last executing test programs: 2.842095596s ago: executing program 0 (id=1400): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000080)) 2.784447262s ago: executing program 2 (id=1402): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4003, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 2.659597757s ago: executing program 5 (id=1405): unshare(0x4000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100), 0x0}, 0x20) 2.639361287s ago: executing program 0 (id=1406): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0), 0x1, 0x9784, &(0x7f000001c680)="$eJzs3QeYJHWhcP1ZYElLBhVRFBUVI1GCiBIERIJEBQUEyZKDEpQkIkFREFAEJOecc84555xzzpnvWXZXcT1wve973w+v55zn2Z3p6uqa6v+vq2pmqqd7yXkWm3NgYMyBYU0xMHI33zHnQhvvOOfle++058lTjD3B5MMnD7/BpMMvTjpo+MdRBgYGRhm+nOHThjxywomjDIz2zvS/N2SssQeNOzAw3fCLsw//ONOwDxM/OmK+t0dq5BUd9LeLg7Yf9u+dxh/6JYZ+svRNF5w9MDAwwbtuP/Qm0/zTHZW25BzzzvN3q7+5DbUaPPzzd/8bfdi/ie8fGJj4ngF+fLx73kEfwF0a+jUn2PGBMdf9AL72/7qWnGPe+UbyH7otjjp82kxDt/GRt0FjIz/Ob1pl1t2HD+E7j7eBgaG7uH/YVv5XtOQc8yww8N77+YGHxh7v9Lff2W8OeWZgYMizAwNDnhsYGPL8wMCQFwYGhrz4QbvU/11zzDn9nEO39xGXh7OPeCxPQI+LvVd/Ya+BgYExhs0z5K1hx4txphhxTKiqqqp/7+aYc/q54Pg/5vsd/7faeo5bOv5XVVX9722+OeacfuhxfKTj/zjvd/z/7g03rDHsd/+zzzTsVm99sHeiqqqq/lvNMx8e/yd4v+P/+Dtct1/H/6qqqv+9LbrgO8f/cUY6/k/yfsf/Nea/49Lh8434vuHNdy3yneePDZ/++rumj/qu6a+9a/rgdy3n3fOP/q7pr7xr+pgDA0MeGT79jb9PHvLM0Nv883KGvPT35+NMOtq7pr/8rumjv2v6K8PXaej0Md41/c13zT/m36ePM/S/KYZ/3VffZ6irqqr+bVp0+nnmGnjX8+yHTx7xxH58XujRR2995we1vlVVVVVVVVX13++tJ0876+9/8/2JgXf97erf/oZ1+O8FBh1zzjXXfGAr+u/RoH/+fcgWH/Q6/d821HnMw6YYGFhriQ96VeoD6H/N36rX/5Pyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9x73H+/29//z9wzxd3GD7rLJPdce9if7/lpAOrDf/s5jvmXGi1D2DdP4D+U8//D6w2aGBguO8EQy0XmmPRxacaGBhY7N47Jptx4G/XzTz0ulknGvWdP+YcGJjqnf8HT/oeSx7+LgvvvLnDJH9bxjHvLH++t/cdddBIK/GuZjv7vgNXXfLlGUb++Pn3vh9/e3+JpV7ad8oRf8syykgzjfkeNx6x/BH3ZWTn4es+1dB1n3qDNdeZev2NN/nKamsuv8pKq6y01nTTTTvD9DPOMN3XZpl65dXWWGmaYf+/x5gNe+uKUf+VMRtn5DF7co53j9nI923Ckw7EMfvnd/X4h0W8s8RzZ3voshFjNtq/OGYjvt6o7z9mU6w2/AtNOjB4YLl3hmbQwMCkow0e2GjohWnHGBiYdPDweScdOu83JhplYGDHv9/RQcNfbHTYPIO2GDrPv9n7lswyfEQ2HTHfyK+zPvKK/lfvW3L8OLvcMdL7lvy/6v/o+P9PXjMP+ttAjXgDhOHzDPP6gN9n4p/Wd4rR3jnIvdf6vs/r4rwTPb7WXPXRJf6nXheH1nec91nf93kdv/dc36mmfXqPYYv6H1vfkfZ1Cwy78l/Z1w28/75uVLr9SldOPvK+bv73XsV/2I5HjNEYI830Xvu6Hec/d/Ohyx94/33dAqsNf/GAv+/rRhkYmHTUEfu6oTu+0QcP7Dj0wnRDL4wxeOCQoRemf+fCWAPnDL3w1RXWXmPFQe+8zMDw5U4zdLmzTzRo2AZ044GrjrHL22+PNnxdXhryj+s6/PExxbuP53NMNHwwh992xHKHzjpiua9sM+y60Ycv9+X/xnJH3JbWd9Izh103xvDlvjLScge/z3JH3PaftoepBv3DE1Vhf/OBvq8Rbb9jvs/6vs/rcOPj7R33KZd96H/gdbgHvdf6jvb+6/te7xvynuv72GWP7/M/9brh9Di7Z+9hj5Uxhz/O3vxvPH5H3Hbk/diwFwIZttsf81/Zj03xT/uxLUcdZaTBflfv9X3uijD/8C3ib0tb8YCXVxsx9oNHWu5/9X3uu+7LINiPTTDSz3ODNt9nYBCN+SNrPL/hWzu//5gPHvjHny1GjPmI277fmI/xr4z5x99/zEf+Pvm9xnyqzwy7fvBI6//uMV9kt9lvHDHmo4+03P9qzMd4/2PHP4/5wMBgGvMdJxs2bu+3P32vMR9x2xFjPvTrzDrRaANzDwwMTDl8zEf/V8Z80v+Zx/nYMP+wz1f626RnZlz4yyPGfOQx/q/GfPT/5phvds/fHudTvnPdp0cZGH30gY2W32CD9aYd9v+Ii9MN+5/3Rc+sOGyc3+9Y+l5GI277ftvFaP+K0QT/ktGg/8postHey+jvm9aoBy767P/pvmi0/67RObwvOmXeYeP2ft8XvdeYj7gtHQcnedftR/459H1ePwvv0zvjM/+2I37e+3d4/awRP+/+r3z9rBG/k1xt5J18/av1+393+bvL313+7vIX9x7n/6cYcf7/7XH2//DwHzoHXznzLbN/0Ov7Afcfff5/uO8/nP+f/ZaZrxz6o9Xw6973/Oywef4tz8/ONOzDxI+OmG/k84Mjr+h/dX527103uPL/p/Oz/0eN2Fb/hZ+L2/+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3H+f9pRjwP4MHFF/re8BOhgzed9shNP+j1/YD7jz7/P9z3H87/b3rktJuOMvC36973/P+weRzn/+9bcPNl/p3P/4/YVjv/X/9F+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/z/7iOcBHD7b3J8d8XyA67fbd48Pen0/4P5Tz//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ0//z8w0tskLtzjAoPz//+7ew//RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/LH/M4v/z/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/yJ/zOL/y/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/1X+mMV/q/wxi/+v88cs/lvnj1n8f5M/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5o9Z/H+XP2bx3yF/zOL/+/wxi/8f8scs/jvmj1n8d8ofs/j/MX/M4r9z/pjFf5f8MYv/rvljFv8/5Y9Z/P+cP2bx3y1/zOL/l/wxi//u+WMW/z3yxyz+e+aPWfz/mj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/SP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fzh+z+H8kf8ziP2n+mMX/o/ljFv/J8scs/h/LH7P4fzx/zOI/ef6Yxf8T+WMW/0/mj1n8p8gfs/h/Kn/M4v/p/DGL/2fyxyz+U+aPWfw/mz9m8f9c/pjF//P5Yxb/qfLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8zi//P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/In/M4v/L/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxP+dT/P/5yz+g/LHLP6j5I9Z/EfNH7P4j5Y/ZvEfnD9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+Q/LHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/hPlj9m8f9Y/pjF/+P5Yxb/yfPHLP6fyB+z+H8yf8ziP0X+mMX/U/ljFv9P549Z/D+TP2bxnzJ/zOL/2fwxi//n8scs/p/PH7P4T5U/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/rPlj1n8v5k/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3fyxyz+8+WPWfy/mz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8f5A/ZvFfMn/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9n+WMW/5/nj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/F/+i/xj/r9br3zSL/y/b/jGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH/Ugfwxi/+g/DGL/yj5Yxb/UfPHLP6j5Y9Z/Afnj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/+Q/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5Y9Z/D+cP2bx/0j+mMV/0vwxi/9H88cs/pPlj1n8P5Y/ZvH/eP6YxX/y/DGL/yfyxyz+n8wfs/hPkT9m8f9U/pjF/9P5Yxb/z+SPWfynzB+z+H82f8zi/7n8MYv/5/PHLP5T5Y9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/nj9m8Z81f8zi/438MYv/bPljFv9v5o9Z/L+VP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/b+ePWfznzh+z+M+TP2bxnzd/zOL/nfwxi/98+WMW/+/mj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8f5I9Z/JfMH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+P84f8ziv1z+mMV/+fwxi/9P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/5/mj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/1n+mMX/5/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f9F/pjF/5f5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v+r/DGL/1b5Yxb/X+ePWfy3zh+z+P8mf8ziv03+mMV/2/wxi/92+WMW/+3zxyz+v80fs/j/Ln/M4r9D/pjF//f5Yxb/P+SPWfx3zB+z+O+UP2bx/2P+mMV/5/wxi/8u+WMW/13zxyz+f8ofs/j/OX/M4r9b/pjF/y/5Yxb/3fPHLP575I9Z/PfMH7P4/zV/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGJ/2gD+WMW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/yH5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8J8sfs/h/LH/M4v/x/DGL/+T5Yxb/T+SPWfw/mT9m8Z8if8zi/6n8MYv/p/PHLP6fyR+z+E+ZP2bx/2z+mMX/c/ljFv/P549Z/KfKH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/tfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/t/MH7P4fyt/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fzh+z+M+dP2bxnyd/zOI/b/6Yxf87+WMW//nyxyz+380fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/j/IH7P4L5k/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P80fs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/s/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/4v8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx/03+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mz9m8f9d/pjFf4f8MYv/7/PHLP5/yB+z+O+YP2bx3yl/zOL/x/wxi//O+WMW/13yxyz+u+aPWfz/lD9m8f9z/pjFf7f8MYv/X/LHLP67549Z/PfIH7P475k/ZvH/a/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5YxL/wQP5Yxb/QfljFv9R8scs/qPmj1n8R8sfs/gPzh+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/IfljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+H8ofs/h/OH/M4v+R/DGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RB/LHLP6D8scs/qPkj1n8R80fs/iPlj9m8R+cP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP5D8scs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+E+WP2bx/1j+mMX/4/ljFv/J88cs/p/IH7P4fzJ/zOI/Rf6Yxf9T+WMW/0/nj1n8P5M/ZvGfMn/M4v/Z/DGL/+fyxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf8X+WMW/1/mj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v8scs/lvlj1n8f50/ZvHfOn/M4v+b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zZ/zOL/u/wxi/8O+WMW/9/nj1n8/5A/ZvHfMX/M4r9T/pjF/4/5Yxb/nfPHLP675I9Z/HfNH7P4/yl/zOL/5/wxi/9u+WMW/7/kj1n8d88fs/jvkT9m8d8zf8zi/9f8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/mMM5I9Z/Aflj1n8R8kfs/iPmj9m8R8tf8ziPzh/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/Ifkj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+H8of8zi/+H8MYv/R/LHLP6T5o9Z/D+aP2bxnyx/zOL/sfwxi//H88cs/pPnj1n8P5E/ZvH/ZP6YxX+K/DGL/6fyxyz+n84fs/h/Jn/M4j9l/pjF/7P5Yxb/z+WPWfw/nz9m8Z8qf8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+H8zf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/v5I9Z/OfLH7P4fzd/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fyx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzx+z+P8gf8ziv2T+mMV/qfwxi/8P88cs/j/KH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/LHLP4/zx+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/yxyz+v8wfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/lj1n8t8ofs/j/On/M4r91/pjF/zf5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/bf6Yxf93+WMW/x3yxyz+v88fs/j/IX/M4r9j/pjFf6f8MYv/H/PHLP47549Z/HfJH7P475o/ZvH/U/6Yxf/P+WMW/93yxyz+f8kfs/jvnj9m8d8jf8ziv2f+mMX/r/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xxzIH7P4D8ofs/iPkj9m8R81f8ziP1r+mMV/cP6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4D8kfs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOI/Wf6Yxf9j+WMW/4/nj1n8J88fs/h/In/M4v/J/DGL/xT5Y/+h/mMMjOT/qfyx/1D/d3q3/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9LRvh/+wNar3/TLP6Xtv1jFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O94t/8YH8B6/Ztm8b+z7R+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j/WQP6YxX9Q/pjFf5T8MYv/qPljFv/R8scs/oPzxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX9I/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+H8scs/h/OH7P4fyR/zOI/af6Yxf+j+WMW/8nyxyz+H8sfs/h/PH/M4j95/pjF/xP5Yxb/T+aPWfynyB+z+H8qf8zi/+n8MYv/Z/LHLP5T5o9Z/D+bP2bx/1z+mMX/8/ljFv+p8scs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fy1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fzx+z+M+aP2bx/0b+mMV/tvwxi/8388cs/t/KH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/t/PHLP5z549Z/OfJH7P4z5s/ZvH/Tv6YxX++/DGL/3fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL/vfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL//fwxi/8P8scs/kvmj1n8l8ofs/j/MH/M4v+j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+cP2bxXy5/zOK/fP6Yxf8n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0/zxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/yx/zOL/8/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8if8zi/8v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f9V/pjFf6v8sf9Q/7FHmjrWr/PH/kP93+nd2//W+WMW/9/kj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/t/ljFv/f5Y9Z/HfIH7P4/z5/zOL/h/wxi/+O+WMW/53yxyz+f8wfs/jvnD9m8d8lf8ziv2v+mMX/T/ljFv8/549Z/HfLH7P4/yV/zOK/e/6YxX+P/DGL/575Yxb/v+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxH3sgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziPyR/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/0P5Yxb/D+ePWfw/kj9m8Z80f8zi/9H8MYv/ZPljFv+P5Y9Z/D+eP2bxnzx/zOL/ifwxi/8n88cs/lPkj1n8P5U/ZvH/dP6Yxf8z+WMW/ynzxyz+n80fs/h/Ln/M4v/5/DGL/1T5Yxb/L+SPWfy/mD82kv8Y/6n+X8ofs2z/X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv8hA/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv8h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LH/qP9x/zb1CEL54/9R/v/feqQRfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Y4Oe+dDAgMB/hfwxy/a/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6rjvC/4ANar3/TLP6rtf1jFv+f5o9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f9Z/pjF/+f5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Rf6Yxf+X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/q/wxi/9W+WMW/1/nj1n8t84fs/j/Jn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/NH7P4/y5/zOK/Q/6Yxf/3+WMW/z/kj1n8d8wfs/jvlD9m8f9j/pjFf+f8MYv/LvljFv9d88cs/n/KH7P4/zl/zOK/W/6Yxf8v+WMW/93zxyz+e+SPWfz3zB+z+P81f8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxif84A/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv8h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/3EH8scs/oPyxyz+o+SPWfxHzR+z+I+WP2bxH5w/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/kPyxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4T5Y/ZvH/WP6Yxf/j+WMW/8nzxyz+n8gfs/h/Mn/M4j9F/pjF/1P5Yxb/T+ePWfw/kz9m8Z8yf8zi/9n8MYv/5/LHLP6fzx+z+E+VP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/a/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/L+ZP2bx/1b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/938scs/vPlj1n8v5s/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv/v5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf3G7/yC+9xb/Jez+75HF//v5Yxb/H+SPWfyXzB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/j/OH/M4r9c/pjFf/n8MYv/T/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5o9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f9Z/pjF/+f5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Rf6Yxf+X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/q/wxi/9W+WMW/1/nj1n8t84fs/j/Jn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/NH7P4/y5/zOK/Q/6Yxf/3+WMW/z/kj1n8d8wfs/jvlD9m8f9j/pjFf+f8MYv/LvljFv9d88