last executing test programs: 4.565284269s ago: executing program 3 (id=1960): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) 4.344607347s ago: executing program 4 (id=1963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x3, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, 0x0}) 4.124217523s ago: executing program 4 (id=1965): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 3.650250904s ago: executing program 0 (id=1973): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 3.57269504s ago: executing program 3 (id=1974): syz_open_dev$MSR(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x0) 3.323108419s ago: executing program 0 (id=1980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0x96}, 0x20) 3.001696596s ago: executing program 0 (id=1983): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002480)={0x24, &(0x7f00000021c0)={0x20, 0x2, 0x4f, {0x4f, 0xa, "cf92bab2930b0fb306d5af5ad7b75257865998388bc9b4063798d72f87132ec083d502f4f5b5f5b51933cfc56858801dc0109c42db675825e39c64776e27e65824769d54a628c271b0f1c449b9"}}, &(0x7f0000002300)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000002400), 0x0}, &(0x7f00000026c0)={0x2c, 0x0, 0x0, &(0x7f0000002580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000025c0)={0x20, 0x1, 0xa3, "a898c1562a30b0e0b7f448abdb6793a3f3ee7fad064ee29781afe00d5841481222a89a108b8672907a9275f28c63e74525be19221b1a3bb225bc46523c35c41582dbdb9dea18ed67d0db964e1d4d52cbc1f1921f97b5c3974223384966629f52de6067c80e1a08dac5745aebdb2cb4b859def7413f99a4b5deb5a6400c8ccfba19d911aec874d5f1ca81309654dc427c54047dcf807f2717e0b8c6153314475f24a84e"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001b00)={0x2c, &(0x7f0000001840)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}) 1.903562651s ago: executing program 2 (id=1993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x1000000, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1.834195879s ago: executing program 5 (id=1994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000a80)={r1, @in6={{0xa, 0x4e24, 0x4, @empty, 0x5}}, 0x6, 0x8000}, &(0x7f0000000b40)=0x90) 1.788313973s ago: executing program 2 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, r2}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}}, 0x0) 1.764266632s ago: executing program 4 (id=1996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 1.649475268s ago: executing program 3 (id=1997): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x30) 1.632933628s ago: executing program 2 (id=1998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32feffffff14000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 1.548589237s ago: executing program 1 (id=1999): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) 1.529973103s ago: executing program 5 (id=2000): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 1.484110132s ago: executing program 1 (id=2001): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x29, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_val, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e0b}}]}, 0x0, 0x9f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xde000, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.434119759s ago: executing program 3 (id=2002): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) 1.418076972s ago: executing program 1 (id=2003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xe24}, 0x6e) 1.334096528s ago: executing program 4 (id=2004): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x7ffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdrdstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x40, 0x7ff, [0x1ff, 0x101, 0x1, 0x0, 0x9, 0x0, 0x2011]}}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x6e, "64dcce30dbaa479108e06d8203e49923f5900f016d248d0fa692d9ae361962a15072c98711175bc7d6c0f4a5ab9198f8a2b5e0565e5345dd44ca378fdfef3b9952348d2a7a8986fadb50ff9d83c77e1f66ab0b986fe9d6c3a0a26da9f4ab132369090b1bc5de28ca9a006d43317f"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0x1, [0x70, 0x7000000, 0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x8, [0x8acc, 0x4]}}, @generic={0x5, 0x36, "9fa078a80dc98433101f9761301e9c5a2e1dd9bba2a580af106e9ab9dbd833596cb4242b324937f155328b773f6d5ddcc2af8dd8067c"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfc000000}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x188}, 0x20004000) 1.286176378s ago: executing program 4 (id=2005): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5511, &(0x7f0000006b80)="$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") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus\x00') 1.100654481s ago: executing program 1 (id=2006): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x0, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffd}) 1.092994739s ago: executing program 5 (id=2007): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f0000000140)=ANY=[@ANYBLOB='codepage=cp949,iocharset=iso8859-7,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x41, 0x291, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 966.834368ms ago: executing program 2 (id=2008): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 760.127939ms ago: executing program 1 (id=2009): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/75, 0x4b}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 746.784314ms ago: executing program 5 (id=2010): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 608.766731ms ago: executing program 2 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 512.679678ms ago: executing program 0 (id=2012): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 512.34063ms ago: executing program 1 (id=2013): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@filestreams}]}, 0x5, 0xb919, &(0x7f0000000840)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhNG1net4KG0ZG2VQkAlUx2uwMiaFGbYoDCJFY0AJmUp8hRh5iRiID5zxAYapgYEENoIwEBVMZIAJr2E21EDNac/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2ct7Aty6qyfj1ZuRtWHPdc/Y2tP/jmtPuOWHptxev9R1smFXfXFdv9i+2UrO9kLfntyv5DVd9Z84vKfKdy8Hn3qK2teE+Wva/YbSm2zf2byxtK79dbpjg8uXR/5cDDqPhq/58BtfmbL8+dsmTwefJ3zLJs5nYf6DjV2Tp/XvGcZIO6TSjurth2X9+2qv/P0X/MsqPXZTv8/BhT+eOcfObqLzw51g9kd9DZOr+9rH9L0bmiWI915WtwPCr/PD/vrIblxVNYMfh6tLvpbJ13QjbCOv7nX77R09t/3azOsqwmy7KJWZZNGuse7BqtbU1t+TW/tF9kL63/ycN9Xtz536t/lmXZu4vXicNLrwXA7qW1remYYdZ/zUjr/67jN9xk/cPur721rSlf62Xrf9JI63/a3ccuKr7obu6femtsPwgAAAAAYFgrLlt14eLu7q5L3HDDDTcGboz1lQmIbduiH+tHAqSW4j8nxvpjBAAAgPGuvaP1pQkVQw5NGLyz78NdfdtZWzsvWHX33BNL2+LuBcOccsj3+ff29vauOaP73GJ3Ytn3y04qH87Pv+y+xZcWu3Xl339Q3Xe0Ojvn/GXdXTPzv2pqdXZpvtOQn3dadfa1fKcx35lend2e7zT17dRma/Odw85b3r0kP3BQ4DP2ztLe0ZNNGFIsG/LZMLj/svt6flXajnDK0tn6fqhE3n9Lwy13ld1XsoP+A+ff///w5wu8o4yu/zXXlLYjnHK79b9h6eyG4e7bcf+B80/RP65hrv9DGpVf98uu/3XDnHJg/tenf/25vP+Mn66/tjhU9Xau/4POP7W8f9/JB67/+akOKF3/89eWA3fqyRiH2juuemmk9T9y/6oPFe9WOWh24GxNvbd9Ju9/z3UtjxeHqkfZ/4CR1n9F3XbXE0apveOm3rL1P4r+2fRhTjnQ5F1z29fk/V9785FHB903mv4HlvevX3nRZ+tXXLZqxrKLFi/tWtp1cVPj7ObG5oY5c2bXn7+ku2tmfd+FYeeelHFk59Z/tkfZTEWWHTgwP+eKYzfm/f9882m3FocmjbL/tBHX/zlDHyuDTKnMamqySxevXHlJQ//b0m5j/9v+dxum/yhe/6eWvoiqLbYVWfbBgfmDr3z90Lz/nRs331Icqhll/+kj9a/Z9vcSaCfX/5KymSH9H3qk6+a8/4pDPnxhcWi0r/8Hjbj+e6z/ndXeUfY/fHaxvP8pW47cFDh+sK//4krRv3ZT8+rA8Y/oH1eK/mtfbLo9cPwQ/eNK0f/e++vPDBw/VP+4UvT/3IOHrAocn6F/XCn6z3hq+t6B44fpH1eK/v94YuqswPF6/eNK0f/kZy+8OnB8pv5xpej/3VeW3xg43qB/XCn6/773vAcDxxv1jytF/z1fXfpy4HiT/nGl6L/ymcv3CRyfpX9cKfr/dsOVRwWOf1T/uFL037R2xamB47P1jytF//r1n78kcLxZ/7hS9H/xhR/+JnB8jv5xpehf9/wt3wscP1z/uFL0v3zrT/4VOH6E/nGl6H/XG3c8Fjh+pP5xpej/8MZfTgscP0r/uFL0r3ry56H/TvNj+seVov/ZD9x7QeD4x/WPK0X/b627+6TA8aN33L9qVz3EcS1F/95nT3o2cLzF+o8rRf/ZrywI/f2wrfrHlaL/Rb3zfxw43qZ/XCn63/rqMV8JHD9G/7hS9H/6mbOvCByfq39cKfq/d8OiRYHjx+ofV4r+7WtPbwwcn6d/XCn696xf+P7A8fn6x5Wi/7wXvvTXwPHj9I8rRf/Vz1/9n8Dxdv3jStH/T1uvvT5w/Hj940rRf983Vq8JHF+gf1wp+p+78frWwPET9I8rRf87nvz2+YHjJ+ofV4r+rz5ww16B4x36x5Wi/+Hrvh/6w9ZP0j+uFP2ve23jDYHjJ+sfV4r+c9967J7A8U/oH1eK/vu9/MzjgeOn6B9Xiv5P/P3pzYHjC/WPK0X/Hz2ybmLg+Cf1jytF/3N+94fhfk/I23Gq/nGl6H/ko+vbA8dP0z+uFP03/+2hiwPHT9c/rhT9Z/17n9sCxzv1jytF/ze37HdV4Pin9I8rRf/bNu39QuD4p/WPK0X/5S9+YH3g+CL940rRf/L9ex4ROH6G/nGl6P/Ug3vtGzh+pv5xpej/xacmrAwcP0v/uFL0X/DExIWB42frDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdCbymY+H/8WdWRgippGjslF1ZUjGylhZbiCxZR7aQvdAiSwtJkRY7aVOokKUiRWRNpVJKi5Ikqcj8X2PmWKbvaOrfr9F83+/Xa86z3fO4zvV5rvs8zn3OPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzIg2W3ujNQaDkZNvHfoPj5+097p3LnPyuDOOX/TKl+x09LD7Jt27+syTHx47YQqDR55s9YmPDZ+0ycgTzj9j+MQbwx//vLOMGTNs9sGwufOoDtrqnwx7jqErk5507GAwGHbUpD+PGjPxw2p33HHLP3muapuNW2ftiZM36c+j3UZMfnjy/Y9eHznpz6pbDwarbjmY6utj+tvwrtvun+KumabTUJ7SNhu3znpT9B9M7vxI9ynXd6spX+cX3rjrqtM13H/IZuPWXn9i66mt47M2Xf2MCY/s10eePBiMPGUwGHnqYDDytOndg/+McWussMbEff7Q7UnVDx16Q5D278MW2GjzWQaDwahJXydGnj70tQD43zJujRVeEdb/6KHH0/pf7Y7Z57X+4X/feuPWWGHwuPf5k+49dOj/7+P6v3PEBsdOvxEDAAAA/6qH777o0snH+oYPBvMPpjje+4jJ3xcYdu7l118/3Qb61BCOk/3jz0z8j5nYeeZzxg4Gu28yvYfCdDBseg+A6Ur/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9C82leP/cwxdjjtu45dP3nSRlebe9Pwp//7E+2b+r496uplRj/8Pxg+b1HJi8/GDweA14zbcePHBYHD+pnOvtODg0cdWnvjYqnONmHyCgMUf+bjIVJ547OMvZ3n0Oc595PnXm3DKiGFTDOJxXr3mxQfuvNkDL5rycrGpfx6Pnl/i/PXWnHXod1mGT7HR1F6rQ88/9LlM2Xny2BefOPZl9tltz2X2PuDApcbvtu1OO+y0w+4rLL/iSsuvtNzKK6+4zI7jd91h2UkfpzJnk2ZloWmZs9FTztnd4x4/Z1N+blObs7FPPmePPOOdx2564dCcjfwX52yhJ5+zseOHxjp21GCbR6Zm4n9y4VGD/SfeWG6mx+1b5pm47UvnGj4YHPPYJzps8skbJm0z7NDx/4Hzlky+XGDy5YLxvCUXTO28JYOh85YMnTBhlUkX+1wytN2Uv2c9+e5pPm/Jfms8tODgH34v6//Ev/X1/x96rTzs0YkaOmnI5G0m9XrsPBND07b6484zsVI6l8x/0j+Md+zwR1/XabyTfy9u2BTz/2S/FzfYaceDF5kcdaVJf+vhfztK3nes/8jHqa3nsVNcPtm+Y8RjVx+7d4dr55ty3/GqqQ/xCetiaI6mPMnK1PYd+2975fjH75umsu9Yf/zkXzR+bN8x8T+70NC+Y+LYFx01OGbijeUn3lhs1ODsiTdWeOTGmMHlE28svd0eu24/7JGvV//wOlh82BN+4DG8btee4nU7DefHWe3qwWC1q9LnNfXpzNLrdvSTjDf/PvfgSX+f+7JtFzhvMBjMNvnzWmVo7P+ONN6RTz7ecP6JwZOdf2JwyvX7nvYfHu+j6+yR19rk3fTiU/k7T1hnc/zDOjtsxONWxrS+r9k+bD/p+jyPPtupO1x3zdAcjZrief/Z1+ihzyX1H3rP93jDDh0Me7K5mdr7sCfMzexPPjfT+v5l8clvMMY8ydwsed8hSwzNzeh/cW4Wm8rcPP798OONHgzGPHFuRg7WmviOZvLcLDotczPrf+Z1M0vYftL1RR6969a1Dl55aG7CXMSv/0PPv+i/ODfDtnn0dbPwI48tOHwwevRg/2332Wev5SZ9HLq5/KSPT74GF56WuZz5PzOX807e6wz/x8l59K5dzpywwr+7Bhf+V+dy7GD40P9zj59ysfzn+P5PN/276d9N/276d9O/m/7d9C82leP/Y4e+L3jksNM3mvzNmFFXPDDnPtN7vNPZDH38f3LfJxz/32fOB64YPnj0sSc9Pjtx86fo8dmVJl0ctNzQdlMeH5x89zQfn73/6Ks2H/x3js/+W4bW6jR839D+v5v+3fTvpn83/bvp3+1f7b/a/9E4mD6s/276d9O/m/7d9O+mfzf9i03l+P+yQz8HcMPeD50++UDoqL03XvXB6T3e6WyGPv4/ue8Tjv8/uOrGew8fPPrYkx7/n7RNx/H/VW8/8fDBU/j4/9Badfyff0L/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9C82leP/qw/9HMCo3RdaaOjnAW6654gR03u809mMevzfv//fy/6/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvpX2zy8f/BFP/s4eu8LqJw/P9/21T6b6B/1NJ/Q/2jlv4b6R+19N9Y/6il/yb6Ry39X69/1NJ/U/2jlv6b6R+19N9c/6il/xv0j1r6b6F/1NJ/S/2jlv5v1D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv5v0j9q6b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/3j9o5b+u+gftfR/s/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf9b9I9a+u+lf9TSf2/9o5b+++gftfR/q/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/Q/WP2rp/zb9o5b+b9c/aul/iP5RS/9D9Y9a+h+mf9TS/x36Ry3936l/1NL/XfpHLf3frX/U0v9w/aOW/u/RP2rpf4T+UUv/I/WPWvofpX/U0v9o/aOW/u/VP2rp/z79o5b+79c/aun/Af2jlv7HlPUfPY3btfQ/tqz/tGrp/0H9o5b+x+kftfT/kP5RS//j9Y9a+n9Y/6il/0f0j1r6n6B/1NL/RP2jlv4f1T9q6X+S/lFL/4/pH7X0/7j+UUv/T+gftfT/pP5RS/+T9Y9a+p+if9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/s/WPWvp/Sv+opf85+kct/T+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun/ff2jlv4/0D9q6f9D/aOW/rfpH7X0/5H+UUv/H+sftfT/if5RS//b9Y9a+v9U/6il/8/0j1r636F/1NL/5/pHLf1/oX/U0v9O/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv536R+19P+t/lFL/9/pH7X0v1v/qKX/7/WPWvrfo3/U0v8P+kct/e/VP2rp/0f9o5b+9+kftfT/k/5RS//79Y9a+v9Z/6il/wP6Ry39/6J/1NL/r/pHLf3/pn9U0n/MQP+opP/gIf2jlv5/1z9q6f+w/lFL/wn6RyX9hw30j1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j+ruP/PUHmjpP7q7/1S19J9J/6il/8z6Ry39x+gftfSfRf+opf/T9I9a+s+qf9TSfzb9o5b+s+sftfR/uv5RS/859I9a+s+pf9TSfy79o5b+z9A/auk/t/5RS/9n6h+19H+W/lFL/2frH7X0n0f/qKX/c/SPWvrPq3/U0v+5+kct/Z+nf9TSfz79o5b+8+sftfR/vv5RS/+x+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6f8C/aOW/i/UP2rpv6T+UUv/pfSPWvov3d7/wQmTTHF3S/9l2vtPRUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0f5H+UUv/F+sftfRfUf+opf9K+kct/VfWP2rpv4r+UUv/l+gftfRfVf+opf9L9Y9a+r9M/6il/8v1j1r6r6Z/1NJ/df2jlv7j9I9a+q+hf9TS/xX6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfR/pf5RS/9X6R+19F9f/6il/6v1j1r6v0b/qKX/a/WPWvq/Tv+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0v/1+kct/TfVP2rpv5n+UUv/zfWPWvq/Qf+opf8W+kct/bfUP2rp/0b9o5b+W+kftfTfWv+opf82+kct/bfVP2rp/yb9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvqP1z9q6b+L/lFL/zfrH7X031X/qKX/bvpHLf131z9q6b+H/lFL/z2n3n/Mf2VcT1Et/d9i/Uct/ffSP2rpv7f+UUv/ffSPWvq/Vf+opf+++kct/ffTP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/gfrH7X0f5v+UUv/t+sftfQ/RP+opf+hbf2n8acaWvof1tZ/GrX0f4f+UUv/d+oftfR/l/5RS/936x+19D9c/6il/3v0j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/3v1j1r6v0//qKX/+/WPWvp/QP+opf8x+kct/Y/VP2rp/0H9o5b+x+kftfT/kP5RS//j9Y9a+n9Y/6il/0f0j1r6n6B/1NL/RP2jlv4f1T9q6X+S/lFL/4/pH7X0/7j+UUv/T+gftfT/pP5RS/+T9Y9a+p+if9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/s/WPWvp/Sv+opf85+kct/T+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun//cFgMHp6jekprKX/D6z/qKX/D/WPWvrfpn/U0v9H+kct/X+sf9TS/yf6Ry39b9c/aun/U/2jlv4/0z9q6X+H/lFL/5/rH7X0/4X+UUv/O/WPWvr/Uv+opf+v9I9a+v9a/6il/2/0j1r636V/1NL/t/pHLf1/p3/U0v9u/aOW/r/XP2rpf4/+UUv/P+gftfS/V/+opf8f9Y9a+t+nf9TS/0/6Ry3979c/aun/Z/2jlv4P6B+19P+L/lFL/7/qH7X0/5v+UUv/B/WPWvo/pH/U0v/v+kct/R/WP2rpP0H/qKT/I1f1/0ct/YfpH7X0H65/1NJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/Jv2jlv4z6x+19B+jf9TSfxb9o5b+T9M/auk/q/5RS//Z9I9a+s+uf9TS/+n6Ry3959A/auk/p/5RS/+59I9a+j9D/6il/9z6Ry39n6l/1NL/WfpHLf2frX/U0n8e/aOW/s/RP2rpP6/+UUv/5+oftfR/nv5RS//59I9a+s+vf9TS//n6Ry39x+oftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/C/SPWvq/UP+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/i/SPWvq/WP+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvq/RP+opf+q+kct/V+qf9TS/2X6Ry39X65/1NJ/Nf2jlv6rT6X/XMv8twb21NTSf5z1H7X0X0P/qKX/K/SPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6f9K/aOW/q/SP2rpv77+UUv/V+sftfR/jf5RS//X6h+19H+d/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/+v1j1r6b6p/1NJ/M/2jlv6b6x+19H+D/lFL/y30j1r6b6l/1NL/jfpHLf230j9q6b+1/lFL/230j1r6b6t/1NL/TfpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19B+vf9TSfxf9o5b+b9Y/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfR/i/5RS/+99I9a+u+tf9TSfx/9o5b+b9U/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/d+mf9TS/+36Ry39D9E/aul/qP5RS//D9I9a+r9D/6il/zv1j1r6v0v/qKX/u/WPWvofrn/U0v89+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v+9+kct/d+nf9TS//36Ry39P6B/1NL/GP2jlv7H6h+19P+g/lFL/+P0j1r6f0j/qKX/8fpHLf0/rH/U0v8jZf0PncbtWvqfUNZ/WrX0P1H/qKX/R/WPWvqfpH/U0v9j+kct/T+uf9TS/xP6Ry39P6l/1NL/ZP2jlv6n6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+n9I/aul/jv5RS/9P6x+19P+M/lFL/8/qH7X0/5z+UUv/z+sftfQ/V/+opf8X9I9a+n9R/6il/3n6Ry39z9c/aul/gf5RS/8v6R+19P+y/lFL/6/oH7X0v1D/qKX/RfpHLf0v1j9q6f9V/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1/8J5p982dL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/1NL/Z/pHLf3v0D9q6f9z/aOW/r/QP2rpf6f+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/7v0j1r6/1b/qKX/7/SPWvrfrX/U0v/3+kct/e/RP2rp/wf9o5b+9+oftfT/o/5RS//79I9a+v9J/6il//36Ry39/6x/1NL/Af2jlv5/0T9q6f9X/aOW/n/TP2rp/6D+UUv/h/SPWvr/Xf+opf/D+kct/SfoH5X0HzHQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/xj9o5b+s+gftfR/mv5RS/9Z9Y9a+s+mf9TSf3b9o5b+T9c/auk/h/5RS/859Y9a+s+lf9TS/xn6Ry3959Y/aun/TP2jlv7P0j9q6f9s/aOW/vPoH7X0f47+UUv/efWPWvo/V/+opf/z9I9a+s+nf9TSf379o5b+z9c/auk/Vv+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1foH/U0v+F+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1fpH/U0v/F+kct/VfUP2rpv5L+UUv/lXv7z/RkD7b0X6W3/5Nq6f8S/aOW/qvqH7X0f6n+UUv/l+kftfR/uf5RS//V9I9a+q+uf9TSf5z+UUv/NfSPWvq/Qv+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/q/UP2rp/yr9o5b+6+sftfR/tf5RS//X6B+19H+t/lFL/9fpH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6v17/qKX/pvpHLf030z+a1H/mwYzef3P9o5b1/wb9o5b+W+gftfTfUv+opf8b9Y9a+m+lf9TSf2v9o5b+2+gftfTfVv+opf+b9I9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf9O+kct/XfWP2rpP17/qKX/LvpHLf3frH/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6f8W/aOW/nvpH7X031v/qKX/PvpHLf3fqn/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6v03/qKX/2/WPWvofon/U0v9Q/aOW/ofpH7X0f4f+UUv/d+oftfR/l/5RS/936x+19D9c/yETJjzuRkv/9+gftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+oftfR/n/5RS//36x+19P+A/lFL/2P0j1r6H6t/1NL/g/pHLf2P0z9q6f8h/aOW/sfrH7X0/7D+UUv/j+gftfQ/Qf+opf+J+kct/T+qf9TS/yT9o5b+H9M/aun/cf2jlv6f0D9q6f9J/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19P+U/lFL/3P0j1r6f1r/qKX/Z/SPWvp/Vv+opf/n9I9a+n9e/6il/7n6Ry39v6B/1NL/i/pHLf3P0z9q6X++/lFL/wv0j1r6f0n/qKX/l/WPWvp/Rf+opf+F+kct/S/SP2rpf7H+0Yzcf/XH7h3xVf2jGbn/49f/JfpHLf0v1T9q6X+Z/lFL/8v1j1r6f03/qKX/1/WPWvp/Q/+opf8V+kct/a/UP2rp/039o5b+V+kftfT/lv5RS/9v6x+19L9a/6il/zX6Ry39v6N/1NL/Wv2jlv7X6R+19P+u/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39v6d/1NL/Vv2jlv7f1z9q6f8D/aOW/j/UP2rpf5v+UUv/H+kftfT/sf5RS/+f6B+19L9d/6il/0/1j1r6/0z/qKX/HfpHLf1/rn/U0v8X+kct/e/UP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6X+X/lFL/9/qH7X0/53+UUv/u/WPWvr/Xv+opf89+kct/f+gf9TS/179o5b+f9Q/aul/n/5RS/8/6R+19L9f/6il/5/1j1r6P6B/1NL/L/pHLf3/qn/U0v9v+kct/R/UP2rp/5D+UUv/v+sftfR/WP+opf8E/aOS/iMH+kct/YfpH7X0H/5P+4/4vx3XU1RL/xHWf9TSf6T+UUv/UfpHLf1H6x+19J9J/6il/8z6Ry39x+gftfSfRf+opf/T9I9a+s+qf9TSfzb9o5b+s+sftfR/uv5RS/859I9a+s+pf9TSfy79o5b+z9A/auk/t/5RS/9n6h+19H+W/lFL/2frH7X0n0f/qKX/c/SPWvrPq3/U0v+5+kct/Z+nf9TSfz79o5b+8+sftfR/vv5RS/+x+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6f8C/aOW/i/UP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0X07/qKX/8vpHLf1X0D+agfuPedy9I1+kfzQD93/C+n+x/lFL/xX1j1r6r6R/1NJ/Zf2jlv6r6B+19H9JTf+Z/6WtW/qvWtP/X9PS/6X6Ry39X6Z/1NL/5fpHLf1X0z9q6b+6/lFL/3H6Ry3919A/aun/Cv2jlv5r6h+19F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+r9S/6il/6v0j1r6r69/1NL/1fpHLf1fo3/U0v+1+kct/V+nf9TSfwP9o5b+G+oftfTfSP+opf/G+kct/TfRP2rp/3r9o5b+m+oftfTfTP+opf/m+kct/d+gf9TSfwv9o5b+W+oftfR/o/5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfR/k/5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfTfSf+opf/O+kct/cfrH7X030X/qKX/m/WPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/nvpHLf3fon/U0n8v/aOW/nvrH7X030f/qKX/W/WPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6X+w/lFL/7fpH7X0f7v+UUv/Q/SPWvofqn/U0v8w/aOW/u/QP2rp/079o5b+79I/aun/bv2jlv6H6x+19H+P/lFL/yP0j1