last executing test programs: 4.247116818s ago: executing program 1 (id=2382): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f00000001c0)}) 4.207401632s ago: executing program 1 (id=2374): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.324991913s ago: executing program 1 (id=2376): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) 3.222006962s ago: executing program 1 (id=2380): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f0100000000000000000009058202000200000009050302", @ANYRESOCT], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xc, @string={0xc, 0x3, "64000c49931905b0cc06"}}, 0x0, 0x0, 0x0}, 0x0) 3.021265121s ago: executing program 0 (id=2385): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.38706495s ago: executing program 0 (id=2393): r0 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000}) read$FUSE(r1, 0x0, 0x0) 2.327196905s ago: executing program 4 (id=2395): r0 = syz_create_resource$binfmt(&(0x7f0000000c40)='./file0\x00') openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000001680), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000016c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '#! ', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 2.325335626s ago: executing program 0 (id=2396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000005c0)={0x0, 0xea60}, 0x10) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 2.239111963s ago: executing program 4 (id=2397): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000200)={@id={0x2, 0x0, @a}}) 2.147063422s ago: executing program 0 (id=2398): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 2.144770602s ago: executing program 0 (id=2399): syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f0000000000)='./file0\x00', 0xc090, &(0x7f0000000600), 0x1, 0xd58d, &(0x7f0000027f80)="$eJzs3QtsleX9wPG3lFZq1PxNTPRvYoYgojhFWhWZCrQ4WAWLyJQKAyTSFRGvEAduURZDNjWLGJdtxkXHZnSbZMsuKNuSDWcAwagwDYwsgTGNl6mAceMyDV3OrbSH0tgHn6dDPp+Enr7v6e9pOd8+77EmhzaPndyQZX2zgsVZufrvrt+0/rVxP1g+4c8nPjjnll8Vzo4eXby7f/H29OLtgCy/WP7uPoVTNdlvV/TJHfTpuO6xNTUVJ2TZScXD0nrDCzd3rit9XFuZ4un/K92fX7Qi/+b+wp92NfnPc23lrI7rFD664uC/6FGquX7c2NIj2KFbZfHuigP35W/7Fv6MWp9lo9Zmh/z+6FW5r3PxSY99fGVvfyFHgub6cY1l/UcXO1cU92P/8j14NCr/Pm/92aYtxYewossL5xGiuX7shKybfTxy1vzL2wrXzaosy6qzLDsmy7J+vd2DT0d9Q11D7ppfOi5mL+3/xV19X8zY++EbWZYdX3yeGFF6LgCOLPUNdWO62P/V3e3/0Y1P/Mv+hyNfY31DXW6vl+3/ft3t/9dWDjuh+LP/8MLU/t79SwAAAAAAXZq/6K6bZs2b13KHd7zjHe+0v9PbVyYgtgObvre/EiC1FP850dt/RwAAADjaNTbVv19Z0elUZceD015qyd9esKd5zn2rlqws3RbvHt/Fkp1e59/W1tZ2347q0utjjyl7vWy/8uHc+nOPG7K0eNi//PUHVfmzVdn1X71xXsv5uU81sCpbmDsYllv3zKpsae6gNncwuCr7ae6gLn9Qk63KHZx3w63zZudOnBX4iH22NDYtzio7Fcs6fTd07D/3uEk/Kt12s2Rptfw/KpHrv2LFgifL7is5RP/29U//H/z3BT5TetZ/enPptpslD9r/t//6L/Vd3Xfo/u3rD9A/ri6u/50alV/3y67//btYsn3+mYWtM3P9H51xbGn/9/0k1/8O6w8s759fvP36n1vqjNL1P/fcMuiwHoyjUGPTN9/vbv9337/vqcUP69Nhtn21sRM3Lcr1X7fwe8uLp6p62P+M7vZ/Rf+Drif0UGPTsray/d+D/tngLpZsb7K0etqJuf7brz57aof7etJ/UHn/oQtuvm3o/EV3nXvjzbNaW1pbbqmrHXHhxRfUjqgdMTR/SSi8PbwH5ShyePs/O7ZspiLLBrXPv/v2hsty/S9c/dGa4ql+Pex/Zrf7//rOXysdDOiTVVdnC2ctWHDHsMLb0mFt4W3hw7ro34Pn/4GlH6JqircVWXZK+/w9H//uqlz/feueXFY8Vd3D/oO761994PMS6DD3/+yymU79T3vqkadz/adPaLiieKqnz/9ndbv/F9v/h6uxqex/+HzKcv1bdr64MHD8bD//xZWi/8i2tScGjg/RP64U/ffsev6iwPFz9I8rRf9vb9v2fOD45/WPK0X/+g1/eyNw/Fz940rR/9RVm78TOH6e/nGl6P/qK6/+PHB8qP5xpejfuu/R/w8cP1//uFL0/8Xux0cGjg/TP64U/f/95sNTAsdr9Y8rRf9L3/n+bYHjdfrHlaL/mDUPLAkcv0D/uFL0v3/dgz8OHL9Q/7hS9N+45d4XA8cv0j+uFP1P2fSt9wLHh+sfV4r+Wz+Yckbg+MX6x5Wi/8n7J4d+ihH6x5Wi/4QdM+cGjn9B/7hS9F+yfVro7+K8RP+4UvT/z8vjVgaOX6p/XCn61z035vHA8cv0jytF/zkbJ+4OHB+pf1wp+i/bOn5j4Pgo/eNK0f+FfX+6O3B8tP5xpehfsfsP1wWO1+sfV4r+U998NvQFmQ36x5Wi/8Pv/ObkwPEx+seVov97a375j8Dxy/WPK0X/QeueXh04/kX940rR/+4tTy0PHB+rf1wp+j+76ScPBI6P0z+uFP1v/2D+mMDxL+kfV4r+K/d/bXbgeKP+caXo//qOrx8fOH6F/nGl6D9k+z1DAsfH6x9Xiv7XvHzDtsDxCfrHlaL/D59r3Rs4fqX+caXov3bjTQ8FjjfpH1eK/idsvfWZwPGJ+seVov/v3x5cFTh+lf5xpeg//62BAwLHJ+kfV4r+Z+0Z2tXvCfkkrtY/rhT9t+89J/S3yU/WP64U/R/bPPyRwPEv6x9Xiv5T/lr3x8Dxa/SPK0X/414YtTlw/Fr940rRf/XaS3YFjk/RP64U/Sv//u7FgePN+seVov/6nTs/Fzh+nf5xpej/UNvrdwaOT9U/rhT9m3e9NSlwfJr+caXoP3jbR08Ejn9F/7hS9N+xoe3ewPHp+seVov+KVR/+M3B8hv5xpej/jVf2vBQ4PlN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOwG7bS4Y97+fYzzmKUnJPM8zmc4hU8YMJRooQiFJQoNDqZAoFGUMESpkVpIUjkSFJkNFpaQ0mTn/64ydjlv1/t7+r3Lf93U9e+2113rW+e7vZ333s3VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVfVCbIeNtl1/MJh6wt6oZx0fefzoO0ffvvGJF2x+3ezH7LHPReNfHTFiwuEFxkzRYNzFxh0eNv6U4YNLzh42dmfY5NedYfjwoVkGQ3PxqA545J8Me7aJT8ZddGjcw5HjfyY1fOzDwVcvs+0/uZa6HUZuvNGEGRyazG2qCYeHJs7uhO3U439We3QwWO3awXPeH89/d1181hbP9xj+G9ph5MabTuE/mOA8zn3K9W1tyvv8fSNG7/u8wv2b2mHkRpuPtX6udXzHbQ8NHzP+c32awWAw7WAwmG4wGEz/fHvUv6eR66+8/tjP/In749VHTfxCQJ/vQ0PbnP76CX9fVx8Mho+Y+Legqv67Grn+yhvA+p920nFY//Pf9+jmrf+q//42Hbn+yoPJvuePf3XU9BOP0/q/6ZQrVnn+RlxVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVz0fPPHTVNYPBYGgwGAwbDJ4aTHg++XYwZsyYMWP3L7z2ttuet4H+ZzQ08vjRd46+feMTL9j8utmP2WOfi/42S/+1/fe/g/rfNNZ/+vMWGAz22f75Hko9D7X+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wzD111zYR7YNhg8NRgwvNRE7czLXPd0RNOXfSeU68/bMrfH/va9P/no37eGhp5/Og7R9++8YkXbH7d7Mfssc9FL4DV89//Dup/0zj/PYfGr+XBYDDbnoPBYMuR22y3xGAwOOz6U+9ZaDDp2Bpjj601x1SDqcb96hLjHhd9jgsvMPl2hknXuHDc9Tcdc8ZUQ1MMYrKuOPzaI/bY4dFVptwu/tzvY9jEJ7PvNO2xY8aMGfN3L07ouT6rJl5/4nuZcp1PGPsSY8e+/P5777v8uw46eNk9995l9912322flVdac9U1VllpzZXWXP6te+612wrjH59jzsbPysL/ypxNO+WcPTRy8jmb8r0915wt8I/nbNwV37T7gZdNnLOp/4dztvA/nrMF9pw41gWmGew8bmrG/pOLTDM4cOzOitNN9rdlnrHnrj3HsMHg2L+90bHPppt0Dw6NGnvODhttu/7fRjrqWWN71uf0uEaMmGKaF5ywXWj82x4x2bQOH1xy6bCxO383zTMMHz40y2Aw14Tdiddbc/xm3+0nnjdmiia8PNvkEz9+5oeOHP8zqeFjH+5d+uJ1J7/OcxD8Oxo3imn/h7/0LK81hiZN1NCEnwnnjPcaufGmf1vmIyY+TD3htdXHmkw5Z//OnjXeBYZNuq9pvJuOXH/lsS9PMf+TlgLdX5s9dsKoCffW6uN/65n/ZxT+7Nh83ONzrecFptj+o8+Oqf729G+v7nbLfFN+dmz23EP8u3UxcY6mm+Kk5/rsOHapmd42+WfTc3x2bD527NMMJv/sGPvPLjzxs2Ps2BebZnDs2J2Vxu4sPs3g3LE7K4/bGT64duzOcm95x167Do37e/Ws+2CJoUkT8Bz37UZT3LfDJpu+ocnmb2jC/Tz1YLDe6MFgvRvofT33dHJ03077D8Y7cv2VNxg7xinu20nLG8YzdNyYG+ceDAYzT3hfa04c+/9LNN6p//F414fxTv0Pxjs4esvTpv03j3fSOht3r034mF7iOX7n79bZbM9aZ4dONdnK+Fe/1+wK549/Ps+kq51/0jnzTZyjaaa47j/7Gz3xvZD/xO98kzc0ajD0j+bmub6H/d3czPKP5+Zf/f6yxIQvGMP/wdxsfeVTh0ycmyn/lv2zuVn8OeZm8u/DkzftYDD87+dm6sGGY7/RTJibxf6VuZnp33PfzADnj3++6KSX1rntgQcnzg3MBf7338TrL/Y/nJuhnSfdN4uMO7bQsMG00w4O3GX//fdbcfzjxN2Vxj/+4zW4yL8yl9P/e+Zy3gmfOsOePTmTXjrozq02+n9dg4v8T+dygcGwif+by55TLpZ/X/33v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7innnoqmsm3APDBoOnBuOfD03YDkbdffLSa4zdDgaDaS4/+cCNn+/xPs8NjTx+9J2jb9/4xAs2v272Y/bY56IXwOr5738H9b9pnP+eQ4PBhPU9256DwWDLkdtst8RgMNj4wJMvHzaYdGyescfWnmPYYHDs0N9dYLpJ5wyNGnvODhttu/5gMPWEM0Y96x991joa14gREw4vMGG74ITtQoNxFxt3eNj4l4YPLrl02NidYZNfd4bhw4dmGQzmmrA78Xqrj98ccNPE88ZM0YSXZ5t4fNikmRk6cvzPpIaPfZhztlPPnvw6//Js/x818bN6z2H/9NTWv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt75qGrrplwDwwbDJ4ajH8+NGrCdnDmTu8cPuEWmWbpMbde/3yP93luaOTxo+8cffvGJ16w+XWzH7PHPhe9AFbPf/87qP9N4/z3HBoMJqzv2fYcDAZbjtxmuyUGg8H1t45Zethg0rF5xh5be45hg8GxQ393gekmnTM0auw5O2y07fqDwdQTzhj1rH/0WetoXCNGTDi8wITtghO2Cw3GXWzc4WHjXxo+uOTSYWN3hk1+3RmGDx+aZTCYa8LuxOutPn5zwE0TzxszRRNenm3i8WGTZmboyPE/kxo+9mHZm3fce/Lr/Muz/X/UxM/qPYf901Nb/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/umYeuumbCPTBsMHhqMP75sAnboVHLP3zhkmO3Y/fvn+aoE5/v8T7PDY08fvSdo2/f+MQLNr9u9mP22OeiF8Dq+e9/B/W/aaz/9OctMBjss/3zPZR6Hmr9u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7hnHrrqmglPh/3t1WGjui+woZHHj75z9O0bn3jB5tfNfswe+1z0fA/of9tz+B+aP2bxPyx/zOL/wfwxi/+H8scs/ofnj1n8P5w/ZvH/SP6Yxf+j+WMW/yPyxyz+R+aPWfyPyh+z+H8sf8zif3T+mMX/4/ljFv9j8scs/sfmj1n8P5E/ZvH/ZP6Yxf+4/DGL//H5Yxb/E/LHLP6fyh+z+H86f8zif2L+mMX/pPwxi/9n8scs/p/NH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/p/LH7P4n5k/ZvE/K3/M4n92/pjF//P5Yxb/c/LHLP7n5o9Z/L+QP2bxPy9/zOJ/fv6Yxf+C/DGL/xfzxyz+X8ofs/h/OX/M4n9h/pjF/6L8MYv/xfljFv+v5I9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8v5o/ZvH/Wv6Yxf+a/DGL/9fzxyz+1+aPWfy/kT9m8b8uf8zi/838MYv/9fljFv9v5Y9Z/L+dP2bxvyF/zOJ/Y/6Yxf+m/DGL/+j8MYv/zfljFv/v5I9Z/G/JH7P4fzd/zOJ/a/6Yxf+2/DGL//fyxyz+388fs/j/IH/M4n97/pjF/478MYv/nfljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/2f5Yxb/n+ePWfx/kT9m8b8vf8zif3/+mMX/l/ljFv9f5Y9Z/H+dP2bxfyB/zOL/m/wxi/9v88cs/g/mj1n8f5c/ZvF/KH/M4v/7/DGL/x/yxyz+D+ePWfz/mD9m8f9T/pjF/8/5Yxb/v+SPWfz/mj9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOI/Jn9M4j/VIH/M4j+UP2bxH5Y/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8h+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+i/DGL/9z5Yxb/F+ePWfznyR+z+L8kf8ziP2/+mMX/pfljFv+X5Y9Z/OfLH7P4vzx/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/V+SPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL/4j8MYv/yPwxi//6+WMW/w3yxyz+r8wfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/1flj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/1fnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/NfljFv/X5o9Z/HfIH7P4vy5/zOK/Y/6YxX+n/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/875Yxb/XfLHLP5vzh+z+L8lf8ziv2v+mMV/t/wxi/9b88cs/rvnj1n898gfs/jvmT9m8X9b/pjF/+35Yxb/vfLHLP57549Z/PfJH7P4vyN/zOK/b/6Yxf+d+WMW//3yxyz+78ofs/jvnz9m8X93/pjF/4D8MYv/e/LHLP4H5o9Z/A/KH7P4H5w/9sL3n2bsw1TvzR974fuPa6r35Y9Z/N+fP2bx/0D+mMX/kPwxi/+o/DGL/6H5Yxb/w/LHLP4fzB+z+H8of8zif3j+mMX/w/ljFv+P5I9Z/D+aP2bxPyJ/zOJ/ZP6Yxf+o/DGL/8fyxyz+R+ePWfw/nj9m8T8mf8zif2z+mMX/E/ljFv9P5o9Z/I/LH7P4H58/ZvE/IX/M4v+p/DGL/6fzxyz+J+aPWfxPyh+z+H8mf8zi/9n8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/7n8MYv/mfljFv+z8scs/mfnj1n8P58/ZvE/J3/M4n9u/pjF/wv5Yxb/8/LHLP7n549Z/C/IH7P4fzF/zOL/pfwxi/+X88cs/hfmj1n8L8ofs/hfnD9m8f9K/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/q/ljFv+v5Y9Z/K/JH7P4fz1/zOJ/bf6Yxf8b+WMW/+vyxyz+38wfs/hfnz9m8f9W/pjF/9v5Yxb/G/LHLP435o9Z/G/KH7P4j84fs/jfnD9m8f9O/pjF/5b8MYv/d/PHLP635o9Z/G/LH7P4fy9/zOL//fwxi/8P8scs/rfnj1n878gfs/jfmT9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/678MYv/3fljFv978scs/vfmj1n8f5Y/ZvH/ef6Yxf8X+WMW//vyxyz+9+ePWfx/mT9m8f9V/pjF/9f5Yxb/B/LHLP6/yR+z+P82f8zi/2D+mMX/d/ljFv+H8scs/r/PH7P4/yF/zOL/cP6Yxf+P+WMW/z/lj1n8/5w/ZvH/S/6Yxf+v+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP5j8sck/lMP8scs/kP5Yxb/YfljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/eP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/i/KH7P4z50/ZvF/cf6YxX+e/DGL/0vyxyz+8+aPWfxfmj9m8X9Z/pjFf778MYv/y/PHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvF/Rf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4j8gfs/iPzB+z+K+fP2bx3yB/zOL/yvwxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf1X+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bxf3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfxfkz9m8X9t/pjFf4f8MYv/6/LHLP475o9Z/HfKH7P4vz5/zOL/hvwxi/8b88cs/m/KH7P475w/ZvHfJX/M4v/m/DGL/1vyxyz+u+aPWfx3yx+z+L81f8ziv3v+mMV/j/wxi/+e+WMW/7flj1n8354/ZvHfK3/M4r93/pjFf5/8MYv/O/LHLP775o9Z/N+ZP2bx3y9/zOL/rvwxi//++WMW/3fnj1n8D8gfs/i/J3/M4n9g/pjF/6D8MYv/wfljFv/35o9Z/N+XP2bxf3/+mMX/A/ljFv9D8scs/qPyxyz+h+aPWfwPyx+z+H8wf8zi/6H8MYv/4fljFv8P549Z/D+SP2bx/2j+mMX/iPwxi/+R+WMW/6Pyxyz+H8sfs/gfnT9m8f94/pjF/5j8MYv/sfljFv9P5I9Z/D+ZP2bxPy5/zOJ/fP6Yxf+E/DGL/6fyxyz+n84fs/ifmD9m8T8pf8zi/5n8MYv/Z/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/5/LHLP5n5o9Z/M/KH7P4n50/ZvH/fP6Yxf+c/DGL/7n5Yxb/L+SPWfzPyx+z+J+fP2bxvyB/zOL/xfwxi/+X8scs/l/OH7P4X5g/ZvG/KH/M4n9x/pjF/yv5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv+v5o9Z/L+WP2bxvyZ/zOL/9fwxi/+1+WMW/2/kj1n8r8sfs/h/M3/M4n99/pjF/1v5Yxb/b+ePWfxvyB+z+N+YP2bxvyl/zOI/On/M4n9z/pjF/zv5Yxb/W/LHLP7fzR+z+N+aP2bxvy1/zOL/vfwxi//388cs/j/IH7P4354/ZvG/I3/M4n9n/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/u/LHLP53549Z/O/JH7P435s/ZvH/Wf6Yxf/n+WMW/1/kj1n878sfs/jfnz9m8f9l/pjF/1f5Yxb/X+ePWfwfyB+z+P8mf8zi/9v8MYv/g/ljFv/f5Y9Z/B/KH7P4/z5/zOL/h/wxi//D+WMW/z/mj1n8/5Q/ZvH/c/6Yxf8v+WMW/7/mj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+I/JH5P4TzPIH7P4D+WPWfyH5Y9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv/h+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4vyh/zOI/d/6Yxf/F+WMW/3nyxyz+L8kfs/jPmz9m8X9p/pjF/2X5Yxb/+fLHLP4vzx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6Yxf8V+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOI/In/M4j8yf8ziv37+mMV/g/wxi/8r88cs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/VfljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMX/1fljFv9t8scs/tvmj1n8t8sfs/hvnz9m8X9N/pjF/7X5Yxb/HfLHLP6vyx+z+O+YP2bx3yl/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOK/c/6YxX+X/DGL/5vzxyz+b8kfs/jvmj9m8d8tf8zi/9b8MYv/7vljFv898scs/nvmj1n835Y/ZvF/e/6YxX+v/DGL/975Yxb/ffLHLP7vyB+z+O+bP2bxf2f+mMV/v/wxi/+78scs/vvnj1n8350/ZvE/IH/M4v+e/DGL/4H5Yxb/g/LHLP4H549Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/A/JH7P4j8ofs/gfmj9m8T8sf8zi/8H8MYv/h/LHLP6H549Z/D+cP2bx/0j+mMX/o/ljFv8j8scs/kfmj1n8j8ofs/h/LH/M4n90/pjF/+P5Yxb/Y/LHLP7H5o9Z/D+RP2bx/2T+mMX/uPwxi//x+WMW/xPyxyz+n8ofs/h/On/M4n9i/pjF/6T8MYv/Z/LHLP6fzR+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP6fyx+z+J+ZP2bxPyt/zOJ/dv6Yxf/z+WMW/3Pyxyz+5+aPWfy/kD9m8T8vf8zif37+mMX/gvwxi/8X88cs/l/KH7P4fzl/zOJ/Yf6Yxf+i/DGL/8X5Yxb/r+SPWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/L+aP2bx/1r+mMX/mvwxi//X88cs/tfmj1n8v5E/ZvG/Ln/M4v/N/DGL//X5Yxb/b+WPWfy/nT9m8b8hf8zif2P+mMX/pvwxi//o/DGL/835Yxb/7+SPWfxvyR+z+H83f8zif2v+mMX/tvwxi//38scs/t/PH7P4/yB/zOJ/e/6Yxf+O/DGL/535Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/n+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf9n+WMW/5/nj1n8f5E/ZvG/L3/M4n9//pjF/5f5Yxb/X+WPWfx/nT9m8X8gf8zi/5v8MYv/b/PHLP4P5o9Z/H+XP2bxfyh/zOL/+/wxi/8f8scs/g/nj1n8/5g/ZvH/U/6Yxf/P+WMW/7/kj1n8/5o/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8ziPyZ/TOI/7SB/zOI/lD9m8R+WP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/Ifnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/ovwxi//c+WMW/xfnj1n858kfs/i/JH/M4j9v/pjF/6X5Yxb/l+WPWfznyx+z+L88f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/1fkj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi/+I/DGL/8j8MYv/+vljFv8N8scs/q/MH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv9X5Y9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9X549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/zX5Yxb/1+aPWfx3yB+z+L8uf8ziv2P+mMV/p/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi//O+WMW/13yxyz+b84fs/i/JX/M4r9r/pjFf7f8MYv/W/PHLP67549Z/PfIH7P475k/ZvF/W/6Yxf/t+WMW/73yxyz+e+ePWfz3yR+z+L8jf8ziv2/+mMX/nfljFv/98scs/u/KH7P4758/ZvF/d/6Yxf+A/DGL/3vyxyz+B+aPWfwPyh+z+B+cP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxPyR/zOI/Kn/M4n9o/pjF/7D8MYv/B/PHLP4fyh+z+B+eP2bx/3D+mMX/I/ljFv+P5o9Z/I/IH7P4H5k/ZvE/Kn/M4v+x/DGL/9H5Yxb/j+ePWfyPyR+z+B+bP2bx/0T+mMX/k/ljFv/j8scs/sfnj1n8T8gfs/h/Kn/M4v/p/DGL/4n5Yxb/k/LHLP6fyR+z+H82f8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8uf8zif2b+mMX/rPwxi//Z+WMW/8/nj1n8z8kfs/ifmz9m8f9C/pjF/7z8MYv/+fljFv8L8scs/l/MH7P4fyl/zOL/5fwxi/+FSv/5/+kZFv+LlP7/PIv/xfljFv+v5I9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8v5o/ZvH/Wv6Yxf+a/DGL/9fzxyz+1+aPWfy/kT9m8b8uf8zi/838MYv/9fljFv9v5Y9Z/L+dP2bxvyF/zOJ/Y/6Yxf+m/DGL/+j8MYv/zfljFv/v5I9Z/G/JH7P4fzd/zOJ/a/6Yxf+2/DGL//fyxyz+388fs/j/IH/M4n97/pjF/478MYv/nfljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/2f5Yxb/n+ePWfx/kT9m8b8vf8zif3/+mMX/l/ljFv9f5Y9Z/H+dP2bxfyB/zOL/m/wxi/9v88cs/g/mj1n8f5c/ZvF/KP9JTTfZc4v/7/PHLP5/yB+z+D+cP2bx/2P+mMX/T/ljFv8/549Z/P+SP2bx/2v+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/5j8MYn/uP/LU/7PzuI/lD9m8R+WP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/Ifnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/ovwxi//c+WMW/xfnj1n858kfs/i/JH/M4j9v/pjF/6X5Yxb/l+WPWfznyx+z+L88f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/1fkj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi/+I/DGL/8j8MYv/+vljFv8N8scs/q/MH7P4b5g/ZvHfKH/M4r9x/pjFf5N/4r/e/9/j+g/N4r9p6x+z+L8qf8ziv1n+mMV/8/wxi/8W+WMW/y3zx16Y/iPGPZ3cf6v8sRem//gm9986f8zi/+r8MYv/NvljFv9t88cs/tvlj1n8t88fs/i/Jn/M4v/a/DGL/w75Yxb/1+WPWfx3zB+z+O+UP2bxf33+mMX/DfljFv835o9Z/N+UP2bx3zl/zOK/S/6Yxf/N+WMW/7fkj1n8d80fs/jvlj9m8X9r/pjFf/f8MYv/HvljFv8988cs/m/LH7P4vz1/zOK/V/6YxX/v/DGL/z75Yxb/d+SPWfz3zR+z+L8zf8ziv1/+mMX/XfljFv/988cs/u/OH7P4H5A/ZvF/T/6Yxf/A/DGL/0H5Yxb/g/PHLP7vzR+z+L8vf8zi//78MYv/B/LHLP6H5I9Z/Eflj1n8D80fs/gflj9m8f9g/pjF/0P5Yxb/w/PHLP4fzh+z+H8kf8zi/9H8MYv/EfljFv8j88cs/kflj1n8P5Y/ZvE/On/M4v/x/DGL/zH5Yxb/Y/PHLP6fyB+z+H8yf8zif1z+mMX/+Pwxi/8J+WMW/0/lj1n8P50/ZvE/MX/M4n9S/pjF/zP5Yxb/z+aPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/z+WPWfzPzB+z+J+VP2bxPzt/zOL/+fwxi/85+WMW/3Pzxyz+X8gfs/iflz9m8T8/f8zif0H+mMX/i/ljFv8v5Y9Z/L+cP2bxvzB/zOJ/Uf6Yxf/i/DGL/1fyxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP5fzR+z+H8tf8zif03+2NDITRT+X88fs6z/a/PHLP7fyB+z+F+XP2bx/2b+mMX/+vwxi/+38scs/t/OH7P435A/ZvG/MX/M4n9T/pjFf3T+mMX/5vwxi/938scs/rfkj1n8v5s/ZvG/NX/M4n9b/pjF/3v5Yxb/7+ePWfx/kD9m8b89f8zif0f+mMX/zvwxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/nflj1n8784fs/jfkz9m8b83f8zi/7P8MYv/z/PHLP6/yB+z+N+XP2bxvz9/zOL/y/wxi/+v8scs/r/OH7P4P5A/ZvH/Tf6Yxf+3+WMW/wfzxyz+v8sfs/g/lD9m8f99/pjF/w/5Yxb/h/PHLP5/zB+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvEfkz8m8Z9+kD9m8R/KH7P4D8sfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+w/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8X9R/pjFf+78MYv/i/PHLP7z5I9Z/F+SP2bxnzd/zOL/0vwxi//L8scs/vPlj1n8X54/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/K/LHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf0T+mMV/ZP6YxX/9/DGL/wb5Yxb/V+aPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/6vyxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/6vzxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/mvwxi/9r88cs/jvkj1n8X5c/ZvHfMX/M4r9T/pjF//X5Yxb/N+SPWfzfmD9m8X9T/pjFf+f8MYv/LvljFv83549Z/N+SP2bx3zV/zOK/W/6Yxf+t+WMW/93zxyz+e+SPWfz3zB+z+L8tf8zi//b8MYv/XvljFv+988cs/vvkj1n835E/ZvHfN3/M4v/O/DGL/375Yxb/d+WPWfz3zx+z+L87f8zif0D+mMX/PfljFv8D88cs/gflj1n8D84fs/i/N3/M4v++/DGL//vzxyz+H8gfs/gfkj9m8R+VP2bxPzR/zOJ/WP6Yxf+D+WMW/w/lj1n8D88fs/h/OH/M4v+R/DGL/0fzxyz+R+SPWfyPzB+z+B+VP2bx/1j+mMX/6Pwxi//H88cs/sfkj1n8j80fs/h/In/M4v/J/DGL/3H5Yxb/4/PHLP4n5I9Z/D+VP2bx/3T+mMX/xPwxi/9J+WMW/8/kj1n8P5s/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8P5c/ZvE/M3/M4n9W/pjF/+z8MYv/5/PHLP7n5I9Z/M/NH7P4fyF/zOJ/Xv6Yxf/8/DGL/wX5Yxb/L+aPWfy/lD9m8f9y/pjF/8L8MYv/RfljFv+L88cs/l/JH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/h/NX/M4v+1/DGL/zX5Yxb/r+ePWfyvzR+z+H8jf8zif13+mMX/m/ljFv/r88cs/t/KH7P4fzt/zOJ/Q/6Yxf/G/DGL/035Yxb/0fljFv+b88cs/t/JH7P435I/ZvH/bv6Yxf/W/DGL/235Yxb/7+WPWfy/nz9m8f9B/pjF//b8MYv/HfljFv8788cs/j/MH7P4/yh/zOL/4/wxi/9P8scs/j/NH7P435U/ZvG/O3/M4n9P/pjF/978MYv/z/LHLP4/zx+z+P8if8zif1/+mMX//vwxi/8v88cs/r/KH7P4/zp/zOL/QP6Yxf83+WMW/9/mj1n8H8wfs/j/Ln/M4v9Q/pjF//f5Yxb/P+SPWfwfzh+z+P8xf8zi/6f8MYv/n/PHLP5/yR+z+P81f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6YxX9M/pjEf/ggf8ziP5Q/ZvEflj9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfyH549Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8zi/6L8MYv/3PljFv8X549Z/OfJH7P4vyR/zOI/b/6Yxf+l+WMW/5flj1n858sfs/i/PH/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv9X5I9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/iPwxi//I/DGL//r5Yxb/DfLHLP6vzB