last executing test programs: 5m52.016813434s ago: executing program 32 (id=4368): r0 = gettid() ioperm(0x7, 0x81, 0x2) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x3) 5m38.002036016s ago: executing program 33 (id=4530): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x20a0}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffff0700000008000d00000000800000000009400d000002", 0x24) 3m35.676573986s ago: executing program 34 (id=5805): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4ab, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086604, 0x20ffffef) 2m4.898281966s ago: executing program 8 (id=7094): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 2m4.650297997s ago: executing program 8 (id=7098): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x1000}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88"], 0x0) 2m4.531713315s ago: executing program 8 (id=7100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 2m4.257386406s ago: executing program 8 (id=7103): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc5, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 2m3.478570104s ago: executing program 8 (id=7111): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback, 0xa7a}, 0x1c) 2m3.407729325s ago: executing program 2 (id=7113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000001400850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m3.175390229s ago: executing program 2 (id=7117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, r1, 0x333, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 2m2.927979698s ago: executing program 2 (id=7120): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x229, &(0x7f0000000000)="$eJzsmL9rFEEUx78zt7d3Z0S0SWFjYcCI5i6316QJGkGwEiHxV6WHWUO8S04uK5gDkWBjo52FYGPhP2ARMJWFnf+AoIUKgoJXWNikWXkzc3dzGc/dbNL5PsXwnXlvZt57N/uKA8Mw/y1fv/z+/OTczMJpAAcxgYJZ/54DhNBaWv6fnt879Wz2/IvXH1+9Wz30YGvnebQljocXiv+43wPwdi6Hh/2b+ru3SUyYyQIk6R+kL0PipFm/CoGy0TchccXoEALXjb5j6Rb5l8u3l5th+VaruUhimoYqDQENtZ3xdTcEFs08juNYWPa19U6j3myGbUt4xvYXUybRv6wx7tQvDx/dOZmHFR9V8drjRxs079VmWtdPUYVE1SRRg8C8WZ9BoVcbXRIr/6Pe4Pyck7+b7fYb5UuGpCSLWsz+2pdikfChxZGpbOdMUjpnXdNhZIkHw7vyGJiokvuT8sino4SX/BbPmB90d1eM0QO4mDaLpyUAe8qrkCrC3WYxJMa7W+9d07ek7bFIvkKkfz/FtDH3PsTsVS2h05B7qdiowD5s6v4RvxQ4YfUnz+oflWjlbmVtvTO1vFJfCpfC1SCoFca0TTWiihqdvjfozyXVnw5Y5+dH+PrSx/16FLWrevSFjxKiqB2oeWB9NvObrZ83zLYIFwAc1xNqm37/xJxzh/C1j1S+pCZdJ4ZhGIZhGIZhGIZhGIZhmEwcg1D/giYQXFLefwIAAP///cxfQA==") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3d, 0x51b, &(0x7f0000000100)="$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") lgetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) 2m2.579650462s ago: executing program 2 (id=7124): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000005d00)=ANY=[], 0x5, 0x2fb, &(0x7f0000000240)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x820028, 0x0) 2m2.460339392s ago: executing program 8 (id=7127): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000f80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;w\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1T]\x97t\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) 24.606993023s ago: executing program 3 (id=8304): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x1, "02e7a14aa978094eaf0c8bbcfbc4648d428dc3bb40af0f69ac15a529f935c8e3", 0x1, 0x3, 0x5, 0xff0000, 0x6010002, 0x4}) 24.456669863s ago: executing program 3 (id=8306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x2) 24.213780972s ago: executing program 3 (id=8309): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 23.991949157s ago: executing program 3 (id=8311): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)=ANY=[@ANYBLOB='usrquota,errors=continue,nointegrity,iocharset=iso8859-13,quota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cfbf8063408bc467018bff72de0500000000000000be27743ca391588a74b3f0207c7e6c65df596db28dc20400000078ff07bc76ad2d9aec57940a264eaea3ce61ea0877f25c7b1a0b8742811cb3de11e64b1b4fee4ce65a0baed31fe29f31cc9294f61bc83650c95c04fd62fb0e0e9440fa265c906d3f8228a6e602de"], 0x3, 0x62b5, &(0x7f00000069c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 22.900113848s ago: executing program 3 (id=8322): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 16.853662132s ago: executing program 38 (id=8224): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 7.87445333s ago: executing program 39 (id=8322): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 5.650642105s ago: executing program 6 (id=8481): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r0, 0x40087101, 0x8000020001100) 5.410433248s ago: executing program 6 (id=8484): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x4}}}, 0x14) 4.529463552s ago: executing program 4 (id=8492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0xe4, r1, 0x705, 0x400000, 0x4, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xcc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0xe4}}, 0x0) 4.429335298s ago: executing program 6 (id=8493): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 4.223577863s ago: executing program 4 (id=8495): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) close(r0) 3.646585646s ago: executing program 6 (id=8498): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000240)) 3.64628751s ago: executing program 4 (id=8499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3.378265099s ago: executing program 4 (id=8503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r0}, 0x38) 3.352457874s ago: executing program 7 (id=8504): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0xfad3, 0x1, 0x0, 0x0, "f6a6756c9832488c"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x225}], 0x1) 2.86808606s ago: executing program 7 (id=8506): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 2.850528131s ago: executing program 4 (id=8508): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{}, {@usrquota}, {@attr2}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 2.118153541s ago: executing program 5 (id=8512): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.003648854s ago: executing program 0 (id=8513): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) 1.994525615s ago: executing program 6 (id=8514): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8282) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000480)="c9f1", 0x2}], 0x1) ppoll(&(0x7f0000000c40)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 1.892145967s ago: executing program 5 (id=8515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x20}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0x4}]}, &(0x7f0000000140)=0x10) 1.86478094s ago: executing program 7 (id=8516): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$eJzs3E9rXFUYB+DXSdrUxPxRa7UF6cFudHNJsnCjIEFSkA4obSO0gnBrbnTIdSbMHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzrTaaUeDFjtpeJ7NvMw5P+a9M8OBM8y5By9/9v72VpVt5b1oPPJKNHYipn9LkaIRt30cL7z0/Q/PXrl2/dJas7l+OaWLa1dXXkwpLZz/9q0Pv3ruu97cm18vfDMT+0tvH/y8+tP+mf2zB79ffa9VpVaV2p1eytONTqeX3yiLtNmqtrOU3iiLvCpSq10V3ZHxrbKzs9NPeXtzfnanW1RVytv9tF30U6+Tet1+yt/NW+2UZVmanw3ux8aXv9R1HVHXJ+Jk1HVdPxqz0YjHYj4WYjGW4vF4Ip6M0/FUnImn45k4O5g16b4BAAAAAAAAAAAAAAAAAADgeBl3/n/unvP/n0eMO/9/fsLNAwAAAAAAAAAAAAAAAAAAwDFx5dr1S2vN5vrllE5FlJ/ubuxuDB+H42tb0YoyiliOxfg1Bqf/h4b1yWiuL6eBpfik3LuV39vdmBrNrwxuJ3BP/uJrzfWVYT6N5mdi9s78aizG6fH51bvyFwb5U/H8hTvyWSzGj+9EJ8rYjJvZv/IfraT06uvNu17/3GAeAAAAHAdZ+tPY/XuW/d34MH/Y7wM399fLY/f303FuerLXTkTV/2A7L8uiO/HidkfDZ/Yi4og09p+LRkQcgTb+oThx6Jy5CTT2xVzEfcSnRr5IR+J9fhiLw1aOqf91XeLBuPWhz0y6DwAAAAAAAAAAAP6dB/F3wklfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//SPnJBA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.776504608s ago: executing program 6 (id=8517): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8800, &(0x7f0000000140)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc702009216c3788f8d158275bf4e191a6e8522c697b66e657aaf2c6096eb69da82df2961ac525b9b209c8e0e7145a598e1025c2b67936a24f1c742d606050abde8d3568c86feabac6c50a87279fda82c42180c94aa0b4bab72048694f4f8f94d112df8ec3f5ffd70a101a", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1Ka1xICBdoe4MClB5QrSmTcKiIFlBiUVhFx5QsHTvwFICSOCHFEHPgDeuDKjRMnIiVIoJ4YNPbzxOPNbtbB8c7az+cj2TO/eWa9z/i74931zOwTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB89zvfO9+JiKs/SwtWIj4VvYhuxFJdr0bE0upKXr8fES/EdnM8HxGDhYj69tvfno14PSI+Phlx/8GdtXrxhX3249t/+Ntvv3/inb/+fnD2P3/c6L0xab3bt3/57z/dPdg2AwAAQGmqqqo66W3+qfT+vtt2pwCAmcjP/1WSlx/7+lf/eOfP89Qf9SHXG7fq7/PTH7VarW6nbqrGu9ssImKzeZv6NYPD8QBwxGzGJ213gRbJv2j9iDjRdieAudZpuwMcivsP7qx1Ur6d5vPB6k57PhdkT/6bnYfXd0yaTjN6jsmsHl9b0YvnJvRnaUZ9mCc5/+5o/ld32odpvcPOf1Ym5T/cufSpODn/3mj+I45P/t2x+Zcq599/ovx78gcAAAAAgDmW//+/0vLx34WDb8q+PO747+qM+gAAAAAAAAAAT9tBx/97yPh/AAAAMLfq9+q1X5/cXTbps9jq5Vc6Ec+MrA8UJl0ss9x2PwAAAAAAAAAAAACgJP2dc3ivdCIGEfHM8nJVVfVX02j9pA56+6Ou9O2HkrX9Rx4AAHZ8fHLkWv5OxGJEXEmf9TdYXl6uqsWl5Wq5WlrIr2eHC4vVUuN9bZ7WyxaG+3hB3B9W9Q9bbNyuadr75Wntoz+vvq9h1dtHx56SQfptTmhuKWwASHaeje57RjpmqurZSS8+YA/7//Fj/2c/2n6cAgAAAIevqqqqkz7O+1Q65t9tu1MAwEzk5//R4wKHUkcc7s9Xq9VqtVr92LqpGu9us4iIzeZt6tcMhuMHgCNmMz5puwu0SP5F60fEC213AphrnbY7wKG4/+DOWifl22k+H6Tx3fO5IHvy3+xs3y7fftx0mtFzTGb1+NqKXjw3oT/Pz6gP8yTn3x3N/+pO+zCtd9j5z8qk/OvtXGmhP23L+fdG8x9xfPLvjs2/VDn//hPl35M/AAAAAADMsfz//xXHf/MmAwAAAAAAAMCRc//BnbV83Ws+/v+ZMeu5/vN4yvl35F+knH93JP8vjqzXa8zfe3s3/389uLP2u41/fjpP95v/Qp7ppEdWJz0iOumeOv00PcjWPWpr0BvW9zTodHv9dM5PNXg3rseNWI9ze9btpt/Hbvv5Pe11Twd72i/sae8/0n5xT/sgfe5AtZTbz8Ra/DhuNH7bC1O2f3FKezWlPeffs/8XKeffb3zV+S+n9s7ItHbvo+4j+31zOu5+3rr+2V+cO/zNmWoreg+3ranevtMt9Gf7d3JiGD+9tX7zzO1rGxs3z0ea7Fl6IdLkKcv5D7a/Fnb//r+0057/EjX313sfDZ84/3mxFf2J+b/UmK+395UZ960NOf9h+sr5/yC1j9//j3L+k/f/V1voDwAAAAAAAAAAAAAAADxOVVXbl4i+FRGX0vU/bV2bCQDMVn7+r5K8XK1Wq9Vq9fGrm6rx3mwWEfGX5m3q1ww/H/fDAIB59t+I+HvbnaA18i9Y/ry/evpy250BZurWBx/+8NqNG+s3b7XdEwAAAAAAAADg/5XH/1xtjP/8ckSsjKy3Z/zXt2P1oON/9vPMwwFGn/JA3xNsdYe9bmO48Rdje3zuM5PG/z4djx//uz/l/gZT2odT2hemtC+OXbqb1tgLPRpy/i82xjuv8z81Mvx6CeO/jo55P8W06I+EnP/pxuO5zv8LI+s1869+M3f5b+53xa3o7sn/7Mb7Pzl764MPX7v+/rX31t9b/9HF8+fPXbx06fLly2ffvX5j/dzO98Pp9RzI+eexr50HWpacf85c/mXJ+X8u1fIvS87/86mWf1ly/vn1nvzLkvPP733kX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv/LqZZ/WXL+r6Va/mXJ+Z9JtfzLkvM/m+p95O/j4Y+RnH8+wmX/L0vOP5/ZIP+y5PwvpFr+Zcn5X0y1/MuS83891fIvS87/K6mWf1ly/pdSLf+y5Py/mmr5lyXnfznV8i9Lzv9rqZZ/WXL+X0+1/MuS838j1fIvS87/G6mWf1ly/t9MtfzLkvP/VqrlX5ac/5upln9Zdj//34wZM2byTNt/mQAAAAAAAAAAAACAUbM4nbjtbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zF3vtEGIgBCd/A5vEhOAs2fUlvvCviwnXBigFEgq9YLvetVnwDa9dAkWyaaBEwqioomr6oi0g1EaqKqyKF7SiNC+qXl6V9gV9U1FVQmpUBRSQkNqKstXMeZ7HM7Ozc9be8Xr2PJ+PFP+8O2fmnDnzzOx+1/nuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALS7+41zn20URdH8r/XHlqJ4QfPvmya3tD73upt9hAAAAMBq/W/rz+dvS584tIIrtW3zd6/4x68vLi4uFu8f/d3xLy4upgsmi2J8Y1G0Louu/PsHGu3bBE8UE42Rto9HKnY/WnH5WMXl4xWXb6i4fGPF5RMVly85AUtsKn8e07qx7a2/bilPaXF7Md66bHuPaz3R2DgyEn+W09JoXWdx/HgxX5ws5oqZju3LbRut7b95d3Nfbyvivkba9rWtuUJ++Mlj8Rga4Rxv79jX1duMvv+GYvJHP/zksT8+/9ydvWblaei4vfI477+neZyfDp8pj7VRbEznJB7nSNtxbuvxmIx2HGejdb3m37uP8/kVHufo1cNcU92P+UQx0vr7t1vnaaz9x3rpPG0Ln/uve4uiuHT1sLu3WbKvYqTY3PGZkauPz0S5Ipu30VxKLy7Grmmd3r2Cddqcs9s712n3cyI+/neH640tcwztD9P3P7VhyeN+res0at7r5Z4r3Wtw0M+VYVmDcV18u3Wnn+y5BreH+//J+5Zfgz3XTo81mO532xq8p2oNjmwYbR1zehAaretcXYM7O7Yfbe2p0ZrP3td/DU6fP3V2euHjn3jt/KmjJ+ZOzJ3evXPnzO69e/fv3z99fP7k3Ez553We7eG3uRhJz4F7wrmLz4FXd23bvlQXvzy45+FEn+fhlq5tB/08HOu+c421eUIuXdPlc+PR5kmfuDxSLPMcaz0+O1b/PEz3u+15ONb2POz5NaXH83BsBc/D5jZnd6zse5axtv96HcON+lqwpW0Ndn8/0r0GB/39yLCswYmwLv51x/JfC7aF431y6lq/HxldsgbT3Q2vPc3PpO/3J/a3Rq91eVfzgls2FBcW5s49+PjR8+fP7SzCWBMvaVsr3et1c9t9Kpas15FrXq+H5l/x5F09Pr8lnKuJ1zb/mFj2sWpus+fB/o9V66tb7/PZ8dldRRgDttbns9dX8+b5TFmyz/lsbvPp6dV/L55yadvr7/gyr78x9/+03F+6qSdGx8fK5+9oOjvjHa/HnQ/VWOu1q9Ha9/PTK3s9Hg//rfXr8e19Xo+3dm076Nfj8e47F1+PG1U/7Vid7sdzIqyTkzP9X4+b22zdda1rcqzv6/G9YTbC+X9NSAopF7WtneXWbdrX2Nh4uF9jcQ+d63R3x/bjIZs19/X0rutbp/ffW97WaLp3V63VOp3s2nbQ6zS9Xi23ThtVP327Pt2P50RYF7fv7r9Om9s8s2f1r52b4l/bXjs3VK3B8dENzWMeT4uwfL1f3BTX4IPFseJMcbKYbV26obWeGq19TT20sjW4Ify31q+VW/uswfu7th30Gkxfx5Zbe42xpXd+ALofz4mwLp56qP8abG7zpn2D/d71/vCZtE3b967dP19b7mded3Wdphv5M6/mcf7Nvv4/m21uc3L/tebM/ufpgfCZW3qcp+7n73LPqdlibc7T1nCcz+1f/jw1j6e5zRcPrHA9HSqK4uJHH279vDf8+8qfX/jO1zv+3aXXv+lc/OjDP7j1+N9ey/EDsP79tByby691bf8ytZJ//wcAAADWhZj7R8JM5H8AAACojZj74/8Vnsj/AAAAUBsx94+FmWSS/7e+6bn5n14sUjN/MYiXp9PwSLld7LjOhI8nF69qfv7hr879+C8vrmzfI0VR/OSR3+i5/dZH4nGVJsNxXnlz5+eXXvHiivZ/5LGr27X3178Ubj/en77LYHFx8WLYsFcFd6Yoim/e9vnWfiY/cLk1n3nkSGu+59KTTzS3ef5A+XG8/rMvKbf/g1D+PXT8aMf1nw3n4Xthzry99/mI1/va5dds2/e+q/uL12vc88LW3X7qg+Xtxt+T84Unyu3jeV7u+P/qc09/rbn946/qffwXR3of/9Phdr8a5n+/vNy+/TFofhyv95lw/HF/8XoPfuVbPY//ymfL7c++pdzuSJhx//eHj7e/5bn59vP1eONox/0q3lpuF/c/853fbl0eby/efvfxTxy+3HE+ovjxM/9c3s501/bx83E/0V907b95O+3rM+7/6d860nGeq/Z/5T3Pvrx5u937f6Bru9Gu63f/xqY//Mzne+4vHs+hPzvbcX8OvTs8j8P+n/pgWI/h8v+58vmO/UZH3t35+hO3/9KWix33J3rbj8r9X3n9idb8j8kf//4tL7j1hZde2Tx3RfHt95a3V7X/E390puP4v3zHjtbjES+PHf3u/S8n7v/cx6ZOn1m4MD/bdlZbvzvnHeXxbJzYtLl5vLeF19bujw+fOf+huXOTM5MzRTFZ31+hd92+EuYPynHpWq+/47HweN71e9/cfN8/fS5+/l8eLT9/+e3l161Xh+2+ED6/pXz8Fhur3P9Td9/Ren43nik/7uixD8C27f+5f0Ubhvvf/X1BXO9nX/qh1nloXtb6uhGf16s8/u/OlrfzjXBeF8NvZr7njqv7a98+/m6Ey+8tn++rPn/hZS4+rn8SHu93fq+8/Xhc8f5+N3wf862tna93cX184+JI9+23fovHpfB6UlwqL49bxfN9+fk7eh5e/D0kxaU7Wx//TrqdO6/pbi5n4eML0yfnT194fPr83ML56YWPf+LwqTMXTp8/3Ppdnoc/XHX9q69Pm1uvT7Nze/cUM5uKojhTzKzBC9aNOf7m31Z2/GcfOza7b+a+2bnjRy8cP//Y2blzJ44tLBybm1247+jx43Mfq7r+/OzBnbsO7N63a+rE/OzB/QcO7D4wNX/6TPMwyoOqsHfmI1Onzx1uXWXh4J4DOx96aM/M1Kkzs3MH983MTF2oun7ra9NU89q/PnVu7uTR8/On5qYW5j8xd3Dngb17d1X+NsBTZ48vTE6fu3B6+sLC3Lnp8r5Mnm99uvm1r+r61NPCv5Xfz3ZrlL+Ir3jXA3vT72dt+uqnlr2pcpOuXyD6XPhdNP/worP7V/JxzP3jYSaZ5H8AAADIQcz9G8JM5H8AAACojZj7N4aZyP8AAABQGzH3T4SZZJL/9f9X0f9vU//+f3m5/n9e/f+zHy17peu9/x/78/r/ebjJ/f9V71//X/+/fv3/lffn1/vx6//r/7PUsPX/Y+7fVBRZ5n8AAADIQcz9m8NM5H8AAACojZj7bwkzkf8BAACgNmLuf0GYSSb5X/9/Rf3/XVWFq/r3/73/v/5/sT77//HB0f/PxjX379/3aMeH+v+B/r/+v/6//r/+P6s2vuwlN6v/H3P/rWEmmeR/AAAAyEHM/S8MM5H/AQAAoDZi7r8tzET+BwAAgNqIuX9LmEkm+V//3/v/6//r/9e6/7/a9/9vOxj9//XB+//3p/9f4br7/xP6/+ux/z8+2OMf7v5/5eHr/3NDDNv7/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAbMfe/JMxE/gcAAIDaiLn/9jCTTPK//r/+v/6//r/+f+/9V7//f/k3/f/hov/fn/5/Be//n1f/f8DHP9z9/0G////4m7uvr/9PL8PW/4+5/6VhJpnkfwAAAMhBzP13hJnI/wAAAFAbMfe/LMxE/gcAAIDaiLl/a5hJJvlf/1//X/9f/1//v/f+q/v/Jf3/4aL/35/+fwX9f/1//f+V9f97fPOr/08vw9b/j7n/zjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+/9fmIn8DwAAALURc/+2MJNM8r/+v/6//n9e/f8HNuj/6//Xm/5/f/r/FfT/9f/1/1f4/v9LXUv/f2PVjVEbw9b/j7n/5WEmmeR/AAAAyEHM/a8IM5H/AQAAoDZi7n9lmIn8DwAAALURc/9kmEkm+V//v179/z/966deWej/6/9X7L+m/f+4DPT/M6f/35/+fwX9f/1//f816f+Tj2Hr/8fcf3eYSSb5HwAAAHIQc/89YSbyPwAAANRGzP33hpnI/wAAAFAbMfdvDzPJJP/r/9er/x/p/+v/99t/Tfv/if5/3vT/e2h7kur/V9D/1//Pvv8fv/vV/2cwhq3/H3P/q8JMMsn/AAAAkIOY++8LM5H/AQAAoDZi7n91mIn8DwAAALURc//9YSaZ5H/9f/1//X/9f/3/3vvX/1+f1mH/f7L9A+//r/+v/79+j78e/X/v/89gDVv/P+b+14SZZJL/AQAAIAcx9+8IM5H/AQAAoDbi/79Z/n+v8j8AAADUUcz9U2EmmeR//X/9/5z6/41c+//xE/r/+v8ZWIf9/w76//r/+v/r9/j1//X/WWrY+v8x9782zCST/A8AAAA5iLn/wTAT+R8AAABqI+b+6TAT+R8AAABqI+b+mTCTTPK//r/+f079f+//r/+v/19/+v/96f9X0P/X/69b/78o9P+5qYat/x9z/84wk0zyPwAAAOQg5v5dYSbyPwAAANRGzP27w0zkfwAAAKiNmPv3hJlkkv/1//X/9f/1//X/e+9f/399Wk/9/5Een9P/1//X/1+/xz+U/X/v/89NNmz9/5j7HwozyST/AwAAQA5i7t8bZiL/AwAAQG3E3L8vzET+BwAAgNqIuX9/mEkm+V//vyb9/9/8+4596//r//fb/2D6/5v0/8PU/x8u66n/38sy/fXup8V10/+voP+v/6//r//PQA1b/z/m/gNhJpnkfwAAAMhBzP2vCzOR/wEAAKA2Yu7//2Em8j8AAADURsz9PxNmkkn+1/+vSf+/i/6//n+//Xv/f/3/Oqtp/39g9P8r6P/r/+v/6/8zUDe+/x//trL+f8z9B8NMMsn/AAAAkIOY+382zET+BwAAgNqIuf/1YSbyPwAAANRGzP2Hwkwyyf/6//r/+v/6/zem///6otsw9v+bi0f/v170//vT/6+g/6//r/+v/89ADdv7/8fc/4Ywk0zyPwAAAOQg5v6Hw0zkfwAAAKiNmPvfGGYi/wMAAEBtxNz/pjCTTPK//r/+v/6//r/3/++9f/3/9Un/vz/9/wr6//r/+v/6/wzUsPX/Y+5/c5hJJvkfAAAAchBz/1vCTOR/AAAAqI2Y+98aZiL/AwAAQG3E3P+2MJNM8r/+v/6//r/+v/5/7/3r/69P+v/96f9X0P/X/9f/1/9noIat/x9z/8+FmWSS/wEAACAHMfc/EmYi/wMAAEBtxNz/9jAT+R8AAABqI+b+d4SZZJL/9f/1/9dD/79RFJeaj4n+v/5/of+v/19B/78//f8K+v/6//r/+v8M1LD1/2Puf2eYSSb5HwAAAHIQc//Ph5nI/wAAAFAbMfe/K8xE/gcAAIDaiLn/F8JMMsn/+v/6/+uh/+/9//X/V93/b15J/z8L+v/96f9X6NH/36j/r/+v/6//z3Ubtv5/zP3vDjPJJP8DAABADmLuf0+YifwPAAAAtRFz/3vDTOR/AAAAqI2Y+x8NM8kk/+v/Z9n/T3dZ/7+k/59B/9/7/2dD/78//f8K3v9f/1//X/+fgRq2/n/M/Y+FmWSS/wEAACAHMfe/L8xE/gcAAIDaiLn/F8NM5H8AAACojZj73x9mkkn+1//Psv/v/f/XrP8/1rE+cur/T7Q9nmld6v/r/68B/f/+9P8r6P/r/w9z/z+s5k3LXF//n2E0bP3/mPs/EGaSSf4HAACAHMTc/0thJvI/AAAA1EbM/b8cZiL/AwAAQG3E3P8rYSaZ5H/9f/1//X/v/+/9/3vvX/9/fdL/70//v4L+v/7/MPf/K+j/M4yGrf8fc/+vhplkkv8BAAAgBzH3fzDMRP4HAACA2oi5/3CYifwPAAAAtRFz/5Ewk0zyv/5/d/8/vqOq/r/+v/6//r/+/3o0uP7/y24tCv1//X/9f/1//X/9f1Zj2Pr/MfcfDTPJJP8DAABADmLu/7UwE/kfAAAAaiPm/mNhJvI/AAAA1EbM/bNhJpnkf/1/7/8/qP7/T/T/9f8D/f/e9P/Xhvf/70//v4L+v/6//r/+PwM1bP3/mPvnwkwyyf8AAABQY+nHwTH3Hw8zkf8BAACgNmLuPxFmIv8DAABAbcTc/6Ewk0zyv/6//r/3/78Z/f+xju31/0v6//r/g6D/35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAAAgBzH3fzjMRP4HAACA2oi5/yNhJvI/AAAA1EbM/SfDTDLJ//r/+v+59/8bRXHJ+//r//fav/7/+qT/35/+fwX9f/1//X/9fwZq2Pr/MfefCjPJJP8DAABADmLuPx1mIv8DAABAbcTcfybMRP4HAADg/9i7j2Y57yqP422PrLCYmnkJs57VLMcrNrwAtuyoYk0VYBMN2CZnMDkHk3POyeScc7SJJicTDVWiuDrnSFfdevpKt3X76f/5fDYHqyRuS74w8xvXd/4MI3f/veOWJvtf/6//797/L7by/v/+n6//P0P/r//fhKX+/tjF/foL9v//9//X3kP/r//X/0/S/+v/9f+cb279f+7++8QtTfY/AAAAdJC7/75xi/0PAAAAw8jdf03cYv8DAADAMHL3Xxu3NNn/+n/9v/5f/7+v/79F/7+t/v+E/n8jvP8/Tf+/hv5f/6//1/+zUXPr/3P33y9uabL/AQAAoIPc/fePW+x/AAAAGEbu/gfELfY/AAAADCN3/wPjlib7X/+v/9f/6/+9/7/663v/fzfp/6fp/9fQ/+v/9f/6fzZqbv1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADDyN1/Xdxi/wMAAMAwcvc/JG5psv/1/0fZ/8fPukH/r//f//P1/2fo//X/m3Dz4ux/J+j/l+n/11jT/y8W+v8pB+7nV//2dufzX4D+X//Psrn1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAADCN3//Vxi/0PAAAAw8jdf0Pc0mT/6/+9/6//1//r/1d/ff3/bvL+/7TD9///+9/3umff/t/7/4v9//vyebz/r//X/3O+ufX/uftvjFua7H8AAADoIHf/w+MW+x8AAACGkbv/EXGL/Q8AAADDyN3/yLilyf7X/7fp//dqF/2//l//r/8fnf5/mvf/19j7r7lT9Zf6/6Pt53f98+v/9f8sm1v/n7v/UXFLk/0PAAAAHeTuf3TcYv8DAADAMHL3PyZusf8BAABgGLn7Hxu3NNn/+v82/b/3//X/+n/9fwv6/2kH7P9v793/D/D+/yV+12y7nz+sbX/+Xv3/8aVfr/9nlbn1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAADCN3/xPiFvsfAAAAhpG7/4lxS5P9r//X/+9G/59fQf+v/9f/6/+n7Wb/f3X9x2gm/X/z9/8H6P8v0bb7+V3//L36/2X6f1aZW/+fu/9JcUuT/Q8AAAAd5O5/ctxi/wMAAMAwcvc/JW6x/wEAAGAYufufGrc02f/6f/3/bvT/3v/X/+v/9f8Hs5v9/1n6f/2//n93P7/+X//Psrn1/7n7b4pbmux/AAAA6CB3/9PiFvsfAAAAhpG7/+lxi/0PAAAAw8jd/4y4pcn+1//r//X/+n/9/+qvr//fTfr/afr/NfT/+n/9v/6fjZpR/3/Orzq5eGbc0mT/AwAAQAe5+58Vt9j/AAAAMIzc/c+OW+x/AAAAGEbu/ufELU32v/5/Nv3/Xs43Vv9/arFY6P8XTfv/U+f8/azvS/2//v8I6P+n6f/XGKb/v+qifttp2/38YV348x/s+0D/r/9n82bU/+/9de7+58YtTfY/AAAAdJC7/3lxi/0PAAAAw8jd//y4xf4HAACAYeTuf0Hc0mT/6/8vov+/5j8v+O/n/f/9n9/7/6u/Pzr1/97/X3aQ/v8/9P+Hpv+fpv9fY5j+/9KM2/97/1//z7bMrf/P3f/CuOn4pf2/TQEAAABmKHf/i+KWJv/8HwAAADrI3f/iuMX+BwAAgB1109KP5O5/SdzSZP/r/zf7/v/xc35M/6//P//7Q/+v//f+/+Wn/5928P7/ztP6f/2//l//r//nsObW/+fuf2nc0mT/AwAAQAe5+2+OW+x/AAAAGEbu/pfFLfY/AAAADCN3/8vjlib7X/+/2f7/XPp//f/53x/6f/2//v/yO8r+/9jQ/b/3//X/+v8t9P8nzv5L/T9juIj+//Tp09df9v4/d/8r4pYm+x8AAAA6yN3/yrjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/037//xW1//v0f/r/1d9ff3/bvL+/zT9/xr6f/2/9//1/2zU3N7/z93/mrilyf4HAACADnL3vzZusf8BAABgGLn7Xxe32P8AAAAwjNz9r49bmux//X/T/t/7//p//f9R9/93LvT/R2In+v9TF/76c+//b9T/6/8ntOv/73b1vr/U/+v/WTa3/j93/xvilib7HwAAADrI3f/GuMX+BwAAgGHk7n9T3GL/AwAAwDBy9785bjrWZP/r//X/+n/9v/5/9dc/4vf/jy8WC/3/BuxE/z9h7v2/9//1/1Pa9f/n0f/r/1k2t/4/d/9b4pYm+x8AAAA6yN3/1rjF/gcAAIBh5O5/W9xi/wMAAMAwcve/PW5psv/1//p//b/+f/j+/8ad6P+9/78h+v9p+v819P/6f/2//p8jsa3+P3f/O+KWJvsfAAAAOsjd/864xf4HAACAYeTuf1fcYv8DAADAMHL3vztuabL/9f/6f/2//v/E7Pr/k/v+/Zq8/6//3xD9/zT9/xr6f/2//v8m/T+bNLf3/3P3vyduabL/AQAAoIPc/e+NW/+nW/sfAAAAhpG7/31xi/0PAAAAw8jd//64pcn+1//r//X/+v/h3//X/7ei/5+m/19D/6//1/97/5+Nmlv/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgGLn7b4lbmux//b/+X/+v/9f/n/l7qP8fg/5/2tH0/6f0//r/6ueviP8U6P/1/+t+PWOaW/+fu//DcUuT/Q8AAAAd5O7/SNxi/wMAAMAwcvd/NG6x/wEAAGAnHVvxY7n7Pxa3NNn/+v+p/v+Y/l//vxv9f/4R6P/3eP+/N/3/NO//r6H/v8h+/n/2/dWuvf9//v/80v/r/9m8ufX/ufs/Hrc02f8AAADQQe7+T8Qt9j8AAAAMI3f/J+MW+x8AAACGkbv/U3FLk/2v//f+v/5/gP7f+//6f4r+f5r+fw39/1bfz9/1z6//1/+zbG79f+7+T8ctTfY/AAAAdJC7/zNxi/0PAAAAw8jd/9m4xf4HAACAYezt/ozLGu5//b/+X/+v/9f/r/76+v/dpP+fpv9fQ/+v/9f/6//ZqLn1/5/b+1UnF5+PW5rsfwAAAOggd/8X4hb7HwAAAIaRu/+LcYv9DwAAAMPI3f+luKXJ/tf/6/93o/8/ffr09fp//f/+38/Z/v82/T9F/z9N/7+G/l//r//X/7NRc+v/c/d/OW5psv8BAACgg9z9X4lb7H8AAAAYRu7+r8Yt9j8AAAAMI3f/1+KWJvtf/z+D/v+k/t/7//r/hff/9f8bov+fpv9fY8T+/+TBf/vb7ucPa9ufX/+v/2fZ3Pr/3P1fj1ua7H8AAADoIHf/N+IW+x8AAACGkbv/m3GL/Q8AAADDyN3/rbilyf7X/x9d///vP7su7/+fWqz+/Pp//b/+X/9/uen/p+n/1xix/78I2+7nd/3z6//1/yybW/+fu//bcUuT/Q8AAAAd5O7/Ttxi/wMAAMAwcvd/N26x/wEAAGAYufu/F7c02f/6/xm8/z9g/7+XO+Y3i/5f/5/fl/Pu/6/U/49B/z9N/7+G/l//r//fUP+f3836/+7m1v/n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P23xi32PwAAAAwjd/9tccs5+39V2z0K/b/+/7L1/97/X/r+0P/Puv/3/v8g9P/TDtr/n1gcrv9P+n/9v/6/a//v/X/OmFv/n7v/h3GLf/4PAAAAO+eqC/x47v4fxS32PwAAAAwjd/+P4xb7HwAAAIaRu/8nccsdV27rIx0p/b/+X/+v/9f/r/76+v/dpP+f5v3/NfT/m+jn76L/H6P/Xyz0/xze3Pr/3P0/jVv8838AAAAYRu7+n8Ut9j8AAAAMI3f/7XGL/Q8AAADDyN3/87ilyf7X/+v/D9n/76WZM+r/73rrmX+p/5/4+vp//f/I9P/T9P9r6P+9/6//9/4/GzW3/j93/y/ilib7HwAAADrI3f/LuMX+BwAAgGHk7v9V3GL/AwAAwDBy9/86bmmy/7fW/8cftf5/5/t/7//r//X/+v9Z0f9P0/+vof/X/+v/9f9s1Nz6/9z9v4lbmux/AAAA6CB3/2/jFvsfAAAAdtBVK380d//v4hb7HwAAAIaRu//3cUuT/e/9f/2//l//r/9f/fX1/7tJ/z9N/79a/Y0aof8/fpDf8Wrb7ucPa9ufX/+v/2fZ3Pr/3P1/iFua7H8AAADoIHf/H+MW+x8AAACGkbv/jrjF/gcAAIBh5O7/U9zSZP/r//X/2+7/jy/0//r/M7bX/193+5lfqf8fgf5/2jb7/7v/1/ov6/3/rb//nx9B/6//1/+zEXPr/3P3/zluabL/AQAAoIPc/X+JW+x/AAAAGEbu/r/GLfY/AAAADCN3/9/ilib7f03/f6J+ov5/kv5//+f3/v/q7w/9/1z7/9VfX/+/m/T/02b0/v8Vq/5w9P9b7/+9/6//1/+zUXPr/3P3/z1uabL/AQAAoIPc/XfGLfY/AAAADCN3/z/iFvsfAAAAhpG7/59xS5P97/1//b/+X/+v/1/99fX/u0n/P21G/f9K+n/9/y5/fv2//p9lc+v/c/f/KwAA//9dk1th") sync() truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 1.730817833s ago: executing program 0 (id=8518): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) 1.606915934s ago: executing program 5 (id=8519): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f0000000180)={[{@uid}, {@nodecompose}, {@uid}, {@nls={'nls', 0x3d, 'cp949'}}, {@umask={'umask', 0x3d, 0x1f}}, {@barrier}]}, 0x13, 0x6ad, &(0x7f0000000280)="$eJzs3U2InHcdB/DvM5nMZiKk2zZNowhdGijaYLKboSaC0CgiOQQJeul1STbNkklaNlvZFjETtRU8eZIePFRkPfQkIkI9ifUsCF485R7w5iEHdcvzzMvO7kw2u9lsZtt+PvDs83/m//Z7fnleZp7NMgE+ty68loOdFLlw8uJKuX23SLLaulGVV1vtJFNJakm9u0rRTIqPk/PpLvli+WJvuOJB87xy76Oi/v6Hre5WvbdU7Wtb9RsxtmUnOTTYOJBkplv877aHHRmvWqpxLq+P94iKQdxlwk70EweTtjais15Ze2j37Z+3wL51u3vfHDGdHE737lq+D0jv6vDwK8PkbXlt6jy5OAAAAGCvjP0sP+yp+7mflRx5MuEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAZ0PR/c7AorfU+uWZFP3v/28Mfad+Y8Lh7tK7V6vV95+adCAAAAAAAAAAsCsv3M/9rORIf3utqH7n/2K1cbT6+YW8lVtZyFJOZSXzWc5yljKXZHpooMbK/PLy0txoz1+l7Lm2tna71/PM2J5nNsbV2RzouP9pMNIIAAAAAAAAAD63fpIL67//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aBIDnRX1XK0X55OrZ7kUJJGMTNo3phosI/BXyYdAAAAAOy9Zm99pPh/t7BWVJ/5j1Wf+w/lrdzMchaznHYWcqV6FtD91F/7R6fVvrvaulEuowN/6987iqMaMd1nD+Nnnq1aPDfocSHfzQ9yMjO5lKUs5oeZz3IWMpPvVKX5FJnuPb2YvrvaTD/W0XjPb9i6tDm2F4bKZXzHq0iauZrFKrZTudzoh17rtTs+NNufGunlbeBOmZ3i1Z5t5uhKb12O9cuMjDlB09WeHxxkZLaX+zIbTw/nfTT3OzxONs80l9rgGdTR9VnKzc0zPVLOD/fWZa7f29uc7/BR2sZMdH5RbvWPvmNb5zz56j//eula7eb1a1dvndw/h9Ej2nxMtIYy8fy2MtEuM9HZRSYO7Sb+x6fRy0b3Krqzq+WLVd8jWcz38kauZCFnM5u5nMtsvpEzaeXMUF6f2zqv1blW29m5duIrvUJ5T/r50L3piZl6UEWZ16eH8jp8pZuu6oZfWc/SM9vIUtHI+Cz9a2wo9S/1CuUcPx2640ze5kzMDWXi2a0z8Zv/rSW51b55fena/JvbnO+l3ro8bd/deG3+7WPZoR2pZ/0fozxenum/9l42HB1l3bP9uk35KuuKen/Ejfe5RiPV+dytftiZWo507E6/9fBI3brnM66uVdUdH6rb8C4nb6Q9eBcCwD52+OXDjea95t+bHzR/1rzWvHjo21Pnpr7cyMG/1f984Pe139W+WbycD/LjHJl0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Flw6+13rs+32wtL+7CQ2mMe8M7Yqn4quq809se+f1oLU1sdUX9IskX3xiRibibZF6lL/QnMNZUxVRcHrzST2iCeJNf3yRfcAXvh9PKNN0/fevudry3emH994fWFm2fOnX31bOvrc7dPX11sL8x2f046SmAvrL8NmHQkAAAAAAAAAAAAwHZt+guBRjLuLwR2VxgzbdGZwL4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn04XXsvBTorMzZ6aLbfvrrba5dIvr7esJ6klKX6UFB8n59NdMj00XPGgeV6599GvX3r/w9b6WPV++9qmfn/8z9raDvei01syk+RAb/1wU9sa7/LQeJ0dBtZVDPawTNiJfuJg0j4JAAD//0NcA4E=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 1.392181153s ago: executing program 0 (id=8520): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getdents(r0, 0x0, 0x0) 1.116340496s ago: executing program 5 (id=8521): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5b51fe6b174ebd990000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r1, r0, 0x4, 0x0, 0x0, @void, @value}, 0x10) 1.103833992s ago: executing program 0 (id=8522): r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffa, "00c74f00000000120000010000fcff00"}) 890.707233ms ago: executing program 7 (id=8523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000400000000001b0000000700210030", @ANYRESOCT], 0x1c}}, 0x0) 794.921619ms ago: executing program 0 (id=8524): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000100), 0x0, 0x0}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 701.518483ms ago: executing program 5 (id=8525): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000640)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496c6f6ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8491ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058312dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cd673b5c2f965fcecbf0d62972a98e12a14a3d980d6a37926d88c7c32c4"], 0x1, 0x2e0, &(0x7f0000000340)="$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") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x443, 0x1ff) 441.100636ms ago: executing program 0 (id=8526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) 399.366115ms ago: executing program 5 (id=8527): mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) 398.713211ms ago: executing program 7 (id=8528): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000104000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="76130000000000003c0012800b00010067656e65766500002c000280050004000300000005000a000100000005000300920000000500080001000000050009"], 0x5c}}, 0x40800) 187.517547ms ago: executing program 4 (id=8529): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 0s ago: executing program 7 (id=8530): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "f4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0xc}], 0x10, 0x500}}], 0x2, 0x40058) kernel console output (not intermixed with test programs): ][T24027] btrfs: Deprecated parameter 'usebackuproot' [ 658.289818][T24027] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 658.307157][T24027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7536 (24027) [ 658.343696][T24027] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 658.361187][T24027] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 658.380097][T24027] BTRFS info (device loop3): using free-space-tree [ 658.507423][ T52] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 658.507875][T24027] BTRFS warning (device loop3): couldn't read tree root [ 658.507900][T24027] BTRFS warning (device loop3): try to load backup roots slot 1 [ 658.508182][ T52] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 658.508310][T24027] BTRFS warning (device loop3): couldn't read tree root [ 658.508331][T24027] BTRFS warning (device loop3): try to load backup roots slot 2 [ 658.508595][ T52] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 658.510068][T24027] BTRFS warning (device loop3): couldn't read tree root [ 658.510094][T24027] BTRFS warning (device loop3): try to load backup roots slot 3 [ 658.570991][T24027] BTRFS info (device loop3): rebuilding free space tree [ 658.624435][T24027] BTRFS info (device loop3): checking UUID tree [ 658.766912][ T5840] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 659.239261][T24080] netlink: 'syz.7.7554': attribute type 3 has an invalid length. [ 659.737117][T24092] loop7: detected capacity change from 0 to 2048 [ 659.769434][T24096] loop3: detected capacity change from 0 to 512 [ 659.801464][T24092] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 659.809407][T24092] UDF-fs: Scanning with blocksize 512 failed [ 659.814155][T24096] EXT4-fs: Ignoring removed oldalloc option [ 659.839193][T24096] EXT4-fs: Ignoring removed orlov option [ 659.868668][T24096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.877837][T24077] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 659.934005][T24092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.947639][T24096] EXT4-fs (loop3): orphan cleanup on readonly fs [ 659.991517][T24096] EXT4-fs error (device loop3): ext4_quota_enable:7097: comm syz.3.7560: Bad quota inum: 783360, type: 0 [ 660.012709][T24101] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.7535'. [ 660.091105][T24096] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=783360). Please run e2fsck to fix. [ 660.159700][T24096] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 660.168941][T24104] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 660.168941][T24104] program syz.9.7563 not setting count and/or reply_len properly [ 660.193684][T24096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.245691][T24105] loop1: detected capacity change from 0 to 4096 [ 660.321047][T24108] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 660.379557][T24112] loop4: detected capacity change from 0 to 256 [ 660.421612][T24112] exfat: Deprecated parameter 'utf8' [ 660.427055][T24112] exfat: Deprecated parameter 'namecase' [ 660.437338][T24112] exfat: Deprecated parameter 'utf8' [ 660.448551][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.526247][T24112] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 660.569350][T24116] loop9: detected capacity change from 0 to 128 [ 660.601479][T24116] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 660.646384][T24116] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 660.696444][T24118] loop3: detected capacity change from 0 to 1024 [ 660.707173][T24116] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00ff0003) [ 660.751124][T24116] FAT-fs (loop9): Filesystem has been set read-only [ 660.762856][T24125] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00ff0003) [ 660.771220][T24118] EXT4-fs: Ignoring removed nobh option [ 660.823630][T24118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.056122][T24136] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7578'. [ 661.213864][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.257178][T24145] loop7: detected capacity change from 0 to 4096 [ 661.332242][T24145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.358866][T24147] loop1: detected capacity change from 0 to 4096 [ 661.368379][T24147] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 661.476973][T24145] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 661.517868][T24158] netlink: 'syz.3.7586': attribute type 1 has an invalid length. [ 661.544699][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7586'. [ 661.624714][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.917114][T24170] loop1: detected capacity change from 0 to 2048 [ 661.956018][T24172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 662.042722][T24173] loop4: detected capacity change from 0 to 1024 [ 662.144548][T24173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.238625][T24187] loop1: detected capacity change from 0 to 128 [ 662.289449][T24187] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 662.331972][T24187] ext4 filesystem being mounted at /1241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 662.346217][T24195] loop7: detected capacity change from 0 to 64 [ 662.454221][ T29] audit: type=1800 audit(1739476472.820:310): pid=24195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7602" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 662.515582][T24187] EXT4-fs warning (device loop1): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 662.541642][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.563043][T24187] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted [ 662.622237][T24197] loop3: detected capacity change from 0 to 4096 [ 662.632579][T24197] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 662.825532][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 663.118372][T24215] loop7: detected capacity change from 0 to 512 [ 663.170932][T24215] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 663.242937][T24215] EXT4-fs (loop7): 1 orphan inode deleted [ 663.248733][T24215] EXT4-fs (loop7): 1 truncate cleaned up [ 663.306374][T24215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.354431][T24221] loop1: detected capacity change from 0 to 512 [ 663.421501][T24221] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 663.458073][T24221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 663.486384][T24221] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.7615: corrupted in-inode xattr: e_value size too large [ 663.502458][T24221] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.7615: couldn't read orphan inode 15 (err -117) [ 663.521381][T24221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.596081][T24183] loop9: detected capacity change from 0 to 32768 [ 663.597990][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.665326][T24183] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7597 (24183) [ 663.715989][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7618'. [ 663.730785][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.738366][T24183] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 663.769539][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7618'. [ 663.770188][T24183] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 663.873350][T24183] BTRFS info (device loop9): using free-space-tree [ 