r6H6l/1NL/KP2jlv5H6x+19H+v/lFL//fpH7X0f7/+UUv/D+gftfQ/Rv+opf+x+kct/T+of9TS/zj9o5b+H9I/aul/vP5RS/8P6x+19P+I/lFL/xP0j1r6n6h/NMP2H/vE/h/VP5ph+0+x/k/SP2rp/zH9o5b+H9c/aun/Cf2jlv6f1D9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS/9P6R/NyP1nfuzekefoH83I/R+//j+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/U13/WyZMy1Yt/W+u6z9tWvrfon/U0v97+kct/W/VP2rp/339o5b+P9A/aun/Q/2jlv636R+19P+R/lFL/x/rH7X0/4n+UUv/2/WPWvr/VP+opf/P9I9a+t+hf9TS/+f6Ry39f6F/1NL/Tv2jlv6/1D9q6f8r/aOW/r/WP2rp/xv9o5b+d+kftfT/rf5RS//f6R+19L9b/6il/+/1j1r636N/1NL/D/pHLf3v1T9q6f9H/aOW/vfpH7X0/5P+UUv/+/WPWvr/Wf+opf8D+kct/f+if9TS/6/6Ry39/6Z/1NL/Qf2jlv4P6R+19P+7/lFL/4f1j1r6T9A/Kuk/aqB/1NJ/mP6PGf3Y1Zb+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvrPpH/U0n9m/aOW/mP0j1r6z6J/1NL/afpHLf1n1T96tP8WwwaDGbj/bPpHLet/dv2jlv5P1z9q6T+H/lFL/zn1j1r6z6V/1NL/GfpHLf3n1j9q6f9M/aOW/s/SP2rp/2z9o5b+8+gftfR/jv5RS/959Y9a+j9X/6il//P0j1r6z6d/1NJ/fv2jlv7P1z9q6T9W/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/V+gf9TS/4X6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv+opf8K+kct/V+kf9TS/8X6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TS/yX6Ry39V9U/aun/Uv2jlv4v0z9q6f9y/aOW/qvpH7X0X13/qKX/OP2jlv5r6B+19H+F/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry39X6l/1NL/VfpHLf3X1z9q6f9q/aOW/q/RP2rp/1r9o5b+r9M/aum/gf7RxP43DwaDGb3/hvpHLet/I/2jlv4b6x+19N9E/6il/+v1j1r6b6p/1NJ/M/2jlv6b6x+19H+D/lFL/y30j1r6b6l/1NL/jfpHLf230j9q6b+1/lFL/230j1r6b6t/1NL/TfpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19B+vf9TSfxf9o5b+b9Y/aum/q/5RS//d9I9a+u+u/2NmeuxqS/899I9a+u+pf9TS/y36Ry3999I/aum/t/5RS/999I9a+r9V/6il/776Ry3999M/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+B+sftfR/m/5RS/+36x+19D9E/6il/6H6Ry39D9M/aun/Dv2jlv7v1D9q6f8u/aOW/u/WP2rpf7j+UUv/9+gftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+oftfR/n/5RS//36x+19P+A/lFL/2P0j1r6H6t/1NL/g/pHLf2P0z9q6f8h/aOW/sfrH7X0/7D+UUv/j+gftfQ/Qf+opf+J+kct/T+qf9TS/yT9o5b+H9M/aun/cf2jlv6f0D9q6f9J/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19P+U/lFL/3P0j1r6f7qq/7pHTuuWLf0/U9V/2rX0/6z+UUv/z+kftfT/vP5RS/9z9Y9a+n9B/6il/xf1j1r6n6d/1NL/fP2jlv4X6B+19P+S/lFL/y/rH7X0/4r+UUv/C/WPWvpfpH/U0v9i/aOW/l/VP2rpf4n+UUv/S/WPWvpfpn/U0v9y/aOW/l/TP2rp/3X9o5b+39A/aul/hf5RS/8r9Y9a+n9T/6il/1X6Ry39v6V/1NL/2/pHLf2v1j9q6X+N/lFL/+/oH7X0v1b/qKX/dfpHLf2/q3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/+/pH7X0v1X/qKX/9/WPWvr/QP+opf8P9Y9a+t+mf9TS/0f6Ry39f6x/1NL/J/pHLf1v1z9q6f9T/aOW/j/TP2rpf4f+UUv/n+sftfT/hf5RS/879Y9a+v9S/6il/6/0j1r6/1r/qKX/b/SPWvrfpX/U0v+3+kct/X+nf9TS/279o5b+v9c/aul/j/5RS/8/6B+19L9X/6il/x/1j1r636d/1NL/T/pHLf3v1z9q6f9n/aOW/g/oH7X0/4v+UUv/v+oftfT/m/5RS/8H9Y9a+j+kf9TS/+/6Ry39H9Y/auk/Qf+opP/ogf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n0n/qKX/zPpHLf3H6B+19J9F/6il/9P0j1r6z6p/1NJ/Nv2jlv6z6x+19H+6/lFL/zn0j1r6z6l/1NJ/Lv2jlv7P0D9q6T+3/lFL/2fqH7X0f5b+UUv/Z+sftfSfR/+opf9z9I9a+s+rf9TS/7n6Ry39n6d/1NJ/Pv2jlv7z6x+19H++/lFL/7H6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rp/wL9o5b+L9Q/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/VfQP2rp/yL9o5b+L9Y/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+L9E/aum/qv5RS/+X6h+19H+Z/lFL/5frH7X0X03/qKX/6vpHLf3H6R+19F9D/6il/yv0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aun/Sv2jlv6v0j9q6b++/lFL/1frH7X0f43+UUv/1+oftfR/nf5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf/r9Y9a+m+qf9TSfzP9o5b+m+sftfR/g/5RS/8t9I9a+m+pf9TS/436Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/036Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfQfr3/U0n8X/aOW/m/WP2rpv6v+UUv/3fSPWvrvrn/U0n8P/aOW/nvqH7X0f4v+UUv/vfSPWvrvrX/U0n8f/aOW/m/VP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf3fpn/U0v/t+kct/Q/RP2rpf6j+UUv/w/SPWvq/Q/+opf879Y9a+r9L/6il/7v1j1r6H65/1NL/PfpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/vfpHLf3fp3/U0v/9+kct/T+gf9TS/xj9o5b+x+oftfT/oP5RS//j9I9a+n9I/6il//H6Ry39P6x/1NL/I/pHLf1P0D9q6X+i/lFL/4/qH7X0P0n/qKX/x/SPWvp/XP+opf8n9I9a+n9S/6il/8n6R8NO2nvCIYPBDN//FP2jlvV/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/T+lf9TS/xz9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rpf67+UUv/L+gftfT/ov5RS//z9I9a+p+vf9TS/wL9o5b+X9I/aun/Zf2jlv5f0T9q6X+h/lFL/4v0j1r6X6x/1NL/q/pHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/NCP2nzBi0tXH9/+Z/tGM2D+t/zv0j1r6/1z/qKX/L/SPWvrfqX/U0v+X+kct/X+lf9TS/9f6Ry39f6N/1NL/Lv2jlv6/1T9q6f87/aOW/nfrH7X0/73+UUv/e/SPWvr/Qf+opf+9+kct/f+of9TS/z79o5b+f9I/aul/v/5RS/8/6x+19H9A/6il/1/0j1r6/1X/qKX/3/SPWvo/qH/U0v8h/aOW/n/XP2rp/7D+UUv/CfpHJf1nGugftfQfpn/U0n+4/lFL/xH6Ry39R+oftfQfpX/U0n+0/lFL/5n0j1r6z6x/1NJ/jP5RS/9Z9I9a+j9N/6il/6z6Ry39Z9M/auk/u/5RS/+n6x+19J9D/6il/5z6Ry3959I/aun/DP2jlv5z6x+19H+m/lFL/2fpH7X0f7b+UUv/efSPWvo/R/+opf+8+kct/Z+rf9TS/3n6Ry3959M/auk/v/5RS//n6x+19B+rf9TSfwH9o5b+C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/i/QP2rp/0L9o5b+S+oftfRfSv+opf/S+kct/ZfRP2rpv6z+UUv/5fSPWvovr3/U0n8F/aOW/i/SP2rp/2L9o5b+K+oftfRfaRr63zv7/+XAnppa+q9s/Uct/VfRP2rp/xL9o5b+q+oftfR/qf5RS/+X6R+19H+5/lFL/9X0j1r6r65/1NJ/nP5RS/819I9a+r9C/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+r9Q/aun/Kv2jlv7r6x+19H+1/lFL/9foH7X0f63+UUv/1+kftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvq/Xv+opf+m+kct/TfTP2rpv7n+UUv/N+gftfTfQv+opf+W+kct/d+of9TSfyv9o5b+W+sftfTfRv+opf+2+kct/d+kf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/8fpHLf130T9q6f9m/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL/7foH7X030v/qKX/3vpHLf330T9q6f9W/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/bfpHLf3frn/U0v8Q/aOW/ofqH7X0P0z/qKX/O/SPWvq/U/+opf+79I9a+r9b/6il/+H6Ry3936N/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry3936t/1NL/ffpHLf3fr3/U0v8D+kct/Y/RP2rpf6z+UUv/D+oftfQ/Tv+opf+H9I9a+h+vf9TS/8P6Ry39P6J/1NL/BP2jlv4n6h+19P+o/lFL/5P0j1r6f0z/qKX/x/WPWvp/Qv+opf8n9Y9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v9T+kct/c/RP2rp/2n9o5b+n9E/aun/Wf2jlv6f0z9q6f95/aOW/ufqH7X0/4L+UUv/L+oftfQ/T/+opf/5+kct/S/QP2rp/yX9o5b+X9Y/aun/Ff2jlv4X6h+19L9I/6il/8X6Ry39v6p/1NL/Ev2jlv6X6h+19L9M/6il/+X6Ry39v6Z/1NL/6/pHLf2/oX/U0v8K/aOW/lfqH7X0/6b+UUv/q/SPWvp/S/+opf+39Y9a+l+tf9TS/xr9o5b+39E/aul/rf5RS//r9I9a+n9X/6il//X6Ry39b9A/aul/Y+4/4b82rqeolv43Wf9RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun/ff2jlv4/0D9q6f9D/aOW/rfpH7X0/5H+UUv/H+sftfT/if5RS//b9Y9a+v9U/6il/8/0j1r636F/1NL/5/pHLf1/oX/U0v9O/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv536R+19P+t/lFL/9/pH7X0v1v/qKX/7/WPWvrfo3/U0v8P+kct/e/VP2rp/0f9o5b+9+kftfT/k/5RS//79Y9a+v9Z/6il/wP6Ry39/6J/1NL/r/pHLf3/pn/U0v9B/aOW/g/pH7X0/7v+UUv/h/WPWvpP0D8q6T/zQP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6z6R/1NJ/Zv2jlv5j9I9a+s+if9TS/2n6Ry39Z9U/auk/m/5RS//Z9Y9a+j9d/6il/xz6Ry3959Q/auk/l/5RS/9n6B+19J9b/6il/zP1j1r6P0v/qKX/s/WPWvrPo3/U0v85+kct/efVP2rp/1z9o5b+z9M/auk/n/5RS//59Y9a+j9f/6il/1j9o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0f4H+UUv/F+oftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0f1Hs/z//2f5/a+n/Yus/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+L9E/aum/qv5RS/+X6h+19H+Z/lFL/5frH7X0X03/qKX/6vpHLf3H6R+19F9D/6il/yv0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aun/Sv2jlv6v0j9q6b++/lFL/1frH7X0f43+UUv/1+oftfR/nf5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf/r9Y9a+m+qf9TSfzP9o5b+m+sftfR/g/5RS/8t9I9a+m+pf9TS/436Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/036Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfQfr3/U0n8X/aOW/m/WP2rpv6v+UUv/3fSPWvrvrn/U0n8P/aOW/nvqH7X0f4v+UUv/vfSPWvrvrX/U0n8f/aOW/m/VP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf3fpn/U0v/t+kct/Q/RP2rpf6j+UUv/w/SPWvq/Q/+opf879Y9a+r9L/6il/7v1j1r6H65/1NL/PfpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/vfpHLf3fp3/U0v/9+kct/T+gf9TS/xj9o5b+x+oftfT/oP5RS//j9I9a+n9I/6il//H6Ry39P6x/1NL/I/pHLf1P0D9q6X+i/lFL/4/qH7X0P0n/qKX/x/SPWvp/XP+opf8n9I9a+n9S/6il/8n6Ry39T9E/aul/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/T+lf9TS/xz9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rpf67+UUv/L+gftfT/ov5RS//z9I9a+p+vf9TS/wL9o5b+X9I/aun/Zf2jlv5f0T9q6X+h/lFL/4v0j1r6X6x/1NL/q/pHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/1NL/Z/pHLf3v0D9q6f9z/aOW/r/QP2rpf6f+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/7v0j1r6/1b/qKX/7/SPWvrfrX/U0v/3+kct/e/RP2rp/wf9o5b+9+oftfT/o/5RS//79I9a+v9J/6il//36Ry39/6x/1NL/Af2jlv5/0T9q6f9X/aOW/n/TP2rp/6D+UUv/h/SPWvr/Xf+opf/D+kct/SfoH5X0HzPQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/xj9o5b+s+gftfR/mv5RS/9Z9Y9a+s+mf9TSf3b9o5b+T9c/auk/h/5RS/859Y9a+s+lf9TS/xn6Ry3959Y/aun/TP2jlv7P0j9q6f9s/aOW/vPoH7X0f47+UUv/efWPWvo/V/+opf/z9I9a+s+nf9TSf379o5b+z9c/auk/Vv+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1foH/U0v+F+kct/ZfUP2rpv5T+UUv/pfWPWvovo380w/UHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbAgAA//8U+f9v") chdir(&(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r0, &(0x7f0000004200), 0x473) 452.895519ms ago: executing program 4 (id=2014): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@uquota}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f00000001c0)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', 0x0) 421.830701ms ago: executing program 5 (id=2015): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000140)={0x0}, 0x8}, 0x0) 390.610479ms ago: executing program 3 (id=2016): creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 336.600578ms ago: executing program 2 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac02]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x3c}}, 0x0) 336.374461ms ago: executing program 0 (id=2018): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 278.153608ms ago: executing program 3 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x27}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 111.176588ms ago: executing program 0 (id=2020): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5452, &(0x7f0000000040)) 0s ago: executing program 5 (id=2021): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) kernel console output (not intermixed with test programs): 6099][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.879'. [ 174.734188][ T933] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.821937][ T8144] loop5: detected capacity change from 0 to 1024 [ 174.850470][ T36] hfsplus: b-tree write err: -5, ino 4 [ 174.884856][ T35] hfsplus: b-tree write err: -5, ino 4 [ 174.935364][ T933] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 174.992159][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.992548][ T8148] loop0: detected capacity change from 0 to 1024 [ 175.046858][ T8148] EXT4-fs: Ignoring removed nobh option [ 175.065811][ T933] usb 3-1: config 0 descriptor?? [ 175.079049][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.135014][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.303048][ T5234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.393748][ T8160] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.518806][ T8167] loop3: detected capacity change from 0 to 128 [ 175.610635][ T933] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 175.656226][ T933] [drm] Initialized udl on minor 2 [ 175.695083][ T52] vhci_hcd: vhci_device speed not set [ 175.804461][ T933] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 175.811982][ T8178] loop0: detected capacity change from 0 to 512 [ 175.867453][ T933] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 175.871933][ T8178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.923732][ T8178] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.000524][ T5370] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.054702][ T29] audit: type=1800 audit(1727710436.155:52): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.887" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 176.068644][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.096006][ T5370] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.104627][ T5370] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 176.124295][ T933] usb 3-1: USB disconnect, device number 7 [ 176.132835][ T29] audit: type=1800 audit(1727710436.215:53): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.887" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 176.185982][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.267974][ T5234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.400838][ T8198] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 177.297222][ T8231] netlink: 96 bytes leftover after parsing attributes in process `syz.2.916'. [ 177.418306][ T8233] loop1: detected capacity change from 0 to 128 [ 177.504663][ T933] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.697522][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 177.718862][ T933] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.759426][ T933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.784106][ T933] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 177.813772][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.875904][ T933] usb 1-1: config 0 descriptor?? [ 178.053040][ T8210] loop3: detected capacity change from 0 to 40427 [ 178.082245][ T8210] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 178.120282][ T8210] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.265332][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.312184][ T933] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 178.326439][ T8210] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.338990][ T933] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 178.364619][ T933] kye 0003:0458:0138.0009: unexpected long global item [ 178.384245][ T933] kye 0003:0458:0138.0009: parse failed [ 178.389915][ T933] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 178.499753][ T8210] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.507297][ T933] usb 1-1: USB disconnect, device number 8 [ 178.518536][ T8210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.961248][ T8239] loop2: detected capacity change from 0 to 32768 [ 178.987757][ T8239] JBD2: Ignoring recovery information on journal [ 179.040773][ T8239] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.134274][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.214572][ T29] audit: type=1800 audit(1727710439.325:54): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.923" name="file1" dev="loop2" ino=16946 res=0 errno=0 [ 179.335811][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.458831][ T5226] ocfs2: Unmounting device (7,2) on (node local) [ 179.694488][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.329297][ T8293] sctp: [Deprecated]: syz.0.945 (pid 8293) Use of int in max_burst socket option deprecated. [ 180.329297][ T8293] Use struct sctp_assoc_value instead [ 180.414616][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.496928][ T8271] loop5: detected capacity change from 0 to 32768 [ 180.601488][ T8306] binder: BC_ACQUIRE_RESULT not supported [ 180.610901][ T8306] binder: 8302:8306 ioctl c0306201 20000480 returned -22 [ 180.635510][ T8271] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 180.680019][ T8297] loop4: detected capacity change from 0 to 4096 [ 180.727321][ T8272] loop1: detected capacity change from 0 to 32768 [ 180.735753][ T8272] XFS: noikeep mount option is deprecated. [ 180.745963][ T8297] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 180.844850][ T8272] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 180.980283][ T8326] loop2: detected capacity change from 0 to 16 [ 181.065859][ T8326] erofs: (device loop2): mounted with root inode @ nid 36. [ 181.080762][ T8271] XFS (loop5): Ending clean mount [ 181.143161][ T29] audit: type=1800 audit(1727710441.255:55): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.936" name="file1" dev="loop5" ino=1286 res=0 errno=0 [ 181.163612][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.183623][ T8272] XFS (loop1): Ending clean mount [ 181.205950][ T8272] XFS (loop1): Quotacheck needed: Please wait. [ 181.293750][ T8297] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 181.301343][ T5227] XFS (loop5): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 181.333045][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 181.374058][ T8272] XFS (loop1): Quotacheck: Done. [ 181.433365][ T5231] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 181.458151][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.661460][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.669026][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.186413][ T8352] loop2: detected capacity change from 0 to 64 [ 182.196342][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.351285][ T8340] loop0: detected capacity change from 0 to 40427 [ 182.382143][ T8340] F2FS-fs (loop0): invalid crc value [ 182.438083][ T8340] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.498913][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.667956][ T8365] loop2: detected capacity change from 0 to 1024 [ 182.681125][ T8340] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.761230][ T29] audit: type=1326 audit(1727710442.875:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 182.811166][ T29] audit: type=1326 audit(1727710442.875:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 182.852282][ T8368] vlan0: entered promiscuous mode [ 182.875022][ T29] audit: type=1326 audit(1727710442.905:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 182.880740][ T8368] vlan0: entered allmulticast mode [ 182.897102][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.941911][ T5234] syz-executor: attempt to access beyond end of device [ 182.941911][ T5234] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.978997][ T5234] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 182.992374][ T29] audit: type=1326 audit(1727710442.935:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 183.005109][ T8368] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 183.014461][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.077045][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 183.102754][ T8368] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 183.103958][ T29] audit: type=1326 audit(1727710442.935:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 183.132097][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.140064][ T8368] team0: Port device vlan0 added [ 183.279666][ T29] audit: type=1326 audit(1727710443.395:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.5.969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x0 [ 