last executing test programs: 2m40.626998268s ago: executing program 2 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="08000000042004001c002b8008000800", @ANYRES32=r1, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 2m40.041770747s ago: executing program 2 (id=243): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x122236002}) 2m39.737327412s ago: executing program 2 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2m39.575833654s ago: executing program 2 (id=248): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000005900)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macgreek'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 2m39.365730798s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003e80)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xd, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 2m38.858474976s ago: executing program 2 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2m38.268930495s ago: executing program 32 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5.239568686s ago: executing program 0 (id=1805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 4.97456725s ago: executing program 0 (id=1810): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 4.743958274s ago: executing program 0 (id=1812): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905810318"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.7203696s ago: executing program 3 (id=1835): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x90}, 0x0) 3.612511511s ago: executing program 3 (id=1827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x60, 0x8e, 0x40, 0x10b8, 0x1ebc, 0x17d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x0, 0xc1, 0x83, 0x99}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x2a, 0x9, "9627cb59da33837e4d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.056625081s ago: executing program 5 (id=1832): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a3881affa01a", 0x0, 0x0, 0x12, 0x0, 0x0}) 2.929407352s ago: executing program 4 (id=1834): r0 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) 2.869971554s ago: executing program 5 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xaa}, [@NDA_LLADDR={0xa, 0x2, @random="2c4e91229fcd"}]}, 0x28}}, 0x0) 2.832341804s ago: executing program 4 (id=1837): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef2}}], 0x1, 0x0, 0x0) 2.778516825s ago: executing program 5 (id=1838): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 2.723738926s ago: executing program 5 (id=1839): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0xfffffffffffffffe) 2.412121211s ago: executing program 4 (id=1843): r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file1\x00', 0x2218a5d, &(0x7f0000000040)={[{@grpquota}, {@nouuid}, {@nogrpid}, {@discard}]}, 0x0, 0x965a, &(0x7f0000012c40)="$eJzs+gm8pnPh+P/fZxi7jKGSUlMRLbJmiWpmMEMhWaIdkZSlpELbUFKoiGhT9i1bWULZWkn2FkoIlTXSYhvm/zjmTMb04lPfPv+fT71er8fjnPu+r/u6rvO+389rOYfZbNJGEweDuQbTGzeYtfOunTx1zNXr33nUlgseu9yp9+7/2BUXHz/yOGHkceJgMBg18vbQ9GVjB6edPmow+yPLH23euecZmn8wWH7k5ch+BitPf5j/ihnrTZulWQc69Oi3vad/PdICwz9i+Mnh++95xGAwGDPT9kODwdCUf/ig0jabMHnSo1Z/dxu2Gj3yfOavOaZ/zX/xYDD/mQM+PmZed+hJ+EjDP3PKi84dvf6T8LP/49pswuR1ZvEfPhdnG1m28vA5Pus5aGzW4/z2JTZfdWQKHzneBoPhS9xjzpX/iDabMGndweNf5wdHrXbh3tOmXzfnHEy/Ucw9GAzmGbm+zvdku9S/14SJKzxyz57xeoR9xrE8hY6LE9568sPDN+nBYLDQYDB27Rn3gqqqqvrPaMLEFdaA+/9cT3T/P+WURc/s/l9VVfWf2zoTJq4wfK+f5f4/3xPd/3da9KI9pv+3//ErT9/q4Sf3Q1RVVdW/1KR18P4/5onu/yuvcdm63f+rqqr+c9twvUfu//PNcv9f+Inu/286ebXFRtab8XvDQzPtcmim/5/w4EzLZ5tp+QMzLR89035mXn+OmZbfN9PyOYffg/XHDQZjZ/x7wamPLh47bvi9keX3z7R8/KP/TmfxNWdaPmGm5ZNmWj5xZKzDyyfPtHzyTOuv/QRTXVVV9X+mDVeYtMZgpn9nP7J4kRnv0/3/grOuW/rJGm9VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX9Z/bwnWefOxgMhgaDwajBYOpg5PnMj4Np06ZNG359yvmXX/6kDfT/RkPnXTt56pir17/zqC0XPHa5U+/d/9FZ+o/tP/8T1L/TsP9cx48bDHbY5MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uIfvPPvckWNg1GAwdTDyfMqMx7P2e+ObR1ZdddNT7z7o0S0XH7/tyLPzrp08ddsnYexPQkPDn3XM1evfedSWCx673Kn37v9fcPb853+C+nd6xH/bocFg5PweM3wurz9hw42XGgwGB9196qYrDf7+3irD7602drbBbI9sutQj39danHc8Ze3pj+OHvy38932c8sj+15l22GxDswxipl5x3o1HvXOze1ec9XHJx/8co2Y8OeL6M+6ZNm3atMcsHGmux9l4xv5nfJZZz/ORsS81PPZldt7+Pcu8b9fdlt52+y222XqbrXdYboVVVlxp+eVWWvVly7xj2+22Xnb698eZs3GPfF/jn5mz+WadszsnzDxns362x5uzcU88Z4/scepuQxvPmLPZ/8U5W+OJ52zctiM/aPHxowebPzI1Q4PB4muOHuwy/GK5OQeDxdcaWXeR4XVXHztqMNjv0Q86/GzOvx+DQ1OG19ls0kYTHx3ZP37Cf7hOP2bFxcePPE4YeZw4fYjjBo8eimMHp50+anguHjPN8849z9D8g8HyIy9H9jNYdeTdQ2esN22WZh3o0KPf9p7+9UgLDO9k+Mm7lj37muFzcZbt///R/9P1/x+8Vhn6+0QNjXyNrDPda8LkdR79WY9Mw/DczTaybOVhk1nn7H+zfxjvuNkHY55gvJPWmbjC8OJZ5n/GJnh83bXEhR+afmyNX3n6Vg//P6PQeOd7gvGuMwHHO98Tjff4D196+vRd/a+Nd5Zr3bqPfB//z1zrBk98rZuNdrD1JYvNeq17zeMP8THn8Yw5mnOWlR7vWrfLwctPGd7/+Ce+1q07PPbRj7nWjRoMFl9jxrVu+MI3afRgv+EXyw+/mDx6cOzwixUeeTH34PzhFy99+47bbTW8YO0Zc7Ls8H7Hjx16xP3ClW9bctoB06atOTKW8WMfO9aR42PczPfzCWOnT+aMbWfsd3jVGfu95enT35s0st8J/8J+Z2xL4717genvTR7Z78RZ9jv6CfY7Y9t/OB+WGvr7hetxrjeTZrnejPyNM+PHPeZrjulf8188GMx/JvnOsu7/eM2k83euJxjvhIkrrDE8vlnO378fjnT+Xjr56uF7xfyDwWChwWDs2jPG/i829Hjjnf2JxzsRxjv7E433yuO2X+9/YbyDmcb7mONssw2nHytrjxxnk/+F43fGtrNex0Y/8u70y/7a/8x1bNw/XMd2n23ULJM9U4/3O9tWsP7054s8+nvutScdM2PuR8+y3//pd7aZPssQXMfGzPL3/Ki1bxgM0ZxPOX71y4YOfOI5Hz147N8WM+Z8xrZPNOeT/5k5f9YTz/k/+3vyUs+f/v7oWcY/85xvsO8z95kx53PMst//ac4nP/G94x/nfPxgNM35sg9Mn7cnup4+3pzP2HbGnA9/xNXGzj5Ya/ieNTLnk/6ZOV/kf+c4nwfWn/58678vOueoU18/Y85nneP/ac4n/atzPu7vx/nij7z3vFGDOeYY7LLFzjvvtNz07zNeLj/9O1+L7rt2+jw/0b308YxmbPtE58Wa/4zRmH/KaOh/Mlp09sczevTUOnLHnZ72/3otWvNfNRrwtejqY6bP2xP9XvR4cz5jW7oPLjzT9rP+Hbrheo/83j3fLPfBGZvgffCcs9bda8YuRzZ7aJZhzrivPjjT8tlmWv7ATMtHz7SfmdefY6bl9820fPgjzDHT+jNYxw3/zTuyfOqjq48d/uVp3Mjy+2daPv7RbRdfc6blE2ZaPmmm5RMfPTQWnzzT8skzrb/24F9sxn+T3nbWi3z9s/Xff93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7+M6zzx05BkYNBlMH058PjTwOpgxtcMerhh8Hg8HolU+ctsGTPd4nuaHzrp08dczV69951JYLHrvcqffu/19w9vznf4L6d3rEf9uhwWDk/B6z7WAwWH/ChhsvNRgMNph24sqjBn9/b5Hh91YfO2ow2G/oMTuY8+/rDE0ZXmezSRtNHAzmGllj3D/80H84jx6z4uLjRx4njDxOnH59Gjd49HgdOzjt9FGD2R9Z/mjzzj3P0PyDwfIjL0f2M1h5+sP8V8xYb9oszTrQoUe/7T3965EWGP4Rw0922Wbys4fnapbt/88041q97aj/cdXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf38J1nnztyDIwaDKYOpj8fmjLyOBg6+bQXjhwio3e96ujDnuzxPskNnXft5Kljrl7/zqO2XPDY5U69d///grPnP/8T1L/TI/7bDg0GI+f3mG0Hg8H6EzbceKnBYHDY0VftOmrw9/cWGX5v9bGjBoP9hh6zgzn/vs7QlOF1Npu00cTBYK6RNcb9ww/9h/PoMSsuPn7kccLI48Tp16dxg0eP17GD004fNZj9keWPNu/c8wzNPxgsP/JyZD+Dlac/zH/FjPWmzdKsAx169Nve078eaYHhHzH8ZM/5rj15eK5m2f7/TDOu1duO+h9X7fx3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cQ/fefa5I8fAqMFg6mD681Ejj0NTbr7poxsPPw6/XnDtva59ssf7JDd03rWTp465ev07j9pywWOXO/Xe/f8Lzp7//E9Q/07D/nMdP24w2GGTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHr7z7HNHno56dOmoKR0X2NB5106eOubq9e88assFj13u1Hv3f7IH9O/2OP67549Z/PfIH7P4fzx/zOL/ifwxi/+e+WMW/0/mj1n898ofs/h/Kn/M4v/p/DGL/975Yxb/ffLHLP775o9Z/D+TP2bx/2z+mMX/c/ljFv/98scs/vvnj1n8P58/ZvE/IH/M4n9g/pjF/wv5Yxb/g/LHLP4H549Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxPyR/zOL/tfwxi//X88cs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/0b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8zf8zi/638MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/O3/M4n9m/pjF/6z8MYv/2fljFv/v5I9Z/L+bP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zif2H+mMX/ovwxi/9P8scs/hfnj1n8f5o/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/hfnT9m8b8mf8zi/6v8MYv/r/PHLP7X5o9Z/H+TP2bxvy5/zOJ/ff6Yxf+G/DGL/2/zxyz+N+aPWfxvyh+z+N+cP2bx/13+mMX/9/ljFv8/5I9Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv8/5o9Z/O/KH7P4350/ZvH/U/6Yxf+e/DGL/5/zxyz+f8kfs/j/NX/M4v+3/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvGfmj9m8X8of8zi/3D+mMV/Wv6YxH+2Qf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9T8scs/gvkj1n8x9j8Xz3/P7WaxX9Bm/8/mcV/bP6YxX+h/DGL/8L5Yxb/p+aPWfyflj9m8X96/pjFf5H8MYv/M/LHLP6L5o9Z/J+ZP2bxf1b+mMV/sfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+ePWfyXyB+z+L8gf8ziv2T+mMV/qfwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi//S+WMW/5fmj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5flj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/5fljFv/V8scs/qvnj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/zXyxyz+a+aPWfzXyh+z+E/KH7P4T84fs/ivnT9m8V8nf8zi/+r8MYv/a/LHLP7r5o9Z/NfLH7P4r58/ZvF/bf6YxX+D/DGL/+vyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/+vwxi/+m+WMW/83yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/+b5Yxb/LfLHLP5b5o9Z/N+eP2bx3yp/zOK/df6Yxf8d+WMW/23yxyz+78wfs/hvmz9m8X9X/pjF/935Yxb/7fLHLP7b549Z/HfIH7P475g/ZvF/T/6Yxf+9+WMW/53yxyz+78sfs/jvnD9m8X9//pjF/wP5Yxb/D+aPWfx3yR+z+O+aP2bx3y1/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/+U/DGL/+75Yxb/PfLHLP4fzx+z+H8if8ziv2f+mMX/k/ljFv+98scs/p/KH7P4fzp/zOK/d/6YxX+f/DGL/775Yxb/z+SPWfw/mz9m8f9c/pjFf7/8MYv//vljFv/P549Z/A/IH7P4H5g/ZvH/Qv6Yxf+g/DGL/8H5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfwPyR+z+H8tf8zi//X8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfy/kT9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+38wfs/h/K3/M4n9q/pjF/7T8MYv/6fljFv8z8scs/t/OH7P4n5k/ZvE/K3/M4n92/pjF/zv5Yxb/7+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/hfmD9m8b8of8zi/5P8MYv/xfljFv+f5o9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/j/LH7P4/zx/zOL/i/wxi/8v88cs/lfnj1n8r8kfs/j/Kn/M4v/r/DGL/7X5Yxb/3+SPWfyvyx+z+F+fP2bxvyF/zOL/2/wxi/+N+WMW/5vyxyz+N+ePWfx/lz9m8f99/pjF/w/5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/4/5Yxb/u/LHLP53549Z/P+UP2bxvyd/zOL/5/wxi/9f8scs/n/NH7P4/y1/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/Kfmj1n8H8ofs/g/nD9m8Z+WPybxn32QP2bxH8ofs/iPyh+z+M+WP2bxnz1/zOI/On/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8zi/5T8MYv/AvljFv8x+WMW/wXzxyz+Y/PHLP4L5Y9Z/BfOH7P4PzV/zOL/tPwxi//T88cs/ovkj1n8n5E/ZvFfNH/M4v/M/DGL/7Pyxyz+i+WPWfyfnT9m8X9O/pjFf1z+mMX/ufljFv/n5Y9Z/J+fP2bxXzx/zOK/RP6Yxf8F+WMW/yXzxyz+S+WPWfxfmD9m8X9R/pjF/8X5Yxb/l+SPWfyXzh+z+L80f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+L8sf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+L88fs/ivlj9m8V89f8zi/4r8MYv/K/PHLP6vyh+z+I/PH7P4T8gfs/hPzB+z+K+RP2bxXzN/zOK/Vv6YxX9S/pjFf3L+mMV/7fwxi/86+WMW/1fnj1n8X5M/ZvFfN3/M4r9e/pjFf/38MYv/a/PHLP4b5I9Z/F+XP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/1+ePWfw3zR+z+G+WP2bxf0P+mMX/jfljFv835Y9Z/N+cP2bxf0v+mMX/rfljFv+35Y9Z/DfPH7P4b5E/ZvHfMn/M4v/2/DGL/1b5Yxb/rfPHLP7vyB+z+G+TP2bxf2f+mMV/2/wxi/+78scs/u/OH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/e/LHLP7vzR+z+O+UP2bxf1/+mMV/5/wxi//788cs/h/IH7P4fzB/zOK/S/6YxX/X/DGL/275Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfyn5I9Z/HfPH7P475E/ZvH/eP6Yxf8T+WMW/z3zxyz+n8wfs/jvlT9m8f9U/pjF/9P5Yxb/vfPHLP775I9Z/PfNH7P4fyZ/zOL/2fwxi//n8scs/vvlj1n8988fs/h/Pn/M4n9A/pjF/8D8MYv/F/LHLP4H5Y9Z/A/OH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+XP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/wvwxi/9F+WMW/5/kj1n8L84fs/j/NH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8f9Z/pjF/+f5Yxb/X+SPWfx/mT9m8b86f8zif03+mMX/V/ljFv9f549Z/K/NH7P4/yZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+aPWfxvzB+z+N+UP2bxvzl/zOL/u/wxi//v88cs/n/IH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/n/MH7P435U/ZvG/O3/M4v+n/DGL/z35Yxb/P+ePWfz/kj9m8f9r/pjF/2/5Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4j81f8zi/1D+mMX/4fwxi/+0/DGJ/+hB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zn50WWvzfkz9m8X9v/pjFf6f8MYv/+/LHLP47549Z/N+fP2bx/0D+mMX/g/ljFv9d8scs/rvmj1n8d8sfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j8lf8ziv3v+mMV/j/wxi//H88cs/p/IH7P475k/ZvH/ZP6YxX+v/DGL/6fyxyz+n84fs/jvnT9m8d8nf8ziv2/+mMX/M/ljFv/P5o9Z/D+XP2bx3y9/zOK/f/6Yxf/z+WMW/wPyxyz+B+aPWfy/kD9m8T8of8zif3D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9D8scs/l/LH7P4fz1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv9v5I9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/N/PHLP7fyh+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/7fzxyz+Z+aPWfzPyh+z+J+dP2bx/07+mMX/u/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zi/738MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4X5o9Z/C/KH7P4/yR/zOJ/cf6Yxf+n+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/8/yxyz+P88fs/j/In/M4v/L/DGL/9X5Yxb/a/LHLP6/yh+z+P86f8zif23+mMX/N/ljFv/r8scs/tfnj1n8b8gfs/j/Nn/M4n9j/pjF/6b8MYv/zfljFv/f5Y9Z/H+fP2bx/0P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bx/2P+mMX/rvwxi//d+WMW/z/lj1n878kfs/j/OX/M4v+X/DGL/1/zxyz+f8sfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/6n5Yxb/h/LHLP4P549Z/Kflj0n85xjkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F88fs/gvkT9m8X9B/pjFf8n8MYv/UvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv+l88cs/i/NH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/LH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/PHLP6r5Y9Z/FfPH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/mvkj1n818wfs/ivlT9m8Z+UP2bxn5w/ZvFfO3/M4r9O/pjF/9X5Yxb/1+SPWfzXzR+z+K+XP2bxXz9/zOL/2vwxi/8G+WMW/9flj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/9fljFv9N88cs/pvlj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/83zxyz+W+SPWfy3zB+z+L89f8ziv1X+mMV/6/wxi/878scs/tvkj1n835k/ZvHfNn/M4v+u/DGL/7vzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/nvwxi/9788cs/jvlj1n835c/ZvHfOX/M4v/+/DGL/wfyxyz+H8wfs/jvkj9m8d81f8ziv1v+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8p+WMW/93zxyz+e+SPWfw/nj9m8f9E/pjFf8/8MYv/J/PHLP575Y9Z/D+VP2bx/3T+mMV/7/wxi/8++WMW/33zxyz+n8kfs/h/Nn/M4v+5/DGL/375Yxb//fPHLP6fzx+z+B+QP2bxPzB/zOL/hfwxi/9B+WMW/4Pzxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/gfkj9m8f9a/pjF/+v5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/I3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5k/ZvH/Vv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+dP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fyxyz+380fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/MH/M4n9R/pjF/yf5Yxb/i/PHLP4/zR+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/OH7P4X5M/ZvH/Vf6Yxf/X+WMW/2vzxyz+v8kfs/hflz9m8b8+f8zif0P+mMX/t/ljFv8b88cs/jflj1n8b84fs/j/Ln/M4v/7/DGL/x/yxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/x/zxyz+d+WPWfzvzh+z+P8pf8zif0/+mMX/z/ljFv+/5I9Z/P+aP2bx/1v+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+E/NH7P4P5Q/ZvF/OH/M4j8tf0ziP+cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8jf8ziv2b+mMV/rfwxi/+k/DGL/+T8MYv/2vljFv918scs/q/OH7P4vyZ/zOK/bv6YxX+9/DGL//r5Yxb/1+aPWfw3yB+z+L8uf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+r88fs/hvmj9m8d8sf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+eP2bx3yJ/zOK/Zf6Yxf/t+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/tvljFv935Y9Z/N+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/9+SPWfzfmz9m8d8pf8zi/778MYv/zvljFv/3549Z/D+QP2bx/2D+mMV/l/wxi/+u+WMW/93yxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPyR+z+O+eP2bx3yN/zOL/8fwxi/8n8scs/nvmj1n8P5k/ZvHfK3/M4v+p/DGL/6fzxyz+e+ePWfz3yR+z+O+bP2bx/0z+mMX/s/ljFv/P5Y9Z/PfLH7P4758/ZvH/fP6Yxf+A/DGL/4H5Yxb/L+SPWfwPyh+z+B+cP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/kPwxi//X8scs/l/PH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/G/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/838MYv/t/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4v/t/DGL/5n5Yxb/s/LHLP5n549Z/L+TP2bx/27+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/hfljFv+L8scs/j/JH7P4X5w/ZvH/af6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4n91/pjF/5r8MYv/r/LHLP6/zh+z+F+bP2bx/03+mMX/uvwxi//1+WMW/xvyxyz+v80fs/jfmD9m8b8pf8zif3P+mMX/d/ljFv/f549Z/P+QP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/P+YP2bxvyt/zOJ/d/6Yxf9P+WMW/3vyxyz+f84fs/j/JX/M4v/X/DGL/9/yxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6YxX9q/pjF/6H8MYv/w/ljFv9p+WMS/7kG+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/8a+WMW/zXzxyz+a+WPWfwn5Y9Z/Cfnj1n8184fs/ivkz9m8X91/pjF/zX5Yxb/dfPHLP7r5Y9Z/NfPH7P4vzZ/zOK/Qf6Yxf91+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf33+mMV/0/wxi/9m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/z/DGL/xb5Yxb/LfPHLP5vzx+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n8t80fs/i/K3/M4v/u/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4vyd/zOL/3vwxi/9O+WMW//flj1n8d84fs/i/P3/M4v+B/DGL/wfzxyz+u+SPWfx3zR+z+O+WP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/Sv6YxX/3/DGL/x75Yxb/j+ePWfw/kT9m8d8zf8zi/8n8MYv/XvljFv9P5Y9Z/D+dP2bx3zt/zOK/T/6YxX/f/DGL/2fyxyz+n80fs/h/Ln/M4r9f/pjFf//8MYv/5/PHLP4H5I9Z/A/MH7P4fyF/zOJ/UP6Yxf/g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+h+SPWfy/lj9m8f96/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+38gfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/2/mj1n8v5U/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv9v549Z/M/MH7P4n5U/ZvE/O3/M4v+d/DGL/3fzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf97+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8L8wfs/hflD9m8f9J/pjF/+L8MYv/T/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv+r88cs/tfkj1n8f5U/ZvH/df6Yxf/a/DGL/2/yxyz+1+WPWfyvzx+z+N+QP2bx/23+mMX/xvwxi/9N+WMW/5vzxyz+v8sfs/j/Pn/M4v+H/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4v/H/DGL/135Yxb/u/PHLP5/yh+z+N+TP2bx/3P+mMX/L/ljFv+/5o9Z/P+WP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP5T88cs/g/lj1n8H84fs/hPyx+T+M89yB+z+A/lj1n8R+WPWfxnyx+z+M+eP2bxH50/ZvGfI3/M4j9n/pjFf678sZn8Z/9v9p87f8xy/s+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f8ziv0f+mMX/4/ljFv9P5I9Z/PfMH7P4fzJ/zOK/V/6Yxf9T+WMW/0/nj1n8984fs/jvkz9m8d83f8zi/5n8MYv/Z/PHLP6fyx+z+O+XP2bx3z9/zOL/+fwxi/8B+WMW/wPzxyz+X8gfs/gflD9m8T84f8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/IfljFv+v5Y9Z/L+eP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/5v5Yxb/b+WPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/b+WMW/zPzxyz+Z+WPWfzPzh+z+H8nf8zi/938MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/C/PHLP4X5Y9Z/H+SP2bxvzh/zOL/0/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf9n+WMW/5/nj1n8f5E/ZvH/Zf6Yxf/q/DGL/zX5Yxb/X+WPWfx/nT9m8b82f8zi/5v8MYv/dfljFv/r88cs/jfkj1n8f5s/ZvG/MX/M4n9T/pjF/+b8MYv/7/LHLP6/zx+z+P8hf8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+P8xf8zif1f+mMX/7vwxi/+f8scs/vfkj1n8/5w/ZvH/S/6Yxf+v+WMW/7/lj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi//U/DGL/0P5Yxb/h/PHLP7T8sck/vMM8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/1z/6v/L/03H9H83i/+7Of8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f+y/13/a0Mz+e+SP/ff6P/b8/3j+mMX/E/ljFv8988cs/p/MH7P475U/ZvH/VP6Yxf/T+WMW/73zxyz+++SPWfz3zR+z+H8mf8zi/9n8MYv/5/LHLP775Y9Z/PfPH7P4fz5/zOJ/QP6Yxf/A/DGL/xfyxyz+B+WPWfwPzh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zif0j+mMX/a/ljFv+v549Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/438MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9m/pjF/1v5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/dv6Yxf/M/DGL/1n5Yxb/s/PHLP7fyR+z+H83f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/lz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/8L8MYv/RfljFv+f5I9Z/C/OH7P4/zR/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvH/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvG/On/M4n9N/pjF/1f5Yxb/X+ePWfyvzR+z+P8mf8zif13+mMX/+vwxi/8N+WMW/9/mj1n8b8wfs/jflD9m8b85f8zi/7v8MYv/7/PHLP5/yB+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP5/zB+z+N+VP2bxvzt/zOL/p/wxi/89+WMW/z/nj1n8/5I/ZvH/a/6Yxf9v+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOI/NX/M4v9Q/pjF/+H8MYv/tPwxif+8g/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv+n5I9Z/BfIH7P4j8kfs/gvmD9m8R+bP2bxXyh/zOK/cP6Yxf+p+WMW/6flj1n8n54/ZvFfJH/M4v+M/DGL/6L5Yxb/Z+aPWfyflT9m8V8sf8zi/+z8MYv/c/LHLP7j8scs/s/NH7P4Py9/zOL//Pwxi//i+WMW/yXyxyz+L8gfs/gvmT9m8V8qf8zi/8L8MYv/i/LHLP4vzh+z+L8kf8ziv3T+mMX/pfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/ZfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X95/pjFf7X8MYv/6vljFv9X5I9Z/F+ZP2bxf1X+mMV/fP6YxX9C/pjFf2L+mMV/jfwxi/+a+WMW/7Xyxyz+k/LHLP6T88cs/mvnj1n818kfs/i/On/M4v+a/DGL/7r5Yxb/9fLHLP7r549Z/F+bP2bx3yB/zOL/uvwxi/+G+WMW/43yxyz+G+ePWfw3yR+z+L8+f8ziv2n+mMV/s/wxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOK/ef6YxX+L/DGL/5b5Yxb/t+ePWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/tvmj1n835U/ZvF/d/6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/N+TP2bxf2/+mMV/p/wxi//78scs/jvnj1n8358/ZvH/QP6Yxf+D+WMW/13yxyz+u+aPWfx3yx+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziPyV/zOK/e/6YxX+P/DGL/8fzxyz+n8gfs/jvmT9m8f9k/pjFf6/8MYv/p/LHLP6fzh+z+O+dP2