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/V+WPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/V+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf81+WMW/9fmj1n8d8gfs/i/Ln/M4r9j/pjFf6f8MYv/6/PHLP5vyB+z+L8xf8zi/6b8MYv/zvljFv9d8scs/m/OH7P4vyV/zOK/a/6YxX+3/DGL/1vzxyz+u+ePWfz3yB+z+O+ZP2bxf1v+mMX/7fljFv+98scs/nvnj1n898kfs/i/I3/M4r9v/pjF/535Yxb//fLHLP7vyh+z+O+fP2bxf3f+mMX/gPwxi/978scs/gfmj1n8D8ofs/gfnD9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8T8kf8ziPyp/zOJ/aP6Yxf+w/DGL/wfzxyz+H8ofs/gfnj9m8f9w/pjF/yP5Yxb/j+aPWfyPyB+z+B+ZP2bxPyp/zOL/sfwxi//R+WMW/4/nj1n8j8kfs/gfmz9m8f9E/pjF/5P5Yxb/4/LHLP7H549Z/E/IH7P4fyp/zOL/6fwxi/+J+WMW/5Pyxyz+n8kfs/h/Nn/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/Ln/M4n9m/pjF/6z8MYv/2fljFv/P549Z/M/JH7P4n5s/ZvH/Qv6Yxf+8/DGL//n5Yxb/C/4l/0P+/xvXf2gW/y+2/jGL/5fyxyz+X84fs/hfmD9m8b8of8zif3H+mMX/K/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/6/mj1n8v5Y/ZvG/Jn/M4v/1/DGL/7X5Yxb/b+SPWfyvyx+z+H8zf8zif33+mMX/W/ljFv9v549Z/G/IH7P435g/ZvG/KX/M4j86f8zif3P+mMX/O/ljFv9b8scs/t/NH7P435o/ZvG/LX/M4v+9/DGL//fzxyz+P8gfs/jfnj9m8b8jf8zif2f+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv+78scs/nfnj1n878kfs/jfmz9m8f9Z/pjF/+f5Yxb/X+SPWfzvyx+z+N+fP2bx/2X+mMX/V/ljFv9f549Z/B/IH7P4/yZ/zOL/2/wxi/+D+WMW/9/lj1n8H8ofs/j/Pn/M4v+H/DGL/8P5Yxb/P+aPWfz/lD9m8f9z/pjF/y/5Yxb/v+aPWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4j8kfk/jPMMgfs/gP5Y9Z/Iflj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/+H5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/i/KH/M4j93/pjF/8X5Yxb/efLHLP4vyR+z+M+bP2bxf2n+mMX/ZfljFv/58scs/i/PH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/xX5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4j8if8ziPzJ/zOK/fv6YxX+D/DGL/yvzxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf9V+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf/V+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bxf03+mMX/tfljFv8d8scs/q/LH7P475g/ZvHfKX/M4v/6/DGL/xvyxyz+b8wfs/i/KX/M4r9z/pjFf5f8MYv/m/PHLP5vyR+z+O+aP2bx3y1/zOL/1vwxi//u+WMW/z3yxyz+e+aPWfzflj9m8X97/pjFf6/8MYv/3vljFv998scs/u/IH7P475s/ZvF/Z/6YxX+//DGL/7vyxyz+++ePWfzfnT9m8T8gf8zi/578MYv/gfljFv+D8scs/gfnj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8D8kfs/iPyh+z+B+aP2bxPyx/zOL/wfwxi/+H8scs/ofnj1n8P5w/ZvH/SP6Yxf+j+WMW/yPyxyz+R+aPWfyPyh+z+H8sf8zif3T+mMX/4/ljFv9j8scs/sfmj1n8P5E/ZvH/ZP6Yxf+4/DGL//H5Yxb/E/LHLP6fyh+z+H86f8zif2L+mMX/pPwxi/9n8scs/p/NH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/p/LH7P4n5k/ZvE/K3/M4n92/pjF//P5Yxb/c/LHLP7n5o9Z/L+QP2bxPy9/zOJ/fv6Yxf+C/DGL/xfzxyz+X8ofs/h/OX/M4n9h/pjF/6L8MYv/xfljFv+v5I9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8v5o/ZvH/Wv6Yxf+a/DGL/9fzxyz+1+aPWfy/kT9m8b8uf8zi/838MYv/9fljFv9v5Y9Z/L+dP2bxvyF/zOJ/Y/6Yxf+m/DGL/+j8MYv/zfljFv/v5I9Z/G/JH7P4fzd/zOJ/a/6Yxf+2/DGL//fyxyz+388fs/j/IH/M4n97/pjF/478MYv/nfljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/2f5Yxb/n+ePWfx/kT9m8b8vf8zif3/+mMX/l/ljL0z/Wad8dYZf5Y+9MP3HN/n6/3X+mMX/gfwxi/9v8scs/r/NH7P4P5g/ZvH/Xf6Yxf+h/DGL/+/zxyz+f8gfs/g/nD9m8f9j/pjF/0/5Yxb/P+ePWfz/kj9m8f9r/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+Y/DGJ/4yD/DGL/1D+mMV/WP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvEfnj9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/4vyxyz+c+ePWfxfnD9m8Z8nf8zi/5L8MYv/vPljFv+X5o9Z/F+WP2bxny9/zOL/8vwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfxfkT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+I/LHLP4j88cs/uvnj1n8N8h/MGbMmDFTvmbxf2X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8qf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+L86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+r8kfs/i/Nn/M4r9D/pjF/3X5Yxb/HfPHLP475Y9Z/F+fP2bxf0P+mMX/jfljFv835Y9Z/HfOH7P475I/ZvF/c/6Yxf8t+WMW/13zxyz+u+WPWfzfmj9m8d89f8ziv0f+mMV/z/wxi//b8scs/m/PH7P475U/ZvHfO3/M4r9P/pjF/x35Yxb/ffPHLP7vzB+z+O+XP2bxf1f+mMV///wxi/+788cs/gfkj1n835M/ZvE/MH/M4n9Q/pjF/+D8MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/IfljFv9R+WMW/0Pzxyz+h+WPWfw/mD9m8f9Q/pjF//D8MYv/h/PHLP4fyR+z+H80f8zif0T+mMX/yPwxi/9R+WMW/4/lj1n8j84fs/h/PH/M4n9M/pjF/9j8MYv/J/LHLP6fzB+z+B+XP2bxPz5/zOJ/Qv6Yxf9T+WMW/0/nj1n8T8wfs/iflD9m8f9M/pjF/7P5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3P5Yxb/M/PHLP5n5Y9Z/M/OH7P4fz5/zOJ/Tv6Yxf/c/DGL/xfyxyz+5+WPWfzPzx+z+F+QP2bx/2L+mMX/S/ljFv8v549Z/C/MH7P4X5Q/ZvG/OH/M4v+V/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/V/PHLP5fyx+z+F+TP2bx/3r+mMX/2vwxi/838scs/tflj1n8v5k/ZvG/Pn/M4v+t/DGL/7fzxyz+N+SPWfxvzB+z+N+UP2bxH50/ZvG/OX/M4v+d/DGL/y35Yxb/7+aPWfxvzR+z+N+WP2bx/57Zf7/nPmTx/77Z/x9k8f9B/pjF//b8MYv/HfljFv8788cs/j/MH7P4/yh/zOL/4/wxi/9P8scs/j/NH7P435U/ZvG/O3/M4n9P/pjF/978MYv/z/LHLP4/zx+z+P8if8zif1/+mMX//vwxi/8v88cs/r/KH7P4/zp/zOL/QP6Yxf83+WMW/9/mj1n8H8wfs/j/Ln/M4v9Q/pjF//f5Yxb/P+SPWfwfzh+z+P8xf8zi/6f8MYv/n8c+zvY8jek/OIv/X1r/mMX/r/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+Y/LHJP4zDfLHLP5Df/PfYoPnZWD/mVn8h7X+MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziPzx/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv8X5Y9Z/OfOH7P4vzh/zOI/T/6Yxf8l+WMW/3nzxyz+L80fs/i/LH/M4j9f/pjF/+X5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4vyJ/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/Efkj1n8R+aPWfzXzx+z+G+QP2bxf2X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8qf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+L86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+r8kfs/i/Nn/M4r9D/pjF/3X5Yxb/HfPHLP475Y9Z/F+fP2bxf0P+mMX/jfljFv835Y9Z/HfOH7P475I/ZvF/c/6Yxf8t+WMW/13zxyz+u+WPWfzfmj9m8d89f8ziv0f+mMV/z/wxi//b8scs/m/PH7P475U/ZvHfO3/M4r9P/pjF/x35Yxb/ffPHLP7vzB+z+O+XP2bxf1f+mMV///wxi/+788cs/gfkj1n835M/ZvE/MH/M4n9Q/pjF/+D8MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/IfljFv9R+WMW/0Pzxyz+h+WPWfw/mD9m8f9Q/pjF//D8MYv/h/PHLP4fyR+z+H80f8zif0T+mMX/yPwxi/9R+WMW/4/lj1n8j84fs/h/PH/M4n9M/pjF/9j8MYv/J/LHLP6fzB+z+B+XP2bxPz5/zOJ/Qv6Yxf9T+WMW/0/nj1n8T8wfs/iflD9m8f9M/pjF/7P5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3P5Yxb/M/PHLP5n5Y9Z/M/OH7P4fz5/zOJ/Tv6Yxf/c/DGL/xfyxyz+5+WPWfzPzx+z+F+QP2bx/2L+mMX/S/ljFv8v549Z/C/MH7P4X5Q/ZvG/OH/M4v+V/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/V/PHLP5fyx+z+F+TP2bx/3r+mMX/2vwxi/838scs/tflj1n8v5k/ZvG/Pn/M4v+t/DGL/7fzxyz+N+SPWfxvzB+z+N+UP2bxH50/ZvG/OX/M4v+d/DGL/y35Yxb/7+aPWfxvzR+z+N+WP2bx/17+mMX/+/ljFv8f5I9Z/G/PH7P435E/ZvG/M3/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL/135Yxb/u/PHLP735I9Z/O/NH7P4/yx/zOL/8/wxi/8v8scs/vflj1n8788fs/j/Mn/M4v+r/DGL/6/zxyz+D+SPWfx/kz9m8f9t/pjF/8H8MYv/7/Kf1NOTPbf4P5Q/ZvH/ff6Yxf8P+WMW/4fzxyz+f8wfs/j/KX/M4v/n/DGL/1/yxyz+f80fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxH5M/JvGfeZA/ZvEfyh+z+A/LH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/sPzxyz+M+SPWfxnzB+z+M+UP/aC8x/+t6eT+8+cP/aC83+O9T9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8X9R/pjFf+78MYv/i/PHLP7z5I9Z/F+SP2bxnzd/zOL/0vwxi//L8scs/vPlj1n8X54/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf83n8p/p/2hc/6FZ/F/R+scs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV/RP6YxX9k/pjFf/38MYv/BvljFv9X5o9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/q/LHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/q/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+a/DGL/2vzxyz+O+SPWfxflz9m8d8xf8ziv1P+mMX/9fljFv835I9Z/N+YP2bxf1P+mMV/5/wxi/8u+WMW/zfnj1n835I/ZvHfNX/M4r9b/pjF/635Yxb/3fPHLP575I9Z/PfMH7P4vy1/zOL/9vwxi/9e+WMW/73zxyz+++SPWfzfkT9m8d83f8zi/878MYv/fvljFv935Y9Z/PfPH7P4vzt/zOJ/QP6Yxf89+WMW/wPzxyz+B+WPWfwPzh+z+L83f8zi/778MYv/+/PHLP4fyB+z+B+SP2bxH5U/ZvE/NH/M4n9Y/pjF/4P5Yxb/D+WPWfwPzx+z+H84f8zi/5H8MYv/R/PHLP5H5I9Z/I/MH7P4H5U/ZvH/WP6Yxf/o/DGL/8fzxyz+x+SPWfyPzR+z+H8if8zi/8n8MYv/cfljFv/j88cs/ifkj1n8P5U/ZvH/dP6Yxf/E/DGL/0n5Yxb/z+SPWfw/mz9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfw/lz9m8T8zf8zif1b+mMX/7Pwxi//n88cs/ufkj1n8z80fs/h/IX/M4n9e/pjF//z8MYv/BfljFv8v5o9Z/L+UP2bx/3L+mMX/wvwxi/9F+WMW/4vzxyz+X8kfs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+H81f8zi/7X8MYv/NfljFv+v549Z/K/NH7P4fyN/zOJ/Xf6Yxf+b+WMW/+vzxyz+38ofs/h/O3/M4n9D/pjF/8b8MYv/TfljFv/R+WMW/5vzxyz+38kfs/jfkj9m8f9u/pjF/9b8MYv/bfljFv/v5Y9Z/L+fP2bx/0H+mMX/9vwxi/8d+WMW/zvzxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/jflT9m8b87f8zif0/+mMX/3vwxi//P8scs/j/PH7P4/yJ/zOJ/X/6Yxf/+/DGL/y/zxyz+v8ofs/j/On/M4v9A/pjF/zf5Yxb/3+aPWfwfzB+z+P8uf8zi/1D+mMX/9/ljFv8/5I9Z/B/OH7P4/zF/zOL/p/wxi/+f88cs/n/JH7P4/zV/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjFf0z+mMR/lkH+mMV/KH/M4j8sf8ziP1X+mMV/6vwxi/80U/gP/78e139oFv9pW/+YxX+6/DGL//T5Yxb/4fljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+L8of8ziP3f+mMX/xfljFv958scs/i/JH7P4z5s/ZvF/af6Yxf9l+WMW//nyxyz+L88fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/FfljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziPyJ/zOI/Mn/M4r9+/pjFf4P8MYv/K/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/1X5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/9X5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvF/Tf6Yxf+1+WMW/x3yxyz+r8sfs/jvmD9m8d8pf8zi//r8MYv/G/LHLP5vzB+z+L8pf8ziv3P+mMV/l/wxi/+b88cs/m/JH7P475o/ZvHfLX/M4v/W/DGL/+75Yxb/PfLHLP575o9Z/N+WP2bxf3v+mMV/r/wxi//e+WMW/33yxyz+78gfs/jvmz9m8X9n/pjFf7/8MYv/u/LHLP77549Z/N+dP2bxPyB/zOL/nvwxi/+B+WMW/4Pyxyz+B+ePWfzfmz9m8X9f/pjF//35Yxb/D+SPWfwPyR+z+I/KH7P4H5o/ZvE/LH/M4v/B/DGL/4fyxyz+h+ePWfw/nD9m8f9I/pjF/6P5Yxb/I/LHLP5H5o9Z/I/KH7P4fyx/zOJ/dP6Yxf/j+WMW/2Pyxyz+x+aPWfw/kT9m8f9k/pjF/7j8MYv/8fljFv8T8scs/p/KH7P4fzp/zOJ/Yv6Yxf+k/DGL/2fyxyz+n80fs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+n8sfs/ifmT9m8T8rf8zif3b+mMX/8/ljFv9z8scs/ufmj1n8v5A/ZvE/L3/M4n9+/pjF/4L8MYv/F/PHLP5fyh+z+H85f8zif2H+mMX/ovwxi//F+WMW/6/kj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfy/mj9m8f9a/pjF/5r8MYv/1/PHLP7X5o9Z/L+RP2bxvy5/zOL/zfwxi//1+WMW/2/lj1n8v50/ZvG/IX/M4n9j/pjF/6b8MYv/6Pwxi//N+WMW/+/kj1n8b8kfs/h/N3/M4n9r/pjF/7b8MYv/9/LHLP7fzx+z+P8gf8zif3v+mMX/jvwxi/+d+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n878ofs/jfnT9m8b8nf8zif2/+mMX/Z/ljFv+f549Z/H+RP2bxvy9/zOJ/f/6Yxf+X+WMW/1/lj1n8f50/ZvF/IH/M4v+b/DGL/2/zxyz+D07yP+b5Gdd/aBb/37X+MYv/Q/ljFv/f549Z/P+QP2bxfzh/zOL/x/wxi/+f8scs/n/OH7P4/yV/zOL/1/wxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/MfljEv9ZB/ljFv+h/DGL/7D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziPzx/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv8X5Y9Z/OfOH7P4vzh/zOI/T/6Yxf8l+WMW/3nzxyz+L80fs/i/LH/M4j9f/pjF/+X5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4vyJ/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/Efkj1n8R+aPWfzXzx+z+G+QP2bxf2X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8qf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+L86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+r8kfs/i/Nn/M4r9D/pjF/3X5Yxb/HfPHLP475Y9Z/P8/9umhBxRDi8Los3Gfbdu2bba9tm3Wtm3btm3btm7djjpossdN073WLzg5X/ZA/aOW/oP0j1r6D9Y/auk/RP+opf9Q/aOW/sP0j1r6D9c/auk/Qv+opf9I/aOW/qP0j1r6j9Y/auk/Rv+opf9Y/aOW/uP0j1r6j9c/auk/Qf+opf9E/aOW/pP0j1r6T9Y/auk/Rf+opf9U/aOW/tP0j1r6T9c/auk/Q/+opf9M/aOW/rP0j1r6z9Y/auk/R/+opf9c/aOW/vP0j1r6z9c/aum/QP+opf9C/aOW/ov0j1r6L9Y/aum/RP+opf/y+kct/VfQP2rpv6L+UUv/lfSPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSf5PQf+mLeddLVEv/Te0/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NJ/T/2jlv576R+19N9b/6il/z76Ry3999U/aum/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/Q/VP2rpf5j+UUv/w/WPWvofoX/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf2P1T9q6X+c/lFL/+P1j1r6n6B/1NL/RP2jlv4n6R+19D9Z/6il/yn6Ry39T9U/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvpfoH/U0v9C/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6X+Z/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v9O/aOW/nfpH7X0v1v/qKX/PfpHLf3v1T9q6X+f/lFL//v1j1r6P6B/1NL/Qf2jlv4P6R+19H9Y/6il/yP6Ry39H9U/aum/VP+opf9j+kct/R/XP2rp/4T+UUv/J/WPWvo/pX/U0v9p/aOW/s/oH7X0f1b/qKT/gFfoH7X0f6X+UUv/V+kftfR/tf5RS//X6B+19H+t/lFL/9fpH7X0f73+UUv/N+gftfR/o/5RS/836R+19H+z/lFL/7foH7X0f6v+UUv/t+kftfR/u/5RS/8B+kct/d+hf9TS/536Ry3936V/1NL/3fpHLf3fo3/U0v+9+kct/d+nf9TS//36Ry39P6B/1NL/g/pHLf0/pP8LHvK8lv4f1j9q6f8R/aOW/h/VP2rp/zH9o5b+H9c/aun/Cf2jlv6f1D9q6f8p/aOW/p/WP2rp/xn9o5b+n9U/aun/Of2jlv6f1z9q6f8F/aOW/l/UP2rp/yX9o5b+X9Y/aun/Ff2jlv5f1T9q6f81/aOW/l/XP2rp/w39o5b+39Q/aun/Lf2jlv7f1j9q6f8d/aOW/t/VP2rp/z39o5b+39c/aun/A/2jlv4/1D9q6f8j/aOW/j/WP2rp/xP9o5b+P9U/aun/M/2jlv4/1z9q6f8L/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6f87/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/n/VP2rp/zf9o5b+f9c/aun/D/2jlv7/1D9q6f8v/aOW/v/WP2rp/x/9o5b+/9U/aun/P/2jlv7/1z9q6b+M/lFL/2X1j1r6L6d/1NJ/oP5RS/9B+kct/QfrH7X0H6J/1NJ/qP5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0H6N/1NJ/rP5RS/9x+kct/cfrH7X0n6B/1NJ/ov5RS/9J+kct/SfrH7X0n6J/1NJ/qv5RS/9p+kct/afrH7X0n6F/1NJ/pv5RS/9Z+kct/WfrH7X0n6N/1NJ/rv5RS/95+kct/efrH7X0X6B/1NJ/of5RS/9F+kct/RfrH7X0X6J/9LLrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwHDtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87fOomsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//+1Iplt") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001280)=ANY=[], 0x835, 0x0) 1.94218494s ago: executing program 4 (id=2400): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.830362321s ago: executing program 4 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) 1.770517547s ago: executing program 4 (id=2403): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000002880)={[{@clear_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"24bb1296b34e0e25d68f50033eeeb396"}) 615.535623ms ago: executing program 2 (id=2409): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 615.202783ms ago: executing program 3 (id=2410): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r1}, 0x10) 614.791893ms ago: executing program 2 (id=2412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000004c0)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r1], 0x0, 0x10, 0x0, @void, @value}, 0x80) 583.988726ms ago: executing program 2 (id=2413): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x40, @mcast1, @private0, 0x0, 0x0, 0x6, 0x81}}) 570.111257ms ago: executing program 3 (id=2414): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0xfffffffc}, {0x6}]}) write$ppp(r0, &(0x7f00000001c0)="38d5", 0x2) 505.559553ms ago: executing program 2 (id=2415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000000001c0"]) 496.495674ms ago: executing program 1 (id=2416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 382.192474ms ago: executing program 1 (id=2417): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0xfffffffffffffdcb, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 343.910708ms ago: executing program 3 (id=2418): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x6, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x2, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, 0x0) 341.444638ms ago: executing program 0 (id=2419): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TARGET={0x8, 0x8}]}}]}, 0x40}}, 0x0) 304.784392ms ago: executing program 3 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411892f5466eb01820a43d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 268.572955ms ago: executing program 3 (id=2421): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x587, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 182.243653ms ago: executing program 2 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000200), &(0x7f0000000440)}, 0x20) 56.163624ms ago: executing program 3 (id=2423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 103.44µs ago: executing program 2 (id=2424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) 0s ago: executing program 4 (id=2425): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x40, @mcast1, @private0, 0x0, 0x0, 0x6, 0x81}}) kernel console output (not intermixed with test programs): 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.098634][ T3686] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.120435][ T3686] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.136542][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.146834][ T3686] usb 1-1: config 0 descriptor?? [ 180.215873][ T7919] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.249818][ T7919] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (171798693888 > 6144). [ 180.276612][ T7923] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.360642][ T7919] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 180.401495][ T7919] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 180.422117][ T7919] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1242: couldn't read orphan inode 26 (err -116) [ 180.474866][ T4087] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 180.483183][ T7919] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.521050][ T7919] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 180.549707][ T7919] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (171798693888 > 6144). [ 180.574395][ T7919] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 180.622744][ T3686] HID 045e:07da: Invalid code 65791 type 1 [ 180.670761][ T3686] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input12 [ 180.748772][ T3686] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 180.951342][ T7938] loop4: detected capacity change from 0 to 256 [ 180.988031][ T7920] loop2: detected capacity change from 0 to 32768 [ 181.031337][ T7938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb452f626, utbl_chksum : 0xe619d30d) [ 181.059771][ T7920] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1243 (7920) [ 181.129499][ T3826] usb 1-1: USB disconnect, device number 11 [ 181.135798][ T7920] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.187229][ T7920] BTRFS info (device loop2): using free space tree [ 181.259464][ T7920] BTRFS info (device loop2): has skinny extents [ 181.370323][ T7920] BTRFS info (device loop2): enabling ssd optimizations [ 181.385932][ T4087] usb 2-1: USB disconnect, device number 8 [ 181.745622][ T7969] siw: device registration error -23 [ 182.256267][ T7940] loop3: detected capacity change from 0 to 32768 [ 182.310966][ T7940] XFS: ikeep mount option is deprecated. [ 182.410391][ T7940] XFS (loop3): Mounting V5 Filesystem [ 182.519376][ T8009] siw: device registration error -23 [ 182.559781][ T7940] XFS (loop3): Ending clean mount [ 182.598049][ T7940] XFS (loop3): Quotacheck needed: Please wait. [ 182.610402][ T4082] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 182.680315][ T4128] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.713578][ T7940] XFS (loop3): Quotacheck: Done. [ 182.829611][ T7241] XFS (loop3): Unmounting Filesystem [ 182.950294][ T4128] usb 5-1: Using ep0 maxpacket: 16 [ 183.013816][ T4082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.040436][ T4082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.056341][ T8021] loop0: detected capacity change from 0 to 512 [ 183.063489][ T4082] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.076595][ T4082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.110482][ T4128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.114759][ T8021] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 183.114759][ T8021] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 183.114759][ T8021] [ 183.134174][ T4128] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.151246][ T4082] usb 2-1: config 0 descriptor?? [ 183.180427][ T4128] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.196269][ T8021] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 183.217096][ T4082] hub 2-1:0.0: USB hub found [ 183.224349][ T4128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.262620][ T4128] usb 5-1: config 0 descriptor?? [ 183.440359][ T4082] hub 2-1:0.0: 1 port detected [ 183.556556][ T8040] CUSE: unknown device info "" [ 183.570461][ T8040] CUSE: zero length info key specified [ 183.732702][ T4128] HID 045e:07da: Invalid code 65791 type 1 [ 183.745099][ T8049] siw: device registration error -23 [ 183.752320][ T4128] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input13 [ 183.780948][ T8046] loop2: detected capacity change from 0 to 1024 [ 183.824990][ T4128] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 183.882735][ T4082] usb 2-1: USB disconnect, device number 9 [ 183.916777][ T8055] loop0: detected capacity change from 0 to 64 [ 183.937638][ T8046] EXT4-fs (loop2): error: journal path ./file1 is not a block device [ 184.000252][ T3828] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.250317][ T3828] usb 4-1: Using ep0 maxpacket: 8 [ 184.273598][ T4082] usb 5-1: USB disconnect, device number 10 [ 184.343033][ T8066] sctp: [Deprecated]: syz.0.1289 (pid 8066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.343033][ T8066] Use struct sctp_sack_info instead [ 184.380450][ T3828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.429631][ T3828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.469321][ T3828] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 184.495553][ T3828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.530582][ T3828] usb 4-1: config 0 descriptor?? [ 184.732074][ T8082] loop1: detected capacity change from 0 to 4096 [ 184.824568][ T8082] ntfs: (device loop1): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 184.839847][ T8082] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 184.849793][ T8082] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 184.891869][ T8082] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 184.914134][ T8099] loop0: detected capacity change from 0 to 64 [ 184.939691][ T8082] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 184.959581][ T8082] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 184.978848][ T8082] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 185.015922][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.030278][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x6 [ 185.044539][ T8082] ntfs: volume version 3.1. [ 185.049578][ T8082] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 185.058777][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x5 [ 185.062772][ T8082] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 185.089792][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x4 [ 185.102819][ T8082] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 185.110016][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.150193][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.177726][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.195635][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.212852][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.248496][ T3828] cherry 0003:046A:0027.000C: unknown main item tag 0x0 [ 185.276650][ T3828] cherry 0003:046A:0027.000C: unknown global tag 0xd [ 185.283947][ T3828] cherry 0003:046A:0027.000C: item 0 4 1 13 parsing failed [ 185.300648][ T3828] cherry: probe of 0003:046A:0027.000C failed with error -22 [ 185.326637][ T3828] usb 4-1: USB disconnect, device number 8 [ 185.418592][ T8090] loop2: detected capacity change from 0 to 40427 [ 185.476605][ T8090] F2FS-fs (loop2): invalid crc value [ 185.514712][ T8103] loop0: detected capacity change from 0 to 2048 [ 185.528327][ T8090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.536410][ T8096] loop4: detected capacity change from 0 to 32768 [ 185.577105][ T8103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.582867][ T8090] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 185.588163][ T8103] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 185.601746][ T8090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.651007][ T5429] attempt to access beyond end of device [ 185.651007][ T5429] loop2: rw=2049, want=45104, limit=40427 [ 185.750328][ T4129] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.774630][ T8096] XFS (loop4): Mounting V5 Filesystem [ 185.873285][ T8126] cifs: Bad value for 'port' [ 185.930289][ T8096] XFS (loop4): Ending clean mount [ 185.946517][ T8096] XFS (loop4): Quotacheck needed: Please wait. [ 186.003825][ T8133] libceph: resolve '40.' (ret=-3): failed [ 186.023289][ T4129] usb 2-1: Using ep0 maxpacket: 32 [ 186.038330][ T8096] XFS (loop4): Quotacheck: Done. [ 186.094720][ T8096] XFS (loop4): User initiated shutdown received. [ 186.098308][ T8138] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 186.130719][ T8096] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 186.153969][ T4129] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 186.160212][ T8096] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 186.167473][ T4129] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.229298][ T4129] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.229334][ T7559] XFS (loop4): Unmounting Filesystem [ 186.252411][ T4129] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.266254][ T4129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.269192][ T8147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1316'. [ 186.287109][ T8147] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 186.502409][ T4129] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.514841][ T4129] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.525155][ T8157] loop2: detected capacity change from 0 to 512 [ 186.546355][ T4129] usb 2-1: Product: syz [ 186.560186][ T4129] usb 2-1: Manufacturer: syz [ 186.564796][ T4129] usb 2-1: SerialNumber: syz [ 186.579944][ T4129] usb 2-1: config 0 descriptor?? [ 186.592412][ T8159] loop0: detected capacity change from 0 to 256 [ 186.607016][ T8157] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 186.632754][ T4129] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.647351][ T8157] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 186.671426][ T8159] FAT-fs (loop0): Directory bread(block 1285) failed [ 186.677882][ T4129] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.692073][ T8157] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 186.704300][ T8159] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 186.726437][ T8157] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 186.756574][ T8157] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 186.781313][ T8157] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.811627][ T8157] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1321: bg 0: block 34: padding at end of block bitmap is not set [ 186.814071][ T8171] loop4: detected capacity change from 0 to 512 [ 186.853587][ T8157] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1321: Failed to acquire dquot type 1 [ 186.866788][ T8168] loop3: detected capacity change from 0 to 8192 [ 186.884982][ T8157] EXT4-fs (loop2): 1 truncate cleaned up [ 186.893884][ T8157] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data=writeback,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 186.953643][ T8173] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 186.965747][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 186.995325][ T8168] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 187.005722][ T8171] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 187.026071][ T8168] REISERFS (device loop3): using ordered data mode [ 187.033672][ T8171] EXT4-fs (loop4): 1 truncate cleaned up [ 187.043268][ T8171] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 187.072646][ T8168] reiserfs: using flush barriers [ 187.103587][ T8180] loop0: detected capacity change from 0 to 2048 [ 187.125660][ T8168] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.171256][ T8168] REISERFS (device loop3): checking transaction log (loop3) [ 187.180681][ T8168] REISERFS (device loop3): Using r5 hash to sort names [ 187.208282][ T8180] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.208494][ T8166] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 187.227345][ T8168] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 187.253239][ T8184] loop2: detected capacity change from 0 to 512 [ 187.285809][ T9] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.357566][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 187.360599][ T8184] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 187.372215][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.372215][ T9] [ 187.395036][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 187.429174][ T9] EXT4-fs (loop0): Free/Dirty block details [ 187.436666][ T9] EXT4-fs (loop0): free_blocks=2415919104 [ 187.442984][ T9] EXT4-fs (loop0): dirty_blocks=16 [ 187.452363][ T9] EXT4-fs (loop0): Block reservation details [ 187.461009][ T8184] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 187.485523][ T9] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 187.521533][ T8184] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1328: Directory hole found for htree leaf block 0 [ 187.580636][ T8184] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1328: Failed to acquire dquot type 0 [ 187.675896][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 0 [ 187.736160][ T8198] loop4: detected capacity change from 0 to 764 [ 188.158630][ T8215] input: syz0 as /devices/virtual/input/input14 [ 188.295885][ T8219] ubi0: attaching mtd0 [ 188.303123][ T8219] ubi0: scanning is finished [ 188.374627][ T8219] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 188.389620][ T8195] loop0: detected capacity change from 0 to 32768 [ 188.400968][ T8219] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 188.408356][ T8219] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 188.412746][ T8203] loop3: detected capacity change from 0 to 32768 [ 188.420737][ T8219] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 188.429412][ T8219] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 188.436465][ T8219] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 188.444518][ T8219] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2247895895 [ 188.454761][ T8219] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 188.505479][ T3686] usb 2-1: USB disconnect, device number 10 [ 188.510497][ T8220] ubi: mtd0 is already attached to ubi0 [ 188.511581][ T8221] ubi0: background thread "ubi_bgt0d" started, PID 8221 [ 188.535760][ T8203] JBD2: Ignoring recovery information on journal [ 188.562041][ T3686] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 188.635238][ T8203] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 188.860081][ T8243] netlink: 'syz.4.1357': attribute type 15 has an invalid length. [ 188.876687][ T7241] ocfs2: Unmounting device (7,3) on (node local) [ 188.890336][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1357'. [ 189.146645][ T8252] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 189.186645][ T8249] loop4: detected capacity change from 0 to 4096 [ 189.378795][ T8259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1364'. [ 189.413856][ T8249] ntfs: volume version 3.1. [ 189.584889][ T8257] loop3: detected capacity change from 0 to 4096 [ 189.648943][ T8265] loop0: detected capacity change from 0 to 1024 [ 189.659999][ T8264] loop1: detected capacity change from 0 to 4096 [ 189.703747][ T8257] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 189.720813][ T8264] ntfs: volume version 3.1. [ 189.734814][ T8265] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000006,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,nodiscard,,errors=continue. Quota mode: none. [ 189.796384][ T8257] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 190.290331][ T8293] loop2: detected capacity change from 0 to 2048 [ 190.342186][ T8298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.393105][ T8301] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.546254][ T8306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.725717][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 190.976213][ T8321] loop0: detected capacity change from 0 to 8192 [ 191.151445][ T8278] loop1: detected capacity change from 0 to 32768 [ 191.151484][ T8321] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 191.181283][ T8321] REISERFS (device loop0): using ordered data mode [ 191.198068][ T8321] reiserfs: using flush barriers [ 191.227387][ T8321] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.229490][ T8342] loop2: detected capacity change from 0 to 2048 [ 191.251503][ T8321] REISERFS (device loop0): checking transaction log (loop0) [ 191.295685][ T8278] non-latin1 character 0xffff found in JFS file name [ 191.318126][ T8342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.335005][ T8345] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1404'. [ 191.339763][ T8278] mount with iocharset=utf8 to access [ 191.486776][ T8324] loop3: detected capacity change from 0 to 32768 [ 191.547923][ T8352] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 191.599858][ T8324] XFS (loop3): Mounting V5 Filesystem [ 191.600529][ T8321] REISERFS (device loop0): Using tea hash to sort names [ 191.630523][ T8321] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 191.644371][ T8321] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 191.901924][ T8324] XFS (loop3): Ending clean mount [ 191.933025][ T8364] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 191.956010][ T8324] XFS (loop3): Quotacheck needed: Please wait. [ 192.048386][ T8357] loop4: detected capacity change from 0 to 40427 [ 192.120597][ T8324] XFS (loop3): Quotacheck: Done. [ 192.129487][ T8372] loop1: detected capacity change from 0 to 256 [ 192.160234][ T8357] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 192.167198][ T8357] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.194209][ T8372] netlink: 'syz.1.1413': attribute type 16 has an invalid length. [ 192.204703][ T7241] XFS (loop3): Unmounting Filesystem [ 192.213437][ T8357] F2FS-fs (loop4): invalid crc value [ 192.240342][ T8372] netlink: 'syz.1.1413': attribute type 3 has an invalid length. [ 192.248087][ T8372] netlink: 29346 bytes leftover after parsing attributes in process `syz.1.1413'. [ 192.297226][ T8357] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.424391][ T8357] F2FS-fs (loop4): Start checkpoint disabled! [ 192.437860][ T8388] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 192.493444][ T8357] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 192.506625][ T8357] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 192.575799][ T8398] loop2: detected capacity change from 0 to 512 [ 192.648922][ T8398] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 192.676787][ T8398] UDF-fs: Scanning with blocksize 512 failed [ 192.717766][ T8398] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 192.756861][ T8398] UDF-fs: Scanning with blocksize 1024 failed [ 192.772491][ T3857] attempt to access beyond end of device [ 192.772491][ T3857] loop4: rw=2049, want=41000, limit=40427 [ 192.809179][ T8398] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 192.833705][ T8398] UDF-fs: Scanning with blocksize 2048 failed [ 192.876181][ T8398] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 192.907109][ T8398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.316943][ T8419] loop2: detected capacity change from 0 to 256 [ 193.366331][ T8423] loop3: detected capacity change from 0 to 512 [ 193.468260][ T8423] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.489876][ T8419] attempt to access beyond end of device [ 193.489876][ T8419] loop2: rw=2051, want=288, limit=256 [ 193.625517][ T8410] loop1: detected capacity change from 0 to 32768 [ 193.659127][ T8423] fs-verity: sha512 using implementation "sha512-avx2" [ 193.667515][ T8423] EXT4-fs warning (device loop3): ext4_begin_enable_verity:136: inode #13: comm syz.3.1436: verity is only allowed on extent-based files [ 193.755428][ T8404] loop0: detected capacity change from 0 to 32768 [ 193.785567][ T8410] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 193.785567][ T8410] [ 193.798480][ T8410] ERROR: (device loop1): remounting filesystem as read-only [ 193.815291][ T8410] jfs_lookup: dtSearch returned -5 [ 193.823645][ T8404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1429 (8404) [ 193.841719][ T8410] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 193.841719][ T8410] [ 193.898317][ T8404] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 193.918827][ T8404] BTRFS info (device loop0): using free space tree [ 193.928724][ T8404] BTRFS info (device loop0): has skinny extents [ 193.975044][ T8448] loop2: detected capacity change from 0 to 24 [ 194.014301][ T8448] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 194.035608][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041921][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.085144][ T8448] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 194.170265][ T8404] BTRFS info (device loop0): enabling ssd optimizations [ 194.668326][ T8481] loop1: detected capacity change from 0 to 2048 [ 194.715866][ T6547] kernel write not supported for file /snd/seq (pid: 6547 comm: kworker/0:21) [ 194.796882][ T8481] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: none. [ 194.883542][ T8485] loop0: detected capacity change from 0 to 4096 [ 194.911492][ T8481] EXT4-fs (loop1): shut down requested (2) [ 194.986957][ T8485] /dev/loop0: Can't open blockdev [ 195.073531][ T8497] loop2: detected capacity change from 0 to 2048 [ 195.151687][ T8497] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 195.164517][ T8501] loop4: detected capacity change from 0 to 1024 [ 195.179707][ T8497] UDF-fs: Scanning with blocksize 512 failed [ 195.209068][ T8497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.222052][ T8508] loop3: detected capacity change from 0 to 64 [ 195.257932][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1464'. [ 195.523957][ T3686] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.878628][ T25] kauditd_printk_skb: 23 callbacks suppressed [ 195.878642][ T25] audit: type=1326 