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.150: EA inode hash validation failed [ 96.024167][ T4731] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.040759][ T4731] EXT4-fs (loop2): 1 orphan inode deleted [ 96.046732][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.323338][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 96.712062][ T4755] mkiss: ax0: crc mode is auto. [ 96.887250][ T4734] loop1: detected capacity change from 0 to 40427 [ 96.932003][ T4734] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 96.960893][ T4734] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 96.979067][ T4762] loop0: detected capacity change from 0 to 512 [ 97.023489][ T4762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.043660][ T4734] F2FS-fs (loop1): invalid crc value [ 97.050203][ T4762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.073311][ T4734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.161282][ T4762] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 97.207056][ T4762] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.267243][ T4762] EXT4-fs (loop0): 1 truncate cleaned up [ 97.267635][ T4734] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.272942][ T4762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.360235][ T4734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.525439][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 97.641514][ T4272] syz-executor: attempt to access beyond end of device [ 97.641514][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.264180][ T4267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.464008][ T4267] usb 5-1: Using ep0 maxpacket: 32 [ 98.495911][ T4267] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 98.510242][ T4781] loop2: detected capacity change from 0 to 32768 [ 98.511180][ T4267] usb 5-1: config 0 has no interface number 0 [ 98.547994][ T4781] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.172 (4781) [ 98.561100][ T4267] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 98.587411][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.600454][ T4802] loop0: detected capacity change from 0 to 256 [ 98.615753][ T4267] usb 5-1: Product: syz [ 98.623986][ T4267] usb 5-1: Manufacturer: syz [ 98.628636][ T4267] usb 5-1: SerialNumber: syz [ 98.661655][ T4781] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.669518][ T4267] usb 5-1: config 0 descriptor?? [ 98.682695][ T4781] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 98.696576][ T4802] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 98.732797][ T4267] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 98.744035][ T4781] BTRFS info (device loop2): enabling auto defrag [ 98.750253][ T4802] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 98.750507][ T4781] BTRFS info (device loop2): use no compression [ 98.772058][ T4267] dvb-usb: bulk message failed: -22 (2/0) [ 98.821373][ T4267] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.838506][ T4781] BTRFS info (device loop2): force clearing of disk cache [ 98.848637][ T4802] syz.0.182: attempt to access beyond end of device [ 98.848637][ T4802] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 98.867817][ T4781] BTRFS info (device loop2): max_inline at 4096 [ 98.885523][ T4267] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 98.916451][ T4802] syz.0.182: attempt to access beyond end of device [ 98.916451][ T4802] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 98.917385][ T4781] BTRFS info (device loop2): disabling free space tree [ 98.938093][ T4267] usb 5-1: media controller created [ 98.955065][ T4787] cxusb: i2c rd: len=133 is too big! [ 98.955065][ T4787] [ 98.992672][ T4802] syz.0.182: attempt to access beyond end of device [ 98.992672][ T4802] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 99.013022][ T4267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.023167][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 99.023182][ T26] audit: type=1800 audit(1760974146.320:2): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.182" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 99.088733][ T4267] cxusb: set interface failed [ 99.129423][ T4267] dvb-usb: bulk message failed: -22 (1/0) [ 99.422073][ T4836] bridge0: port 3(syz_tun) entered blocking state [ 99.430082][ T4781] BTRFS info (device loop2): enabling ssd optimizations [ 99.474158][ T4836] bridge0: port 3(syz_tun) entered disabled state [ 99.487139][ T4781] BTRFS info (device loop2): rebuilding free space tree [ 99.493970][ T4836] device syz_tun entered promiscuous mode [ 99.514958][ T4836] bridge0: port 3(syz_tun) entered blocking state [ 99.521994][ T4836] bridge0: port 3(syz_tun) entered forwarding state [ 99.573548][ T4267] DVB: Unable to find symbol lgdt330x_attach() [ 99.583841][ T4267] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 99.654617][ T4844] loop1: detected capacity change from 0 to 256 [ 99.675417][ T4781] BTRFS info (device loop2): disabling free space tree [ 99.682433][ T4781] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.730452][ T4844] exfat: Deprecated parameter 'utf8' [ 99.744162][ T4781] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.761855][ T4844] exfat: Deprecated parameter 'utf8' [ 99.798384][ T4844] exfat: Deprecated parameter 'utf8' [ 99.845946][ T4844] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x185b6804, utbl_chksum : 0xe619d30d) [ 100.043908][ T4267] rc_core: IR keymap rc-dvico-portable not found [ 100.050631][ T4267] Registered IR keymap rc-empty [ 100.075950][ T4267] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 100.151944][ T4267] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 100.203195][ T4267] dvb-usb: schedule remote query interval to 100 msecs. [ 100.223983][ T4267] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 100.292874][ T4267] usb 5-1: USB disconnect, device number 2 [ 100.338908][ T4346] dvb-usb: bulk message failed: -22 (1/0) [ 100.370228][ T4860] loop0: detected capacity change from 0 to 512 [ 100.380458][ T4860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 100.389658][ T4860] System zones: 1-12 [ 100.426511][ T4860] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.201: Directory hole found for htree index block 0 [ 100.477127][ T4276] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.479311][ T4860] EXT4-fs (loop0): Remounting filesystem read-only [ 100.546356][ T4267] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 100.574769][ T4860] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 100.649988][ T4860] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.201: Directory hole found for htree index block 0 [ 100.736546][ T4860] EXT4-fs (loop0): Remounting filesystem read-only [ 100.757179][ T4860] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 100.783301][ T4860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.843965][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.026314][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.059612][ T4318] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.094209][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 101.105022][ T4318] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 101.139985][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.162460][ T4318] usb 4-1: config 0 descriptor?? [ 101.236712][ T4853] loop4: detected capacity change from 0 to 32768 [ 101.313967][ T4325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.408389][ T4873] mmap: syz.0.204 (4873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.419608][ T4863] loop1: detected capacity change from 0 to 32768 [ 101.484666][ T4863] XFS: ikeep mount option is deprecated. [ 101.534035][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 101.541618][ T4325] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 101.608219][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.644648][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 101.665469][ T4325] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 101.674961][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.684366][ T4318] hid-picolcd 0003:04D8:C002.0001: No report with id 0x11 found [ 101.687166][ T4325] usb 3-1: config 0 descriptor?? [ 101.804778][ T4863] XFS (loop1): Mounting V5 Filesystem [ 101.836912][ T4318] usb 4-1: USB disconnect, device number 2 [ 101.980942][ T4863] XFS (loop1): Ending clean mount [ 102.110750][ T4325] samsung 0003:0419:0001.0002: item fetching failed at offset 8/11 [ 102.134412][ T4325] samsung 0003:0419:0001.0002: parse failed [ 102.143880][ T4325] samsung: probe of 0003:0419:0001.0002 failed with error -22 [ 102.265370][ T4272] XFS (loop1): Unmounting Filesystem [ 102.337611][ T4864] usb 3-1: USB disconnect, device number 2 [ 102.690782][ T4888] loop0: detected capacity change from 0 to 32768 [ 102.726560][ T4888] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.208 (4888) [ 102.808444][ T4888] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.882162][ T4888] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.929138][ T4888] BTRFS info (device loop0): use zlib compression, level 3 [ 102.948072][ T4888] BTRFS info (device loop0): using free space tree [ 102.994658][ T4902] process 'syz.3.213' launched './file1' with NULL argv: empty string added [ 103.064507][ T4893] loop4: detected capacity change from 0 to 32768 [ 103.198175][ T4893] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 103.202795][ T4913] loop1: detected capacity change from 0 to 1764 [ 103.259854][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 103.342251][ T4888] BTRFS info (device loop0): enabling ssd optimizations [ 103.373536][ T4913] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 103.626447][ T4270] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.946690][ T4936] loop1: detected capacity change from 0 to 4096 [ 104.090622][ T4949] loop0: detected capacity change from 0 to 512 [ 104.123945][ T4951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.205508][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.256667][ T4957] loop2: detected capacity change from 0 to 64 [ 104.259201][ T4949] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.376975][ T4957] hfs: unable to locate alternate MDB [ 104.382938][ T4957] hfs: continuing without an alternate MDB [ 104.439465][ T4949] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.534543][ T4949] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 104.594067][ T4949] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.594067][ T4949] [ 104.665061][ T4949] EXT4-fs (loop0): Total free blocks count 0 [ 104.694358][ T4949] EXT4-fs (loop0): Free/Dirty block details [ 104.708511][ T4949] EXT4-fs (loop0): free_blocks=65280 [ 104.731919][ T4949] EXT4-fs (loop0): dirty_blocks=33 [ 104.752556][ T4949] EXT4-fs (loop0): Block reservation details [ 104.759580][ T4964] netlink: 'syz.1.227': attribute type 3 has an invalid length. [ 104.790499][ T4949] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 104.811973][ T4961] loop4: detected capacity change from 0 to 4096 [ 105.036260][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 105.221704][ T4977] loop0: detected capacity change from 0 to 64 [ 105.683882][ T4941] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.730471][ T4864] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.885855][ T4941] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.894451][ T4942] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.907284][ T4941] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.927152][ T4941] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.939953][ T4864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.949897][ T4941] usb 2-1: config 220 has no interface number 2 [ 105.965822][ T4864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.974384][ T4941] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.997394][ T4864] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 106.005000][ T4941] usb 2-1: config 220 interface 0 has no altsetting 0 [ 106.023885][ T4941] usb 2-1: config 220 interface 76 has no altsetting 0 [ 106.030810][ T4941] usb 2-1: config 220 interface 1 has no altsetting 0 [ 106.039661][ T4864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.060443][ T4864] usb 3-1: config 0 descriptor?? [ 106.084368][ T4941] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.093469][ T4941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.114729][ T4941] usb 2-1: Product: syz [ 106.120351][ T4942] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.141945][ T4941] usb 2-1: Manufacturer: syz [ 106.147667][ T4942] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.162038][ T4941] usb 2-1: SerialNumber: syz [ 106.190283][ T4942] usb 1-1: config 2 interface 0 has no altsetting 0 [ 106.214029][ T4942] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 106.233509][ T4942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.423623][ T4941] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 106.440591][ T4941] usb 2-1: No valid video chain found. [ 106.450862][ T4941] usb 2-1: selecting invalid altsetting 0 [ 106.503459][ T4864] uclogic 0003:5543:0042.0003: No inputs registered, leaving [ 106.519670][ T4941] usb 2-1: selecting invalid altsetting 0 [ 106.533860][ T4941] usbtest: probe of 2-1:220.1 failed with error -22 [ 106.555576][ T4864] uclogic 0003:5543:0042.0003: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 106.565149][ T4941] usb 2-1: USB disconnect, device number 2 [ 106.680552][ T4942] apple 0003:05AC:027A.0004: hidraw1: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 106.772552][ T4864] usb 3-1: USB disconnect, device number 3 [ 106.889375][ T4990] loop3: detected capacity change from 0 to 40427 [ 106.891086][ T4941] usb 1-1: USB disconnect, device number 2 [ 106.913038][ T4991] fido_id[4991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.923459][ T4992] fido_id[4992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.0/0003:05AC:027A.0004/report_descriptor': No such file or directory [ 106.956915][ T4990] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 106.998193][ T4990] F2FS-fs (loop3): invalid crc value [ 107.034428][ T4990] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.223373][ T4998] loop4: detected capacity change from 0 to 1024 [ 107.229985][ T4990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.061971][ T4266] syz-executor: attempt to access beyond end of device [ 108.061971][ T4266] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.070581][ T32] hfsplus: b-tree write err: -5, ino 4 [ 108.401551][ T5015] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 108.829837][ T5030] loop4: detected capacity change from 0 to 256 [ 108.858677][ T4865] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.881809][ T5030] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.059486][ T5037] netlink: 'syz.4.259': attribute type 2 has an invalid length. [ 109.074602][ T4865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.096655][ T4865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.112392][ T4865] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 109.121683][ T4865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.133836][ T4942] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.153072][ T4865] usb 1-1: config 0 descriptor?? [ 109.164010][ T4941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.334017][ T4942] usb 4-1: Using ep0 maxpacket: 16 [ 109.341926][ T4942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.353338][ T4942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.363718][ T4942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.376905][ T4941] usb 2-1: Using ep0 maxpacket: 16 [ 109.382489][ T4942] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 109.411147][ T4942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.422650][ T4941] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 109.441799][ T4942] usb 4-1: config 0 descriptor?? [ 109.447012][ T4941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.459212][ T4941] usb 2-1: Product: syz [ 109.470078][ T4941] usb 2-1: Manufacturer: syz [ 109.479443][ T4941] usb 2-1: SerialNumber: syz [ 109.484723][ T4940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.504863][ T4941] usb 2-1: config 0 descriptor?? [ 109.557898][ T4941] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 109.597868][ T4865] uclogic 0003:5543:0042.0005: No inputs registered, leaving [ 109.636840][ T4865] uclogic 0003:5543:0042.0005: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 109.642542][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.696620][ T4940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.716938][ T4940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.737629][ T4940] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 109.759266][ T4940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.778459][ T4940] usb 5-1: config 0 descriptor?? [ 109.816215][ T4864] usb 2-1: USB disconnect, device number 3 [ 109.855436][ T4865] usb 1-1: USB disconnect, device number 3 [ 109.882025][ T4942] koneplus 0003:1E7D:2E22.0006: item fetching failed at offset 0/2 [ 109.897861][ T5049] fido_id[5049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.904654][ T4942] koneplus 0003:1E7D:2E22.0006: parse failed [ 109.933953][ T4942] koneplus: probe of 0003:1E7D:2E22.0006 failed with error -22 [ 110.086001][ T4942] usb 4-1: USB disconnect, device number 3 [ 110.146252][ T5048] loop2: detected capacity change from 0 to 32768 [ 110.187704][ T5048] find_entry called with index = 0 [ 110.193298][ T5048] find_entry called with index = 0 [ 110.200541][ T5048] read_mapping_page failed! [ 110.206417][ T5048] ERROR: (device loop2): txCommit: [ 110.206417][ T5048] [ 110.218875][ T4940] hid-steam 0003:28DE:1142.0007: item fetching failed at offset 3/5 [ 110.228992][ T5048] ERROR: (device loop2): remounting filesystem as read-only [ 110.236886][ T4940] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 110.246154][ T4940] hid-steam: probe of 0003:28DE:1142.0007 failed with error -22 [ 110.430375][ T4942] usb 5-1: USB disconnect, device number 3 [ 111.005190][ T5068] loop0: detected capacity change from 0 to 512 [ 111.034548][ T5068] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 111.103415][ T5068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 111.143029][ T5068] System zones: 1-12 [ 111.181489][ T5068] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.272: corrupted in-inode xattr [ 111.250823][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.272: couldn't read orphan inode 15 (err -117) [ 111.290679][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.534699][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 111.548876][ T5058] loop1: detected capacity change from 0 to 32768 [ 111.558025][ T5084] loop4: detected capacity change from 0 to 64 [ 111.669232][ T5082] loop3: detected capacity change from 0 to 4096 [ 111.676518][ T5058] XFS (loop1): Mounting V5 Filesystem [ 111.785094][ T5082] ntfs: volume version 3.1. [ 111.835079][ T5058] XFS (loop1): Ending clean mount [ 111.998362][ T4272] XFS (loop1): Unmounting Filesystem [ 112.255764][ T5108] vim2m vim2m.0: vidioc_s_fmt queue busy [ 112.259407][ T5102] loop0: detected capacity change from 0 to 4096 [ 112.374486][ T5102] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 112.467238][ T5102] ntfs3: loop0: Failed to load $Extend. [ 112.560211][ T5102] ntfs3: loop0: failed to convert "076c" to iso8859-1 [ 112.832937][ T5124] sp0: Synchronizing with TNC [ 112.907507][ T5120] loop2: detected capacity change from 0 to 4096 [ 113.574602][ T5137] loop1: detected capacity change from 0 to 1024 [ 113.770063][ T5122] loop4: detected capacity change from 0 to 32768 [ 113.779884][ T46] hfsplus: b-tree write err: -5, ino 4 [ 113.798102][ T5122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.291 (5122) [ 113.869196][ T5122] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.914950][ T5122] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.935015][ T5122] BTRFS info (device loop4): enabling auto defrag [ 113.992366][ T5122] BTRFS info (device loop4): use no compression [ 114.013880][ T5122] BTRFS info (device loop4): force clearing of disk cache [ 114.017637][ T5129] loop3: detected capacity change from 0 to 32768 [ 114.021075][ T5122] BTRFS info (device loop4): max_inline at 4096 [ 114.101359][ T5129] (syz.3.294,5129,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=10, slot=0 [ 114.113264][ T5122] BTRFS info (device loop4): disabling free space tree [ 114.124350][ T5147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 114.133479][ T5129] (syz.3.294,5129,0):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 114.171001][ T5129] (syz.3.294,5129,0):ocfs2_mount_volume:1815 ERROR: status = -22 [ 114.284162][ T5129] (syz.3.294,5129,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 114.326998][ T5129] VFS: could not find a valid V7 on loop3. [ 114.369483][ T5160] loop2: detected capacity change from 0 to 64 [ 114.569296][ T5122] BTRFS info (device loop4): enabling ssd optimizations [ 114.594866][ T5122] BTRFS info (device loop4): rebuilding free space tree [ 114.638660][ T5122] BTRFS info (device loop4): disabling free space tree [ 114.666157][ T5175] loop1: detected capacity change from 0 to 256 [ 114.674359][ T5122] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.713886][ T5122] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.800941][ T5175] FAT-fs (loop1): Directory bread(block 64) failed [ 114.839980][ T5175] FAT-fs (loop1): Directory bread(block 65) failed [ 114.881209][ T5175] FAT-fs (loop1): Directory bread(block 66) failed [ 114.923693][ T5175] FAT-fs (loop1): Directory bread(block 67) failed [ 114.976397][ T5175] FAT-fs (loop1): Directory bread(block 68) failed [ 114.982996][ T5175] FAT-fs (loop1): Directory bread(block 69) failed [ 115.018510][ T5143] loop0: detected capacity change from 0 to 32768 [ 115.054025][ T5175] FAT-fs (loop1): Directory bread(block 70) failed [ 115.060829][ T5175] FAT-fs (loop1): Directory bread(block 71) failed [ 115.086385][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.088192][ T5175] FAT-fs (loop1): Directory bread(block 72) failed [ 115.125557][ T5175] FAT-fs (loop1): Directory bread(block 73) failed [ 115.390371][ T5143] XFS (loop0): Mounting V5 Filesystem [ 115.662744][ T5143] XFS (loop0): Ending clean mount [ 115.839072][ T5197] loop4: detected capacity change from 0 to 128 [ 115.884794][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.913954][ T5197] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.943421][ T5167] loop3: detected capacity change from 0 to 32768 [ 115.944964][ T5197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.974769][ T5197] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.986537][ T4270] XFS (loop0): Unmounting Filesystem [ 116.063750][ T5167] XFS (loop3): Mounting V5 Filesystem [ 116.120157][ T5185] loop2: detected capacity change from 0 to 32768 [ 116.242833][ T5185] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 116.258967][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 116.278693][ T5167] XFS (loop3): Ending clean mount [ 116.334299][ T5167] XFS (loop3): Quotacheck needed: Please wait. [ 116.350477][ T5209] loop1: detected capacity change from 0 to 2048 [ 116.365122][ T5185] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 116.491806][ T5209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.496695][ T5185] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 116.584416][ T5167] XFS (loop3): Quotacheck: Done. [ 116.824993][ T5185] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 116.986678][ T4266] XFS (loop3): Unmounting Filesystem [ 117.325584][ T5223] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 117.344199][ T5223] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 117.409550][ T5224] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 117.559938][ T5228] capability: warning: `syz.0.323' uses 32-bit capabilities (legacy support in use) [ 118.055578][ T5240] loop3: detected capacity change from 0 to 512 [ 118.105236][ T5240] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 118.139689][ T5240] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 118.187996][ T5240] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 118.223098][ T5219] loop1: detected capacity change from 0 to 32768 [ 118.241100][ T5240] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 118.340564][ T5240] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 118.365202][ T5240] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.416796][ T5219] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 118.441770][ T5240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.329: bg 0: block 34: padding at end of block bitmap is not set [ 118.522340][ T5240] Quota error (device loop3): write_blk: dquota write failed [ 118.565459][ T5240] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 118.593241][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 118.601719][ T5240] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.329: Failed to acquire dquot type 1 [ 118.699473][ T5240] EXT4-fs (loop3): 1 truncate cleaned up [ 118.721161][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.751269][ T5253] netlink: 80 bytes leftover after parsing attributes in process `syz.1.333'. [ 118.793934][ T5253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 118.828463][ T5253] tipc: MTU too low for tipc bearer [ 119.027072][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 119.218957][ T5242] loop4: detected capacity change from 0 to 32768 [ 119.273101][ T5242] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 119.273101][ T5242] [ 119.309810][ T5242] ERROR: (device loop4): remounting filesystem as read-only [ 119.323378][ T5242] xtLookup: xtSearch returned -5 [ 119.356539][ T5242] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 119.356539][ T5242] [ 119.378500][ T5242] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 119.378500][ T5242] [ 119.413359][ T5242] xtLookup: xtSearch returned -5 [ 119.448153][ T5242] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 119.448153][ T5242] [ 120.056602][ T5280] loop1: detected capacity change from 0 to 512 [ 120.070128][ T5266] loop3: detected capacity change from 0 to 32768 [ 120.110680][ T5266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.339 (5266) [ 120.138034][ T5280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.174085][ T5280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.199098][ T5266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.225152][ T5266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.295822][ T5280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.347: invalid indirect mapped block 4294967295 (level 1) [ 120.314108][ T5266] BTRFS info (device loop3): turning on sync discard [ 120.320878][ T5266] BTRFS info (device loop3): enabling disk space caching [ 120.354115][ T5266] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 120.383899][ T5266] BTRFS info (device loop3): trying to use backup root at mount time [ 120.392075][ T5266] BTRFS info (device loop3): force clearing of disk cache [ 120.407834][ T5280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.347: invalid indirect mapped block 4294967295 (level 1) [ 120.432306][ T5266] BTRFS info (device loop3): disk space caching is enabled [ 120.455910][ T5280] EXT4-fs (loop1): 2 truncates cleaned up [ 120.461740][ T5280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.546389][ T5278] loop4: detected capacity change from 0 to 32768 [ 120.662301][ T5278] XFS (loop4): Mounting V5 Filesystem [ 120.832687][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 120.912158][ T5315] loop2: detected capacity change from 0 to 1024 [ 120.931538][ T5266] BTRFS info (device loop3): rebuilding free space tree [ 120.976206][ T5278] XFS (loop4): Ending clean mount [ 121.013179][ T5278] XFS (loop4): Quotacheck needed: Please wait. [ 121.021546][ T5317] loop0: detected capacity change from 0 to 1024 [ 121.039349][ T5266] BTRFS info (device loop3): disabling free space tree [ 121.091054][ T5266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.147175][ T5266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.162320][ T5278] XFS (loop4): Quotacheck: Done. [ 121.375570][ T46] hfsplus: b-tree write err: -5, ino 4 [ 121.396003][ T5266] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.483969][ T4944] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.488589][ T5266] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 121.515190][ T5266] BTRFS info (device loop3: state M): force clearing of disk cache [ 121.566573][ T4278] XFS (loop4): Unmounting