bx3yd/zOK/b/6Yxf8z+WMW/8/mj1n8P5c/ZvHfL3/M4r9//pjF//P5Yxb/A/LHLP4H5o9Z/L+QP2bxPyh/zOJ/cP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/0Pyxyz+X8sfs/h/PX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/kj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/8388cs/t/KH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/t/PHLP5n5o9Z/M/KH7P4n50/ZvH/Tv6Yxf+7+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL/vfwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/hfmj1n8L8ofs/j/JH/M4n9x/pjF/6f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/LHLP4/zx+z+P8if8zi/8v8MYv/1fljFv9r8scs/r/KH7P4/zp/zOJ/bf6Yxf83+WMW/+vyxyz+1+ePWfxvyB+z+P82f8zif2P+mMX/pvwxi//N+WMW/9/lj1n8f58/ZvH/Q/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvH/Y/6Yxf+u/DGL/935Yxb/P+WPWfzvyR+z+P85f8zi/5f8MYv/X/PHLP5/yx+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/qfljFv+H8scs/g/nj1n8p+WPSfznG+SPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zvyxyz+2+SPWfzfmT9m8d82f8zi/678MYv/u/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+e/DGL/3vzxyz+O+WPWfzflz9m8d85f8zi//78MYv/B/LHLP4fzB+z+O+SP2bx3zV/zOK/W/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/yn5Yxb/3fPHLP575I9Z/D+eP2bx/0T+mMV/z/wxi/8n88cs/nvlj1n8P5U/ZvH/dP6YxX/v/DGL/z75Yxb/ffPHLP6fyR+z+H82f8zi/7n8MYv/fvljFv/988cs/p/PH7P4H5A/ZvE/MH/M4v+F/DGL/0H5Yxb/g/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHhv0Hg8GU/3b/r+aPWc7/Q/LHLP5fyx+z+H89f8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+SPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/zfzxyz+38ofs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+388cs/mfmj1n8z8ofs/ifnT9m8f9O/pjF/7v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+aPWfwvyh+z+P8kf8zif3H+mMX/p/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi//V+WMW/2vyxyz+v8ofs/j/On/M4n9t/pjF/zf5Yxb/6/LHLP7X549Z/G/IH7P4/zZ/zOJ/Y/6Yxf+m/DGL/835Yxb/3+WPWfx/nz9m8f9D/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8f9j/pjF/678MYv/3fljFv8/5Y9Z/O/JH7P4/zl/zOL/l/wxi/9f88cs/n/LH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+p+WMW/4fyxyz+D+ePWfyn5Y9J/Ocf5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+D8lf8ziv0D+mMV/TP6YxX/B/DGL/9j8MYv/QvljFv+F88cs/k/NH7P4Py1/zOL/9Pwxi/8i+WMW/2fkj1n8F80fs/g/M3/M4v+s/DGL/2L5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n50/tPpD4L54/Zjn/l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/V/6Yxf/d+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bxf0/+mMX/vfljFv+d8scs/u/LH7P475w/ZvF/f/6Yxf8D+WMW/w/mj1n8d8kfs/jvmj9m8d8tf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/lPwxi//u+WMW/z3yxyz+H88fs/h/In/M4r9n/pjF/5P5Yxb/vfLHLP6fyh+z+H86f8ziv3f+mMV/n/wxi/+++WMW/8/kj1n8P5s/ZvH/XP6YxX+//DGL//75Yxb/z+ePWfwPyB+z+B+YP2bx/0L+mMX/oPwxi//B+WMW/y/K/ed4nOUW/y/J/R8vi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv7TO+TWsdvN9NLif27+mMX/vPwxi//5+WMW/wvyxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4n9h/pjF/6L8MYv/T/LHLP4X549Z/H+aP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/yx/zOL/8/wxi/8v8scs/r/MH7P4X50/ZvG/Jn/M4v+r/DGL/6/zxyz+1+aPWfx/kz9m8b8uf8zif33+mMX/hvwxi/9v88cs/jfmj1n8b8ofs/jfnD9m8f9d/pjF//f5Yxb/P+SPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/P+aPWfzvyh+z+N+dP2bx/1P+mMX/nvwxi/+f88cs/n/JH7P4/zV/zOL/t/wxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxn5o/ZvF/KH/M4v9w/pjFf1r+mMT/KYP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r5/+YZsyNxX+V/DGL/6r5Yxb/l+ePWfxXyx+z+K+eP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfIH7P4r5k/ZvFfK3/M4j8pf8ziPzl/zOK/dv6YxX+d/DGL/6vzxyz+r8kfs/ivmz9m8V8vf8ziv37+mMX/tfljFv8N8scs/q/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/6/PHLP6b5o9Z/DfLH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvnj1n8t8gfs/hvmT9m8X97/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOK/bf6Yxf9d+WMW/3fnj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/PfljFv/35o9Z/HfKH7P4vy9/zOK/c/6Yxf/9+WMW/w/kj1n8P5g/ZvHfJX/M4r9r/pjFf7f8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP5T8scs/rvnj1n898gfs/h/PH/M4v+J/DGL/575Yxb/T+aPWfz3yh+z+H8qf8zi/+n8MYv/3vljFv998scs/vvmj1n8P5M/ZvH/bP6Yxf9z+WMW//3yxyz+++ePWfw/nz9m8T8gf8zif2D+mMX/C/ljFv+D8scs/gfnj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvE/JH/M4v+1/DGL/9fzxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Rv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fzN/zOL/rfwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H87f8zif2b+mMX/rPwxi//Z+WMW/+/kj1n8v5s/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOJ/Yf6Yxf+i/DGL/0/yxyz+F+ePWfx/mj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+F+dP2bxvyZ/zOL/q/wxi/+v88cs/tfmj1n8f5M/ZvG/Ln/M4n99/pjF/4b8MYv/b/PHLP435o9Z/G/KH7P435w/ZvH/Xf6Yxf/3+WMW/z/kj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/z/mj1n878ofs/jfnT9m8f9T/pjF/578MYv/n/PHLP5/yR+z+P81f8zi/7f8MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8Z+aP2bxfyh/zOL/cP6YxX9a/pjEf4FB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89//8f+/TQBIiBAGF0Zz27wcS2bdu2bdtOqmLbtm3btm3bvuTYv2D6vVPfv+qopf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+D+oftfR/SP+opf/D+kct/R/RP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOW/k/qH7X0f0r/qKX/0/pHLf2f0T9q6f+s/lFL/+f0j1r6P69/1NL/Bf2jlv4v6h+19H9J/6il/8v6Ry39X9E/aun/qv5RS//X9I9a+r+uf9TS/w39o5b+b+oftfR/S/+opf/b+kct/d/RP2rp/67+UUv/9/SPWvq/r3/U0v8D/aOW/h/qH7X0/0j/qKX/x/pHLf0/0T9q6f+p/lFL/8/0j1r6f65/1NL/C/2jlv5f6h+19P9K/6il/9f6Ry39v9E/aun/rf5RS//v9I9a+n+vf9TS/wf9o5b+P+oftfT/Sf+opf/P+kct/X/RP2rp/6v+UUv/3/SPWvr/rn/U0v8P/aOS/oP+pn/U0n+A/lFL/7/rH7X0/4f+UUv/f+oftfT/l/5RS/9/6x+19P+P/lFL///qH7X0H6h/1NL/f/pHLf3/r3/U0n8I/aOW/kPqH7X0H0r/qKX/0PpHLf0H6R+19B9G/6il/7D6Ry39h9M/auk/vP5RS/8R9I9a+o+of9TSfyT9o5b+I+sftfQfRf+opf+o+kct/UfTP2rpP7r+UUv/MfSPWvqPqX/U0n8s/aOW/mPrH7X0H0f/qKX/uPpHLf3H0z9q6T++/lFL/wn0j1r6T6h/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z8aMPCvMZj331z/qOX/W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176R4NdfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTfbuNrbMs/Dh+d1vH2J9/MuKCy9BkkwuFRJjtHjJeEDYZ2+qgG89jgKNbu7HRbrPrsCvgHl5MIoQHSSZZokTZMpQwExqJgWAFEQ26qIkGHwBRiKJxIgTdEhdrTnta2mPXeK56XYvy+bzoOfd99ru3NfnuvhcYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+9GhoXHhlfM+zU+KEHHzzc0vc65+jKmw/8tufCgdfyx8tGuOS4oQe9vb29c56bvaN8eEpRFKWfbWf5eFLluHT9nfVf6Ow/Cgt6XlpyfMrPG48cWHP6I3XdR++v7TtbW9y0bkNry8fGFUW4uLboLB3U1RRFWFxb3Fc6qC8dLKktHikdzO47OLX4dung/LWbW5tLJ5ZGf8/gf0VD485i/LBii2F/Ggztf2f9t+4ceB3lkgNXm1CU+7+i6/tvVXw24AT9D1w/LKzsv+rfIHBC1fX/woKB11Eu+S/3/8lPrXplpM9O3P/A9cPH9Q/pjPD8P6zRyuf+iuf/GSNccnB/VU3X8VL/l9727MzyqQn/zvP/u9cPF1f2P27Y83/pOX7RwPP/KUURLhnjtwPeUxoadx0Z7f4/ev8Tpldsaob2f0b75v2l/h9f8r0nyqdqq+x/0Sj3/3FLK36tQHUaGr/cW3H/r6L/4iMjXHKw/7ef+PXDpf4f+/0DZw75rJr+L6nsf1ZH25ZZW7d3nbehrWl9y/qWTXWz58+ZV18374K5s/oeCfq/jvG7Au8NY7v/F5MrNjVF0TK4v6b7wNOl/uc++OCc8qlJVfa/eNT7/wz3fxjRh8YVEycWnU0dHe11/V8HDuv7v/b/sBH6r+Lv/2edU/5hteXXmqKYNri/68y7V5T6f+fQs7vLpyZW2f+SUftfMPjzAhHGeP9vrtgM6//goZf6nv+X3XvwjPKpav/+v3TU/l91/4exaGis+B9+/sNK/e8qLovsNDT473+QTo7+H3vnhp64dfiE/iGdHP3/7nNHz41bh2X6h3Ry9D9h4wPPx63DpfqHdHL0v3zq/BVx63CZ/iGdHP2vffXcP8etQ6P+IZ0c/Z/zpd2dceuwXP+QTo7+H2qfsy1uHVboH9LJ0f9PT3votbh1uFz/kE6O/o8du+fGuHW4Qv+QTo7+u/ec/YO4dbhS/5BOjv4vX7cwxK3DVfqHdHL0P33aHx+PW4er9Q/p5Oh/3p/+flrcOlyjf0gnR/93fH7Fvrh1uFb/kE6O/sdf/8qLceuwUv+QTo7+l569bWHcOlynf0gnR//NP2nujVuHVfqHdHL0P+vrP9oQtw7X6x/SydH/4eWP7olbhxv0D+nk6H9PXTElbh1u1D+kk6P/r3339ENx6/BJ/UM6Ofr/zVNPzo9bh9X6h3Ry9P/cB27/Rtw63KR/SCdH//euefGsuHVo0j+kk6P/h/c+/8W4dVijf0gnR/9vvNH2f3HrsFb/kE6O/idPOvX1uHVo1j+kk6P/hbd+pT1uHVr0D+nk6L9td/cP49Zhnf4hnRz9f/j4tFVx67Be/5BOjv5Xzt37/rh1uFn/kE6O/t+37MJdceuwQf+QTo7+L+r56EVx67BR/5BOjv47nvnsV+PW4Rb9Qzo5+t8787XFcevQqn9IJ0f/L69e+uO4dWjTP6STo/+3Hr1uU9w6bNI/pJOj/yd/9vaxuHXYrH9IJ0f//3/Bor/GrcMW/UM6OfpfvOTNtXHr8Cn9Qzo5+t/Y/Y+X49ahXf+QTo7+Zx6+elncOmzVP6STo//vnFe3P24dOvQP6eTo/84r99XHrcM2/UM6Ofrff/Cuu+PW4Vb9Qzo5+n/zFzOmx63Dp/UP6eTo//4ph66NW4dO/UM6Ofr/5abaZ+LWYbv+IZ0c/f9t39QdcevQpX9IJ0f/T7/e84e4dbhN/5BOjv5XT/jVxLh1uF3/kE6O/qd2bbkvbh3u0D+kk6P/+fc0nR+3Dp/RP6STo/+tf3nhm3HrsEP/kM7W7V23NLW2trR744033gy+Odl/MgGpvRv9yf6VAAAAAAAAAAAAAAAAJ5LjnxOd7N8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKwAA//8ZLeDr") capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0x0, 0x2}) ioctl$FS_IOC_GETFSMAP(r0, 0x4048587b, 0x0) 1.8343012s ago: executing program 5 (id=1848): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x61d0, &(0x7f0000016fc0)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP4mb1540BiIKROasLGMcY4m+z6El9oXUy4NtxKQij0gu1612bBN7x2CTSqHQVKJIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSoPERVQAGpKq0gW82c//+/M7OzM7ve8ebMOZ+PlPyyM2fmnDnzn9n92vnuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3ufMPsp2pZltVqtfyCTVn2ovq8YWJT45LXvrDHBwAAAKzdLxr/fu7mdMHhFdyoaZt/uuPbX11YWFjI3jf8p6OfW1hIV0xk2eiGLGtcF139wftrzdsEj2fjtaGmr4d67H64x/UjPa4f7XH9WI/rN/S4frzH9UtOwBI3ZLV0Z9sa/7kpP6XZLdlo47ptHW71eG3DUP3cpdtmtcZtFkZPZHPZqWw2m27ZPt+21tj+63fW9/XWLO5rqGlfW+or5CePHo/HUAvneFvLvhbvM/rR67OJn/7k0eN/feHZ2zrNnqeh5f7y49yxtX6cnwiX5MdayzakcxKPc6jpOLd0eE6GW46z1rhd/b/bj/O5FR7n8OJhrqv253w8G2r893ca52mklnU4T1vCZT+7K8uyy4uH3b7Nkn1lQ9nGlkuGFp+f8XxF1u+jvpRemo2sap3euYJ1Wp8z21rXaftrIj7/d4bbjSxzDM1P048eG2t63n++cC3rNKo/6uVeK+1rsN+vlaKswbguvtN40E90XIPbwuN/dPvya7Dj2umwBtPjblqDW3utwaGx4cYxpyeh1rjN4hrc1bL9cGNPtcZ8Znv3NTh14fS5qfmPffyeudPHTs6enD2zZ9eu6T379h04cGDqxNyp2en839d4totvYzaUXgNbw7mLr4FXt23bvFQXvji25P33Wl+H411eh5vatu3363Ck/cHV1ucFuXRN56+N99RP+viVoWyZ11jj+dm59tdhetxNr8ORptdhx+8pHV6HIyt4Hda3ObdzZT+zjDT90+kYlv9esLY1uKlpDbb/PNK+Bvv980hR1uB4WBff27n894It4XifmFztzyPDS9Zgerjhvad+Sfp5f/xAY3Ral7fXr7hxLLs4P3v+3keOXbhwflcWxrp4WdNaaV+vG5seU7ZkvQ6ter0enrvjids7XL4pnKvxe+r/Gl/2uapvs/fe7s9V47tb5/PZcunuLIw+W+/z2em7ef18jmXZ57/12IPfePTzb1j2fNbz5iem1v6zeMqlTe+/o8u8/8bc/3y+v3RXjw+PjuSv3+F0dkZb3o9bn6qRxntXrbHv56ZW9n48Gv5Z7/fjW7q8H29u27bf78ej7Q8uvh/Xev1px9q0P5/jYZ2cmu7+flzfZvPu1a7Jka7vx3eFWQvn/zUhKaRc1LR2llu3aV8jI6PhcY3EPbSu0z0t24+GbFbf11O7r22d7rgrv6/h9OgWrdc6nWjbtt/rNP3Z13LrtNbrT9+uTfvzOR7WxS17uq/T+jZP7137e+cN8T+b3jvHeq3B0eGx+jGPpkXYeL/PFm6Ia/De7Hh2NjuVzTSuHWusp1pjX5P3rWwNjoV/1vu9cnOXNbijbdt+r8H0fWy5tVcbWfrg+6D9+RwP6+LJ+7qvwfo2b9zf359dd4RL0jZNP7u2//nacn/mdXvbabpea2UkHOe39nf/s9n6NqcOrDZndj9Pd4dLbuxwntpfv8u9pmay9TlPm8NxPntg+fNUP576Np87uML1dDjLsksfub/x573h71f+7uJ3v9ry9y6d/k7n0kfu//GLT/zjao4fgMH3fD425t/rmv5maiV//w8AAAAMhJj7h8JM5H8AAAAojZj74/8Vnsj/AAAAUBox94+EmVQk/29+47Nzz1/KUjN/IYjXp9PwQL5d7LhOh68nFhbVL7//y7P//Q+XVrbvoSzLfv7AH3TcfvMD8bhyE+E4r76p9fIlvnrPivZ99OFLab/N/fUvhPuPj2ely6BTBXc6y7Kv3/yZxn4m3n+lMZ9+4GhjPnj5icfr2zx3MP863v6Zl+Xb/0Uo/x4+cazl9s+E8/DDMKff1vl8xNt95cprtux/7+L+4u1qW29qPOwnP5Dfb/w9OZ99PN8+nufljv8bn37qK/XtH3lV5+O/NNT5+J8K9/vlMP/3Ffn2zc9B/et4u0+G44/7i7e790vf7Hj8Vz+Vb3/uzfl2R8OM+98Rvt725mfnms/XI7VjLY8re0u+Xdz/9Hf/uHF9vL94/+3HP37kSsv5aF8fT/9bfj9TbdvHy+N+or9v23/9fprXZ9z/U390tOU899r/1QefeUX9ftv3f3fbduc+srOx/8X7a/2NTX/5yc903F88nsN/e67l8Rx+d3gdh/0/+YGwHsP1/3c1v7/2365w9N2t7z9x+y9sutTyeKK3/jTf/9XXnWzMDeM3bLzxRS++6fIr6+cuy76zIb+/Xvs/+VdnW47/i7fm5yNeHzv67ftfTtz/+Y9Onjk7f3FuJp3VR29u/O6ct+fHE4/35vDe2v71kbMXPjh7fmJ6YjrLJsr7K/Su2ZfC/HE+LnffemHJO+jOh8Pzefuff33j9n/9dLz839+TX37lbfn3rVeH7T4bLt8Unr/V7X+pJ++8tfH6rj0djnBh6e8LXost2/7rwIo2DI+//eeCuN7PvfyDjfNQv67xfSO+rtd4/N+fye/na+G8LoTfzLz11sX9NW8ffzfClYfy1/uaz194m4vP69+E5/sdP8zvPx5XfLzfDz/HfHNz6/tdXB9fuzTUfv+N3+JxObyfZJfz6+NW8Xxfee7WjocXfw9Jdvm2xtd/ku7ntlU9zOXMf2x+6tTcmYuPTF2Ynb8wNf+xjx85ffbimQtHGr/L88iHet1+8f1pY+P9aWZ2396s8W51Nh/X2Qt9/OcePj6zf3r7zOyJYxdPXHj43Oz5k8fn54/PzsxvP3bixOxHe91+bubQrt0H9+zfPXlybubQgYMH9xycnDtztn4Y+UH1sG/6w5Nnzh9p3GT+0N6Du+67b+/05OmzM7OH9k9PT17sdfvG96bJ+q1/f/L87KljF+ZOz07Oz3189tCug/v27e752wBPnzsxPzF1/uKZqYvzs+en8scycaFxcf17X6/bU07z/5H/PNuulv8ivuxdd+9Lv5+17suPLXtX+SZtv0D02fC7aP75JecOrOTrmPtHw0wqkv8BAACgCmLuHwszkf8BAACgNGLu3xBmIv8DAABAacTcPx5mUpH8X7r+/+ZLK9q//r/+f/P50v+vWP//oaL1//P3C/3//lhr/17/P9D/1//X/9f/1/+nD4rW/4+5/4Ysq2T+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP0vCjOpSP7X/9f/1//X/9f/77x//f/BpP/fnf5/D/r/U1m1+v+X+3n8+v/6/yxVtP5/zP0vDjOpSP4HAACAKoi5/6YwE/kfAAAASiPm/pvDTOR/AAAAKI2Y+zeFmVQk/+v/6//r/+v/6/933r/+/2DS/+9O/78H/X+f/6//r/9PXxWt/x9z/0vCTCqS/wEAAKAKYu5/aZiJ/A8AAADFM3JtN4u5/2VhJkvy/zXuAAAAAHjBxdx/S9ZWBK/I3//r/+v/F7//vyFdp/+v/58Vsv8/nOn/F4f+f3f6/z3o/+v/6//r/9NXRev/N3J/Np69PMykIvkfAAAAqiDm/lvDTOR/AAAAKI2Y+38pzET+BwAAgNKIuX9zmElF8r/+v/5/8fv/Pv9f/7/o/X+f/18k+v/d6f/3oP+v/6//r/9PXxWt/x9z/21hJhXJ/wAAAFAFMfffHmYi/wMAAEBpxNz/y2Em8j8AAACURsz9W8JMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfEWZSkfwPAAAAVRBz/x1hJvI/AAAAlEbM/a8MM5H/AQAAoDRi7p8IM6lI/tf/L3j/P+/Bj/n8f/1//X/9f/3/ldH/707/vwf9f/3/vvT/Fy7p/+v/kyta/z/m/jvDTCqS/wEAAKAKYu7fGmYi/wMAAEBpxNx/V5iJ/A8AAAClEXP/tjCTiuR//f+B6P9n+v/6//r/+v/6/yuj/9+d/n8P+v/6/z7/X/+fvipa/z/m/leFmVQk/wMAAEAVxNy/PcxE/gcAAIDSiLn/1WEm8j8AAACURsz9O8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+v/6//r/+P31VtP5/zP2vCTOpSP4HAACAKoi5f2eYifwPAAAApRFz/91hJvI/AAAAlEbM/ZNhJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+e8JMKpL/AQAAoApi7r83zET+BwAAgNKIuX8qzET+BwAAgNKIuX86zKQi+V//X/9f/1//f1X9/1cu3q/+f07/v1j0/7vT/+9B/1///wXv/4/q/1MqRev/x9y/K8ykIvkfAAAAqiDm/t1hJvI/AAAAlEbM/XvCTOR/AAAAKI2Y+/eGmVQk/+v/6//r/+v/+/z/zvvX/x9M+v/d9b//Hx+i/r/+v/6/z//X/2epovX/Y+6/L8ykIvkfAAAAqiDm/n1hJvI/AAAAlEbM/fvDTOR/AAAAKI2Y+w+EmVQk/+v/6//r/+v/6/933r/+/2DS/+/O5//3oP+v/6//r//PGj30h81fFa3/H3P/wTCTiuR/AAAAqIKY+18bZiL/AwAAQGnE3P8rYSbyPwAAAJRGzP2/GmZSkfyv/9/SPa8/XP1//X/9f/3/Bv3/waT/353+fw/6//r/+v/6//TVsv3/EL3Xu/8fc/+hMJOK5H8AAACogpj7fy3MRP4HAACA0oi5/3VhJvI/AAAAlEbM/YfDTCqS//X/ff6//r/+v/5/5/2vd/9/LN6v/v+a6P93p//fg/6//r/+v/4/fVW0z/+Puf/1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/4YwE/kfAAAASiPm/jeGmVQk/+v/6//r/+v/6/933r/P/x9M+v/d6f/3oP+v/6//r/9PXxWt/x9z/5vCTCqS/wEAAKAKYu5/c5iJ/A8AAAClEXP/W8JM5H8AAAAojZj73xpmUpH8r/+v/6//r/+v/995//r/g0n/vzv9/x70//X/9f/1/+mrovX/Y+7/9TCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7n9bmIn8DwAAAKURc//bw0wqkv/1//X/9f/1//X/O+9f/38w6f93N2D9/1/cFC7X/8/p/xf7+Ffb/x9p+/q69P9/sFz/f2FD++31/7keitb/j7n/HWEmFcn/AAAAUAUx978zzET+BwAAgNKIuf9dYSbyPwAAAJRGzP2/EWZSkfyv/18/jsX2sv5/Wfv/Q/r/+v/6/xWh/9/dgPX/ff5/G/3/Yh+/z//X/2epovX/Y+5/d5hJRfI/AAAAVEHM/Q+Gmcj/AAAAUBox9z8UZiL/AwAAQGnE3P+eMJOK5H/9f5//X43+v8//z/T/9f8rQv+/O/3/HvT/9f+L1v//T/1/BlvR+v8x9z8cZlKR/A8AAABVEHP/e8NM5H8AAAAojZj7fzPMRP4HAACA0oi5/31hJhXJ//r/g9L/nxjQ/v9j+v/Xsf9/x035dvr/+v8s0v/vTv+/B/1//f+i9f99/j8Drmj9/5j73x9msvL8P77iLQEAAIAXRMz9vxVmUpG//wcAAIAqiLn/t8NM5H8AAAAojZj7fyfMpCL5X/9/UPr/Pv8/0//3+f9tj0f/X/+/k/Xr/8d3Hv1//X/9/0j/X/9f/592Rev/x9z/u2EmFcn/AAAAUAUx938gzET+BwAAgIHQ6f/Jbhdz/5EwE/kfAAAASiPm/qNhJhXJ//r/+v/6/wXt///Z1n/53rffeXSX/r/+v/7/qqzr5//XX/w+/1//X/8/0f/X/9f/p13R+v8x9x8LM6lI/gcAAIAqiLn/98JM5H8AAAAojZj7j4eZyP8AAABQGjH3z4SZVCT/6//r/+v/F7T/P8Cf/x/Ph/5/q771/+Obrv5/R3n/Pq2i69v/f+9iT1z/f7X9/7GOl+r/6/8P8vHr/+v/s1TR+v8x98+GmVQk/wMAAEAVhNw/dCKfi1fI/wAAAFAaMfefDDOR/wEAAKA0Yu7/YJhJRfK//r/+v/6//r/P/++8/279/9qIz/8vqtS//1njhaL/36Y4/f/O9P/1/wf5+PX/9f9Zqmj9/5j758JMKpL/AQAAoApi7v9QmIn8DwAAAKURc/+Hw0zkfwAAACiNmPtPhZlUJP/r/+v/6//r/+v/d95/YT//X/+/q7X27/X/A/3/avf//0f/X/9f/5/+KFr/P+b+02EmFcn/AAAAUAUx958JM5H/AQD+n707abKzLvs4fvp5wpNO8SzcuXBjlUtfAgtd6wtw4caNVZYLJ1ScCc4jioqzIjgPOIAgooLzAE4ozqDiPA84IUrFonNdV9Ldd9+nOzndfd///+ezyCVtmnOkUgm/dL7eANCM3P2PjVvsfwAAAGhG7v7HxS2d7H/9/9n0/6cqZf3/5vc/if7/Qfr/nV5f/6//b5n+f5z+fwn9v+f/6//1/6zU1Pr/3P2Pj1s62f8AAADQg9z9T4hb7H8AAABoRu7+8+MW+x8AAACakbv/iXFLJ/t/S/+/tuiz/8+M1/P/W+r/Pf9/x9fX/+v/W3aw/f9F9/7Mp//X/+v/g/5/V/3/0Z0+X/9Pi6bW/+fuf1Lc0sn+BwAAgB7k7n9y3GL/AwAAQDNy918Qt9j/AAAA0Izc/U+JWzrZ/6t7/v+xjY/PtP8v+n/9/8YH9P/6f/3/bHn+/7ie+v/zbz33MXdee7/r9vL6+n/9v+f/6/9Zran1/7n7nxq3dLL/AQAAoAe5+58Wt9j/AAAA0Izc/U+PW+x/AAAAaEbu/mfELZ3s/9X1/7N+/n/R/+v/Nz6g/9f/6/9nS/8/rqf+/0xeX/+v/9f/6/9Zran1/7n7nxm3dLL/AQAAoAe5+58Vt9j/AAAA0Izc/RfGLfY/AAAANCN3//G4pZP9r//f//7/Hv2//j+u/l//r//ff/r/cfr/JfT/+n/9v/6flZpa/5+7/6K4pZP9DwAAAD3I3f/suMX+BwAAgGbk7n9O3GL/AwAAQDNy9z83bulk/+v/Pf9f/6//1/8Pv77+f570/+P0/0vo/8+2nz9H/6//1/9zuj32/3eP/LS9kv4/d//z4pZO9j8AAAD0IHf/8+MW+x8AAACakbv/BXGL/Q8AAADNyN3/wrilk/2v/9f/6//1/2fc/2//obdB/z9M/38w9P/jJtP/rx0Z/LD+f/b9v+f/6//1/2wytef/5+5/UdzSyf4HAACAHuTuf3HcMrL/9/yb+QAAAMChyt3/krjF1/8BAABg9rI6y93/0rilk/2v/9f/6//1/57/P/z6Y/3/dae9P/3/tOj/x02m/9+B/l//P+f3r//X/7Pd1Pr/3P0vi1s62f8AAADQg9z9F8ct9j8AAAA0I3f/y+MW+x8AAACakbv/FXFLJ/t/uP8/9d/r/3dH/7/5/ev/h398rKr/z7+j/n+0/3+w5//3Sf8/7uD7/6P6/81/f/3/Pjrs9994/39s2efr/xkytf4/d/8lcUsn+x8AAAB6kLv/lXGL/Q8AAADNyN3/qrjF/gcAAIBm5O5/ddzSyf73/H/9v/5/fv2/5/+fdJjP/18ceP9/RP+/S/r/cZ7/v4T+X/+v//f8f1Zqav1/7v5L45ZO9j8AAAD04NK7Fhu7/zWLhf0PAAAAc3T6nx3Y+gdKQ+7+18Yt9j8AAAA0I3f/6+KWTva//l//r//X/+v/h19/Wv2/5//vlv5/nP5/Cf3/fvTzRxrr/y/b6fOn0P9fqP9nYjb1/zec+vhh9f+5+18ft3Sy/wEAAKAHufvfELfY/wAAANCM3P1vjFvsfwAAAGhG7v43xS2d7P997/+P7fza+n/9v/5f/6//1/+vmv5/nP5/Cf2/5/97/r/+n5U61f9v/vnwsPr/3P1vjls62f8AAADQg9z9b4lb7H8AAABoRu7+y+IW+x8AAACakbv/rXFLJ/vf8//1//p//b/+f/j19f/zpP8fp/9fQv+v/9f/6/9ZqU3P/z/NYfX/ufsvj1s62f8AAADQg9z9V8Qt9j8AAAA0I3f/2+IW+x8AAACakbv/7XFLJ/tf/7+//X9+XP+v/1/o//X/+v8D0W3/vzb0K9F2O/T/Nz/q+EM3f0T/r//X/+v/9f+swCT6/xOn/u0yd/874pZO9j8AAAD0IHf/O+MW+x8AAACakbv/XXGL/Q8AAADNyN3/7rhlj/v/Pit9VwdH/+/5//p//b/+f/j19f/z1G3/v0ue/7+E/l//r//X/7NSk+j/T/vr3P3viVt8/R8AAACakbv/vXGL/Q8AAADNyN3/vrjF/gcAAIBm5O5/f9zSyf7X/+v/9f/6f/3/8Oufaf+/vhim/z8Y+v9x+v8l9P/6f/2//p+Vmlr/n7v/yrilk/0PAAAAPcjd/4G4xf4HAACAZuTu/2DcYv8DAABAM3L3fyhu6WT/6//1//p//b/+f/j1Pf9/nvT/4/T/i8XiqpE3MNT/nziq/9f/6//1/5yhqfX/ufs/HLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/I3FLJ/tf/6//1//r//X/w6+v/58n/f84/f8Snv+v/9f/6/9Zqan1/7n7r4lbOtn/AAAA0IPc/dfGLfY/AAAANCN3/0fjFvsfAAAAmpG7/7q4pZP9r//X/+v/9f/70v8f1/9vpf8/GPvX/y/0//p//f8S+n/9v/6frQ6q/787fr5f1v/n7v9Y3NLJ/gcAAIAe5O6/Pm6x/wEAAKAZufs/HrfY/wAAANCM3P2fiFs62f/6f/2//l//7/n/w6+v/58nz/8fp/9fQv+v/9f/6/9ZqYPq/3fq/bf+de7+T8Ytnex/AAAA6EHu/hviFvsfAAAAmpG7/8a4xf4HAACAZuTu/1Tc0sn+1//r/zf3/4uF/l//r/8/6QD6//WF/n/l9P/j9P9L6P/b7P//Z9FQ/39sx8/X/zNFU+v/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbWtr/9+ycvs2//z+65RP1/4vF4rYLPP9f/z/y+vr/yfT/9U9V/786+v9x+v8l9P9t9v+e/6//59BMrf/P3f/5uKWl/Q8AAACdy93/hbjF/gcAAIBm5O7/Ytxi/wMAAEAzcvd/KW7pZP/Pv//f+on6/8VZPf9f/7/xAf2//l//P1tn299fvh6/pun/9f/6/8F+fm2Hf+9Z6P/1//p/Bkyt/8/d/+W4pZP9DwAAAD3I3X9T3GL/AwAAQDNy998ct9j/AAAA0Izc/V+JWzrZ//p//b/+f579/7r+X/+v/x80lef/n3feQ27R/+v/W+z/x+j/9f/6f7aaWv+fu/+rcUsn+x8AAAB6kLv/a3GL/Q8AAADNyN3/9bjF/gcAAIBm5O7/RtzSyf7f3v+fszhZqJ401P9Ho6b/P43+f/P71/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v/7b/98/T8tmlr/n7v/lrilk/0PAAAAPcjd/824xf4HAACAZuTu/1bcYv8DAABAM3L33xq3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/JfT/Z9/P58+q+v/5Pv//f/X/rM7U+v/c/d+OWzaG3wP+/wz/ZwIAAAATkrv/O3FLJ1//BwAAgB7k7v9u3GL/AwAAQDNy938vbulk/+v/9f/6f/2//n/49fX/86T/H6f/X6Kf/n996IOH3c+frcN+/830/57/zwpNrf/P3f/9uKWT/Q8AAABtu2vj29z9P4hb7H8AAABoRu7+H8Yt9j8AAAA0I3f/bXFLJ/tf/6//b7//f4T+f8vr6//1/y3T/+ev6MP0/0v00/8POux+fu7vX/+v/2e7qfX/uftvj1s62f8AAADQg9z9P4pb7H8AAABoRu7+H8ct9j8AAAA0I3f/T+KWTva//r+v/n9t0WP/7/n/+n/9f0/m0/9fcWToo57/r//X/8/3/ev/9f9sN7X+P3f/HWtHutz/AAAAMFcPe+Cjb9/t971j49v1xU/jFvsfAAAAmpG7/2dxi/0PAAAAzcjd//O4pZP9r//vq//v8/n/+n/9v/6/J/Pp/4fp//X/+v/5vn/9v/6f7abW/+fu/0XcctrwG/w/6AEAAAAOz//t7bvn7v9l3NLJ1/8BAACgB7n7fxW3bNv/J3b5p9oBAACAqcnd/+u4pZOv/+v/J97/L/ap/4/vp/8/Sf+v/x96ff3/POn/x51l/39iTf+v/x+h/9f/6//Zamr9f+7+669ZdLn/AQAAoFGbfkfhNxvfri9+G7fY/wAAANCM3P2/i1vsfwAAAGhG7v7fxy2d7H/9/8T7/zN6/v+x+k+e/995/3/x+uDr6//1/y3T/4/z/P8l9P/6f/2//p+V2kP/vzFI97v/z93/h7ilk/0PAAAAPcjd/8e4xf4HAACAZuTu/1PcYv8DAABAM3L3/zlu6WT/6/8Pof+/5Ohisa/9/y6e/6//76P/3+H12+n/73vu8Zse/sirr9T/c8pB9v/5Y0H/r//X/5+k/9f/6//ZamrP/8/d/5e4pZP9DwAAAD3I3X9n3GL/AwAAQDNy9/81brl3/994WO8KAAAAWKXc/X+LWzr5+r/+v8Xn/8+z/89/1ofQ/x+fX/+fTXHv/b/n/+v/t/P8/3H6/yX0//p//b/+n5WaWv+fu//vcUsn+x8AAAB6kLv/H3FL7v+1Pf/WPQAAADAxufv/Gbf4+j8AAAA0I3f/XXFLJ/tf/6//n0r/nzz//9Tnef7/Sfp//f9e6P/H6f+X0P/r//X/+n9Wamr9f+7+f8Utnex/AAAA6EHu/rvjFvsfAAAAmpG7/99xi/0PAAAAzcjd/5+4pZP9r//X/+v/9f/6/+HX1//Pk/5/nP5/Cf2//l//r/9npabW/+fu/28AAAD//xDQcaQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 1.544687055s ago: executing program 0 (id=1850): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfe, 0x619d, &(0x7f00000012c0)="$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") r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf010004, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f906}}) 1.522094895s ago: executing program 1 (id=1851): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00009e98edfdd6"], 0x0, 