audit(1727935412.495:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1069fff9 code=0x7ffc0000 [ 195.908193][ T3686] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 195.917317][ T3686] usb 1-1: config 0 has no interface number 0 [ 195.950935][ T8540] ptrace attach of "./syz-executor exec"[7086] was attempted by "./syz-executor exec"[8540] [ 195.965509][ T25] audit: type=1326 audit(1727935412.495:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f0c1069fff9 code=0x7ffc0000 [ 195.965674][ T3686] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.028036][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.043103][ T25] audit: type=1326 audit(1727935412.495:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8534 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1069fff9 code=0x7ffc0000 [ 196.073831][ T3686] usb 1-1: config 0 descriptor?? [ 196.141306][ T3686] cp210x 1-1:0.111: cp210x converter detected [ 196.238498][ T8520] loop4: detected capacity change from 0 to 32768 [ 196.580399][ T3686] cp210x 1-1:0.111: failed to get vendor val 0x000e size 3: -71 [ 196.590717][ T3686] usb 1-1: cp210x converter now attached to ttyUSB0 [ 196.619402][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 196.647379][ T3686] usb 1-1: USB disconnect, device number 12 [ 196.679363][ T3686] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.720738][ T3686] cp210x 1-1:0.111: device disconnected [ 197.074900][ T8561] loop3: detected capacity change from 0 to 32768 [ 197.169130][ T8561] XFS (loop3): Mounting V5 Filesystem [ 197.218437][ T8561] XFS (loop3): Ending clean mount [ 197.234442][ T4125] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 197.245269][ T8561] XFS (loop3): Quotacheck needed: Please wait. [ 197.352150][ T8611] loop4: detected capacity change from 0 to 512 [ 197.360444][ T8561] XFS (loop3): Quotacheck: Done. [ 197.459850][ T8611] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 197.486462][ T7241] XFS (loop3): Unmounting Filesystem [ 197.520193][ T4125] usb 2-1: Using ep0 maxpacket: 16 [ 197.523658][ T8611] ext4 filesystem being mounted at /72/bus supports timestamps until 2038 (0x7fffffff) [ 197.687446][ T4125] usb 2-1: config 6 has an invalid interface number: 193 but max is 0 [ 197.710199][ T4125] usb 2-1: config 6 has no interface number 0 [ 197.739565][ T4125] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 197.749986][ T8617] loop2: detected capacity change from 0 to 512 [ 197.751223][ T4125] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 197.789143][ T4125] usb 2-1: config 6 interface 193 has no altsetting 0 [ 197.905080][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.1506: iget: bogus i_mode (0) [ 197.932269][ T8617] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1506: couldn't read orphan inode 17 (err -117) [ 197.973392][ T8617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.006632][ T4125] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=81.6b [ 198.036402][ T4125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.090352][ T4125] usb 2-1: Product: syz [ 198.092428][ T8617] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1506: bg 0: block 7: invalid block bitmap [ 198.094619][ T4125] usb 2-1: Manufacturer: syz [ 198.094656][ T4125] usb 2-1: SerialNumber: syz [ 198.212471][ T8627] tap0: tun_chr_ioctl cmd 2148553947 [ 198.287564][ T8633] loop4: detected capacity change from 0 to 256 [ 198.319195][ T8637] loop3: detected capacity change from 0 to 1024 [ 198.397736][ T8643] loop2: detected capacity change from 0 to 64 [ 198.413063][ T8637] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.437628][ T8637] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038 (0x7fffffff) [ 198.449426][ T4125] hdpvr 2-1:6.193: Could not find bulk-in endpoint [ 198.456152][ T4125] hdpvr: probe of 2-1:6.193 failed with error -12 [ 198.473259][ T4125] usb 2-1: USB disconnect, device number 11 [ 198.484674][ T25] audit: type=1800 audit(1727935415.105:32): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1514" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 198.507260][ T25] audit: type=1804 audit(1727935415.115:33): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1514" name="/newroot/70/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 199.031275][ T8667] loop4: detected capacity change from 0 to 1024 [ 199.140058][ T8671] loop1: detected capacity change from 0 to 4096 [ 199.239003][ T8671] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 199.252454][ T8671] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 199.254457][ T8667] hfsplus: catalog searching failed [ 199.288736][ T8671] ntfs3: loop1: Failed to load $LogFile. [ 199.330341][ T9] hfsplus: b-tree write err: -5, ino 4 [ 199.597263][ T8648] loop2: detected capacity change from 0 to 32768 [ 199.753757][ T8648] XFS (loop2): Mounting V5 Filesystem [ 199.902933][ T8733] loop1: detected capacity change from 0 to 16 [ 199.913391][ T8648] XFS (loop2): Ending clean mount [ 199.950809][ T8733] erofs: Unknown parameter '' [ 199.964079][ T8648] XFS (loop2): User initiated shutdown received. [ 199.973664][ T8648] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 199.989343][ T8648] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 200.002253][ T8648] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 200.036083][ T5429] XFS (loop2): Unmounting Filesystem [ 200.239966][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 200.389970][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 200.753066][ T8737] loop4: detected capacity change from 0 to 32768 [ 201.120294][ T3616] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.138942][ T8743] loop1: detected capacity change from 0 to 32768 [ 201.213882][ T8743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1560 (8743) [ 201.236985][ T8768] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1569'. [ 201.272389][ T8743] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 201.319554][ T8743] BTRFS info (device loop1): using free space tree [ 201.350176][ T8743] BTRFS info (device loop1): has skinny extents [ 201.388340][ T8773] loop4: detected capacity change from 0 to 1024 [ 201.428430][ T8747] loop3: detected capacity change from 0 to 40427 [ 201.487794][ T8743] BTRFS info (device loop1): enabling ssd optimizations [ 201.523146][ T8747] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 201.533554][ T8747] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 201.551143][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 201.566301][ T8747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.566623][ T8773] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 201.595979][ T25] audit: type=1800 audit(1727935418.215:34): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1560" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 201.635330][ T3616] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.674972][ T8747] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 201.682261][ T8747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.721207][ T3616] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 201.782417][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.887168][ T3616] usb 1-1: config 0 descriptor?? [ 202.130048][ T8806] [U]  [ 202.187226][ T8778] loop2: detected capacity change from 0 to 32768 [ 202.299864][ T8778] XFS (loop2): Mounting V5 Filesystem [ 202.380989][ T8758] loop0: detected capacity change from 0 to 128 [ 202.405358][ T8778] XFS (loop2): Starting recovery (logdev: internal) [ 202.454507][ T8827] loop4: detected capacity change from 0 to 512 [ 202.476115][ T8778] XFS (loop2): Ending recovery (logdev: internal) [ 202.530507][ T4101] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 202.540963][ T5429] XFS (loop2): Unmounting Filesystem [ 202.551503][ T8827] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,journal_ioprio=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 202.580785][ T3616] hid (null): unknown global tag 0xc [ 202.590157][ T3616] hid (null): bogus close delimiter [ 202.612868][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.620392][ T8827] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038 (0x7fffffff) [ 202.709570][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.737449][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.767327][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.794593][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.826522][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown main item tag 0x0 [ 202.838308][ T3616] corsair-psu 0003:1B1C:1C04.000D: unknown global tag 0xc [ 202.851986][ T3616] corsair-psu 0003:1B1C:1C04.000D: item 0 1 1 12 parsing failed [ 202.860535][ T3616] corsair-psu: probe of 0003:1B1C:1C04.000D failed with error -22 [ 202.879684][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 202.892079][ T3616] usb 1-1: USB disconnect, device number 13 [ 202.903299][ T4101] usb 2-1: config 64 has an invalid interface number: 28 but max is 0 [ 202.917712][ T4101] usb 2-1: config 64 has no interface number 0 [ 202.924417][ T4101] usb 2-1: config 64 interface 28 has no altsetting 0 [ 203.024161][ T8851] loop2: detected capacity change from 0 to 64 [ 203.090698][ T4101] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=25.e8 [ 203.105380][ T4101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.114179][ T4101] usb 2-1: Product: syz [ 203.118574][ T4101] usb 2-1: Manufacturer: syz [ 203.166802][ T4101] usb 2-1: SerialNumber: syz [ 203.214957][ T8859] loop3: detected capacity change from 0 to 1024 [ 203.267583][ T8861] loop2: detected capacity change from 0 to 256 [ 203.341219][ T8861] exfat: Deprecated parameter 'utf8' [ 203.373753][ T8861] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 203.880408][ T4101] dvb-usb: found a 'Terratec Cinergy T Express' in warm state. [ 203.921283][ T4101] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 203.950008][ T8873] loop3: detected capacity change from 0 to 32768 [ 203.960674][ T4101] dvbdev: DVB: registering new adapter (Terratec Cinergy T Express) [ 203.984480][ T4101] usb 2-1: media controller created [ 204.031715][ T4101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.054961][ T8873] jfs_rename did not expect dtDelete to return rc = -2 [ 204.083619][ T8873] ERROR: (device loop3): jfs_rename: [ 204.083619][ T8873] [ 204.143717][ T4101] DVB: Unable to find symbol dib7000p_attach() [ 204.160188][ T4101] dvb-usb: no frontend was attached by 'Terratec Cinergy T Express' [ 204.290235][ T4101] rc_core: IR keymap rc-dib0700-rc5 not found [ 204.300197][ T4101] Registered IR keymap rc-empty [ 204.317059][ T4101] dvb-usb: could not initialize remote control. [ 204.337143][ T4101] dvb-usb: Terratec Cinergy T Express successfully initialized and connected. [ 204.375838][ T4101] usb 2-1: USB disconnect, device number 12 [ 204.422093][ T4101] dvb-usb: Terratec Cinergy T Express successfully deinitialized and disconnected. [ 204.453280][ T8876] loop4: detected capacity change from 0 to 32768 [ 204.577228][ T8876] XFS (loop4): Mounting V5 Filesystem [ 204.636675][ T8909] loop1: detected capacity change from 0 to 1024 [ 204.734087][ T8909] hfsplus: bad catalog entry type [ 204.743988][ T8876] XFS (loop4): Ending clean mount [ 204.804190][ T154] hfsplus: b-tree write err: -5, ino 4 [ 204.891649][ T7559] XFS (loop4): Unmounting Filesystem [ 205.121581][ T8914] loop1: detected capacity change from 0 to 4096 [ 205.283617][ T8891] loop2: detected capacity change from 0 to 40427 [ 205.285378][ T8923] loop3: detected capacity change from 0 to 512 [ 205.314895][ T8914] ntfs3: loop1: failed to convert "0080" to cp850 [ 205.345444][ T8914] ntfs3: loop1: failed to convert name for inode 1e. [ 205.373116][ T8923] EXT4-fs (loop3): Ignoring removed nobh option [ 205.379994][ T8891] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 205.387815][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1618'. [ 205.398233][ T8923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.415055][ T8891] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 205.440909][ T8891] F2FS-fs (loop2): invalid crc value [ 205.505085][ T8923] EXT4-fs (loop3): 1 truncate cleaned up [ 205.520464][ T8923] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 205.534278][ T8891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.600301][ T8937] loop1: detected capacity change from 0 to 2048 [ 205.653739][ T8891] F2FS-fs (loop2): Start checkpoint disabled! [ 205.690223][ T4101] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.697912][ T8940] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.728183][ T8891] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.736392][ T8891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 205.785253][ T25] audit: type=1804 audit(1727935422.405:35): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1624" name="/newroot/80/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 205.855094][ T8937] syz.1.1624 (8937) used greatest stack depth: 19200 bytes left [ 205.908910][ T3648] attempt to access beyond end of device [ 205.908910][ T3648] loop2: rw=2049, want=41000, limit=40427 [ 205.950319][ T4101] usb 1-1: Using ep0 maxpacket: 8 [ 206.007771][ T8945] loop1: detected capacity change from 0 to 512 [ 206.092729][ T4101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.100211][ T6547] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 206.128295][ T8945] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,journal_ioprio=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 206.174927][ T8945] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 206.200498][ T8949] loop2: detected capacity change from 0 to 128 [ 206.215318][ T8939] loop4: detected capacity change from 0 to 40427 [ 206.238277][ T8949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 206.259653][ T8949] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 206.270297][ T4101] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 206.283615][ T4101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.291748][ T4101] usb 1-1: Product: syz [ 206.296504][ T4101] usb 1-1: Manufacturer: syz [ 206.301197][ T4101] usb 1-1: SerialNumber: syz [ 206.307997][ T4101] usb 1-1: config 0 descriptor?? [ 206.321204][ T8939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.351845][ T4101] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 206.415447][ T8939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.497211][ T7559] attempt to access beyond end of device [ 206.497211][ T7559] loop4: rw=2049, want=45104, limit=40427 [ 206.521205][ T6547] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.530378][ T6547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.545102][ T6547] usb 4-1: config 0 descriptor?? [ 206.586048][ T4101] usb 1-1: USB disconnect, device number 14 [ 206.608278][ T6547] cp210x 4-1:0.0: cp210x converter detected [ 206.831146][ T8957] loop1: detected capacity change from 0 to 32768 [ 206.888819][ T8957] JBD2: Ignoring recovery information on journal [ 206.940129][ T8957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 207.020376][ T6547] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 207.035098][ T7086] ocfs2: Unmounting device (7,1) on (node local) [ 207.072787][ T6547] usb 4-1: cp210x converter now attached to ttyUSB0 [ 207.316652][ T4101] usb 4-1: USB disconnect, device number 9 [ 207.349467][ T8981] loop4: detected capacity change from 0 to 512 [ 207.363959][ T4101] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.433780][ T4101] cp210x 4-1:0.0: device disconnected [ 207.537686][ T8981] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 207.590343][ T8981] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 207.626747][ T8999] ubi: mtd0 is already attached to ubi0 [ 207.637809][ T8999] ubi: mtd0 is already attached to ubi0 [ 207.745818][ T8981] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1642: Directory hole found for htree leaf block 0 [ 207.797027][ T8981] Quota error (device loop4): find_block_dqentry: Quota for id 4227858944 referenced but not present [ 207.818969][ T8981] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 4227858944 [ 207.882594][ T8981] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1642: Failed to acquire dquot type 0 [ 207.911025][ T8995] loop2: detected capacity change from 0 to 32768 [ 208.022722][ T154] Quota error (device loop4): remove_tree: Getting block too big (0 >= 7) [ 208.047849][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:2: Failed to release dquot type 0 [ 208.335708][ T9015] netlink: 'syz.2.1656': attribute type 15 has an invalid length. [ 208.355742][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'. [ 208.373576][ T9001] loop0: detected capacity change from 0 to 32768 [ 208.452125][ T9001] XFS (loop0): Mounting V5 Filesystem [ 208.478554][ T9023] loop2: detected capacity change from 0 to 1024 [ 208.494623][ T9003] loop1: detected capacity change from 0 to 32768 [ 208.526226][ T9001] XFS (loop0): Ending clean mount [ 208.533237][ T9001] XFS (loop0): Quotacheck needed: Please wait. [ 208.547964][ T9003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1652 (9003) [ 208.589790][ T9023] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 208.594822][ T9001] XFS (loop0): Quotacheck: Done. [ 208.633910][ T9003] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.663426][ T9003] BTRFS info (device loop1): using free space tree [ 208.687298][ T9003] BTRFS info (device loop1): has skinny extents [ 208.695675][ T9001] XFS (loop0): User initiated shutdown received. [ 208.702407][ T9001] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 208.716664][ T9001] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 208.767497][ T7484] XFS (loop0): Unmounting Filesystem [ 208.836171][ T9003] BTRFS info (device loop1): enabling ssd optimizations [ 208.839832][ T9051] loop2: detected capacity change from 0 to 764 [ 209.303756][ T9065] loop4: detected capacity change from 0 to 4096 [ 209.329459][ T9068] loop0: detected capacity change from 0 to 4096 [ 209.364621][ T9065] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 209.448769][ T9065] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 209.580176][ T9068] ntfs: volume version 3.1. [ 209.791250][ T9081] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.967271][ T9091] loop2: detected capacity change from 0 to 64 [ 210.009219][ T9095] loop0: detected capacity change from 0 to 1024 [ 210.079417][ T9095] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 210.107865][ T9106] siw: device registration error -23 [ 210.329541][ T9119] loop4: detected capacity change from 0 to 1024 [ 210.367631][ T9121] siw: device registration error -23 [ 210.402261][ T9119] EXT4-fs (loop4): error: journal path ./file1 