cs/n/KH7P4/zl/zOK/W/6Yxf8v+WMW/93zxyz+e+SPWfz3zB+z+P81f8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxif94A/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv8h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS//EH8scs/oPyxyz+o+SPWfxHzR+z+I+WP2bxH5w/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/kPyxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP7/H3v0dACKAQABrLY+atu2bdu2bdu2bdu2bdu22wVugnfJChnZf9TyP4r/qOV/VP9Ry/9o/qOW/9H9Ry3/Y/iPWv7H9B+1/I/lP2r5H9t/1PI/jv+o5X9c/1HL/3j+o5b/8f1HLf8T+I9a/if0H7X8T+Q/avmf2H/U8j+J/6jlf1L/Ucv/ZP6jlv/J/Uct/1P4j1r+p/QftfxP5T9q+Z/af9TyP43/qOV/Wv9Ry/90/qOW/+n9Ry3/M/iPWv5n9B+1/M/kP2r5n9l/1PI/i/+o5X9W/1HL/2z+o5b/2f1HLf9z+I9a/uf0H7X8z+U/avmf23/U8j+P/6jlf17/Ucv/fP6jlv/5/Uct/wv4j1r+F/Qftfwv5D9q+V/Yf9Tyv4j/qOV/Uf9Ry/9i/qOW/8X9Ry3/S/iPWv6X9B+1/C/lP2r5X9p/1PK/jP+o5X9Z/1HL/3L+o5b/5f1HLf8r+I9a/lf0H7X8r+Q/avlf2X/U8r+K/6jlf1X/Ucv/av6jlv/V/Uct/2v4j1r+1/Qftfyv5T9q+V/bf9Tyv47/qOV/Xf9Ry/96/qOW//X9Ry3/G/iPWv439B+1/G/kP2r539h/1PK/if+o5X9T/1HL/2b+o5b/zf1HLf9b+I9a/rf0H7X8b+U/avnf2n/U8r+N/6jlf1v/Ucv/dv6jlv/t/Uct/zv4j1r+d/Qftfzv5D9q+d/Zf9Tyv4v/qOV/V/9Ry/9u/qOW/939Ry3/e/iPWv739B+1/O/lP2r539t/1PK/j/+o5X9f/1HL/37+o5b//f1HLf8H+I9a/g/0H7X8H+Q/avk/2H/U8n+I/6jl/1D/Ucv/Yf6jlv/D/Uct/0f4j1r+j/Qftfwf5T9q+T/af9Tyf4z/qOX/WP9Ry/9x/qOW/+P9Ry3/J/iPWv5P9B+1/J/kP2r5P9l/1PJ/iv+o5f9U/1HL/2n+o5b/0/1HLf9n+I9a/s/0H7X8n+U/avk/23/U8n+O/6jl/1z/Ucv/ef6jlv/z/Uct/xf4j1r+L/Qftfxf5D9q+b/Yf9Tyf4n/qOX/Uv9Ry/9l/qOW/8v9Ry3/V/iPWv6v9B+1/F/lP2r5v9p/1PJ/jf+o5f9a/1HL/3X+o5b/6/1HLf83+I9a/m/0H7X83+Q/avm/2X/U8n+L/6jl/1b/Ucv/bf6jlv/b/Uct/3f4j1r+7/Qftfzf5T9q+b/bf9Tyf4//qOX/Xv9Ry/99/qOW//v9Ry3/D/iPWv4f9B+1/D/kP2r5f9h/1PL/iP+o5f9R/1HL/2P+o5b/x/1HLf9P+I9a/p/0H7X8P+U/avl/2n/U8v+M/6jl/1n/Ucv/c/6jlv/n/Uct/y/4j1r+X/Qftfy/5D9q+X/Zf9Ty/4r/qOX/Vf9Ry/9r/qOW/9f9Ry3/b/iPWv7f9B+1/L/lP2r5f9t/1PL/jv+o5f9d/1HL/3v+o5b/9/1HLf8f+I9a/j/0H7X8f+Q/avn/2H/U8v+J/6jl/1P/Ucv/Z/6jlv/P/Uct/1/4j1r+v/Qftfx/5T9q+f/af9Ty/43/qOX/W/9Ry/93/qOW/+/9Ry3/P/iPWv5/9B+1/P/kP2r5/9l/1PL/i/+o5f9X/1HL/2/+o5b/3/1HLf9/+I9a/v/0H7X8/+U/avn/23/U8v+P/6jl/1//Ucv/f/6jkv+RBvIftfwP7D9q+R/Ef9TyP6j/qOV/MP9Ry//g/qOW/yH8Ry3/Q/qPWv6H8h+1/A/tP2r5H8Z/1PI/rP+o5X84/1HL//D+o5b/EfxHLf8j+o8GuH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf/buNjavsvDj+Ona7unP/t2cw2vIYLDpJq5s7cpksPlQHwum6lgMmEC2sDIqhbmH4AZqNSgxGMNkJIio29RNIDFmvBgmIKwkKnEqGieiIQ5BXcTUMJERjUvN3fYu7b22Wa96XXuxz+dFe59Tfqfbku/OKVszAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//tGDLRg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, 0x0, 0x0) 2.552591057s ago: executing program 5 (id=1407): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 2.551387476s ago: executing program 3 (id=1408): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 2.455922477s ago: executing program 2 (id=1409): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x4a38, 0x1) setuid(0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="1b0d00000000", 0x0, 0x6, 0x10002, 0xfffffffd, 0x0}) 2.320522374s ago: executing program 5 (id=1411): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x4d, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x89}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4044900) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 2.289677643s ago: executing program 2 (id=1412): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 2.239684731s ago: executing program 3 (id=1413): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file2\x00', 0x2, &(0x7f0000000180)={[{@norecovery}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000001e40)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 2.068847935s ago: executing program 1 (id=1415): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000cc0)=ANY=[], 0x5, 0xfcd, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0xc0186e87, &(0x7f0000000040)={0x33, 0x8250, 0xf}) 1.968634328s ago: executing program 2 (id=1416): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x0, 0x9e, 0x88, 0x33}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) 1.967751595s ago: executing program 5 (id=1417): r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0xb44c031f136537ae, 0xffffffffffffffff, 0xffffffffffffffff) 1.608463916s ago: executing program 3 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.555448192s ago: executing program 5 (id=1421): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x619d, &(0x7f0000000780)="$eJzs3cuOHFcZB/Cv+jaXEMfKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKqZc8Y1nW732M509cz5/aRx1denavqU/119marqEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHPz5bRcTlX6Ubjkd8LvoRvYiVpl6LiJW143n5QUQ8H9vN8VxEDJciqtz4TMRrEfHRsYh792+vNzed22c/vv+Xf/7hJ0/96B9/Gp7+319v9l+fttytW7/979/uPP72AgAAQInquq6r9DH/RPp83+u6UwDAXOTX/zrJt6sXrt5csP6o1Wq1+hDWbfVkd9pFRGy212neMzgcDwCHzGZ83HUX6JD8izaIiKe67gSw0KquO8CBuHf/9nqV8q3arwdrO+35XJA9+W9Wu9d3TJvOMn6OybweX1vRj2en9GdlTn1YJDn/3nj+l3faR2m5g85/XqblP9q59Kk4Of/+eP5jjk7+vYn5lyrnP3ik/PvyBwAAAACABZb//n+84+O/S0++KfvysOO/a3PqAwAAAAAAAAB81p50/L9dlfH/AAAAYFE1n9Ubvzv24LZp38XW3H6pinh6bHmgMOlimdWu+wEAAAAAAAAAAAAAJRnsnMN7qYoYRsTTq6t1XTc/beP1o3rS9Q+70rcfStb1kzwAAOz46NjYtfxVxHJEXErf9TdcXV2t6+WV1Xq1XlnK72dHS8v1SutzbZ42ty2N9vGGeDCqm1+23Fqvbdbn5Vnt47+vua9R3d9Hx+ajw8ABICJ2Xo3ueUU6Yur6mej6XQ6Hg/3/6LH/sx9dP04BAACAg1fXdV2lr/M+kY7597ruFAAwF/n1f/y4gFqtVqvV6qNXt9WT3WkXEbHZXqd5z2A4fgA4ZDbj4667QIfkX7RBRDzfdSeAhVZ13QEOxL37t9erlG/Vfj1I47vnc0H25L9Zba+X1580nWX8HJN5Pb62oh/PTunPc3PqwyLJ+ffG87+80z5Kyx10/vMyLf9mO4930J+u5fz74/mPOTr59ybmX6qc/+CR8u/LHwAAAAAAFlj++//xhTr+O3rczZnpYcd/1w7sXgEAAAAAAADgYN27f3s9X/eaj/9/YcJyrv88mnL+lfyLlPPvjeX/1bHl+q35u289yP8/92+v//Hmvz+fp/vNfynPVOmRVaVHRJXuqRqk6ZNs3adtDfuj5p6GVa8/SOf81MN34mpci404s2fZXvr/eNB+dk9709Phdnvd32k/t6d9sNue1z+/p32YznSqV3L7qViPn8e1eHu7vWlbmrH9yzPa6xntOf++/b9IOf9B66fJfzW1V2PTxt0Pe5/a79vTSffz5tUv/ubMwW/OTFvR3922tmb7XuygP9v/J0+N4pc3Nq6funXl5s3rZyNN9tx6LtLkM5bzH6af3ef/l3ba8/N+e3+9++HokfNfFFsxmJr/S635ZntfnnPfupDzH6WfnP/bqX3y/n+Y85++/7/SQX8AAAAAAAAAAAAAAADgYeq63r5E9M2IuJCu/+nq2kwAYL7y63+d5NvnVfcfd/0/792OrvqvVs+5rhasP3OtP6kXqz9q9WGs2+rJ3mgXEfH39jrNe4ZfT/plAMAi+yQi/tV1J+iM/AuWv++vmZ7sujPAXN14/4OfXrl2beP6ja57AgAAAAAAAAA8rjz+51pr/OeTdV3fGVtuz/ivb8Xak47/OcgzuwOMThmouv/o2/QwW71Rv9cabvyFmDb+93B37mHjfw9m3N9wRvtoRvvSjPblGe0TL/Royfm/0Brv/GREnBgbfr2E8V/Hx7wvQc7/xdbjucn/K2PLtfOvf3+Y8+/tyf/0zfd+cfrG+x+8evW9K+9uvLvxs/Nnz545f+HCxYsXT79z9drGmZ1/O+zxwcr557GvnQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9LtfzLkvN/JdXyL0vO/+upln9Zcv6vplr+Zcn5n0q1/MuS8z+d6n3mv3LQ/WI+cv75CJf9vyw5/3xmg/zLkvM/l2r5lyXnfz7V8i9Lzv+1VMu/LDn/b6Ra/mXJ+V9ItfzLkvP/ZqrlX5ac/8VUy78sOf9vpVr+Zcn5fzvV8i9Lzv/1VMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+kWv5lefD9/2bMmDGTZ7p+ZgIAAAAAAAAAAAAAxs3jdOKutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI9dZ3w/8zL557UBiIOTv5G/C2jHGOJvs+iV+oXUx4bXhrSSEQl+wXe/aLPgNr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKpH2gt4gKlQuoiqggFSJVpCtZs7zPDszOzuz6x07Z875fKTkl505M+fMmWdm92vnuwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBsy5tmP1PLsqxWq+UXbMyyl9Tn+omNjUte/+IeHwAAALB2v2z8+/lb0gWHV3Cjpm3+6c7vfn1hYWEh+8Dwn45+YWEhXTGRZaPrsqxxXXT1hx+sNW8TPJ6N14aavh7qsfvhHteP9Lh+tMf1Yz2uX9fj+vEe1y85AUusz2rpzrY1/nNjfkqzW7PRxnXbOtzq8dq6ofq5S7fNao3bLIyeyOayU9lsNt2yfb5trbH9N7fU9/X2LO5rqGlfm+sr5KePHo/HUAvneFvLvhbvM/rxG7OJn/300eN/feG52zvNnqeh5f7y49yxtX6cnwqX5Mday9alcxKPc6jpODd3eE6GW46z1rhd/b/bj/P5FR7n8OJh3lDtz/l4NtT472ca52mklnU4T5vDZT+/K8uyy4uH3b7Nkn1lQ9mGlkuGFp+f8XxF1u+jvpReno2sap1uWcE6rc+Zba3rtP01EZ//LeF2I8scQ/PT9OPHxpqe918sXMs6jeqPernXSvsa7PdrpShrMK6LZxoP+omOa3BbePyPbl9+DXZcOx3WYHrcTWtwa681ODQ23Djm9CTUGrdZXIO7WrYfbuyp1pjPbu++BqcunD43Nf+JT94zd/rYydmTs2f27No1vWffvgMHDkydmDs1O53/+xrPdvFtyIbSa2BrOHfxNfDatm2bl+rCl8eWvP9e6+twvMvrcGPbtv1+HY60P7jajXlBLl3T+WvjffWTPn5lKFvmNdZ4fnau/XWYHnfT63Ck6XXY8XtKh9fhyApeh/Vtzu1c2c8sI03/dDqG5b8XrG0Nbmxag+0/j7SvwX7/PFKUNTge1sX3dy7/vWBzON4nJlf788jwkjWYHm5476lfkn7eHz/QGJ3W5R31K24ayy7Oz56/95FjFy6c35WFcUO8ommttK/XDU2PKVuyXodWvV4Pz935xB0dLt8YztX4PfV/jS/7XNW32Xtv9+eq8d2t8/lsuXR3Fkaf3ejz2em7ef18jmXZF7/z2IPfevSLb1r2fNbz5qem1v6zeMqlTe+/o8u8/8bc/0K+v3RXjw+PjuSv3+F0dkZb3o9bn6qRxntXrbHv56dW9n48Gv650e/Ht3Z5P97Utm2/349H2x9cfD+u9frTjrVpfz7Hwzo5Nd39/bi+zabdq12TI13fj+8KsxbO/+tCUki5qGntLLdu075GRkbD4xqJe2hdp3tath8N2ay+r6d2X9s63XFXfl/D6dEtulHrdKJt236v0/RnX8ut01qvP327Nu3P53hYF7fu6b5O69s8vXft753r4382vXeO9VqDo8Nj9WMeTYuw8X6fLayPa/De7Hh2NjuVzTSuHWusp1pjX5P3rWwNjoV/bvR75aYua3BH27b9XoPp+9hya682svTB90H78zke1sWT93Vfg/Vt3ry/vz+77giXpG2afnZt//O15f7M646203S91spIOM7v7O/+Z7P1bU4dWG3O7H6e7g6X3NThPLW/fpd7Tc1kN+Y8bQrH+dyB5c9T/Xjq23zh4ArX0+Esyy597P7Gn/eGv1/5u4vf+3rL37t0+judSx+7/ycvPfGPqzl+AAbfC/nYkH+va/qbqZX8/T8AAAAwEGLuHwozkf8BAACgNGLuj/9XeCL/AwAAQGnE3D8SZlKR/L/pzc/NvXApS838hSBen07DA/l2seM6Hb6eWFhUv/z+r87+9z9cWtm+h7Is+8UDf9Bx+00PxOPKTYTjvPqW1suX+Po9K9r30Ycvpf0299e/FO4/Pp6VLoNOFdzpLMu+ecvnGvuZ+OCVxnz6gaON+eDlJx6vb/P8wfzrePtnX5Fv/xeh/Hv4xLGW2z8bzsOPwpx+R+fzEW/3tSuv27z//Yv7i7erbb258bCf/FB+v/H35Hz+8Xz7eJ6XO/5vffapr9W3f+Q1nY//0lDn438q3O9Xw/yfV+XbNz8H9a/j7T4djj/uL97u3q98u+PxX/1Mvv25t+bbHQ0z7n9H+HrbW5+baz5fj9SOtTyu7G35dnH/09/748b18f7i/bcf//iRKy3no319PP1v+f1MtW0fL4/7if6+bf/1+2len3H/T/3R0Zbz3Gv/Vx989lX1+23f/91t25372M7G/hfvr/U3Nv3lpz/XcX/xeA7/7bmWx3P4veF1HPb/5IfCegzX/+/V/P7af7vC0fe2vv/E7b+08VLL44ne/rN8/1ffcLIx142v33DTS1568+VX189dlj2zLr+/Xvs/+VdnW47/y7fl5yNeHzv67ftfTtz/+Y9Pnjk7f3FuJp3VR29p/O6cd+bHE4/3lvDe2v71kbMXPjx7fmJ6YjrLJsr7K/Su2VfC/Ek+LnffemHJO+jOh8Pzeceff3PD9n/9bLz839+XX37lHfn3rdeG7T4fLt8Ynr/V7X+pJ7fc1nh9154OR7iw9PcFr8Xmbf91YEUbhsff/nNBXO/nXvnhxnmoX9f4vhFf12s8/h/M5PfzjXBeF8JvZt562+L+mrePvxvhykP5633N5y+8zcXn9W/C8/2uH+X3H48rPt4fhJ9jvr2p9f0uro9vXBpqv//Gb/G4HN5Pssv59XGreL6vPH9bx8OLv4cku3x74+s/Sfdz+6oe5nLmPzE/dWruzMVHpi7Mzl+Ymv/EJ4+cPnvxzIUjjd/leeQjvW6/+P60ofH+NDO7b2/WeLc6m4/r7MU+/nMPH5/ZP719ZvbEsYsnLjx8bvb8yePz88dnZ+a3HztxYvbjvW4/N3No1+6De/bvnjw5N3PowMGDew5Ozp05Wz+M/KB62Df90ckz5480bjJ/aO/BXffdt3d68vTZmdlD+6enJy/2un3je9Nk/da/P3l+9tSxC3OnZyfn5z45e2jXwX37dvf8bYCnz52Yn5g6f/HM1MX52fNT+WOZuNC4uP69r9ftKaf5/8h/nm1Xy38RX/aeu/el389a99XHlr2rfJO2XyD6XPhdNP/8snMHVvJ1zP2jYSYVyf8AAABQBTH3j4WZyP8AAABQGjH3rwszkf8BAACgNGLuHw8zqUj+L13/f9OlFe1f/1//v/l86f9XrP//UNH6//n7hf5/f6y1f6//H+j/6//r/+v/6//TB0Xr/8fcvz7LKpn/AQAAoApi7t8QZiL/AwAAQGnE3H9TmIn8DwAAAKURc/9Lwkwqkv/1//X/9f/1//X/O+9f/38w6f93p//fg/7/VFat/v/lfh6//r/+P0sVrf8fc/9Lw0wqkv8BAACgCmLuvznMRP4HAACA0oi5/5YwE/kfAAAASiPm/o1hJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/9/n/+v/6//TV0Xr/8fc/7Iwk4rkfwAAAKiCmPtfHmYi/wMAAEDxjFzbzWLuf0WYyZL8f407AAAAAF50MfffmrUVwSvy9//6//r/xe//r0vX6f/r/2eF7P8PZ/r/xaH/353+fw/6//r/+v/6//RV0fr/jdyfjWevDDOpSP4HAACAKoi5/7YwE/kfAAAASiPm/v8XZiL/AwAAQGnE3L8pzKQi+V//X/+/+P1/n/+v/1/0/r/P/y8S/f/u9P970P/X/9f/1/+nr4rW/4+5//Ywk4rkfwAAAKiCmPvvCDOR/wEAAKA0Yu7//2Em8j8AAACURsz9m8NMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfFWZSkfwPAAAAVRBz/51hJvI/AAAAlEbM/a8OM5H/AQAAoDRi7p8IM6lI/tf/L3j/P+/Bj/n8f/1//X/9f/3/ldH/707/vwf9f/3/vvT/Fy7p/+v/kyta/z/m/i1hJhXJ/wAAAFAFMfdvDTOR/wEAAKA0Yu6/K8xE/gcAAIDSiLl/W5hJRfK//v9A9P8z/X/9f/1//X/9/5XR/+9O/78H/X/9f5//r/9PXxWt/x9z/2vCTCqS/wEAAKAKYu7fHmYi/wMAAEBpxNz/2jAT+R8AAABKI+b+HWEmFcn/+v/6//r/+v/6/533r/8/mPT/u9P/70H/X/9f/1//n74qWv8/5v7XhZlUJP8DAABAFcTcvzPMRP4HAACA0oi5/+4wE/kfAAAASiPm/skwk4rkf/1//X/9f/1//f/O+9f/H0z6/93p//eg/6//r/+v/09fFa3/H3P/PWEmFcn/AAAAUAUx998bZiL/AwAAQGnE3D8VZiL/AwAAQGnE3D8dZlKR/K//r/+v/6//v6r+/6sX71f/P6f/Xyz6/93p//eg/6///6L3/0f1/ymVovX/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/j1hJvI/AAAAlEbM/XvDTCqS//X/9f/1//X/ff5/5/3r/w8m/f/u+t//jw9R/1//X//f5//r/7NU0fr/MfffF2ZSkfwPAAAAVRBz/74wE/kfAAAASiPm/v1hJvI/AAAAlEbM/QfCTCqS//X/9f/1//X/9f8771//fzDp/3fn8/970P/X/9f/1/9njR76w+avitb/j7n/YJhJRfI/AAAAVEHM/a8PM5H/AQAAoDRi7v+VMBP5HwAAAEoj5v5fDTOpSP7X/9f/1//X/9f/77x//f/BpP/fnf5/D/r/+v/6//r/9FXR+v8x9x8KM6lI/gcAAIAqiLn/18JM5H8AAAAojZj73xBmIv8DAABAacTcfzjMpCL5X/9f/1//X/9f/7/z/m90/38s3q/+/5ro/3en/9+D/r/+v/6//j99VbT+f8z9bwwzqUj+BwAAgCqIuf/+MBP5HwAAAEoj5v43hZnI/wAAAFAaMfe/OcykIvlf/1//X/9f/1//v/P+ff7/YNL/707/vwf9f/1//X/9f/qqaP3/mPvfEmZSkfwPAAAAVRBz/1vDTOR/AAAAKI2Y+98WZiL/AwAAQGnE3P/2MJOK5H/9f/1//X/9f/3/zvvX/x9M+v/d6f/3oP+v/6//r/9PXxWt/x9z/6+HmVQk/wMAAEAVxNz/QJiJ/A8AAAClEXP/O8JM5H8AAAAojZj73xlmUpH8r/+v/6//r/+v/995//r/g0n/v7sB6///8uZwuf5/Tv+/2Me/2v7/SNvX16X//8Pl+v8L69pvr//P9VC0/n/M/e8KM6lI/gcAAIAqiLn/3WEm8j8AAACURsz97wkzkf8BAACgNGLu/40wk4rkf/3/+nEstpf1/8va/x/S/9f/1/+vCP3/7gas/+/z/9vo/xf7+H3+v/4/SxWt/x9z/3vDTCqS/wEAAKAKYu5/MMxE/gcAAIDSiLn/oTAT+R8AAABKI+b+94WZVCT/6//7/P9q9P99/n+m/6//XxH6/93p//eg/6//X7T+/3/q/zPYitb/j7n/4TCTiuR/AAAAqIKY+98fZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP0fCDOpSP7X/x+U/v/EgPb/H9P/v479/ztvzrfT/9f/Z5H+f3f6/z3o/+v/F63/7/P/GXBF6//H3P/BMJOV5//xFW8JAAAAvChi7v+tMJOK/P0/AAAAVEHM/b8dZiL/AwAAQGnE3P87YSYVyf/6/4PS//f5/5n+v8//b3s8+v/6/53cuP5/fOfR/9f/1/+P9P/1//X/aVe0/n/M/b8bZlKR/A8AAABVEHP/h8JM5H8AAAAYCJ3+n+x2MfcfCTOR/wEAAKA0Yu4/GmZSkfyv/6//r/9f0P7/n239l+9/991Hd+n/6//r/6/KDf38//qL3+f/6//r/yf6//r/+v+0K1r/P+b+Y2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc//xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f+C9v8H+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXR9+//vX+yJ6/+vtv8/1vFS/X/9/0E+fv1//X+WKlr/P+b+2TCTiuR/AAAAqIKQ+4dO5HPxCvkfAAAASiPm/pNhJvI/AAAAlEbM/R8OM6lI/tf/1//X/9f/9/n/nfffrf9fG/H5/0WV+vc/b7xQ9P/bFKf/35n+v/7/IB+//r/+P0sVrf8fc/9cmElF8j8AAABUQcz9Hwkzkf8BAACgNGLu/2iYifwPAAAApRFz/6kwk4rkf/1//X/9f/1//f/O+y/s5//r/3e11v69/n+g/6//r/+v/6//Tx8Urf8fc//pMJOK5H8AAACogpj7z4SZyP8AAABQGjH3/x97d9JkWVntcfjkvUVUVnAHd3YHd2KEQz8CAx3rB3DgxIFGGA5ERcWewr5FUbFXBPsGGxBEVLBvwA7FHlTs+wY7RIkyyFprVWXmzn0yq05m7v2+zzNgyZHkHIkK4F9ZP/f5cYv9DwAAAM3I3f/YuKWT/a//1/832/8/UP+/0/vr//X/LdP/j9P/L6H/1//r//X/rNTU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v4L4hb7HwAAAJqRu/8JcUsn+39L/7+26LP/z4xX/99S/+/5/zu+v/5f/9+yg+3/L77v73z6f/2//j/o/3fV/x/d6ev1/7Roav1/7v4nxi2d7H8AAADoQe7+J8Ut9j8AAAA0I3f/hXGL/Q8AAADNyN3/5Lilk/2/uuf/H9t4fab9f9H/6/83XtD/6//1/7Pl+f/jeur/L7jt3Mfcdd3/X7+X99f/6/89/1//z2pNrf/P3f+UuKWT/Q8AAAA9yN3/1LjF/gcAAIBm5O5/Wtxi/wMAAEAzcvc/PW7pZP+vrv+f9fP/i/5f/7/xgv5f/6//ny39/7ie+v8zeX/9v/5f/6//Z7Wm1v/n7n9G3NLJ/gcAAIAe5O5/Ztxi/wMAAEAzcvdfFLfY/wAAANCM3P3H45ZO9r/+f//7/3v1//r/uPp//b/+f//p/8fp/5fQ/+v/9f/6f1Zqav1/7v6L45ZO9j8AAAD0IHf/s+IW+x8AAACakbv/2XGL/Q8AAADNyN3/nLilk/2v//f8f/2//l//P/z++v950v+P0/8vof8/237+HP2//l//z+n22P/fM/K37ZX0/7n7nxu3dLL/AQAAoAe5+58Xt9j/AAAA0Izc/c+PW+x/AAAAaEbu/hfELZ3sf/2//l//r/8/4/5/+w+9Dfr/Yfr/g6H/HzeZ/n/tyODL+v/Z9/+e/6//1/+zydSe/5+7/4VxSyf7HwAAAHqQu/9FccvI/t/zT+YDAAAAhyp3/4vjFt//BwAAgNnL6ix3/0vilk72v/5f/6//1/97/v/w+4/1/9ef9vn0/9Oi/x83mf5/B/p//f+cP7/+X//PdlPr/3P3vzRu6WT/AwAAQA9y918St9j/AAAA0Izc/S+LW+x/AAAAaEbu/pfHLZ3s/+H+/9R/r//fHf3/5s+v/x/+8bGq/j//jPr/0f7/QZ7/3yf9/7iD7/+P6v83//n1//vosD9/4/3/sWVfr/9nyNT6/9z9l8Ytnex/AAAA6EHu/lfELfY/AAAANCN3/yvjFvsfAAAAmpG7/1VxSyf73/P/9f/6//n1/57/f9JhPv9/ceD9/xH9/y7p/8d5/v8S+n/9v/7f8/9Zqan1/7n7L4tbOtn/AAAA0IPL7l5s7P5XLxb2PwAAAMzR6b92YOsvKA25+18Tt9j/AAAA0Izc/a+NWzrZ//p//b/+X/+v/x9+/2n1/57/v1v6/3H6/yX0//vRzx9prP+/fKevn0L/f5H+n4nZ1P/feOr1w+r/c/e/Lm7pZP8DAABAD3L3vz5usf8BAACgGbn73xC32P8AAADQjNz9b4xbOtn/+97/H9v5vfX/+n/9v/5f/6//XzX9/zj9/xL6f8//9/x//T8rtan/P81h9f+5+98Ut3Sy/wEAAKAHufvfHLfY/wAAANCM3P2Xxy32PwAAADQjd/9b4pZO9r/n/+v/9f/6f/3/8Pvr/+dJ/z9O/7+E/l//r//X/7NSU+v/c/dfEbd0sv8BAACgB7n7r4xb7H8AAABoRu7+t8Yt9j8AAAA0I3f/2+KWTva//n9/+/98Xf+v/1/o//X/+v8D0W3/vzb0T6Ltduj/b3nU8YdsfkX/r//X/+v/9f+swCT6/xOn/u0yd//b45ZO9j8AAAD0IHf/O+IW+x8AAACakbv/nXGL/Q8AAADNyN3/rrhlj/v/f1f6qQ6O/t/z//X/+n/9//D76//nqdv+f5c8/38J/b/+X/+v/2elJtH/n/b7ufvfHbf4/j8AAAA0I3f/e+IW+x8AAACakbv/vXGL/Q8AAADNyN3/vrilk/2v/9f/6//1//r/4fc/0/5/fTFM/38w9P/j9P9L6P/1//p//T8rNbX+P3f/VXFLJ/sfAAAAepC7//1xi/0PAAAAzcjd/4G4xf4HAACAZuTu/2Dc0sn+1//r//X/+n/9//D7e/7/POn/x+n/F4vF1SMfYKj/P3FU/6//1//r/zlDU+v/c/d/KG7pZP8DAABAD3L3Xx232P8AAADQjNz918Qt9j8AAAA0I3f/h+OWTva//l//r//X/+v/h99f/z9P+v9x+v8lPP9f/6//1/+zUlPr/3P3Xxu3dLL/AQAAoAe5+6+LW+x/AAAAaEbu/o/ELfY/AAAANCN3//VxSyf7X/+v/9f/6//3pf8/rv/fSv9/MPav/1/o//X/+v8l9P/6f/0/Wx1U/39P/P1+Wf+fu/+jcUsn+x8AAAB6kLv/hrjF/gcAAIBm5O7/WNxi/wMAAEAzcvd/PG7pZP/r//X/+n/9v+f/D7+//n+ePP9/nP5/Cf2//l//r/9npQ6q/9+p99/6+7n7PxG3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pviFvsfAAAAmpG7/5NxSyf7X/+v/9/c/y8W+n/9v/7/pAPo/9cX+v+V0/+P0/8vof9vs///r0VD/f+xHb9e/88UTa3/z93/qbilk/0PAAAAPcjd/+m4xf4HAACAZuTu/0zcYv8DAABAM3L3fzZuaWn/37tz+jb//v/oli/U/y8Wi9sv9Px//f/I++v/J9P/119V/f/q6P/H6f+X0P+32f97/r/+n0Mztf4/d//n4paW9j8AAAB0Lnf/5+MW+x8AAACakbv/C3GL/Q8AAADNyN3/xbilk/0///5/6xfq/xdn9fx//f/GC/p//b/+f7bOtr+/Yj3+mab/1//r/wf7+bUd/r1nof/X/+v/GTC1/j93/5filk72PwAAAPQgd//NcYv9DwAAAM3I3X9L3GL/AwAAQDNy9385bulk/+v/9f/6/3n2/+v6f/2//n/QVJ7/f955D75V/6//b7H/H6P/1//r/9lqav1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/t/e/9/zuJkoXrSUP8fjZr+/zT6/82fX/8//OPD8//1//r//TeV/t/z/8/s8+v/9f9z/vx76v/vt/3r9f+0aGr9f+7+W+OWTvY/AAAA9CB3/zfiFvsfAAAAmpG7/5txi/0PAAAAzcjdf1vc0sn+9/x//b/+X/+v/x9+f/3/POn/x+n/l9D/6/89///8R/y3/p/VmVr/n7v/W3HLxvC7//+c4f9MAAAAYEJy9387bunk+/8AAADQg9z934lb7H8AAABoRu7+78Ytnex//b/+X/+v/9f/D7+//n+e9P/j9P9L9NP/rw+9eNj9/Nk67M/fTP/v+f+s0NT6/9z934tbOtn/AAAA0IPc/d+PW+x/AAAAaEbu/h/ELfY/AAAANCN3/+1xSyf7X/+v/2+//3+4/n/L++v/9f8t0//nP9GH6f+X6Kf/H3TY/fzcP7/+X//PdlPr/3P33xG3dLL/AQAAoAe5+38Yt9j/AAAA0Izc/T+KW+x/AAAAaEbu/h/HLZ3sf/1/X/3/2qLH/t/z//X/+v+ezKf/v/LI0Kue/6//1//P9/Pr//X/bDe1/j93/51rR7rc/wAAADBXD33Ao+/Y7R9758Zv1xc/iVvsfwAAAGhG7v6fxi32PwAAADQjd//P4pZO9r/+v6/+v8/n/+v/9f/6/57Mp/8fpv/X/+v/5/v59f/6f7abWv+fu//ncctpw2/w/6AHAAAAmI3c/b+IWzr5/j8AAAD0IHf/L+OWbfv/xC5/VTsAAAAwNbn7fxW3dPL9f/3/xPv/xT71//HH6f9P0v/r/4feX/8/T/r/cWfZ/59Y0//r/0fo//X/+n+2mlr/n7v/hmsXXe5/AAAAaNSmn1H49cZv1xe/iVvsfwAAAGhG7v7fxi32PwAAADQjd//v4pZO9r/+f+L9/xk9//9Y/SfP/++8/79kffD99f/6/5bp/8d5/v8S+n/9v/5f/89K7aH/3xik+93/5+7/fdzSyf4HAACAHuTu/0PcYv8DAABAM3L3/zFusf8BAACgGbn7/xS3dLL/9f+H0P9fenSx2Nf+fxfP/9f/99H/7/D+7fT//3fu8Zsf9shrrtL/c8pB9v/5Y0H/r//X/5+k/9f/6//ZamrP/8/d/+e4pZP9DwAAAD3I3X9X3GL/AwAAQDNy9/8lbrlv/990WJ8KAAAAWKXc/X+NWzr5/r/+v8Xn/8+z/8+/1ofQ/x+fX/+fTXHv/b/n/+v/t/P8/3H6/yX0//p//b/+n5WaWv+fu/9vcUsn+x8AAAB6kLv/73FL7v+1Pf/UPQAAADAxufv/Ebf4/j8AAAA0I3f/3XFLJ/tf/6//n0r/nzz//9TXef7/Sfp//f9e6P/H6f+X0P/r//X/+n9Wamr9f+7+f8Ytnex/AAAA6EHu/nviFvsfAAAAmpG7/19xi/0PAAAAzcjd/++4pZP9r//X/+v/9f/6/+H31//Pk/5/nP5/Cf2//l//r/9npabW/+fu/08AAAD//zekcr0=") rename(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file1\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.555187536s ago: executing program 1 (id=1422): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14) 1.258033461s ago: executing program 4 (id=1423): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000440)="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", 0x224}], 0x1}, 0x240480e1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}, {0x18, 0x110, 0xd, "f8"}], 0x28}, 0x0) 1.214515452s ago: executing program 3 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.203662779s ago: executing program 1 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.007290093s ago: executing program 3 (id=1426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x11c, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x11c}}, 0x0) 956.402134ms ago: executing program 4 (id=1427): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 856.776704ms ago: executing program 1 (id=1428): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1008000, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 808.035837ms ago: executing program 0 (id=1429): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x3020}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 774.315773ms ago: executing program 3 (id=1430): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x8000000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, 0x0, 0x0) 696.297009ms ago: executing program 4 (id=1431): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {0x10}, {0x9, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) 545.475105ms ago: executing program 0 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x20044000) 474.648546ms ago: executing program 4 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) 458.122068ms ago: executing program 1 (id=1434): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/172, 0xac}], 0x5}, 0x40010022) 311.777267ms ago: executing program 0 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 274.236419ms ago: executing program 2 (id=1436): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 163.984249ms ago: executing program 4 (id=1437): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x9, 0x1, {{0x5, 0x4, 0x2, 0x2c, 0x14, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @broadcast}}}}) 108.999957ms ago: executing program 1 (id=1438): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000001a00006700000008000300", @ANYRES32=0x0, @ANYBLOB="100027c1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 27.245432ms ago: executing program 5 (id=1439): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.183149ms ago: executing program 0 (id=1440): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 667.18µs ago: executing program 2 (id=1441): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000000c0)='./file1\x00', 0xa08086, &(0x7f0000009780), 0x1, 0x97a8, &(0x7f00000097c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', 0x0, 0x8b) 0s ago: executing program 4 (id=1442): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001f00000000000000080009000d000000", 0x24) kernel console output (not intermixed with test programs): 0003e syscall=166 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 130.112693][ T30] audit: type=1326 audit(1770924273.391:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 130.172451][ T30] audit: type=1326 audit(1770924273.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 130.285088][ T788] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 130.337745][ T6823] loop4: detected capacity change from 0 to 64 [ 130.483259][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.520425][ T788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.550206][ T788] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.589620][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.623469][ T788] usb 1-1: config 0 descriptor?? [ 130.651013][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.689021][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 130.713767][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.740583][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.775515][ T788] usb 1-1: media controller created [ 130.805273][ T6828] loop3: detected capacity change from 0 to 4096 [ 130.809747][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.834276][ T6828] ntfs3: Bad value for 'gid' [ 130.855728][ T6828] ntfs3: Bad value for 'gid' [ 130.857537][ T6812] dvb-usb: bulk message failed: -22 (2/0) [ 130.869588][ T6832] loop4: detected capacity change from 0 to 2048 [ 130.894093][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 130.905067][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.939949][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 130.955706][ T6832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.988676][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 131.003712][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.015337][ T30] audit: type=1800 audit(1770924274.741:13): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.346" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 131.053216][ T788] usb 1-1: USB disconnect, device number 5 [ 131.141602][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.178971][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.439812][ T6841] loop5: detected capacity change from 0 to 4096 [ 131.495384][ T6819] loop2: detected capacity change from 0 to 32768 [ 131.562578][ T6846] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.745220][ T6847] loop1: detected capacity change from 0 to 4096 [ 131.945540][ T6847] ntfs3(loop1): ino=9, attr_set_size [ 133.013102][ T6902] loop4: detected capacity change from 0 to 256 [ 133.044926][ T6902] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 133.512823][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.705286][ T788] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 133.725433][ T788] usb 4-1: config 0 has no interface number 0 [ 133.731562][ T788] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.740743][ T6898] loop5: detected capacity change from 0 to 32768 [ 133.788524][ T788] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.798497][ T788] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.815470][ T788] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 133.817277][ T6898] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.869165][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.883988][ T788] usb 4-1: config 0 descriptor?? [ 133.997147][ T6898] XFS (loop5): Ending clean mount [ 134.021960][ T6898] XFS (loop5): Quotacheck needed: Please wait. [ 134.055753][ T6907] loop2: detected capacity change from 0 to 32768 [ 134.124854][ T6898] XFS (loop5): Quotacheck: Done. [ 134.186328][ T6907] JBD2: Ignoring recovery information on journal [ 134.317180][ T6907] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.387455][ T788] uclogic 0003:28BD:0905.0005: interface is invalid, ignoring [ 134.414666][ T5817] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.595762][ T6008] usb 4-1: USB disconnect, device number 3 [ 134.673924][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.698993][ T5816] ocfs2: Unmounting device (7,2) on (node local) [ 134.860360][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 134.880926][ T788] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.912470][ T788] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.957430][ T788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.977311][ T788] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 135.011744][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.033939][ T788] usb 5-1: config 0 descriptor?? [ 135.204821][ T6953] loop1: detected capacity change from 0 to 128 [ 135.284097][ T30] audit: type=1800 audit(1770924279.011:14): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.396" name="file2" dev="loop1" ino=1048682 res=0 errno=0 [ 135.285300][ T6953] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 135.323377][ T6958] netlink: 'syz.0.397': attribute type 13 has an invalid length. [ 135.347867][ T6955] loop2: detected capacity change from 0 to 4096 [ 135.380804][ T6955] ntfs3(loop2): Primary boot: invalid index size -57. [ 135.385028][ T6953] FAT-fs (loop1): Filesystem has been set read-only [ 135.413663][ T6955] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 135.416415][ T6953] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 135.470974][ T788] cypress 0003:04B4:DE64.0006: item fetching failed at offset 0/3 [ 135.500462][ T788] cypress 0003:04B4:DE64.0006: parse failed [ 135.521196][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.522664][ T788] cypress 0003:04B4:DE64.0006: probe with driver cypress failed with error -22 [ 135.528987][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.677095][ T788] usb 5-1: USB disconnect, device number 2 [ 135.766237][ T6969] loop3: detected capacity change from 0 to 128 [ 135.856325][ T6969] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.926369][ T6969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.966222][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.011827][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.406546][ T6982] warning: `syz.2.