0x19a, &(0x7f0000000300)="$eJzs0L9rE2Ecx/H393kuaapUPRWHOPTEYrxQTXJVB6fgVCG3uTgELenZFBM1PZeWFrpIQar9F3TSzR+gIIhYcA4ObnIu3cQMwcExkstz/hHyvODuw/fLHc/3+bbjXjwF5IebLeqkNEf4iuAAszLpKTXJ96b+aXJvElwz9a7JlyYPx+sbd5c6nWjNu+rhQjFtaKI1D/id9rJviN9wSjEQ6hxjuNnyuB0yqtNVyyFug/ITdJOe/5SiM8PJW2hGpV2uK3pSasDRysPug0q8vnFhtbu0Eq1E94Jg4Ur1UrV6OajcWe1E1XeI/1gUz9jCD5l6xbS/Ra7Jo75ziHlB/LZKtJQH5Jvs9fX5s/MDlP+LEdJPryS0PXWDc+aGcEJ4jg6ZazCtcEgPWkQ+qLdSc745f3KKwrbWF1v3O8s7N9O9AgWpHZAr1QjKNRbcMxQ5zj47CXMJiwkvEg5+MCsfxyvK9upsj9+vTXUaCtkU5OGLlEKC8ePCzGfYR6VzufDJ/JON/f3f/JZlWZZlWZZlWdb/728AAAD//8/nWmE=") r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x9}) 1.479589856s ago: executing program 4 (id=1852): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x2}, 0xc) 1.478974656s ago: executing program 3 (id=1853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.275373829s ago: executing program 3 (id=1854): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000008c0)={'syz1\x00', {0xa9a, 0x1b5, 0x89b2, 0xf90}, 0x42, [0xebd, 0x6, 0x100, 0x80, 0x0, 0x1, 0x9, 0x9, 0x5, 0xfff, 0x7, 0x1, 0x0, 0x0, 0x1, 0x62b1, 0x5, 0x3, 0xc, 0x2, 0x80000001, 0x4, 0xe, 0x4c2, 0x9, 0x6c7, 0x5, 0x101, 0xe, 0x80000000, 0x2, 0x7, 0x800, 0x7, 0x7fff, 0x3, 0xfffffffa, 0x8, 0x5, 0x7fffffff, 0x101, 0x9, 0x0, 0x8, 0x9, 0x76c, 0x500, 0x1, 0x200, 0x7, 0x2, 0x1, 0x0, 0x4, 0x401, 0x5, 0x5e0, 0xe5, 0x400, 0xffffcbd2, 0x7fffffff, 0xfffffdbe, 0x4], [0x7, 0x2, 0x5e6d, 0x3, 0x2da2, 0xfffffff8, 0x400, 0x0, 0xe, 0x4, 0xf2, 0xff, 0x5e, 0x0, 0x4, 0xd2a, 0x8, 0x8, 0xffffffff, 0x7, 0x33, 0x1, 0x7, 0x4, 0xe2, 0xffffff01, 0x8, 0x1, 0xf, 0xfffffff9, 0xe3, 0x2, 0x2, 0x3, 0x9, 0x4, 0x8001, 0x4, 0xa800000, 0x6, 0x6, 0x7, 0x4, 0x38, 0x4e9, 0x0, 0x4, 0x9, 0x80000000, 0x3, 0x0, 0x7fff, 0x9, 0x1ff, 0x0, 0x1, 0x10001, 0x8, 0x4b, 0x4, 0x4, 0xc2, 0x7], [0x5, 0x9, 0x6000000, 0x3, 0x401, 0x0, 0x9, 0x1004000, 0xd, 0x322d, 0xb8, 0x400, 0x81, 0x6, 0x10, 0x8, 0xd, 0x8000, 0xf, 0xa48, 0xdfe, 0x3, 0x8, 0xffffff1c, 0x8, 0x6, 0x6a4daa78, 0x2, 0x8, 0x0, 0x3, 0x0, 0x3b, 0x0, 0x3, 0xd, 0x7, 0x3, 0x8, 0x20000, 0x2, 0x1, 0x4, 0x5, 0x8, 0x5, 0x1, 0x1000, 0x7, 0x8000, 0x2, 0x4ab1, 0x400, 0x2, 0x1, 0x2, 0x15c4, 0xbc, 0x5, 0x80000001, 0x8001, 0x4e6e4189, 0x5, 0x99], [0x200, 0x6, 0x7, 0x8, 0x0, 0x8, 0x7fff, 0xfffffffd, 0x9fe, 0x6, 0x131, 0x1, 0x4, 0x6, 0x0, 0x5, 0xc1, 0x2, 0x0, 0x5, 0x0, 0x2, 0xc, 0x9, 0x4, 0x1000, 0x7, 0x2, 0xd, 0x81, 0x8, 0x7, 0x3, 0x7, 0x8, 0x200, 0x5, 0x3b, 0x0, 0x7f, 0x651b, 0x8, 0xcb6, 0xfffffffc, 0x8, 0x9, 0x9, 0x6, 0x401, 0x7f, 0xffff7fff, 0x4, 0x7fffffff, 0x3, 0xff, 0x7, 0x5, 0x4, 0x3, 0x7, 0x400, 0xfffff001, 0x1, 0x80000000]}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffffffffffffe) 1.095863902s ago: executing program 1 (id=1855): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xffffff84}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/80, 0x6b}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/32, 0x20}], 0x5}, 0x10}], 0x3ffffffffffff26, 0x10162, 0x0) 1.065467013s ago: executing program 3 (id=1856): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 937.097825ms ago: executing program 3 (id=1857): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000580)={0x0, 0xe, 0xe, "76b8039e01f1dcffbc4b7011b36a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 831.151496ms ago: executing program 1 (id=1858): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x20000000) 697.517348ms ago: executing program 4 (id=1859): r0 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x0, 0x1000000, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x59, 0x0, 0x0, 0x4, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 601.86871ms ago: executing program 5 (id=1860): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000714010029bd7000fbdbdf25090022"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x60000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001114030d"], 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) 598.84974ms ago: executing program 1 (id=1861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80d}, @in6={0xa, 0x4e22, 0x3ffc0000, @ipv4={'\x00', '\xff\xff', @empty}, 0xa}], 0x38) 526.302561ms ago: executing program 4 (id=1862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 509.159691ms ago: executing program 0 (id=1863): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 401.345223ms ago: executing program 1 (id=1864): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 51.376129ms ago: executing program 1 (id=1865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 0s ago: executing program 0 (id=1866): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x1, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3}}, 0xe8) close(r0) kernel console output (not intermixed with test programs): 119639][ T6830] RSP: 002b:00007fbe13bc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 154.128048][ T6830] RAX: ffffffffffffffda RBX: 00007fbe12fb5fa0 RCX: 00007fbe12d8e9a9 [ 154.136018][ T6830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 154.143977][ T6830] RBP: 00007fbe12e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.151936][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.159892][ T6830] R13: 0000000000000000 R14: 00007fbe12fb5fa0 R15: 00007ffeb0351f48 [ 154.167869][ T6830] [ 154.199803][ T6866] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.825: corrupted inode contents [ 154.217471][ T6867] loop5: detected capacity change from 0 to 32768 [ 154.257357][ T6866] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.825: mark_inode_dirty error [ 154.302830][ T6867] XFS (loop5): Mounting V5 Filesystem [ 154.392776][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 154.505905][ T6867] XFS (loop5): Ending clean mount [ 154.566416][ T6867] XFS (loop5): Quotacheck needed: Please wait. [ 154.622246][ T6867] XFS (loop5): Quotacheck: Done. [ 154.766094][ T5101] XFS (loop5): Unmounting Filesystem [ 154.804829][ T6897] loop4: detected capacity change from 0 to 1024 [ 154.946061][ T9] hfsplus: b-tree write err: -5, ino 4 [ 155.299850][ T6913] loop5: detected capacity change from 0 to 1024 [ 155.385279][ T4851] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.621492][ T5350] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.821682][ T5350] usb 2-1: Using ep0 maxpacket: 8 [ 155.834118][ T5350] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 155.849831][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.858763][ T5350] usb 2-1: Product: syz [ 155.868318][ T5350] usb 2-1: Manufacturer: syz [ 155.873136][ T5350] usb 2-1: SerialNumber: syz [ 155.881004][ T5350] usb 2-1: config 0 descriptor?? [ 156.091433][ T5350] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 156.278364][ T6951] smc: net device bond0 applied user defined pnetid SYZ2 [ 156.384600][ T6957] loop3: detected capacity change from 0 to 64 [ 156.497730][ T5350] usb write operation failed. (-71) [ 156.509066][ T5350] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.539509][ T5350] dvbdev: DVB: registering new adapter (Terratec H7) [ 156.566704][ T6961] loop4: detected capacity change from 0 to 256 [ 156.571701][ T5350] usb 2-1: media controller created [ 156.589127][ T5350] usb read operation failed. (-71) [ 156.597654][ T6961] exfat: Deprecated parameter 'utf8' [ 156.603187][ T5350] usb write operation failed. (-71) [ 156.627694][ T5350] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 156.630382][ T6961] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 156.683135][ T5350] usb 2-1: USB disconnect, device number 9 [ 156.867573][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 156.898253][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.874'. [ 156.945107][ T6975] netlink: 56 bytes leftover after parsing attributes in process `syz.4.877'. [ 157.097356][ T6977] device vlan0 entered promiscuous mode [ 157.174010][ T6977] team0: Port device vlan0 added [ 157.224037][ T6981] loop1: detected capacity change from 0 to 1764 [ 157.276532][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 157.446861][ T6991] IPVS: stopping master sync thread 6994 ... [ 157.461385][ T6994] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 157.663664][ T7004] loop4: detected capacity change from 0 to 64 [ 157.958114][ T7014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.987831][ T7016] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.018192][ T7016] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.115946][ T7011] loop0: detected capacity change from 0 to 8192 [ 158.155848][ T7011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.170025][ T7011] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 158.180078][ T7011] REISERFS (device loop0): using ordered data mode [ 158.186837][ T7011] reiserfs: using flush barriers [ 158.193082][ T7011] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.210167][ T7011] REISERFS (device loop0): checking transaction log (loop0) [ 158.226349][ T7011] REISERFS (device loop0): Using r5 hash to sort names [ 158.233844][ T7011] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 158.267649][ T7021] loop3: detected capacity change from 0 to 1024 [ 158.277901][ T7024] loop5: detected capacity change from 0 to 256 [ 158.354102][ T7024] FAT-fs (loop5): Directory bread(block 64) failed [ 158.360676][ T7024] FAT-fs (loop5): Directory bread(block 65) failed [ 158.406736][ T7021] hfsplus: bad catalog entry type [ 158.421494][ T7024] FAT-fs (loop5): Directory bread(block 66) failed [ 158.438279][ T7024] FAT-fs (loop5): Directory bread(block 67) failed [ 158.490236][ T7024] FAT-fs (loop5): Directory bread(block 68) failed [ 158.522686][ T7024] FAT-fs (loop5): Directory bread(block 69) failed [ 158.529319][ T7024] FAT-fs (loop5): Directory bread(block 70) failed [ 158.580979][ T46] hfsplus: b-tree write err: -5, ino 4 [ 158.587226][ T7024] FAT-fs (loop5): Directory bread(block 71) failed [ 158.603214][ T7024] FAT-fs (loop5): Directory bread(block 72) failed [ 158.609767][ T7024] FAT-fs (loop5): Directory bread(block 73) failed [ 159.124462][ T7049] tipc: Started in network mode [ 159.153547][ T7049] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 159.160867][ T7049] tipc: Enabled bearer , priority 12 [ 159.343191][ T7057] sp0: Synchronizing with TNC [ 159.376722][ T5350] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.416980][ T7061] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 159.594369][ T5350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.614279][ T5350] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 159.639674][ T5350] usb 2-1: config 6 has no interface number 0 [ 159.657865][ T5350] usb 2-1: config 6 interface 200 has no altsetting 0 [ 159.680252][ T5350] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 159.699615][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.713519][ T5350] usb 2-1: Product: syz [ 159.728641][ T5350] usb 2-1: Manufacturer: syz [ 159.739022][ T5350] usb 2-1: SerialNumber: syz [ 159.858172][ T7078] loop0: detected capacity change from 0 to 1024 [ 159.893656][ T7074] loop3: detected capacity change from 0 to 2048 [ 159.975155][ T7074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.045956][ T9] hfsplus: b-tree write err: -5, ino 4 [ 160.217596][ T7080] loop4: detected capacity change from 0 to 4096 [ 160.258531][ T7080] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 160.274127][ T4278] tipc: Node number set to 10136234 [ 160.784546][ T7071] loop5: detected capacity change from 0 to 32768 [ 160.945012][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 160.945030][ T26] audit: type=1800 audit(1753245625.005:128): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.921" name="/" dev="loop5" ino=3 res=0 errno=0 [ 161.177955][ T7084] loop3: detected capacity change from 0 to 131072 [ 161.204863][ T7084] XFS (loop3): Mounting V5 Filesystem [ 161.277927][ T7084] XFS (loop3): Starting recovery (logdev: internal) [ 161.301424][ T7084] XFS (loop3): Ending recovery (logdev: internal) [ 161.414032][ T4269] XFS (loop3): Unmounting Filesystem [ 161.479452][ T7102] netlink: 256 bytes leftover after parsing attributes in process `syz.5.930'. [ 161.526682][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.930'. [ 161.960403][ T7113] loop0: detected capacity change from 0 to 256 [ 162.173406][ T5350] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 162.209131][ T7119] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.220845][ T5350] dvb-usb: bulk message failed: -71 (3/0) [ 162.252156][ T5350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.294026][ T5350] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 162.326355][ T5350] usb 2-1: media controller created [ 162.426462][ T5350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.467120][ T7127] vcan0: MTU too low for tipc bearer [ 162.479830][ T5350] dvb-usb: bulk message failed: -71 (6/0) [ 162.491457][ T7127] tipc: Enabling of bearer rejected, failed to enable media [ 162.508388][ T5350] dvb-usb: bulk message failed: -71 (6/0) [ 162.538301][ T5350] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 162.580184][ T5350] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 162.588889][ T7132] loop4: detected capacity change from 0 to 256 [ 162.619202][ T5350] dvb-usb: schedule remote query interval to 150 msecs. [ 162.643349][ T5350] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 162.646991][ T7132] exfat: Deprecated parameter 'utf8' [ 162.699138][ T7132] exfat: Deprecated parameter 'namecase' [ 162.708856][ T5350] usb 2-1: USB disconnect, device number 10 [ 162.781666][ T7132] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 162.886572][ T5350] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 163.307033][ T7154] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 163.315378][ T7154] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 163.350741][ T7155] loop4: detected capacity change from 0 to 512 [ 163.357976][ T7153] [U] Ô [ 163.478911][ T7159] loop1: detected capacity change from 0 to 8192 [ 163.488024][ T7155] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.502909][ T7159] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 163.518694][ T7159] UDF-fs: Scanning with blocksize 512 failed [ 163.536848][ T7155] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 163.548310][ T7155] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.955: Corrupt directory, running e2fsck is recommended [ 163.568091][ T7155] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 163.577773][ T7155] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.955: corrupted in-inode xattr [ 163.591419][ T7155] EXT4-fs (loop4): Remounting filesystem read-only [ 163.600767][ T7159] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 163.609710][ T7159] UDF-fs: Scanning with blocksize 1024 failed [ 163.616279][ T7155] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.955: couldn't read orphan inode 15 (err -117) [ 163.632563][ T7159] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 163.645717][ T7155] EXT4-fs (loop4): Remounting filesystem read-only [ 163.662433][ T7159] UDF-fs: Scanning with blocksize 2048 failed [ 163.674653][ T7155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.702980][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.742742][ T4276] Bluetooth: hci1: command 0x0405 tx timeout [ 163.756616][ T7155] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 163.856530][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 164.326761][ T7157] loop5: detected capacity change from 0 to 32768 [ 164.410567][ T7157] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 164.438991][ T7157] XFS (loop5): Mounting V5 Filesystem [ 164.478440][ T7165] loop3: detected capacity change from 0 to 32768 [ 164.547506][ T7165] XFS (loop3): Mounting V5 Filesystem [ 164.609050][ T7157] XFS (loop5): Ending clean mount [ 164.637973][ T7157] XFS (loop5): Quotacheck needed: Please wait. [ 164.715020][ T7157] XFS (loop5): Quotacheck: Done. [ 164.802668][ T7165] XFS (loop3): Ending clean mount [ 164.808473][ T5916] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 164.852063][ T5916] XFS (loop3): Unmount and run xfs_repair [ 164.857827][ T5916] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 164.901628][ T5916] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 164.910512][ T5916] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 164.952302][ T5916] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 164.961190][ T5916] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 164.962640][ T5101] XFS (loop5): Unmounting Filesystem [ 165.037243][ T5916] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 165.071400][ T5916] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 165.080287][ T5916] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 165.111426][ T5916] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 165.120609][ T7165] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 165.156942][ T7165] XFS (loop3): Failed to initialize disk quotas. [ 165.304846][ T4269] XFS (loop3): Unmounting Filesystem [ 165.711532][ T7224] loop4: detected capacity change from 0 to 4096 [ 165.730358][ T7224] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 165.760412][ T7224] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 165.770906][ T7224] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 165.793584][ T7224] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 165.805410][ T7224] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 165.825634][ T7224] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 165.834783][ T7224] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 165.859256][ T7224] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 165.868644][ T7224] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 165.891200][ T7224] ntfs: volume version 3.1. [ 166.001388][ T4331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.061542][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.132314][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 166.183867][ T4331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.194123][ T4331] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.204551][ T4331] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.219881][ T4331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.230126][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.239122][ T4331] usb 4-1: Product: syz [ 166.243709][ T4331] usb 4-1: Manufacturer: syz [ 166.248441][ T4331] usb 4-1: SerialNumber: syz [ 166.267270][ T4331] hub 4-1:1.0: bad descriptor, ignoring hub [ 166.273608][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 166.290263][ T4331] hub: probe of 4-1:1.0 failed with error -5 [ 166.297253][ T5916] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.311924][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.318606][ T5916] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 166.328124][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.347663][ T5916] usb 2-1: config 0 descriptor?? [ 166.362685][ T7240] loop4: detected capacity change from 0 to 4096 [ 166.388454][ T7240] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 166.448976][ T7240] ntfs3: loop4: Failed to load $Extend. [ 166.488807][ T4331] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.781480][ T5916] corsair-psu 0003:1B1C:1C0D.000E: item fetching failed at offset 1/5 [ 166.787263][ T7246] loop4: detected capacity change from 0 to 2048 [ 166.796760][ T5916] corsair-psu: probe of 0003:1B1C:1C0D.000E failed with error -22 [ 166.827260][ T7246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.834982][ T5916] usb 4-1: USB disconnect, device number 6 [ 166.869296][ T5916] usblp0: removed [ 166.978163][ T4331] usb 2-1: USB disconnect, device number 11 [ 167.030175][ T7252] device vlan0 entered promiscuous mode [ 167.085133][ T7252] team0: Port device vlan0 added [ 167.400488][ T7254] loop4: detected capacity change from 0 to 32768 [ 167.475496][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 167.475510][ T26] audit: type=1800 audit(1753245631.565:129): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.995" name="/" dev="loop4" ino=3 res=0 errno=0 [ 167.690823][ T7271] loop3: detected capacity change from 0 to 256 [ 167.950220][ T7276] loop1: detected