664.062076][T23054] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 664.223587][T24263] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7625'. [ 664.482347][T24271] loop3: detected capacity change from 0 to 256 [ 664.623677][T24271] FAT-fs (loop3): Directory bread(block 64) failed [ 664.651961][T24271] FAT-fs (loop3): Directory bread(block 65) failed [ 664.668892][T24271] FAT-fs (loop3): Directory bread(block 66) failed [ 664.701794][T24271] FAT-fs (loop3): Directory bread(block 67) failed [ 664.719488][T24271] FAT-fs (loop3): Directory bread(block 68) failed [ 664.736876][T24271] FAT-fs (loop3): Directory bread(block 69) failed [ 664.755074][T24271] FAT-fs (loop3): Directory bread(block 70) failed [ 664.793551][T24271] FAT-fs (loop3): Directory bread(block 71) failed [ 664.800813][T24271] FAT-fs (loop3): Directory bread(block 72) failed [ 664.816416][T24271] FAT-fs (loop3): Directory bread(block 73) failed [ 665.051033][T24287] loop9: detected capacity change from 0 to 4096 [ 665.480180][T24304] tipc: Started in network mode [ 665.491712][T24304] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 665.511566][T24304] tipc: Enabled bearer , priority 0 [ 665.923616][ T5981] kernel write not supported for file /input/event0 (pid: 5981 comm: kworker/1:8) [ 666.462465][T24348] loop3: detected capacity change from 0 to 128 [ 666.502294][T24348] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 666.523504][T24348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.640470][ T25] tipc: Node number set to 10005162 [ 666.730882][T24358] delete_channel: no stack [ 666.922275][T24367] netlink: 'syz.1.7679': attribute type 30 has an invalid length. [ 667.194426][T24375] loop4: detected capacity change from 0 to 512 [ 667.233084][T24375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 667.242711][T24375] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 667.273427][T24375] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 667.367155][T24375] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.7683: attempt to clear invalid blocks 2 len 1 [ 667.421586][T24375] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7683: invalid indirect mapped block 1819239214 (level 0) [ 667.487874][T24375] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7683: invalid indirect mapped block 1819239214 (level 1) [ 667.542048][T24375] EXT4-fs (loop4): 1 truncate cleaned up [ 667.554978][T24375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.631281][T24375] EXT4-fs: Ignoring removed orlov option [ 667.650946][T24375] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 667.703433][T24375] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.7683: Abort forced by user [ 667.737656][T24375] EXT4-fs (loop4): Remounting filesystem read-only [ 667.759020][T24375] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 667.923686][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.223228][T24421] loop1: detected capacity change from 0 to 512 [ 668.283051][T24421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.283162][T24421] ext4 filesystem being mounted at /1265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.357906][T24421] EXT4-fs error (device loop1): ext4_get_first_dir_block:3541: inode #12: comm syz.1.7705: Attempting to read directory block (0) that is past i_size (3) [ 668.408454][T24421] EXT4-fs (loop1): Remounting filesystem read-only [ 668.516158][ T29] audit: type=1326 audit(1739476478.890:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.597855][ T29] audit: type=1326 audit(1739476478.890:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.646080][ T29] audit: type=1326 audit(1739476478.920:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.655177][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.702442][ T175] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 668.733901][ T175] Quota error (device loop1): write_blk: dquota write failed [ 668.754282][ T175] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 668.788646][ T29] audit: type=1326 audit(1739476478.920:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.832038][ T29] audit: type=1326 audit(1739476478.920:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.855045][ T29] audit: type=1326 audit(1739476478.940:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.916706][ T29] audit: type=1326 audit(1739476478.940:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 668.970042][ T29] audit: type=1326 audit(1739476478.940:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24428 comm="syz.3.7708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 669.444418][T16557] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 669.624314][T16557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.640115][T16557] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.670048][T16557] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 669.679143][T16557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.704668][T24471] loop3: detected capacity change from 0 to 24 [ 669.730652][T16557] usb 5-1: config 0 descriptor?? [ 669.731715][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 669.745131][T24471] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 669.776782][T24471] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 669.923791][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.981989][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.010996][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.055104][ T25] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 670.074647][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7733'. [ 670.080186][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.122809][ T25] usb 2-1: config 0 descriptor?? [ 670.156490][T16557] holtek 0003:1241:5015.003F: unbalanced collection at end of report description [ 670.194703][T16557] holtek 0003:1241:5015.003F: parse failed [ 670.217011][T16557] holtek 0003:1241:5015.003F: probe with driver holtek failed with error -22 [ 670.376245][T16557] usb 5-1: USB disconnect, device number 14 [ 670.483367][T24499] loop9: detected capacity change from 0 to 64 [ 670.539219][ T25] hid-udraw 0003:20D6:CB17.0040: unknown main item tag 0x0 [ 670.551447][ T25] hid-udraw 0003:20D6:CB17.0040: unknown main item tag 0x0 [ 670.570612][ T25] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0040/input/input50 [ 670.589138][T24501] loop3: detected capacity change from 0 to 256 [ 670.606154][T24501] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 670.662658][ T25] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0040/input/input51 [ 670.695981][ T25] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0040/input/input52 [ 670.723848][ T25] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0040/input/input53 [ 670.738170][T24506] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 670.774649][ T25] hid-udraw 0003:20D6:CB17.0040: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 670.805579][ T25] usb 2-1: USB disconnect, device number 36 [ 670.911309][T24509] loop9: detected capacity change from 0 to 512 [ 670.932278][T24509] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 670.990906][T24509] EXT4-fs (loop9): 1 orphan inode deleted [ 671.017756][T24509] EXT4-fs (loop9): 1 truncate cleaned up [ 671.026788][T24509] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.071894][T24509] EXT4-fs error (device loop9): ext4_search_dir:1505: inode #12: block 7: comm syz.9.7746: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 671.140999][T24509] EXT4-fs (loop9): Remounting filesystem read-only [ 671.241591][T23054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.980162][ T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 672.006366][T24521] loop4: detected capacity change from 0 to 32768 [ 672.052413][T24521] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.110655][T16557] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 672.148979][ T8] usb 10-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 672.175991][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.215367][ T8] usb 10-1: Product: syz [ 672.235231][ T8] usb 10-1: Manufacturer: syz [ 672.247935][ T8] usb 10-1: SerialNumber: syz [ 672.274866][T24521] XFS (loop4): Ending clean mount [ 672.310837][ T8] r8152-cfgselector 10-1: Unknown version 0x0000 [ 672.317360][T16557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.338725][ T8] r8152-cfgselector 10-1: config 0 descriptor?? [ 672.345224][T16557] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 672.363793][T16557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.375647][T16557] usb 2-1: config 0 descriptor?? [ 672.400059][T23071] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.767505][ T25] r8152-cfgselector 10-1: USB disconnect, device number 6 [ 672.805524][T16557] logitech 0003:046D:C50C.0041: unbalanced delimiter at end of report description [ 672.830025][T16557] logitech 0003:046D:C50C.0041: parse failed [ 672.836361][T16557] logitech 0003:046D:C50C.0041: probe with driver logitech failed with error -22 [ 673.014489][T16557] usb 2-1: USB disconnect, device number 37 [ 673.420394][T24569] loop4: detected capacity change from 0 to 32768 [ 673.728970][T24585] loop9: detected capacity change from 0 to 4096 [ 674.212581][T24597] loop3: detected capacity change from 0 to 4096 [ 674.490265][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 674.490289][ T29] audit: type=1800 audit(1739476484.860:327): pid=24597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7783" name="file0" dev="loop3" ino=33 res=0 errno=0 [ 674.524125][T24613] loop9: detected capacity change from 0 to 256 [ 674.614018][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7792'. [ 675.251175][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 675.253775][T24630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.423434][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 675.456320][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 675.507019][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 675.557168][ T8] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 675.567439][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.575690][T24642] loop4: detected capacity change from 0 to 512 [ 675.610036][ T8] usb 2-1: Product: syz [ 675.610353][T24642] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.7803: casefold flag without casefold feature [ 675.620766][ T8] usb 2-1: Manufacturer: syz [ 675.648944][T24642] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.7803: couldn't read orphan inode 15 (err -117) [ 675.712585][ T8] usb 2-1: SerialNumber: syz [ 675.721658][T24618] loop7: detected capacity change from 0 to 32768 [ 675.721880][T24642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.742446][T24618] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7793 (24618) [ 675.765273][ T8] usb 2-1: config 0 descriptor?? [ 675.780066][ T5981] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 675.789266][T24626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 675.826324][T24618] BTRFS info (device loop7 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 675.875260][T24618] BTRFS info (device loop7 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 675.921631][T24618] BTRFS info (device loop7 state S): using free-space-tree [ 675.962621][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.001749][ T5981] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 676.010590][ T5981] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.034308][ T5981] usb 10-1: config 0 has no interface number 0 [ 676.071501][ T8] powermate: unknown product id 0240 [ 676.080069][ T8] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 676.081812][ T5981] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 676.120223][ T5981] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.135541][ T8] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 676.160219][ T5981] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 676.171082][ T5981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.180978][ T5981] usb 10-1: Product: syz [ 676.185319][ T5981] usb 10-1: Manufacturer: syz [ 676.190379][ T5981] usb 10-1: SerialNumber: syz [ 676.197416][ T5981] usb 10-1: config 0 descriptor?? [ 676.210440][T23266] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 676.252765][T24673] loop4: detected capacity change from 0 to 512 [ 676.327160][T24673] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7806: invalid indirect mapped block 256 (level 2) [ 676.371124][T23266] usb 4-1: Using ep0 maxpacket: 32 [ 676.388607][T23266] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 676.399853][T23266] usb 4-1: config 0 has no interface number 0 [ 676.417572][T23266] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 676.437448][T24673] EXT4-fs (loop4): 2 truncates cleaned up [ 676.443382][T23266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.461570][T24673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.480125][T23266] usb 4-1: Product: syz [ 676.484320][T23266] usb 4-1: Manufacturer: syz [ 676.488934][T23266] usb 4-1: SerialNumber: syz [ 676.494645][T16629] BTRFS info (device loop7 state S): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 676.542271][T23266] usb 4-1: config 0 descriptor?? [ 676.586456][T23266] smsc95xx v2.0.0 [ 676.612615][ C0] powermate: config urb returned -71 [ 676.618159][ C0] powermate: config urb returned -71 [ 676.623829][ C0] powermate: config urb returned -71 [ 676.629752][T16822] usb 2-1: USB disconnect, device number 38 [ 676.635857][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 676.743257][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.890427][ T25] usb 10-1: USB disconnect, device number 7 [ 677.247974][T23266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 677.259370][T23266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 677.323460][T23266] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 677.355677][T24700] loop4: detected capacity change from 0 to 128 [ 677.365930][T23266] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 677.389171][T24700] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 677.395128][T23266] usb 4-1: USB disconnect, device number 44 [ 677.465165][T24700] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 677.532907][T24700] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.7812: checksumming directory block 0 [ 677.639385][T24710] loop7: detected capacity change from 0 to 512 [ 677.700842][T24710] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.715699][T23071] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 677.844352][T24710] Quota error (device loop7): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 677.890412][T24710] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 677.977309][ T29] audit: type=1326 audit(1739476488.350:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24692 comm="syz.0.7811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320318cde9 code=0x7fc00000 [ 678.281651][T16629] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 678.647176][T24751] loop4: detected capacity change from 0 to 128 [ 678.658188][T24752] loop7: detected capacity change from 0 to 256 [ 678.678170][T24752] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 678.716100][T24751] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 678.925393][T24759] loop3: detected capacity change from 0 to 512 [ 678.970675][T24764] cifs: Bad value for 'port' [ 679.067135][T24759] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7833: bg 0: block 248: padding at end of block bitmap is not set [ 679.134564][T24759] Quota error (device loop3): write_blk: dquota write failed [ 679.143033][T24759] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 679.160403][ T5894] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 679.168623][T24759] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.7833: Failed to acquire dquot type 1 [ 679.234030][T24759] EXT4-fs (loop3): 1 truncate cleaned up [ 679.245772][T24759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.287313][T24759] ext4 filesystem being mounted at /1345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.360202][ T5894] usb 10-1: Using ep0 maxpacket: 16 [ 679.379583][T24759] Quota error (device loop3): write_blk: dquota write failed [ 679.397380][ T5894] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.411398][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.431023][T24759] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 679.444100][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 679.471926][ T5894] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 