Filesystem [ 121.596256][ T5266] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.644095][ T5266] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 121.676050][ T4944] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 121.695026][ T4944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.715084][ T5266] BTRFS info (device loop3: state M): force clearing of disk cache [ 121.764927][ T4944] usb 2-1: config 0 descriptor?? [ 121.784289][ T4282] Bluetooth: hci2: command 0x2020 tx timeout [ 121.788047][ T4944] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 121.840342][ T4266] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.000353][ T4944] gspca_sn9c2028: read1 error -32 [ 122.208525][ T4944] gspca_sn9c2028: read1 error -71 [ 122.213950][ T4944] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 122.252031][ T4944] usb 2-1: USB disconnect, device number 4 [ 122.283865][ T5187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.478372][ T5187] usb 3-1: config 0 interface 0 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.485280][ T5344] loop3: detected capacity change from 0 to 64 [ 122.504614][ T5187] usb 3-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.536515][ T5187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.543208][ T5187] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 122.545239][ T5344] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 122.562867][ T5187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.584338][ T5187] usb 3-1: config 0 descriptor?? [ 122.994625][ T5357] loop1: detected capacity change from 0 to 1024 [ 123.024127][ T5187] wacom 0003:056A:00E3.0008: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0 [ 123.202078][ T32] hfsplus: b-tree write err: -5, ino 4 [ 123.237798][ T5187] usb 3-1: USB disconnect, device number 4 [ 123.463063][ T5363] fido_id[5363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.498331][ T5369] TCP: TCP_TX_DELAY enabled [ 123.791932][ T5352] loop4: detected capacity change from 0 to 32768 [ 123.844647][ T5352] XFS: ikeep mount option is deprecated. [ 123.917689][ T5352] XFS (loop4): Mounting V5 Filesystem [ 123.980618][ T5187] kernel write not supported for file /169/attr/prev (pid: 5187 comm: kworker/1:18) [ 124.052785][ T5352] XFS (loop4): Ending clean mount [ 124.359610][ T4278] XFS (loop4): Unmounting Filesystem [ 124.489577][ T5408] loop3: detected capacity change from 0 to 128 [ 124.582533][ T5408] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.632416][ T5408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.709590][ T5410] loop2: detected capacity change from 0 to 64 [ 124.797423][ T5410] hfs: hfs: Invalid key length: 94 [ 125.041065][ T4276] hfs: node 4:3 still has 1 user(s)! [ 125.140071][ T5400] loop1: detected capacity change from 0 to 32768 [ 125.206044][ T5400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.385 (5400) [ 125.305475][ T5400] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.344910][ T5400] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 125.394088][ T5400] BTRFS info (device loop1): setting nodatacow, compression disabled [ 125.402799][ T5400] BTRFS info (device loop1): disabling tree log [ 125.414868][ T5401] loop0: detected capacity change from 0 to 32768 [ 125.424328][ T5400] BTRFS info (device loop1): turning on sync discard [ 125.446794][ T5400] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.468687][ T5401] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.384 (5401) [ 125.504988][ T5400] BTRFS info (device loop1): force zstd compression, level 3 [ 125.534002][ T5401] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 125.544323][ T5400] BTRFS info (device loop1): using free space tree [ 125.561240][ T5421] loop4: detected capacity change from 0 to 4096 [ 125.574527][ T5401] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.644319][ T5401] BTRFS info (device loop0): using free space tree [ 125.737103][ T5421] ntfs3: loop4: ino=5, "/" directory corrupted [ 125.764193][ T5421] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 125.800787][ T5421] ntfs3: loop4: ino=5, "/" directory corrupted [ 125.904215][ T5400] BTRFS info (device loop1): enabling ssd optimizations [ 125.999994][ T5401] BTRFS info (device loop0): enabling ssd optimizations [ 126.234921][ T4270] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 126.652206][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.663859][ T5187] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.788542][ T5499] loop3: detected capacity change from 0 to 40427 [ 127.810436][ T5499] F2FS-fs (loop3): Invalid segment count (0) [ 127.820371][ T5499] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.857783][ T5187] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 127.891354][ T5187] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 127.908900][ T5187] usb 2-1: Product: syz [ 127.919777][ T5499] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.940164][ T5187] usb 2-1: Manufacturer: syz [ 127.988989][ T5187] usb 2-1: SerialNumber: syz [ 128.015911][ T5187] usb 2-1: config 0 descriptor?? [ 128.059397][ T5187] ch341 2-1:0.0: ch341-uart converter detected [ 128.149346][ T5499] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 128.171130][ T5499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.519407][ T5488] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.670298][ T5522] loop4: detected capacity change from 0 to 32768 [ 128.677713][ T5187] usb 2-1: failed to send control message: -71 [ 128.704062][ T5187] ch341-uart: probe of ttyUSB0 failed with error -71 [ 128.705646][ T5522] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.729098][ T5488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.736267][ T5187] usb 2-1: USB disconnect, device number 5 [ 128.771572][ T5488] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 128.771925][ T5187] ch341 2-1:0.0: device disconnected [ 128.799052][ T5488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.812567][ T5522] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.823393][ T5488] usb 1-1: config 0 descriptor?? [ 128.833680][ T4433] udevd[4433]: setting mode of /dev/bus/usb/002/005 to 020664 failed: No such file or directory [ 128.856591][ T4433] udevd[4433]: setting owner of /dev/bus/usb/002/005 to uid=0, gid=0 failed: No such file or directory [ 128.869926][ T5522] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 128.995488][ T5522] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 129.266760][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.299428][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.343931][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.362027][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.382276][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.402528][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.419364][ T5488] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 129.514042][ T5488] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 129.546269][ T5488] usb 1-1: USB disconnect, device number 4 [ 129.612985][ T5547] loop3: detected capacity change from 0 to 32768 [ 129.655011][ T5547] (syz.3.429,5547,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.694372][ T5547] (syz.3.429,5547,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.790638][ T5547] JBD2: Ignoring recovery information on journal [ 129.853384][ T5549] loop2: detected capacity change from 0 to 32768 [ 129.995932][ T5547] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 130.262855][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 130.903445][ T5558] loop1: detected capacity change from 0 to 32768 [ 131.067472][ T5558] XFS (loop1): Mounting V5 Filesystem [ 131.184267][ T5558] XFS (loop1): Ending clean mount [ 131.274804][ T5572] loop4: detected capacity change from 0 to 32768 [ 131.276808][ T5558] XFS (loop1): Quotacheck needed: Please wait. [ 131.302923][ T5572] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.441 (5572) [ 131.376806][ T5572] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 131.397922][ T5558] XFS (loop1): Quotacheck: Done. [ 131.458590][ T5572] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.495103][ T5572] BTRFS info (device loop4): enabling auto defrag [ 131.512050][ T5572] BTRFS info (device loop4): force clearing of disk cache [ 131.533309][ T5572] BTRFS info (device loop4): enabling disk space caching [ 131.596619][ T5572] BTRFS info (device loop4): max_inline at 0 [ 131.613846][ T5572] BTRFS info (device loop4): disk space caching is enabled [ 131.650847][ T4272] XFS (loop1): Unmounting Filesystem [ 131.853070][ T5578] loop3: detected capacity change from 0 to 40427 [ 131.893246][ T5578] F2FS-fs (loop3): invalid crc value [ 131.926798][ T5578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.952464][ T5572] BTRFS info (device loop4): enabling ssd optimizations [ 132.001505][ T5572] BTRFS info (device loop4): rebuilding free space tree [ 132.009478][ T5583] loop0: detected capacity change from 0 to 32768 [ 132.156623][ T5583] JBD2: Ignoring recovery information on journal [ 132.179265][ T5572] BTRFS info (device loop4): disabling free space tree [ 132.225335][ T5572] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.274022][ T5572] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.335064][ T5578] F2FS-fs (loop3): Start checkpoint disabled! [ 132.363699][ T5583] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.410119][ T5578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 132.542062][ T26] audit: type=1800 audit(1760974179.840:3): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.440" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 132.681796][ T4278] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.747621][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754012][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779968][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 132.942305][ T5474] kworker/u4:7: attempt to access beyond end of device [ 132.942305][ T5474] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.984002][ T5628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.458'. [ 133.054174][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 133.093871][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 133.123934][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 133.586712][ T5622] loop1: detected capacity change from 0 to 32768 [ 133.769555][ T5622] XFS (loop1): Mounting V5 Filesystem [ 133.955405][ T5622] XFS (loop1): Ending clean mount [ 134.006633][ T5622] XFS (loop1): Quotacheck needed: Please wait. [ 134.071954][ T5622] XFS (loop1): Quotacheck: Done. [ 134.311512][ T5640] loop2: detected capacity change from 0 to 32768 [ 134.421414][ T4272] XFS (loop1): Unmounting Filesystem [ 134.421527][ T5640] ialloc: diAlloc returned -5! [ 134.508383][ T5660] ialloc: diAlloc returned -5! [ 134.585860][ T5662] loop3: detected capacity change from 0 to 1024 [ 134.791619][ T5662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.892490][ T5672] loop2: detected capacity change from 0 to 64 [ 135.053622][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 135.071762][ T5675] netlink: 'syz.4.472': attribute type 18 has an invalid length. [ 135.118263][ T5675] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.127569][ T5675] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.136368][ T5675] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.145170][ T5675] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.214043][ T5675] Zero length message leads to an empty skb [ 135.556354][ T5688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.479'. [ 136.168554][ T5705] loop1: detected capacity change from 0 to 256 [ 136.212940][ T5705] exfat: Deprecated parameter 'utf8' [ 136.238792][ T5705] exfat: Deprecated parameter 'namecase' [ 136.275693][ T5705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 136.363126][ T5690] loop2: detected capacity change from 0 to 32768 [ 136.487789][ T5690] XFS (loop2): Mounting V5 Filesystem [ 136.511074][ T5697] loop3: detected capacity change from 0 to 32768 [ 136.528287][ T5697] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.482 (5697) [ 136.566873][ T5697] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 136.577387][ T5697] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 136.590253][ T5697] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 136.600355][ T5697] BTRFS info (device loop3): use lzo compression, level 0 [ 136.607582][ T5697] BTRFS info (device loop3): using free space tree [ 136.620617][ T5690] XFS (loop2): Ending clean mount [ 136.667565][ T5698] loop4: detected capacity change from 0 to 32768 [ 136.683209][ T5690] XFS (loop2): Quotacheck needed: Please wait. [ 136.780285][ T5690] XFS (loop2): Quotacheck: Done. [ 136.864521][ T5697] BTRFS info (device loop3): enabling ssd optimizations [ 136.997051][ T4276] XFS (loop2): Unmounting Filesystem [ 137.171971][ T4266] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 138.476472][ T5738] loop4: detected capacity change from 0 to 32768 [ 138.524112][ T5738] XFS (loop4): Invalid device [./file0], error=-16 [ 138.632135][ T5741] loop3: detected capacity change from 0 to 32768 [ 138.734026][ T5741] ERROR: (device loop3): dbDiscardAG: -EIO [ 138.734026][ T5741] [ 138.764137][ T5741] ERROR: (device loop3): remounting filesystem as read-only [ 138.878002][ T5757] program syz.4.