capacity change from 0 to 2048 [ 167.993370][ T7276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.216622][ T7286] device vlan0 entered promiscuous mode [ 168.298340][ T7286] team0: Port device vlan0 added [ 168.856227][ T7285] loop5: detected capacity change from 0 to 32768 [ 168.866016][ T7306] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 168.871287][ T7306] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 168.924662][ T7305] [U] Ô [ 168.930743][ T7285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1010 (7285) [ 168.982897][ T7285] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.013425][ T7285] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 169.028197][ T7310] vcan0: MTU too low for tipc bearer [ 169.064238][ T7285] BTRFS info (device loop5): enabling auto defrag [ 169.081442][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 169.089790][ T7285] BTRFS info (device loop5): use no compression [ 169.111905][ T7285] BTRFS info (device loop5): force clearing of disk cache [ 169.119108][ T7285] BTRFS info (device loop5): turning on async discard [ 169.127858][ T7285] BTRFS info (device loop5): max_inline at 5 [ 169.180378][ T7285] BTRFS info (device loop5): force zlib compression, level 3 [ 169.198148][ T7285] BTRFS info (device loop5): using free space tree [ 169.257947][ T7294] loop3: detected capacity change from 0 to 32768 [ 169.367992][ T26] audit: type=1800 audit(1753245633.455:130): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1014" name="/" dev="loop3" ino=3 res=0 errno=0 [ 169.439014][ T7324] IPVS: stopping master sync thread 7325 ... [ 169.440005][ T7325] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 169.495882][ T7332] loop0: detected capacity change from 0 to 64 [ 169.565446][ T26] audit: type=1800 audit(1753245633.655:131): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1026" name="file2" dev="loop0" ino=19 res=0 errno=0 [ 169.642131][ T7285] BTRFS info (device loop5): enabling ssd optimizations [ 169.650892][ T7285] BTRFS info (device loop5): rebuilding free space tree [ 169.940290][ T5101] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.125287][ T7352] loop0: detected capacity change from 0 to 512 [ 170.315931][ T7352] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.368191][ T7352] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 170.428825][ T7352] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1035: Corrupt directory, running e2fsck is recommended [ 170.484593][ T7352] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 170.526614][ T7352] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1035: corrupted in-inode xattr [ 170.616214][ T7352] EXT4-fs (loop0): Remounting filesystem read-only [ 170.661971][ T7345] loop4: detected capacity change from 0 to 131072 [ 170.672120][ T7352] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1035: couldn't read orphan inode 15 (err -117) [ 170.697561][ T7352] EXT4-fs (loop0): Remounting filesystem read-only [ 170.704208][ T7352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 170.776700][ T7352] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 170.795076][ T7345] XFS (loop4): Mounting V5 Filesystem [ 170.888495][ T7345] XFS (loop4): Starting recovery (logdev: internal) [ 170.910317][ T7345] XFS (loop4): Ending recovery (logdev: internal) [ 170.931685][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 171.074343][ T4277] XFS (loop4): Unmounting Filesystem [ 171.273505][ T7378] loop1: detected capacity change from 0 to 64 [ 171.508499][ T26] audit: type=1800 audit(1753245635.595:132): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1041" name="file2" dev="loop1" ino=19 res=0 errno=0 [ 171.588133][ T7377] loop5: detected capacity change from 0 to 8192 [ 171.614031][ T7377] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 171.671645][ T7377] UDF-fs: Scanning with blocksize 512 failed [ 171.701514][ T7377] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 171.739710][ T7377] UDF-fs: Scanning with blocksize 1024 failed [ 171.798225][ T7377] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 171.839133][ T7377] UDF-fs: Scanning with blocksize 2048 failed [ 171.873835][ T7377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.133324][ T7392] loop4: detected capacity change from 0 to 8192 [ 172.207474][ T7392] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.349750][ T7392] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 172.411928][ T7392] REISERFS (device loop4): using ordered data mode [ 172.459133][ T7392] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.466132][ T7408] loop0: detected capacity change from 0 to 24 [ 172.489279][ T7410] loop5: detected capacity change from 0 to 256 [ 172.507146][ T7392] REISERFS (device loop4): checking transaction log (loop4) [ 172.527844][ T7410] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.547494][ T7392] REISERFS (device loop4): Using r5 hash to sort names [ 172.591429][ T7410] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 172.610509][ T7392] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 172.644206][ T7410] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 172.665634][ T7392] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 173.906422][ T7447] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 174.088510][ T7435] loop5: detected capacity change from 0 to 32768 [ 174.171016][ T7435] XFS (loop5): Mounting V5 Filesystem [ 174.229831][ T7435] XFS (loop5): Ending clean mount [ 174.235754][ T7435] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 174.247737][ T7435] XFS (loop5): Unmount and run xfs_repair [ 174.254498][ T7435] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 174.262643][ T7435] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 174.271766][ T7435] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 174.280778][ T7435] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 174.290086][ T7435] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 174.299291][ T7435] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 174.308496][ T7435] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 174.317713][ T7435] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 174.335350][ T7435] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 174.344857][ T7435] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 174.357445][ T7435] XFS (loop5): Failed to initialize disk quotas. [ 174.478653][ T5101] XFS (loop5): Unmounting Filesystem [ 174.856305][ T7449] loop0: detected capacity change from 0 to 32768 [ 175.028895][ T7449] XFS (loop0): Mounting V5 Filesystem [ 175.091493][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 175.128018][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 175.206425][ T7486] loop5: detected capacity change from 0 to 512 [ 175.244366][ T7449] XFS (loop0): Ending clean mount [ 175.274310][ T7486] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.288434][ T7449] XFS (loop0): Quotacheck needed: Please wait. [ 175.319026][ T7486] EXT4-fs (loop5): 1 truncate cleaned up [ 175.338400][ T7486] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.350468][ T7449] XFS (loop0): Quotacheck: Done. [ 175.393184][ T26] audit: type=1800 audit(1753245639.485:133): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1085" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 175.495772][ T5101] EXT4-fs (loop5): unmounting filesystem. [ 175.523691][ T4263] XFS (loop0): Unmounting Filesystem [ 175.918360][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1092'. [ 176.403456][ T7498] loop4: detected capacity change from 0 to 32768 [ 176.431711][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 176.441866][ T7516] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1100'. [ 176.449286][ T7514] loop5: detected capacity change from 0 to 4096 [ 176.450990][ T7516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1100'. [ 176.508164][ T7514] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 176.533102][ T7498] XFS (loop4): Mounting V5 Filesystem [ 176.683734][ T7498] XFS (loop4): Ending clean mount [ 176.693829][ T5916] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 176.708532][ T7510] loop3: detected capacity change from 0 to 32768 [ 176.747060][ T5916] XFS (loop4): Unmount and run xfs_repair [ 176.783460][ T7510] JBD2: Ignoring recovery information on journal [ 176.801522][ T5916] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 176.819304][ T5916] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 176.889872][ T5916] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 176.918681][ T7510] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.940504][ T5916] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 176.974068][ T26] audit: type=1800 audit(1753245641.065:134): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1097" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 176.986028][ T7530] loop1: detected capacity change from 0 to 8192 [ 177.011355][ T5916] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 177.041618][ T5916] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 177.051236][ T5916] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 177.089334][ T7530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.124567][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 177.139294][ T7530] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 177.149135][ T7530] REISERFS (device loop1): using journaled data mode [ 177.156948][ T5916] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.216830][ T5916] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.232168][ T7530] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.247200][ T7498] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 177.288530][ T7498] XFS (loop4): Failed to initialize disk quotas. [ 177.312644][ T7530] REISERFS (device loop1): checking transaction log (loop1) [ 177.344220][ T7530] REISERFS (device loop1): Using r5 hash to sort names [ 177.381878][ T7530] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 177.431507][ T7530] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 177.510102][ T4277] XFS (loop4): Unmounting Filesystem [ 177.698171][ T7545] loop3: detected capacity change from 0 to 64 [ 177.845842][ T7542] reiserfs: write barriers turned off [ 177.922929][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1110'. [ 178.409490][ T7568] loop3: detected capacity change from 0 to 512 [ 178.439362][ T7568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.439384][ T7568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.476069][ T7565] loop1: detected capacity change from 0 to 4096 [ 178.517846][ T7568] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1116: invalid indirect mapped block 4294967295 (level 1) [ 178.518433][ T7568] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1116: invalid indirect mapped block 4294967295 (level 1) [ 178.520576][ T7568] EXT4-fs (loop3): 2 truncates cleaned up [ 178.581028][ T7568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.581785][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.790188][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 178.811365][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 178.819865][ T5916] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.857619][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 178.885098][ T5916] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 178.930376][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.952926][ T5916] usb 6-1: config 0 descriptor?? [ 179.069557][ T7582] loop1: detected capacity change from 0 to 64 [ 179.363663][ T7573] loop0: detected capacity change from 0 to 32768 [ 179.374598][ T5916] corsair-psu 0003:1B1C:1C0D.000F: item fetching failed at offset 1/5 [ 179.408281][ T5916] corsair-psu: probe of 0003:1B1C:1C0D.000F failed with error -22 [ 179.477476][ T7573] XFS (loop0): Mounting V5 Filesystem [ 179.580794][ T7573] XFS (loop0): Ending clean mount [ 179.592098][ T127] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 179.610566][ T127] XFS (loop0): Unmount and run xfs_repair [ 179.623458][ T127] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 179.633315][ T5916] usb 6-1: USB disconnect, device number 6 [ 179.646674][ T127] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 179.705770][ T127] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 179.729056][ T127] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 179.740405][ T127] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 179.749619][ T127] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 179.774899][ T7608] netlink: 'syz.4.1134': attribute type 6 has an invalid length. [ 179.784467][ T127] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 179.795104][ T127] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.804283][ T7608] netlink: 'syz.4.1134': attribute type 6 has an invalid length. [ 179.812171][ T127] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.825063][ T7573] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 179.837185][ T7573] XFS (loop0): Failed to initialize disk quotas. [ 180.008768][ T4263] XFS (loop0): Unmounting Filesystem [ 180.411279][ T7616] loop4: detected capacity change from 0 to 4096 [ 180.437502][ T7616] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 180.480044][ T7616] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 180.524263][ T7616] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 180.543190][ T7616] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 180.562291][ T7616] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 180.582594][ T7616] ntfs: volume version 3.1. [ 180.589378][ T7616] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 180.609990][ T7616] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 180.627391][ T7616] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 180.648219][ T7616] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 180.649117][ T7622] loop3: detected capacity change from 0 to 4096 [ 180.666720][ T7616] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 180.716782][ T7624] loop0: detected capacity change from 0 to 8192 [ 180.767439][ T7622] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 180.781460][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 180.787502][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 180.787546][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 180.794007][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 180.814358][ T7624] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 180.845085][ T7624] UDF-fs: Scanning with blocksize 512 failed [ 180.852841][ T7624] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 180.865125][ T7624] UDF-fs: Scanning with blocksize 1024 failed [ 180.875632][ T7624] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 180.895909][ T7624] UDF-fs: Scanning with blocksize 2048 failed [ 180.924944][ T7624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.092321][ T7622] overlayfs: upper fs does not support tmpfile. [ 181.127298][ T7622] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.201867][ T7622] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 181.259178][ T7638] loop5: detected capacity change from 0 to 256 [ 181.291413][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.334308][ T4269] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 181.369936][ T7638] FAT-fs (loop5): Directory bread(block 64) failed [ 181.378974][ T7638] FAT-fs (loop5): Directory bread(block 65) failed [ 181.388112][ T4269] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 181.394957][ T7638] FAT-fs (loop5): Directory bread(block 66) failed [ 181.401871][ T4269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 181.409221][ T7638] FAT-fs (loop5): Directory bread(block 67) failed [ 181.416938][ T7638] FAT-fs (loop5): Directory bread(block 68) failed [ 181.439829][ T7638] FAT-fs (loop5): Directory bread(block 69) failed [ 181.466941][ T7638] FAT-fs (loop5): Directory bread(block 70) failed [ 181.483380][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 181.499634][ T7638] FAT-fs (loop5): Directory bread(block 71) failed [ 181.504105][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.519977][ T7638] FAT-fs (loop5): Directory bread(block 72) failed [ 181.535104][ T127] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 181.550608][ T7638] FAT-fs (loop5): Directory bread(block 73) failed [ 181.556715][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.576444][ T127] usb 5-1: config 0 descriptor?? [ 181.916106][ T7636] loop1: detected capacity change from 0 to 32768 [ 181.962760][ T7652] loop0: detected capacity change from 0 to 2048 [ 182.013807][ T127] semitek 0003:1EA7:0907.0010: item fetching failed at offset 0/2 [ 182.022790][ T127] semitek: probe of 0003:1EA7:0907.0010 failed with error -22 [ 182.061756][ T7652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.225762][ T127] usb 5-1: USB disconnect, device number 7 [ 182.242513][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 182.283257][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 182.693328][ T7676] loop3: detected capacity change from 0 to 164 [ 183.544753][ T7668] loop0: detected capacity change from 0 to 40427 [ 183.651680][ T7668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.946885][ T7668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.971074][ T7688] loop5: detected capacity change from 0 to 131072 [ 184.047478][ T7688] XFS (loop5): Mounting V5 Filesystem [ 184.058538][ T7703] loop1: detected capacity change from 0 to 1024 [ 184.085906][ T7668] syz.0.1160: attempt to access beyond end of device [ 184.085906][ T7668] loop0: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 184.149650][ T7684] loop4: detected capacity change from 0 to 32768 [ 184.169051][ T7684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1167 (7684) [ 184.182568][ T4263] syz-executor: attempt to access beyond end of device [ 184.182568][ T4263] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.256759][ T7684] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 184.279643][ T7684] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 184.292366][ T7684] BTRFS info (device loop4): enabling auto defrag [ 184.298820][ T7684] BTRFS info (device loop4): use no compression [ 184.325922][ T7688] XFS (loop5): Starting recovery (logdev: internal) [ 184.351416][ T7688] XFS (loop5): Ending recovery (logdev: internal) [ 184.391431][ T7684] BTRFS info (device loop4): force clearing of disk cache [ 184.398595][ T7684] BTRFS info (device loop4): turning on async discard [ 184.449521][ T7684] BTRFS info (device loop4): max_inline at 5 [ 184.487735][ T7684] BTRFS info (device loop4): force zlib compression, level 3 [ 184.504834][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 184.528329][ T7684] BTRFS info (device loop4): using free space tree [ 184.548850][ T5101] XFS (loop5): Unmounting Filesystem [ 184.865778][ T7730] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1173'. [ 184.988929][ T7684] BTRFS info (device loop4): enabling ssd optimizations [ 185.009269][ T7684] BTRFS info (device loop4): rebuilding free space tree [ 185.287760][ T4277] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.582189][ T4559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (4559) [ 185.652805][ T7745] loop3: detected capacity change from 0 to 4096 [ 185.716063][ T7745] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 186.411884][ T7742] loop5: detected capacity change from 0 to 40427 [ 186.442221][ T7742] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 186.449990][ T7742] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 186.486328][ T7742] F2FS-fs (loop5): invalid crc value [ 186.522660][ T7751] loop0: detected capacity change from 0 to 32768 [ 186.530081][ T7742] F2FS-fs (loop5): Found nat_bits in checkpoint [ 186.574980][ T7751] JBD2: Ignoring recovery information on journal [ 186.706895][ T7751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.743748][ T7742] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 