679.482511][T24759] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.7833: Failed to acquire dquot type 1 [ 679.518087][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.557733][ T5894] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 679.579049][ T5894] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 679.611646][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7845'. [ 679.620643][ T5894] usb 10-1: Manufacturer: syz [ 679.627168][ T5894] usb 10-1: config 0 descriptor?? [ 679.658613][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.681779][ T3572] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 679.693954][ T3572] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 1 [ 679.972491][ T5894] rc_core: IR keymap rc-hauppauge not found [ 679.982960][T24802] loop4: detected capacity change from 0 to 1024 [ 679.999652][ T5894] Registered IR keymap rc-empty [ 680.021607][T24802] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 680.021658][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.050429][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.076907][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 680.118748][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input56 [ 680.212609][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.244130][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7855'. [ 680.280245][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.300571][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.352234][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.391052][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.423214][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.469562][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.511188][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.540037][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.568265][ T5894] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 680.611506][ T5894] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 680.637872][ T5894] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 680.660721][ T5894] usb 10-1: USB disconnect, device number 8 [ 680.710244][T16822] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 680.723820][T24822] loop1: detected capacity change from 0 to 1024 [ 680.776662][T24822] EXT4-fs: Ignoring removed oldalloc option [ 680.837682][T24822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.908859][T16822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 680.944415][T24807] loop7: detected capacity change from 0 to 32768 [ 680.953510][T16822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.995484][T24807] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 681.040060][T16822] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 681.049192][T16822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.075357][T16822] usb 4-1: config 0 descriptor?? [ 681.089029][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.237748][T24839] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7867'. [ 681.380889][T16629] ocfs2: Unmounting device (7,7) on (node local) [ 681.504994][T16822] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 681.542164][T16822] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 681.569820][T16822] belkin 0003:1020:0006.0042: unbalanced collection at end of report description [ 681.604308][T16822] belkin 0003:1020:0006.0042: parse failed [ 681.619616][T16822] belkin 0003:1020:0006.0042: probe with driver belkin failed with error -22 [ 681.692314][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7872'. [ 681.747781][T16822] usb 4-1: USB disconnect, device number 45 [ 681.974269][T24859] usb usb7: usbfs: interface 0 claimed by hub while 'syz.7.7869' resets device [ 682.276492][T24867] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7880'. [ 682.374443][T24830] loop4: detected capacity change from 0 to 40427 [ 682.456502][T24830] F2FS-fs (loop4): invalid crc value [ 682.468021][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7882'. [ 682.471980][T24830] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 682.507195][T24871] IPVS: Error joining to the multicast group [ 682.570309][T24876] loop7: detected capacity change from 0 to 2048 [ 682.588915][T24878] devtmpfs: Unknown parameter 'posixacl' [ 682.628013][T24876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.664994][T24830] F2FS-fs (loop4): Start checkpoint disabled! [ 682.688669][T24876] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.712277][T24830] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 682.761038][T24876] EXT4-fs (loop7): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 682.808528][T24876] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 682.958848][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.040321][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.088864][T24899] loop3: detected capacity change from 0 to 256 [ 683.131240][T24899] exfat: Deprecated parameter 'utf8' [ 683.151750][T24899] exfat: Deprecated parameter 'utf8' [ 683.182662][T24899] exfat: Deprecated parameter 'utf8' [ 683.211172][T24899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 683.330582][T24905] loop7: detected capacity change from 0 to 256 [ 683.460754][T24905] FAT-fs (loop7): Directory bread(block 64) failed [ 683.475254][T24905] FAT-fs (loop7): Directory bread(block 65) failed [ 683.494649][T24905] FAT-fs (loop7): Directory bread(block 66) failed [ 683.510712][T24905] FAT-fs (loop7): Directory bread(block 67) failed [ 683.526991][T24905] FAT-fs (loop7): Directory bread(block 68) failed [ 683.543449][T24905] FAT-fs (loop7): Directory bread(block 69) failed [ 683.575999][T24905] FAT-fs (loop7): Directory bread(block 70) failed [ 683.593762][T24905] FAT-fs (loop7): Directory bread(block 71) failed [ 683.610417][T24905] FAT-fs (loop7): Directory bread(block 72) failed [ 683.617187][T24905] FAT-fs (loop7): Directory bread(block 73) failed [ 683.712412][T24915] loop4: detected capacity change from 0 to 2048 [ 683.758702][T24915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.503983][T24942] loop7: detected capacity change from 0 to 2048 [ 684.714657][T16629] UDF-fs: warning (device loop7): udf_evict_inode: Inode 1347 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 684.959046][T24923] loop1: detected capacity change from 0 to 32768 [ 685.094023][T24962] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 685.235501][T24923] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 3327,journal_flush_delay=1023,nojournal_transaction_names [ 685.273678][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.347466][T24923] bcachefs (loop1): initializing new filesystem [ 685.424178][T24973] loop9: detected capacity change from 0 to 2048 [ 685.438077][T24923] bcachefs (loop1): going read-write [ 685.464092][T24973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.510359][T24923] bcachefs (loop1): marking superblocks [ 685.513500][T24973] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 685.575290][T24923] bcachefs (loop1): initializing freespace [ 685.621866][T24923] bcachefs (loop1): done initializing freespace [ 685.674869][T24923] bcachefs (loop1): reading snapshots table [ 685.690643][T24923] bcachefs (loop1): reading snapshots done [ 685.752464][T24923] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 685.797240][T24979] geneve1: entered promiscuous mode [ 685.822157][T24923] bcachefs (loop1): done starting filesystem [ 686.081673][ T5835] bcachefs (loop1): shutting down [ 686.087054][ T5835] bcachefs (loop1): going read-only [ 686.093993][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 686.125683][T24990] loop4: detected capacity change from 0 to 256 [ 686.145812][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 686.171046][T24990] exfat: Deprecated parameter 'utf8' [ 686.176611][T24990] exfat: Deprecated parameter 'utf8' [ 686.182105][T24990] exfat: Deprecated parameter 'utf8' [ 686.195417][T24990] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 686.437560][T24996] loop9: detected capacity change from 0 to 1024 [ 686.458976][T24953] loop7: detected capacity change from 0 to 40427 [ 686.474604][T24996] EXT4-fs: Ignoring removed nobh option [ 686.500348][T24996] EXT4-fs: Ignoring removed bh option [ 686.503092][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 686.541894][T24953] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 686.548426][T24953] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 686.562965][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 686.585444][T24996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.605470][ T5835] bcachefs (loop1): marking filesystem clean [ 686.629487][T24953] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 686.806067][ T5835] bcachefs (loop1): shutdown complete [ 686.835884][T23054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.970994][T24953] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 686.978083][T24953] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 687.049382][T24953] syz.7.7918: attempt to access beyond end of device [ 687.049382][T24953] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 687.773903][T25024] loop9: detected capacity change from 0 to 164 [ 687.816311][T25024] Unable to read rock-ridge attributes [ 687.844845][T25024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 688.169596][T25012] loop4: detected capacity change from 0 to 32768 [ 688.251186][T25012] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 688.369362][T25012] XFS (loop4): Ending clean mount [ 688.398012][T25012] XFS (loop4): Quotacheck needed: Please wait. [ 688.584607][T25012] XFS (loop4): Quotacheck: Done. [ 688.923876][T23071] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 689.273577][T25052] loop7: detected capacity change from 0 to 256 [ 689.486396][T25052] FAT-fs (loop7): Directory bread(block 64) failed [ 689.503512][T25052] FAT-fs (loop7): Directory bread(block 65) failed [ 689.531739][T25032] loop9: detected capacity change from 0 to 32768 [ 689.531882][T25047] loop3: detected capacity change from 0 to 32768 [ 689.540296][T25052] FAT-fs (loop7): Directory bread(block 66) failed [ 689.609698][T25052] FAT-fs (loop7): Directory bread(block 67) failed [ 689.610703][T25047] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7952 (25047) [ 689.633682][T25052] FAT-fs (loop7): Directory bread(block 68) failed [ 689.660464][T25052] FAT-fs (loop7): Directory bread(block 69) failed [ 689.667159][T25052] FAT-fs (loop7): Directory bread(block 70) failed [ 689.703112][T25047] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 689.732011][T25052] FAT-fs (loop7): Directory bread(block 71) failed [ 689.739274][T25052] FAT-fs (loop7): Directory bread(block 72) failed [ 689.740201][T25047] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 689.755859][T25052] FAT-fs (loop7): Directory bread(block 73) failed [ 689.774422][T25058] loop1: detected capacity change from 0 to 512 [ 689.781917][T25058] EXT4-fs: inline encryption not supported [ 689.792066][T25058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 689.822777][T25047] BTRFS info (device loop3): using free-space-tree [ 689.846048][T25058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 689.952706][T25059] xt_CT: No such helper "pptp" [ 689.962813][T25058] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #17: comm syz.1.7934: corrupted in-inode xattr: e_name out of bounds [ 690.020934][T25058] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.7934: couldn't read orphan inode 17 (err -117) [ 690.072277][T25058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.321591][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.492522][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 690.524399][T25088] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 690.710527][T25090] loop7: detected capacity change from 0 to 256 [ 690.804276][T25092] loop1: detected capacity change from 0 to 1024 [ 690.896858][T25094] loop4: detected capacity change from 0 to 4096 [ 690.996931][T25094] NILFS (loop4): invalid segment: Checksum error in segment payload [ 691.010641][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 691.016205][T25094] NILFS (loop4): trying rollback from an earlier position [ 691.095198][ T29] audit: type=1326 audit(1739476501.430:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.135772][T25094] NILFS (loop4): recovery complete [ 691.160178][ T29] audit: type=1326 audit(1739476501.430:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.188433][T25099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.218282][ T29] audit: type=1326 audit(1739476501.440:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.284538][T25101] loop1: detected capacity change from 0 to 256 [ 691.314074][T25101] exfat: Deprecated parameter 'utf8' [ 691.319527][T25101] exfat: Deprecated parameter 'utf8' [ 691.346904][T25101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 691.350980][ T29] audit: type=1326 audit(1739476501.440:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.470091][ T29] audit: type=1326 audit(1739476501.440:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.553213][ T29] audit: type=1326 audit(1739476501.450:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.600069][ T29] audit: type=1326 audit(1739476501.450:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25095 comm="syz.3.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 691.693862][T25109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7973'. [ 692.080273][T25121] sp0: Synchronizing with TNC [ 692.123704][T25121] sp0: Found TNC [ 692.318189][T25129] loop4: detected capacity change from 0 to 512 [ 692.347229][T25129] EXT4-fs: Ignoring removed nobh option [ 692.377964][T25129] EXT4-fs: Ignoring removed oldalloc option [ 692.428991][T25129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.7983: Parent and EA inode have the same ino 15 [ 692.452813][T25129] EXT4-fs (loop4): Remounting filesystem read-only [ 692.461099][T25129] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 692.472062][T25129] EXT4-fs (loop4): 1 orphan inode deleted [ 692.481734][T25129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.496057][T25129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.605396][T25141] tipc: Started in network mode [ 692.624243][T25141] tipc: Node identity , cluster identity 4711 [ 692.647881][T25141] tipc: Failed to set node id, please configure manually [ 692.670653][T25141] tipc: Enabling of bearer rejected, failed to enable media [ 693.003329][T25153] loop7: detected capacity change from 0 to 4096 [ 693.646146][T25177] loop7: detected capacity change from 0 to 2048 [ 693.692950][ T29] audit: type=1326 audit(1739476504.070:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25180 comm="syz.1.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8598cde9 code=0x7ffc0000 [ 693.738651][T25181] loop1: detected capacity change from 0 to 256 [ 693.768415][T25177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.802773][T25152] loop3: detected capacity change from 0 to 32768 [ 693.810874][ T29] audit: type=1326 audit(1739476504.090:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25180 comm="syz.1.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8598cde9 code=0x7ffc0000 [ 693.833633][T25152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7992 (25152) [ 693.847257][ T29] audit: type=1326 audit(1739476504.110:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25180 comm="syz.1.