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.443163][ T1136] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.460551][ T1136] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.598946][ T1136] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.622118][ T1136] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.640201][ T6994] loop4: detected capacity change from 0 to 128 [ 136.699368][ T6994] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.731335][ T6994] hpfs: filesystem error: improperly stopped [ 136.738725][ T6994] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.812999][ T6994] hpfs: You really don't want any checks? You are crazy... [ 136.835810][ T6994] hpfs: hpfs_map_sector(): read error [ 136.841218][ T6994] hpfs: code page support is disabled [ 136.872630][ T6008] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 136.897774][ T6994] hpfs: hpfs_map_4sectors(): unaligned read [ 136.923081][ T6994] hpfs: hpfs_map_4sectors(): unaligned read [ 136.947482][ T6994] hpfs: filesystem error: unable to find root dir [ 136.982122][ T6994] hpfs: hpfs_map_4sectors(): unaligned read [ 137.011677][ T6994] hpfs: hpfs_map_sector(): read error [ 137.060782][ T6008] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.079845][ T6008] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.092639][ T6008] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 137.112818][ T7006] smc: net device hsr0 applied user defined pnetid SYZ2 [ 137.119870][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.157101][ T6008] usb 3-1: config 0 descriptor?? [ 137.207028][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.215910][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.596782][ T6008] aquacomputer_d5next 0003:0C70:F011.0007: unbalanced collection at end of report description [ 137.604233][ T6997] loop5: detected capacity change from 0 to 32768 [ 137.634081][ T6008] aquacomputer_d5next 0003:0C70:F011.0007: probe with driver aquacomputer_d5next failed with error -22 [ 137.840721][ T788] usb 3-1: USB disconnect, device number 5 [ 138.049705][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 138.063616][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.427'. [ 138.099043][ T7030] netlink: 'syz.5.427': attribute type 15 has an invalid length. [ 138.255783][ T7036] tipc: Started in network mode [ 138.260692][ T7036] tipc: Node identity 00000000000000000000ffffac14141e, cluster identity 4711 [ 138.300660][ T7036] tipc: Enabling of bearer rejected, failed to enable media [ 138.321674][ T7038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.432'. [ 138.385636][ T7040] loop1: detected capacity change from 0 to 128 [ 139.121777][ T7069] loop3: detected capacity change from 0 to 128 [ 139.166228][ T7069] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.166288][ T7069] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.166309][ T7069] hpfs: You really don't want any checks? You are crazy... [ 139.166715][ T7069] hpfs: hpfs_map_sector(): read error [ 139.166729][ T7069] hpfs: code page support is disabled [ 139.168336][ T7069] hpfs: hpfs_map_4sectors(): unaligned read [ 139.168417][ T7069] hpfs: hpfs_map_4sectors(): unaligned read [ 139.168430][ T7069] hpfs: filesystem error: unable to find root dir [ 140.080709][ T7100] mmap: syz.2.457 (7100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.383318][ T939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.450688][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 140.552691][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 140.571637][ T939] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 140.622484][ T939] usb 5-1: config 2 has no interface number 0 [ 140.628654][ T939] usb 5-1: config 2 interface 88 has no altsetting 0 [ 140.675891][ T939] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 140.702866][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.721098][ T939] usb 5-1: Product: syz [ 140.753519][ T939] usb 5-1: Manufacturer: syz [ 140.758154][ T939] usb 5-1: SerialNumber: syz [ 140.963024][ T7142] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 140.991661][ T7142] netlink: 17 bytes leftover after parsing attributes in process `syz.1.473'. [ 141.047271][ T7139] loop5: detected capacity change from 0 to 4096 [ 141.156298][ T7149] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.438401][ T939] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 141.461918][ T939] asix 5-1:2.88: probe with driver asix failed with error -71 [ 141.496192][ T939] usb 5-1: USB disconnect, device number 3 [ 141.832503][ T6008] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.039448][ T6008] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.070753][ T6008] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.124451][ T6008] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.156289][ T6008] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.175836][ T6008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.207155][ T6008] usb 1-1: config 0 descriptor?? [ 142.670045][ T6008] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 142.713189][ T6008] plantronics 0003:047F:FFFF.0008: parse failed [ 142.719612][ T6008] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 142.879338][ T6008] usb 1-1: USB disconnect, device number 6 [ 142.902854][ T788] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.082745][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 143.088809][ T788] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 143.088843][ T788] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 143.088867][ T788] usb 5-1: Product: syz [ 143.088886][ T788] usb 5-1: Manufacturer: syz [ 143.088905][ T788] usb 5-1: SerialNumber: syz [ 143.100990][ T788] usb 5-1: config 0 descriptor?? [ 143.105811][ T788] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 143.719951][ T788] gspca_zc3xx: reg_w_i err -71 [ 143.757419][ T788] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 143.814896][ T788] usb 5-1: USB disconnect, device number 4 [ 143.907780][ T7248] loop1: detected capacity change from 0 to 512 [ 143.958100][ T7240] loop3: detected capacity change from 0 to 4096 [ 144.016364][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.046047][ T7248] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.618636][ T7271] loop5: detected capacity change from 0 to 2048 [ 144.630997][ T7271] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.678920][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.710061][ T7279] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.822838][ T939] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.921113][ T7282] loop4: detected capacity change from 0 to 512 [ 144.963874][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 145.002936][ T939] usb 4-1: Using ep0 maxpacket: 32 [ 145.026062][ T939] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.036199][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.045393][ T7289] vlan2: entered promiscuous mode [ 145.058467][ T939] usb 4-1: config 0 has no interface number 0 [ 145.092668][ T7289] bridge0: entered promiscuous mode [ 145.103414][ T939] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.117525][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.125787][ T939] usb 4-1: Product: syz [ 145.129983][ T939] usb 4-1: Manufacturer: syz [ 145.134924][ T939] usb 4-1: SerialNumber: syz [ 145.142714][ T939] usb 4-1: config 0 descriptor?? [ 145.151010][ T7282] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.188497][ T7296] loop1: detected capacity change from 0 to 64 [ 145.238698][ T7296] hfs: Bad value for 'file_umask' [ 145.339589][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.617863][ T7307] loop4: detected capacity change from 0 to 1024 [ 145.665317][ T7307] EXT4-fs: Ignoring removed orlov option [ 145.741581][ T7312] loop1: detected capacity change from 0 to 256 [ 145.798031][ T7307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.822554][ T939] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 145.839900][ T939] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 145.893170][ T7312] FAT-fs (loop1): Directory bread(block 64) failed [ 145.942784][ T7312] FAT-fs (loop1): Directory bread(block 65) failed [ 145.949505][ T7312] FAT-fs (loop1): Directory bread(block 66) failed [ 145.962726][ T939] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 145.982982][ T7312] FAT-fs (loop1): Directory bread(block 67) failed [ 146.010130][ T7312] FAT-fs (loop1): Directory bread(block 68) failed [ 146.012590][ T939] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 146.040330][ T7312] FAT-fs (loop1): Directory bread(block 69) failed [ 146.049680][ T939] usb 4-1: USB disconnect, device number 4 [ 146.099192][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.102516][ T7312] FAT-fs (loop1): Directory bread(block 70) failed [ 146.155285][ T7312] FAT-fs (loop1): Directory bread(block 71) failed [ 146.180874][ T7312] FAT-fs (loop1): Directory bread(block 72) failed [ 146.208177][ T7312] FAT-fs (loop1): Directory bread(block 73) failed [ 146.592969][ T7337] macvlan0: entered allmulticast mode [ 146.598393][ T7337] veth1_vlan: entered allmulticast mode [ 146.661411][ T7339] loop3: detected capacity change from 0 to 256 [ 146.708000][ T7339] exfat: Deprecated parameter 'namecase' [ 146.769310][ T7339] exfat: Deprecated parameter 'utf8' [ 146.853177][ T7339] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 147.469882][ T30] audit: type=1326 audit(1770924291.191:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.5.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d0d9bf79 code=0x0 [ 147.533064][ T939] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 147.635423][ T7369] loop3: detected capacity change from 0 to 2048 [ 147.687598][ T7369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.729685][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.767703][ T939] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 147.807176][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.856701][ T939] usb 2-1: config 0 descriptor?? [ 147.877048][ T7360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.172942][ T7390] loop3: detected capacity change from 0 to 256 [ 148.211963][ T7390] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 148.572908][ T939] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 148.602705][ T6030] usb 2-1: USB disconnect, device number 4 [ 148.745587][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.775730][ T939] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 148.815969][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.829462][ T939] usb 3-1: Product: syz [ 148.843387][ T939] usb 3-1: Manufacturer: syz [ 148.850386][ T939] usb 3-1: SerialNumber: syz [ 148.877674][ T939] usb 3-1: config 0 descriptor?? [ 148.898453][ T939] hub 3-1:0.0: bad descriptor, ignoring hub [ 148.926644][ T939] hub 3-1:0.0: probe with driver hub failed with error -5 [ 148.952956][ T939] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 149.168598][ T7415] dummy0: entered promiscuous mode [ 149.223430][ T7415] vlan2: entered promiscuous mode [ 149.402792][ T6030] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.477286][ T7426] gretap0: entered promiscuous mode [ 149.574350][ T6030] usb 1-1: Using ep0 maxpacket: 32 [ 149.581826][ T6030] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 149.611861][ T6030] usb 1-1: config 0 has no interface number 0 [ 149.625119][ T6030] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 