186.764828][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 186.764841][ T26] audit: type=1800 audit(1753245650.855:136): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1184" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 186.772796][ T7742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 186.799562][ T4271] Bluetooth: hci1: command 0x0401 tx timeout [ 186.919142][ T4263] ocfs2: Unmounting device (7,0) on (node local) [ 187.721168][ T7780] loop4: detected capacity change from 0 to 32768 [ 187.728047][ T7776] loop3: detected capacity change from 0 to 32768 [ 187.767220][ T7780] JBD2: Ignoring recovery information on journal [ 187.781425][ T6282] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 187.814640][ T7782] loop0: detected capacity change from 0 to 32768 [ 187.862297][ T7782] MetaData crosses page boundary!! [ 187.867458][ T7782] lblock = 621d00, size = 28672 [ 187.873687][ T7782] CPU: 1 PID: 7782 Comm: syz.0.1194 Not tainted 6.1.146-syzkaller #0 [ 187.881791][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.891875][ T7782] Call Trace: [ 187.895173][ T7782] [ 187.898122][ T7782] dump_stack_lvl+0x168/0x22e [ 187.902829][ T7782] ? show_regs_print_info+0x12/0x12 [ 187.908047][ T7782] ? load_image+0x3b0/0x3b0 [ 187.912591][ T7782] __get_metapage+0xaa8/0xfa0 [ 187.917296][ T7782] dtSearch+0x5d5/0x2050 [ 187.921598][ T7782] jfs_lookup+0x152/0x380 [ 187.925959][ T7782] ? jfs_get_parent+0xa0/0xa0 [ 187.930680][ T7782] ? apparmor_path_rmdir+0x30/0x30 [ 187.935813][ T7782] ? make_kgid+0x640/0x640 [ 187.940410][ T7782] ? generic_permission+0x230/0x510 [ 187.945614][ T7782] ? inode_permission+0xef/0x480 [ 187.950543][ T7782] ? bpf_lsm_inode_create+0x5/0x10 [ 187.955675][ T7782] ? security_inode_create+0xb3/0x100 [ 187.961035][ T7782] ? jfs_get_parent+0xa0/0xa0 [ 187.965879][ T7782] path_openat+0xfaf/0x2e70 [ 187.970391][ T7782] ? do_filp_open+0x3c0/0x3c0 [ 187.975073][ T7782] do_filp_open+0x1c1/0x3c0 [ 187.979571][ T7782] ? vfs_tmpfile+0x480/0x480 [ 187.984171][ T7782] ? _raw_spin_unlock+0x24/0x40 [ 187.989023][ T7782] ? alloc_fd+0x58f/0x630 [ 187.993356][ T7782] do_sys_openat2+0x142/0x490 [ 187.998030][ T7782] ? do_sys_open+0xe0/0xe0 [ 188.002437][ T7782] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 188.008411][ T7782] ? lock_chain_count+0x20/0x20 [ 188.013254][ T7782] __x64_sys_openat+0x135/0x160 [ 188.018125][ T7782] do_syscall_64+0x4c/0xa0 [ 188.022547][ T7782] ? clear_bhb_loop+0x60/0xb0 [ 188.027226][ T7782] ? clear_bhb_loop+0x60/0xb0 [ 188.031903][ T7782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.037817][ T7782] RIP: 0033:0x7fd41278e9a9 [ 188.042232][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.061834][ T7782] RSP: 002b:00007fd4125ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.070249][ T7782] RAX: ffffffffffffffda RBX: 00007fd4129b5fa0 RCX: 00007fd41278e9a9 [ 188.078211][ T7782] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 188.086176][ T7782] RBP: 00007fd412810d69 R08: 0000000000000000 R09: 0000000000000000 [ 188.094136][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.102097][ T7782] R13: 0000000000000000 R14: 00007fd4129b5fa0 R15: 00007fff24b46988 [ 188.110070][ T7782] [ 188.118790][ T7780] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 188.152895][ T6282] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 188.171624][ T6282] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 188.192816][ T7782] bread failed! [ 188.196339][ T7782] jfs_lookup: dtSearch returned -5 [ 188.204625][ T26] audit: type=1800 audit(1753245652.295:137): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1205" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 188.255467][ T6282] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 188.290301][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 188.309200][ T6282] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 188.361156][ T6282] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 188.404957][ T6282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.436750][ T6282] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 188.466301][ T6282] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 188.476463][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 188.496638][ T6282] usb 2-1: Product: syz [ 188.500842][ T6282] usb 2-1: Manufacturer: syz [ 188.521344][ T6282] usb 2-1: SerialNumber: syz [ 188.538960][ T6282] usb 2-1: config 0 descriptor?? [ 188.539528][ T7794] loop4: detected capacity change from 0 to 4096 [ 188.547777][ T7784] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.582306][ T7794] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 188.590453][ T6282] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 188.621821][ T6282] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 188.909652][ T6113] usb 2-1: USB disconnect, device number 12 [ 188.926408][ T6113] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 189.278146][ T7809] loop5: detected capacity change from 0 to 4096 [ 189.298157][ T7809] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 189.409449][ T7809] overlayfs: upper fs does not support tmpfile. [ 189.462585][ T7809] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.498087][ T7809] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 189.631504][ T5101] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 189.642693][ T5101] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 189.649257][ T5101] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 189.758145][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 189.888015][ T4579] kernel write not supported for file /vcsa1 (pid: 4579 comm: kworker/0:10) [ 190.266309][ T7848] loop4: detected capacity change from 0 to 1024 [ 190.369594][ T6302] hfsplus: b-tree write err: -5, ino 4 [ 190.522589][ T7852] loop1: detected capacity change from 0 to 4096 [ 190.549865][ T7852] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 190.688549][ T7852] overlayfs: upper fs does not support tmpfile. [ 190.713363][ T7852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 190.740927][ T7852] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 190.771473][ T6654] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.837464][ T4272] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 190.892648][ T4272] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 190.918815][ T4272] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 190.971586][ T6654] usb 4-1: Using ep0 maxpacket: 16 [ 190.978510][ T6654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.010255][ T6654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.040614][ T6654] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 191.091636][ T6654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.121266][ T6654] usb 4-1: config 0 descriptor?? [ 191.536379][ T6654] saitek 0003:06A3:0CCB.0011: item fetching failed at offset 0/2 [ 191.536548][ T7878] loop1: detected capacity change from 0 to 32768 [ 191.561881][ T6654] saitek 0003:06A3:0CCB.0011: parse failed [ 191.567742][ T6654] saitek: probe of 0003:06A3:0CCB.0011 failed with error -22 [ 191.698938][ T7886] loop4: detected capacity change from 0 to 128 [ 191.706897][ T7880] loop5: detected capacity change from 0 to 32768 [ 191.750038][ T7886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 191.768023][ T7886] System zones: 1-3, 19-19, 35-36 [ 191.773249][ T26] audit: type=1326 audit(1753245655.855:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 191.780335][ T6654] usb 4-1: USB disconnect, device number 7 [ 191.816717][ T7886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.820940][ T7880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1240 (7880) [ 191.838842][ T26] audit: type=1326 audit(1753245655.855:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 191.862920][ T26] audit: type=1326 audit(1753245655.855:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 191.886238][ T26] audit: type=1326 audit(1753245655.885:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 191.889992][ T7886] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.909095][ T26] audit: type=1326 audit(1753245655.885:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 192.006697][ T7880] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.031585][ T7880] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 192.058798][ T26] audit: type=1326 audit(1753245655.885:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 192.061740][ T7880] BTRFS info (device loop5): force clearing of disk cache [ 192.147472][ T26] audit: type=1326 audit(1753245655.885:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 192.193468][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 192.213071][ T7880] BTRFS info (device loop5): allowing degraded mounts [ 192.219882][ T7880] BTRFS info (device loop5): turning on async discard [ 192.264707][ T26] audit: type=1326 audit(1753245655.885:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85e38e9a9 code=0x7ffc0000 [ 192.309444][ T7880] BTRFS info (device loop5): enabling auto defrag [ 192.350878][ T7880] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.381560][ T7880] BTRFS info (device loop5): trying to use backup root at mount time [ 192.410087][ T7880] BTRFS info (device loop5): enabling disk space caching [ 192.441471][ T7880] BTRFS info (device loop5): disk space caching is enabled [ 192.488589][ T7901] loop4: detected capacity change from 0 to 4096 [ 192.612044][ T7901] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 192.719723][ T7901] overlayfs: upper fs does not support tmpfile. [ 192.780618][ T7901] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 192.826936][ T7901] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 192.831460][ T7880] BTRFS info (device loop5): enabling ssd optimizations [ 192.853069][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 192.860096][ T7880] BTRFS info (device loop5): rebuilding free space tree [ 192.940024][ T7880] BTRFS info (device loop5): disabling free space tree [ 192.981679][ T7880] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.031380][ T7880] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.053837][ T4277] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 193.103976][ T4277] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 193.110521][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 193.239344][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 193.302469][ T5101] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.684394][ T7945] loop4: detected capacity change from 0 to 64 [ 193.744056][ T7943] loop3: detected capacity change from 0 to 4096 [ 193.834443][ T7947] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1261'. [ 193.859516][ T7943] ntfs: volume version 3.1. [ 193.988835][ T7949] loop1: detected capacity change from 0 to 256 [ 194.030368][ T7949] exfat: Deprecated parameter 'namecase' [ 194.063922][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.070466][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.127315][ T7949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 194.488967][ T7935] loop0: detected capacity change from 0 to 32768 [ 194.501618][ T7935] XFS: ikeep mount option is deprecated. [ 194.573929][ T7935] XFS (loop0): Mounting V5 Filesystem [ 194.598911][ T7962] loop5: detected capacity change from 0 to 4096 [ 194.617277][ T7962] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 194.683605][ T7935] XFS (loop0): Ending clean mount [ 194.698491][ T7962] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 194.737317][ T7935] XFS (loop0): Quotacheck needed: Please wait. [ 194.819820][ T7962] ntfs3: loop5: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 194.841751][ T7935] XFS (loop0): Quotacheck: Done. [ 194.997932][ T4263] XFS (loop0): Unmounting Filesystem [ 195.121255][ T26] audit: type=1326 audit(1753245659.205:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e9a9 code=0x7ffc0000 [ 195.128954][ T26] audit: type=1326 audit(1753245659.215:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7efebe78e9a9 code=0x7ffc0000 [ 195.554219][ T6282] kernel write not supported for file /vcsa1 (pid: 6282 comm: kworker/1:15) [ 195.600278][ T7997] loop4: detected capacity change from 0 to 256 [ 195.644069][ T7997] FAT-fs (loop4): bogus logical sector size 58182 [ 195.660811][ T7997] FAT-fs (loop4): Can't find a valid FAT filesystem [ 195.987577][ T8008] loop1: detected capacity change from 0 to 2048 [ 196.033841][ T8008] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.128640][ T8013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.200113][ T7991] loop3: detected capacity change from 0 to 32768 [ 196.705512][ T8027] loop0: detected capacity change from 0 to 1764 [ 196.795279][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 196.939089][ T8006] loop5: detected capacity change from 0 to 40427 [ 196.997695][ T8006] F2FS-fs (loop5): invalid crc value [ 197.036508][ T8006] F2FS-fs (loop5): Found nat_bits in checkpoint [ 197.185210][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 197.234193][ T8006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 197.495307][ T5101] syz-executor: attempt to access beyond end of device [ 197.495307][ T5101] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.930319][ T8061] loop3: detected capacity change from 0 to 1764 [ 198.014694][ T4851] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.021381][ T4332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.046676][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 198.181209][ T8051] loop0: detected capacity change from 0 to 32768 [ 198.231386][ T4332] usb 2-1: Using ep0 maxpacket: 16 [ 198.240943][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.310725][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.366490][ T4332] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 198.399486][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.429456][ T4332] usb 2-1: config 0 descriptor?? [ 198.435188][ T8072] sp0: Synchronizing with TNC [ 198.861007][ T4332] saitek 0003:06A3:0CCB.0012: item fetching failed at offset 0/2 [ 198.883297][ T4332] saitek 0003:06A3:0CCB.0012: parse failed [ 198.899321][ T4332] saitek: probe of 0003:06A3:0CCB.0012 failed with error -22 [ 199.096608][ T4332] usb 2-1: USB disconnect, device number 13 [ 199.377677][ T8093] loop4: detected capacity change from 0 to 1764 [ 199.467393][ T4851] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.499583][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 199.535866][ T8074] loop3: detected capacity change from 0 to 40427 [ 199.609471][ T8074] F2FS-fs (loop3): invalid crc value [ 199.647799][ T8100] loop0: detected capacity change from 0 to 512 [ 199.656020][ T8074] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.735033][ T8074] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.845358][ T8100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.861849][ T8100] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.903929][ T8100] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1332: corrupted inode contents [ 199.969159][ T8100] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1332: mark_inode_dirty error [ 200.011873][ T8110] sp0: Synchronizing with TNC [ 200.024685][ T4269] syz-executor: attempt to access beyond end of device [ 200.024685][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.043748][ T8100] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1332: corrupted inode contents [ 200.112479][ T8111] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1332: corrupted inode contents [ 200.142567][ T8111] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1332: mark_inode_dirty error [ 200.191977][ T8111] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1332: corrupted inode contents [ 200.248383][ T8111] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1332: mark_inode_dirty error [ 200.281536][ T4332] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 200.300304][ T8111] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.1332: corrupted inode contents [ 200.351501][ T8111] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.1332: mark_inode_dirty error [ 200.446761][ T8114] loop1: detected capacity change from 0 to 4096 [ 200.477313][ T4332] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.504832][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 200.528464][ T4332] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.544743][ T4332] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.556014][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.594625][ T8112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.963189][ T6654] usb 6-1: USB disconnect, device number 7 [ 200.974872][ T8107] loop4: detected capacity change from 0 to 32768 [ 201.002922][ T8107] XFS: ikeep mount option is deprecated. [ 201.111539][ T4579] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.130495][ T8107] XFS (loop4): Mounting V5 Filesystem [ 201.243147][ T8107] XFS (loop4): Ending clean mount [ 201.258584][ T8107] XFS (loop4): Quotacheck needed: Please wait. [ 201.301386][ T4579] usb 4-1: Using ep0 maxpacket: 8 [ 201.326824][ T4579] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 201.336964][ T8107] XFS (loop4): Quotacheck: Done. [ 201.358393][ T4579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.396999][ T4579] usb 4-1: Product: syz [ 201.401206][ T4579] usb 4-1: Manufacturer: syz [ 201.436469][ T4579] usb 4-1: SerialNumber: syz [ 201.467434][ T4579] usb 4-1: config 0 descriptor?? [ 201.509632][ T4277] XFS (loop4): Unmounting Filesystem [ 201.670198][ T8141] loop1: detected capacity change from 0 to 64 [ 201.698363][ T4579] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 201.819873][ T4272] Trying to free block not in datazone [ 201.842822][ T4272] Trying to free block not in datazone [ 201.865796][ T4272] Trying to free block not in datazone [ 201.893899][ T4272] Trying to free block not in datazone [ 201.900383][ T4272] Trying to free block not in datazone [ 201.914287][ T4272] Trying to free block not in datazone [ 201.919844][ T4272] Trying to free block not in datazone [ 201.931953][ T4272] Trying to free block not in datazone [ 201.937502][ T4272] Trying to free block not in datazone [ 201.943419][ T4272] Trying to free block not in datazone [ 201.953443][ T4272] Trying to free block not in datazone [ 201.960087][ T4272] Trying to free block not in datazone [ 201.968927][ T4272] Trying to free block not in datazone [ 202.006555][ T4272] Trying to free block not in datazone [ 202.084402][ T8152] mmap: syz.4.1350 (8152): VmData 49221632 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 202.094855][ T8154] loop1: detected capacity change from 0 to 128 [ 202.120839][ T4579] usb write operation failed. (-71) [ 202.136052][ T4579] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.181593][ T4579] dvbdev: DVB: registering new adapter (Terratec H7) [ 202.188344][ T4579] usb 4-1: media controller created [ 202.202804][ T4579] usb read operation failed. (-71) [ 202.209948][ T4579] usb write operation failed. (-71) [ 202.219179][ T4579] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 202.228733][ T4579] usb 4-1: USB disconnect, device number 8 [ 202.287299][ T8158] loop4: detected capacity change from 0 to 256 [ 202.313064][ T8158] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.367989][ T8158] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 202.380498][ T8160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1353'. [ 202.394632][ T8158] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 202.873842][ T8166] loop5: detected capacity change from 0 to 8192 [ 202.918025][ T8166] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.940732][ T8181] loop4: detected capacity change from 0 to 1024 [ 203.011827][ T8166] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 203.021082][ T8166] REISERFS (device loop5): using ordered data mode [ 203.030101][ T8183] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 203.114654][ T8166] reiserfs: using flush barriers [ 203.147829][ T8166] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.239534][ T8166] REISERFS (device loop5): checking transaction log (loop5) [ 203.273491][ T8166] REISERFS (device loop5): Using r5 hash to sort names [ 203.274622][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 203.307221][ T8166] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 203.460227][ T8189] loop1: detected capacity change from 0 to 8192 [ 203.536287][ T8189] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 203.671502][ T8189] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 203.687041][ T8189] REISERFS (device loop1): using ordered data mode [ 203.711934][ T8189] reiserfs: using flush barriers [ 203.744602][ T8189] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.813503][ T8189] REISERFS (device loop1): checking transaction log (loop1) [ 203.852222][ T8189] REISERFS (device loop1): Using r5 hash to sort names [ 203.868888][ T8187] loop3: detected capacity change from 0 to 32768 [ 203.879363][ T8189] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 203.921746][ T8189] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 204.006398][ T8189] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 204.051549][ T6654] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.061161][ T8189] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 204.251538][ T6654] usb 6-1: Using ep0 maxpacket: 8 [ 204.264619][ T6654] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 204.304769][ T6654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.344883][ T6654] usb 6-1: Product: syz [ 204.349089][ T6654] usb 6-1: Manufacturer: syz [ 204.372407][ T6654] usb 6-1: SerialNumber: syz [ 204.406403][ T6654] usb 6-1: config 0 descriptor?? [ 204.643441][ T8219] loop3: detected capacity change from 0 to 4096 [ 204.657008][ T6654] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 204.659932][ T8221] loop0: detected capacity change from 0 to 4096 [ 204.711837][ T8221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.725840][ T8224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.741988][ T8221] fs-verity: sha512 using implementation "sha512-avx2" [ 204.851387][ T6282] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 204.965288][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 205.047571][ T8229] loop4: detected capacity change from 0 to 256 [ 205.055692][ T6282] usb 2-1: config 0 has no interfaces? [ 205.063553][ T6654] usb write operation failed. (-71) [ 205.093857][ T6282] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 205.106086][ T6654] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.151745][ T6282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 205.159869][ T6282] usb 2-1: Product: syz [ 205.163926][ T8229] FAT-fs (loop4): Directory bread(block 64) failed [ 205.176664][ T6654] dvbdev: DVB: registering new adapter (Terratec H7) [ 205.201406][ T6654] usb 6-1: media controller created [ 205.207083][ T8229] FAT-fs (loop4): Directory bread(block 65) failed [ 205.214166][ T6282] usb 2-1: Manufacturer: syz [ 205.218789][ T6282] usb 2-1: SerialNumber: syz [ 205.227443][ T6654] usb read operation failed. (-71) [ 205.238674][ T8229] FAT-fs (loop4): Directory bread(block 66) failed [ 205.262518][ T6654] usb write operation failed. (-71) [ 205.270282][ T6282] usb 2-1: config 0 descriptor?? [ 205.275595][ T8229] FAT-fs (loop4): Directory bread(block 67) failed [ 205.283763][ T6654] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 205.307864][ T8229] FAT-fs (loop4): Directory bread(block 68) failed [ 205.341118][ T6654] usb 6-1: USB disconnect, device number 8 [ 205.346365][ T8229] FAT-fs (loop4): Directory bread(block 69) failed [ 205.390414][ T8229] FAT-fs (loop4): Directory bread(block 70) failed [ 205.425026][ T8229] FAT-fs (loop4): Directory bread(block 71) failed [ 205.433015][ T8229] FAT-fs (loop4): Directory bread(block 72) failed [ 205.439731][ T8229] FAT-fs (loop4): Directory bread(block 73) failed [ 205.513060][ T6282] usb 2-1: USB disconnect, device number 14 [ 205.908412][ T8249] loop5: detected capacity change from 0 to 4096 [ 205.960332][ T8252] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.186124][ T8257] loop1: detected capacity change from 0 to 256 [ 206.246516][ T8257] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.259537][ T8257] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 206.319373][ T8257] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 206.392114][ T8260] loop3: detected capacity change from 0 to 64 [ 206.424134][ T8262] loop0: detected capacity change from 0 to 512 [ 206.505378][ T8262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.522391][ T8262] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.539693][ T8247] loop4: detected capacity change from 0 to 40427 [ 206.553586][ T8247] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.624269][ T8247] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 206.651433][ T8247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.706586][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 206.761493][ T6282] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 206.840555][ T4277] syz-executor: attempt to access beyond end of device [ 206.840555][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.961430][ T6282] usb 6-1: Using ep0 maxpacket: 8 [ 206.977162][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 207.017494][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.040335][ T6282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.060894][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 207.116847][ T6282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.161834][ T6282] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.170909][ T6282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.202694][ T6282] usb 6-1: config 0 descriptor?? [ 207.212845][ T8266] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.731503][ T4579] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 207.761374][ T6282] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.866168][ T4586] usb 6-1: USB disconnect, device number 9 [ 207.868695][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 207.923081][ T4579] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 207.931734][ T4579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.945194][ T4579] usb 4-1: config 0 has no interface number 0 [ 207.951581][ T4579] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 207.961761][ T6282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.962044][ T4579] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.977951][ T6282] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 207.988920][ T4579] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 207.995775][ T6282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.004805][ T4579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.020955][ T4579] usb 4-1: Product: syz [ 208.026189][ T4579] usb 4-1: Manufacturer: syz [ 208.028044][ T6282] usb 5-1: config 0 descriptor?? [ 208.030857][ T4579] usb 4-1: SerialNumber: syz [ 208.055189][ T4579] usb 4-1: config 0 descriptor?? [ 208.227833][ T8296] loop1: detected capacity change from 0 to 1024 [ 208.317283][ T75] hfsplus: b-tree write err: -5, ino 4 [ 208.474626][ T6282] logitech 0003:046D:C287.0013: hidraw0: USB HID v0.08 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0 [ 208.496625][ T6282] logitech 0003:046D:C287.0013: no inputs found [ 208.725388][ T6288] usb 5-1: USB disconnect, device number 8 [ 208.739296][ T4579] usb 4-1: USB disconnect, device number 9 [ 208.846766][ T8300] loop1: detected capacity change from 0 to 40427 [ 208.866544][ T6282] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 208.877737][ T8300] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.923445][ T8300] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 208.930749][ T8300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.992044][ T4272] syz-executor: attempt to access beyond end of device [ 208.992044][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.053155][ T6282] usb 6-1: Using ep0 maxpacket: 16 [ 209.069570][ T6282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.085708][ T6282] usb 6-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 209.095656][ T6282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.121260][ T6282] usb 6-1: config 0 descriptor?? [ 209.660349][ T8325] loop3: detected capacity change from 0 to 1024 [ 209.707381][ T8325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.728450][ T8325] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.747217][ T6282] usb 6-1: USB disconnect, device number 10 [ 209.970532][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 209.982956][ T8333] ptrace attach of "./syz-executor exec"[4263] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 210.120737][ T8323] loop4: detected capacity change from 0 to 32768 [ 210.335255][ T8323] XFS (loop4): Mounting V5 Filesystem [ 210.457992][ T8323] XFS (loop4): Ending clean mount [ 210.673227][ T6282] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.710964][ T4277] XFS (loop4): Unmounting Filesystem [ 210.854685][ T8369] loop1: detected capacity change from 0 to 1024 [ 210.884908][ T6282] usb 4-1: Using ep0 maxpacket: 8 [ 210.912462][ T6282] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 210.953087][ T6282] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 210.965547][ T8371] loop0: detected capacity change from 0 to 2048 [ 210.981486][ T6282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.011004][ T6282] usb 4-1: Product: syz [ 211.017661][ T6282] usb 4-1: Manufacturer: syz [ 211.030345][ T8373] loop5: detected capacity change from 0 to 1764 [ 211.036869][ T8371] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.050920][ T6282] usb 4-1: SerialNumber: syz [ 211.072020][ T6282] usb 4-1: config 0 descriptor?? [ 211.103971][ T6282] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 211.139337][ T8374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.154421][ T6282] usb 4-1: setting power ON [ 211.155886][ T4459] udevd[4459]: incorrect nilfs2 checksum on /dev/loop0 [ 211.159369][ T6282] dvb-usb: bulk message failed: -22 (2/0) [ 211.218626][ T6282] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.239153][ T6282] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 211.273372][ T6282] usb 4-1: media controller created [ 211.296405][ T8351] dvb-usb: bulk message failed: -22 (3/0) [ 211.336148][ T8351] dvb-usb: bulk message failed: -22 (3/0) [ 211.351942][ T6282] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.381234][ T8380] device hsr0 entered promiscuous mode [ 211.409080][ T6282] usb 4-1: selecting invalid altsetting 6 [ 211.416397][ T6282] usb 4-1: digital interface selection failed (-22) [ 211.417090][ T8380] device hsr0 left promiscuous mode [ 211.424251][ T6282] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 211.458704][ T6282] usb 4-1: setting power OFF [ 211.468883][ T6282] dvb-usb: bulk message failed: -22 (2/0) [ 211.475910][ T6282] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 211.499947][ T6282] (NULL device *): no alternate interface [ 211.501426][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 211.548593][ T6282] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 211.606638][ T6282] usb 4-1: USB disconnect, device number 10 [ 212.693568][ T8422] loop3: detected capacity change from 0 to 4096 [ 212.729143][ T8422] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 213.049867][ T4269] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 213.106279][ T4269] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 213.121131][ T4269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 213.369310][ T8457] loop5: detected capacity change from 0 to 256 [ 213.446328][ T8460] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 213.471742][ T6654] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.843880][ T8474] loop1: detected capacity change from 0 to 512 [ 213.932613][ T8474] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1491: Invalid inode bitmap blk 4 in block_group 0 [ 213.956735][ T8474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 213.988178][ T8474] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 214.017365][ T8473] loop4: detected capacity change from 0 to 8192 [ 214.053228][ T8474] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1491: Invalid inode bitmap blk 4 in block_group 0 [ 214.070500][ T8473] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.074575][ T8474] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 214.096494][ T8456] loop0: detected capacity change from 0 to 32768 [ 214.162694][ T8473] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 214.172815][ T8473] REISERFS (device loop4): using ordered data mode [ 214.179421][ T8473] reiserfs: using flush barriers [ 214.198726][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 214.231734][ T6288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.254148][ T8473] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.279517][ T8456] XFS (loop0): Mounting V5 Filesystem [ 214.356703][ T8473] REISERFS (device loop4): checking transaction log (loop4) [ 214.407785][ T8473] REISERFS (device loop4): Using r5 hash to sort names [ 214.441977][ T8473] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 214.561687][ T8473] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 214.602452][ T8456] XFS (loop0): Ending clean mount [ 214.624323][ T8473] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 214.646703][ T8486] loop3: detected capacity change from 0 to 32768 [ 214.676348][ T8499] xt_socket: unknown flags 0x8 [ 214.692392][ T8473] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 214.721909][ T8473] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 214.765839][ T8486] JBD2: Ignoring recovery information on journal [ 214.868031][ T8486] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 214.889332][ T4263] XFS (loop0): Unmounting Filesystem [ 215.063604][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 215.179707][ T8510] loop4: detected capacity change from 0 to 256 [ 215.287090][ T8510] FAT-fs (loop4): Directory bread(block 64) failed [ 215.321388][ T8510] FAT-fs (loop4): Directory bread(block 65) failed [ 215.328034][ T8510] FAT-fs (loop4): Directory bread(block 66) failed [ 215.346648][ T8510] FAT-fs (loop4): Directory bread(block 67) failed [ 215.362650][ T8510] FAT-fs (loop4): Directory bread(block 68) failed [ 215.391446][ T8510] FAT-fs (loop4): Directory bread(block 69) failed [ 215.420000][ T8510] FAT-fs (loop4): Directory bread(block 70) failed [ 215.428918][ T8510] FAT-fs (loop4): Directory bread(block 71) failed [ 215.463095][ T8510] FAT-fs (loop4): Directory bread(block 72) failed [ 215.471101][ T8512] loop5: detected capacity change from 0 to 4096 [ 215.493411][ T8510] FAT-fs (loop4): Directory bread(block 73) failed [ 215.966576][ T8522] loop4: detected capacity change from 0 to 2048 [ 215.992830][ T8522] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.081820][ T8526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.344786][ T8507] loop1: detected capacity change from 0 to 32768 [ 216.427971][ T8507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 216.453539][ T8507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 216.567205][ T8507] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 216.716411][ T8507] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 216.857870][ T8549] loop3: detected capacity change from 0 to 64 [ 217.149004][ T8557] nbd: socks must be embedded in a SOCK_ITEM attr [ 217.422556][ T8544] loop5: detected capacity change from 0 to 32768 [ 217.467530][ T8544] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 217.615146][ T5101] ocfs2: Unmounting device (7,5) on (node local) [ 217.728291][ T8575] loop1: detected capacity change from 0 to 64 [ 217.964643][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1537'. [ 218.211134][ T8594] loop1: detected capacity change from 0 to 1024 [ 218.231111][ T8592] loop3: detected capacity change from 0 to 4096 [ 218.294479][ T8592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.421787][ T9] hfsplus: b-tree write err: -5, ino 4 [ 218.450202][ T8604] loop5: detected capacity change from 0 to 2048 [ 218.469550][ T8604] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.519653][ T8604] syz.5.1546: attempt to access beyond end of device [ 218.519653][ T8604] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 218.542724][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 218.559976][ T8607] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.744960][ T8604] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 16777227 [ 218.768288][ T8604] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 218.842586][ T8604] Remounting filesystem read-only [ 218.859404][ T8604] NILFS (loop5): error -5 truncating bmap (ino=16) [ 218.942693][ T8617] loop4: detected capacity change from 0 to 1764 [ 218.961704][ T8621] loop3: detected capacity change from 0 to 512 [ 219.024142][ T8617] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.043103][ T5101] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 219.068971][ T8621] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 219.141538][ T8621] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 219.171685][ T8621] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1553: Corrupt directory, running e2fsck is recommended [ 219.215308][ T8621] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 219.257179][ T8621] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1553: corrupted in-inode xattr [ 219.297288][ T8621] EXT4-fs (loop3): Remounting filesystem read-only [ 219.304353][ T8625] loop5: detected capacity change from 0 to 4096 [ 219.314422][ T8621] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1553: couldn't read orphan inode 15 (err -117) [ 219.340303][ T8628] mkiss: ax0: crc mode is auto. [ 219.375757][ T8621] EXT4-fs (loop3): Remounting filesystem read-only [ 219.382375][ T8632] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.420399][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 219.420413][ T26] audit: type=1800 audit(1753245683.505:151): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1555" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 219.435792][ T8621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.622059][ T8621] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 219.674174][ T8621] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 219.737082][ T8638] loop4: detected capacity change from 0 to 4096 [ 219.752385][ T8621] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1553: Corrupt directory, running e2fsck is recommended [ 219.778405][ T8638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.807835][ T8643] loop0: detected capacity change from 0 to 256 [ 219.905079][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 219.911031][ T8643] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 219.952115][ T8643] exFAT-fs (loop0): failed to load upcase table [ 219.976901][ T8643] exFAT-fs (loop0): failed to recognize exfat type [ 219.978990][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 220.204260][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 220.231408][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 220.246660][ T8650] netlink: 'syz.0.1566': attribute type 5 has an invalid length. [ 220.256794][ T8650] netlink: 'syz.0.1566': attribute type 6 has an invalid length. [ 220.813646][ T8676] loop1: detected capacity change from 0 to 4096 [ 220.862214][ T8676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.927327][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 221.284145][ T8668] loop4: detected capacity change from 0 to 32768 [ 221.320324][ T8668] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 221.346178][ T8668] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 221.400024][ T8693] loop3: detected capacity