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.958059][ T5747] loop0: detected capacity change from 0 to 32768 [ 140.180101][ T5766] loop4: detected capacity change from 0 to 32768 [ 140.286006][ T5766] XFS (loop4): Mounting V5 Filesystem [ 140.352091][ T5766] XFS (loop4): Ending clean mount [ 140.402737][ T5766] XFS (loop4): Quotacheck needed: Please wait. [ 140.462985][ T5775] loop0: detected capacity change from 0 to 32768 [ 140.492257][ T5771] loop3: detected capacity change from 0 to 40427 [ 140.502289][ T5766] XFS (loop4): Quotacheck: Done. [ 140.520229][ T5771] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 140.554109][ T5771] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.582228][ T4278] XFS (loop4): Unmounting Filesystem [ 140.589409][ T5771] F2FS-fs (loop3): invalid crc value [ 140.726362][ T5775] XFS (loop0): Mounting V5 Filesystem [ 140.734697][ T5771] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.891500][ T5775] XFS (loop0): Ending clean mount [ 140.911368][ T5813] loop2: detected capacity change from 0 to 512 [ 141.014141][ T5813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.023150][ T5813] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.068123][ T5771] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.084575][ T5771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.139227][ T5813] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.516: corrupted inode contents [ 141.220388][ T5813] EXT4-fs error (device loop2): ext4_dirty_inode:6125: inode #2: comm syz.2.516: mark_inode_dirty error [ 141.277011][ T4270] XFS (loop0): Unmounting Filesystem [ 141.285981][ T5813] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #2: comm syz.2.516: corrupted inode contents [ 141.656191][ T5796] loop1: detected capacity change from 0 to 40427 [ 141.676446][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 141.757377][ T5796] F2FS-fs (loop1): invalid crc value [ 141.795031][ T5796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.844959][ T26] audit: type=1326 audit(1760974189.140:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.2.519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79b9d8efc9 code=0x0 [ 141.931247][ T5796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.430626][ T5820] loop4: detected capacity change from 0 to 32768 [ 143.485025][ T5861] loop2: detected capacity change from 0 to 1024 [ 143.696636][ T5843] loop1: detected capacity change from 0 to 32768 [ 143.728662][ T46] hfsplus: b-tree write err: -5, ino 8 [ 143.943961][ T5482] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 143.995695][ T5843] XFS (loop1): Mounting V5 Filesystem [ 144.124073][ T5843] XFS (loop1): Ending clean mount [ 144.151580][ T5482] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 144.173311][ T5482] usb 5-1: config 0 has no interface number 0 [ 144.205703][ T5482] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.207581][ T5883] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 144.241270][ T5482] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.273892][ T5482] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 144.303358][ T5482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.330535][ T5482] usb 5-1: config 0 descriptor?? [ 144.488103][ T4272] XFS (loop1): Unmounting Filesystem [ 144.568822][ T5842] loop3: detected capacity change from 0 to 65536 [ 144.609986][ T5889] loop0: detected capacity change from 0 to 4096 [ 144.700697][ T5842] XFS (loop3): Mounting V5 Filesystem [ 144.725781][ T5889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.779812][ T5482] uclogic 0003:5543:0522.000A: No inputs registered, leaving [ 144.868522][ T5482] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input20 [ 144.960515][ T5842] XFS (loop3): Ending clean mount [ 144.970336][ T5495] usb 5-1: USB disconnect, device number 4 [ 144.995928][ T5842] XFS (loop3): Quotacheck needed: Please wait. [ 145.011254][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 145.092689][ T5842] XFS (loop3): Quotacheck: Done. [ 145.284323][ T5901] loop0: detected capacity change from 0 to 1764 [ 145.288560][ T5899] fido_id[5899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 145.323489][ T4266] XFS (loop3): Unmounting Filesystem [ 145.390370][ T5887] loop2: detected capacity change from 0 to 40427 [ 145.457970][ T5887] F2FS-fs (loop2): invalid crc value [ 145.539348][ T5887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.730343][ T5887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.933489][ T4276] syz-executor: attempt to access beyond end of device [ 145.933489][ T4276] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.133867][ T5482] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.165463][ T5922] netlink: 'syz.0.554': attribute type 5 has an invalid length. [ 146.334041][ T5482] usb 2-1: Using ep0 maxpacket: 32 [ 146.347710][ T5482] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.376215][ T5482] usb 2-1: config 0 has no interface number 0 [ 146.389086][ T5482] usb 2-1: config 0 interface 12 has no altsetting 0 [ 146.406299][ T5482] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 146.425908][ T5482] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 146.459542][ T5482] usb 2-1: Product: syz [ 146.468350][ T5482] usb 2-1: Manufacturer: syz [ 146.478723][ T5482] usb 2-1: SerialNumber: syz [ 146.500058][ T5482] usb 2-1: config 0 descriptor?? [ 147.023106][ T5949] netlink: 844 bytes leftover after parsing attributes in process `syz.0.565'. [ 147.067739][ T5949] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 147.124783][ T5482] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 147.142619][ T5482] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 147.153934][ T5482] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 147.162266][ T5482] f81534: probe of 2-1:0.12 failed with error -71 [ 147.187851][ T5482] usb 2-1: USB disconnect, device number 6 [ 147.349463][ T5959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.570'. [ 147.350635][ T5955] loop0: detected capacity change from 0 to 2048 [ 147.442306][ T5955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.480382][ T5955] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.754387][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 148.006277][ T5957] loop4: detected capacity change from 0 to 32768 [ 148.134037][ T5957] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 148.184023][ T5957] XFS (loop4): Mounting V5 Filesystem [ 148.339939][ T5957] XFS (loop4): Ending clean mount [ 148.362441][ T5957] XFS (loop4): Quotacheck needed: Please wait. [ 148.448523][ T5957] XFS (loop4): Quotacheck: Done. [ 148.597977][ T6001] loop2: detected capacity change from 0 to 1024 [ 148.606138][ T4278] XFS (loop4): Unmounting Filesystem [ 148.625521][ T6001] EXT4-fs: Ignoring removed nobh option [ 148.653668][ T6001] EXT4-fs: Ignoring removed bh option [ 148.664060][ T6001] EXT4-fs: inline encryption not supported [ 148.708009][ T6001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.745713][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 148.785348][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 148.834157][ T6001] netlink: 100 bytes leftover after parsing attributes in process `syz.2.584'. [ 148.940493][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 149.085177][ T6011] sctp: [Deprecated]: syz.1.589 (pid 6011) Use of int in max_burst socket option. [ 149.085177][ T6011] Use struct sctp_assoc_value instead [ 149.206176][ T6013] loop2: detected capacity change from 0 to 512 [ 149.218605][ T6013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.271359][ T6013] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.2.590: corrupted xattr block 95 [ 149.362459][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 149.393522][ T5999] loop3: detected capacity change from 0 to 40427 [ 149.415462][ T6013] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.590: bg 0: block 7: invalid block bitmap [ 149.432764][ T5999] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.448162][ T5999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.460703][ T5999] F2FS-fs (loop3): invalid crc value [ 149.471235][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 149.479848][ T6013] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 149.489378][ T5999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.511123][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 149.519370][ T6013] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.590: invalid indirect mapped block 69888 (level 2) [ 149.578627][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 149.593642][ T6013] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2935: inode #11: comm syz.2.590: corrupted xattr block 95 [ 149.594944][ T5999] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.621536][ T5999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.641026][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 149.648280][ T6013] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 149.663632][ T6013] EXT4-fs (loop2): 1 orphan inode deleted [ 149.670942][ T6013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.693980][ T5495] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.885477][ T5495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.911381][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 149.935618][ T5495] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 149.957992][ T5495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.986781][ T5495] usb 2-1: config 0 descriptor?? [ 150.409795][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.426474][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.450992][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.467575][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.484221][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.528484][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.551856][ T5495] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 150.644082][ T5495] hid-picolcd 0003:04D8:C002.000B: No report with id 0x11 found [ 150.689195][ T5495] usb 2-1: USB disconnect, device number 7 [ 150.714056][ T5187] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.918119][ T5187] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 150.931895][ T5187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.948995][ T5187] usb 5-1: Product: syz [ 150.958246][ T5187] usb 5-1: Manufacturer: syz [ 150.969029][ T5187] usb 5-1: SerialNumber: syz [ 150.992811][ T5187] usb 5-1: config 0 descriptor?? [ 151.006904][ T5187] usb 5-1: interface 1 not found [ 151.206294][ T5187] usb 5-1: USB disconnect, device number 5 [ 151.403064][ T6067] loop1: detected capacity change from 0 to 2048 [ 151.475390][ T6067] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.499790][ T6067] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.595237][ T6067] fs-verity: sha512 using implementation "sha512-avx2" [ 151.738737][ T6077] loop3: detected capacity change from 0 to 8 [ 151.760914][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 151.948902][ T6077] SQUASHFS error: Unable to read directory block [629:46] [ 152.015258][ T6059] loop2: detected capacity change from 0 to 40427 [ 152.047562][ T6059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 152.065827][ T6059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.131907][ T6059] F2FS-fs (loop2): invalid crc value [ 152.241878][ T6059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.398889][ T6059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.416349][ T6059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.473934][ T5495] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.673886][ T5495] usb 4-1: Using ep0 maxpacket: 16 [ 152.689552][ T5495] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 152.720105][ T5495] usb 4-1: config 0 has no interface number 0 [ 152.739905][ T5495] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.784246][ T5495] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.807855][ T5495] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 152.836859][ T5495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.850931][ T5495] usb 4-1: config 0 descriptor?? [ 153.004882][ T22] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 153.088718][ T6111] nbd: must specify at least one socket [ 153.205814][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.253712][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.271548][ T22] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 153.280927][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.320253][ T22] usb 1-1: config 0 descriptor?? [ 153.334059][ T6103] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 153.483702][ T5495] usb 4-1: USB disconnect, device number 4 [ 153.692367][ T6105] loop1: detected capacity change from 0 to 40427 [ 153.737010][ T6105] F2FS-fs (loop1): invalid crc value [ 153.784070][ T6105] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.786599][ T22] nzxt-kraken2 0003:1E71:170E.000D: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 153.874861][ T6125] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 153.899815][ T6105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.984453][ T22] usb 1-1: USB disconnect, device number 5 [ 154.039947][ T6105] F2FS-fs (loop1): Can't flush 3 in 0 for segs_per_sec 1 != 1 [ 154.149728][ T6127] fido_id[6127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.177225][ T4272] syz-executor: attempt to access beyond end of device [ 154.177225][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.208447][ T6133] loop3: detected capacity change from 0 to 512 [ 154.262910][ T6133] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.311414][ T6133] EXT4-fs: Ignoring removed bh option [ 154.336381][ T6133] EXT4-fs: Ignoring removed nobh option [ 154.366144][ T6133] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 154.377962][ T6133] EXT4-fs (loop3): invalid journal inode [ 154.498164][ T4282] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 154.650155][ T6141] loop4: detected capacity change from 0 to 2048 [ 154.699745][ T6141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.717619][ T6143] loop2: detected capacity change from 0 to 512 [ 154.726140][ T6141] NILFS (loop4): mounting unchecked fs [ 154.743090][ T6145] loop0: detected capacity change from 0 to 1024 [ 154.786356][ T6141] NILFS (loop4): recovery complete [ 154.876897][ T6150] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.907127][ T6143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.989463][ T6143] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.284630][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 155.320140][ T6159] netlink: 44 bytes leftover after parsing attributes in process `syz.4.648'. [ 155.376973][ T6159] netlink: 43 bytes leftover after parsing attributes in process `syz.4.648'. [ 155.427932][ T6159] netlink: 'syz.4.648': attribute type 5 has an invalid length. [ 155.449266][ T6159] netlink: 43 bytes leftover after parsing attributes in process `syz.4.648'. [ 155.661443][ T6173] loop4: detected capacity change from 0 to 64 [ 155.691264][ T6170] loop2: detected capacity change from 0 to 2048 [ 155.704444][ T26] audit: type=1326 audit(1760974203.