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efe8598cde9 code=0x7ffc0000 [ 693.870658][T25177] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.871970][T25181] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 693.913183][T25152] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 693.949739][T25152] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 694.009315][T25181] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 694.081491][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.102116][T25152] BTRFS info (device loop3): rebuilding free space tree [ 694.165291][T25152] BTRFS info (device loop3): disabling free space tree [ 694.177505][T25152] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 694.221319][T25152] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 694.360286][T25214] sp0: Synchronizing with TNC [ 694.386930][T25213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8013'. [ 694.449279][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 694.666666][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8019'. [ 694.860492][T25227] loop1: detected capacity change from 0 to 2048 [ 694.974736][T25233] block nbd4: NBD_DISCONNECT [ 695.000786][T25227] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.8020: bad orphan inode 8192 [ 695.053321][T25227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.189117][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.653819][T25255] loop3: detected capacity change from 0 to 256 [ 695.691152][T25255] exfat: Deprecated parameter 'utf8' [ 695.746951][T25255] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 695.818148][T25249] loop1: detected capacity change from 0 to 8192 [ 695.860390][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8033'. [ 695.873306][T25249] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 696.801282][T23266] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 696.955727][T25285] loop1: detected capacity change from 0 to 1024 [ 696.976879][T23266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.990801][T23266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.019702][T23266] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 697.039351][T23266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.060478][T23266] usb 5-1: config 0 descriptor?? [ 697.068425][ T3438] hfsplus: b-tree write err: -5, ino 4 [ 697.494846][T23266] chicony 0003:04F2:1421.0043: unbalanced collection at end of report description [ 697.516656][T23266] chicony 0003:04F2:1421.0043: Chicony hid parse failed: -22 [ 697.536519][T23266] chicony 0003:04F2:1421.0043: probe with driver chicony failed with error -22 [ 697.712665][T23266] usb 5-1: USB disconnect, device number 15 [ 698.610129][T25341] x_tables: ip_tables: udp match: only valid for protocol 17 [ 698.878137][T25353] lo speed is unknown, defaulting to 1000 [ 699.090011][ T5894] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 699.282456][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 699.282501][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.283435][ T5894] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 699.283495][ T5894] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 699.283529][ T5894] usb 2-1: Manufacturer: syz [ 699.285460][ T5894] usb 2-1: config 0 descriptor?? [ 699.467127][T25360] loop7: detected capacity change from 0 to 256 [ 699.497805][T25360] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 699.702626][ T5894] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 699.702666][ T5894] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 699.702694][ T5894] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 699.702720][ T5894] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 699.737537][ T5894] cougar 0003:060B:700A.0044: unknown main item tag 0x0 [ 699.739341][ T5894] cougar 0003:060B:700A.0044: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 699.783059][T25363] macvlan1: entered promiscuous mode [ 699.783092][T25363] macvlan1: entered allmulticast mode [ 699.946455][T16822] usb 2-1: USB disconnect, device number 39 [ 699.961342][T25367] loop4: detected capacity change from 0 to 16 [ 699.976007][T25367] erofs (device loop4): mounted with root inode @ nid 36. [ 700.002997][T25367] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 700.008541][T25367] erofs (device loop4): failed to decompress -35 in[64, 4032] out[1851] [ 700.008626][T25367] erofs (device loop4): read error -117 @ 43 of nid 36 [ 700.179202][T25369] loop7: detected capacity change from 0 to 4096 [ 700.198532][T25369] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 700.248658][T25373] loop4: detected capacity change from 0 to 256 [ 700.340280][T25373] FAT-fs (loop4): Directory bread(block 64) failed [ 700.347009][T25373] FAT-fs (loop4): Directory bread(block 65) failed [ 700.397683][T25373] FAT-fs (loop4): Directory bread(block 66) failed [ 700.440643][T25373] FAT-fs (loop4): Directory bread(block 67) failed [ 700.478625][T25373] FAT-fs (loop4): Directory bread(block 68) failed [ 700.508976][T25373] FAT-fs (loop4): Directory bread(block 69) failed [ 700.529327][T25373] FAT-fs (loop4): Directory bread(block 70) failed [ 700.569662][T25373] FAT-fs (loop4): Directory bread(block 71) failed [ 700.600390][T25373] FAT-fs (loop4): Directory bread(block 72) failed [ 700.607102][T25373] FAT-fs (loop4): Directory bread(block 73) failed [ 701.278756][T25405] loop4: detected capacity change from 0 to 4096 [ 701.292814][T25405] NILFS (loop4): mounting unchecked fs [ 701.300066][T25405] NILFS (loop4): recovery required for readonly filesystem [ 701.307303][T25405] NILFS (loop4): write access will be enabled during recovery [ 701.360068][T25405] NILFS (loop4): invalid segment: Checksum error in segment payload [ 701.388474][T25413] loop7: detected capacity change from 0 to 512 [ 701.410061][T25405] NILFS (loop4): trying rollback from an earlier position [ 701.460949][T25405] NILFS (loop4): recovery complete [ 701.496628][T25413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.513796][T25413] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.642893][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.694840][T25424] loop3: detected capacity change from 0 to 1024 [ 701.720279][T16557] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 701.884216][T16557] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 701.893841][T16557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.911641][T16557] usb 2-1: Product: syz [ 701.915959][T16557] usb 2-1: Manufacturer: syz [ 701.939781][T16557] usb 2-1: SerialNumber: syz [ 701.954121][T16557] usb 2-1: config 0 descriptor?? [ 702.186005][T16557] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 702.392094][T19926] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 702.403804][T16557] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 702.421694][T16557] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 702.428596][T16557] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 702.511893][T16557] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 702.524885][T25456] mkiss: ax0: crc mode is auto. [ 702.625001][T16557] usb 2-1: USB disconnect, device number 40 [ 702.936307][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 702.936330][ T29] audit: type=1326 audit(1739476513.310:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.014271][ T29] audit: type=1326 audit(1739476513.310:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.078219][T25476] loop4: detected capacity change from 0 to 64 [ 703.082381][ T29] audit: type=1326 audit(1739476513.360:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.158014][T25478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8133'. [ 703.160005][ T29] audit: type=1326 audit(1739476513.360:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.273382][ T29] audit: type=1326 audit(1739476513.360:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.297713][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 703.309295][ T29] audit: type=1326 audit(1739476513.360:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.361914][ T29] audit: type=1326 audit(1739476513.360:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.432573][T25490] loop7: detected capacity change from 0 to 256 [ 703.466278][ T29] audit: type=1326 audit(1739476513.360:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.3.8130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0174f8cde9 code=0x7ffc0000 [ 703.553687][T25490] FAT-fs (loop7): Directory bread(block 64) failed [ 703.590080][T25490] FAT-fs (loop7): Directory bread(block 65) failed [ 703.614134][T25490] FAT-fs (loop7): Directory bread(block 66) failed [ 703.640183][T25490] FAT-fs (loop7): Directory bread(block 67) failed [ 703.668910][T25490] FAT-fs (loop7): Directory bread(block 68) failed [ 703.696679][T25490] FAT-fs (loop7): Directory bread(block 69) failed [ 703.726398][T25490] FAT-fs (loop7): Directory bread(block 70) failed [ 703.759262][T25490] FAT-fs (loop7): Directory bread(block 71) failed [ 703.789860][T25490] FAT-fs (loop7): Directory bread(block 72) failed [ 703.799600][T25490] FAT-fs (loop7): Directory bread(block 73) failed [ 704.285987][T25513] loop3: detected capacity change from 0 to 512 [ 704.354063][T25513] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 704.390284][T25513] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 704.424324][T25513] EXT4-fs (loop3): 1 truncate cleaned up [ 704.432450][T25513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.515762][T25513] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 704.673257][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.830187][T25509] loop4: detected capacity change from 0 to 32768 [ 704.851736][T25509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8148 (25509) [ 704.898255][T25509] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 704.949845][T25509] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 704.978848][T25509] BTRFS info (device loop4): disk space caching is enabled [ 705.000145][T25509] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 705.154572][T25509] BTRFS info (device loop4): rebuilding free space tree [ 705.270125][T25509] BTRFS info (device loop4): disabling free space tree [ 705.297567][T25509] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 705.323558][T25509] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 705.456523][T25543] loop3: detected capacity change from 0 to 2048 [ 705.534358][T25543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.652475][ T29] audit: type=1800 audit(1739476516.020:364): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8157" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 705.688321][T23071] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 705.908799][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.939284][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 705.957585][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 705.995484][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 706.060749][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 706.070628][ T5851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 706.078672][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 706.159686][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8162'. [ 706.235562][T25553] lo speed is unknown, defaulting to 1000 [ 706.610677][T25553] chnl_net:caif_netlink_parms(): no params data found [ 706.728056][T25573] dlm: non-version read from control device 2147479540 [ 706.983093][T25553] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.990656][T25553] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.998741][T25553] bridge_slave_0: entered allmulticast mode [ 707.052607][T25553] bridge_slave_0: entered promiscuous mode [ 707.070944][T25553] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.099758][T25553] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.110191][T25553] bridge_slave_1: entered allmulticast mode [ 707.131304][T25553] bridge_slave_1: entered promiscuous mode [ 707.157107][T25593] loop4: detected capacity change from 0 to 512 [ 707.218260][T25595] loop3: detected capacity change from 0 to 256 [ 707.240209][T25593] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.8176: casefold flag without casefold feature [ 707.265680][T25593] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.8176: couldn't read orphan inode 15 (err -117) [ 707.325601][T25553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.338424][T25553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.351651][T25593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.377065][T25595] syz.3.8177: attempt to access beyond end of device [ 707.377065][T25595] loop3: rw=2051, sector=256, nr_sectors = 288 limit=256 [ 707.426118][T25553] team0: Port device team_slave_0 added [ 707.446895][T25553] team0: Port device team_slave_1 added [ 707.471028][T25593] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #2: comm syz.4.8176: invalid size [ 707.523751][T25598] loop1: detected capacity change from 0 to 4096 [ 707.575965][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.702168][T25553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.729699][T25553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.805732][T25553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.842591][T25553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.870226][T25553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.967771][T25553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.161299][T25553] hsr_slave_0: entered promiscuous mode [ 708.180960][T25553] hsr_slave_1: entered promiscuous mode [ 708.218201][T25553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.230148][T19926] Bluetooth: hci6: command tx timeout [ 708.253196][T25553] Cannot create hsr debugfs directory [ 708.282492][T25623] bridge0: entered allmulticast mode [ 708.850892][T25618] loop4: detected capacity change from 0 to 32768 [ 708.936965][T25553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.016081][T25635] netlink: 18 bytes leftover after parsing attributes in process `syz.1.8195'. [ 709.026802][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8196'. [ 709.095273][T25641] loop3: detected capacity change from 0 to 4096 [ 709.140372][T25641] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 709.181187][T25641] ntfs3(loop3): It is recommened to use chkdsk. [ 709.193591][T25553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.233373][T25645] loop1: detected capacity change from 0 to 256 [ 709.258703][T25645] exfat: Deprecated parameter 'namecase' [ 709.285221][T25641] ntfs3(loop3): failed to convert "076c" to iso8859-1 [ 709.292400][T25645] exfat: Deprecated parameter 'utf8' [ 709.308628][T25645] exfat: Deprecated parameter 'utf8' [ 709.340580][T25645] exfat: Deprecated parameter 'namecase' [ 709.384027][T25645] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 709.516091][T25553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.683299][T25648] loop7: detected capacity change from 0 to 4096 [ 709.716676][T25652] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.907934][T25553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.933789][T25658] loop4: detected capacity change from 0 to 64 [ 710.141506][T25664] loop1: detected capacity change from 0 to 256 [ 710.280773][T25553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.310229][T19926] Bluetooth: hci6: command tx timeout [ 710.339346][T25553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.398537][T25668] loop4: detected capacity change from 0 to 512 [ 710.405066][T25553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.425854][T25553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.543825][T25668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.624255][T25668] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.788576][T25668] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.8210: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 710.895985][T25553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.955335][T25654] loop3: detected capacity change from 0 to 40427 [ 710.993526][T25553] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.024832][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.025010][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.026143][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.027078][T25654] F2FS-fs (loop3): Found nat_bits in checkpoint [ 711.035627][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.035703][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.245444][T25654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 711.485802][ T5840] syz-executor: attempt to access beyond end of device [ 711.485802][ T5840] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 711.560112][ T5840] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 711.596103][T25678] loop1: detected capacity change from 0 to 32768 [ 711.698901][T25696] loop4: detected capacity change from 0 to 1024 [ 711.713758][T25699] netlink: 'syz.0.8222': attribute type 62 has an invalid length. [ 711.748838][T25696] EXT4-fs (loop4): Test dummy encryption mode enabled [ 711.776949][T25696] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 711.810499][T25553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.836831][T25696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.063521][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.270734][T25717] loop4: detected capacity change from 0 to 512 [ 712.323821][T25717] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.8228: invalid block [ 712.366253][T25553] veth0_vlan: entered promiscuous mode [ 712.372578][T25717] EXT4-fs (loop4): Remounting filesystem read-only [ 712.379525][T25717] EXT4-fs (loop4): 2 truncates cleaned up [ 