change from 0 to 512 [ 221.453360][ T8668] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 221.472783][ T8693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.551020][ T8693] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.582028][ T8668] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 221.717720][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 222.037459][ T8713] loop1: detected capacity change from 0 to 2048 [ 222.080215][ T8713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.380846][ T8724] usb usb8: usbfs: process 8724 (syz.1.1598) did not claim interface 0 before use [ 222.689262][ T8733] loop3: detected capacity change from 0 to 1024 [ 222.918500][ T8717] loop4: detected capacity change from 0 to 32768 [ 223.007441][ T8717] XFS (loop4): Mounting V5 Filesystem [ 223.148786][ T8717] XFS (loop4): Ending clean mount [ 223.204595][ T8751] loop3: detected capacity change from 0 to 2048 [ 223.236995][ T8751] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.254768][ T4277] XFS (loop4): Unmounting Filesystem [ 223.311754][ T4586] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.315955][ T8751] syz.3.1607: attempt to access beyond end of device [ 223.315955][ T8751] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 223.339005][ T8752] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.373677][ T8751] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 16777227 [ 223.388671][ T8751] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 223.398859][ T8751] Remounting filesystem read-only [ 223.411209][ T8751] NILFS (loop3): error -5 truncating bmap (ino=16) [ 223.447225][ T4269] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 223.456350][ T8735] loop5: detected capacity change from 0 to 32768 [ 223.503830][ T8735] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 223.505119][ T4586] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.521809][ T8735] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 223.564432][ T8735] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 223.577576][ T4586] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.613598][ T4586] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.633189][ T4586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.660466][ T8747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.718061][ T8735] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 224.001934][ T4586] usb 2-1: USB disconnect, device number 15 [ 224.331550][ T6282] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.535056][ T6282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.541542][ T8785] loop0: detected capacity change from 0 to 1024 [ 224.565707][ T6282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.595671][ T6282] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.639455][ T6282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.679817][ T6282] usb 5-1: SerialNumber: syz [ 224.719894][ T8787] mkiss: ax0: crc mode is auto. [ 224.739417][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 224.877792][ T8793] loop1: detected capacity change from 0 to 512 [ 224.904795][ T6282] usb 5-1: 0:2 : does not exist [ 224.915780][ T8797] loop3: detected capacity change from 0 to 1024 [ 224.938767][ T8793] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1629: casefold flag without casefold feature [ 224.953097][ T8797] EXT4-fs: Ignoring removed bh option [ 224.979407][ T8801] loop5: detected capacity change from 0 to 256 [ 224.982765][ T8793] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1629: couldn't read orphan inode 15 (err -117) [ 224.997905][ T8793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.038795][ T6282] usb 5-1: USB disconnect, device number 9 [ 225.077464][ T8797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.092244][ T8801] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 225.133220][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 225.234344][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 225.332819][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 225.347085][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 225.360078][ T8805] netlink: 'syz.1.1631': attribute type 5 has an invalid length. [ 225.379051][ T8805] netlink: 'syz.1.1631': attribute type 6 has an invalid length. [ 225.398206][ T8809] loop5: detected capacity change from 0 to 1024 [ 225.851454][ T6282] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.921341][ T5917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.051337][ T6282] usb 2-1: Using ep0 maxpacket: 8 [ 226.062037][ T6282] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 226.083157][ T6282] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 226.101379][ T6282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.111601][ T6282] usb 2-1: Product: syz [ 226.115776][ T6282] usb 2-1: Manufacturer: syz [ 226.123096][ T5917] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.141451][ T5917] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.151799][ T6282] usb 2-1: SerialNumber: syz [ 226.170555][ T6282] usb 2-1: config 0 descriptor?? [ 226.175895][ T5917] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.191180][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.202672][ T6282] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 226.210692][ T6282] usb 2-1: setting power ON [ 226.218155][ T6282] dvb-usb: bulk message failed: -22 (2/0) [ 226.226852][ T8814] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 226.268234][ T6282] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.312718][ T6282] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 226.323472][ T6282] usb 2-1: media controller created [ 226.365826][ T6282] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.392273][ T6282] usb 2-1: selecting invalid altsetting 6 [ 226.398041][ T6282] usb 2-1: digital interface selection failed (-22) [ 226.405348][ T6282] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 226.415076][ T6282] usb 2-1: setting power OFF [ 226.425529][ T8812] dvb-usb: bulk message failed: -22 (3/0) [ 226.453246][ T6282] dvb-usb: bulk message failed: -22 (2/0) [ 226.463164][ T6282] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 226.472891][ T8812] dvb-usb: bulk message failed: -22 (3/0) [ 226.489040][ T6282] (NULL device *): no alternate interface [ 226.514839][ T6282] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 226.548317][ T4586] usb 5-1: USB disconnect, device number 10 [ 226.565208][ T6282] usb 2-1: USB disconnect, device number 16 [ 226.686747][ T8829] loop5: detected capacity change from 0 to 64 [ 227.165895][ T8847] loop4: detected capacity change from 0 to 512 [ 227.178173][ T8847] EXT4-fs: Ignoring removed oldalloc option [ 227.185835][ T8847] EXT4-fs: Ignoring removed bh option [ 227.192178][ T6282] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.203717][ T8847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 227.217307][ T8847] System zones: 1-12 [ 227.222528][ T8847] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1651: corrupted in-inode xattr [ 227.239022][ T8847] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1651: couldn't read orphan inode 15 (err -117) [ 227.252367][ T8847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.403219][ T6282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.422112][ T6282] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 227.436950][ T6282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.454423][ T6282] usb 4-1: config 0 descriptor?? [ 227.665653][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 227.875999][ T6282] macally 0003:060B:0001.0015: unknown main item tag 0x0 [ 227.883170][ T6282] macally 0003:060B:0001.0015: item fetching failed at offset 3/5 [ 227.891519][ T6282] macally: probe of 0003:060B:0001.0015 failed with error -22 [ 228.082436][ T8859] loop4: detected capacity change from 0 to 64 [ 228.093629][ T8856] loop5: detected capacity change from 0 to 2048 [ 228.114265][ T6282] usb 4-1: USB disconnect, device number 11 [ 228.132618][ T8856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.590689][ T8873] loop1: detected capacity change from 0 to 512 [ 228.612803][ T8873] EXT4-fs: Ignoring removed i_version option [ 228.654220][ T8873] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 228.700572][ T8873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 228.729651][ T8873] System zones: 1-12 [ 228.751111][ T8873] EXT4-fs (loop1): orphan cleanup on readonly fs [ 228.776833][ T8873] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1663: invalid indirect mapped block 12 (level 1) [ 228.808537][ T8873] EXT4-fs (loop1): Remounting filesystem read-only [ 228.825475][ T8873] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1663: invalid indirect mapped block 2 (level 2) [ 228.902406][ T8873] EXT4-fs (loop1): Remounting filesystem read-only [ 228.909108][ T8873] EXT4-fs (loop1): 1 truncate cleaned up [ 228.920961][ T8873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.123321][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 229.126935][ T8852] loop0: detected capacity change from 0 to 32768 [ 229.187398][ T8852] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 229.214345][ T8852] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 229.227262][ T8869] loop4: detected capacity change from 0 to 32768 [ 229.247462][ T8852] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 229.308604][ T8869] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 229.433468][ T8852] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 229.479273][ T8895] netlink: 'syz.1.1672': attribute type 3 has an invalid length. [ 229.596846][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 229.749839][ T8902] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1684'. [ 229.762125][ T8902] netlink: zone id is out of range [ 229.786797][ T8902] netlink: zone id is out of range [ 229.875165][ T8902] netlink: del zone limit has 4 unknown bytes [ 229.938084][ T8905] loop4: detected capacity change from 0 to 256 [ 229.984506][ T8905] MINIX-fs: mounting file system with errors, running fsck is recommended [ 230.063475][ T8905] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 230.333313][ T8918] loop3: detected capacity change from 0 to 256 [ 230.390653][ T8918] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 230.506712][ T8924] loop5: detected capacity change from 0 to 256 [ 230.547274][ T8924] exfat: Deprecated parameter 'utf8' [ 230.596107][ T8924] exfat: Deprecated parameter 'utf8' [ 230.644469][ T8924] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 230.946385][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 230.966571][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 231.153743][ T8950] loop4: detected capacity change from 0 to 24 [ 232.160722][ T8963] loop3: detected capacity change from 0 to 32768 [ 232.259542][ T8963] XFS (loop3): Mounting V5 Filesystem [ 232.361631][ T6654] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 232.405812][ T8963] XFS (loop3): Ending clean mount [ 232.478564][ T8963] XFS (loop3): Quotacheck needed: Please wait. [ 232.535178][ T8963] XFS (loop3): Quotacheck: Done. [ 232.572749][ T6654] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 232.601804][ T6654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.617137][ T6654] usb 2-1: Product: syz [ 232.642648][ T6654] usb 2-1: Manufacturer: syz [ 232.657550][ T6654] usb 2-1: SerialNumber: syz [ 232.668797][ T4269] XFS (loop3): Unmounting Filesystem [ 232.684005][ T6654] usb 2-1: config 0 descriptor?? [ 232.700176][ T6654] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 232.948441][ T8998] loop5: detected capacity change from 0 to 32768 [ 233.279705][ T9006] loop5: detected capacity change from 0 to 8192 [ 233.302378][ T6654] gspca_sunplus: reg_r err -71 [ 233.307258][ T6654] sunplus: probe of 2-1:0.0 failed with error -71 [ 233.311923][ T9006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.332792][ T9006] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 233.376313][ T6654] usb 2-1: USB disconnect, device number 17 [ 233.402101][ T9006] REISERFS (device loop5): using ordered data mode [ 233.411488][ T9006] reiserfs: using flush barriers [ 233.437485][ T9006] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.485166][ T9006] REISERFS (device loop5): checking transaction log (loop5) [ 233.551129][ T9015] loop4: detected capacity change from 0 to 8192 [ 233.558035][ T9006] REISERFS (device loop5): Using r5 hash to sort names [ 233.568406][ T9015] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.615918][ T9006] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 233.638790][ T9015] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 233.676992][ T9015] REISERFS (device loop4): using ordered data mode [ 233.683915][ T9006] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 233.711215][ T9015] reiserfs: using flush barriers [ 233.757147][ T9015] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.793413][ T9006] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.822627][ T9015] REISERFS (device loop4): checking transaction log (loop4) [ 233.828372][ T9006] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.842181][ T9015] REISERFS (device loop4): Using r5 hash to sort names [ 233.863294][ T9015] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 233.874900][ T9006] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.930830][ T9015] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 234.002685][ T9015] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 234.057330][ T9015] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 234.140129][ T9022] binder: 9021:9022 unknown command 1953002597 [ 234.157369][ T9022] binder: 9021:9022 ioctl c0306201 200000000080 returned -22 [ 234.205541][ T4586] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 234.366061][ T9024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1732'. [ 234.403165][ T4586] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 234.429729][ T4586] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.451395][ T4586] usb 2-1: config 0 has no interface number 0 [ 234.458757][ T4586] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 234.484490][ T4586] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.485570][ T9032] netlink: 'syz.3.1734': attribute type 3 has an invalid length. [ 234.530584][ T4586] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 234.550072][ T4586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.574130][ T4586] usb 2-1: Product: syz [ 234.578338][ T4586] usb 2-1: Manufacturer: syz [ 234.602822][ T4586] usb 2-1: SerialNumber: syz [ 234.616145][ T4586] usb 2-1: config 0 descriptor?? [ 235.214070][ T9048] loop3: detected capacity change from 0 to 8192 [ 235.250433][ T4586] usb 2-1: USB disconnect, device number 18 [ 235.279500][ T9048] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.352810][ T9048] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 235.405874][ T9048] REISERFS (device loop3): using ordered data mode [ 235.438407][ T9048] reiserfs: using flush barriers [ 235.493462][ T9048] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.574341][ T9048] REISERFS (device loop3): checking transaction log (loop3) [ 235.620060][ T9048] REISERFS (device loop3): Using r5 hash to sort names [ 235.638933][ T9048] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 235.701083][ T9048] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 235.764563][ T9048] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 235.811625][ T9066] loop0: detected capacity change from 0 to 512 [ 235.812536][ T9065] loop4: detected capacity change from 0 to 64 [ 235.827217][ T9048] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 235.870657][ T9048] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 235.874873][ T9066] EXT4-fs: Ignoring removed oldalloc option [ 235.951762][ T9066] EXT4-fs: Ignoring removed bh option [ 235.996761][ T9066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 236.050847][ T9066] System zones: 1-12 [ 236.098505][ T9071] loop1: detected capacity change from 0 to 1024 [ 236.133614][ T9066] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1749: corrupted in-inode xattr [ 236.153234][ T9074] netlink: 'syz.5.1753': attribute type 298 has an invalid length. [ 236.173409][ T9066] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1749: couldn't read orphan inode 15 (err -117) [ 236.203001][ T9066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.219765][ T9076] loop4: detected capacity change from 0 to 1024 [ 236.473297][ T6302] hfsplus: b-tree write err: -5, ino 4 [ 236.717978][ T9087] loop5: detected capacity change from 0 to 256 [ 236.790658][ T9087] FAT-fs (loop5): Directory bread(block 64) failed [ 236.821388][ T9087] FAT-fs (loop5): Directory bread(block 65) failed [ 236.828061][ T9087] FAT-fs (loop5): Directory bread(block 66) failed [ 236.871398][ T9087] FAT-fs (loop5): Directory bread(block 67) failed [ 236.878075][ T9087] FAT-fs (loop5): Directory bread(block 68) failed [ 236.917983][ T9087] FAT-fs (loop5): Directory bread(block 69) failed [ 236.939736][ T9087] FAT-fs (loop5): Directory bread(block 70) failed [ 236.951677][ T9087] FAT-fs (loop5): Directory bread(block 71) failed [ 236.958323][ T9087] FAT-fs (loop5): Directory bread(block 72) failed [ 236.984370][ T9087] FAT-fs (loop5): Directory bread(block 73) failed [ 236.986299][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 237.060782][ T9096] loop1: detected capacity change from 0 to 1024 [ 237.241527][ T46] hfsplus: b-tree write err: -5, ino 4 [ 237.465384][ T9111] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1770'. [ 237.480135][ T9111] tipc: Started in network mode [ 237.485702][ T9111] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 237.500573][ T9111] tipc: Enabling of bearer rejected, failed to enable media [ 237.686703][ T9120] loop1: detected capacity change from 0 to 512 [ 237.722375][ T9120] EXT4-fs: Ignoring removed oldalloc option [ 237.743940][ T9120] EXT4-fs: Ignoring removed bh option [ 237.762668][ T9120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 237.771482][ T9120] System zones: 1-12 [ 237.828311][ T9128] loop0: detected capacity change from 0 to 128 [ 237.831478][ T9120] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1775: corrupted in-inode xattr [ 237.835508][ T9128] EXT4-fs: Ignoring removed oldalloc option [ 237.853154][ T9128] EXT4-fs: inline encryption not supported [ 237.876587][ T9128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.895108][ T9128] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.953519][ T9120] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1775: couldn't read orphan inode 15 (err -117) [ 237.979331][ T9120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.126773][ T9128] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 238.156727][ T9128] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 238.213156][ T9131] loop5: detected capacity change from 0 to 8192 [ 238.234280][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 238.418270][ T9141] loop0: detected capacity change from 0 to 256 [ 238.471374][ T6654] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.523681][ T9141] FAT-fs (loop0): Directory bread(block 64) failed [ 238.550841][ T9141] FAT-fs (loop0): Directory bread(block 65) failed [ 238.578458][ T9141] FAT-fs (loop0): Directory bread(block 66) failed [ 238.617584][ T9141] FAT-fs (loop0): Directory bread(block 67) failed [ 238.656834][ T9141] FAT-fs (loop0): Directory bread(block 68) failed [ 238.665978][ T6654] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 238.684523][ T6654] usb 4-1: config 0 has no interface number 0 [ 238.690671][ T6654] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 238.730660][ T9141] FAT-fs (loop0): Directory bread(block 69) failed [ 238.753136][ T9141] FAT-fs (loop0): Directory bread(block 70) failed [ 238.769135][ T6654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.788038][ T9141] FAT-fs (loop0): Directory