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.0.655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3ff38efc9 code=0x0 [ 155.766112][ T6170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.862225][ T6170] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.090708][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 156.248777][ T6171] loop1: detected capacity change from 0 to 32768 [ 156.256631][ T6182] xt_socket: unknown flags 0x8 [ 156.312760][ T6171] XFS (loop1): Mounting V5 Filesystem [ 156.381336][ T6194] loop4: detected capacity change from 0 to 64 [ 156.399747][ T6171] XFS (loop1): Ending clean mount [ 156.427491][ T6161] loop3: detected capacity change from 0 to 40427 [ 156.450878][ T6161] F2FS-fs (loop3): invalid crc value [ 156.453362][ T6171] XFS (loop1): Quotacheck needed: Please wait. [ 156.465872][ T6161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.538673][ T6171] XFS (loop1): Quotacheck: Done. [ 156.573414][ T6161] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 156.591609][ T6161] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 156.619798][ T6161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 156.926066][ T4272] XFS (loop1): Unmounting Filesystem [ 157.381793][ T6217] loop0: detected capacity change from 0 to 1024 [ 157.437450][ T6217] EXT4-fs (loop0): filesystem is read-only [ 157.463839][ T6217] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 1280 [ 157.512914][ T6219] loop3: detected capacity change from 0 to 2048 [ 157.594578][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.603124][ T6219] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.629843][ T6224] loop0: detected capacity change from 0 to 256 [ 157.761029][ T6224] FAT-fs (loop0): Directory bread(block 64) failed [ 157.793955][ T6224] FAT-fs (loop0): Directory bread(block 65) failed [ 157.822946][ T6224] FAT-fs (loop0): Directory bread(block 66) failed [ 157.850304][ T6224] FAT-fs (loop0): Directory bread(block 67) failed [ 157.887572][ T6224] FAT-fs (loop0): Directory bread(block 68) failed [ 157.914580][ T6224] FAT-fs (loop0): Directory bread(block 69) failed [ 157.919787][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 157.921522][ T6224] FAT-fs (loop0): Directory bread(block 70) failed [ 157.921554][ T6224] FAT-fs (loop0): Directory bread(block 71) failed [ 157.921629][ T6224] FAT-fs (loop0): Directory bread(block 72) failed [ 157.921656][ T6224] FAT-fs (loop0): Directory bread(block 73) failed [ 158.303153][ T6234] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 158.316479][ T4947] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.516730][ T4947] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 158.553839][ T4947] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 158.581180][ T4947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.599703][ T4947] usb 3-1: Product: syz [ 158.604033][ T4947] usb 3-1: Manufacturer: syz [ 158.613834][ T4947] usb 3-1: SerialNumber: syz [ 158.625575][ T4947] usb 3-1: config 0 descriptor?? [ 158.652307][ T4947] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 158.696077][ T4947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.734653][ T4947] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 158.784030][ T4947] usb 3-1: media controller created [ 158.802563][ T4947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.042490][ T4947] DVB: Unable to find symbol mt352_attach() [ 159.219166][ T4947] DVB: Unable to find symbol nxt6000_attach() [ 159.228353][ T4947] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 159.248946][ T6238] loop1: detected capacity change from 0 to 32768 [ 159.276960][ T4947] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 159.288525][ T6238] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.676 (6238) [ 159.329689][ T4947] dvb-usb: schedule remote query interval to 1000 msecs. [ 159.356107][ T4947] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 159.381306][ T6240] loop4: detected capacity change from 0 to 32768 [ 159.383597][ T6262] loop0: detected capacity change from 0 to 256 [ 159.391063][ T4947] dvb-usb: bulk message failed: -22 (7/0) [ 159.401537][ T4947] dvb-usb: bulk message failed: -22 (7/0) [ 159.418172][ T4947] usb 3-1: USB disconnect, device number 5 [ 159.463060][ T6261] loop3: detected capacity change from 0 to 2048 [ 159.489829][ T6240] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.675 (6240) [ 159.507820][ T6238] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 159.529495][ T6262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 159.552118][ T6238] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 159.580304][ T6261] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.602577][ T6238] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.615651][ T4947] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 159.615672][ T6261] NILFS (loop3): mounting unchecked fs [ 159.673874][ T6238] BTRFS info (device loop1): use zstd compression, level 3 [ 159.715362][ T6238] BTRFS info (device loop1): using free space tree [ 159.739102][ T6240] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 159.758364][ T6261] NILFS (loop3): recovery complete [ 159.794093][ T6240] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.819094][ T6240] BTRFS info (device loop4): force zlib compression, level 3 [ 159.872974][ T6268] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.899389][ T6240] BTRFS info (device loop4): force clearing of disk cache [ 159.929585][ T6240] BTRFS info (device loop4): enabling disk space caching [ 160.020652][ T6240] BTRFS info (device loop4): doing ref verification [ 160.039845][ T6275] loop0: detected capacity change from 0 to 512 [ 160.084076][ T6240] BTRFS info (device loop4): allowing degraded mounts [ 160.094050][ T6240] BTRFS info (device loop4): disk space caching is enabled [ 160.137208][ T6275] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 160.174761][ T6275] System zones: 0-2, 18-18, 34-34 [ 160.222503][ T6275] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.689: bg 0: block 248: padding at end of block bitmap is not set [ 160.257916][ T6275] Quota error (device loop0): write_blk: dquota write failed [ 160.287388][ T6275] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 160.303960][ T6238] BTRFS info (device loop1): enabling ssd optimizations [ 160.384361][ T6275] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.689: Failed to acquire dquot type 1 [ 160.401591][ T6275] EXT4-fs (loop0): 1 truncate cleaned up [ 160.407696][ T6275] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 160.421535][ T6275] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.558316][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 160.656705][ T6240] BTRFS info (device loop4): enabling ssd optimizations [ 160.678874][ T6240] BTRFS info (device loop4): rebuilding free space tree [ 160.772873][ T6240] BTRFS info (device loop4): disabling free space tree [ 160.785430][ T6240] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.813842][ T6240] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.875325][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 161.025679][ T4278] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 161.221108][ T4433] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop4 scanned by udevd (4433) [ 161.812667][ T6336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'. [ 161.835588][ T6339] loop4: detected capacity change from 0 to 1024 [ 162.046974][ T1076] hfsplus: b-tree write err: -5, ino 4 [ 162.144896][ T6321] loop0: detected capacity change from 0 to 40427 [ 162.165361][ T6321] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 162.183398][ T6321] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.198424][ T6348] loop4: detected capacity change from 0 to 256 [ 162.220695][ T6321] F2FS-fs (loop0): invalid crc value [ 162.275359][ T6321] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.299574][ T6348] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.352200][ T6348] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.380733][ T6348] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.405929][ T4938] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 162.462902][ T6321] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.474124][ T6321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.605913][ T4938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 162.633851][ T4938] usb 3-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 162.671952][ T4938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.680915][ T6362] syz.3.714[6362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.681052][ T6362] syz.3.714[6362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.709762][ T4938] usb 3-1: config 0 descriptor?? [ 162.784687][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.120421][ T6375] program syz.4.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.206818][ T4938] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 163.234060][ T4938] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 163.249225][ T4938] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 163.273864][ T4938] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 163.290996][ T4938] wacom 0003:056A:5002.000E: unknown main item tag 0x0 [ 163.329332][ T4938] wacom 0003:056A:5002.000E: hidraw0: USB HID vf.3d Device [HID 056a:5002] on usb-dummy_hcd.2-1/input0 [ 163.361045][ T6380] loop4: detected capacity change from 0 to 256 [ 163.368191][ T6381] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 163.385996][ T6380] exfat: Deprecated parameter 'utf8' [ 163.431430][ T4938] usb 3-1: USB disconnect, device number 6 [ 163.443550][ T6380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 163.735342][ T6384] fido_id[6384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 163.977433][ T6399] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 164.019860][ T6399] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 164.183271][ T6405] loop4: detected capacity change from 0 to 64 [ 164.311083][ T6393] loop1: detected capacity change from 0 to 32768 [ 164.373436][ T6393] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 164.397784][ T6393] XFS (loop1): Mounting V5 Filesystem [ 164.502703][ T6393] XFS (loop1): Ending clean mount [ 164.529253][ T6393] XFS (loop1): Quotacheck needed: Please wait. [ 164.590295][ T6393] XFS (loop1): Quotacheck: Done. [ 164.702532][ T4272] XFS (loop1): Unmounting Filesystem [ 165.141179][ T6427] 9pnet_fd: p9_fd_create_unix (6427): problem connecting socket: éq‰Y’3aK: -111 [ 165.385527][ T6422] loop2: detected capacity change from 0 to 32768 [ 165.412452][ T6422] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.736 (6422) [ 165.457538][ T6422] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.467938][ T4282] Bluetooth: hci4: command 0x0401 tx timeout [ 165.496075][ T6422] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 165.524120][ T4938] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 165.542570][ T6422] BTRFS info (device loop2): using free space tree [ 165.716145][ T4938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.736912][ T6422] BTRFS info (device loop2): enabling ssd optimizations [ 165.764927][ T4938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.807043][ T4938] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 165.833859][ T4938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.855296][ T4938] usb 2-1: config 0 descriptor?? [ 165.889313][ T4938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 165.913539][ T4938] dvb-usb: bulk message failed: -22 (3/0) [ 165.941283][ T6454] loop4: detected capacity change from 0 to 764 [ 165.944485][ T4938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 165.964167][ T4276] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.983690][ T6454] rock: directory entry would overflow storage [ 165.993108][ T4938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 166.007845][ T6454] rock: sig=0x4654, size=5, remaining=4 [ 166.024433][ T4938] usb 2-1: media controller created [ 166.053348][ T4938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.079154][ T6429] dvb-usb: bulk message failed: -22 (2/0) [ 166.117153][ T4938] dvb-usb: bulk message failed: -22 (6/0) [ 166.134884][ T4938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.179294][ T4938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 166.229045][ T4938] dvb-usb: schedule remote query interval to 150 msecs. [ 166.243815][ T4938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.275945][ T4938] usb 2-1: USB disconnect, device number 8 [ 166.360823][ T4375] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop2 scanned by udevd (4375) [ 166.531095][ T4938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.950508][ T6507] rdma_op ffff888058d9a9f0 conn xmit_rdma 0000000000000000 [ 167.995294][ T6509] loop1: detected capacity change from 0 to 512 [ 168.139726][ T6509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.163967][ T6509] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.254996][ T6509] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 168.278946][ T6516] loop2: detected capacity change from 0 to 4096 [ 168.394728][ T6520] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.407341][ T6521] usb usb8: usbfs: process 6521 (syz.3.772) did not claim interface 0 before use [ 168.461662][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 168.555645][ T6516] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 168.611404][ T6516] Remounting filesystem read-only [ 168.974833][ T6467] loop4: detected capacity change from 0 to 40427 [ 169.019264][ T6467] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 169.075153][ T6467] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.156505][ T6467] F2FS-fs (loop4): invalid crc value [ 169.190986][ T6537] loop1: detected capacity change from 0 to 256 [ 169.213097][ T6537] exfat: Deprecated parameter 'namecase' [ 169.233616][ T6537] exfat: Deprecated parameter 'namecase' [ 169.262467][ T6467] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.277542][ T6537] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 169.340642][ T6537] syz.1.779: attempt to access beyond end of device [ 169.340642][ T6537] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 169.464567][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.781'. [ 169.589625][ T6467] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 169.648143][ T6467] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.682073][ T6549] loop1: detected capacity change from 0 to 1024 [ 169.703331][ T6549] EXT4-fs: Ignoring removed nobh option [ 169.770497][ T6549] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.782: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.795877][ T6528] loop2: detected capacity change from 0 to 32768 [ 169.873959][ T6549] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.782: couldn't read orphan inode 11 (err -117) [ 169.899863][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.983318][ T6549] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.782: Invalid block bitmap block 0 in block_group 0 [ 170.002990][ T6528] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 170.022647][ T6528] XFS (loop2): Mounting V5 Filesystem [ 170.127550][ T6549] Quota error (device loop1): write_blk: dquota write failed [ 170.201332][ T6549] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 170.224936][ T6549] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.782: Failed to acquire dquot type 0 [ 170.257727][ T6528] XFS (loop2): Ending clean mount [ 170.273658][ T6528] XFS (loop2): Quotacheck needed: Please wait. [ 170.404600][ T6528] XFS (loop2): Quotacheck: Done. [ 170.440637][ T9] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm kworker/u4:0: Invalid inode table block 8589934593 in block_group 0 [ 170.517248][ T4276] XFS (loop2): Unmounting Filesystem [ 170.520886][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 170.843317][ T6570] vivid-000: disconnect [ 170.864638][ T6569] vivid-000: reconnect [ 170.871992][ T6548] loop3: detected capacity change from 0 to 32768 [ 171.268454][ T6581] loop4: detected capacity change from 0 to 256 [ 171.314765][ T6581] exfat: Deprecated parameter 'utf8' [ 171.348311][ T6581] exfat: Deprecated parameter 'utf8' [ 171.383121][ T6581] exfat: Deprecated parameter 'utf8' [ 171.430963][ T6581] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 171.614237][ T5490] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.740012][ T6594] program syz.2.