183.535518][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.746079][ T8356] loop3: detected capacity change from 0 to 32768 [ 183.776923][ T8356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.968 (8356) [ 183.862104][ T8356] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.974186][ T8356] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 183.988147][ T8356] BTRFS info (device loop3): using free-space-tree [ 184.425842][ T8421] loop5: detected capacity change from 0 to 256 [ 184.431891][ T8407] loop1: detected capacity change from 0 to 4096 [ 184.464510][ T5247] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.628937][ T8428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.991'. [ 185.128477][ T8440] loop4: detected capacity change from 0 to 512 [ 185.147210][ T8440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.171283][ T8440] EXT4-fs (loop4): 1 truncate cleaned up [ 185.183683][ T8440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.290981][ T8446] loop0: detected capacity change from 0 to 64 [ 185.571071][ T7339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.594491][ T8498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.605571][ T8502] loop2: detected capacity change from 0 to 64 [ 186.806112][ T8508] loop5: detected capacity change from 0 to 256 [ 186.844812][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1026'. [ 186.915742][ T29] audit: type=1326 audit(1727710447.025:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 186.919959][ T8512] loop3: detected capacity change from 0 to 1024 [ 186.968755][ T8508] FAT-fs (loop5): Directory bread(block 64) failed [ 186.992667][ T8508] FAT-fs (loop5): Directory bread(block 65) failed [ 187.022259][ T29] audit: type=1326 audit(1727710447.065:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.033419][ T8508] FAT-fs (loop5): Directory bread(block 66) failed [ 187.044710][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.074917][ T5335] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.091034][ T8512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.107176][ T8508] FAT-fs (loop5): Directory bread(block 67) failed [ 187.116262][ T8508] FAT-fs (loop5): Directory bread(block 68) failed [ 187.124707][ T8508] FAT-fs (loop5): Directory bread(block 69) failed [ 187.134856][ T29] audit: type=1326 audit(1727710447.065:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.138592][ T8508] FAT-fs (loop5): Directory bread(block 70) failed [ 187.161109][ T8512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.176913][ T8508] FAT-fs (loop5): Directory bread(block 71) failed [ 187.193339][ T29] audit: type=1326 audit(1727710447.065:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.203438][ T8519] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 187.223915][ T29] audit: type=1326 audit(1727710447.065:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.250993][ T29] audit: type=1326 audit(1727710447.065:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.253365][ T8508] FAT-fs (loop5): Directory bread(block 72) failed [ 187.294783][ T5335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.300705][ T8508] FAT-fs (loop5): Directory bread(block 73) failed [ 187.303999][ T5335] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 187.362641][ T29] audit: type=1326 audit(1727710447.065:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.396180][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.422021][ T29] audit: type=1326 audit(1727710447.065:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.493996][ T29] audit: type=1326 audit(1727710447.075:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.518998][ T29] audit: type=1326 audit(1727710447.075:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 187.538306][ T8531] FAT-fs (loop5): Filesystem has been set read-only [ 187.546178][ T5335] usb 5-1: config 0 descriptor?? [ 187.556776][ T8531] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006c61) [ 187.643098][ T5247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.456111][ T8564] loop2: detected capacity change from 0 to 1024 [ 188.659431][ T8560] loop5: detected capacity change from 0 to 32768 [ 188.680928][ T8565] loop0: detected capacity change from 0 to 256 [ 188.693530][ T5335] video4linux radio32: keene_cmd_main failed (-71) [ 188.700422][ T5335] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 188.702817][ T8560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1048 (8560) [ 188.716125][ T5335] usb 5-1: USB disconnect, device number 6 [ 188.806423][ T8560] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.817420][ T8560] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 188.826038][ T8560] BTRFS info (device loop5): using free-space-tree [ 188.878120][ T8565] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 189.111818][ T8586] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 189.142779][ T8586] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.1055'. [ 189.152954][ T8586] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 189.524288][ T8600] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 189.551118][ T8600] pim6reg0: linktype set to 778 [ 189.579568][ T5227] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.150443][ T8629] loop1: detected capacity change from 0 to 1024 [ 190.389037][ T8631] tap0: tun_chr_ioctl cmd 2147767521 [ 190.402024][ T8639] loop3: detected capacity change from 0 to 64 [ 190.567959][ T8639] syz.3.1080: attempt to access beyond end of device [ 190.567959][ T8639] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 190.598010][ T8639] Buffer I/O error on dev loop3, logical block 512, async page read [ 190.608955][ T8639] syz.3.1080: attempt to access beyond end of device [ 190.608955][ T8639] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 190.643819][ T8639] Buffer I/O error on dev loop3, logical block 56576, async page read [ 190.884432][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 190.890690][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 190.900358][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 190.906683][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 191.249464][ T8640] loop2: detected capacity change from 0 to 32768 [ 191.304772][ T8666] loop5: detected capacity change from 0 to 128 [ 191.312467][ T8640] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1075 (8640) [ 191.414166][ T8640] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 191.430408][ T8640] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 191.439282][ T8640] BTRFS info (device loop2): using free-space-tree [ 191.461730][ T8666] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.474084][ T5370] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.507895][ T8666] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.552734][ T8666] EXT4-fs warning (device loop5): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 191.625903][ T5370] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 191.643930][ T5370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.665843][ T5370] usb 4-1: config 0 descriptor?? [ 191.681652][ T5370] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 191.694119][ T931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.810926][ T5227] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.830790][ T5226] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 191.855282][ T931] usb 5-1: Using ep0 maxpacket: 32 [ 191.880832][ T931] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 191.905360][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.939246][ T931] usb 5-1: config 0 descriptor?? [ 191.965918][ T931] gspca_main: sunplus-2.14.0 probing 041e:400b [ 192.507580][ T5370] gspca_cpia1: usb_control_msg 02, error -71 [ 192.517952][ T5370] gspca_cpia1: usb_control_msg 05, error -71 [ 192.525619][ T5370] gspca_cpia1: usb_control_msg 04, error -71 [ 192.531815][ T5370] cpia1 4-1:0.0: probe with driver cpia1 failed with error -71 [ 192.542354][ T5370] usb 4-1: USB disconnect, device number 11 [ 192.764427][ T931] gspca_sunplus: reg_r err -71 [ 192.773818][ T931] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 192.820798][ T931] usb 5-1: USB disconnect, device number 7 [ 192.877461][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 193.100013][ T8720] loop0: detected capacity change from 0 to 128 [ 193.141511][ T8720] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.186448][ T8720] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.218511][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.610248][ T8715] loop5: detected capacity change from 0 to 32768 [ 193.694906][ T8729] loop4: detected capacity change from 0 to 32768 [ 193.748634][ T8715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1106 (8715) [ 193.859593][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.897180][ T5234] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.903453][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 193.966572][ T8715] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.001559][ T8715] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 194.011049][ T8715] BTRFS info (device loop5): using free-space-tree [ 194.108928][ T8729] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 194.187573][ T8753] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 194.223599][ T8729] grow_buffers: requested out-of-range block 3472328296227680304 for device loop4 [ 194.250790][ T8729] (syz.4.1112,8729,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 194.265949][ T8729] (syz.4.1112,8729,0):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 3472328296227680304 failed -12 [ 194.277514][ T8729] (syz.4.1112,8729,0):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 194.291453][ T8729] (syz.4.1112,8729,0):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 194.301788][ T8729] (syz.4.1112,8729,0):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 194.315633][ T8729] (syz.4.1112,8729,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 194.546817][ T7339] ocfs2: Unmounting device (7,4) on (node local) [ 194.565627][ T8779] loop3: detected capacity change from 0 to 2048 [ 194.614384][ T5370] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.630417][ T5227] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.697821][ T8783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.807888][ T8779] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 194.877224][ T5370] usb 1-1: Using ep0 maxpacket: 16 [ 194.886771][ T8779] Remounting filesystem read-only [ 195.105843][ T5370] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 195.115288][ T5370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.128489][ T5370] usb 1-1: config 0 descriptor?? [ 195.136978][ T5370] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 195.414302][ T931] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.587577][ T931] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.605112][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.671661][ T931] usb 5-1: config 0 descriptor?? [ 195.674116][ T8798] loop1: detected capacity change from 0 to 32768 [ 195.711961][ T931] cp210x 5-1:0.0: cp210x converter detected [ 195.803823][ T8798] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 196.010860][ T5231] ocfs2: Unmounting device (7,1) on (node local) [ 196.044086][ T933] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 196.073189][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 196.098386][ T8822] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 196.113198][ T931] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 196.122798][ T931] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 196.167908][ T931] usb 5-1: cp210x converter now attached to ttyUSB0 [ 196.175926][ T5370] gspca_sonixj: reg_r err -71 [ 196.180732][ T5370] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 196.192657][ T5370] usb 1-1: USB disconnect, device number 9 [ 196.241810][ T933] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 196.263263][ T933] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 196.280799][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.300001][ T933] usb 3-1: Product: syz [ 196.304335][ T933] usb 3-1: Manufacturer: syz [ 196.308956][ T933] usb 3-1: SerialNumber: syz [ 196.319533][ T933] usb 3-1: config 0 descriptor?? [ 196.339441][ T9] usb 5-1: USB disconnect, device number 8 [ 196.360075][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.397405][ T9] cp210x 5-1:0.0: device disconnected [ 196.573502][ T933] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 196.594285][ T933] asix 3-1:0.0: probe with driver asix failed with error -71 [ 196.625077][ T933] usb 3-1: USB disconnect, device number 8 [ 196.783603][ T8838] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1151'. [ 196.828436][ T8838] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 196.965559][ T8845] loop1: detected capacity change from 0 to 64 [ 197.303422][ T8831] loop3: detected capacity change from 0 to 32768 [ 197.413773][ T8831] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 197.593119][ T8869] (syz.3.1148,8869,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 197.950148][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1174'. [ 197.966300][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 197.975819][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 198.056482][ T8892] loop0: detected capacity change from 0 to 256 [ 198.194542][ T8892] FAT-fs (loop0): Directory bread(block 64) failed [ 198.201398][ T8892] FAT-fs (loop0): Directory bread(block 65) failed [ 198.225272][ T8892] FAT-fs (loop0): Directory bread(block 66) failed [ 198.247842][ T8892] FAT-fs (loop0): Directory bread(block 67) failed [ 198.277684][ T8892] FAT-fs (loop0): Directory bread(block 68) failed [ 198.301364][ T8892] FAT-fs (loop0): Directory bread(block 69) failed [ 198.327224][ T8892] FAT-fs (loop0): Directory bread(block 70) failed [ 198.354063][ T8892] FAT-fs (loop0): Directory bread(block 71) failed [ 198.374908][ T8892] FAT-fs (loop0): Directory bread(block 72) failed [ 198.403948][ T8892] FAT-fs (loop0): Directory bread(block 73) failed [ 198.489020][ T5247] ocfs2: Unmounting device (7,3) on (node local) [ 199.135424][ T9] kernel write not supported for file /media0 (pid: 9 comm: kworker/0:1) [ 199.327025][ T8921] loop3: detected capacity change from 0 to 128 [ 199.337918][ T8895] loop2: detected capacity change from 0 to 32768 [ 199.564862][ T8895] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.640896][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 199.928356][ T8895] XFS (loop2): Ending clean mount [ 200.040951][ T8903] loop4: detected capacity change from 0 to 32768 [ 200.102249][ T5226] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.113747][ T8903] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.303699][ T8948] loop1: detected capacity change from 0 to 64 [ 200.372809][ T8903] XFS (loop4): Ending clean mount [ 200.403678][ T8903] XFS (loop4): Quotacheck needed: Please wait. [ 200.482459][ T8948] hfs: request for non-existent node 1573 in B*Tree [ 200.491911][ T8903] XFS (loop4): Quotacheck: Done. [ 200.533713][ T8952] sp0: Synchronizing with TNC [ 200.545169][ T8948] hfs: request for non-existent node 1573 in B*Tree [ 200.694274][ T36] hfs: request for non-existent node 1573 in B*Tree [ 200.707326][ T7339] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.716688][ T8935] loop3: detected capacity change from 0 to 40427 [ 200.743985][ T36] hfs: request for non-existent node 1573 in B*Tree [ 200.802778][ T8935] F2FS-fs (loop3): invalid crc value [ 200.860493][ T8935] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.943060][ T8935] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.045743][ T8982] loop0: detected capacity change from 0 to 32768 [ 202.130496][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.132465][ T8982] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.188602][ T8971] loop1: detected capacity change from 0 to 32768 [ 202.284221][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 202.293093][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 202.310610][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.358987][ T8971] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 202.380871][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 202.381860][ T8988] option changes via remount are deprecated (pid=8987 comm=syz.5.1210) [ 202.392997][ T8971] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 202.404642][ T25] usb 5-1: config 0 descriptor?? [ 202.415560][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 202.546113][ T9004] loop5: detected capacity change from 0 to 128 [ 202.619515][ T8982] XFS (loop0): Ending clean mount [ 202.648013][ T8971] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 202.667336][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 202.679397][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 202.837510][ T9008] loop2: detected capacity change from 0 to 1024 [ 202.864698][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms [ 202.913825][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.944657][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 202.970516][ T8971] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 203.072736][ T9020] loop5: detected capacity change from 0 to 1024 [ 203.134533][ T5234] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.202775][ T9020] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.214730][ T9020] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 203.256688][ T9020] EXT4-fs (loop5): invalid journal inode [ 203.262433][ T9020] EXT4-fs (loop5): can't get journal size [ 203.309490][ T25] gspca_sonixj: reg_r err -71 [ 203.314541][ T25] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 203.335350][ T25] usb 5-1: USB disconnect, device number 9 [ 203.363043][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.363174][ T9020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.438227][ T9024] loop3: detected capacity change from 0 to 256 [ 203.476696][ T9024] exfat: Deprecated parameter 'namecase' [ 203.482579][ T9024] exfat: Deprecated parameter 'utf8' [ 203.489049][ T9024] exfat: Deprecated parameter 'namecase' [ 203.495825][ T9020] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 37: comm syz.5.1220: path /200/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 203.532047][ T9024] exfat: Deprecated parameter 'utf8' [ 203.563793][ T9020] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.1220: path /200/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 203.629292][ T9024] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 203.726393][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.105377][ T9032] loop2: detected capacity change from 0 to 40427 [ 204.279524][ T9032] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 204.360463][ T9032] F2FS-fs (loop2): invalid crc value [ 204.383749][ T9047] loop0: detected capacity change from 0 to 1024 [ 204.449359][ T9032] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.649639][ T9032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.814529][ T5226] syz-executor: attempt to access beyond end of device [ 204.814529][ T5226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.853960][ T5226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 206.079450][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.130030][ T9096] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1251'. [ 206.163954][ T933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.280757][ T9099] sctp: [Deprecated]: syz.2.1239 (pid 9099) Use of int in maxseg socket option. [ 206.280757][ T9099] Use struct sctp_assoc_value instead [ 206.345619][ T933] usb 2-1: Using ep0 maxpacket: 16 [ 206.413424][ T933] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 206.448095][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.498699][ T933] usb 2-1: config 0 descriptor?? [ 206.525769][ T933] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 206.781713][ T5335] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.038379][ T5335] usb 6-1: Using ep0 maxpacket: 32 [ 207.061271][ T5335] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 207.102121][ T5335] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 207.111294][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 207.119568][ T5335] usb 6-1: Product: syz [ 207.123747][ T5335] usb 6-1: Manufacturer: syz [ 207.128515][ T5335] usb 6-1: SerialNumber: syz [ 207.154899][ T5335] usb 6-1: config 0 descriptor?? [ 207.160527][ T9103] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 207.336484][ T933] gspca_sonixj: reg_r err -71 [ 207.341269][ T933] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 207.371238][ T933] usb 2-1: USB disconnect, device number 8 [ 207.415968][ T5335] usb 6-1: USB disconnect, device number 10 [ 207.517057][ T9093] loop0: detected capacity change from 0 to 32768 [ 207.614620][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 207.614642][ T29] audit: type=1800 audit(1727710467.735:85): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1250" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 207.638010][ T9110] loop4: detected capacity change from 0 to 40427 [ 207.672443][ T9110] F2FS-fs (loop4): invalid crc value [ 207.706796][ T9110] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.823537][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 207.873264][ T9110] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 207.937921][ T9120] f2fs_ckpt-7:4: attempt to access beyond end of device [ 207.937921][ T9120] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.964105][ T9120] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 208.444470][ T5236] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.604635][ T5236] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 208.625465][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.639867][ T9151] loop5: detected capacity change from 0 to 64 [ 208.664046][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.722128][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.784434][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.798097][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.828244][ T5227] hfs: node 4:3 still has 1 user(s)! [ 208.866649][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.895851][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.923950][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.984524][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.034536][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.096446][ T9164] loop5: detected capacity change from 0 to 8 [ 209.096981][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.165558][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.231599][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.275922][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.276549][ T9168] loop2: detected capacity change from 0 to 8192 [ 209.337848][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.363353][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.372533][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.384391][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.392686][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.414472][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.427933][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.439994][ T5236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.450074][ T9168] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.464208][ T5236] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.485499][ T9168] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 209.503923][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.514800][ T9168] REISERFS (device loop2): using ordered data mode [ 209.533064][ T5236] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.555576][ T9168] reiserfs: using flush barriers [ 209.572408][ T5236] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.582185][ T9168] REISERFS warning (device loop2): sh-458 journal_init_dev: cannot init journal device unknown-block(7,2): -16 [ 209.609771][ T5236] usb 1-1: Product: syz [ 209.619211][ T5236] usb 1-1: Manufacturer: syz [ 209.623965][ T9168] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device [ 209.639706][ T5236] usb 1-1: SerialNumber: syz [ 209.653036][ T9168] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 209.666105][ T5236] usb 1-1: config 0 descriptor?? [ 209.696472][ T5236] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.746467][ T9178] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 209.901411][ T933] usb 1-1: USB disconnect, device number 10 [ 209.934723][ T933] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 210.322599][ T9195] loop1: detected capacity change from 0 to 64 [ 210.361651][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1294'. [ 210.408360][ T9191] loop2: detected capacity change from 0 to 4096 [ 210.586050][ T29] audit: type=1800 audit(1727710470.695:86): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1291" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 210.642678][ T9202] loop3: detected capacity change from 0 to 256 [ 210.692742][ T9202] FAT-fs (loop3): Directory bread(block 1285) failed [ 210.844441][ T9202] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 211.145755][ T5236] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.334025][ T5236] usb 1-1: Using ep0 maxpacket: 16 [ 211.348942][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.388451][ T5236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.423245][ T9196] loop4: detected capacity change from 0 to 32768 [ 211.430292][ T5236] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 211.481252][ T5236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.674269][ T9215] loop2: detected capacity change from 0 to 32768 [ 211.710690][ T29] audit: type=1326 audit(1727710471.815:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 211.720715][ T5236] usb 1-1: config 0 descriptor?? [ 211.752872][ T29] audit: type=1326 audit(1727710471.815:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 211.800339][ T29] audit: type=1326 audit(1727710471.815:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 211.823071][ T9196] JBD2: Ignoring recovery information on journal [ 211.875778][ T29] audit: type=1326 audit(1727710471.815:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 211.949353][ T9206] loop1: detected capacity change from 0 to 32768 [ 211.993632][ T29] audit: type=1326 audit(1727710471.815:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 212.016353][ T29] audit: type=1326 audit(1727710471.825:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 212.041574][ T29] audit: type=1326 audit(1727710471.905:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 212.063103][ T9215] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 212.063734][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.064892][ T29] audit: type=1326 audit(1727710471.905:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd7dff9 code=0x7ffc0000 [ 212.118851][ T9196] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.271245][ T7339] ocfs2: Unmounting device (7,4) on (node local) [ 212.337928][ T5226] ocfs2: Unmounting device (7,2) on (node local) [ 212.670346][ T9233] loop3: detected capacity change from 0 to 2048 [ 212.678477][ T5236] razer 0003:1532:011B.000A: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 212.791503][ T9241] tap0: tun_chr_ioctl cmd 1074025672 [ 212.797124][ T9241] tap0: ignored: set checksum enabled [ 212.818067][ T9243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.862974][ T9] usb 1-1: USB disconnect, device number 11 [ 212.939122][ T9243] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 212.958312][ T9243] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 213.003191][ T9243] Remounting filesystem read-only [ 213.133552][ T9250] netlink: 'syz.4.1327': attribute type 11 has an invalid length. [ 213.146283][ T9250] netlink: 573 bytes leftover after parsing attributes in process `syz.4.1327'. [ 213.414068][ T5335] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 213.594053][ T5335] usb 4-1: Using ep0 maxpacket: 16 [ 213.633259][ T5335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.666400][ T5335] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 213.695527][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.719030][ T5335] usb 4-1: Product: syz [ 213.728264][ T5335] usb 4-1: Manufacturer: syz [ 213.751607][ T5335] usb 4-1: SerialNumber: syz [ 213.779604][ T5335] usb 4-1: config 0 descriptor?? [ 214.227796][ T5335] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 214.245714][ T5335] usb 4-1: No valid video chain found. [ 214.324230][ T9259] loop1: detected capacity change from 0 to 32768 [ 214.360944][ T9259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1317 (9259) [ 214.399473][ T9259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.442309][ T5236] usb 4-1: USB disconnect, device number 12 [ 214.444034][ T9259] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 214.494182][ T9259] BTRFS info (device loop1): using free-space-tree [ 214.740853][ T9297] loop4: detected capacity change from 0 to 1024 [ 214.905751][ T9297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.041393][ T7339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.316683][ T5231] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.944758][ T9334] loop2: detected capacity change from 0 to 128 [ 215.955195][ T9334] EXT4-fs: Ignoring removed nobh option [ 215.998949][ T9334] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.064508][ T9334] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.178244][ T9341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 216.208274][ T9334] fscrypt (loop2, inode 12): Unsupported log2_data_unit_size in encryption policy: 32 [ 216.324029][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.382870][ T5226] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.477612][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 216.517390][ T25] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 216.559673][ T25] usb 5-1: Manufacturer: syz [ 216.603289][ T25] usb 5-1: config 0 descriptor?? [ 216.768227][ T9346] loop1: detected capacity change from 0 to 4096 [ 216.812108][ T9346] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 216.994014][ T9346] overlayfs: invalid redirect ((null)) [ 217.040470][ T25] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 217.462365][ T25] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 217.487191][ T25] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 217.544625][ T25] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 217.583075][ T25] usb 5-1: USB disconnect, device number 10 [ 217.812458][ T9392] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 217.824112][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 217.833073][ T9392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1371'. [ 217.944463][ T9394] loop1: detected capacity change from 0 to 64 [ 218.014536][ T9396] loop0: detected capacity change from 0 to 1024 [ 218.021698][ T9396] EXT4-fs: Ignoring removed orlov option [ 218.145246][ T9396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.230078][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 218.230102][ T29] audit: type=1800 audit(1727710478.345:96): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1372" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 218.400201][ T5234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.444706][ T9411] loop3: detected capacity change from 0 to 256 [ 218.501231][ T9386] loop2: detected capacity change from 0 to 32768 [ 218.562556][ T9386] JBD2: Ignoring recovery information on journal [ 218.642198][ T9411] FAT-fs (loop3): Directory bread(block 64) failed [ 218.672147][ T9386] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.683984][ T9411] FAT-fs (loop3): Directory bread(block 65) failed [ 218.701124][ T9411] FAT-fs (loop3): Directory bread(block 66) failed [ 218.723939][ T9411] FAT-fs (loop3): Directory bread(block 67) failed [ 218.752890][ T9411] FAT-fs (loop3): Directory bread(block 68) failed [ 218.794538][ T9411] FAT-fs (loop3): Directory bread(block 69) failed [ 218.811995][ T9411] FAT-fs (loop3): Directory bread(block 70) failed [ 218.841756][ T29] audit: type=1800 audit(1727710478.955:97): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1368" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 218.849770][ T9411] FAT-fs (loop3): Directory bread(block 71) failed [ 218.914051][ T29] audit: type=1800 audit(1727710478.955:98): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1368" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 218.947257][ T9411] FAT-fs (loop3): Directory bread(block 72) failed [ 218.954389][ T9411] FAT-fs (loop3): Directory bread(block 73) failed [ 218.976916][ T5226] ocfs2: Unmounting device (7,2) on (node local) [ 219.656801][ T9447] loop0: detected capacity change from 0 to 128 [ 219.717300][ T9447] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.744473][ T9441] loop4: detected capacity change from 0 to 4096 [ 219.826503][ T9447] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.834036][ T9417] loop5: detected capacity change from 0 to 32768 [ 219.858078][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.128812][ T5234] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.244028][ T29] audit: type=1326 audit(1727710480.345:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.285648][ T29] audit: type=1326 audit(1727710480.395:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.399899][ T29] audit: type=1326 audit(1727710480.395:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.523271][ T29] audit: type=1326 audit(1727710480.395:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.588246][ T29] audit: type=1326 audit(1727710480.395:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.713774][ T29] audit: type=1326 audit(1727710480.445:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.747021][ T29] audit: type=1326 audit(1727710480.445:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f177dff9 code=0x7ffc0000 [ 220.965651][ T9480] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1406'. [ 220.976367][ T9417] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 221.178043][ T9488] unknown channel width for channel at 909000KHz? [ 221.230362][ T9492] loop1: detected capacity change from 0 to 512 [ 221.373376][ T9417] XFS (loop5): Ending clean mount [ 221.399915][ T9492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.401578][ T9417] XFS (loop5): Quotacheck needed: Please wait. [ 221.431913][ T9492] EXT4-fs (loop1): 1 truncate cleaned up [ 221.447820][ T9492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.488597][ T9492] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1411: corrupted in-inode xattr: overlapping e_value [ 221.552936][ T9492] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1772: inode #15: comm syz.1.1411: unable to update i_inline_off [ 221.607519][ T9501] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1411: corrupted in-inode xattr: overlapping e_value [ 221.692224][ T9417] XFS (loop5): Quotacheck: Done. [ 221.776967][ T5227] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 221.919764][ T5231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.203271][ T9518] loop4: detected capacity change from 0 to 4096 [ 222.364664][ T9518] overlayfs: upper fs does not support tmpfile. [ 222.426944][ T9518] overlayfs: workdir/#6 already exists [ 223.343439][ T9540] loop2: detected capacity change from 0 to 32768 [ 223.467589][ T9540] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.510418][ T9560] macsec1: entered allmulticast mode [ 223.883966][ T931] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.891740][ T9540] XFS (loop2): Ending clean mount [ 224.016623][ T9580] loop5: detected capacity change from 0 to 4096 [ 224.055482][ T931] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 224.078157][ T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.096098][ T5226] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 224.122181][ T931] usb 1-1: config 0 descriptor?? [ 224.152460][ T931] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 224.307395][ T9580] overlayfs: upper fs does not support tmpfile. [ 224.342701][ T9580] overlayfs: workdir/#8 already exists [ 224.391884][ T931] usb 1-1: USB disconnect, device