149.657481][ T7431] loop5: detected capacity change from 0 to 256 [ 149.682880][ T6030] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.707328][ T6030] usb 1-1: config 0 interface 85 has no altsetting 0 [ 149.713647][ T7433] loop1: detected capacity change from 0 to 512 [ 149.735324][ T6030] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 149.755300][ T7433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.783450][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.791563][ T6030] usb 1-1: Product: syz [ 149.846015][ T7431] FAT-fs (loop5): Directory bread(block 64) failed [ 149.852742][ T6030] usb 1-1: Manufacturer: syz [ 149.865904][ T6030] usb 1-1: SerialNumber: syz [ 149.871758][ T7433] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.892857][ T7431] FAT-fs (loop5): Directory bread(block 65) failed [ 149.916884][ T6030] usb 1-1: config 0 descriptor?? [ 149.924255][ T7431] FAT-fs (loop5): Directory bread(block 66) failed [ 149.945744][ T7431] FAT-fs (loop5): Directory bread(block 67) failed [ 149.967589][ T7431] FAT-fs (loop5): Directory bread(block 68) failed [ 149.989636][ T7431] FAT-fs (loop5): Directory bread(block 69) failed [ 149.995594][ T7433] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 150.007055][ T7431] FAT-fs (loop5): Directory bread(block 70) failed [ 150.007112][ T7431] FAT-fs (loop5): Directory bread(block 71) failed [ 150.007199][ T7431] FAT-fs (loop5): Directory bread(block 72) failed [ 150.007256][ T7431] FAT-fs (loop5): Directory bread(block 73) failed [ 150.041732][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 150.163273][ T6030] appletouch 1-1:0.85: Failed to read mode from device. [ 150.179397][ T6030] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 150.180943][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.262454][ T6030] usb 1-1: USB disconnect, device number 7 [ 150.287342][ T7447] loop4: detected capacity change from 0 to 164 [ 150.590762][ T7453] loop5: detected capacity change from 0 to 2048 [ 150.649121][ T7453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.668467][ T7461] netlink: 'syz.3.587': attribute type 26 has an invalid length. [ 151.657138][ T7460] loop1: detected capacity change from 0 to 131072 [ 151.702330][ T7460] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 151.723921][ T7460] F2FS-fs (loop1): invalid crc value [ 151.819800][ T7460] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.830428][ T7460] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 152.420081][ T7472] loop2: detected capacity change from 0 to 32768 [ 152.516847][ T7472] read_mapping_page failed! [ 152.521519][ T7472] ERROR: (device loop2): txCommit: [ 152.521519][ T7472] [ 152.634414][ T6008] usb 3-1: USB disconnect, device number 6 [ 152.738840][ T5943] read_mapping_page failed! [ 152.777199][ T5943] ERROR: (device loop2): txCommit: [ 152.777199][ T5943] [ 152.812591][ T5943] jfs_write_inode: jfs_commit_inode failed! [ 153.302476][ T6008] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.439451][ T7514] loop1: detected capacity change from 0 to 4096 [ 153.485492][ T7514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.492620][ T6008] usb 3-1: Using ep0 maxpacket: 16 [ 153.554083][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.624170][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.642976][ T975] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 153.658777][ T7490] loop3: detected capacity change from 0 to 32768 [ 153.668939][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.681888][ T6008] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 153.696012][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.723620][ T7524] netlink: 280 bytes leftover after parsing attributes in process `syz.4.616'. [ 153.765581][ T6008] usb 3-1: config 0 descriptor?? [ 153.775624][ T7490] JBD2: Ignoring recovery information on journal [ 153.827129][ T7490] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 153.846333][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 153.912808][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.926757][ T7490] JBD2: bad block at offset 32 [ 153.973346][ T7490] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.993237][ T975] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 154.032815][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.086329][ T975] usb 6-1: config 0 descriptor?? [ 154.103979][ T7518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 154.215552][ T6008] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 154.229461][ T30] audit: type=1326 audit(1770924297.951:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.277219][ T6008] ryos 0003:1E7D:3232.000A: item fetching failed at offset 3/5 [ 154.303476][ T6008] ryos 0003:1E7D:3232.000A: parse failed [ 154.309216][ T6008] ryos 0003:1E7D:3232.000A: probe with driver ryos failed with error -22 [ 154.332338][ T30] audit: type=1326 audit(1770924297.951:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.355380][ T5815] ocfs2: Unmounting device (7,3) on (node local) [ 154.395315][ T30] audit: type=1326 audit(1770924297.951:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.519178][ T30] audit: type=1326 audit(1770924297.951:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.562594][ T30] audit: type=1326 audit(1770924297.951:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.597501][ T6008] usb 3-1: USB disconnect, device number 7 [ 154.637117][ T975] kone 0003:1E7D:2CED.000B: hidraw0: USB HID v1.41 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 154.653533][ T30] audit: type=1326 audit(1770924297.951:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.733185][ T30] audit: type=1326 audit(1770924297.951:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.783250][ T788] usb 6-1: USB disconnect, device number 6 [ 154.834917][ T5822] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 154.853094][ T30] audit: type=1326 audit(1770924297.951:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.947740][ T30] audit: type=1326 audit(1770924297.951:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 154.979857][ T7548] fido_id[7548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 155.014714][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.017124][ T7550] loop3: detected capacity change from 0 to 1024 [ 155.032853][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.034209][ T30] audit: type=1326 audit(1770924297.951:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x7ffc0000 [ 155.090867][ T5822] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 155.120661][ T5822] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 155.161761][ T5822] usb 1-1: Manufacturer: syz [ 155.210817][ T5822] usb 1-1: config 0 descriptor?? [ 155.216381][ T36] hfsplus: b-tree write err: -5, ino 25 [ 155.222120][ T36] hfsplus: b-tree write err: -5, ino 4 [ 155.246149][ T36] hfsplus: b-tree write err: -5, ino 2 [ 155.410347][ T7558] ip6gretap0: entered promiscuous mode [ 155.449888][ T7558] macsec1: entered promiscuous mode [ 155.527864][ T7558] ip6gretap0: left promiscuous mode [ 155.571637][ T7566] loop4: detected capacity change from 0 to 64 [ 155.660331][ T5822] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 155.690153][ T5822] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 155.707354][ T5822] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 155.725927][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.741972][ T5822] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 155.768186][ T5822] cougar 0003:060B:700A.000C: unknown main item tag 0x0 [ 155.793517][ T5822] cougar 0003:060B:700A.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 155.852771][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 155.898208][ T5822] usb 1-1: USB disconnect, device number 8 [ 155.945209][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.986880][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.019660][ T788] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 156.042823][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.065664][ T788] usb 3-1: config 0 descriptor?? [ 156.107036][ T7574] fido_id[7574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 156.160193][ T7579] netlink: 56 bytes leftover after parsing attributes in process `syz.5.642'. [ 156.161935][ T7578] loop1: detected capacity change from 0 to 512 [ 156.174365][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.642'. [ 156.255145][ T7578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.372567][ T7578] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.446616][ T7578] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 156.508592][ T788] cp2112 0003:10C4:EA90.000D: item fetching failed at offset 5/7 [ 156.533710][ T788] cp2112 0003:10C4:EA90.000D: parse failed [ 156.553055][ T788] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -22 [ 156.596343][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.694753][ T7568] loop3: detected capacity change from 0 to 32768 [ 156.730264][ T7591] devtmpfs: Bad value for 'size' [ 156.781899][ T6008] usb 3-1: USB disconnect, device number 8 [ 156.854572][ T7568] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.234196][ T5815] ocfs2: Unmounting device (7,3) on (node local) [ 157.520232][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.5.655'. [ 158.045581][ T7635] netlink: 88 bytes leftover after parsing attributes in process `syz.5.664'. [ 158.274448][ T7637] loop3: detected capacity change from 0 to 4096 [ 158.446474][ T7637] ntfs3(loop3): ino=1a, mi_enum_attr [ 158.451818][ T7637] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 158.953096][ T5822] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 158.965239][ T7675] tipc: Started in network mode [ 158.987704][ T7675] tipc: Node identity 80, cluster identity 7 [ 159.007925][ T7675] tipc: Node number set to 128 [ 159.036130][ T7673] loop5: detected capacity change from 0 to 4096 [ 159.097953][ T7673] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 159.113319][ T7673] ntfs3(loop5): ino=1a, mi_enum_attr [ 159.119376][ T7673] ntfs3(loop5): ino=1a, mi_enum_attr [ 159.145075][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.159266][ T7673] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 159.198088][ T5822] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 159.213789][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.242253][ T5822] usb 5-1: Product: syz [ 159.257781][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 159.282774][ T5822] usb 5-1: Manufacturer: syz [ 159.298229][ T5822] usb 5-1: SerialNumber: syz [ 159.329389][ T5822] usb 5-1: config 0 descriptor?? [ 159.356702][ T5822] hub 5-1:0.0: bad descriptor, ignoring hub [ 159.371864][ T5822] hub 5-1:0.0: probe with driver hub failed with error -5 [ 159.433960][ T5822] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 159.599302][ T7695] loop2: detected capacity change from 0 to 256 [ 159.683946][ T7695] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.200078][ T7712] loop1: detected capacity change from 0 to 256 [ 160.240211][ T7712] exfat: Deprecated parameter 'utf8' [ 160.266515][ T7712] exfat: Deprecated parameter 'namecase' [ 160.289192][ T7712] exfat: Deprecated parameter 'namecase' [ 160.322731][ T7712] exfat: Deprecated parameter 'utf8' [ 160.352143][ T7712] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 160.415535][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 160.424945][ T7712] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 160.577711][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 160.577731][ T30] audit: type=1800 audit(1770924304.301:39): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="file1" dev="loop1" ino=1048721 res=0 errno=0 [ 160.623019][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 160.677621][ T7727] Zero length message leads to an empty skb [ 160.962652][ T6030] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.113272][ T5932] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 161.123339][ T6030] usb 4-1: Using ep0 maxpacket: 16 [ 161.142895][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.163736][ T6030] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 161.192827][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.213949][ T30] audit: type=1326 audit(1770924304.941:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.239915][ T6030] usb 4-1: config 0 descriptor?? [ 161.245334][ T30] audit: type=1326 audit(1770924304.941:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.280228][ T7754] loop4: detected capacity change from 0 to 512 [ 161.286877][ T30] audit: type=1326 audit(1770924304.941:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.334051][ T30] audit: type=1326 audit(1770924304.941:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.336876][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.367119][ T30] audit: type=1326 audit(1770924304.941:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.391082][ T30] audit: type=1326 audit(1770924304.941:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.414603][ T7754] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.721: corrupted in-inode xattr: invalid ea_ino [ 161.443306][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.452240][ T5932] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.482495][ T7754] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.491080][ T30] audit: type=1326 audit(1770924304.941:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.512423][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.526290][ T7754] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.721: couldn't read orphan inode 15 (err -117) [ 161.544042][ T7754] loop4: lost filesystem error report for type 5 error -117 [ 161.544314][ T30] audit: type=1326 audit(1770924304.941:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.578931][ T7754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.584623][ T5932] usb 3-1: config 0 descriptor?? [ 161.610155][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.622477][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 161.638030][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 161.648462][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 161.656087][ T5932] usb 3-1: media controller created [ 161.665813][ T30] audit: type=1326 audit(1770924304.941:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf79bf79 code=0x7ffc0000 [ 161.694335][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.737607][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 161.749882][ T6030] hid (null): usage index exceeded [ 161.757408][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 161.758451][ T6030] logitech-djreceiver 0003:046D:C52B.000E: ignoring exceeding usage max [ 161.786966][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 161.827546][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.827682][ T6030] logitech-djreceiver 0003:046D:C52B.000E: ignoring exceeding usage max [ 161.873681][ T6030] logitech-djreceiver 0003:046D:C52B.000E: usage index exceeded [ 161.881352][ T6030] logitech-djreceiver 0003:046D:C52B.000E: item 0 1 2 2 parsing failed [ 161.886648][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 161.892078][ T7748] loop5: detected capacity change from 0 to 32768 [ 161.917685][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 161.954744][ T6030] logitech-djreceiver 0003:046D:C52B.000E: logi_dj_probe: parse failed [ 161.961437][ T5932] usb 3-1: USB disconnect, device number 9 [ 161.974205][ T6030] logitech-djreceiver 0003:046D:C52B.000E: probe with driver logitech-djreceiver failed with error -22 [ 161.993325][ T7766] loop1: detected capacity change from 0 to 256 [ 162.020553][ T7748] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 162.031347][ T6030] usb 4-1: USB disconnect, device number 5 [ 162.124480][ T5932] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.139453][ T7766] FAT-fs (loop1): Directory bread(block 64) failed [ 162.189286][ T5822] usb 5-1: USB disconnect, device number 5 [ 162.202523][ T7766] FAT-fs (loop1): Directory bread(block 65) failed [ 162.228904][ T5817] ocfs2: Unmounting device (7,5) on (node local) [ 162.229585][ T7766] FAT-fs (loop1): Directory bread(block 66) failed [ 162.310741][ T7766] FAT-fs (loop1): Directory bread(block 67) failed [ 162.331890][ T7766] FAT-fs (loop1): Directory bread(block 68) failed [ 162.348974][ T7766] FAT-fs (loop1): Directory bread(block 69) failed [ 162.379564][ T7766] FAT-fs (loop1): Directory bread(block 70) failed [ 162.395645][ T7766] FAT-fs (loop1): Directory bread(block 71) failed [ 162.414436][ T7766] FAT-fs (loop1): Directory bread(block 72) failed [ 162.422698][ T7766] FAT-fs (loop1): Directory bread(block 73) failed [ 162.433404][ T5822] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.602519][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 162.627704][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.666683][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.716919][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.764981][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.821691][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.849622][ T5822] usb 5-1: config 0 descriptor?? [ 163.132884][ T7797] loop1: detected capacity change from 0 to 256 [ 163.312070][ T5822] appleir 0003:05AC:8241.000F: unknown main item tag 0x0 [ 163.342464][ T5822] appleir 0003:05AC:8241.000F: item fetching failed at offset 4/5 [ 163.361964][ T5822] appleir 0003:05AC:8241.000F: parse failed [ 163.374723][ T5822] appleir 0003:05AC:8241.000F: probe with driver appleir failed with error -22 [ 163.492813][ T6008] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.507640][ T6030] usb 5-1: USB disconnect, device number 6 [ 163.613381][ T7814] loop1: detected capacity change from 0 to 128 [ 163.624684][ T7814] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 163.638483][ T7814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.659947][ T6008] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 163.689846][ T6008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.712282][ T7786] loop3: detected capacity change from 0 to 32768 [ 163.722521][ T6008] usb 3-1: config 0 has no interface number 0 [ 163.728636][ T6008] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 163.750774][ T6008] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.772280][ T6008] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 163.782012][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.794893][ T6008] usb 3-1: Product: syz [ 163.795000][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 163.799059][ T6008] usb 3-1: Manufacturer: syz [ 163.856620][ T7786] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.874294][ T6008] usb 3-1: SerialNumber: syz [ 163.913144][ T7786] XFS (loop3): Ending clean mount [ 163.920191][ T6008] usb 3-1: config 0 descriptor?? [ 163.931683][ T7786] XFS (loop3): Quotacheck needed: Please wait. [ 163.965086][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 163.986478][ T5822] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 163.992212][ T7786] XFS (loop3): Quotacheck: Done. [ 164.006234][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.047912][ T5822] usb 6-1: config 0 descriptor?? [ 164.115470][ T7828] netlink: 116 bytes leftover after parsing attributes in process `syz.0.752'. [ 164.193036][ T6030] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.210429][ T5815] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.353579][ T6030] usb 2-1: Using ep0 maxpacket: 8 [ 164.385855][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.423989][ T6030] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.450141][ T6030] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 164.472621][ T6030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.491274][ T6030] usb 2-1: config 0 descriptor?? [ 164.496420][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.519062][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.542441][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.569801][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.582655][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.583316][ T29] usb 3-1: USB disconnect, device number 10 [ 164.599853][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.620201][ T5822] a4tech 0003:09DA:000A.0010: unknown main item tag 0x0 [ 164.660782][ T5822] a4tech 0003:09DA:000A.0010: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0 [ 164.714028][ T5822] usb 6-1: USB disconnect, device number 7 [ 164.780394][ T7844] loop4: detected capacity change from 0 to 128 [ 164.810367][ T7844] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 164.847445][ T7844] hpfs: filesystem error: improperly stopped [ 164.856249][ T7844] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 164.864199][ T7844] hpfs: You really don't want any checks? You are crazy... [ 164.871835][ T7844] hpfs: hpfs_map_sector(): read error [ 164.878733][ T7844] hpfs: code page support is disabled [ 164.886328][ T7844] hpfs: hpfs_map_4sectors(): unaligned read [ 164.893000][ T7844] hpfs: hpfs_map_4sectors(): unaligned read [ 164.895763][ T7841] fido_id[7841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 164.898909][ T7844] hpfs: filesystem error: unable to find root dir [ 164.942153][ T6030] logitech 0003:046D:C298.0011: item fetching failed at offset 4/5 [ 164.985405][ T6030] logitech 0003:046D:C298.0011: parse failed [ 165.000941][ T6030] logitech 0003:046D:C298.0011: probe with driver logitech failed with error -22 [ 165.152204][ T6030] usb 2-1: USB disconnect, device number 5 [ 165.477840][ T7857] loop4: detected capacity change from 0 to 4096 [ 165.556717][ T7868] loop5: detected capacity change from 0 to 1024 [ 165.566410][ T7874] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.630958][ T7868] hfsplus: b-tree write err: -5, ino 2 [ 165.650517][ T7857] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 165.692890][ T7857] Remounting filesystem read-only [ 165.704541][ T7868] hfsplus: b-tree write err: -5, ino 2 [ 165.795404][ T58] hfsplus: b-tree write err: -5, ino 25 [ 165.801858][ T58] hfsplus: b-tree write err: -5, ino 4 [ 165.835146][ T58] hfsplus: b-tree write err: -5, ino 2 [ 166.075148][ T7886] loop5: detected capacity change from 0 to 256 [ 166.144674][ T7891] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 166.150797][ T7886] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 166.203312][ T7891] netlink: 96 bytes leftover after parsing attributes in process `syz.4.779'. [ 166.233078][ T7891] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 166.306838][ T7891] netlink: 638 bytes leftover after parsing attributes in process `syz.4.779'. [ 166.348931][ T7891] netlink: 1 bytes leftover after parsing attributes in process `syz.4.779'. [ 166.701217][ T7914] netlink: 43 bytes leftover after parsing attributes in process `syz.2.791'. [ 166.739525][ T7910] loop3: detected capacity change from 0 to 4096 [ 166.762240][ T7910] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.775023][ T7920] loop1: detected capacity change from 0 to 256 [ 166.814323][ T7910] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.855470][ T7910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.905045][ T7920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 166.951258][ T7928] netlink: 'syz.0.797': attribute type 16 has an invalid length. [ 167.005384][ T7910] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 167.160834][ T7916] loop5: detected capacity change from 0 to 8192 [ 167.290843][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.414247][ T7938] loop2: detected capacity change from 0 to 1024 [ 167.474362][ T7938] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 167.657553][ T7938] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.803: lblock 2 mapped to illegal pblock 2 (length 1) [ 167.748020][ T7938] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.765099][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 167.783117][ T7938] __quota_error: 4 callbacks suppressed [ 167.783134][ T7938] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 167.842470][ T7938] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.803: lblock 0 mapped to illegal pblock 48 (length 1) [ 167.885004][ T7938] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.885325][ T7938] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 167.941578][ T7938] EXT4-fs error (device loop2): ext4_acquire_dquot:6998: comm syz.2.803: Failed to acquire dquot type 0 [ 167.982219][ T7960] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 167.983034][ T7938] loop2: lost filesystem error report for type 5 error -117 [ 167.992820][ T788] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.025762][ T7938] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.053996][ T7938] loop2: lost filesystem error report for type 5 error -117 [ 168.056765][ T7938] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.803: mark_inode_dirty error [ 168.079490][ T7938] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.079778][ T7938] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 168.104761][ T7938] EXT4-fs (loop2): 1 orphan inode deleted [ 168.116617][ T7938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.129603][ T5927] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.147086][ T5927] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.149974][ T5927] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 168.216543][ T5830] Bluetooth: hci4: link tx timeout [ 168.222296][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.229732][ T5927] EXT4-fs