712.387612][T25717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.406018][T25553] veth1_vlan: entered promiscuous mode [ 712.410853][T19926] Bluetooth: hci6: command tx timeout [ 712.503115][T25553] veth0_macvtap: entered promiscuous mode [ 712.555324][T25553] veth1_macvtap: entered promiscuous mode [ 712.592577][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.623898][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.660020][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.701602][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.745645][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.767966][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.778557][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.801998][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.813267][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.824722][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.837286][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.848467][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.866040][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.880100][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.890753][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.903430][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.923565][T25553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.932347][T23071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.957965][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.970997][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.981455][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.992999][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.003579][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.014353][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.034788][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.050533][ T5894] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 713.062341][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.083797][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.105570][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.125996][T25734] loop4: detected capacity change from 0 to 2048 [ 713.132991][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.146709][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.157792][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.169256][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.181000][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.192905][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.203988][T25553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.214239][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 713.215346][T25553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.232610][T25553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.245716][ T5894] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 713.257315][T25734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.259967][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.269591][T25553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.314527][T25553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.318640][ T5894] usb 4-1: config 0 descriptor?? [ 713.332240][T25553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.346647][T25553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.348937][ T5894] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 713.592936][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.620870][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.632532][T25721] loop7: detected capacity change from 0 to 32768 [ 713.697548][T25721] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 713.727959][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.755641][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.793499][T25721] XFS (loop7): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 713.825999][T25721] XFS (loop7): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 713.846473][T25721] XFS (loop7): log mount/recovery failed: error -22 [ 713.890926][T25721] XFS (loop7): log mount failed [ 714.022271][T23266] usb 4-1: USB disconnect, device number 46 [ 714.482118][ T5851] Bluetooth: hci6: command tx timeout [ 714.578985][T25736] loop4: detected capacity change from 0 to 32768 [ 715.034285][T25778] loop5: detected capacity change from 0 to 128 [ 715.060229][T25778] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 715.075534][T25775] lo speed is unknown, defaulting to 1000 [ 715.091200][T25778] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 715.297235][T25786] loop4: detected capacity change from 0 to 2048 [ 715.304984][T25553] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.348218][T25786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.634140][T25802] loop3: detected capacity change from 0 to 8 [ 715.740859][T25802] SQUASHFS error: xz decompression failed, data probably corrupt [ 715.763212][T25798] can0: slcan on ttyS3. [ 715.769148][T25802] SQUASHFS error: Failed to read block 0xa8: -5 [ 715.806158][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.899822][T25802] SQUASHFS error: xz decompression failed, data probably corrupt [ 715.931467][T25797] can0 (unregistered): slcan off ttyS3. [ 715.941492][T25802] SQUASHFS error: Failed to read block 0xa8: -5 [ 715.952829][ T29] audit: type=1800 audit(1739476526.320:365): pid=25802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8261" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 716.526259][T25828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8271'. [ 716.560820][ T5851] Bluetooth: hci6: command 0x0405 tx timeout [ 717.094179][T25817] loop7: detected capacity change from 0 to 32768 [ 717.210693][T25817] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 717.331993][T16629] ocfs2: Unmounting device (7,7) on (node local) [ 717.371882][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.585963][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8283'. [ 718.154596][T25874] loop5: detected capacity change from 0 to 256 [ 718.165502][T25870] loop4: detected capacity change from 0 to 4096 [ 718.175635][T25875] loop3: detected capacity change from 0 to 512 [ 718.184482][T25870] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 718.230865][T25874] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 718.244141][T25870] ntfs3(loop4): ino=19, mi_enum_attr [ 718.249643][T25870] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 718.266181][T25875] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 718.286614][T25875] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 718.287305][T25870] ntfs3(loop4): ino=18, mi_enum_attr [ 718.313499][T25874] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 718.323581][T25875] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 718.350403][T25875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 718.358671][T25875] System zones: 0-2, 18-18, 34-34 [ 718.424392][T25875] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 718.480674][T25870] Process accounting resumed [ 718.507275][T25875] EXT4-fs (loop3): 1 truncate cleaned up [ 718.521493][T25875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.636647][T25886] loop5: detected capacity change from 0 to 4096 [ 718.660328][T25886] NILFS (loop5): invalid segment: Checksum error in segment payload [ 718.669069][T25886] NILFS (loop5): trying rollback from an earlier position [ 718.735722][T25886] NILFS (loop5): recovery complete [ 718.753112][T25893] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.822101][T25895] netlink: 'syz.4.8300': attribute type 322 has an invalid length. [ 718.891490][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.214112][T25903] loop5: detected capacity change from 0 to 256 [ 719.830692][T25890] loop7: detected capacity change from 0 to 32768 [ 720.033495][T25890] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 720.130112][T25890] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 720.150955][T25890] bcachefs (loop7): Version upgrade required: [ 720.150955][T25890] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 720.150955][T25890] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 720.150955][T25890] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 720.221112][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.350286][T25890] bcachefs (loop7): dropping and reconstructing all alloc info [ 720.430640][T25890] bcachefs (loop7): accounting_read... done [ 720.486225][T25890] bcachefs (loop7): alloc_read... done [ 720.512469][T25890] bcachefs (loop7): stripes_read... done [ 720.518227][T25890] bcachefs (loop7): snapshots_read... done [ 720.551082][T25890] bcachefs (loop7): done starting filesystem [ 720.661176][T25917] loop3: detected capacity change from 0 to 32768 [ 720.689095][T25917] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 720.689095][T25917] [ 720.803299][T16629] bcachefs (loop7): shutting down [ 720.890752][T16629] bcachefs (loop7): shutdown complete [ 721.250105][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 721.331459][T23266] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 721.420133][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 721.430799][ T8] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 721.439699][ T8] usb 6-1: config 0 has no interface number 0 [ 721.460982][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 721.470331][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.478390][ T8] usb 6-1: Product: syz [ 721.483740][ T8] usb 6-1: Manufacturer: syz [ 721.488405][ T8] usb 6-1: SerialNumber: syz [ 721.500313][T23266] usb 5-1: Using ep0 maxpacket: 16 [ 721.501995][ T8] usb 6-1: config 0 descriptor?? [ 721.512202][T23266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.525892][ T8] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 721.534171][T23266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.559211][T23266] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 721.573724][T23266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.592085][T23266] usb 5-1: config 0 descriptor?? [ 721.742667][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 721.754944][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 722.193059][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 722.193572][ T25] usb 6-1: USB disconnect, device number 16 [ 722.224793][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 722.236757][T23266] usb 5-1: string descriptor 0 read error: -71 [ 722.246179][T23266] uclogic 0003:256C:006E.0045: failed retrieving string descriptor #200: -71 [ 722.284435][T23266] uclogic 0003:256C:006E.0045: failed retrieving pen parameters: -71 [ 722.293204][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 722.311043][T23266] uclogic 0003:256C:006E.0045: failed probing pen v2 parameters: -71 [ 722.330698][ T25] quatech2 6-1:0.51: device disconnected [ 722.337458][T23266] uclogic 0003:256C:006E.0045: failed probing parameters: -71 [ 722.357460][T23266] uclogic 0003:256C:006E.0045: probe with driver uclogic failed with error -71 [ 722.379536][T23266] usb 5-1: USB disconnect, device number 16 [ 723.245091][T25984] netlink: 308 bytes leftover after parsing attributes in process `syz.4.8341'. [ 723.426681][T25993] loop5: detected capacity change from 0 to 128 [ 723.463365][T25993] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.481804][T25993] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 723.696171][T26001] loop4: detected capacity change from 0 to 2048 [ 723.735826][T26001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.796384][T26001] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 723.837781][T25553] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.069848][T26009] loop4: detected capacity change from 0 to 1024 [ 724.205185][T26009] hfsplus: xattr searching failed [ 724.873341][T26037] loop7: detected capacity change from 0 to 512 [ 724.893272][T26037] EXT4-fs (loop7): 1 truncate cleaned up [ 724.900861][T26037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.925274][T26037] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz.7.8366: Directory hole found for htree leaf block 0 [ 724.979545][T16629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.072082][T26040] loop4: detected capacity change from 0 to 4096 [ 725.386899][T26054] vivid-001: disconnect [ 725.412592][T26053] vivid-001: reconnect [ 725.617481][ T29] audit: type=1326 audit(1739476535.990:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.4.8377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420a18cde9 code=0x7ffc0000 [ 725.666653][ T29] audit: type=1326 audit(1739476536.020:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.4.8377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420a18cde9 code=0x7ffc0000 [ 725.710822][ T29] audit: type=1326 audit(1739476536.020:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.4.8377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f420a18cde9 code=0x7ffc0000 [ 725.749795][ T29] audit: type=1326 audit(1739476536.020:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.4.8377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420a18cde9 code=0x7ffc0000 [ 725.780165][T26066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8379'. [ 725.785050][ T29] audit: type=1326 audit(1739476536.020:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.4.8377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420a18cde9 code=0x7ffc0000 [ 725.809712][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8379'. [ 725.828763][T26066] netlink: 'syz.4.8379': attribute type 14 has an invalid length. [ 725.993412][T26070] loop4: detected capacity change from 0 to 2048 [ 726.001693][T26070] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 726.042208][T26071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 726.149007][T26064] loop5: detected capacity change from 0 to 32768 [ 726.179379][T26064] JBD2: Ignoring recovery information on journal [ 726.220917][T26064] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 726.241495][T19926] Bluetooth: hci6: command 0x0405 tx timeout [ 726.299417][T25553] ocfs2: Unmounting device (7,5) on (node local) [ 726.628415][T26075] loop4: detected capacity change from 0 to 32768 [ 726.662477][T26075] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 726.715943][T26075] XFS (loop4): Ending clean mount [ 726.730265][T26075] XFS (loop4): Quotacheck needed: Please wait. [ 726.857441][T26075] XFS (loop4): Quotacheck: Done. [ 726.989005][T23071] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 727.415715][T26097] ptrace attach of "./syz-executor exec"[25553] was attempted by "i"[26097] [ 727.572102][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.596025][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 727.610959][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.625666][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.634621][ T5851] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 727.642146][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 727.678491][T26102] lo speed is unknown, defaulting to 1000 [ 727.733030][T26105] loop4: detected capacity change from 0 to 1024 [ 727.766070][T26105] hfsplus: bad catalog entry type [ 727.911187][ T3543] hfsplus: b-tree write err: -5, ino 4 [ 727.964936][T26102] chnl_net:caif_netlink_parms(): no params data found [ 728.090514][T26118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8397'. [ 728.321779][T26102] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.328942][T26102] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.353094][T26102] bridge_slave_0: entered allmulticast mode [ 728.380696][T26102] bridge_slave_0: entered promiscuous mode [ 728.401268][T26102] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.408425][T26102] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.449610][T26102] bridge_slave_1: entered allmulticast mode [ 728.471356][T26102] bridge_slave_1: entered promiscuous mode [ 728.597032][T26102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.627291][T26102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.759122][T26113] loop5: detected capacity change from 0 to 32768 [ 728.820282][T26102] team0: Port device team_slave_0 added [ 728.835783][T26102] team0: Port device team_slave_1 added [ 728.992581][T26102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.999600][T26102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.054738][T26102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.088360][T26102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.096065][T26102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.182686][T26102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.353200][T26102] hsr_slave_0: entered promiscuous mode [ 729.382898][T26102] hsr_slave_1: entered promiscuous mode [ 729.400148][T26102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.421834][T26102] Cannot create hsr debugfs directory [ 729.533472][T26161] lo: entered promiscuous mode [ 729.540279][T26161] lo: entered allmulticast mode [ 729.570655][T26161] tunl0: entered promiscuous mode [ 729.591190][T26161] tunl0: entered allmulticast mode [ 729.613009][T26161] gre0: entered promiscuous mode [ 729.618004][T26161] gre0: entered allmulticast mode [ 729.670455][T19926] Bluetooth: hci7: command tx timeout [ 729.695104][T26161] gretap0: entered promiscuous mode [ 729.729572][T26161] gretap0: entered allmulticast mode [ 729.771589][T26161] erspan0: entered promiscuous mode [ 729.780146][T26161] erspan0: entered allmulticast mode [ 729.795043][T26161] ip_vti0: entered promiscuous mode [ 729.809228][T26161] ip_vti0: entered allmulticast mode [ 729.818100][T26161] ip6_vti0: entered promiscuous mode [ 729.824151][T26161] ip6_vti0: entered allmulticast mode [ 729.840856][T26161] sit0: entered promiscuous mode [ 729.846067][T26161] sit0: entered allmulticast mode [ 729.873336][T26161] ip6tnl0: entered promiscuous mode [ 729.883400][T26161] ip6tnl0: entered allmulticast mode [ 729.893840][T26173] nbd: must specify at least one socket [ 729.896728][T26161] ip6gre0: entered promiscuous mode [ 729.905436][T26161] ip6gre0: entered allmulticast mode [ 729.935890][T26170] loop4: detected capacity change from 0 to 4096 [ 729.954520][T26170] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 729.968967][T26161] syz_tun: entered promiscuous mode [ 729.990324][T26161] syz_tun: entered allmulticast mode [ 730.001570][T26161] ip6gretap0: entered promiscuous mode [ 730.013820][T26161] ip6gretap0: entered allmulticast mode [ 730.017821][T26170] ntfs3(loop4): ino=19, mi_enum_attr [ 730.033869][T26161] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.041215][T26161] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.043074][T26170] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 730.081738][T26161] bridge0: entered promiscuous mode [ 730.107468][T26161] bridge0: entered allmulticast mode [ 730.136519][T26161] vcan0: entered promiscuous mode [ 730.160470][T26161] vcan0: entered allmulticast mode [ 730.175322][T26161] bond0: entered promiscuous mode [ 730.200081][T26161] bond_slave_0: entered promiscuous mode [ 730.216153][T26161] bond_slave_1: entered promiscuous mode [ 730.229262][T26161] bond0: entered allmulticast mode [ 730.270081][T26161] bond_slave_0: entered allmulticast mode [ 730.280225][T26161] bond_slave_1: entered allmulticast mode [ 730.313440][T26161] team0: entered promiscuous mode [ 730.318571][T26161] team_slave_0: entered promiscuous mode [ 730.380235][T26161] team_slave_1: entered promiscuous mode [ 730.386154][T26161] team0: entered allmulticast mode [ 730.416072][T26161] team_slave_0: entered allmulticast mode [ 730.440546][T26161] team_slave_1: entered allmulticast mode [ 730.453274][T26161] dummy0: entered promiscuous mode [ 730.458456][T26161] dummy0: entered allmulticast mode [ 730.508206][T26161] nlmon0: entered promiscuous mode [ 730.530283][T26161] nlmon0: entered allmulticast mode [ 730.541712][T26161] caif0: entered promiscuous mode [ 730.560549][T26161] caif0: entered allmulticast mode [ 730.566453][T26161] batadv0: entered promiscuous mode [ 730.590294][T26161] batadv0: entered allmulticast mode [ 730.612898][T26161] vxcan0: entered promiscuous mode [ 730.618165][T26161] vxcan0: entered allmulticast mode [ 730.632483][T26161] vxcan1: entered promiscuous mode [ 730.637641][T26161] vxcan1: entered allmulticast mode [ 730.660898][T26161] veth0: entered promiscuous mode [ 730.665990][T26161] veth0: entered allmulticast mode [ 730.677447][T26175] loop5: detected capacity change from 0 to 32768 [ 730.689421][T26161] veth1: entered promiscuous mode [ 730.728155][T26161] veth1: entered allmulticast mode [ 730.736585][T26175] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 730.770038][T26161] wg0: entered promiscuous mode [ 730.774927][T26161] wg0: entered allmulticast mode [ 730.805882][T26161] wg1: entered promiscuous mode [ 730.811249][T26161] wg1: entered allmulticast mode [ 730.819763][T26175] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 730.830303][T26161] wg2: entered promiscuous mode [ 730.835198][T26161] wg2: entered allmulticast mode [ 730.843325][T26161] veth0_to_bridge: entered promiscuous mode [ 730.849248][T26161] veth0_to_bridge: entered allmulticast mode [ 730.867946][T26161] veth1_to_bridge: entered promiscuous mode [ 730.884817][T26161] veth1_to_bridge: entered allmulticast mode [ 730.935623][T25553] ocfs2: Unmounting device (7,5) on (node local) [ 730.979510][T26161] veth0_to_bond: entered promiscuous mode [ 730.989659][T26161] veth0_to_bond: entered allmulticast mode [ 731.015052][T26161] veth1_to_bond: entered promiscuous mode [ 731.031976][T26161] veth1_to_bond: entered allmulticast mode [ 731.054367][T26161] veth0_to_team: entered promiscuous mode [ 731.061245][T26161] veth0_to_team: entered allmulticast mode [ 731.073294][T26161] veth1_to_team: entered promiscuous mode [ 731.079046][T26161] veth1_to_team: entered allmulticast mode [ 731.091810][T26161] veth0_to_batadv: entered promiscuous mode [ 731.097756][T26161] veth0_to_batadv: entered allmulticast mode [ 731.111787][T26161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.121086][T26161] batadv_slave_0: entered promiscuous mode [ 731.126927][T26161] batadv_slave_0: entered allmulticast mode [ 731.150921][T26161] veth1_to_batadv: entered promiscuous mode [ 731.156978][T26161] veth1_to_batadv: entered allmulticast mode [ 731.172975][T26161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.182015][T26161] batadv_slave_1: entered promiscuous mode [ 731.187858][T26161] batadv_slave_1: entered allmulticast mode [ 731.198422][T26161] xfrm0: entered promiscuous mode [ 731.204158][T26161] xfrm0: entered allmulticast mode [ 731.213619][T26161] veth0_to_hsr: entered promiscuous mode [ 731.219303][T26161] veth0_to_hsr: entered allmulticast mode [ 731.229665][T26161] hsr_slave_0: entered allmulticast mode [ 731.232578][T26179] loop4: detected capacity change from 0 to 32768 [ 731.249438][T26161] veth1_to_hsr: entered promiscuous mode [ 731.255886][T26179] XFS: ikeep mount option is deprecated. [ 731.255917][T26179] XFS: noikeep mount option is deprecated. [ 731.278473][T26161] veth1_to_hsr: entered allmulticast mode [ 731.299719][T26161] hsr_slave_1: entered allmulticast mode [ 731.303689][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8425'. [ 731.315402][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8425'. [ 731.316321][T26161] hsr0: entered promiscuous mode [ 731.330436][T26161] hsr0: entered allmulticast mode [ 731.339596][T26161] veth1_virt_wifi: entered promiscuous mode [ 731.345737][T26161] veth1_virt_wifi: entered allmulticast mode [ 731.355982][T26161] veth0_virt_wifi: entered promiscuous mode [ 731.362103][T26161] veth0_virt_wifi: entered allmulticast mode [ 731.372741][T26161] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 731.380392][T26161] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 731.388990][T26161] veth1_vlan: entered allmulticast mode [ 731.399589][T26161] veth0_vlan: entered allmulticast mode [ 731.412249][T26179] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 731.430336][T26161] vlan0: entered promiscuous mode [ 731.436214][T26161] vlan0: entered allmulticast mode [ 731.442401][T26161] vlan1: entered promiscuous mode [ 731.447460][T26161] vlan1: entered allmulticast mode [ 731.454815][T26161] macvlan0: entered promiscuous mode [ 731.460495][T26161] macvlan0: entered allmulticast mode [ 731.478970][T26161] ipvlan0: entered promiscuous mode [ 731.497803][T26161] ipvlan0: entered allmulticast mode [ 731.503616][T26161] ipvlan1: entered promiscuous mode [ 731.508852][T26161] ipvlan1: entered allmulticast mode [ 731.518421][T26161] veth1_macvtap: entered allmulticast mode [ 731.525076][T26179] XFS (loop4): Ending clean mount [ 731.528115][T26161] veth0_macvtap: entered allmulticast mode [ 731.536889][T26179] XFS (loop4): Quotacheck needed: Please wait. [ 731.562028][T26161] macvtap0: entered promiscuous mode [ 731.567383][T26161] macvtap0: entered allmulticast mode [ 731.602558][T26161] macsec0: entered promiscuous mode [ 731.607081][T26179] XFS (loop4): Quotacheck: Done. [ 731.607873][T26161] macsec0: entered allmulticast mode [ 731.640387][T26161] geneve0: entered promiscuous mode [ 731.645672][T26161] geneve0: entered allmulticast mode [ 731.660181][ T29] audit: type=1800 audit(1739476542.030:371): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8424" name="file2" dev="loop4" ino=1063 res=0 errno=0 [ 731.740429][T26161] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.749812][T26161] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.759330][T19926] Bluetooth: hci7: command tx timeout [ 731.767667][T26161] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.778637][T26161] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.788087][T26161] geneve1: entered promiscuous mode [ 731.793492][T26161] geneve1: entered allmulticast mode [ 731.802761][T26161] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 731.811112][T26161] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 731.822083][T23071] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 731.832483][T26161] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 731.839834][T26161] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 731.866059][T26161] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 731.873805][T26161] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 731.931120][T26161] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 731.938500][T26161] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 732.063039][T26161] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 732.100171][T26161] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 732.187401][T26161] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 732.200679][T26161] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 732.238566][T26161] syztnl0: entered promiscuous mode [ 732.250017][T26161] syztnl0: entered allmulticast mode [ 732.267671][T26161] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.278441][T26161] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.287932][T26161] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.297374][T26161] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.339322][T26161] vxlan0: entered promiscuous mode [ 732.344724][T26161] vxlan0: entered allmulticast mode [ 732.362861][T26161] vxlan1: entered promiscuous mode [ 732.368048][T26161] vxlan1: entered allmulticast mode [ 732.394848][T26161] ipvlan2: entered promiscuous mode [ 732.420288][T26161] ipvlan2: entered allmulticast mode [ 732.651496][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8436'. [ 733.199176][T26207] loop4: detected capacity change from 0 to 32768 [ 733.222993][T26207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8433 (26207) [ 733.260697][T26207] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 733.293225][T26207] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 733.327781][T26207] BTRFS info (device loop4): disk space caching is enabled [ 733.345534][T26207] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 733.424347][T26102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 733.455242][T26102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 733.495250][T26102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 733.535199][T26207] BTRFS info (device loop4): rebuilding free space tree [ 733.550808][T26102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 733.570726][T26207] BTRFS info (device loop4): disabling free space tree [ 733.577732][T26207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 733.602865][T26207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 733.759174][T26102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.807823][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8442'. [ 733.812265][T26102] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.825269][T26242] netlink: 'syz.0.8442': attribute type 1 has an invalid length. [ 733.836349][T19926] Bluetooth: hci7: command tx timeout [ 733.850218][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8442'. [ 733.854254][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.861163][T26244] loop5: detected capacity change from 0 to 64 [ 733.866362][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.888282][T23071] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 733.917621][T26102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.929436][T26102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.947485][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.954723][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.306574][T26252] loop5: detected capacity change from 0 to 512 [ 734.381371][T26252] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.8446: bad orphan inode 13 [ 734.420592][T26252] ext4_test_bit(bit=12, block=4) = 1 [ 734.425961][T26252] is_bad_inode(inode)=0 [ 734.431059][T26252] NEXT_ORPHAN(inode)=0 [ 734.435162][T26252] max_ino=32 [ 734.479842][T26252] i_nlink=1 [ 734.483867][T26252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.544010][T26102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.608675][T26252] EXT4-fs warning (device loop5): ext4_empty_dir:3105: inode #2: comm syz.5.8446: directory missing '.' [ 734.793290][T25553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.317587][T26282] mkiss: ax0: crc mode is auto. [ 735.351532][T26102] veth0_vlan: entered promiscuous mode [ 735.423747][T26102] veth1_vlan: entered promiscuous mode [ 735.497577][T26102] veth0_macvtap: entered promiscuous mode [ 735.515050][T26102] veth1_macvtap: entered promiscuous mode [ 735.578408][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.598794][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.628714][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.644188][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.665425][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.699709][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.728130][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.739244][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.769582][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.790023][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.811689][T16557] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 735.819954][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.870181][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.910934][T19926] Bluetooth: hci7: command tx timeout [ 735.919601][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.949932][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.959851][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.989996][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.003115][T16557] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 736.011502][T26102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.040159][T16557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.064449][T16557] usb 5-1: Product: syz [ 736.079252][T16557] usb 5-1: Manufacturer: syz [ 736.095332][T16557] usb 5-1: SerialNumber: syz [ 736.107275][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.108309][T16557] usb 5-1: config 0 descriptor?? [ 736.154256][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.189977][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.220288][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.265477][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.307087][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.338301][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.380003][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.398614][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.411565][T16557] usb 5-1: USB disconnect, device number 17 [ 736.432335][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.461168][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.500098][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.530180][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.564712][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.603102][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.630664][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.652116][T26102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.675954][T26301] tmpfs: Bad value for 'mpol' [ 