number 12 [ 224.733292][ T29] audit: type=1326 audit(1727710484.845:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 224.782998][ T29] audit: type=1326 audit(1727710484.885:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 224.851037][ T29] audit: type=1326 audit(1727710484.885:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 224.924179][ T931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.939657][ T29] audit: type=1326 audit(1727710484.885:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 224.961914][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.989215][ T9604] loop4: detected capacity change from 0 to 256 [ 225.123991][ T931] usb 3-1: Using ep0 maxpacket: 16 [ 225.161498][ T931] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 225.204057][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.236613][ T931] usb 3-1: Product: syz [ 225.240807][ T931] usb 3-1: Manufacturer: syz [ 225.271546][ T931] usb 3-1: SerialNumber: syz [ 225.280908][ T9615] loop3: detected capacity change from 0 to 512 [ 225.295097][ T931] usb 3-1: config 0 descriptor?? [ 225.424922][ T9615] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1464: corrupted in-inode xattr: invalid ea_ino [ 225.490635][ T9615] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1464: couldn't read orphan inode 15 (err -117) [ 225.531933][ T9615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.570072][ T9625] loop4: detected capacity change from 0 to 256 [ 225.642254][ T9625] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 225.756655][ T5247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.762795][ T931] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 225.820770][ T931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.874521][ T931] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 225.909250][ T931] usb 3-1: media controller created [ 226.005293][ T931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.081430][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 226.122564][ T931] zl10353_read_register: readreg error (reg=127, ret==0) [ 226.150364][ T931] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 226.172185][ T931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 226.207550][ T931] usb 3-1: USB disconnect, device number 9 [ 226.248313][ T9605] loop1: detected capacity change from 0 to 32768 [ 226.338730][ T9645] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1475'. [ 226.349744][ T931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 226.370128][ T9645] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 226.382419][ T9648] syz_tun: entered promiscuous mode [ 226.404541][ T9605] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.450296][ T9648] syz_tun: left promiscuous mode [ 226.594230][ T9605] XFS (loop1): Ending clean mount [ 226.606973][ T9605] XFS (loop1): Quotacheck needed: Please wait. [ 226.667220][ T9605] XFS (loop1): Quotacheck: Done. [ 226.895184][ T5231] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 227.289407][ T9683] NILFS (loop5): device size too small [ 227.350094][ T9681] Process accounting resumed [ 227.607056][ T9691] loop5: detected capacity change from 0 to 128 [ 227.744606][ T9691] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.791268][ T9691] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.075638][ T9686] loop3: detected capacity change from 0 to 40427 [ 228.441719][ T9705] loop1: detected capacity change from 0 to 32768 [ 228.470292][ T9686] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.470568][ T5227] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.508739][ T9710] tipc: Started in network mode [ 228.516872][ T9710] tipc: Node identity ac14140f, cluster identity 4711 [ 228.526808][ T9710] tipc: New replicast peer: 255.255.255.255 [ 228.534546][ T9710] tipc: Enabled bearer , priority 10 [ 228.641084][ T29] audit: type=1326 audit(1727710488.755:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 228.672226][ T29] audit: type=1326 audit(1727710488.755:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 228.677709][ T9686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 228.707423][ T29] audit: type=1326 audit(1727710488.815:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 228.732844][ T9705] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 228.819489][ T29] audit: type=1326 audit(1727710488.815:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 228.853514][ T9725] loop0: detected capacity change from 0 to 512 [ 228.907451][ T9686] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 228.934439][ T29] audit: type=1326 audit(1727710488.815:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 228.960743][ T9725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.000510][ T29] audit: type=1326 audit(1727710488.855:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb52b7dff9 code=0x7ffc0000 [ 229.189645][ T9725] EXT4-fs (loop0): 1 truncate cleaned up [ 229.200449][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.230254][ T5247] syz-executor: attempt to access beyond end of device [ 229.230254][ T5247] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.272186][ T5231] ocfs2: Unmounting device (7,1) on (node local) [ 229.316579][ T5247] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.546203][ T5236] tipc: Node number set to 2886997007 [ 229.574846][ T5234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.577408][ T9753] loop1: detected capacity change from 0 to 256 [ 229.631463][ T9753] exfat: Deprecated parameter 'utf8' [ 229.637038][ T9753] exfat: Deprecated parameter 'utf8' [ 229.642484][ T9753] exfat: Deprecated parameter 'utf8' [ 229.735844][ T9753] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 230.040393][ T9741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.073197][ T9741] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 230.175590][ T9741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.203922][ T9741] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 230.380209][ T9741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.417024][ T9741] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 230.427835][ T9778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1525'. [ 230.454232][ T9778] ip6gretap0: entered promiscuous mode [ 230.478335][ T9778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1525'. [ 230.569485][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 230.662022][ T9741] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 230.732000][ T9741] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 230.898549][ T9787] loop2: detected capacity change from 0 to 4096 [ 231.068542][ T25] wlan0 speed is unknown, defaulting to 1000 [ 231.152870][ T9787] overlayfs: upper fs does not support tmpfile. [ 231.188567][ T9787] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.202056][ T9779] loop0: detected capacity change from 0 to 40427 [ 231.231908][ T9787] overlayfs: conflicting lowerdir path [ 231.251277][ T9779] F2FS-fs (loop0): invalid crc value [ 231.270180][ T9779] F2FS-fs (loop0): Found nat_bits in checkpoint [ 231.557419][ T9779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.728142][ T5234] syz-executor: attempt to access beyond end of device [ 231.728142][ T5234] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.758728][ T5234] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 231.789659][ T9741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.808266][ T9741] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 232.070938][ T9785] loop3: detected capacity change from 0 to 32768 [ 232.117161][ T9785] XFS: ikeep mount option is deprecated. [ 232.133489][ T9785] XFS: noikeep mount option is deprecated. [ 232.346802][ T9811] loop4: detected capacity change from 0 to 32768 [ 232.354338][ T9811] XFS: ikeep mount option is deprecated. [ 232.367376][ T9785] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 232.401668][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 232.401692][ T29] audit: type=1326 audit(1727710492.515:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.455659][ T9811] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.531888][ T29] audit: type=1326 audit(1727710492.515:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.594319][ T29] audit: type=1326 audit(1727710492.555:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.626943][ T29] audit: type=1326 audit(1727710492.555:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.732253][ T29] audit: type=1326 audit(1727710492.825:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.755367][ T29] audit: type=1326 audit(1727710492.835:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.777625][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.784202][ T29] audit: type=1326 audit(1727710492.835:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.807167][ T29] audit: type=1326 audit(1727710492.835:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.830009][ T29] audit: type=1326 audit(1727710492.835:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 232.909186][ T9785] XFS (loop3): Ending clean mount [ 232.937873][ T9865] loop5: detected capacity change from 0 to 256 [ 232.941984][ T9811] XFS (loop4): Ending clean mount [ 232.956708][ T9785] XFS (loop3): Quotacheck needed: Please wait. [ 233.073662][ T9811] XFS (loop4): Quotacheck needed: Please wait. [ 233.092305][ T9870] loop2: detected capacity change from 0 to 128 [ 233.181001][ T9785] XFS (loop3): Quotacheck: Done. [ 233.183681][ T9811] XFS (loop4): Quotacheck: Done. [ 233.391625][ T9879] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1548'. [ 233.461705][ T5247] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 233.518640][ T7339] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.528712][ T9882] syz.0.1550 uses old SIOCAX25GETINFO [ 233.701268][ T9888] netlink: 'syz.0.1553': attribute type 6 has an invalid length. [ 233.908162][ T9894] erspan0: entered promiscuous mode [ 233.932883][ T9894] macvlan2: entered allmulticast mode [ 233.939235][ T9894] erspan0: entered allmulticast mode [ 233.982045][ T9894] erspan0: left allmulticast mode [ 233.996329][ T5370] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 233.999721][ T9894] erspan0: left promiscuous mode [ 234.174324][ T5370] usb 6-1: Using ep0 maxpacket: 8 [ 234.199950][ T5370] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 234.214410][ T5370] usb 6-1: config 179 has no interface number 0 [ 234.220744][ T5370] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 234.231909][ T5370] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 234.243286][ T5370] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.254945][ T5370] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 234.266437][ T5370] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.279787][ T5370] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.289511][ T5370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.318519][ T9890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.350611][ T9903] loop0: detected capacity change from 0 to 1024 [ 234.589034][ T9903] EXT4-fs: Ignoring removed orlov option [ 234.673551][ T5370] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input17 [ 234.684041][ T9903] EXT4-fs (loop0): Test dummy encryption mode enabled [ 234.713303][ T9877] loop1: detected capacity change from 0 to 32768 [ 234.793101][ T9903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.009632][ T9925] loop3: detected capacity change from 0 to 2048 [ 235.103784][ T931] usb 6-1: USB disconnect, device number 11 [ 235.103899][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 235.118121][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 235.128510][ T931] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 235.128840][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.174418][ T9925] EXT4-fs (loop3): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 235.265696][ T9931] fuse: Unknown parameter '00000000000000000000' [ 235.283294][ T9925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.375492][ T9931] loop4: detected capacity change from 0 to 2048 [ 235.426017][ T9903] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 235.471367][ T9925] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.530424][ T9931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.542923][ T9925] EXT4-fs (loop3): Remounting filesystem read-only [ 235.667481][ T5247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.724202][ T5234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.164526][ T931] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 236.388952][ T9977] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1577'. [ 236.587116][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 236.596548][ T9962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1572'. [ 236.646703][ T931] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 236.656207][ T931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.664321][ T931] usb 6-1: Product: syz [ 236.668594][ T931] usb 6-1: Manufacturer: syz [ 236.673209][ T931] usb 6-1: SerialNumber: syz [ 236.689570][ T931] usb 6-1: config 0 descriptor?? [ 236.767574][ T931] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 236.952109][ T9996] syz.2.1580 (9996): /proc/9996/oom_adj is deprecated, please use /proc/9996/oom_score_adj instead. [ 237.050764][ T9999] loop1: detected capacity change from 0 to 2048 [ 237.127045][T10002] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.188212][T10004] loop3: detected capacity change from 0 to 64 [ 237.198891][ T9999] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 237.236597][ T9999] Remounting filesystem read-only [ 237.248098][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 237.345266][T10007] input: syz0 as /devices/virtual/input/input18 [ 237.426332][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 237.453326][T10012] loop4: detected capacity change from 0 to 1024 [ 237.459942][ T9] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 237.518328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.578402][ T9] usb 1-1: Product: syz [ 237.595078][ T931] usb 6-1: USB disconnect, device number 12 [ 237.601053][ T9] usb 1-1: Manufacturer: syz [ 237.601079][ T9] usb 1-1: SerialNumber: syz [ 237.643702][ T9] usb 1-1: config 0 descriptor?? [ 237.874510][ T9] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 237.881683][ T9] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 238.129206][T10000] loop0: detected capacity change from 0 to 64 [ 238.173180][T10000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.183255][T10033] netlink: 4056 bytes leftover after parsing attributes in process `syz.1.1596'. [ 238.223382][T10033] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.224565][T10000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.331815][ T9] usb 1-1: USB disconnect, device number 13 [ 238.540847][T10047] cannot load conntrack support for proto=3 [ 238.594051][ T5335] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.603965][T10049] CUSE: info not properly terminated [ 238.611189][T10044] loop4: detected capacity change from 0 to 4096 [ 238.639562][T10044] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 238.763469][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.786576][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.796525][ T5335] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 238.805970][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.811831][T10057] pimreg: entered allmulticast mode [ 238.822247][ T29] audit: type=1326 audit(1727710498.935:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd77dff9 code=0x7ffc0000 [ 238.825155][ T5335] usb 3-1: config 0 descriptor?? [ 238.844672][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.874789][T10044] ntfs3: loop4: failed to convert "c46c" to koi8-r [ 238.884139][ T29] audit: type=1326 audit(1727710498.935:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd77dff9 code=0x7ffc0000 [ 238.907820][ T29] audit: type=1326 audit(1727710498.965:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f35cd77dff9 code=0x7ffc0000 [ 238.954688][T10057] pimreg: left allmulticast mode [ 239.017887][ T29] audit: type=1326 audit(1727710498.965:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd77dff9 code=0x7ffc0000 [ 239.130250][ T29] audit: type=1326 audit(1727710498.965:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd77dff9 code=0x7ffc0000 [ 239.360780][ T5335] wacom 0003:056A:00BC.000B: unknown main item tag 0x0 [ 239.368075][ T5335] wacom 0003:056A:00BC.000B: unknown main item tag 0x0 [ 239.385950][ T5335] wacom 0003:056A:00BC.000B: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 239.429516][ T5335] wacom 0003:056A:00BC.000B: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.2-1/input0 [ 239.485095][ T5335] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BC.000B/input/input19 [ 239.617073][ T5335] usb 3-1: USB disconnect, device number 10 [ 240.161222][T10062] loop0: detected capacity change from 0 to 32768 [ 240.190523][T10062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1610 (10062) [ 240.256694][T10062] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.297541][T10062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 240.342462][T10062] BTRFS info (device loop0): using free-space-tree [ 240.761682][T10081] loop4: detected capacity change from 0 to 32768 [ 240.774117][T10083] loop1: detected capacity change from 0 to 32768 [ 240.831292][T10079] loop5: detected capacity change from 0 to 40427 [ 240.842382][T10083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1621 (10083) [ 240.859916][T10079] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 240.872682][T10083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.883590][T10079] F2FS-fs (loop5): invalid crc value [ 240.889621][T10083] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 240.914006][T10083] BTRFS info (device loop1): using free-space-tree [ 240.925824][T10079] F2FS-fs (loop5): Found nat_bits in checkpoint [ 240.964267][ T5370] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.046076][T10079] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.143505][ T5370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.192508][ T5370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.213238][ T5370] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.247823][ T5370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.268765][ T5370] usb 4-1: SerialNumber: syz [ 241.290682][ T29] audit: type=1800 audit(1727710501.405:135): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1619" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 241.391957][T10079] F2FS-fs (loop5): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xc35/0x1b50 [ 241.432025][ T5234] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.466344][T10079] syz.5.1619: attempt to access beyond end of device [ 241.466344][T10079] loop5: rw=2049, sector=77824, nr_sectors = 864 limit=40427 [ 241.625350][ T5370] usb 4-1: 0:2 : does not exist [ 241.718099][ T5370] usb 4-1: USB disconnect, device number 13 [ 242.092953][T10138] loop0: detected capacity change from 0 to 32768 [ 242.107422][T10138] XFS: ikeep mount option is deprecated. [ 242.119658][ T5227] syz-executor: attempt to access beyond end of device [ 242.119658][ T5227] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.130739][ T2982] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 242.133781][ T5227] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 242.255579][ T5231] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.369130][T10138] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.380112][T10154] loop4: detected capacity change from 0 to 64 [ 242.725915][T10138] XFS (loop0): Ending clean mount [ 242.733113][T10138] XFS (loop0): Quotacheck needed: Please wait. [ 242.952852][T10138] XFS (loop0): Quotacheck: Done. [ 243.060646][T10173] loop2: detected capacity change from 0 to 2048 [ 243.172817][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1644'. [ 243.369777][T10187] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.406315][T10173] NILFS (loop2): error -2 truncating bmap (ino=16) [ 243.495405][T10187] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 243.554476][T10184] loop4: detected capacity change from 0 to 40427 [ 243.561007][T10187] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 243.583438][T10184] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 243.594065][T10184] F2FS-fs (loop4): Image doesn't support compression [ 243.600822][T10184] F2FS-fs (loop4): Image doesn't support compression [ 243.623103][T10187] Remounting filesystem read-only [ 243.664682][T10184] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 243.751293][T10184] F2FS-fs (loop4): invalid crc value [ 243.760388][ T5234] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.805994][T10184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.844629][ T5226] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 243.865994][T10184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.123802][ T7339] syz-executor: attempt to access beyond end of device [ 244.123802][ T7339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.149682][ T7339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.383428][T10201] loop2: detected capacity change from 0 to 32768 [ 244.432633][T10206] loop5: detected capacity change from 0 to 4096 [ 244.445284][T10206] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 244.545997][T10201] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 244.665177][T10212] loop1: detected capacity change from 0 to 4096 [ 244.765742][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 244.778639][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 244.786883][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 244.794931][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 244.802870][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 244.818908][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 244.827540][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 244.838885][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 244.882873][T10201] XFS (loop2): Ending clean mount [ 244.917136][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 244.976963][T10212] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 244.996791][ T5226] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 245.165790][T10231] loop4: detected capacity change from 0 to 64 [ 245.352621][T10228] batadv0: entered promiscuous mode [ 245.357991][T10228] macsec1: entered promiscuous mode [ 245.364215][T10228] macsec1: entered allmulticast mode [ 245.369525][T10228] batadv0: entered allmulticast mode [ 245.571702][T10243] loop4: detected capacity change from 0 to 164 [ 245.758121][T10248] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.174685][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 246.176060][T10256] loop4: detected capacity change from 0 to 2048 [ 246.214501][T10259] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 246.332845][T10256] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 246.344639][T10256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.704409][T10282] program syz.1.1682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.724898][T10282] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 246.884107][ T5335] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 247.067765][ T5335] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 247.084010][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.117926][ T5335] usb 5-1: config 0 descriptor?? [ 247.240845][T10295] batadv0: entered promiscuous mode [ 247.270317][T10295] macsec2: entered promiscuous mode [ 247.292222][T10295] macsec2: entered allmulticast mode [ 247.327999][T10295] batadv0: entered allmulticast mode [ 247.536886][T10278] loop5: detected capacity change from 0 to 32768 [ 247.577736][ T5335] [drm:udl_init] *ERROR* Selecting channel failed [ 247.617486][ T5335] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 247.632232][ T5335] [drm] Initialized udl on minor 2 [ 247.636314][T10278] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 247.653321][ T5335] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 247.663124][ T5335] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 247.684539][ T52] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 247.695929][ T5335] usb 5-1: USB disconnect, device number 11 [ 247.707967][ T52] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 247.771134][T10278] XFS (loop5): Ending clean mount [ 247.896953][T10278] XFS (loop5): User initiated shutdown received. [ 247.903384][T10278] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 247.936032][T10278] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 247.962776][T10278] XFS (loop5): Error -5 reserving per-AG metadata reserve pool. [ 248.019964][ T5227] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 248.039105][T10320] loop3: detected capacity change from 0 to 4096 [ 248.100843][T10320] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 248.294793][T10307] loop0: detected capacity change from 0 to 40427 [ 248.321149][T10307] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 248.331405][T10307] F2FS-fs (loop0): Image doesn't support compression [ 248.341916][T10307] F2FS-fs (loop0): Image doesn't support compression [ 248.349153][T10307] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 248.371593][T10307] F2FS-fs (loop0): invalid crc value [ 248.383689][T10307] F2FS-fs (loop0): Found nat_bits in checkpoint [ 248.576891][T10307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.773190][ T5234] syz-executor: attempt to access beyond end of device [ 248.773190][ T5234] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.788141][ T5234] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 248.854938][T10342] loop5: detected capacity change from 0 to 64 [ 248.862768][T10343] option changes via remount are deprecated (pid=10341 comm=syz.3.1703) [ 249.153073][T10349] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 249.168745][T10342] hfs: request for non-existent node 1573 in B*Tree [ 249.191368][T10342] hfs: request for non-existent node 1573 in B*Tree [ 249.191391][T10327] loop2: detected capacity change from 0 to 32768 [ 249.275773][T10327] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 249.450846][ T36] hfs: request for non-existent node 1573 in B*Tree [ 249.461293][T10364] loop0: detected capacity change from 0 to 164 [ 249.483211][ T36] hfs: request for non-existent node 1573 in B*Tree [ 249.527696][T10327] XFS (loop2): Ending clean mount [ 249.541820][T10366] loop3: detected capacity change from 0 to 1024 [ 249.594461][T10327] XFS (loop2): Quotacheck needed: Please wait. [ 249.720902][T10327] XFS (loop2): Quotacheck: Done. [ 250.124199][ T5226] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 250.328292][T10350] loop1: detected capacity change from 0 to 40427 [ 250.543333][T10350] F2FS-fs (loop1): invalid crc value [ 250.553255][T10350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.582274][T10396] loop3: detected capacity change from 0 to 128 [ 250.747313][T10350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.782174][T10372] loop0: detected capacity change from 0 to 40427 [ 250.805170][T10372] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 250.820263][T10372] F2FS-fs (loop0): invalid crc value [ 250.845495][T10372] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.013206][T10407] loop4: detected capacity change from 0 to 1024 [ 251.025945][T10372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.051833][T10407] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.073280][T10407] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 251.088260][T10407] EXT4-fs (loop4): invalid journal inode [ 251.095486][T10407] EXT4-fs (loop4): can't get journal size [ 251.153553][T10407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.279217][T10407] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 37: comm syz.4.1727: path /149/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 251.333136][ T5234] syz-executor: attempt to access beyond end of device [ 251.333136][ T5234] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.404122][ T5234] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 251.411978][T10407] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1727: path /149/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 251.474052][T10411] loop5: detected capacity change from 0 to 1024 [ 251.805632][ T7339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.706752][T10426] loop5: detected capacity change from 0 to 32768 [ 252.889740][T10426] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 252.945801][T10426] grow_buffers: requested out-of-range block 3472328296227680304 for device loop5 [ 253.016535][T10458] loop3: detected capacity change from 0 to 1024 [ 253.035194][T10426] (syz.5.1737,10426,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 253.050900][T10458] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 253.064816][T10426] (syz.5.1737,10426,1):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 3472328296227680304 failed -12 [ 253.088045][T10458] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 253.125642][T10458] EXT4-fs (loop3): invalid journal inode [ 253.131385][T10458] EXT4-fs (loop3): can't get journal size [ 253.146278][T10426] (syz.5.1737,10426,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 253.147707][T10458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.163009][T10426] (syz.5.1737,10426,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 253.188304][T10426] (syz.5.1737,10426,0):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 253.220640][T10426] (syz.5.1737,10426,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 253.368424][T10458] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 37: comm syz.3.1751: path /299/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 253.422712][ T5227] ocfs2: Unmounting device (7,5) on (node local) [ 253.423813][T10472] loop1: detected capacity change from 0 to 256 [ 253.436571][T10458] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1751: path /299/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 253.458195][T10472] exfat: Deprecated parameter 'namecase' [ 253.464217][T10472] exfat: Deprecated parameter 'utf8' [ 253.469920][T10472] exfat: Deprecated parameter 'namecase' [ 253.477573][T10472] exfat: Deprecated parameter 'utf8' [ 253.535331][T10472] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 253.592492][ T5247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.771908][T10483] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1764'. [ 253.782059][ T5370] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.045810][ T5370] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 254.069547][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 254.071642][ T5370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.173802][ T5370] usb 5-1: config 0 descriptor?? [ 254.208815][ T5370] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 254.455601][T10510] loop3: detected capacity change from 0 to 8 [ 254.827160][T10528] loop2: detected capacity change from 0 to 256 [ 254.834604][T10528] exfat: Deprecated parameter 'namecase' [ 254.840340][T10528] exfat: Deprecated parameter 'utf8' [ 254.844387][ T5335] kernel write not supported for file /media0 (pid: 5335 comm: kworker/1:5) [ 254.846844][T10528] exfat: Deprecated parameter 'namecase' [ 254.860233][T10528] exfat: Deprecated parameter 'utf8' [ 254.954526][T10528] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 255.111842][ T5370] gspca_cpia1: usb_control_msg 02, error -71 [ 255.125860][ T5370] gspca_cpia1: usb_control_msg 05, error -71 [ 255.176790][ T5370] gspca_cpia1: usb_control_msg 04, error -71 [ 255.182865][ T5370] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 255.216313][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.233405][ T5370] usb 5-1: USB disconnect, device number 12 [ 255.502010][T10546] loop2: detected capacity change from 0 to 64 [ 255.762634][T10537] loop0: detected capacity change from 0 to 40427 [ 255.861380][T10537] F2FS-fs (loop0): invalid crc value [ 255.882318][T10537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.912903][T10557] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 256.066461][T10562] loop1: detected capacity change from 0 to 256 [ 256.121184][T10562] FAT-fs (loop1): Directory bread(block 1285) failed [ 256.128382][T10537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 256.142111][T10534] loop5: detected capacity change from 0 to 40427 [ 256.198258][T10534] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 256.221316][T10534] F2FS-fs (loop5): invalid crc value [ 256.291228][T10562] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 256.302170][T10556] f2fs_ckpt-7:0: attempt to access beyond end of device [ 256.302170][T10556] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.316827][T10556] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 256.332920][T10534] F2FS-fs (loop5): Found nat_bits in checkpoint [ 256.448794][T10572] loop4: detected capacity change from 0 to 4096 [ 256.545419][T10534] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 256.678122][ T5227] syz-executor: attempt to access beyond end of device [ 256.678122][ T5227] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.684766][ T29] audit: type=1800 audit(1727710516.805:136): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1799" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 256.711162][ T5227] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 257.224102][ T5370] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 257.294452][T10569] loop2: detected capacity change from 0 to 32768 [ 257.343320][ T29] audit: type=1800 audit(1727710517.455:137): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1814" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 257.469108][ T5370] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 257.481572][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.493953][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.528024][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.562724][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.594518][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.634291][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.697492][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.711237][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.758485][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.775975][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.795815][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.844037][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.875552][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.903411][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.958156][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.985577][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.988250][ T931] kernel write not supported for file /media0 (pid: 931 comm: kworker/1:2) [ 258.017300][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.044463][T10604] loop2: detected capacity change from 0 to 64 [ 258.050622][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.082255][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.110485][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.155419][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.188203][ T5370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.200682][ T5226] hfs: node 4:3 still has 1 user(s)! [ 258.221494][ T5370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.251180][ T5370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.281461][ T5370] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 258.298402][ T5370] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 258.327696][ T5370] usb 2-1: Product: syz [ 258.342052][ T5370] usb 2-1: Manufacturer: syz [ 258.360342][ T5370] usb 2-1: SerialNumber: syz [ 258.380704][ T5370] usb 2-1: config 0 descriptor?? [ 258.426584][ T5370] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 258.721307][ T5370] usb 2-1: USB disconnect, device number 9 [ 258.732175][ T5370] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 258.889297][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1826'. [ 259.088768][T10626] loop4: detected capacity change from 0 