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.828735][ T5490] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 171.854398][ T5490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.882336][ T5490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.909060][ T5490] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 171.922778][ T5490] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 171.937895][ T5490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.951125][ T4325] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.977021][ T5490] usb 2-1: config 0 descriptor?? [ 172.156898][ T4325] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.168003][ T4325] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 172.178127][ T4325] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.204009][ T4325] usb 4-1: config 220 has no interface number 2 [ 172.216952][ T4325] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 172.264001][ T4325] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 172.295760][ T4325] usb 4-1: config 220 interface 0 has no altsetting 0 [ 172.324617][ T4325] usb 4-1: config 220 interface 76 has no altsetting 0 [ 172.331673][ T4325] usb 4-1: config 220 interface 1 has no altsetting 0 [ 172.359343][ T4325] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.378823][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.391704][ T4325] usb 4-1: Product: syz [ 172.398839][ T5490] holtek_kbd 0003:04D9:A055.000F: unbalanced delimiter at end of report description [ 172.419453][ T4325] usb 4-1: Manufacturer: syz [ 172.434065][ T5490] holtek_kbd: probe of 0003:04D9:A055.000F failed with error -22 [ 172.441974][ T4325] usb 4-1: SerialNumber: syz [ 172.601761][ T4865] usb 2-1: USB disconnect, device number 9 [ 172.676599][ T4325] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 172.690523][ T4325] usb 4-1: No valid video chain found. [ 172.700113][ T6615] loop0: detected capacity change from 0 to 512 [ 172.703535][ T4325] usb 4-1: selecting invalid altsetting 0 [ 172.746523][ T6615] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 172.757394][ T4325] usb 4-1: selecting invalid altsetting 0 [ 172.788096][ T4325] usbtest: probe of 4-1:220.1 failed with error -22 [ 172.795687][ T6615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 172.814027][ T6615] System zones: 1-12 [ 172.818977][ T6615] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.826536][ T6615] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.810: invalid indirect mapped block 2 (level 2) [ 172.843247][ T6615] EXT4-fs (loop0): 1 truncate cleaned up [ 172.849060][ T6615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.885134][ T4325] usb 4-1: USB disconnect, device number 5 [ 173.002077][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 173.070762][ T6620] loop2: detected capacity change from 0 to 64 [ 173.364975][ T6596] loop4: detected capacity change from 0 to 40427 [ 173.407121][ T6596] F2FS-fs (loop4): invalid crc value [ 173.430974][ T6596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.565403][ T6636] loop1: detected capacity change from 0 to 16 [ 173.612194][ T6596] F2FS-fs (loop4): Start checkpoint disabled! [ 173.627612][ T6636] erofs: (device loop1): mounted with root inode @ nid 36. [ 173.677005][ T6596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 173.730792][ T6636] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 174.010503][ T9] kworker/u4:0: attempt to access beyond end of device [ 174.010503][ T9] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 174.017241][ T6647] device wlan1 entered promiscuous mode [ 174.067549][ T6647] device wlan1 left promiscuous mode [ 174.700317][ T6669] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 174.816997][ T6675] MPTCP: kernel_bind error, err=-22 [ 175.250035][ T6691] loop0: detected capacity change from 0 to 1024 [ 175.356477][ T26] audit: type=1800 audit(1760974222.660:6): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.844" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 175.661558][ T6705] loop4: detected capacity change from 0 to 128 [ 175.698665][ T6705] hpfs: hpfs_map_sector(): read error [ 175.727584][ T6705] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 175.798935][ T6705] hpfs: hpfs_map_sector(): read error [ 175.859458][ T4375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.890161][ T6671] loop1: detected capacity change from 0 to 32768 [ 176.020078][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 176.039467][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 176.072627][ T6671] XFS (loop1): Mounting V5 Filesystem [ 176.178967][ T6671] XFS (loop1): Ending clean mount [ 176.278011][ T6671] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 176.336577][ T6671] XFS (loop1): Unmount and run xfs_repair [ 176.374180][ T6671] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 176.434635][ T6671] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 176.443695][ T6671] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 176.504153][ T6671] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 176.540858][ T6727] loop0: detected capacity change from 0 to 16 [ 176.555559][ T6671] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 176.593344][ T6727] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.614355][ T6671] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 176.623277][ T6671] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 176.694365][ T6671] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.715167][ T6671] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.733239][ T6721] loop3: detected capacity change from 0 to 32768 [ 176.740477][ T6671] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 176.844761][ T4272] XFS (loop1): Unmounting Filesystem [ 176.993351][ T6742] loop2: detected capacity change from 0 to 16 [ 177.007028][ T6721] XFS (loop3): Mounting V5 Filesystem [ 177.094711][ T6742] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 177.129960][ T4433] udevd[4433]: incorrect cramfs checksum on /dev/loop2 [ 177.166040][ T6739] loop4: detected capacity change from 0 to 40427 [ 177.219876][ T6739] F2FS-fs (loop4): invalid crc value [ 177.233651][ T6721] XFS (loop3): Ending clean mount [ 177.251768][ T6721] XFS (loop3): Quotacheck needed: Please wait. [ 177.262619][ T6739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.447480][ T6721] XFS (loop3): Quotacheck: Done. [ 177.523358][ T6739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.639522][ T4266] XFS (loop3): Unmounting Filesystem [ 178.461587][ T6772] loop0: detected capacity change from 0 to 256 [ 178.468552][ T5490] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.511302][ T6772] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.535317][ T6772] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 178.572356][ T6772] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 178.665636][ T5490] usb 2-1: Using ep0 maxpacket: 8 [ 178.699640][ T5490] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 178.735069][ T5490] usb 2-1: config 0 has no interface number 0 [ 178.749928][ T5490] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 178.789937][ T5490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.844487][ T5490] usb 2-1: config 0 descriptor?? [ 178.879322][ T6769] loop3: detected capacity change from 0 to 40427 [ 178.921402][ T6769] F2FS-fs (loop3): invalid crc value [ 178.946027][ T6769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.954437][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'. [ 178.977995][ T6777] loop4: detected capacity change from 0 to 4096 [ 178.985250][ T5490] viperboard 2-1:0.143: version 0.00 found at bus 002 address 010 [ 179.089404][ T5490] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 179.127929][ T5490] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 179.130544][ T6769] F2FS-fs (loop3): Start checkpoint disabled! [ 179.163027][ T6769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 179.229013][ T5490] usb 2-1: USB disconnect, device number 10 [ 179.646567][ T1076] kworker/u4:5: attempt to access beyond end of device [ 179.646567][ T1076] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 179.705256][ T6777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.763847][ T6777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.818018][ T6777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.041319][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 180.483884][ T4865] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.689477][ T4865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.711287][ T4865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.731912][ T4865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.773220][ T4865] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.803890][ T4865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.838555][ T4865] usb 5-1: config 0 descriptor?? [ 180.871421][ T4865] hub 5-1:0.0: USB hub found [ 180.880998][ T6835] loop1: detected capacity change from 0 to 64 [ 181.069934][ T4865] hub 5-1:0.0: 14 ports detected [ 181.082714][ T4865] hub 5-1:0.0: insufficient power available to use all downstream ports [ 181.494770][ T4865] usb 5-1: USB disconnect, device number 6 [ 181.571544][ T6849] IPVS: Scheduler module ip_vs_ not found [ 181.655539][ T6858] loop2: detected capacity change from 0 to 1024 [ 181.671238][ T6858] EXT4-fs: Ignoring removed nobh option [ 181.727661][ T6858] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.907: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 181.754837][ T6858] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.907: couldn't read orphan inode 11 (err -117) [ 181.784423][ T5491] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 181.833924][ T6858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.950153][ T6858] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.907: Invalid block bitmap block 0 in block_group 0 [ 182.011852][ T5491] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.032260][ T5491] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 182.055226][ T6858] Quota error (device loop2): write_blk: dquota write failed [ 182.083028][ T5491] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 182.106727][ T6858] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 182.127291][ T5491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.147639][ T6858] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.907: Failed to acquire dquot type 0 [ 182.172336][ T5491] usb 4-1: config 0 descriptor?? [ 182.193700][ T5491] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 182.220235][ T5491] dvb-usb: bulk message failed: -22 (3/0) [ 182.231295][ T5491] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 182.270836][ T5491] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 182.282977][ T5491] usb 4-1: media controller created [ 182.297562][ T5491] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.340453][ T5491] dvb-usb: bulk message failed: -22 (6/0) [ 182.346726][ T11] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm kworker/u4:1: Invalid inode table block 8589934593 in block_group 0 [ 182.356667][ T5491] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 182.382937][ T5491] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 182.383707][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 182.401373][ T6856] dvb-usb: bulk message failed: -22 (2/0) [ 182.465667][ T5491] dvb-usb: schedule remote query interval to 150 msecs. [ 182.473029][ T5491] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 182.533811][ T5491] usb 4-1: USB disconnect, device number 6 [ 182.612592][ T5491] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 182.963543][ T6888] binder: 6887:6888 ioctl 541b 0 returned -22 [ 183.220169][ T6896] device wlan1 entered promiscuous mode [ 183.229569][ T6895] loop3: detected capacity change from 0 to 1024 [ 183.254270][ T6896] device wlan1 left promiscuous mode [ 183.260408][ T6895] EXT4-fs: Ignoring removed nobh option [ 183.320139][ T6899] sctp: [Deprecated]: syz.4.925 (pid 6899) Use of int in maxseg socket option. [ 183.320139][ T6899] Use struct sctp_assoc_value instead [ 183.342236][ T6895] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.924: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 183.391819][ T6895] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.924: couldn't read orphan inode 11 (err -117) [ 183.410040][ T6895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.442017][ T6895] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.924: Invalid block bitmap block 0 in block_group 0 [ 183.511827][ T6895] Quota error (device loop3): write_blk: dquota write failed [ 183.531349][ T6883] loop0: detected capacity change from 0 to 32768 [ 183.544915][ T6895] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 183.590561][ T6883] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 183.613024][ T6895] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.924: Failed to acquire dquot type 0 [ 183.665490][ T6883] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 183.791314][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 183.819244][ T6910] mkiss: ax0: crc mode is auto. [ 183.895562][ T32] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 183.925673][ T26] audit: type=1326 audit(1760974231.