is not a block device [ 210.588296][ T9136] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 210.618849][ T9140] loop4: detected capacity change from 0 to 256 [ 210.735566][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 210.766423][ T9149] loop0: detected capacity change from 0 to 256 [ 210.805272][ T9140] device 5 entered promiscuous mode [ 210.856121][ T9149] netlink: 'syz.0.1707': attribute type 16 has an invalid length. [ 210.895026][ T9149] netlink: 'syz.0.1707': attribute type 3 has an invalid length. [ 210.925398][ T9149] netlink: 29346 bytes leftover after parsing attributes in process `syz.0.1707'. [ 211.093509][ T9162] loop0: detected capacity change from 0 to 256 [ 211.130617][ T9162] exfat: Deprecated parameter 'utf8' [ 211.170832][ T9162] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 211.198590][ T9160] loop1: detected capacity change from 0 to 1024 [ 211.300446][ T9160] EXT4-fs (loop1): error: journal path ./file1 is not a block device [ 211.582027][ T9133] loop3: detected capacity change from 0 to 32768 [ 211.764714][ T9142] loop2: detected capacity change from 0 to 32768 [ 211.847282][ T9133] XFS (loop3): Mounting V5 Filesystem [ 211.910932][ T9142] XFS (loop2): Mounting V5 Filesystem [ 211.982620][ T9133] XFS (loop3): Ending clean mount [ 212.030762][ T9133] XFS (loop3): Quotacheck needed: Please wait. [ 212.118955][ T9172] loop1: detected capacity change from 0 to 32768 [ 212.137672][ T9142] XFS (loop2): Ending clean mount [ 212.165674][ T9133] XFS (loop3): Quotacheck: Done. [ 212.166374][ T9142] XFS (loop2): Quotacheck needed: Please wait. [ 212.197412][ T25] audit: type=1800 audit(1727935428.815:36): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1696" name="file0" dev="loop3" ino=1060 res=0 errno=0 [ 212.224046][ T9172] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1716 (9172) [ 212.226405][ T9170] loop4: detected capacity change from 0 to 32768 [ 212.297561][ T9170] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1717 (9170) [ 212.317941][ T9172] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 212.339040][ T9142] XFS (loop2): Quotacheck: Done. [ 212.340306][ T9172] BTRFS info (device loop1): using free space tree [ 212.361445][ T9172] BTRFS info (device loop1): has skinny extents [ 212.368296][ T9170] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 212.382441][ T7241] XFS (loop3): Unmounting Filesystem [ 212.418337][ T9170] BTRFS info (device loop4): enabling auto defrag [ 212.422441][ T25] audit: type=1800 audit(1727935429.035:37): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1702" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 212.467811][ T9170] BTRFS info (device loop4): max_inline at 0 [ 212.474251][ T9170] BTRFS info (device loop4): enabling ssd optimizations [ 212.481432][ T9170] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 212.492157][ T9170] BTRFS info (device loop4): use lzo compression, level 0 [ 212.500381][ T9170] BTRFS info (device loop4): using free space tree [ 212.508536][ T9170] BTRFS info (device loop4): has skinny extents [ 212.518351][ T9142] Invalid ELF header magic: != ELF [ 212.579042][ T5429] XFS (loop2): Unmounting Filesystem [ 212.725807][ T9172] BTRFS info (device loop1): enabling ssd optimizations [ 213.061216][ T9238] loop3: detected capacity change from 0 to 4096 [ 213.115577][ T9238] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 213.637574][ T9260] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 213.800779][ T9264] loop0: detected capacity change from 0 to 1024 [ 213.836977][ T9270] loop4: detected capacity change from 0 to 256 [ 213.925225][ T9264] EXT4-fs (loop0): error: journal path ./file1 is not a block device [ 213.955274][ T9270] netlink: 'syz.4.1722': attribute type 16 has an invalid length. [ 213.993210][ T9270] netlink: 'syz.4.1722': attribute type 3 has an invalid length. [ 214.020727][ T9270] netlink: 29346 bytes leftover after parsing attributes in process `syz.4.1722'. [ 214.286422][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1737'. [ 214.569565][ T9305] loop0: detected capacity change from 0 to 512 [ 214.593181][ T9280] loop3: detected capacity change from 0 to 32768 [ 214.641462][ T9280] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 214.641462][ T9280] [ 214.678112][ T9280] ERROR: (device loop3): remounting filesystem as read-only [ 214.692627][ T9280] jfs_lookup: dtSearch returned -5 [ 214.701549][ T9280] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 214.701549][ T9280] [ 214.704045][ T9305] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 214.736324][ T9305] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038 (0x7fffffff) [ 214.750187][ T3616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.777821][ T9305] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1744: Directory hole found for htree leaf block 0 [ 214.795765][ T9305] Quota error (device loop0): find_block_dqentry: Quota for id 4227858944 referenced but not present [ 214.806719][ T9305] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 4227858944 [ 214.817284][ T9305] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1744: Failed to acquire dquot type 0 [ 214.858187][ T154] Quota error (device loop0): remove_tree: Getting block too big (0 >= 7) [ 214.868026][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:2: Failed to release dquot type 0 [ 215.010912][ T9317] loop1: detected capacity change from 0 to 24 [ 215.020285][ T3616] usb 3-1: Using ep0 maxpacket: 16 [ 215.051344][ T9317] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 215.086594][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1750'. [ 215.104333][ T9317] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 215.115458][ T9319] loop0: detected capacity change from 0 to 4096 [ 215.170591][ T3616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.190177][ T9256] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.198003][ T9323] loop4: detected capacity change from 0 to 2048 [ 215.198348][ T9319] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 215.208655][ T3616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.228405][ T3616] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.241977][ T3616] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.251527][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.256479][ T9319] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.271361][ T3616] usb 3-1: config 0 descriptor?? [ 215.281204][ T9319] ntfs: volume version 3.1. [ 215.338068][ T9323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.535834][ T9331] loop1: detected capacity change from 0 to 512 [ 215.618716][ T9331] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 215.640589][ T9331] EXT4-fs (loop1): 1 truncate cleaned up [ 215.646243][ T9331] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 215.717584][ T9335] loop4: detected capacity change from 0 to 4096 [ 215.750351][ T9256] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 215.769599][ T9256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.776731][ T9327] loop0: detected capacity change from 0 to 32768 [ 215.788107][ T9331] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 215.794922][ T3616] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 215.812362][ T3616] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 215.823983][ T3616] microsoft 0003:045E:07DA.000E: no inputs found [ 215.824717][ T9256] usb 4-1: Product: syz [ 215.830847][ T3616] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 215.847498][ T9335] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 215.855704][ T9256] usb 4-1: Manufacturer: syz [ 215.861599][ T9335] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.879335][ T9335] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 215.900285][ T9256] usb 4-1: SerialNumber: syz [ 215.910833][ T9327] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 215.910833][ T9327] [ 215.915267][ T9335] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 215.935010][ T9335] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 215.945003][ T9256] usb 4-1: config 0 descriptor?? [ 215.965313][ T9327] ERROR: (device loop0): remounting filesystem as read-only [ 215.981480][ T9335] ntfs: volume version 3.1. [ 215.981922][ T9327] xtLookup: xtSearch returned -5 [ 215.993185][ T9256] ch341 4-1:0.0: ch341-uart converter detected [ 216.002074][ T3616] usb 3-1: USB disconnect, device number 13 [ 216.030639][ T9327] free_index: error reading directory table [ 216.358573][ T9344] loop0: detected capacity change from 0 to 1024 [ 216.400219][ T9338] loop1: detected capacity change from 0 to 32768 [ 216.432087][ T9344] hfsplus: bad catalog entry type [ 216.483012][ T9] hfsplus: b-tree write err: -5, ino 4 [ 216.495762][ T9338] XFS (loop1): Mounting V5 Filesystem [ 216.609770][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1762'. [ 216.618792][ T9338] XFS (loop1): Ending clean mount [ 216.621106][ T9338] XFS (loop1): Quotacheck needed: Please wait. [ 216.675327][ T9338] XFS (loop1): Quotacheck: Done. [ 216.767745][ T7086] XFS (loop1): Unmounting Filesystem [ 216.878109][ T9256] usb 4-1: failed to send control message: -71 [ 216.884541][ T9256] ch341-uart: probe of ttyUSB0 failed with error -71 [ 216.896566][ T9256] usb 4-1: USB disconnect, device number 10 [ 216.904916][ T9256] ch341 4-1:0.0: device disconnected [ 217.173545][ T9367] loop2: detected capacity change from 0 to 40427 [ 217.250068][ T9367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.284000][ T9367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.465527][ T5429] attempt to access beyond end of device [ 217.465527][ T5429] loop2: rw=2049, want=45104, limit=40427 [ 217.793129][ T9392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1779'. [ 218.120568][ T9396] loop1: detected capacity change from 0 to 512 [ 218.137394][ T9383] loop3: detected capacity change from 0 to 32768 [ 218.159222][ T9380] loop0: detected capacity change from 0 to 32768 [ 218.167468][ T9401] loop2: detected capacity change from 0 to 64 [ 218.217004][ T9380] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.1771 (9380) [ 218.277155][ T9380] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 218.277557][ T9396] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.292142][ T9380] BTRFS info (device loop0): using free space tree [ 218.320131][ T9380] BTRFS info (device loop0): has skinny extents [ 218.348462][ T9383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1774 (9383) [ 218.381676][ T9396] EXT4-fs warning (device loop1): ext4_begin_enable_verity:136: inode #13: comm syz.1.1790: verity is only allowed on extent-based files [ 218.451956][ T9383] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 218.465943][ T9380] BTRFS info (device loop0): enabling ssd optimizations [ 218.525084][ T9383] BTRFS info (device loop3): using free space tree [ 218.567158][ T9383] BTRFS info (device loop3): has skinny extents [ 218.769884][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 218.808871][ T9399] loop4: detected capacity change from 0 to 32768 [ 219.004644][ T9383] BTRFS info (device loop3): enabling ssd optimizations [ 219.048690][ T9399] XFS (loop4): Mounting V5 Filesystem [ 219.559333][ T9464] loop0: detected capacity change from 0 to 40427 [ 219.576718][ T9399] XFS (loop4): Ending clean mount [ 219.589297][ T9399] XFS (loop4): Quotacheck needed: Please wait. [ 219.671348][ T9399] XFS (loop4): Quotacheck: Done. [ 219.684926][ T9464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.758404][ T7559] XFS (loop4): Unmounting Filesystem [ 219.889933][ T9464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.002572][ T9471] loop2: detected capacity change from 0 to 32768 [ 220.012332][ T9483] loop1: detected capacity change from 0 to 1024 [ 220.054065][ T9471] JBD2: Ignoring recovery information on journal [ 220.083320][ T7484] attempt to access beyond end of device [ 220.083320][ T7484] loop0: rw=2049, want=45104, limit=40427 [ 220.186482][ T9471] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.386265][ T9492] loop4: detected capacity change from 0 to 2048 [ 220.435144][ T5429] ocfs2: Unmounting device (7,2) on (node local) [ 220.442162][ T9494] libceph: resolve '40.' (ret=-3): failed [ 220.489751][ T9497] sctp: [Deprecated]: syz.3.1798 (pid 9497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.489751][ T9497] Use struct sctp_sack_info instead [ 220.548262][ T9499] loop1: detected capacity change from 0 to 64 [ 220.646886][ T9500] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.663201][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 220.663216][ T25] audit: type=1804 audit(1727935693.282:39): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1792" name="/newroot/140/bus/file1" dev="loop4" ino=15 res=1 errno=0 [ 220.725411][ T9504] ptrace attach of "./syz-executor exec"[5429] was attempted by "./syz-executor exec"[9504] [ 220.894083][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1794'. [ 221.307789][ T9524] loop0: detected capacity change from 0 to 4096 [ 221.351610][ T9524] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 221.588038][ T9502] loop3: detected capacity change from 0 to 32768 [ 221.644773][ T9502] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1799 (9502) [ 221.730266][ T9502] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 221.738994][ T9502] BTRFS info (device loop3): using free space tree [ 221.774833][ T9512] loop1: detected capacity change from 0 to 32768 [ 221.781800][ T9502] BTRFS info (device loop3): has skinny extents [ 221.789317][ T9532] loop2: detected capacity change from 0 to 2048 [ 221.857741][ T9520] loop4: detected capacity change from 0 to 32768 [ 221.917226][ T9512] XFS (loop1): Mounting V5 Filesystem [ 221.974622][ T9546] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.037769][ T9530] loop0: detected capacity change from 0 to 32768 [ 222.057609][ T25] audit: type=1804 audit(1727935694.672:40): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1814" name="/newroot/256/bus/file1" dev="loop2" ino=15 res=1 errno=0 [ 222.061793][ T9520] XFS (loop4): Mounting V5 Filesystem [ 222.128268][ T9502] BTRFS info (device loop3): enabling ssd optimizations [ 222.149854][ T9512] XFS (loop1): Ending clean mount [ 222.159561][ T9512] XFS (loop1): Quotacheck needed: Please wait. [ 222.162675][ T9530] JBD2: Ignoring recovery information on journal [ 222.273489][ T9530] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 222.313144][ T9512] XFS (loop1): Quotacheck: Done. [ 222.379578][ T25] audit: type=1800 audit(1727935694.992:41): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1803" name="file0" dev="loop1" ino=1060 res=0 errno=0 [ 222.674147][ T7484] ocfs2: Unmounting device (7,0) on (node local) [ 222.804358][ T7086] XFS (loop1): Unmounting Filesystem [ 222.820054][ T9520] XFS (loop4): Ending clean mount [ 222.839114][ T9520] XFS (loop4): Quotacheck needed: Please wait. [ 222.877108][ T9585] loop3: detected capacity change from 0 to 1024 [ 222.962144][ T9520] XFS (loop4): Quotacheck: Done. [ 223.043084][ T25] audit: type=1800 audit(1727935695.662:42): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1806" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 223.045277][ T1176] hfsplus: b-tree write err: -5, ino 4 [ 223.075988][ T9520] Invalid ELF header magic: != ELF [ 223.158726][ T7559] XFS (loop4): Unmounting Filesystem [ 223.481254][ T9583] loop2: detected capacity change from 0 to 32768 [ 223.495268][ T9606] netlink: 'syz.1.1821': attribute type 21 has an invalid length. [ 223.503363][ T9606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1821'. [ 223.530518][ T9583] ERROR: (device loop2): dbAllocAG: allocation request is larger than the allocation group size [ 223.530518][ T9583] [ 223.569269][ T9583] ERROR: (device loop2): remounting filesystem as read-only [ 223.577159][ T9583] ERROR: (device loop2): dbDiscardAG: -EIO [ 223.577159][ T9583] [ 224.117075][ T9629] loop4: detected capacity change from 0 to 512 [ 224.245062][ T9629] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 224.270197][ T9629] FAT-fs (loop4): Filesystem has been set read-only [ 224.413870][ T9610] loop0: detected capacity change from 0 to 32768 [ 224.515254][ T9612] loop1: detected capacity change from 0 to 32768 [ 224.537520][ T9610] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1841 (9610) [ 224.618069][ T9610] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 224.652236][ T9624] loop2: detected capacity change from 0 to 32768 [ 224.664052][ T9610] BTRFS info (device loop0): using free space tree [ 224.674391][ T9612] JBD2: Ignoring recovery information on journal [ 224.695026][ T9610] BTRFS info (device loop0): has skinny extents [ 224.786688][ T9612] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 224.867947][ T7086] ocfs2: Unmounting device (7,1) on (node local) [ 224.955754][ T9652] loop4: detected capacity change from 0 to 4096 [ 225.033300][ T9624] XFS (loop2): Mounting V5 Filesystem [ 225.050382][ T9610] BTRFS info (device loop0): enabling ssd optimizations [ 225.253448][ T9677] loop4: detected capacity change from 0 to 64 [ 225.255959][ T9624] XFS (loop2): Ending clean mount [ 225.559337][ T9624] XFS (loop2): Quotacheck needed: Please wait. [ 225.629804][ T9624] XFS (loop2): Quotacheck: Done. [ 225.715378][ T25] audit: type=1800 audit(1727935698.332:43): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1832" name="file0" dev="loop2" ino=1060 res=0 errno=0 [ 225.776301][ T9690] loop0: detected capacity change from 0 to 256 [ 225.842400][ T5429] XFS (loop2): Unmounting Filesystem [ 225.898460][ T9694] loop1: detected capacity change from 0 to 2048 [ 226.049501][ T9673] loop3: detected capacity change from 0 to 32768 [ 226.056068][ T9699] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.103052][ T9694] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 226.155886][ T9673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1846 (9673) [ 226.198093][ T9694] Remounting filesystem read-only [ 226.242528][ T9673] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 226.306389][ T9673] BTRFS info (device loop3): force clearing of disk cache [ 226.315237][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 226.326585][ T9673] BTRFS info (device loop3): using free space tree [ 226.386242][ T9673] BTRFS info (device loop3): has skinny extents [ 226.574691][ T9733] device bridge_slave_1 left promiscuous mode [ 226.604777][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.663408][ T9733] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 226.729700][ T9673] BTRFS info (device loop3): enabling ssd optimizations [ 226.747472][ T9673] BTRFS info (device loop3): clearing free space tree [ 226.769470][ T9747] loop0: detected capacity change from 0 to 2048 [ 226.776217][ T9673] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.786182][ T9673] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.808912][ T9673] BTRFS info (device loop3): creating free space tree [ 226.824956][ T9747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.872191][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 226.874274][ T9673] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.935589][ T9673] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 227.030237][ T3616] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.126935][ T9759] loop0: detected capacity change from 0 to 8192 [ 227.259700][ T9759] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 227.440359][ T3616] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 227.452708][ T3616] usb 2-1: config 0 has no interface number 0 [ 227.466747][ T3616] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.506669][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.560036][ T3616] usb 2-1: config 0 descriptor?? [ 227.641275][ T3616] cp210x 2-1:0.111: cp210x converter detected [ 227.847192][ T9789] loop4: detected capacity change from 0 to 16 [ 227.924588][ T9796] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 227.948699][ T9789] erofs: (device loop4): mounted with root inode @ nid 36. [ 228.061345][ T3616] cp210x 2-1:0.111: failed to get vendor val 0x000e size 3: -71 [ 228.082690][ T3616] usb 2-1: cp210x converter now attached to ttyUSB0 [ 228.096847][ T3616] usb 2-1: USB disconnect, device number 13 [ 228.139338][ T3616] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.184947][ T9812] loop4: detected capacity change from 0 to 22 [ 228.191732][ T3616] cp210x 2-1:0.111: device disconnected [ 228.240671][ T9812] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 228.248129][ T9812] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 228.770028][ T9838] loop2: detected capacity change from 0 to 256 [ 228.804280][ T9832] loop4: detected capacity change from 0 to 4096 [ 228.860142][ T9832] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 228.876653][ T9838] exfat: Deprecated parameter 'utf8' [ 228.943290][ T9838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 228.994874][ T9838] exfat: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 229.034244][ T1176] ntfs3: loop4: ino=1b, Internal error [ 229.039736][ T1176] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 229.066867][ T7559] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 229.084883][ T7559] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 229.110153][ T7559] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 229.174192][ T9850] loop3: detected capacity change from 0 to 8192 [ 229.285895][ T9850] loop3: AHDI p1 p3 p4 [ 229.335764][ T9850] loop3: p1 size 1048585 extends beyond EOD, truncated [ 229.366653][ T9850] loop3: p3 size 131074 extends beyond EOD, truncated [ 229.373147][ T9857] loop2: detected capacity change from 0 to 4096 [ 229.694678][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 229.714547][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 229.871563][ T9842] loop0: detected capacity change from 0 to 32768 [ 229.989126][ T9852] loop1: detected capacity change from 0 to 32768 [ 230.025521][ T9842] XFS (loop0): Mounting V5 Filesystem [ 230.098869][ T9858] loop4: detected capacity change from 0 to 32768 [ 230.109191][ T9842] XFS (loop0): Ending clean mount [ 230.151935][ T9852] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.1919 (9852) [ 230.222089][ T9858] XFS (loop4): Mounting V5 Filesystem [ 230.318917][ T9852] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 230.366743][ T9858] XFS (loop4): Ending clean mount [ 230.403405][ T9852] BTRFS info (device loop1): using free space tree [ 230.404781][ T9863] loop2: detected capacity change from 0 to 32768 [ 230.426055][ T7484] XFS (loop0): Unmounting Filesystem [ 230.449798][ T9852] BTRFS info (device loop1): has skinny extents [ 230.500573][ T9860] loop3: detected capacity change from 0 to 32768 [ 230.532397][ T9863] add_index: next_index = 0. Resetting! [ 230.546051][ T9860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 230.554539][ T9860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 230.555827][ T7559] XFS (loop4): Unmounting Filesystem [ 230.568957][ T9860] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 230.578711][ T9863] non-latin1 character 0x3ff found in JFS file name [ 230.607250][ T3616] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 230.616731][ T3616] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 230.620501][ T9863] mount with iocharset=utf8 to access [ 230.686833][ T3616] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 230.696399][ T3616] gfs2: fsid=syz:syz.0: jid=0: Done [ 230.701793][ T9860] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 230.764592][ T9860] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 230.786785][ T9860] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 230.786785][ T9860] inode = 12 2341 [ 230.786785][ T9860] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 230.806027][ T9860] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 230.806179][ T9852] BTRFS info (device loop1): enabling ssd optimizations [ 230.821009][ T9860] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 230.853830][ T25] audit: type=1804 audit(1727935703.472:44): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1919" name="/newroot/140/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 230.927102][ T9860] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 230.942338][ T9860] gfs2: fsid=syz:syz.0: File system withdrawn [ 230.948518][ T9860] CPU: 1 PID: 9860 Comm: syz.3.1922 Not tainted 5.15.167-syzkaller #0 [ 230.956675][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.966738][ T9860] Call Trace: [ 230.970011][ T9860] [ 230.972933][ T9860] dump_stack_lvl+0x1e3/0x2d0 [ 230.977616][ T9860] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 230.983251][ T9860] ? panic+0x860/0x860 [ 230.987324][ T9860] ? do_raw_spin_unlock+0x137/0x8b0 [ 230.992531][ T9860] gfs2_withdraw+0xe9e/0x14e0 [ 230.997224][ T9860] ? gfs2_lm+0x230/0x230 [ 231.001469][ T9860] ? gfs2_dirent_scan+0x276/0x640 [ 231.006494][ T9860] ? panic+0x860/0x860 [ 231.010574][ T9860] ? gfs2_consist_inode_i+0xc0/0xe0 [ 231.015868][ T9860] gfs2_dirent_scan+0x512/0x640 [ 231.020720][ T9860] ? gfs2_dirent_scan+0x640/0x640 [ 231.025743][ T9860] gfs2_dir_read+0x831/0x1af0 [ 231.030439][ T9860] ? gfs2_dir_hash_inval+0x80/0x80 [ 231.035554][ T9860] ? _raw_spin_unlock+0x24/0x40 [ 231.040412][ T9860] ? gfs2_glock_nq+0xc6e/0x15e0 [ 231.045282][ T9860] ? gfs2_glock_wait+0x137/0x1c0 [ 231.050227][ T9860] gfs2_readdir+0x146/0x1a0 [ 231.054728][ T9860] ? __fdget_pos+0x2cb/0x380 [ 231.059320][ T9860] ? gfs2_fallocate+0x490/0x490 [ 231.064189][ T9860] ? gfs2_readdir+0x102/0x1a0 [ 231.068867][ T9860] ? iterate_dir+0x10a/0x570 [ 231.073461][ T9860] ? iterate_dir+0x10a/0x570 [ 231.078512][ T9860] ? fsnotify_perm+0x442/0x590 [ 231.084333][ T9860] iterate_dir+0x224/0x570 [ 231.088751][ T9860] ? gfs2_fallocate+0x490/0x490 [ 231.093602][ T9860] __se_sys_getdents64+0x209/0x4f0 [ 231.098715][ T9860] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.104696][ T9860] ? __x64_sys_getdents64+0x80/0x80 [ 231.109896][ T9860] ? filldir+0x720/0x720 [ 231.114149][ T9860] ? syscall_enter_from_user_mode+0x2e/0x240 [ 231.120136][ T9860] ? lockdep_hardirqs_on+0x94/0x130 [ 231.125343][ T9860] ? syscall_enter_from_user_mode+0x2e/0x240 [ 231.131332][ T9860] do_syscall_64+0x3b/0xb0 [ 231.135750][ T9860] ? clear_bhb_loop+0x15/0x70 [ 231.140427][ T9860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.146324][ T9860] RIP: 0033:0x7fdb8ae11ff9 [ 231.150744][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.170356][ T9860] RSP: 002b:00007fdb8928a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 231.178772][ T9860] RAX: ffffffffffffffda RBX: 00007fdb8afc9f80 RCX: 00007fdb8ae11ff9 [ 231.186751][ T9860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 231.194719][ T9860] RBP: 00007fdb8ae84296 R08: 0000000000000000 R09: 0000000000000000 [ 231.202688][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.210661][ T9860] R13: 0000000000000000 R14: 00007fdb8afc9f80 R15: 00007ffcdc3d6078 [ 231.218738][ T9860] [ 231.360167][ T25] audit: type=1326 audit(1727935703.972:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9908 comm="syz.0.1929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195a659ff9 code=0x0 [ 231.784177][ T9924] loop3: detected capacity change from 0 to 512 [ 231.911391][ T9924] EXT4-fs (loop3): 1 orphan inode deleted [ 231.920199][ T9924] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 231.987783][ T9924] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 232.165486][ T9931] CUSE: unknown device info "ts_offset" [ 232.211142][ T9931] CUSE: DEVNAME unspecified [ 232.430669][ T9922] loop2: detected capacity change from 0 to 32768 [ 232.534915][ T9919] loop4: detected capacity change from 0 to 40427 [ 232.631885][ T9919] F2FS-fs (loop4): Found nat_bits in checkpoint [ 232.634834][ T9926] loop1: detected capacity change from 0 to 32768 [ 232.820875][ T9919] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 232.971769][ T7559] attempt to access beyond end of device [ 232.971769][ T7559] loop4: rw=2049, want=45104, limit=40427 [ 233.220813][ T9964] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.333351][ T9966] xt_NFQUEUE: number of total queues is 0 [ 233.438598][ T9945] loop0: detected capacity change from 0 to 32768 [ 233.568556][ T9945] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 233.716980][ T9960] loop3: detected capacity change from 0 to 40427 [ 233.759244][ T9960] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 233.770221][ T9960] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 233.784173][ T9978] loop2: detected capacity change from 0 to 16 [ 233.796962][ T9960] F2FS-fs (loop3): invalid crc value [ 233.833675][ T7484] ocfs2: Unmounting device (7,0) on (node local) [ 233.841805][ T9960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.860306][ T9978] erofs: (device loop2): mounted with root inode @ nid 36. [ 233.865301][ T9979] loop4: detected capacity change from 0 to 2048 [ 233.954188][ T9979] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.991003][ T9960] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 233.998681][ T9960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.010919][ T9979] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038 (0x7fffffff) [ 234.303584][ T9962] loop1: detected capacity change from 0 to 32768 [ 234.331694][ T9995] loop0: detected capacity change from 0 to 128 [ 234.400392][ T9962] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1945 (9962) [ 234.422514][ T9993] loop2: detected capacity change from 0 to 4096 [ 234.441264][ T9962] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.465826][ T9962] BTRFS info (device loop1): enabling auto defrag [ 234.485574][ T9995] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 234.493076][ T9962] BTRFS info (device loop1): force clearing of disk cache [ 234.523430][ T9962] BTRFS info (device loop1): enabling disk space caching [ 234.527519][ T9993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.562453][ T9962] BTRFS info (device loop1): enabling ssd optimizations [ 234.570321][ T9962] BTRFS info (device loop1): using spread ssd allocation scheme [ 234.578167][ T9962] BTRFS info (device loop1): disk space caching is enabled [ 234.590700][ T9995] sysv_free_block: flc_count > flc_size [ 234.596390][ T9995] sysv_free_block: flc_count > flc_size [ 234.614318][ T9995] sysv_free_block: flc_count > flc_size [ 234.630362][ T9995] sysv_free_block: flc_count > flc_size [ 234.635975][ T9995] sysv_free_block: flc_count > flc_size [ 234.640224][ T9962] BTRFS info (device loop1): has skinny extents [ 234.695434][ T9995] sysv_free_block: flc_count > flc_size [ 234.698418][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 234.765734][ T9995] sysv_free_block: flc_count > flc_size [ 234.771790][ T9995] sysv_free_block: flc_count > flc_size [ 234.791360][ T9995] sysv_free_block: flc_count > flc_size [ 234.796917][ T9995] sysv_free_block: flc_count > flc_size [ 234.842511][ T9995] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 234.956535][ T9250] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.998048][ T9962] BTRFS info (device loop1): clearing free space tree [ 235.036350][ T9962] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.046790][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 235.103570][ T9962] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.187798][T10044] loop0: detected capacity change from 0 to 2048 [ 235.213728][T10021] loop3: detected capacity change from 0 to 32768 [ 235.291059][T10044] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.328836][T10021] ERROR: (device loop3): diWrite: ixpxd invalid [ 235.328836][T10021] [ 235.350269][ T9250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 235.357290][T10021] ERROR: (device loop3): remounting filesystem as read-only [ 235.361806][ T9250] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 235.379373][ T9250] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.416647][T10021] ERROR: (device loop3): txCommit: [ 235.416647][T10021] [ 235.477689][ T9250] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.486812][ T9250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.496015][ T9250] usb 5-1: SerialNumber: syz [ 235.529992][T10011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.727028][T10050] loop1: detected capacity change from 0 to 512 [ 235.753671][T10011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.824791][T10050] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 235.824791][T10050] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 235.824791][T10050] [ 235.877731][T10050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=380241a8, mo2=0002] [ 235.886552][T10050] System zones: 1-12 [ 235.901020][T10050] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1974: corrupted in-inode xattr [ 235.930720][T10050] EXT4-fs (loop1): Remounting filesystem read-only [ 235.937315][T10050] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1974: couldn't read orphan inode 15 (err -117) [ 235.990540][T10050] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,errors=remount-ro,noload,noacl,minixdf,noinit_itable,debug,. Quota mode: none. [ 236.013581][T10042] loop2: detected capacity change from 0 to 32768 [ 236.048865][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 236.065022][T10050] EXT4-fs error (device loop1): ext4_check_dx_root:2264: inode #2: comm syz.1.1974: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 236.140239][T10050] EXT4-fs (loop1): Remounting filesystem read-only [ 236.179533][T10042] XFS (loop2): Mounting V5 Filesystem [ 236.240361][ T9250] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 236.267108][T10080] loop0: detected capacity change from 0 to 24 [ 236.386329][T10042] XFS (loop2): Ending clean mount [ 236.413323][T10042] XFS (loop2): Quotacheck needed: Please wait. [ 236.519606][ T9252] usb 5-1: USB disconnect, device number 11 [ 236.536463][T10042] XFS (loop2): Quotacheck: Done. [ 236.698819][ T5429] XFS (loop2): Unmounting Filesystem [ 236.879799][T10113] loop1: detected capacity change from 0 to 512 [ 236.966792][T10113] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.986425][T10113] EXT4-fs (loop1): 1 truncate cleaned up [ 236.992802][T10113] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 237.126924][T10126] loop4: detected capacity change from 0 to 1024 [ 237.197474][T10135] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 237.202511][T10132] loop3: detected capacity change from 0 to 512 [ 237.207364][T10135] netlink: 'syz.0.2012': attribute type 2 has an invalid length. [ 237.228175][T10136] input: syz1 as /devices/virtual/input/input17 [ 237.236259][T10135] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.2012'. [ 237.260567][T10138] loop2: detected capacity change from 0 to 256 [ 237.285754][T10126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.327654][T10138] FAT-fs (loop2): bogus number of FAT sectors [ 237.337899][T10126] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 237.351126][T10132] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 237.360870][T10138] FAT-fs (loop2): Can't find a valid FAT filesystem [ 237.371516][T10132] EXT4-fs (loop3): 1 truncate cleaned up [ 237.389437][T10145] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 237.405548][T10150] loop1: detected capacity change from 0 to 64 [ 237.411891][T10132] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 237.439348][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.602910][T10156] loop2: detected capacity change from 0 to 164 [ 237.804483][T10174] loop3: detected capacity change from 0 to 8 [ 237.852807][T10179] loop0: detected capacity change from 0 to 8 [ 237.854159][T10176] loop2: detected capacity change from 0 to 512 [ 237.900521][T10179] squashfs image failed sanity check [ 237.980034][T10176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.020693][T10176] EXT4-fs (loop2): 1 orphan inode deleted [ 238.028779][T10176] EXT4-fs (loop2): 1 truncate cleaned up [ 238.040002][T10176] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,data_err=ignore,inode_readahead_blks=0x0000000000000020,resuid=0x0000000000000000,block_validity,. Quota mode: none. [ 238.300227][T10195] loop0: detected capacity change from 0 to 1024 [ 238.307265][T10198] loop2: detected capacity change from 0 to 256 [ 238.349841][T10195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.431438][T10198] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 238.459081][T10196] loop4: detected capacity change from 0 to 4096 [ 238.530921][T10190] loop1: detected capacity change from 0 to 8192 [ 238.582950][T10200] loop3: detected capacity change from 0 to 2048 [ 238.617534][T10201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.633555][T10190] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.654612][T10200] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 238.666817][T10203] netlink: 'syz.2.2043': attribute type 9 has an invalid length. [ 238.707517][T10200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.835368][T10212] loop4: detected capacity change from 0 to 256 [ 238.853996][T10209] loop0: detected capacity change from 0 to 2048 [ 238.937250][T10212] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 238.971981][T10209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.995125][T10216] device dummy0 entered promiscuous mode [ 