736.678127][T26102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.707738][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 736.708832][T26102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.728278][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 736.741522][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 736.744050][T26102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.784287][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 736.801897][ T5851] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 736.809575][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 736.838710][T26102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.871353][T26102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.900172][T26102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.103782][T26302] lo speed is unknown, defaulting to 1000 [ 737.316471][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.361365][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.447573][T26317] macvlan2: entered promiscuous mode [ 737.487688][T26317] macvlan2: entered allmulticast mode [ 737.538463][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.590832][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.806630][T26334] loop5: detected capacity change from 0 to 512 [ 737.862533][T26334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.926627][T26302] chnl_net:caif_netlink_parms(): no params data found [ 738.020050][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 738.092647][T25553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.106879][T26320] loop7: detected capacity change from 0 to 32768 [ 738.170697][T26320] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8473 (26320) [ 738.177940][ T8] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 738.200059][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.218414][ T8] usb 5-1: Product: syz [ 738.228550][ T8] usb 5-1: Manufacturer: syz [ 738.243351][T26320] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 738.258794][ T8] usb 5-1: SerialNumber: syz [ 738.282976][ T8] usb 5-1: config 0 descriptor?? [ 738.298460][T26320] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 738.347333][T26320] BTRFS info (device loop7): using free-space-tree [ 738.402879][T26302] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.451179][T26302] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.490545][T26302] bridge_slave_0: entered allmulticast mode [ 738.498411][T26302] bridge_slave_0: entered promiscuous mode [ 738.583707][T26320] BTRFS info (device loop7): rebuilding free space tree [ 738.592427][T26302] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.608742][ T8] usb 5-1: USB disconnect, device number 18 [ 738.616876][T26302] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.635015][T26302] bridge_slave_1: entered allmulticast mode [ 738.651445][T26302] bridge_slave_1: entered promiscuous mode [ 738.779456][T26302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.830902][T26302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.871303][ T5851] Bluetooth: hci8: command tx timeout [ 738.922221][T16629] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 739.045190][T26302] team0: Port device team_slave_0 added [ 739.123024][T26302] team0: Port device team_slave_1 added [ 739.333637][T26374] loop5: detected capacity change from 0 to 32768 [ 739.345699][T26302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.371313][T26302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.403066][T26374] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8487 (26374) [ 739.438826][T26385] loop6: detected capacity change from 0 to 512 [ 739.453151][T26385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 739.464168][T26374] BTRFS info (device loop5 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 739.475327][T26302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.486202][T26385] EXT4-fs: Ignoring removed mblk_io_submit option [ 739.493186][T26374] BTRFS info (device loop5 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 739.512698][T26302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.523210][T26385] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 739.560654][T26374] BTRFS info (device loop5 state S): using free-space-tree [ 739.578410][T26302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.581170][T26385] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 739.637888][T26302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.651373][T26385] EXT4-fs (loop6): 1 truncate cleaned up [ 739.696276][T26385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.755765][T26394] loop7: detected capacity change from 0 to 2048 [ 739.835384][T26385] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 4: comm syz.6.8493: lblock 0 mapped to illegal pblock 4 (length 1) [ 739.866537][T26302] hsr_slave_0: entered promiscuous mode [ 739.893809][T26302] hsr_slave_1: entered promiscuous mode [ 739.902401][T26302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.910491][T26409] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.922407][T26385] EXT4-fs (loop6): Remounting filesystem read-only [ 739.950581][T26302] Cannot create hsr debugfs directory [ 740.081527][T26102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.092630][T25553] BTRFS info (device loop5 state S): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 740.470251][ T5851] Bluetooth: hci7: command tx timeout [ 740.559710][T26422] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 740.681507][T26422] [U] J"—E:ÀÆ" [ 740.714009][T26425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8505'. [ 740.730552][T26422] [U] ª‡Ó [ 740.951362][ T5851] Bluetooth: hci8: command tx timeout [ 741.531141][T26302] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 741.563865][T26302] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 741.637500][T26302] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 741.656194][T26444] x_tables: unsorted entry at hook 1 [ 741.694514][T26302] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 741.945588][T26302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.030780][T26302] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.073782][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.081036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.127265][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.134545][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.170466][T23054] jfs_flush_journal: synclist not empty [ 742.176877][T23054] metapage: ffff88807e4fcc98: 00001000 00000000 00000d48 00000000 [ 742.200170][T23054] metapage: ffff88807e4fcca8: 026f9230 ffffc900 5bfd7228 ffff8880 [ 742.208046][T23054] metapage: ffff88807e4fccb8: 00000004 00000000 00000000 00000000 [ 742.280734][T23054] metapage: ffff88807e4fccc8: 6aaa2000 ffff8880 0000001c 00000000 [ 742.300301][T23054] metapage: ffff88807e4fccd8: 00000000 dead4ead ffffffff 00000000 [ 742.314255][T26433] loop4: detected capacity change from 0 to 32768 [ 742.321193][T26452] loop7: detected capacity change from 0 to 8192 [ 742.328239][T23054] metapage: ffff88807e4fcce8: ffffffff ffffffff 9a54cd80 ffffffff [ 742.349288][T26433] XFS: attr2 mount option is deprecated. [ 742.366456][T23054] metapage: ffff88807e4fccf8: 93ce7fd8 ffffffff 00000000 00000000 [ 742.370385][T26458] loop5: detected capacity change from 0 to 1024 [ 742.395702][T23054] metapage: ffff88807e4fcd08: 8c42ed60 ffffffff 00000300 00000000 [ 742.427336][T26433] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 742.436595][T23054] metapage: ffff88807e4fcd18: 7e4fcd18 ffff8880 7e4fcd18 ffff8880 [ 742.512446][T23054] metapage: ffff88807e4fcd28: 01aaa880 ffffea00 5c9ac000 ffff8880 [ 742.539814][T23054] metapage: ffff88807e4fcd38: 00001000 00000000 00000002 00000000 [ 742.595594][T23054] metapage: ffff88807e4fcd48: 5bfd7000 ffff8880 [ 742.605258][T26433] XFS (loop4): Ending clean mount [ 742.620453][T23054] page: ffffea0001aaa880: 00fff3800000422c ffffea0000bad4c8 [ 742.644894][ T62] hfsplus: b-tree write err: -5, ino 4 [ 742.657903][T23054] page: ffffea0001aaa890: ffff8880668211a0 ffff888059c8e280 [ 742.666231][T26433] XFS (loop4): Quotacheck needed: Please wait. [ 742.686914][T23054] page: ffffea0001aaa8a0: 000000000000001c ffff88807e4fcc98 [ 742.729261][T23054] page: ffffea0001aaa8b0: 00000003ffffffff ffff888066630000 [ 742.763067][T23054] tblock:ffffc900026f9220: 03040800 00000000 00000d48 00000000 [ 742.793293][T26302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.801107][T23054] tblock:ffffc900026f9230: 026f9120 ffffc900 7e4fcca8 ffff8880 [ 742.808742][T23054] tblock:ffffc900026f9240: 5c9ac000 ffff8880 00030001 00000000 [ 742.883233][T23054] tblock:ffffc900026f9250: 00000000 dead4ead ffffffff 00000000 [ 742.910970][T23054] tblock:ffffc900026f9260: ffffffff ffffffff 9a54cf80 ffffffff [ 742.985915][T23054] tblock:ffffc900026f9270: 93cfc348 ffffffff 00000000 00000000 [ 743.017446][T23054] tblock:ffffc900026f9280: 8c430200 ffffffff 00000300 00000000 [ 743.033523][T26433] XFS (loop4): Quotacheck: Done. [ 743.048905][ T5851] Bluetooth: hci8: command tx timeout [ 743.058997][T23054] tblock:ffffc900026f9290: 026f9290 ffffc900 026f9290 ffffc900 [ 743.067120][T23054] tblock:ffffc900026f92a0: 00000009 00000000 9a54d120 ffffffff [ 743.075530][T23054] tblock:ffffc900026f92b0: 9a54d120 ffffffff 000011e8 00000000 [ 743.084904][T23054] tblock:ffffc900026f92c0: 4635e700 ffff8881 00000001 000001e8 [ 743.093169][T23054] tblock:ffffc900026f92d0: 00000000 dead4ead ffffffff 00000000 [ 743.101337][T23054] tblock:ffffc900026f92e0: ffffffff ffffffff 9a54cf60 ffffffff [ 743.108939][T23054] tblock:ffffc900026f92f0: 93cfc4d8 ffffffff 00000000 00000000 [ 743.118791][T23054] tblock:ffffc900026f9300: 8c4301c0 ffffffff 00000300 00000000 [ 743.126960][T23054] tblock:ffffc900026f9310: 026f9310 ffffc900 026f9310 ffffc900 [ 743.136089][T23054] tblock:ffffc900026f9320: 5b8344b8 ffff8880 00000007 00000000 [ 743.156668][T23054] tblock:ffffc900026f9110: 03240910 00000000 00000d48 00000000 [ 743.179944][T23054] tblock:ffffc900026f9120: 5bfd7228 ffff8880 026f9230 ffffc900 [ 743.210187][T23054] tblock:ffffc900026f9130: 5c9ac000 ffff8880 00020004 00000000 [ 743.223476][T26484] loop5: detected capacity change from 0 to 64 [ 743.275102][T23054] tblock:ffffc900026f9140: 00000000 dead4ead ffffffff 00000000 [ 743.340243][T23054] tblock:ffffc900026f9150: ffffffff ffffffff 9a54cf80 ffffffff [ 743.348897][T23054] tblock:ffffc900026f9160: 93cfc348 ffffffff 00000000 00000000 [ 743.400269][T23054] tblock:ffffc900026f9170: 8c430200 ffffffff 00000300 00000000 [ 743.460003][T23054] tblock:ffffc900026f9180: 026f9180 ffffc900 026f9180 ffffc900 [ 743.467652][T23054] tblock:ffffc900026f9190: 00000008 00000000 00000100 dead0000 [ 743.468068][T26491] geneve2: entered promiscuous mode [ 743.486137][T26491] geneve2: entered allmulticast mode [ 743.503672][T23054] tblock:ffffc900026f91a0: 00000122 dead0000 00000f9c 00000000 [ 743.530472][T23054] tblock:ffffc900026f91b0: 4635e700 ffff8881 00000000 00000f9c [ 743.558891][T23071] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 743.571494][T23054] tblock:ffffc900026f91c0: 00000000 dead4ead ffffffff 00000000 [ 743.604020][T23054] tblock:ffffc900026f91d0: ffffffff ffffffff 9a54cf60 ffffffff [ 743.630065][T23054] tblock:ffffc900026f91e0: 93cfc4d8 ffffffff 00000000 00000000 [ 743.660230][T23054] tblock:ffffc900026f91f0: 8c4301c0 ffffffff 00000300 00000000 [ 743.689328][T23054] tblock:ffffc900026f9200: 026f9200 ffffc900 026f9200 ffffc900 [ 743.731465][T23054] tblock:ffffc900026f9210: 59c8f2d0 ffff8880 00001000 00000000 [ 743.780076][ T5840] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 743.792895][ T5840] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 743.801310][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 743.812161][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 743.822217][ T5840] RIP: 0010:jfs_flush_journal+0x95d/0xec0 [ 743.827952][ T5840] Code: 00 00 49 8d 5f d8 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 71 c5 d1 fe 4c 8b 33 49 83 c6 30 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 54 c5 d1 fe 49 8b 3e e8 6c 62 a3 [ 743.847600][ T5840] RSP: 0018:ffffc900031b7b20 EFLAGS: 00010216 [ 743.853680][ T5840] RAX: 0000000000000006 RBX: ffff88805da7da10 RCX: ffff88806101bc00 [ 743.861656][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 743.869625][ T5840] RBP: ffffc900031b7c50 R08: ffffffff81f7877f R09: ffffc900031b7908 [ 743.877597][ T5840] R10: dffffc0000000000 R11: fffff52000636f50 R12: 0000000000000057 [ 743.885568][ T5840] R13: dffffc0000000000 R14: 0000000000000030 R15: ffff88805da7da38 [ 743.893544][ T5840] FS: 000055555ce19500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 743.902472][ T5840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.909049][ T5840] CR2: 000000110c34fc1d CR3: 0000000061f88000 CR4: 0000000000350ef0 [ 743.917018][ T5840] Call Trace: [ 743.920293][ T5840] [ 743.923219][ T5840] ? __die_body+0x5f/0xb0 [ 743.927559][ T5840] ? die_addr+0xb0/0xe0 [ 743.931721][ T5840] ? exc_general_protection+0x3dd/0x5d0 [ 743.937294][ T5840] ? asm_exc_general_protection+0x26/0x30 [ 743.943027][ T5840] ? filemap_fdatawrite+0x19f/0x2a0 [ 743.948230][ T5840] ? jfs_flush_journal+0x95d/0xec0 [ 743.953347][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.958995][ T5840] ? __pfx_jfs_flush_journal+0x10/0x10 [ 743.964460][ T5840] ? hook_sb_delete+0x1aa/0xbd0 [ 743.969311][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.974955][ T5840] ? hook_sb_delete+0xaa0/0xbd0 [ 743.979808][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 743.985013][ T5840] ? fsnotify_sb_delete+0x3b9/0x700 [ 743.990229][ T5840] ? __pfx_dquot_disable+0x10/0x10 [ 743.995346][ T5840] jfs_umount+0x170/0x3a0 [ 743.999683][ T5840] jfs_put_super+0x8a/0x190 [ 744.004193][ T5840] ? __pfx_jfs_put_super+0x10/0x10 [ 744.009315][ T5840] generic_shutdown_super+0x13b/0x2d0 [ 744.014696][ T5840] kill_block_super+0x44/0x90 [ 744.019385][ T5840] deactivate_locked_super+0xc6/0x130 [ 744.024800][ T5840] cleanup_mnt+0x41f/0x4b0 [ 744.029226][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.034871][ T5840] ? lockdep_hardirqs_on+0x99/0x150 [ 744.040081][ T5840] task_work_run+0x251/0x310 [ 744.044687][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 744.049806][ T5840] ? __x64_sys_umount+0x123/0x170 [ 744.054844][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 744.060572][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 744.066216][ T5840] do_syscall_64+0x100/0x230 [ 744.070820][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.076723][ T5840] RIP: 0033:0x7f0174f8e117 [ 744.081132][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 744.100766][ T5840] RSP: 002b:00007ffc529670f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 744.109188][ T5840] RAX: 0000000000000000 RBX: 00007f017500e08c RCX: 00007f0174f8e117 [ 744.117157][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc529671b0 [ 744.125125][ T5840] RBP: 00007ffc529671b0 R08: 0000000000000000 R09: 0000000000000000 [ 744.133091][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc52968240 [ 744.141061][ T5840] R13: 00007f017500e08c R14: 00000000000aff3e R15: 00007ffc52968280 [ 744.149066][ T5840] [ 744.152076][ T5840] Modules linked in: [ 744.157963][ T5840] ---[ end trace 0000000000000000 ]--- [ 744.197275][ T5840] RIP: 0010:jfs_flush_journal+0x95d/0xec0 [ 744.203109][ T5840] Code: 00 00 49 8d 5f d8 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 71 c5 d1 fe 4c 8b 33 49 83 c6 30 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 54 c5 d1 fe 49 8b 3e e8 6c 62 a3 [ 744.222843][ T5840] RSP: 0018:ffffc900031b7b20 EFLAGS: 00010216 [ 744.228930][ T5840] RAX: 0000000000000006 RBX: ffff88805da7da10 RCX: ffff88806101bc00 [ 744.231516][T26455] loop6: detected capacity change from 0 to 32768 [ 744.237114][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.251483][ T5840] RBP: ffffc900031b7c50 R08: ffffffff81f7877f R09: ffffc900031b7908 [ 744.259480][ T5840] R10: dffffc0000000000 R11: fffff52000636f50 R12: 0000000000000057 [ 744.268888][ T5840] R13: dffffc0000000000 R14: 0000000000000030 R15: ffff88805da7da38 [ 744.274016][T26302] veth0_vlan: entered promiscuous mode [ 744.277262][ T5840] FS: 000055555ce19500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 744.306164][ T5840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.313207][ T5840] CR2: 00007fdd55e15f98 CR3: 0000000061f88000 CR4: 0000000000350ef0 [ 744.314271][T26302] veth1_vlan: entered promiscuous mode [ 744.321392][ T5840] Kernel panic - not syncing: Fatal exception [ 744.326839][ T5840] Kernel Offset: disabled