to 8 [ 259.323175][T10612] loop2: detected capacity change from 0 to 32768 [ 259.397364][T10612] JBD2: Ignoring recovery information on journal [ 259.562189][T10612] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.586110][ T5236] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.756107][T10645] loop3: detected capacity change from 0 to 256 [ 259.778416][T10618] loop5: detected capacity change from 0 to 40427 [ 259.914460][ T5236] usb 1-1: Using ep0 maxpacket: 32 [ 259.921094][T10618] F2FS-fs (loop5): invalid crc value [ 259.932739][T10654] loop4: detected capacity change from 0 to 64 [ 259.940998][ T5236] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 259.952558][ T5226] ocfs2: Unmounting device (7,2) on (node local) [ 259.963236][ T5236] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.005131][T10618] F2FS-fs (loop5): Found nat_bits in checkpoint [ 260.062602][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.086324][T10618] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 260.094975][T10645] FAT-fs (loop3): Directory bread(block 64) failed [ 260.101524][T10645] FAT-fs (loop3): Directory bread(block 65) failed [ 260.101751][ T5236] usb 1-1: Product: syz [ 260.118466][T10645] FAT-fs (loop3): Directory bread(block 66) failed [ 260.133333][T10645] FAT-fs (loop3): Directory bread(block 67) failed [ 260.134258][ T5236] usb 1-1: Manufacturer: syz [ 260.150848][T10653] f2fs_ckpt-7:5: attempt to access beyond end of device [ 260.150848][T10653] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.154554][T10645] FAT-fs (loop3): Directory bread(block 68) failed [ 260.181953][T10645] FAT-fs (loop3): Directory bread(block 69) failed [ 260.189274][ T5236] usb 1-1: SerialNumber: syz [ 260.197231][T10653] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 260.198922][T10645] FAT-fs (loop3): Directory bread(block 70) failed [ 260.213205][ T5236] usb 1-1: config 0 descriptor?? [ 260.234034][T10645] FAT-fs (loop3): Directory bread(block 71) failed [ 260.240728][T10645] FAT-fs (loop3): Directory bread(block 72) failed [ 260.284216][T10634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.314206][T10645] FAT-fs (loop3): Directory bread(block 73) failed [ 260.332930][T10659] loop4: detected capacity change from 0 to 256 [ 260.397187][T10659] FAT-fs (loop4): Directory bread(block 1285) failed [ 260.430869][T10659] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 260.703098][ T931] usb 1-1: USB disconnect, device number 14 [ 261.069503][T10679] loop4: detected capacity change from 0 to 2048 [ 261.151032][T10681] netlink: 'syz.3.1848': attribute type 11 has an invalid length. [ 261.159522][T10681] netlink: 573 bytes leftover after parsing attributes in process `syz.3.1848'. [ 261.354081][T10685] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.453492][T10690] loop3: detected capacity change from 0 to 4096 [ 261.499422][T10685] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 261.527430][T10690] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 261.544119][T10685] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 261.591702][T10685] Remounting filesystem read-only [ 261.721269][T10690] overlayfs: invalid redirect ((null)) [ 261.844250][T10705] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 261.859553][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'. [ 261.890850][T10705] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1859'. [ 262.218676][T10718] loop4: detected capacity change from 0 to 1024 [ 262.266436][T10718] EXT4-fs: Ignoring removed orlov option [ 262.361163][T10718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.528018][ T29] audit: type=1800 audit(1727710522.645:138): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1866" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 262.679524][ T7339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.823951][ T5335] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.907898][T10739] loop0: detected capacity change from 0 to 256 [ 262.957957][T10739] FAT-fs (loop0): Directory bread(block 1285) failed [ 262.994781][ T5335] usb 2-1: Using ep0 maxpacket: 32 [ 263.019315][ T5335] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 263.036301][T10739] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 263.058853][ T5335] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.086712][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.118235][ T5335] usb 2-1: Product: syz [ 263.122432][ T5335] usb 2-1: Manufacturer: syz [ 263.157844][ T5335] usb 2-1: SerialNumber: syz [ 263.185558][ T5335] usb 2-1: config 0 descriptor?? [ 263.194882][T10731] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.491594][ T5335] usb 2-1: USB disconnect, device number 10 [ 263.576127][T10752] loop5: detected capacity change from 0 to 1024 [ 263.668568][T10752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.946944][ T5227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.971997][T10737] loop4: detected capacity change from 0 to 32768 [ 264.015105][T10737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1873 (10737) [ 264.109986][T10737] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.151584][T10737] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 264.160484][T10737] BTRFS info (device loop4): using free-space-tree [ 264.182583][T10751] loop0: detected capacity change from 0 to 32768 [ 264.352548][T10763] loop5: detected capacity change from 0 to 4096 [ 264.386119][T10744] loop3: detected capacity change from 0 to 32768 [ 264.567906][T10751] JBD2: Ignoring recovery information on journal [ 264.597297][T10744] JBD2: Ignoring recovery information on journal [ 264.636654][T10751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 264.676895][T10744] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 264.709563][ T29] audit: type=1800 audit(1727710524.815:139): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1879" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 264.731100][ T29] audit: type=1800 audit(1727710524.815:140): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1879" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 264.791875][ T29] audit: type=1800 audit(1727710524.905:141): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1895" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 264.843979][ T5236] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 264.856154][ T5234] ocfs2: Unmounting device (7,0) on (node local) [ 264.904166][ T5247] ocfs2: Unmounting device (7,3) on (node local) [ 265.084701][ T5236] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 265.093807][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.111901][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.140981][ T7339] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.152815][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.205712][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.233537][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.273976][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.301256][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.353767][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.365123][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.383247][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.395318][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.406854][ T5335] IPVS: starting estimator thread 0... [ 265.413298][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.453248][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.474357][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 265.493967][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.504143][T10806] IPVS: using max 16 ests per chain, 38400 per kthread [ 265.829026][T10802] loop5: detected capacity change from 0 to 4096 [ 265.914472][T10802] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 265.996767][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.029948][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.073908][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.091689][T10802] overlayfs: invalid redirect ((null)) [ 266.096333][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.124598][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.203944][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.234428][ T5236] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.257879][ T5236] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.321930][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.344579][ T5236] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 266.353652][ T5236] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 266.407022][ T5236] usb 3-1: Product: syz [ 266.411233][ T5236] usb 3-1: Manufacturer: syz [ 266.445054][ T5236] usb 3-1: SerialNumber: syz [ 266.470179][T10825] loop1: detected capacity change from 0 to 256 [ 266.484687][ T5236] usb 3-1: config 0 descriptor?? [ 266.523062][ T5236] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 266.584467][T10825] FAT-fs (loop1): Directory bread(block 64) failed [ 266.591358][T10825] FAT-fs (loop1): Directory bread(block 65) failed [ 266.614073][T10825] FAT-fs (loop1): Directory bread(block 66) failed [ 266.620666][T10825] FAT-fs (loop1): Directory bread(block 67) failed [ 266.648991][T10825] FAT-fs (loop1): Directory bread(block 68) failed [ 266.672111][T10830] loop4: detected capacity change from 0 to 128 [ 266.714011][T10825] FAT-fs (loop1): Directory bread(block 69) failed [ 266.720955][T10825] FAT-fs (loop1): Directory bread(block 70) failed [ 266.736298][T10825] FAT-fs (loop1): Directory bread(block 71) failed [ 266.743166][T10825] FAT-fs (loop1): Directory bread(block 72) failed [ 266.786221][T10830] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.866349][T10830] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.897973][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.909041][ T9] usb 3-1: USB disconnect, device number 11 [ 266.917589][T10825] FAT-fs (loop1): Directory bread(block 73) failed [ 266.935112][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 267.068519][ T7339] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.323736][T10822] loop3: detected capacity change from 0 to 32768 [ 267.384742][T10822] JBD2: Ignoring recovery information on journal [ 267.516300][T10833] loop0: detected capacity change from 0 to 32768 [ 267.581588][T10822] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 267.676078][T10848] loop5: detected capacity change from 0 to 128 [ 267.684504][T10848] EXT4-fs: Ignoring removed nobh option [ 267.708531][T10833] JBD2: Ignoring recovery information on journal [ 267.740755][ T29] audit: type=1800 audit(1727710527.855:142): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1913" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 267.783460][T10848] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.803952][ T29] audit: type=1800 audit(1727710527.895:143): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1913" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 267.824761][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.864954][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1912'. [ 267.880314][T10833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 267.891113][T10848] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.031687][ T5247] ocfs2: Unmounting device (7,3) on (node local) [ 268.057141][ T5234] ocfs2: Unmounting device (7,0) on (node local) [ 268.074603][T10848] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 32 [ 268.250171][ T5227] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.536483][T10877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1919'. [ 268.615024][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 268.714577][T10886] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 268.764125][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1920'. [ 268.784590][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 268.793357][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.824005][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.842207][T10886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1920'. [ 268.843942][ T9] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 268.882171][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.034869][ T9] usb 6-1: config 0 descriptor?? [ 269.745478][ T9] razer 0003:1532:011B.000C: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 269.829816][ T5335] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.980858][ T29] audit: type=1326 audit(1727710530.095:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6216f7dff9 code=0x7ffc0000 [ 270.029198][ T5335] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 270.029697][ T9] usb 6-1: USB disconnect, device number 13 [ 270.038938][ T5335] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 270.038973][ T5335] usb 3-1: Manufacturer: syz [ 270.067008][ T29] audit: type=1326 audit(1727710530.095:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f6216f7dff9 code=0x7ffc0000 [ 270.093266][ T5335] usb 3-1: config 0 descriptor?? [ 270.117093][ T29] audit: type=1326 audit(1727710530.095:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6216f7dff9 code=0x7ffc0000 [ 270.183969][ T29] audit: type=1326 audit(1727710530.095:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6216f7dff9 code=0x7ffc0000 [ 270.527267][ T5335] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 270.934159][ T5335] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 270.944749][ T5335] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 270.972574][ T5335] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 271.027706][ T5335] usb 3-1: USB disconnect, device number 12 [ 271.390381][T10962] loop1: detected capacity change from 0 to 32768 [ 271.493322][T10962] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.577894][T10983] syz_tun: entered promiscuous mode [ 271.590036][T10983] syz_tun: left promiscuous mode [ 271.593020][T10962] XFS (loop1): Ending clean mount [ 271.663348][T10985] loop0: detected capacity change from 0 to 16 [ 271.686109][T10985] erofs: (device loop0): mounted with root inode @ nid 36. [ 271.714957][ T5335] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.914295][ T5335] usb 5-1: Using ep0 maxpacket: 16 [ 271.926662][ T5335] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 271.935943][ T5335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.983373][ T5335] usb 5-1: Product: syz [ 271.993957][ T5335] usb 5-1: Manufacturer: syz [ 272.024658][ T5335] usb 5-1: SerialNumber: syz [ 272.029655][T10993] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 272.055194][ T5335] usb 5-1: config 0 descriptor?? [ 272.055286][T10993] macvtap1: entered promiscuous mode [ 272.063110][T10993] macvtap1: entered allmulticast mode [ 272.099095][T10993] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 272.125946][ T5231] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 272.153507][ T29] audit: type=1326 audit(1727710532.245:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.2.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 272.176165][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.212880][ T29] audit: type=1326 audit(1727710532.245:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.2.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 272.300205][ T29] audit: type=1326 audit(1727710532.265:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.2.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 272.324583][ T5370] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.365296][ T29] audit: type=1326 audit(1727710532.275:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10997 comm="syz.2.