239.039550][T10209] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038 (0x7fffffff) [ 239.296887][T10234] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2059'. [ 239.375578][T10236] loop1: detected capacity change from 0 to 2048 [ 239.451476][T10236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.513911][ T25] audit: type=1800 audit(1727935712.132:46): pid=10236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2058" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 239.549483][T10252] loop4: detected capacity change from 0 to 512 [ 239.566612][T10247] loop2: detected capacity change from 0 to 4096 [ 239.625039][T10252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.640528][T10247] NILFS (loop2): invalid segment: Checksum error in segment payload [ 239.673160][T10252] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2065: invalid indirect mapped block 4294967295 (level 0) [ 239.727319][T10247] NILFS (loop2): trying rollback from an earlier position [ 239.751181][T10266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.787153][T10247] NILFS (loop2): recovery complete [ 239.811359][T10269] loop3: detected capacity change from 0 to 64 [ 239.828198][T10252] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2065: invalid indirect mapped block 4294967295 (level 1) [ 239.844053][T10252] EXT4-fs (loop4): 1 orphan inode deleted [ 239.849882][T10252] EXT4-fs (loop4): 1 truncate cleaned up [ 239.856127][T10252] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,max_batch_time=0x0000000000000001,nolazytime,block_validity,block_validity,init_itable=0x0000000000010000,nolazytime,,errors=continue. Quota mode: none. [ 239.874043][T10271] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.954113][T10252] EXT4-fs (loop4): shut down requested (2) [ 239.990359][ T9250] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.298064][T10293] loop2: detected capacity change from 0 to 512 [ 240.304363][T10292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.381642][ T9250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.416667][ T9250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.427174][ T9250] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 240.460377][T10302] loop0: detected capacity change from 0 to 1024 [ 240.468016][T10293] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 240.471772][T10302] EXT4-fs (loop0): Ignoring removed orlov option [ 240.480387][T10293] EXT4-fs (loop2): 1 truncate cleaned up [ 240.489114][ T9250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.497462][T10302] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 240.497627][T10293] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 240.527356][ T9250] usb 2-1: config 0 descriptor?? [ 240.532118][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.578345][T10302] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 240.712876][T10315] loop3: detected capacity change from 0 to 8 [ 240.729163][T10314] loop2: detected capacity change from 0 to 256 [ 240.756054][T10315] squashfs image failed sanity check [ 240.794681][T10314] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 241.011644][T10319] loop0: detected capacity change from 0 to 8192 [ 241.057777][T10327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.096190][ T9250] logitech-djreceiver 0003:046D:C534.000F: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input0 [ 241.110022][T10329] device dummy0 entered promiscuous mode [ 241.132067][T10319] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 241.159175][T10319] REISERFS (device loop0): using ordered data mode [ 241.170266][T10319] reiserfs: using flush barriers [ 241.198007][T10319] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.288896][T10337] loop3: detected capacity change from 0 to 512 [ 241.293893][T10319] REISERFS (device loop0): checking transaction log (loop0) [ 241.307225][ T9252] usb 2-1: USB disconnect, device number 14 [ 241.364347][T10337] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 241.394206][T10337] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.436123][T10337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.477401][T10319] REISERFS (device loop0): Using tea hash to sort names [ 241.484441][T10337] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 241.485000][T10319] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 241.508815][T10337] EXT4-fs (loop3): 1 truncate cleaned up [ 241.514636][T10337] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,dioread_nolock,nobarrier,,errors=continue. Quota mode: none. [ 241.625996][T10345] loop2: detected capacity change from 0 to 4096 [ 241.707745][T10351] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.841043][T10357] loop0: detected capacity change from 0 to 8 [ 242.230495][T10377] loop1: detected capacity change from 0 to 2048 [ 242.287746][T10379] loop3: detected capacity change from 0 to 4096 [ 242.320728][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2124'. [ 242.376279][T10379] NILFS (loop3): invalid segment: Checksum error in segment payload [ 242.391870][T10377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.407807][ T25] audit: type=1800 audit(1727935715.022:47): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2121" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 242.421965][T10379] NILFS (loop3): trying rollback from an earlier position [ 242.459799][T10379] NILFS (loop3): recovery complete [ 242.489788][T10391] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.651950][T10393] loop0: detected capacity change from 0 to 4096 [ 242.725758][T10395] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.733118][T10395] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.808528][T10400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.822576][T10397] loop1: detected capacity change from 0 to 2048 [ 242.861216][T10402] loop3: detected capacity change from 0 to 64 [ 242.956851][T10376] loop2: detected capacity change from 0 to 32768 [ 242.975077][T10406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.046772][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2133'. [ 243.184378][T10376] XFS (loop2): Mounting V5 Filesystem [ 243.362787][T10376] XFS (loop2): Ending clean mount [ 243.379490][T10376] XFS (loop2): Quotacheck needed: Please wait. [ 243.386236][T10431] loop1: detected capacity change from 0 to 4096 [ 243.436602][T10437] loop4: detected capacity change from 0 to 8 [ 243.466435][T10431] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 243.498857][T10376] XFS (loop2): Quotacheck: Done. [ 243.595635][ T5429] XFS (loop2): Unmounting Filesystem [ 244.104462][T10462] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2154'. [ 244.127593][T10459] loop1: detected capacity change from 0 to 1764 [ 244.145734][T10462] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 244.467699][ T25] audit: type=1326 audit(1727935973.086:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.2.2161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7089d5cff9 code=0x0 [ 244.616579][T10447] loop3: detected capacity change from 0 to 32768 [ 244.767743][T10447] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 244.826700][T10488] loop0: detected capacity change from 0 to 4096 [ 244.877025][T10447] (syz.3.2146,10447,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 244.904481][T10488] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 245.006531][ T7241] ocfs2: Unmounting device (7,3) on (node local) [ 245.131733][T10472] loop4: detected capacity change from 0 to 40427 [ 245.254430][T10472] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 245.278873][T10472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 245.341807][T10472] F2FS-fs (loop4): invalid crc value [ 245.376424][T10472] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 245.396511][T10501] loop0: detected capacity change from 0 to 512 [ 245.535912][T10501] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 245.563464][T10472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 245.609643][T10493] loop1: detected capacity change from 0 to 32768 [ 245.616361][T10501] ext4 filesystem being mounted at /225/bus supports timestamps until 2038 (0x7fffffff) [ 245.626913][T10472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.741832][T10493] XFS (loop1): Mounting V5 Filesystem [ 245.882975][T10493] XFS (loop1): Ending clean mount [ 245.895899][T10493] XFS (loop1): Quotacheck needed: Please wait. [ 246.044158][ T25] audit: type=1326 audit(1727936230.663:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.0.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195a659ff9 code=0x0 [ 246.068747][T10493] XFS (loop1): Quotacheck: Done. [ 246.126375][ T7086] XFS (loop1): Unmounting Filesystem [ 246.337542][T10544] loop4: detected capacity change from 0 to 2048 [ 246.493453][T10544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.566939][ T25] audit: type=1800 audit(1727936231.183:50): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2176" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 246.727211][T10570] netlink: 'syz.1.2192': attribute type 2 has an invalid length. [ 246.746425][T10570] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 246.756844][T10570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.857933][T10576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 247.095265][T10588] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2201'. [ 247.141778][T10588] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 247.209730][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2203'. [ 247.388477][T10599] loop4: detected capacity change from 0 to 1024 [ 247.404106][T10596] loop2: detected capacity change from 0 to 4096 [ 247.555525][ T1202] hfsplus: b-tree write err: -5, ino 4 [ 247.650458][ T4124] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.688062][T10614] loop3: detected capacity change from 0 to 512 [ 247.711166][T10616] loop2: detected capacity change from 0 to 2048 [ 247.749326][T10614] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 247.780740][T10614] FAT-fs (loop3): Filesystem has been set read-only [ 247.835672][T10616] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.870414][ T25] audit: type=1800 audit(1727936232.493:51): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2215" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 248.031692][ T4124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.036086][T10623] loop1: detected capacity change from 0 to 4096 [ 248.063236][ T4124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.073602][ T4124] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 248.102342][ T4124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.167800][ T4124] usb 1-1: config 0 descriptor?? [ 248.173186][T10618] loop4: detected capacity change from 0 to 32768 [ 248.269638][T10618] JBD2: Ignoring recovery information on journal [ 248.489615][T10618] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 248.587587][T10629] loop2: detected capacity change from 0 to 32768 [ 248.615891][ T7559] ocfs2: Unmounting device (7,4) on (node local) [ 248.674062][ T4124] logitech-djreceiver 0003:046D:C534.0010: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0 [ 248.704179][T10629] XFS (loop2): Mounting V5 Filesystem [ 248.889798][ T4124] usb 1-1: USB disconnect, device number 15 [ 248.890338][T10629] XFS (loop2): Ending clean mount [ 249.038544][ T5429] XFS (loop2): Unmounting Filesystem [ 249.239767][T10661] loop3: detected capacity change from 0 to 2048 [ 249.359747][T10661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.371462][T10641] loop1: detected capacity change from 0 to 32768 [ 249.394288][ T25] audit: type=1800 audit(1727936234.013:52): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2231" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 249.480389][T10641] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2236 (10641) [ 249.575665][T10641] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 249.599283][T10641] BTRFS info (device loop1): using free space tree [ 249.606460][T10641] BTRFS info (device loop1): has skinny extents [ 249.738805][T10682] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 249.787324][T10671] loop4: detected capacity change from 0 to 8192 [ 249.887905][T10641] BTRFS info (device loop1): enabling ssd optimizations [ 249.944170][T10671] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 249.971575][T10712] device bridge_slave_1 left promiscuous mode [ 249.977860][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.987625][T10712] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 249.988969][T10710] loop2: detected capacity change from 0 to 512 [ 250.010392][T10671] REISERFS (device loop4): using ordered data mode [ 250.016987][T10671] reiserfs: using flush barriers [ 250.052241][T10671] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.147270][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 250.222720][T10671] REISERFS (device loop4): checking transaction log (loop4) [ 250.257508][T10710] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 250.304071][T10710] ext4 filesystem being mounted at /343/bus supports timestamps until 2038 (0x7fffffff) [ 250.378067][T10671] REISERFS (device loop4): Using tea hash to sort names [ 250.401904][T10671] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 250.405061][T10673] loop0: detected capacity change from 0 to 32768 [ 250.536804][T10673] ERROR: (device loop0): dbAllocAG: allocation request is larger than the allocation group size [ 250.536804][T10673] [ 250.602903][T10673] ERROR: (device loop0): remounting filesystem as read-only [ 250.617653][T10673] ERROR: (device loop0): dbDiscardAG: -EIO [ 250.617653][T10673] [ 250.726518][T10728] netlink: 'syz.3.2253': attribute type 2 has an invalid length. [ 250.740312][T10728] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 250.748267][T10728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.735858][T10779] MTD: Couldn't look up './file0': -15 [ 251.858480][T10746] loop3: detected capacity change from 0 to 32768 [ 251.886050][T10746] XFS: noikeep mount option is deprecated. [ 251.953193][T10764] loop4: detected capacity change from 0 to 32768 [ 251.962148][T10746] XFS (loop3): Mounting V5 Filesystem [ 252.036879][T10796] loop1: detected capacity change from 0 to 256 [ 252.074823][T10746] XFS (loop3): Ending clean mount [ 252.091466][T10796] exfat: Deprecated parameter 'utf8' [ 252.102810][T10746] XFS (loop3): Quotacheck needed: Please wait. [ 252.147542][T10767] loop0: detected capacity change from 0 to 40427 [ 252.162153][T10764] XFS (loop4): Mounting V5 Filesystem [ 252.171120][T10796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 252.190977][T10746] XFS (loop3): Quotacheck: Done. [ 252.210033][T10796] exfat: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 252.227954][T10764] XFS (loop4): Ending clean mount [ 252.251958][T10767] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 252.290516][T10767] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.311190][ T7241] XFS (loop3): Unmounting Filesystem [ 252.353991][T10767] F2FS-fs (loop0): invalid crc value [ 252.381002][ T7559] XFS (loop4): Unmounting Filesystem [ 252.412754][T10767] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 252.477674][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 252.627434][T10767] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.642088][T10767] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.131844][T10843] loop4: detected capacity change from 0 to 512 [ 253.217757][T10843] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext2 [ 253.236886][T10831] loop3: detected capacity change from 0 to 8192 [ 253.309753][T10831] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 253.403709][T10857] loop0: detected capacity change from 0 to 16 [ 253.475535][T10857] erofs: (device loop0): mounted with root inode @ nid 36. [ 253.938243][T10874] loop0: detected capacity change from 0 to 4096 [ 254.016853][T10874] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 254.075325][ T6547] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.119208][ T144] ntfs3: loop0: ino=1b, Internal error [ 254.137486][ T144] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 254.147264][ T7484] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 254.161406][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2324'. [ 254.161644][ T7484] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 254.187815][ T7484] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 254.247197][T10854] loop1: detected capacity change from 0 to 40427 [ 254.335179][T10854] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 254.343102][ T6547] usb 3-1: Using ep0 maxpacket: 32 [ 254.377359][T10854] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.396786][T10884] loop3: detected capacity change from 0 to 4096 [ 254.408895][T10854] F2FS-fs (loop1): invalid crc value [ 254.445591][T10888] loop0: detected capacity change from 0 to 8192 [ 254.456276][T10854] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 254.470407][T10884] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 254.480308][ T6547] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.491189][ T6547] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.512132][T10888] loop0: AHDI p1 p3 p4 [ 254.516422][T10888] loop0: p1 size 1048585 extends beyond EOD, truncated [ 254.550327][T10888] loop0: p3 size 131074 extends beyond EOD, truncated [ 254.632183][T10854] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.639633][ T3027] loop0: AHDI p1 p3 p4 [ 254.646141][T10854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.655728][ T144] ntfs3: loop3: ino=1b, Internal error [ 254.659491][ T3027] loop0: p1 size 1048585 extends beyond EOD, [ 254.661827][ T144] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 254.673037][ T3027] truncated [ 254.675027][ T7241] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 254.683324][ T6547] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.686017][ T7241] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 254.693030][ T3027] loop0: p3 size 131074 extends beyond EOD, [ 254.704881][ T7241] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 254.720118][ T3027] truncated [ 254.723797][ T6547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.737986][ T6547] usb 3-1: Product: syz [ 254.747894][ T6547] usb 3-1: Manufacturer: syz [ 254.756137][ T6547] usb 3-1: SerialNumber: syz [ 254.863157][T10901] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.879757][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 254.893322][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 255.038987][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 