bread(block 71) failed [ 238.801750][ T6654] usb 4-1: config 0 descriptor?? [ 238.811258][ T9141] FAT-fs (loop0): Directory bread(block 72) failed [ 238.832228][ T9141] FAT-fs (loop0): Directory bread(block 73) failed [ 238.879711][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 239.091425][ T6654] usb 4-1: USB disconnect, device number 12 [ 239.390053][ T9162] loop0: detected capacity change from 0 to 512 [ 239.414828][ T9162] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.433944][ T9162] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1794: corrupted in-inode xattr [ 239.450352][ T9162] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1794: couldn't read orphan inode 15 (err -117) [ 239.467442][ T4579] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 239.477071][ T9162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.537611][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 239.631569][ T6654] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 239.640448][ T9167] device hsr0 entered promiscuous mode [ 239.651603][ T4579] usb 2-1: Using ep0 maxpacket: 8 [ 239.671218][ T4579] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 239.688716][ T4579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.703696][ T4579] usb 2-1: Product: syz [ 239.713250][ T4579] usb 2-1: Manufacturer: syz [ 239.721376][ T4579] usb 2-1: SerialNumber: syz [ 239.728954][ T9169] loop3: detected capacity change from 0 to 512 [ 239.737791][ T4579] usb 2-1: config 0 descriptor?? [ 239.748982][ T9167] device hsr0 left promiscuous mode [ 239.756693][ T4579] gspca_main: se401-2.14.0 probing 047d:5003 [ 239.782163][ T9169] EXT4-fs: Ignoring removed oldalloc option [ 239.820297][ T9169] EXT4-fs: Ignoring removed bh option [ 239.831995][ T6654] usb 5-1: Using ep0 maxpacket: 8 [ 239.846478][ T9169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 239.855065][ T9169] System zones: 1-12 [ 239.855926][ T6654] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 239.877245][ T9169] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1797: corrupted in-inode xattr [ 239.888888][ T6654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.901257][ T9165] loop5: detected capacity change from 0 to 32768 [ 239.910377][ T6654] usb 5-1: Product: syz [ 239.917473][ T6654] usb 5-1: Manufacturer: syz [ 239.922061][ T9169] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1797: couldn't read orphan inode 15 (err -117) [ 239.939592][ T9169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.981109][ T6654] usb 5-1: SerialNumber: syz [ 239.991917][ T6654] usb 5-1: config 0 descriptor?? [ 239.999976][ T9165] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 240.070643][ T9174] loop0: detected capacity change from 0 to 1024 [ 240.098616][ T5101] ocfs2: Unmounting device (7,5) on (node local) [ 240.158641][ T9174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.170877][ T4579] gspca_se401: Wrong descriptor type [ 240.215719][ T6654] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.384547][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 240.389987][ T4332] usb 2-1: USB disconnect, device number 19 [ 240.626546][ T6654] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 240.656475][ T6654] usb 5-1: USB disconnect, device number 11 [ 240.774754][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 241.086095][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 241.540796][ T9209] loop5: detected capacity change from 0 to 512 [ 241.542155][ T9211] binfmt_misc: register: failed to install interpreter file ./file0 [ 241.562188][ T9209] EXT4-fs: Ignoring removed oldalloc option [ 241.568121][ T9209] EXT4-fs: Ignoring removed bh option [ 241.617100][ T9209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 241.629748][ T9215] loop3: detected capacity change from 0 to 64 [ 241.675993][ T9209] System zones: 1-12 [ 241.687096][ T9209] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.1814: corrupted in-inode xattr [ 241.719867][ T9209] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1814: couldn't read orphan inode 15 (err -117) [ 241.761306][ T9217] loop4: detected capacity change from 0 to 2048 [ 241.778212][ T9209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 241.829177][ T9217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.999372][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 242.031510][ T4579] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 242.221494][ T4579] usb 2-1: Using ep0 maxpacket: 32 [ 242.228269][ T4579] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 242.249032][ T4579] usb 2-1: config 0 has no interface number 0 [ 242.268679][ T4579] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 242.276771][ T9230] netlink: 'syz.4.1823': attribute type 3 has an invalid length. [ 242.285712][ T4579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.310058][ T4579] usb 2-1: Product: syz [ 242.313288][ T9231] loop3: detected capacity change from 0 to 1764 [ 242.341251][ T4579] usb 2-1: Manufacturer: syz [ 242.346187][ T4579] usb 2-1: SerialNumber: syz [ 242.383281][ T4579] usb 2-1: config 0 descriptor?? [ 242.413550][ T4579] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 242.544690][ T5101] EXT4-fs (loop5): unmounting filesystem. [ 242.632000][ T4579] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 242.661708][ T4579] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 242.961069][ T9247] loop4: detected capacity change from 0 to 2048 [ 242.981591][ T4579] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 243.009748][ T9247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.026784][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 243.034602][ T6654] usb 2-1: USB disconnect, device number 20 [ 243.075709][ T6654] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 243.111245][ T6654] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 243.138095][ T6654] quatech2 2-1:0.51: device disconnected [ 243.201616][ T4579] usb 4-1: config 255 has an invalid interface number: 38 but max is 0 [ 243.209926][ T4579] usb 4-1: config 255 has no interface number 0 [ 243.228716][ T4579] usb 4-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 243.248747][ T4579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.263886][ T4579] usb 4-1: Product: syz [ 243.276044][ T4579] usb 4-1: Manufacturer: syz [ 243.287740][ T4579] usb 4-1: SerialNumber: syz [ 243.498623][ T26] audit: type=1326 audit(1753245707.585:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.5.1839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebe78e9a9 code=0x0 [ 243.526244][ T4579] dvb-usb: found a 'DiBcom STK7070P reference design' in warm state. [ 243.536436][ T4579] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.549871][ T4579] dvbdev: DVB: registering new adapter (DiBcom STK7070P reference design) [ 243.563992][ T4579] usb 4-1: media controller created [ 243.588112][ T4579] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.676198][ T4579] DVB: Unable to find symbol dib7000p_attach() [ 243.688544][ T4579] dvb-usb: no frontend was attached by 'DiBcom STK7070P reference design' [ 243.791371][ T4579] rc_core: IR keymap rc-dib0700-rc5 not found [ 243.800890][ T4579] Registered IR keymap rc-empty [ 243.817578][ T4579] dvb-usb: could not initialize remote control. [ 243.835475][ T4579] dvb-usb: DiBcom STK7070P reference design successfully initialized and connected. [ 243.911939][ T9279] loop1: detected capacity change from 0 to 128 [ 243.923497][ T9279] EXT4-fs: Ignoring removed oldalloc option [ 243.931922][ T9279] EXT4-fs: inline encryption not supported [ 243.954955][ T9279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.967763][ T9279] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.028467][ T9279] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 244.038324][ T9279] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 244.087875][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 244.100063][ T6282] usb 4-1: USB disconnect, device number 13 [ 244.156540][ T6282] dvb-usb: DiBcom STK7070P reference design successfully deinitialized and disconnected. [ 244.240217][ T9277] loop4: detected capacity change from 0 to 32768 [ 244.287443][ T9277] XFS (loop4): Mounting V5 Filesystem [ 244.403707][ T9277] XFS (loop4): Ending clean mount [ 244.448297][ T9277] XFS (loop4): Quotacheck needed: Please wait. [ 244.530591][ T9277] XFS (loop4): Quotacheck: Done. [ 244.699304][ T4277] XFS (loop4): Unmounting Filesystem [ 244.828833][ T9304] loop1: detected capacity change from 0 to 8 [ 244.870370][ T9304] SQUASHFS error: lzo decompression failed, data probably corrupt [ 244.880040][ T9304] SQUASHFS error: Failed to read block 0x91: -5 [ 244.893285][ T9304] SQUASHFS error: Unable to read metadata cache entry [8f] [ 244.900613][ T9304] SQUASHFS error: Unable to read inode 0x11f [ 245.306534][ T9297] loop5: detected capacity change from 0 to 32768 [ 245.386250][ T9297] [ 245.386250][ T9297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.386250][ T9297] [ 245.449426][ T9297] [ 245.449426][ T9297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.449426][ T9297] [ 245.564156][ T9301] loop0: detected capacity change from 0 to 32768 [ 245.573261][ T5101] [ 245.573261][ T5101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.573261][ T5101] [ 245.601456][ T4579] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 245.641234][ T5101] [ 245.641234][ T5101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.641234][ T5101] [ 245.733203][ T9323] loop4: detected capacity change from 0 to 512 [ 245.758115][ T9323] EXT4-fs: Ignoring removed i_version option [ 245.803091][ T4579] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.809491][ T9323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.847549][ T4579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.873064][ T4579] usb 4-1: config 0 descriptor?? [ 245.882213][ T9323] EXT4-fs (loop4): 1 truncate cleaned up [ 245.893841][ T9323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.896654][ T4579] cp210x 4-1:0.0: cp210x converter detected [ 246.218008][ T4277] EXT4-fs warning (device loop4): ext4_xattr_inode_create:1437: refuse to create EA inode when umounting [ 246.231574][ T4277] ------------[ cut here ]------------ [ 246.237179][ T4277] WARNING: CPU: 0 PID: 4277 at fs/ext4/xattr.c:1438 ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.247698][ T4277] Modules linked in: [ 246.251644][ T4277] CPU: 0 PID: 4277 Comm: syz-executor Not tainted 6.1.146-syzkaller #0 [ 246.259912][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.270048][ T4277] RIP: 0010:ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.277033][ T4277] Code: 4c 8b 7c 24 20 e9 5d 04 00 00 e8 e4 c8 4d ff 48 89 df 48 c7 c6 96 3b 3e 8c ba 9d 05 00 00 48 c7 c1 40 9d a0 8a e8 09 49 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 18 43 80 3c 2c 00 74 08 48 [ 246.296718][ T4277] RSP: 0018:ffffc900042173e0 EFLAGS: 00010246 [ 246.302858][ T4277] RAX: f96deb2157684800 RBX: ffff88801fbc4000 RCX: f96deb2157684800 [ 246.310850][ T4277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 246.318899][ T4277] RBP: ffffc900042175b0 R08: dffffc0000000000 R09: fffff52000842df5 [ 246.326931][ T4277] R10: fffff52000842df5 R11: 1ffff92000842df4 R12: 1ffff1100ae7d19c [ 246.334984][ T4277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880573e8cb8 [ 246.343026][ T4277] FS: 00005555679af500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 246.352033][ T4277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.358634][ T4277] CR2: 0000001b3101eff8 CR3: 000000005c869000 CR4: 00000000003506f0 [ 246.366690][ T4277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.374736][ T4277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.382787][ T4277] Call Trace: [ 246.386076][ T4277] [ 246.389032][ T4277] ? ext4_xattr_ibody_set+0x690/0x690 [ 246.394485][ T4277] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 246.400487][ T4277] ? lock_chain_count+0x20/0x20 [ 246.405423][ T4277] ext4_xattr_block_set+0x23a/0x32a0 [ 246.410728][ T4277] ? __might_sleep+0xd0/0xd0 [ 246.415401][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 246.420619][ T4277] ? __getblk_gfp+0x4f/0xb20 [ 246.425370][ T4277] ? xattr_find_entry+0x12b/0x2f0 [ 246.430421][ T4277] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 246.435960][ T4277] ? ext4_xattr_block_find+0x241/0x2b0 [ 246.441477][ T4277] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 246.447412][ T4277] __ext4_expand_extra_isize+0x301/0x3e0 [ 246.451126][ T9340] loop5: detected capacity change from 0 to 64 [ 246.453107][ T4277] __ext4_mark_inode_dirty+0x47f/0x770 [ 246.464856][ T4277] ext4_dirty_inode+0xbf/0x100 [ 246.469641][ T4277] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 246.475516][ T4277] __mark_inode_dirty+0x322/0xf40 [ 246.480562][ T4277] iput+0x1e1/0x980 [ 246.484446][ T4277] __dentry_kill+0x431/0x650 [ 246.489056][ T4277] shrink_dentry_list+0x39b/0x6a0 [ 246.494152][ T4277] shrink_dcache_parent+0xa8/0x3c0 [ 246.499288][ T4277] ? write_sequnlock+0x30/0x30 [ 246.504125][ T4277] ? preempt_count_add+0x8d/0x190 [ 246.509170][ T4277] ? __lock_acquire+0x7c50/0x7c50 [ 246.514268][ T4277] ? __init_rwsem+0x160/0x160 [ 246.518959][ T4277] ? preempt_count_add+0x8d/0x190 [ 246.524053][ T4277] ? delete_node+0x3c9/0xa50 [ 246.528658][ T4277] do_one_tree+0x23/0xe0 [ 246.532981][ T4277] shrink_dcache_for_umount+0x65/0x110 [ 246.538466][ T4277] generic_shutdown_super+0x63/0x340 [ 246.543829][ T4277] kill_block_super+0x7c/0xe0 [ 246.548784][ T4277] deactivate_locked_super+0x93/0xf0 [ 246.554144][ T4277] cleanup_mnt+0x463/0x4f0 [ 246.558586][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 246.563856][ T4277] task_work_run+0x1ca/0x250 [ 246.567377][ T26] audit: type=1800 audit(1753245710.655:153): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1869" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 246.568533][ T4277] ? task_work_cancel+0x230/0x230 [ 246.593962][ T4277] ? exit_to_user_mode_loop+0x3b/0x110 [ 246.599967][ T4277] exit_to_user_mode_loop+0xe6/0x110 [ 246.605329][ T4277] exit_to_user_mode_prepare+0xb1/0x140 [ 246.610894][ T4277] syscall_exit_to_user_mode+0x16/0x40 [ 246.616428][ T4277] do_syscall_64+0x58/0xa0 [ 246.620855][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 246.625602][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 246.630294][ T4277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.636266][ T4277] RIP: 0033:0x7fbf96f8fcd7 [ 246.640705][ T4277] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 246.660382][ T4277] RSP: 002b:00007fff27ee4f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 246.668857][ T4277] RAX: 0000000000000000 RBX: 00007fbf97010b55 RCX: 00007fbf96f8fcd7 [ 246.676894][ T4277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff27ee5020 [ 246.684919][ T4277] RBP: 00007fff27ee5020 R08: 0000000000000000 R09: 0000000000000000 [ 246.692956][ T4277] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff27ee60b0 [ 246.700933][ T4277] R13: 00007fbf97010b55 R14: 000000000003c11e R15: 00007fff27ee60f0 [ 246.708971][ T4277] [ 246.712050][ T4277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.719331][ T4277] CPU: 0 PID: 4277 Comm: syz-executor Not tainted 6.1.146-syzkaller #0 [ 246.727580][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.737641][ T4277] Call Trace: [ 246.740923][ T4277] [ 246.743862][ T4277] dump_stack_lvl+0x168/0x22e [ 246.748555][ T4277] ? memcpy+0x3c/0x60 [ 246.752552][ T4277] ? show_regs_print_info+0x12/0x12 [ 246.757760][ T4277] ? load_image+0x3b0/0x3b0 [ 246.762288][ T4277] panic+0x2c9/0x710 [ 246.766202][ T4277] ? bpf_jit_dump+0xd0/0xd0 [ 246.770729][ T4277] __warn+0x2f8/0x4f0 [ 246.774711][ T4277] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.781030][ T4277] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.787342][ T4277] report_bug+0x2ba/0x4f0 [ 246.791660][ T4277] ? ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.797976][ T4277] handle_bug+0x3a/0x70 [ 246.802550][ T4277] exc_invalid_op+0x16/0x40 [ 246.807036][ T4277] asm_exc_invalid_op+0x16/0x20 [ 246.811878][ T4277] RIP: 0010:ext4_xattr_inode_lookup_create+0xbb7/0x1d10 [ 246.818800][ T4277] Code: 4c 8b 7c 24 20 e9 5d 04 00 00 e8 e4 c8 4d ff 48 89 df 48 c7 c6 96 3b 3e 8c ba 9d 05 00 00 48 c7 c1 40 9d a0 8a e8 09 49 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 18 43 80 3c 2c 00 74 08 48 [ 246.838392][ T4277] RSP: 0018:ffffc900042173e0 EFLAGS: 00010246 [ 246.844444][ T4277] RAX: f96deb2157684800 RBX: ffff88801fbc4000 RCX: f96deb2157684800 [ 246.852398][ T4277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 246.860356][ T4277] RBP: ffffc900042175b0 R08: dffffc0000000000 R09: fffff52000842df5 [ 246.868312][ T4277] R10: fffff52000842df5 R11: 1ffff92000842df4 R12: 1ffff1100ae7d19c [ 246.876267][ T4277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880573e8cb8 [ 246.884245][ T4277] ? ext4_xattr_ibody_set+0x690/0x690 [ 246.889609][ T4277] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 246.895588][ T4277] ? lock_chain_count+0x20/0x20 [ 246.900439][ T4277] ext4_xattr_block_set+0x23a/0x32a0 [ 246.905711][ T4277] ? __might_sleep+0xd0/0xd0 [ 246.910295][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 246.915488][ T4277] ? __getblk_gfp+0x4f/0xb20 [ 246.920069][ T4277] ? xattr_find_entry+0x12b/0x2f0 [ 246.925082][ T4277] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 246.930528][ T4277] ? ext4_xattr_block_find+0x241/0x2b0 [ 246.935977][ T4277] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 246.941965][ T4277] __ext4_expand_extra_isize+0x301/0x3e0 [ 246.947592][ T4277] __ext4_mark_inode_dirty+0x47f/0x770 [ 246.953045][ T4277] ext4_dirty_inode+0xbf/0x100 [ 246.957801][ T4277] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 246.963603][ T4277] __mark_inode_dirty+0x322/0xf40 [ 246.968618][ T4277] iput+0x1e1/0x980 [ 246.972421][ T4277] __dentry_kill+0x431/0x650 [ 246.977003][ T4277] shrink_dentry_list+0x39b/0x6a0 [ 246.982019][ T4277] shrink_dcache_parent+0xa8/0x3c0 [ 246.987118][ T4277] ? write_sequnlock+0x30/0x30 [ 246.991954][ T4277] ? preempt_count_add+0x8d/0x190 [ 246.996969][ T4277] ? __lock_acquire+0x7c50/0x7c50 [ 247.001984][ T4277] ? __init_rwsem+0x160/0x160 [ 247.006647][ T4277] ? preempt_count_add+0x8d/0x190 [ 247.011653][ T4277] ? delete_node+0x3c9/0xa50 [ 247.016226][ T4277] do_one_tree+0x23/0xe0 [ 247.020477][ T4277] shrink_dcache_for_umount+0x65/0x110 [ 247.025948][ T4277] generic_shutdown_super+0x63/0x340 [ 247.031232][ T4277] kill_block_super+0x7c/0xe0 [ 247.035903][ T4277] deactivate_locked_super+0x93/0xf0 [ 247.041174][ T4277] cleanup_mnt+0x463/0x4f0 [ 247.045580][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 247.050768][ T4277] task_work_run+0x1ca/0x250 [ 247.055353][ T4277] ? task_work_cancel+0x230/0x230 [ 247.060373][ T4277] ? exit_to_user_mode_loop+0x3b/0x110 [ 247.065820][ T4277] exit_to_user_mode_loop+0xe6/0x110 [ 247.071093][ T4277] exit_to_user_mode_prepare+0xb1/0x140 [ 247.076669][ T4277] syscall_exit_to_user_mode+0x16/0x40 [ 247.082137][ T4277] do_syscall_64+0x58/0xa0 [ 247.086550][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 247.091226][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 247.095901][ T4277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.101795][ T4277] RIP: 0033:0x7fbf96f8fcd7 [ 247.106200][ T4277] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 247.125792][ T4277] RSP: 002b:00007fff27ee4f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 247.134194][ T4277] RAX: 0000000000000000 RBX: 00007fbf97010b55 RCX: 00007fbf96f8fcd7 [ 247.142151][ T4277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff27ee5020 [ 247.150108][ T4277] RBP: 00007fff27ee5020 R08: 0000000000000000 R09: 0000000000000000 [ 247.158062][ T4277] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff27ee60b0 [ 247.166015][ T4277] R13: 00007fbf97010b55 R14: 000000000003c11e R15: 00007fff27ee60f0 [ 247.173996][ T4277] [ 247.177466][ T4277] Kernel Offset: disabled [ 247.181937][ T4277] Rebooting in 86400 seconds..