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 183.942693][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 184.093351][ T26] audit: type=1326 audit(1760974231.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 184.196148][ T6918] loop3: detected capacity change from 0 to 16 [ 184.209162][ T26] audit: type=1326 audit(1760974231.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 184.259448][ T6918] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.323849][ T26] audit: type=1326 audit(1760974231.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 184.409027][ T26] audit: type=1326 audit(1760974231.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 184.521994][ T26] audit: type=1326 audit(1760974231.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ff38efc9 code=0x7ffc0000 [ 184.697698][ T5490] kernel write not supported for file /media6 (pid: 5490 comm: kworker/0:14) [ 184.715388][ T4947] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 184.723719][ T6908] loop2: detected capacity change from 0 to 40427 [ 184.799697][ T6908] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.833979][ T4938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.870919][ T6908] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 184.915931][ T4947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.933854][ T6908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.936018][ T4947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.975177][ T4947] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 184.996660][ T4947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.024434][ T4947] usb 5-1: config 0 descriptor?? [ 185.035330][ T4938] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.049517][ T4947] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 185.057875][ T4938] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 185.073574][ T4947] dvb-usb: bulk message failed: -22 (3/0) [ 185.081889][ T4938] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.113579][ T4947] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 185.126650][ T4938] usb 4-1: config 220 has no interface number 2 [ 185.140200][ T4947] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 185.148803][ T4938] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.169601][ T4947] usb 5-1: media controller created [ 185.175751][ T4276] syz-executor: attempt to access beyond end of device [ 185.175751][ T4276] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.183469][ T4947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.200760][ T4938] usb 4-1: config 220 interface 0 has no altsetting 0 [ 185.208207][ T4938] usb 4-1: config 220 interface 76 has no altsetting 0 [ 185.221983][ T4938] usb 4-1: config 220 interface 1 has no altsetting 0 [ 185.237607][ T4947] dvb-usb: bulk message failed: -22 (6/0) [ 185.244461][ T4947] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 185.259059][ T4938] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.270943][ T6924] dvb-usb: bulk message failed: -22 (2/0) [ 185.277213][ T4938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.288151][ T4947] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 185.307285][ T4938] usb 4-1: Product: syz [ 185.320245][ T4947] dvb-usb: schedule remote query interval to 150 msecs. [ 185.327559][ T4938] usb 4-1: Manufacturer: syz [ 185.332253][ T4947] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 185.340771][ T4938] usb 4-1: SerialNumber: syz [ 185.383620][ T4947] usb 5-1: USB disconnect, device number 7 [ 185.570614][ T4938] usb 4-1: selecting invalid altsetting 0 [ 185.580346][ T4938] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 185.594657][ T4938] usb 4-1: No valid video chain found. [ 185.635936][ T4938] usb 4-1: selecting invalid altsetting 0 [ 185.663846][ T4938] usbtest: probe of 4-1:220.1 failed with error -22 [ 185.691019][ T4938] usb 4-1: USB disconnect, device number 7 [ 185.731517][ T6939] loop1: detected capacity change from 0 to 32768 [ 185.759563][ T4947] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 185.821413][ T6939] XFS (loop1): Mounting V5 Filesystem [ 186.032375][ T6939] XFS (loop1): Ending clean mount [ 186.061566][ T6939] XFS (loop1): Quotacheck needed: Please wait. [ 186.141554][ T6939] XFS (loop1): Quotacheck: Done. [ 186.319130][ T4272] XFS (loop1): Unmounting Filesystem [ 186.403602][ T6964] device wlan1 entered promiscuous mode [ 186.439629][ T6964] device wlan1 left promiscuous mode [ 186.477579][ T6971] loop2: detected capacity change from 0 to 512 [ 186.502939][ T6971] EXT4-fs: Ignoring removed oldalloc option [ 186.587739][ T6971] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.954: Parent and EA inode have the same ino 15 [ 186.609669][ T6971] EXT4-fs (loop2): 1 orphan inode deleted [ 186.648425][ T6971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 186.889469][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 187.015702][ T6983] team0: Device vxcan3 is of different type [ 187.086676][ T6989] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 187.314037][ T4947] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 187.361959][ T6998] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 187.371412][ T6998] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.965'. [ 187.506988][ T4947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.525422][ T4947] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.564635][ T4947] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.593831][ T4947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.628476][ T4947] usb 3-1: config 0 descriptor?? [ 187.635424][ T7007] loop0: detected capacity change from 0 to 1024 [ 187.649129][ T4947] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.679252][ T4947] dvb-usb: bulk message failed: -22 (3/0) [ 187.712471][ T4947] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.742966][ T4947] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.759090][ T4947] usb 3-1: media controller created [ 187.784349][ T4947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.830431][ T4947] dvb-usb: bulk message failed: -22 (6/0) [ 187.833796][ T32] hfsplus: b-tree write err: -5, ino 3 [ 187.861884][ T6987] dvb-usb: bulk message failed: -22 (2/0) [ 187.874231][ T4947] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 187.913302][ T4947] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 187.975164][ T4947] dvb-usb: schedule remote query interval to 150 msecs. [ 187.999947][ T4947] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.042140][ T4947] usb 3-1: USB disconnect, device number 7 [ 188.073616][ T7015] loop3: detected capacity change from 0 to 16 [ 188.107918][ T7015] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.135197][ T4947] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.198125][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 188.198141][ T26] audit: type=1800 audit(1760974235.500:15): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.974" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 188.270482][ T7017] loop4: detected capacity change from 0 to 1024 [ 188.304904][ T7017] EXT4-fs: inline encryption not supported [ 188.336824][ T7017] EXT4-fs: Ignoring removed i_version option [ 188.401220][ T7017] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.975: lblock 2 mapped to illegal pblock 2 (length 1) [ 188.522085][ T7005] loop1: detected capacity change from 0 to 40427 [ 188.543155][ T7017] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 188.555231][ T7017] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.975: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.580510][ T7017] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 188.591424][ T7005] F2FS-fs (loop1): invalid crc value [ 188.621515][ T7017] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.975: Failed to acquire dquot type 0 [ 188.639304][ T7005] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.724011][ T7017] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem [ 188.740632][ T7005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.762053][ T7017] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.975: mark_inode_dirty error [ 188.775905][ T7017] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 188.786530][ T7017] EXT4-fs (loop4): 1 orphan inode deleted [ 188.796448][ T7017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.811017][ T6791] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.853885][ T26] audit: type=1800 audit(1760974236.140:16): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.969" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 188.874159][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.892251][ T6791] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 188.911318][ T6791] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:8: Failed to release dquot type 0 [ 189.017021][ T7029] loop2: detected capacity change from 0 to 8192 [ 189.036780][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 189.042906][ T4278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.074246][ T4272] syz-executor: attempt to access beyond end of device [ 189.074246][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.123564][ T7029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.155898][ T4278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem [ 189.167866][ T7029] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 189.188668][ T4278] EXT4-fs error (device loop4): ext4_quota_off:7122: inode #3: comm syz-executor: mark_inode_dirty error [ 189.201985][ T7029] REISERFS (device loop2): using ordered data mode [ 189.244013][ T7029] reiserfs: using flush barriers [ 189.250356][ T7029] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.362071][ T7029] REISERFS (device loop2): checking transaction log (loop2) [ 189.405060][ T7029] REISERFS (device loop2): Using r5 hash to sort names [ 189.413676][ T7029] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 189.651195][ T7047] loop4: detected capacity change from 0 to 256 [ 189.698741][ T7047] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.732731][ T7047] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 189.798663][ T7047] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 190.054344][ T7054] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 190.060845][ T7054] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 190.091206][ T7054] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 190.121448][ T7054] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 190.148673][ T7054] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 190.169011][ T7054] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 190.182864][ T7054] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 190.203862][ T7054] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 190.221316][ T7054] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 190.259013][ T7054] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 190.269273][ T7054] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 190.284250][ T7054] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 190.297218][ T7066] loop2: detected capacity change from 0 to 512 [ 190.308511][ T7054] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 190.326658][ T7066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.336690][ T7054] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 190.345506][ T7054] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 190.352144][ T7054] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 190.374414][ T7054] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 190.400799][ T7054] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 190.421315][ T7066] EXT4-fs (loop2): 1 truncate cleaned up [ 190.450310][ T7066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.503415][ T7066] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.995: corrupted in-inode xattr [ 190.538062][ T7066] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1733: inode #15: comm syz.2.995: unable to update i_inline_off [ 190.574321][ T7066] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.995: corrupted in-inode xattr [ 190.728895][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 191.154411][ T7093] sd 0:0:1:0: device reset [ 191.264064][ T7099] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1010'. [ 191.394264][ T7104] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 191.474087][ T7104] CIFS: Unable to determine destination address [ 191.563192][ T7115] loop1: detected capacity change from 0 to 256 [ 191.665900][ T7115] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 191.683330][ T7118] netlink: 642 bytes leftover after parsing attributes in process `syz.3.1019'. [ 192.489005][ T7143] loop3: detected capacity change from 0 to 4096 [ 192.578884][ T7144] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.830922][ T7124] loop0: detected capacity change from 0 to 32768 [ 192.916662][ T7124] XFS (loop0): Mounting V5 Filesystem [ 193.061607][ T7124] XFS (loop0): Ending clean mount [ 193.134311][ T4865] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 193.280401][ T4270] XFS (loop0): Unmounting Filesystem [ 193.342678][ T4865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.342704][ T4865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.349994][ T4865] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.400863][ T4865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.400890][ T4865] usb 5-1: SerialNumber: syz [ 193.624522][ T4865] usb 5-1: 0:2 : does not exist [ 193.624754][ T4865] usb 5-1: unit 255 not found! [ 193.665893][ T4865] usb 5-1: USB disconnect, device number 8 [ 193.874919][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.905423][ T7169] loop1: detected capacity change from 0 to 32768 [ 193.921324][ T7169] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1039 (7169) [ 193.941129][ T7169] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 193.941214][ T7169] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 193.941268][ T7169] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.941328][ T7169] BTRFS info (device loop1): use zstd compression, level 3 [ 193.941350][ T7169] BTRFS info (device loop1): using free space tree [ 194.174241][ T7169] BTRFS info (device loop1): enabling ssd optimizations [ 194.189318][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195851][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.545126][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 194.646821][ T7175] loop0: detected capacity change from 0 to 40427 [ 194.702769][ T7199] loop2: detected capacity change from 0 to 32768 [ 194.855917][ T7175] F2FS-fs (loop0): Found nat_bits in checkpoint [ 195.025382][ T7199] XFS (loop2): Mounting V5 Filesystem [ 195.056526][ T7175] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 195.155978][ T7199] XFS (loop2): Internal error head_block >= tail_block || head_cycle != tail_cycle + 1 at line 1649 of file fs/xfs/xfs_log_recover.c. Caller xlog_clear_stale_blocks+0x2d6/0x420 [ 195.168670][ T7175] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.173796][ T7199] CPU: 1 PID: 7199 Comm: syz.2.1044 Not tainted syzkaller #0 [ 195.188490][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.198584][ T7199] Call Trace: [ 195.201890][ T7199] [ 195.204860][ T7199] dump_stack_lvl+0x168/0x22e [ 195.209586][ T7199] ? show_regs_print_info+0x12/0x12 [ 195.214840][ T7199] xfs_corruption_error+0x11e/0x170 [ 195.220090][ T7199] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 195.225770][ T7199] xlog_clear_stale_blocks+0x36f/0x420 [ 195.231267][ T7199] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 195.237030][ T7199] xlog_find_tail+0x7ac/0xa00 [ 195.241765][ T7199] xlog_recover+0x48/0x450 [ 195.246233][ T7199] xfs_log_mount+0x2ba/0x460 [ 195.250877][ T7199] xfs_mountfs+0xc42/0x1d10 [ 195.255423][ T7199] ? lockdep_softirqs_off+0x420/0x420 [ 195.260841][ T7199] ? xfs_default_resblks+0x70/0x70 [ 195.265978][ T7199] ? init_timer_key+0x178/0x320 [ 195.270899][ T7199] ? rcu_is_watching+0x11/0xa0 [ 195.275705][ T7199] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 195.281964][ T7199] xfs_fs_fill_super+0x10f0/0x1350 [ 195.287102][ T7199] get_tree_bdev+0x3f1/0x610 [ 195.291708][ T7199] ? xfs_fs_warn_deprecated+0x190/0x190 [ 195.297281][ T7199] vfs_get_tree+0x88/0x270 [ 195.301711][ T7199] do_new_mount+0x24a/0xa40 [ 195.306228][ T7199] __se_sys_mount+0x2d6/0x3c0 [ 195.310924][ T7199] ? __x64_sys_mount+0xc0/0xc0 [ 195.315700][ T7199] ? lockdep_hardirqs_on+0x94/0x140 [ 195.321003][ T7199] ? __x64_sys_mount+0x1c/0xc0 [ 195.325782][ T7199] do_syscall_64+0x4c/0xa0 [ 195.330213][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 195.334909][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 195.339600][ T7199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.345504][ T7199] RIP: 0033:0x7f79b9d9076a [ 195.349942][ T7199] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.369560][ T7199] RSP: 002b:00007f79bac53e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.377987][ T7199] RAX: ffffffffffffffda RBX: 00007f79bac53ef0 RCX: 00007f79b9d9076a [ 195.385972][ T7199] RDX: 0000200000009740 RSI: 0000200000009780 RDI: 00007f79bac53eb0 [ 195.393951][ T7199] RBP: 0000200000009740 R08: 00007f79bac53ef0 R09: 0000000000000000 [ 195.401931][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000009780 [ 195.409924][ T7199] R13: 00007f79bac53eb0 R14: 000000000000982d R15: 0000200000000180 [ 195.417923][ T7199] [ 195.423379][ T7199] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 195.431057][ T7199] XFS (loop2): failed to locate log tail [ 195.436793][ T7199] XFS (loop2): log mount/recovery failed: error -117 [ 195.509638][ T7199] XFS (loop2): log mount failed [ 195.726631][ T4375] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.851960][ T4270] syz-executor: attempt to access beyond end of device [ 195.851960][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.149810][ T7217] loop1: detected capacity change from 0 to 32768 [ 196.169199][ T7228] loop4: detected capacity change from 0 to 1024 [ 196.186583][ T7228] EXT4-fs: Ignoring removed orlov option [ 196.202567][ T7228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.264271][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 196.270392][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 196.276563][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 196.276582][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 196.282586][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 196.307002][ T7217] XFS (loop1): Mounting V5 Filesystem [ 196.357435][ T7228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.365034][ T7217] XFS (loop1): Ending clean mount [ 196.395124][ T7217] XFS (loop1): Quotacheck needed: Please wait. [ 196.509746][ T7217] XFS (loop1): Quotacheck: Done. [ 196.574697][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 196.739569][ T4272] XFS (loop1): Unmounting Filesystem [ 197.116900][ T7230] loop2: detected capacity change from 0 to 32768 [ 197.134110][ T4346] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.263511][ T4276] non-latin1 character 0x2e66 found in JFS file name [ 197.284513][ T4276] mount with iocharset=utf8 to access [ 197.333840][ T4346] usb 4-1: Using ep0 maxpacket: 32 [ 197.347276][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.376553][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.386914][ T4346] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 197.397704][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.416185][ T4346] usb 4-1: config 0 descriptor?? [ 197.552665][ T7251] overlayfs: statfs failed on './file0' [ 197.602554][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 197.672978][ T26] audit: type=1326 audit(1760974244.970:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5249b8efc9 code=0x7ffc0000 [ 197.740683][ T26] audit: type=1326 audit(1760974245.010:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f5249b8efc9 code=0x7ffc0000 [ 197.802365][ T26] audit: type=1326 audit(1760974245.010:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5249b8efc9 code=0x7ffc0000 [ 197.838082][ T106] ------------[ cut here ]------------ [ 197.844548][ T106] WARNING: CPU: 0 PID: 106 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 197.853202][ T106] Modules linked in: [ 197.857734][ T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 197.864771][ T4346] smartjoyplus 0003:0925:8866.0010: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 197.865192][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.886848][ T106] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 197.891923][ T106] Code: e8 cd 58 e6 fe e9 5a ff ff ff e8 53 2a 96 fe eb 05 e8 4c 2a 96 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2a 96 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 197.911605][ T106] RSP: 0018:ffffc90002647668 EFLAGS: 00010293 [ 197.917753][ T106] RAX: ffffffff82eaa8d8 RBX: ffff88802ed51010 RCX: ffff88801ab28000 [ 197.925810][ T106] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 197.927471][ T4346] smartjoyplus 0003:0925:8866.0010: no output reports found [ 197.933819][ T106] RBP: 0000000000020056 R08: dffffc0000000000 R09: fffff94000176a89 [ 197.933838][ T106] R10: fffff94000176a89 R11: 1ffffd4000176a88 R12: ffff88802ed51018 [ 197.933853][ T106] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 197.933867][ T106] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 197.933902][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.933916][ T106] CR2: 00007f524a9156c0 CR3: 00000000763c5000 CR4: 00000000003506f0 [ 197.988880][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.996915][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.004960][ T106] Call Trace: [ 198.008286][ T106] [ 198.011242][ T106] ? lock_page+0x2b0/0x2b0 [ 198.015733][ T106] dbJoin+0x238/0x300 [ 198.019768][ T106] ? PageHeadHuge+0x8f/0x1c0 [ 198.024436][ T106] dbFreeBits+0x4e1/0xda0 [ 198.028835][ T106] dbFree+0x32e/0x640 [ 198.032866][ T106] txFreeMap+0x9e2/0xde0 [ 198.037175][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 198.042432][ T106] xtTruncate+0xcb5/0x2c60 [ 198.046942][ T106] ? xtInitRoot+0x160/0x160 [ 198.051503][ T106] ? mapping_evict_folio+0x520/0x520 [ 198.056853][ T106] ? __lock_acquire+0x7c50/0x7c50 [ 198.061914][ T106] ? do_raw_spin_lock+0x11d/0x280 [ 198.067011][ T106] ? memset+0x1e/0x40 [ 198.071036][ T106] ? __dquot_initialize+0x211/0xcb0 [ 198.076302][ T106] jfs_free_zero_link+0x337/0x490 [ 198.081376][ T106] ? jfs_write_failed+0x190/0x190 [ 198.086496][ T106] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 198.092254][ T106] ? do_raw_spin_lock+0x11d/0x280 [ 198.097369][ T106] ? bit_waitqueue+0x30/0x30 [ 198.101999][ T106] jfs_evict_inode+0x359/0x430 [ 198.106843][ T106] ? evict+0x47f/0x870 [ 198.110955][ T106] ? jfs_write_inode+0x220/0x220 [ 198.112451][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1067'. [ 198.115961][ T106] evict+0x485/0x870 [ 198.115990][ T106] ? __lock_acquire+0x7c50/0x7c50 [ 198.116028][ T106] ? proc_nr_inodes+0x2f0/0x2f0 [ 198.116053][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 198.116089][ T106] ? _raw_spin_unlock+0x24/0x40 [ 198.116121][ T106] ? iput+0x768/0x980 [ 198.153018][ T106] jfs_lazycommit+0x427/0xa50 [ 198.157782][ T106] ? txFreelock+0x5a0/0x5a0 [ 198.162407][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 198.168398][ T106] ? do_task_dead+0xd0/0xd0 [ 198.172952][ T106] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 198.178946][ T106] ? __kthread_parkme+0x162/0x1c0 [ 198.184128][ T106] kthread+0x29d/0x330 [ 198.188245][ T106] ? txFreelock+0x5a0/0x5a0 [ 198.192790][ T106] ? kthread_blkcg+0xd0/0xd0 [ 198.197492][ T106] ret_from_fork+0x1f/0x30 [ 198.201967][ T106] [ 198.205067][ T106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.212367][ T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 198.219584][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.229657][ T106] Call Trace: [ 198.232955][ T106] [ 198.235908][ T106] dump_stack_lvl+0x168/0x22e [ 198.240625][ T106] ? memcpy+0x3c/0x60 [ 198.241371][ T4947] usb 4-1: USB disconnect, device number 8 [ 198.250471][ T106] ? show_regs_print_info+0x12/0x12 [ 198.255718][ T106] ? load_image+0x3b0/0x3b0 [ 198.260251][ T106] panic+0x2c9/0x710 [ 198.264162][ T106] ? bpf_jit_dump+0xd0/0xd0 [ 198.268686][ T106] ? ret_from_fork+0x1f/0x30 [ 198.273304][ T106] __warn+0x2f8/0x4f0 [ 198.277321][ T106] ? dbAdjTree+0x448/0x4d0 [ 198.281762][ T106] ? dbAdjTree+0x448/0x4d0 [ 198.286202][ T106] report_bug+0x2ba/0x4f0 [ 198.290549][ T106] ? dbAdjTree+0x448/0x4d0 [ 198.294987][ T106] handle_bug+0x3a/0x70 [ 198.299152][ T106] exc_invalid_op+0x16/0x40 [ 198.303664][ T106] asm_exc_invalid_op+0x16/0x20 [ 198.308532][ T106] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 198.313573][ T106] Code: e8 cd 58 e6 fe e9 5a ff ff ff e8 53 2a 96 fe eb 05 e8 4c 2a 96 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2a 96 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 198.333186][ T106] RSP: 0018:ffffc90002647668 EFLAGS: 00010293 [ 198.339264][ T106] RAX: ffffffff82eaa8d8 RBX: ffff88802ed51010 RCX: ffff88801ab28000 [ 198.347248][ T106] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 198.355246][ T106] RBP: 0000000000020056 R08: dffffc0000000000 R09: fffff94000176a89 [ 198.363222][ T106] R10: fffff94000176a89 R11: 1ffffd4000176a88 R12: ffff88802ed51018 [ 198.371200][ T106] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 198.379194][ T106] ? dbAdjTree+0x448/0x4d0 [ 198.383709][ T106] ? dbAdjTree+0x448/0x4d0 [ 198.388148][ T106] ? lock_page+0x2b0/0x2b0 [ 198.392573][ T106] dbJoin+0x238/0x300 [ 198.396565][ T106] ? PageHeadHuge+0x8f/0x1c0 [ 198.401174][ T106] dbFreeBits+0x4e1/0xda0 [ 198.405530][ T106] dbFree+0x32e/0x640 [ 198.409531][ T106] txFreeMap+0x9e2/0xde0 [ 198.413781][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 198.418995][ T106] xtTruncate+0xcb5/0x2c60 [ 198.423436][ T106] ? xtInitRoot+0x160/0x160 [ 198.427969][ T106] ? mapping_evict_folio+0x520/0x520 [ 198.433351][ T106] ? __lock_acquire+0x7c50/0x7c50 [ 198.438383][ T106] ? do_raw_spin_lock+0x11d/0x280 [ 198.443425][ T106] ? memset+0x1e/0x40 [ 198.447426][ T106] ? __dquot_initialize+0x211/0xcb0 [ 198.452636][ T106] jfs_free_zero_link+0x337/0x490 [ 198.457687][ T106] ? jfs_write_failed+0x190/0x190 [ 198.462719][ T106] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 198.468460][ T106] ? do_raw_spin_lock+0x11d/0x280 [ 198.473514][ T106] ? bit_waitqueue+0x30/0x30 [ 198.478129][ T106] jfs_evict_inode+0x359/0x430 [ 198.482913][ T106] ? evict+0x47f/0x870 [ 198.486998][ T106] ? jfs_write_inode+0x220/0x220 [ 198.491950][ T106] evict+0x485/0x870 [ 198.495856][ T106] ? __lock_acquire+0x7c50/0x7c50 [ 198.500909][ T106] ? proc_nr_inodes+0x2f0/0x2f0 [ 198.505771][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 198.510988][ T106] ? _raw_spin_unlock+0x24/0x40 [ 198.515866][ T106] ? iput+0x768/0x980 [ 198.519876][ T106] jfs_lazycommit+0x427/0xa50 [ 198.524565][ T106] ? txFreelock+0x5a0/0x5a0 [ 198.529074][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 198.534988][ T106] ? do_task_dead+0xd0/0xd0 [ 198.539503][ T106] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 198.545413][ T106] ? __kthread_parkme+0x162/0x1c0 [ 198.550464][ T106] kthread+0x29d/0x330 [ 198.554547][ T106] ? txFreelock+0x5a0/0x5a0 [ 198.559067][ T106] ? kthread_blkcg+0xd0/0xd0 [ 198.563675][ T106] ret_from_fork+0x1f/0x30 [ 198.568121][ T106] [ 198.571511][ T106] Kernel Offset: disabled [ 198.575923][ T106] Rebooting in 86400 seconds..