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8237dff9 code=0x7ffc0000 [ 272.495632][T11005] loop5: detected capacity change from 0 to 128 [ 272.515659][ T5370] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 272.529940][ T5370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.596171][T11005] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.655700][ T5335] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 272.678795][T11005] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.720651][ T5370] usb 4-1: config 0 descriptor?? [ 272.740079][ T5335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.784999][ T5335] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 272.786716][ T5370] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 272.834094][ T5335] usb 5-1: media controller created [ 272.852164][ T5335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.882115][ T5227] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.054192][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 273.090281][T11023] loop2: detected capacity change from 0 to 128 [ 273.100385][ T5335] zl10353_read_register: readreg error (reg=127, ret==0) [ 273.107797][ T5335] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 273.130266][ T5335] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 273.169254][ T5335] usb 5-1: USB disconnect, device number 13 [ 273.205082][T11023] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.205466][ T5370] usb 4-1: USB disconnect, device number 14 [ 273.231470][T11023] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.253968][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 273.263506][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.339146][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 273.349291][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.361123][ T25] usb 1-1: Product: syz [ 273.371932][ T25] usb 1-1: Manufacturer: syz [ 273.393654][ T25] usb 1-1: SerialNumber: syz [ 273.402420][ T5335] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 273.438924][ T25] usb 1-1: config 0 descriptor?? [ 273.477231][ T5226] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.141198][T11052] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2000'. [ 274.263470][T11052] ip6gretap0: entered promiscuous mode [ 274.277065][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 274.277082][ T29] audit: type=1326 audit(1727710534.395:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.3.2002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35cd77dff9 code=0x0 [ 274.305001][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.316490][T11052] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2000'. [ 274.541137][ T25] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:e1:de:ef:cb:20 [ 274.573979][ T25] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 274.605427][T11067] loop5: detected capacity change from 0 to 64 [ 274.656182][T11061] loop4: detected capacity change from 0 to 40427 [ 274.672582][ T25] usb 1-1: USB disconnect, device number 15 [ 274.682829][T11061] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 274.689774][T11061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 274.720156][T11061] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 274.912215][T11061] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 274.939197][T11061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 275.087934][ T7339] syz-executor: attempt to access beyond end of device [ 275.087934][ T7339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.144106][ T7339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 380.573861][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 380.580862][ C0] rcu: 1-...!: (1 GPs behind) idle=c4b4/1/0x4000000000000000 softirq=38458/38462 fqs=6 [ 380.592638][ C0] rcu: (detected by 0, t=10505 jiffies, g=34681, q=1138 ncpus=2) [ 380.600488][ C0] Sending NMI from CPU 0 to CPUs 1: [ 380.600526][ C1] NMI backtrace for cpu 1 [ 380.600539][ C1] CPU: 1 UID: 0 PID: 7339 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller #0 [ 380.600563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.600577][ C1] RIP: 0010:__lock_acquire+0x13f/0x2050 [ 380.600621][ C1] Code: 48 89 44 24 38 0f b6 04 30 84 c0 0f 85 f5 15 00 00 8b 55 00 48 c7 c0 40 c9 3c 9a 48 c1 e8 03 0f b6 04 30 84 c0 48 89 54 24 28 <0f> 85 fd 15 00 00 83 3d 44 7d cc 18 00 75 09 83 fa 30 0f 83 07 14 [ 380.600640][ C1] RSP: 0018:ffffc90000a18a30 EFLAGS: 00000002 [ 380.600660][ C1] RAX: 0000000000000004 RBX: ffffffff93cdfdf8 RCX: 0000000000000001 [ 380.600676][ C1] RDX: 0000000000000001 RSI: dffffc0000000000 RDI: ffff8880613a4300 [ 380.600692][ C1] RBP: ffff88802ce5e4d8 R08: 0000000000000001 R09: 0000000000000001 [ 380.600708][ C1] R10: dffffc0000000000 R11: fffffbfff2039cc6 R12: ffff88802ce5da00 [ 380.600725][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880613a4300 [ 380.600744][ C1] FS: 000055556a408500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 380.600764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.600780][ C1] CR2: 0000001b32b1dff8 CR3: 000000007bc7a000 CR4: 0000000000350ef0 [ 380.600798][ C1] Call Trace: [ 380.600807][ C1] [ 380.600817][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 380.600847][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 380.600885][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 380.600923][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 380.600957][ C1] ? nmi_handle+0x151/0x5a0 [ 380.600982][ C1] ? nmi_handle+0x2a/0x5a0 [ 380.601007][ C1] ? __lock_acquire+0x13f/0x2050 [ 380.601042][ C1] ? default_do_nmi+0x63/0x160 [ 380.601072][ C1] ? exc_nmi+0x123/0x1f0 [ 380.601100][ C1] ? end_repeat_nmi+0xf/0x53 [ 380.601130][ C1] ? __lock_acquire+0x13f/0x2050 [ 380.601166][ C1] ? __lock_acquire+0x13f/0x2050 [ 380.601203][ C1] ? __lock_acquire+0x13f/0x2050 [ 380.601238][ C1] [ 380.601246][ C1] [ 380.601255][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.601285][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 380.601319][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 380.601351][ C1] lock_acquire+0x1ed/0x550 [ 380.601385][ C1] ? advance_sched+0xab/0xca0 [ 380.601415][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 380.601451][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.601488][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 380.601518][ C1] ? __pfx_lock_release+0x10/0x10 [ 380.601557][ C1] ? __pfx_advance_sched+0x10/0x10 [ 380.601582][ C1] _raw_spin_lock+0x2e/0x40 [ 380.601613][ C1] ? advance_sched+0xab/0xca0 [ 380.601636][ C1] advance_sched+0xab/0xca0 [ 380.601661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.601686][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.601721][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.601760][ C1] ? __pfx_advance_sched+0x10/0x10 [ 380.601784][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 380.601809][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 380.601851][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 380.601876][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.601901][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 380.601937][ C1] hrtimer_interrupt+0x396/0x990 [ 380.601973][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 380.602000][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 380.602036][ C1] [ 380.602043][ C1] [ 380.602052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.602074][ C1] RIP: 0010:preempt_count_sub+0x32/0x170 [ 380.602107][ C1] Code: fb 48 c7 c0 40 c9 3c 9a 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 00 83 3d 3e 95 d9 18 00 <75> 22 65 8b 05 bd a3 a0 7e 89 c1 81 e1 ff ff ff 7f 39 d9 7c 27 81 [ 380.602126][ C1] RSP: 0018:ffffc9000451f378 EFLAGS: 00000246 [ 380.602146][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a3cc903 [ 380.602161][ C1] RDX: dffffc0000000000 RSI: ffffc90004518000 RDI: 0000000000000001 [ 380.602178][ C1] RBP: ffffc9000451f460 R08: ffffc9000451fc50 R09: ffffc9000451f4b0 [ 380.602195][ C1] R10: dffffc0000000000 R11: fffff520008a3e98 R12: dffffc0000000000 [ 380.602213][ C1] R13: ffffc9000451f460 R14: dffffc0000000000 R15: ffffc9000451fc60 [ 380.602240][ C1] ? kill_block_super+0x44/0x90 [ 380.602265][ C1] unwind_next_frame+0x18e6/0x22d0 [ 380.602292][ C1] ? generic_shutdown_super+0x13b/0x2d0 [ 380.602330][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.602360][ C1] arch_stack_walk+0x11c/0x150 [ 380.602389][ C1] ? kill_block_super+0x44/0x90 [ 380.602415][ C1] stack_trace_save+0x118/0x1d0 [ 380.602444][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.602474][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.602498][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.602543][ C1] kasan_save_track+0x3f/0x80 [ 380.602568][ C1] ? kasan_save_track+0x3f/0x80 [ 380.602589][ C1] ? kasan_save_free_info+0x40/0x50 [ 380.602622][ C1] ? __kasan_slab_free+0x59/0x70 [ 380.602646][ C1] ? kmem_cache_free+0x1a2/0x420 [ 380.602678][ C1] ? f2fs_destroy_node_manager+0x329/0xd20 [ 380.602707][ C1] ? f2fs_put_super+0xad9/0x1150 [ 380.602727][ C1] ? generic_shutdown_super+0x13b/0x2d0 [ 380.602788][ C1] kasan_save_free_info+0x40/0x50 [ 380.602821][ C1] __kasan_slab_free+0x59/0x70 [ 380.602846][ C1] ? f2fs_destroy_node_manager+0x329/0xd20 [ 380.602873][ C1] kmem_cache_free+0x1a2/0x420 [ 380.602905][ C1] ? f2fs_destroy_node_manager+0x329/0xd20 [ 380.602936][ C1] f2fs_destroy_node_manager+0x329/0xd20 [ 380.602972][ C1] ? __pfx_f2fs_destroy_node_manager+0x10/0x10 [ 380.603014][ C1] ? f2fs_put_super+0xad1/0x1150 [ 380.603035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.603060][ C1] ? kfree+0x1a0/0x440 [ 380.603088][ C1] ? f2fs_put_super+0xad1/0x1150 [ 380.603112][ C1] f2fs_put_super+0xad9/0x1150 [ 380.603137][ C1] ? __pfx_f2fs_put_super+0x10/0x10 [ 380.603166][ C1] ? __pfx_f2fs_put_super+0x10/0x10 [ 380.603189][ C1] generic_shutdown_super+0x13b/0x2d0 [ 380.603225][ C1] kill_block_super+0x44/0x90 [ 380.603248][ C1] kill_f2fs_super+0x344/0x690 [ 380.603285][ C1] ? __pfx_kill_f2fs_super+0x10/0x10 [ 380.603322][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.603346][ C1] ? shrinker_free+0x2ca/0x3d0 [ 380.603371][ C1] deactivate_locked_super+0xc6/0x130 [ 380.603406][ C1] cleanup_mnt+0x41f/0x4b0 [ 380.603437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.603461][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 380.603498][ C1] task_work_run+0x251/0x310 [ 380.603534][ C1] ? __pfx_task_work_run+0x10/0x10 [ 380.603559][ C1] ? __x64_sys_umount+0x123/0x170 [ 380.603582][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 380.603621][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 380.603659][ C1] do_syscall_64+0x100/0x230 [ 380.603685][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.603721][ C1] RIP: 0033:0x7ffb52b7f327 [ 380.603740][ C1] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 380.603758][ C1] RSP: 002b:00007ffd153d3cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 380.603780][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffb52b7f327 [ 380.603795][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd153d3d80 [ 380.603810][ C1] RBP: 00007ffd153d3d80 R08: 0000000000000000 R09: 0000000000000000 [ 380.603825][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd153d4e00 [ 380.603840][ C1] R13: 00007ffb52bf0134 R14: 0000000000042f4a R15: 00007ffd153d4e40 [ 380.603866][ C1] [ 380.604513][ C0] rcu: rcu_preempt kthread starved for 10475 jiffies! g34681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 381.360551][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 381.370543][ C0] rcu: RCU grace-period kthread stack dump: [ 381.376436][ C0] task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 381.388230][ C0] Call Trace: [ 381.391520][ C0] [ 381.394465][ C0] __schedule+0x1895/0x4b30 [ 381.399031][ C0] ? __pfx___schedule+0x10/0x10 [ 381.403912][ C0] ? __pfx_lock_release+0x10/0x10 [ 381.408967][ C0] ? __asan_memset+0x23/0x50 [ 381.413583][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 381.419430][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.425798][ C0] ? schedule+0x90/0x320 [ 381.430076][ C0] schedule+0x14b/0x320 [ 381.434263][ C0] schedule_timeout+0x1be/0x310 [ 381.439144][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 381.444548][ C0] ? __pfx_process_timeout+0x10/0x10 [ 381.449876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.455620][ C0] ? prepare_to_swait_event+0x330/0x350 [ 381.461205][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 381.466164][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 381.471410][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 381.477582][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 381.482888][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.488815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.494554][ C0] ? finish_swait+0xd4/0x1e0 [ 381.499179][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 381.503796][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.509015][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.514940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.520591][ C0] ? __kthread_parkme+0x169/0x1d0 [ 381.525654][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.530869][ C0] kthread+0x2f2/0x390 [ 381.534956][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.540169][ C0] ? __pfx_kthread+0x10/0x10 [ 381.544788][ C0] ret_from_fork+0x4d/0x80 [ 381.549237][ C0] ? __pfx_kthread+0x10/0x10 [ 381.553842][ C0] ret_from_fork_asm+0x1a/0x30 [ 381.558648][ C0] [ 381.561675][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 381.568007][ C0] CPU: 0 UID: 0 PID: 11103 Comm: syz.3.2019 Not tainted 6.12.0-rc1-syzkaller #0 [ 381.577043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.587110][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 381.593295][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 381.612942][ C0] RSP: 0018:ffffc90019c573d8 EFLAGS: 00000246 [ 381.619035][ C0] RAX: ffffffff8188e6db RBX: 1ffff110170e8919 RCX: ffff88802c520000 [ 381.627024][ C0] RDX: ffffc90009ada000 RSI: 000000000003ffff RDI: 0000000000040000 [ 381.635010][ C0] RBP: ffffc90019c575e0 R08: ffffffff8188e6aa R09: 1ffffffff2858b00 [ 381.642998][ C0] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: dffffc0000000000 [ 381.651009][ C0] R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001 [ 381.659009][ C0] FS: 00007f35ce5206c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 381.667959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.674557][ C0] CR2: 0000001b3291cff8 CR3: 000000005614e000 CR4: 0000000000350ef0 [ 381.682548][ C0] Call Trace: [ 381.685839][ C0] [ 381.688694][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 381.695100][ C0] ? print_other_cpu_stall+0x1475/0x15b0 [ 381.700854][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 381.706676][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.712325][ C0] ? cgroup_rstat_updated+0x13b/0xc60 [ 381.717727][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.723380][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 381.729649][ C0] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 381.735047][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 381.740701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.746352][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 381.751567][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.757213][ C0] ? acct_account_cputime+0xdd/0x210 [ 381.762537][ C0] ? update_process_times+0x1ce/0x230 [ 381.767941][ C0] ? tick_nohz_handler+0x37c/0x500 [ 381.773124][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 381.778653][ C0] ? __hrtimer_run_queues+0x553/0xd50 [ 381.784051][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 381.790074][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 381.795834][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.801483][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 381.807588][ C0] ? hrtimer_interrupt+0x396/0x990 [ 381.812741][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 381.818914][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 381.824747][ C0] [ 381.827685][ C0] [ 381.830629][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.836806][ C0] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 381.842974][ C0] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 381.849145][ C0] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 381.854713][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.860363][ C0] smp_call_function_many_cond+0x1a0b/0x2ca0 [ 381.866364][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 381.872722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.878370][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 381.883427][ C0] ? __pfx___text_poke+0x10/0x10 [ 381.888386][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.894034][ C0] ? __get_immv32+0x19c/0x350 [ 381.898741][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 381.905086][ C0] ? __pfx___might_resched+0x10/0x10 [ 381.910404][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 381.915450][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 381.920581][ C0] text_poke_bp_batch+0x352/0xb30 [ 381.925641][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 381.931213][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 381.937128][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 381.943399][ C0] text_poke_bp+0xb0/0x100 [ 381.947836][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.953488][ C0] ? __pfx_text_poke_bp+0x10/0x10 [ 381.958540][ C0] ? trace_contention_end+0x3c/0x120 [ 381.963842][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.969493][ C0] ? __mutex_lock+0x2ef/0xd70 [ 381.974191][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 381.980460][ C0] __static_call_transform+0x51a/0x810 [ 381.985947][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 381.992220][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 381.998923][ C0] ? __pfx___static_call_transform+0x10/0x10 [ 382.004928][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 382.010846][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.017545][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 382.023809][ C0] arch_static_call_transform+0x141/0x380 [ 382.029557][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.036259][ C0] ? __SCT__tp_func_mm_vmscan_throttled+0x8/0x8 [ 382.042554][ C0] __static_call_update+0xd8/0x5e0 [ 382.047695][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.054400][ C0] ? __pfx___static_call_update+0x10/0x10 [ 382.060143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.065791][ C0] ? rcu_is_watching+0x15/0xb0 [ 382.070744][ C0] ? tracepoint_add_func+0x2e4/0x9e0 [ 382.076049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.081700][ C0] ? tracepoint_add_func+0x49a/0x9e0 [ 382.087012][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.093710][ C0] tracepoint_add_func+0x918/0x9e0 [ 382.098853][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.105552][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 382.112518][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 382.120004][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 382.126701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.132348][ C0] ? anon_inode_getfile+0xff/0x180 [ 382.137491][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.143141][ C0] ? bpf_probe_register+0x134/0x1f0 [ 382.148363][ C0] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 382.153850][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 382.159795][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.165440][ C0] ? fput+0x1a8/0x230 [ 382.169467][ C0] bpf_raw_tracepoint_open+0x177/0x1f0 [ 382.174959][ C0] __sys_bpf+0x3c0/0x810 [ 382.179224][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 382.184024][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.190036][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.196397][ C0] ? do_syscall_64+0x100/0x230 [ 382.201182][ C0] __x64_sys_bpf+0x7c/0x90 [ 382.205614][ C0] do_syscall_64+0xf3/0x230 [ 382.210136][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.216056][ C0] RIP: 0033:0x7f35cd77dff9 [ 382.220482][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.240105][ C0] RSP: 002b:00007f35ce520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.248543][ C0] RAX: ffffffffffffffda RBX: 00007f35cd935f80 RCX: 00007f35cd77dff9 [ 382.256527][ C0] RDX: 0000000000000010 RSI: 00000000200009c0 RDI: 0000000000000011 [ 382.264517][ C0] RBP: 00007f35cd7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 382.272505][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.280489][ C0] R13: 0000000000000000 R14: 00007f35cd935f80 R15: 00007fffe6eb50d8 [ 382.288494][ C0] [ 382.291954][ C0] vkms_vblank_simulate: vblank timer overrun