255.040152][ T7100] udevd[7100]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 255.058956][ T6547] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.244574][T10893] loop4: detected capacity change from 0 to 32768 [ 255.344553][T10907] xt_NFQUEUE: number of total queues is 0 [ 255.375035][ T4124] usb 3-1: USB disconnect, device number 14 [ 255.408310][ T4124] usblp0: removed [ 255.461803][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.468113][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.628365][T10903] loop3: detected capacity change from 0 to 32768 [ 255.730156][T10903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2321 (10903) [ 255.781335][T10903] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 255.790048][T10903] BTRFS info (device loop3): using free space tree [ 255.840162][T10903] BTRFS info (device loop3): has skinny extents [ 256.170218][T10903] BTRFS info (device loop3): enabling ssd optimizations [ 256.188752][T10948] binfmt_misc: register: failed to install interpreter file ./file0 [ 256.237294][T10955] loop2: detected capacity change from 0 to 8 [ 256.310779][T10955] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 256.404681][T10962] loop0: detected capacity change from 0 to 64 [ 256.779817][T10972] loop4: detected capacity change from 0 to 1024 [ 256.848042][T10972] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 256.896227][T10972] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 256.898924][T10977] loop2: detected capacity change from 0 to 512 [ 256.937870][T10972] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 256.965582][T10978] MTD: Couldn't look up './file0': -15 [ 256.977093][T10972] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.999804][T10977] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 256.999804][T10977] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 256.999804][T10977] [ 257.023403][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 257.050170][T10972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 257.079858][T10972] System zones: 0-1, 3-36 [ 257.085464][T10977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=380241a8, mo2=0002] [ 257.098385][T10985] loop0: detected capacity change from 0 to 16 [ 257.098457][T10972] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,usrjquota=./bus,max_dir_size_kb=0x0000000000005819,,errors=continue. Quota mode: writeback. [ 257.111058][T10977] System zones: [ 257.144425][T10972] EXT4-fs (loop4): shut down requested (2) [ 257.175571][T10977] 1-12 [ 257.180744][T10977] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.2357: corrupted in-inode xattr [ 257.194449][T10977] EXT4-fs (loop2): Remounting filesystem read-only [ 257.202211][T10977] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2357: couldn't read orphan inode 15 (err -117) [ 257.249730][T10985] erofs: (device loop0): mounted with root inode @ nid 36. [ 257.270629][T10977] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,errors=remount-ro,noload,noacl,minixdf,noinit_itable,debug,. Quota mode: none. [ 257.352231][ T25] audit: type=1326 audit(1727936241.973:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10988 comm="syz.3.2351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ae11ff9 code=0x0 [ 257.363546][T10977] EXT4-fs error (device loop2): ext4_check_dx_root:2264: inode #2: comm syz.2.2357: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 257.389866][T10970] loop1: detected capacity change from 0 to 32768 [ 257.399011][T10977] EXT4-fs (loop2): Remounting filesystem read-only [ 257.469984][T10996] loop4: detected capacity change from 0 to 512 [ 257.570371][T10996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.591991][T10970] XFS (loop1): Mounting V5 Filesystem [ 257.618073][T10996] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038 (0x7fffffff) [ 257.723434][T10970] XFS (loop1): Ending clean mount [ 257.822141][ T7086] XFS (loop1): Unmounting Filesystem [ 257.829452][T11020] loop0: detected capacity change from 0 to 256 [ 258.582312][T11031] loop0: detected capacity change from 0 to 512 [ 258.627334][T11033] loop1: detected capacity change from 0 to 64 [ 258.634786][T11027] loop3: detected capacity change from 0 to 4096 [ 258.647736][T11023] loop4: detected capacity change from 0 to 32768 [ 258.696722][T11031] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 258.764818][T11023] add_index: next_index = 0. Resetting! [ 258.786436][T11031] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2363: invalid indirect mapped block 10 (level 1) [ 258.820594][T11023] non-latin1 character 0x3ff found in JFS file name [ 258.860863][T11023] mount with iocharset=utf8 to access [ 258.896928][T11031] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2363: invalid indirect mapped block 8 (level 1) [ 258.997789][T11031] EXT4-fs (loop0): 1 truncate cleaned up [ 259.028562][T11031] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 259.065780][T11025] loop2: detected capacity change from 0 to 131072 [ 259.120766][T11025] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 259.130381][T11025] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 259.185466][T11025] F2FS-fs (loop2): invalid crc value [ 259.240891][T11025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 259.311696][T11025] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 259.318753][T11025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 259.349059][T11046] loop4: detected capacity change from 0 to 2048 [ 259.503986][ T25] audit: type=1326 audit(1727936244.123:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.2374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1069fff9 code=0x0 [ 259.538987][T11046] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.788739][T11066] sock: sock_timestamping_bind_phc: sock not bind to device [ 259.883201][T11068] loop4: detected capacity change from 0 to 8 [ 259.911890][T11068] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 260.140711][T11049] loop0: detected capacity change from 0 to 32768 [ 260.157848][T11059] loop3: detected capacity change from 0 to 32768 [ 260.235108][T11049] XFS (loop0): Mounting V5 Filesystem [ 260.405998][T11049] XFS (loop0): Ending clean mount [ 260.428011][T11049] XFS (loop0): Quotacheck needed: Please wait. [ 260.496870][T11049] XFS (loop0): Quotacheck: Done. [ 260.642396][ T7484] XFS (loop0): Unmounting Filesystem [ 260.717519][ T6547] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 261.180315][ T6547] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 261.210176][ T6547] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 261.240159][ T6547] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.365706][ T6547] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.378020][T11116] binfmt_misc: register: failed to install interpreter file ./file0 [ 261.395723][ T6547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.410132][ T6547] usb 2-1: SerialNumber: syz [ 261.417558][T11098] loop3: detected capacity change from 0 to 32768 [ 261.451036][T11084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.491300][T11118] loop4: detected capacity change from 0 to 256 [ 261.569924][T11098] XFS (loop3): Mounting V5 Filesystem [ 261.582036][T11118] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 261.588097][T11103] loop2: detected capacity change from 0 to 32768 [ 261.637672][T11098] XFS (loop3): Ending clean mount [ 261.728296][T11084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.801730][ T7241] XFS (loop3): Unmounting Filesystem [ 262.240374][ T6547] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 262.451137][ T6547] usb 2-1: USB disconnect, device number 15 [ 262.468899][T11145] loop2: detected capacity change from 0 to 512 [ 262.557886][T11145] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 262.584224][T11136] loop4: detected capacity change from 0 to 32768 [ 262.608845][T11145] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2405: invalid indirect mapped block 10 (level 1) [ 262.628271][T11145] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2405: invalid indirect mapped block 8 (level 1) [ 262.647889][T11145] EXT4-fs (loop2): 1 truncate cleaned up [ 262.653652][T11145] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 262.763212][T11126] loop0: detected capacity change from 0 to 65536 [ 262.822882][T11136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2403 (11136) [ 262.872070][T11126] XFS (loop0): Mounting V5 Filesystem [ 262.961059][T11136] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 262.969839][T11136] BTRFS info (device loop4): force clearing of disk cache [ 262.977710][T11136] BTRFS info (device loop4): using free space tree [ 262.984771][T11136] BTRFS info (device loop4): has skinny extents [ 263.069078][T11126] XFS (loop0): Ending clean mount [ 263.317081][ T7484] XFS (loop0): Unmounting Filesystem [ 263.323168][T11136] BTRFS info (device loop4): enabling ssd optimizations [ 263.366876][T11136] BTRFS info (device loop4): clearing free space tree [ 263.379271][T11136] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.407585][T11203] loop3: detected capacity change from 0 to 1024 [ 263.444458][T11136] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.477507][T11203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.510143][T11203] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038 (0x7fffffff) [ 263.510351][T11136] BTRFS info (device loop4): creating free space tree [ 263.528228][T11136] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.545468][T11136] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.600605][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 263.773056][T11213] loop3: detected capacity change from 0 to 512 [ 263.834747][T11213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.875142][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 263.905912][T11213] EXT4-fs (loop3): 1 truncate cleaned up [ 263.914603][T11213] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 264.030857][T11213] ------------[ cut here ]------------ [ 264.036334][T11213] WARNING: CPU: 0 PID: 11213 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120 [ 264.046323][T11213] Modules linked in: [ 264.050213][T11213] CPU: 0 PID: 11213 Comm: syz.3.2423 Not tainted 5.15.167-syzkaller #0 [ 264.058451][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.068501][T11213] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 264.074231][T11213] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 264.093848][T11213] RSP: 0018:ffffc90003187510 EFLAGS: 00010006 [ 264.099918][T11213] RAX: ffffffff902d1fc0 RBX: ffffffff901bc5c0 RCX: ffff8880288a0000 [ 264.107887][T11213] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888072887020 [ 264.115868][T11213] RBP: ffffc90003187610 R08: 0000000000000001 R09: 0000000000000000 [ 264.123840][T11213] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 264.131851][T11213] R13: 1ffff92000630eb0 R14: ffff888072887020 R15: ffffffff96990c81 [ 264.139814][T11213] FS: 00007fdb8928a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 264.148724][T11213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.155287][T11213] CR2: 0000001b2f30aff8 CR3: 000000007c0f2000 CR4: 00000000003526f0 [ 264.163244][T11213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.171192][T11213] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.179143][T11213] Call Trace: [ 264.182398][T11213] [ 264.185308][T11213] ? __warn+0x15b/0x300 [ 264.189447][T11213] ? look_up_lock_class+0xa0/0x120 [ 264.194539][T11213] ? report_bug+0x1b7/0x2e0 [ 264.199026][T11213] ? handle_bug+0x3d/0x70 [ 264.203338][T11213] ? exc_invalid_op+0x16/0x40 [ 264.207998][T11213] ? asm_exc_invalid_op+0x16/0x20 [ 264.213008][T11213] ? look_up_lock_class+0xa0/0x120 [ 264.218107][T11213] register_lock_class+0x100/0x9a0 [ 264.223204][T11213] ? reacquire_held_locks+0x660/0x660 [ 264.228560][T11213] ? is_dynamic_key+0x1f0/0x1f0 [ 264.233387][T11213] ? mark_lock+0x98/0x340 [ 264.237695][T11213] __lock_acquire+0xd7/0x1ff0 [ 264.244991][T11213] lock_acquire+0x1db/0x4f0 [ 264.251863][T11213] ? ext4_move_extents+0x3a1/0xe80 [ 264.256971][T11213] ? read_lock_is_recursive+0x10/0x10 [ 264.262325][T11213] ? __might_sleep+0xc0/0xc0 [ 264.266896][T11213] ? rwsem_write_trylock+0x166/0x210 [ 264.272168][T11213] ? inode_owner_or_capable+0x210/0x210 [ 264.277700][T11213] ? clear_nonspinnable+0x60/0x60 [ 264.282716][T11213] down_write_nested+0x3b/0x60 [ 264.287465][T11213] ? ext4_move_extents+0x3a1/0xe80 [ 264.292561][T11213] ext4_move_extents+0x3a1/0xe80 [ 264.297487][T11213] ? rcu_read_lock_any_held+0xb3/0x160 [ 264.302928][T11213] ? ext4_double_up_write_data_sem+0x30/0x30 [ 264.308889][T11213] ? __fget_files+0x413/0x480 [ 264.313554][T11213] ext4_ioctl+0x2fcb/0x5b80 [ 264.318040][T11213] ? do_vfs_ioctl+0x1b66/0x2b70 [ 264.322870][T11213] ? ext4_fileattr_set+0x1750/0x1750 [ 264.328137][T11213] ? __x64_compat_sys_ioctl+0x80/0x80 [ 264.333489][T11213] ? __lock_acquire+0x1ff0/0x1ff0 [ 264.338492][T11213] ? slab_free_freelist_hook+0xdd/0x160 [ 264.344020][T11213] ? tomoyo_path_number_perm+0x648/0x810 [ 264.349633][T11213] ? kfree+0xf1/0x270 [ 264.353595][T11213] ? tomoyo_path_number_perm+0x6ab/0x810 [ 264.359208][T11213] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 264.364658][T11213] ? __fget_files+0x413/0x480 [ 264.369325][T11213] ? bpf_lsm_file_ioctl+0x5/0x10 [ 264.374259][T11213] ? security_file_ioctl+0x7d/0xa0 [ 264.379363][T11213] ? ext4_fileattr_set+0x1750/0x1750 [ 264.384648][T11213] __se_sys_ioctl+0xf1/0x160 [ 264.389231][T11213] do_syscall_64+0x3b/0xb0 [ 264.393629][T11213] ? clear_bhb_loop+0x15/0x70 [ 264.398287][T11213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.404163][T11213] RIP: 0033:0x7fdb8ae11ff9 [ 264.408561][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.428147][T11213] RSP: 002b:00007fdb8928a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.436540][T11213] RAX: ffffffffffffffda RBX: 00007fdb8afc9f80 RCX: 00007fdb8ae11ff9 [ 264.444491][T11213] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 264.452446][T11213] RBP: 00007fdb8ae84296 R08: 0000000000000000 R09: 0000000000000000 [ 264.460397][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.468348][T11213] R13: 0000000000000000 R14: 00007fdb8afc9f80 R15: 00007ffcdc3d6078 [ 264.476306][T11213] [ 264.479318][T11213] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.486605][T11213] CPU: 0 PID: 11213 Comm: syz.3.2423 Not tainted 5.15.167-syzkaller #0 [ 264.494936][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.504982][T11213] Call Trace: [ 264.508277][T11213] [ 264.511193][T11213] dump_stack_lvl+0x1e3/0x2d0 [ 264.515858][T11213] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 264.521473][T11213] ? panic+0x860/0x860 [ 264.525526][T11213] ? lock_is_held_type+0x140/0x180 [ 264.530622][T11213] ? lock_is_held_type+0x140/0x180 [ 264.535714][T11213] panic+0x318/0x860 [ 264.539591][T11213] ? __warn+0x16a/0x300 [ 264.543731][T11213] ? fb_is_primary_device+0xd0/0xd0 [ 264.548918][T11213] ? look_up_lock_class+0xa0/0x120 [ 264.554010][T11213] __warn+0x2b2/0x300 [ 264.557974][T11213] ? look_up_lock_class+0xa0/0x120 [ 264.563088][T11213] report_bug+0x1b7/0x2e0 [ 264.567409][T11213] handle_bug+0x3d/0x70 [ 264.571544][T11213] exc_invalid_op+0x16/0x40 [ 264.576028][T11213] asm_exc_invalid_op+0x16/0x20 [ 264.580861][T11213] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 264.586563][T11213] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 1f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 77 e1 d1 f9 48 c7 c7 00 4c 8b 8a 89 de e8 d9 d0 fe [ 264.606154][T11213] RSP: 0018:ffffc90003187510 EFLAGS: 00010006 [ 264.612203][T11213] RAX: ffffffff902d1fc0 RBX: ffffffff901bc5c0 RCX: ffff8880288a0000 [ 264.620156][T11213] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888072887020 [ 264.628224][T11213] RBP: ffffc90003187610 R08: 0000000000000001 R09: 0000000000000000 [ 264.636185][T11213] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 264.644139][T11213] R13: 1ffff92000630eb0 R14: ffff888072887020 R15: ffffffff96990c81 [ 264.652104][T11213] register_lock_class+0x100/0x9a0 [ 264.657214][T11213] ? reacquire_held_locks+0x660/0x660 [ 264.662568][T11213] ? is_dynamic_key+0x1f0/0x1f0 [ 264.667399][T11213] ? mark_lock+0x98/0x340 [ 264.671709][T11213] __lock_acquire+0xd7/0x1ff0 [ 264.676375][T11213] lock_acquire+0x1db/0x4f0 [ 264.680860][T11213] ? ext4_move_extents+0x3a1/0xe80 [ 264.685957][T11213] ? read_lock_is_recursive+0x10/0x10 [ 264.691401][T11213] ? __might_sleep+0xc0/0xc0 [ 264.695972][T11213] ? rwsem_write_trylock+0x166/0x210 [ 264.701238][T11213] ? inode_owner_or_capable+0x210/0x210 [ 264.706763][T11213] ? clear_nonspinnable+0x60/0x60 [ 264.711771][T11213] down_write_nested+0x3b/0x60 [ 264.716699][T11213] ? ext4_move_extents+0x3a1/0xe80 [ 264.721795][T11213] ext4_move_extents+0x3a1/0xe80 [ 264.726726][T11213] ? rcu_read_lock_any_held+0xb3/0x160 [ 264.732167][T11213] ? ext4_double_up_write_data_sem+0x30/0x30 [ 264.738126][T11213] ? __fget_files+0x413/0x480 [ 264.742789][T11213] ext4_ioctl+0x2fcb/0x5b80 [ 264.747280][T11213] ? do_vfs_ioctl+0x1b66/0x2b70 [ 264.752109][T11213] ? ext4_fileattr_set+0x1750/0x1750 [ 264.757375][T11213] ? __x64_compat_sys_ioctl+0x80/0x80 [ 264.762726][T11213] ? __lock_acquire+0x1ff0/0x1ff0 [ 264.767727][T11213] ? slab_free_freelist_hook+0xdd/0x160 [ 264.773251][T11213] ? tomoyo_path_number_perm+0x648/0x810 [ 264.778865][T11213] ? kfree+0xf1/0x270 [ 264.782831][T11213] ? tomoyo_path_number_perm+0x6ab/0x810 [ 264.788447][T11213] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 264.793897][T11213] ? __fget_files+0x413/0x480 [ 264.798820][T11213] ? bpf_lsm_file_ioctl+0x5/0x10 [ 264.803739][T11213] ? security_file_ioctl+0x7d/0xa0 [ 264.808828][T11213] ? ext4_fileattr_set+0x1750/0x1750 [ 264.814093][T11213] __se_sys_ioctl+0xf1/0x160 [ 264.818664][T11213] do_syscall_64+0x3b/0xb0 [ 264.823059][T11213] ? clear_bhb_loop+0x15/0x70 [ 264.827713][T11213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.833587][T11213] RIP: 0033:0x7fdb8ae11ff9 [ 264.837983][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.857567][T11213] RSP: 002b:00007fdb8928a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.865961][T11213] RAX: ffffffffffffffda RBX: 00007fdb8afc9f80 RCX: 00007fdb8ae11ff9 [ 264.873914][T11213] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 264.881864][T11213] RBP: 00007fdb8ae84296 R08: 0000000000000000 R09: 0000000000000000 [ 264.889815][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.897764][T11213] R13: 0000000000000000 R14: 00007fdb8afc9f80 R15: 00007ffcdc3d6078 [ 264.905717][T11213] [ 264.908924][T11213] Kernel Offset: disabled [ 264.913234][T11213] Rebooting in 86400 seconds..