error (device loop2): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 0 [ 168.273104][ T788] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.292762][ T788] usb 5-1: config 0 has no interface number 0 [ 168.301288][ T788] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.339450][ T788] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.350046][ T7972] ALSA: mixer_oss: invalid OSS volume '' [ 168.378562][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.394694][ T5927] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.413208][ T788] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.436404][ T5927] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.439942][ T5927] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 168.468235][ T788] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 168.491402][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.505002][ T5927] EXT4-fs error (device loop2): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 0 [ 168.532183][ T788] usb 5-1: config 0 descriptor?? [ 168.559005][ T5927] loop2: lost filesystem error report for type 5 error -117 [ 168.559547][ T5816] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 168.603136][ T5816] loop2: lost filesystem error report for type 5 error -117 [ 168.613754][ T5816] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.631163][ T7985] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 168.635774][ T7984] loop3: detected capacity change from 0 to 1024 [ 168.656293][ T7984] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.669270][ T5816] loop2: lost filesystem error report for type 5 error -117 [ 168.693615][ T5816] EXT4-fs error (device loop2): ext4_quota_off:7282: inode #3: comm syz-executor: mark_inode_dirty error [ 168.724328][ T7987] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 168.738118][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.759659][ T5816] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.814819][ T7987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.877468][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.921336][ T7985] bond0: (slave dummy0): Releasing backup interface [ 168.987684][ T7985] team0: Port device dummy0 added [ 169.154875][ T788] uclogic 0003:28BD:0042.0012: failed retrieving string descriptor #100: -71 [ 169.204545][ T788] uclogic 0003:28BD:0042.0012: failed retrieving pen parameters: -71 [ 169.223751][ T788] uclogic 0003:28BD:0042.0012: pen probing failed: -71 [ 169.236462][ T7999] batadv0: entered allmulticast mode [ 169.240297][ T788] uclogic 0003:28BD:0042.0012: failed probing parameters: -71 [ 169.255793][ T8003] loop1: detected capacity change from 0 to 64 [ 169.273749][ T788] uclogic 0003:28BD:0042.0012: probe with driver uclogic failed with error -71 [ 169.304640][ T788] usb 5-1: USB disconnect, device number 7 [ 169.737251][ T8020] loop3: detected capacity change from 0 to 2048 [ 169.776052][ T8024] netlink: 'syz.5.840': attribute type 46 has an invalid length. [ 169.949046][ T8031] EXT4-fs: inline encryption not supported [ 169.962501][ T8031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.970933][ T8031] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.992725][ T8031] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.003775][ T8031] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.843: Allocating blocks 41-42 which overlap fs metadata [ 170.017696][ T8031] loop4: lost filesystem error report for type 5 error -117 [ 170.021380][ T8031] EXT4-fs (loop4): Remounting filesystem read-only [ 170.038629][ T8031] Quota error (device loop4): write_blk: dquota write failed [ 170.046131][ T8031] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 170.056157][ T8031] EXT4-fs (loop4): 1 truncate cleaned up [ 170.083701][ T8031] EXT4-fs (loop4): pa ffff888051256658: logic 1, phys. 41, len 23 [ 170.093825][ T8031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.246824][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.264927][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 170.289044][ T8043] netlink: 'syz.2.850': attribute type 11 has an invalid length. [ 170.321335][ T8043] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.850'. [ 170.364806][ T5830] Bluetooth: hci1: Malformed HCI Event [ 170.464975][ T8050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.559942][ T8050] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.849: Unimplemented hash flags: 0x0001 [ 170.607064][ T8050] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.849: Corrupt directory, running e2fsck is recommended [ 170.650473][ T8050] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.849: path /121/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 171.072678][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.343446][ T8074] autofs: Bad value for 'uid' [ 171.359508][ T8074] autofs: Bad value for 'uid' [ 171.523759][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 171.557410][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 171.558435][ T8078] set_capacity_and_notify: 3 callbacks suppressed [ 171.558453][ T8078] loop3: detected capacity change from 0 to 4096 [ 171.572720][ T8080] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 171.594653][ T8078] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 171.606319][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 171.619078][ T8078] ntfs3(loop3): ino=0, mi_enum_attr [ 171.626120][ T8084] netlink: 'syz.4.865': attribute type 11 has an invalid length. [ 171.635371][ T8078] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 171.657941][ T8078] ntfs3(loop3): try to read out of volume at offset 0x1ff000 [ 171.688995][ T8078] ntfs3(loop3): Failed to load $MFT. [ 172.150111][ T8102] loop2: detected capacity change from 0 to 1024 [ 172.167269][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 172.197207][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 172.203540][ T8102] EXT4-fs: Ignoring removed orlov option [ 172.218384][ T8102] EXT4-fs: inline encryption not supported [ 172.229917][ T8104] netlink: 'syz.1.877': attribute type 14 has an invalid length. [ 172.266705][ T8098] loop5: detected capacity change from 0 to 8192 [ 172.282454][ T8104] netlink: 'syz.1.877': attribute type 11 has an invalid length. [ 172.300271][ T8102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.550886][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.858119][ T8134] loop4: detected capacity change from 0 to 1024 [ 172.886272][ T8134] EXT4-fs: Ignoring removed bh option [ 172.926659][ T8134] EXT4-fs: Mount option(s) incompatible with ext3 [ 173.035491][ T8141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 173.444058][ T8156] [U] s„ïÎê2ÇÏÖ>‹¨ [ 173.453027][ T5822] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.634266][ T5822] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 173.662461][ T5822] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 173.730137][ T939] kernel read not supported for file /input/mice (pid: 939 comm: kworker/1:2) [ 173.742888][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.755526][ T5822] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 173.782487][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.816696][ T5822] usb 5-1: config 0 descriptor?? [ 173.833125][ T8148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.361442][ T5822] dragonrise 0003:0079:0006.0013: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 174.384146][ T5822] dragonrise 0003:0079:0006.0013: no inputs found [ 174.392317][ T5822] dragonrise 0003:0079:0006.0013: force feedback init failed [ 174.421598][ T8167] loop1: detected capacity change from 0 to 32768 [ 174.466220][ T8195] loop5: detected capacity change from 0 to 1024 [ 174.513445][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 174.530874][ T939] usb 5-1: USB disconnect, device number 8 [ 174.555460][ T8167] JBD2: Ignoring recovery information on journal [ 174.611797][ T8196] fido_id[8196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 174.778378][ T8167] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.039096][ T8216] netlink: 'syz.5.927': attribute type 10 has an invalid length. [ 175.040286][ T8214] bridge0: entered promiscuous mode [ 175.054545][ T5813] ocfs2: Unmounting device (7,1) on (node local) [ 175.106109][ T8218] netlink: 'syz.5.927': attribute type 10 has an invalid length. [ 175.210877][ T8216] team0: Port device dummy0 added [ 175.284164][ T8223] syz.4.931 (8223): /proc/8222/oom_adj is deprecated, please use /proc/8222/oom_score_adj instead. [ 175.297792][ T8221] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 175.353365][ T8218] team0: Port device dummy0 removed [ 175.420148][ T8218] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.478113][ T8229] loop4: detected capacity change from 0 to 256 [ 175.497197][ T8229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 175.977426][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 176.022950][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.174794][ T8257] netlink: 256 bytes leftover after parsing attributes in process `syz.5.946'. [ 176.211870][ T8257] netlink: 56 bytes leftover after parsing attributes in process `syz.5.946'. [ 176.221131][ T8261] loop2: detected capacity change from 0 to 64 [ 176.232340][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 176.250694][ T5932] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.277212][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.294766][ T5932] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 176.323695][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.368420][ T5932] usb 4-1: config 0 descriptor?? [ 176.492933][ T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.671869][ T975] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 176.690197][ T975] usb 5-1: config 0 has no interface number 0 [ 176.697430][ T975] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 176.709585][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.725622][ T975] usb 5-1: config 0 descriptor?? [ 176.743020][ T975] usb-storage 5-1:0.235: USB Mass Storage device detected [ 176.777024][ T975] usb-storage 5-1:0.235: Quirks match for vid 0451 pid 5416: 2 [ 176.856911][ T5932] corsair-psu 0003:1B1C:1C08.0014: hidraw0: USB HID v0.01 Device [HID 1b1c:1c08] on usb-dummy_hcd.3-1/input0 [ 176.900728][ T8287] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 176.962743][ T8287] netlink: 'syz.2.959': attribute type 2 has an invalid length. [ 176.987750][ T8287] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 176.994826][ T939] usb 5-1: USB disconnect, device number 9 [ 177.017291][ T5932] corsair-psu 0003:1B1C:1C08.0014: unable to initialize device (-71) [ 177.027170][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 177.054405][ T5932] corsair-psu 0003:1B1C:1C08.0014: probe with driver corsair-psu failed with error -71 [ 177.102156][ T5932] usb 4-1: USB disconnect, device number 6 [ 177.342780][ T8302] batadv0: left allmulticast mode [ 177.704429][ T8320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.873600][ T975] kernel write not supported for file /uhid (pid: 975 comm: kworker/0:3) [ 177.986921][ T8333] loop5: detected capacity change from 0 to 128 [ 178.024096][ T8333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.053612][ T8333] hpfs: filesystem error: improperly stopped [ 178.102640][ T8333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.142414][ T8333] hpfs: You really don't want any checks? You are crazy... [ 178.175622][ T8333] hpfs: hpfs_map_sector(): read error [ 178.201132][ T6030] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.212954][ T8333] hpfs: code page support is disabled [ 178.218451][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 178.248522][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 178.269734][ T8333] hpfs: filesystem error: unable to find root dir [ 178.390850][ T6030] usb 5-1: Using ep0 maxpacket: 16 [ 178.405439][ T6030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.432831][ T6030] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 178.466980][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.506237][ T6030] usb 5-1: config 0 descriptor?? [ 178.835222][ T8360] loop1: detected capacity change from 0 to 128 [ 178.863390][ T8360] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 178.894073][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.914248][ T8360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.930792][ T6030] hid (null): usage index exceeded [ 178.938729][ T8360] overlayfs: upper fs needs to support d_type. [ 178.950973][ T6030] logitech-djreceiver 0003:046D:C52B.0015: ignoring exceeding usage max [ 178.953340][ T8360] overlayfs: upper fs does not support tmpfile. [ 178.965996][ T6030] logitech-djreceiver 0003:046D:C52B.0015: ignoring exceeding usage max [ 178.968020][ T6030] logitech-djreceiver 0003:046D:C52B.0015: usage index exceeded [ 178.983174][ T6030] logitech-djreceiver 0003:046D:C52B.0015: item 0 1 2 2 parsing failed [ 178.998586][ T6030] logitech-djreceiver 0003:046D:C52B.0015: logi_dj_probe: parse failed [ 179.007239][ T6030] logitech-djreceiver 0003:046D:C52B.0015: probe with driver logitech-djreceiver failed with error -22 [ 179.064551][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.078275][ T29] usb 4-1: config 0 has no interface number 0 [ 179.081782][ T8362] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 179.097626][ T8362] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.995'. [ 179.100082][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.162758][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.167349][ T975] usb 5-1: USB disconnect, device number 10 [ 179.200844][ T29] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 179.229050][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.252276][ T29] usb 4-1: config 0 descriptor?? [ 179.530123][ T8373] loop5: detected capacity change from 0 to 512 [ 179.541712][ T8373] EXT4-fs: Ignoring removed bh option [ 179.585332][ T8373] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 179.627943][ T8373] EXT4-fs (loop5): 1 truncate cleaned up [ 179.655332][ T8373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.683902][ T29] prodikeys 0003:041E:2801.0016: unknown main item tag 0x4 [ 179.715077][ T29] prodikeys 0003:041E:2801.0016: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 179.794792][ T29] hid_prodikeys: hid-prodikeys: failed to find output report [ 179.794792][ T29] [ 179.859049][ T975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.900549][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.916325][ T788] usb 4-1: USB disconnect, device number 7 [ 180.039525][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 180.052933][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 180.084396][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 180.105509][ T975] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 180.122497][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.130681][ T975] usb 3-1: Product: syz [ 180.140835][ T975] usb 3-1: Manufacturer: syz [ 180.171213][ T975] usb 3-1: SerialNumber: syz [ 180.184680][ T975] usb 3-1: config 0 descriptor?? [ 180.202029][ T8377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.212706][ T8377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.222069][ T975] usb 3-1: ucan: probing device on interface #0 [ 180.295722][ T8371] loop1: detected capacity change from 0 to 32768 [ 180.312801][ T8393] vivid-000: disconnect [ 180.321868][ T8371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.999 (8371) [ 180.376801][ T8371] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.411706][ T8371] BTRFS info (device loop1): using crc32c checksum algorithm [ 180.556527][ T8371] BTRFS info (device loop1): enabling ssd optimizations [ 180.593427][ T8371] BTRFS info (device loop1): turning on flush-on-commit [ 180.600415][ T8371] BTRFS info (device loop1): enabling free space tree [ 180.613557][ T8384] loop4: detected capacity change from 0 to 32768 [ 180.628760][ T975] usb 3-1: ucan: device reported invalid device info [ 180.641001][ T975] usb 3-1: ucan: probe failed; try to update the device firmware [ 180.651785][ T8371] BTRFS info (device loop1): enabling auto defrag [ 180.678600][ T8384] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 180.695635][ T8371] BTRFS info (device loop1): force zlib compression, level 3 [ 180.844568][ T29] usb 3-1: USB disconnect, device number 11 [ 180.873141][ T8384] XFS (loop4): Ending clean mount [ 180.898743][ T8384] XFS (loop4): Quotacheck needed: Please wait. [ 181.013197][ T8384] XFS (loop4): Quotacheck: Done. [ 181.083975][ T8392] vivid-000: reconnect [ 181.122789][ T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.160379][ T5818] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.185125][ T5813] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.294365][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 181.326462][ T8432] loop5: detected capacity change from 0 to 256 [ 181.342011][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.378673][ T788] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 181.433569][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 181.506637][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 181.537287][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 181.578636][ T8434] loop2: detected capacity change from 0 to 512 [ 181.620209][ T788] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 181.632128][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 181.682195][ T788] usb 1-1: Product: syz [ 181.690619][ T8434] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1018: corrupted in-inode xattr: e_value size too large [ 181.715492][ T788] usb 1-1: Manufacturer: syz [ 181.725129][ T788] usb 1-1: SerialNumber: syz [ 181.731164][ T8434] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.773106][ T788] usb 1-1: config 0 descriptor?? [ 181.804049][ T8434] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1018: couldn't read orphan inode 15 (err -117) [ 181.873690][ T8434] loop2: lost filesystem error report for type 5 error -117 [ 181.876389][ T8434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.092513][ T788] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 182.097219][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.118615][ T788] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 182.197369][ T8450] loop3: detected capacity change from 0 to 1024 [ 182.235977][ T8450] EXT4-fs: Ignoring removed bh option [ 182.255933][ T8450] EXT4-fs: Ignoring removed nobh option [ 182.288868][ T788] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 182.299224][ T788] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 182.328335][ T788] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 182.353679][ T8450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.503158][ T788] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 182.511626][ T788] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 182.541111][ T788] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 182.549577][ T29] IPVS: starting estimator thread 0... [ 182.568704][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.587409][ T788] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 182.619315][ T788] usb 1-1: USB disconnect, device number 9 [ 182.652596][ T8465] IPVS: using max 25 ests per chain, 60000 per kthread [ 182.909092][ T8479] loop4: detected capacity change from 0 to 64 [ 182.918133][ T29] kernel read not supported for file /vcs (pid: 29 comm: kworker/1:1) [ 182.947521][ T8479] minix: block size(59136) > page size(4096) not supported by filesystem [ 183.005638][ T8479] Trying to free block not in datazone [ 183.011134][ T8479] Trying to free block not in datazone [ 183.042643][ T8479] Trying to free block not in datazone [ 183.070092][ T8479] Trying to free block not in datazone [ 183.080869][ T8479] Trying to free block not in datazone [ 183.086936][ T8479] Trying to free block not in datazone [ 183.097184][ T8479] Trying to free block not in datazone [ 183.102843][ T8479] Trying to free block not in datazone [ 183.108621][ T5830] Bluetooth: hci4: unexpected event for opcode 0x203d [ 183.116608][ T8479] Trying to free block not in datazone [ 183.122162][ T8479] Trying to free block not in datazone [ 183.127968][ T8479] Trying to free block not in datazone [ 183.133567][ T8479] Trying to free block not in datazone [ 183.139072][ T8479] Trying to free block not in datazone [ 183.144719][ T8479] Trying to free block not in datazone [ 183.150251][ T8479] Trying to free block not in datazone [ 183.155820][ T8479] Trying to free block not in datazone [ 183.161347][ T8479] Trying to free block not in datazone [ 183.167030][ T8479] Trying to free block not in datazone [ 183.172575][ T8479] Trying to free block not in datazone [ 183.178134][ T8479] Trying to free block not in datazone [ 183.183752][ T8479] Trying to free block not in datazone [ 183.189312][ T8479] Trying to free block not in datazone [ 183.194946][ T8479] Trying to free block not in datazone [ 183.201331][ T8479] Trying to free block not in datazone [ 183.242435][ T8479] Trying to free block not in datazone [ 183.264693][ T8479] Trying to free block not in datazone [ 183.302478][ T8479] Trying to free block not in datazone [ 183.320983][ T8479] Trying to free block not in datazone [ 183.333077][ T8492] program syz.0.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.357372][ T8479] Trying to free block not in datazone [ 183.386965][ T8479] Trying to free block not in datazone [ 183.412464][ T8479] Trying to free block not in datazone [ 183.422977][ T8479] Trying to free block not in datazone [ 183.442801][ T8479] Trying to free block not in datazone [ 183.448378][ T8479] Trying to free block not in datazone [ 183.468638][ T8479] Trying to free block not in datazone [ 183.485977][ T8479] Trying to free block not in datazone [ 183.526637][ T8479] Trying to free block not in datazone [ 183.542437][ T8479] Trying to free block not in datazone [ 183.547920][ T8479] Trying to free block not in datazone [ 183.594771][ T8479] Trying to free block not in datazone [ 183.600266][ T8479] Trying to free block not in datazone [ 183.669218][ T8479] Trying to free block not in datazone [ 183.693632][ T8479] Trying to free block not in datazone [ 183.699206][ T8479] Trying to free block not in datazone [ 183.716592][ T8479] Trying to free block not in datazone [ 183.750320][ T8479] Trying to free block not in datazone [ 183.780271][ T8479] Trying to free block not in datazone [ 183.808072][ T8479] Trying to free block not in datazone [ 183.813695][ T8479] Trying to free block not in datazone [ 183.837944][ T8479] Trying to free block not in datazone [ 183.869642][ T8479] Trying to free block not in datazone [ 183.892432][ T8479] Trying to free block not in datazone [ 183.897913][ T8479] Trying to free block not in datazone [ 183.958786][ T8479] Trying to free block not in datazone [ 183.991542][ T8479] Trying to free block not in datazone [ 184.005708][ T8479] Trying to free block not in datazone [ 184.011190][ T8479] Trying to free block not in datazone [ 184.066195][ T8479] Trying to free block not in datazone [ 184.071707][ T8479] Trying to free block not in datazone [ 184.093371][ T8479] Trying to free block not in datazone [ 184.105941][ T8479] Trying to free block not in datazone [ 184.113102][ T8479] Trying to free block not in datazone [ 184.128961][ T8479] Trying to free block not in datazone [ 184.142591][ T8479] Trying to free block not in datazone [ 184.158344][ T8479] Trying to free block not in datazone [ 184.168679][ T8479] Trying to free block not in datazone [ 184.182875][ T8479] Trying to free block not in datazone [ 184.199609][ T8527] loop5: detected capacity change from 0 to 1764 [ 184.202759][ T8479] Trying to free block not in datazone [ 184.230442][ T8479] Trying to free block not in datazone [ 184.242428][ T8479] Trying to free block not in datazone [ 184.262556][ T8479] Trying to free block not in datazone [ 184.270183][ T8527] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 184.275527][ T8479] Trying to free block not in datazone [ 184.302566][ T8479] Trying to free block not in datazone [ 184.312716][ T8479] Trying to free block not in datazone [ 184.318182][ T8479] Trying to free block not in datazone [ 184.333203][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.338810][ T8479] Trying to free block not in datazone [ 184.363809][ T8479] Trying to free block not in datazone [ 184.410902][ T8479] Trying to free block not in datazone [ 184.433285][ T8479] Trying to free block not in datazone [ 184.438775][ T8479] Trying to free block not in datazone [ 184.462485][ T8479] Trying to free block not in datazone [ 184.479627][ T8479] Trying to free block not in datazone [ 184.502525][ T8479] Trying to free block not in datazone [ 184.513290][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 184.522785][ T8479] Trying to free block not in datazone [ 184.528261][ T8479] Trying to free block not in datazone [ 184.536532][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.549002][ T8479] Trying to free block not in datazone [ 184.554789][ T788] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 184.562651][ T8479] Trying to free block not in datazone [ 184.590577][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.597120][ T8539] loop5: detected capacity change from 0 to 2048 [ 184.600738][ T788] usb 1-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 184.603743][ T8479] Trying to free block not in datazone [ 184.629165][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.634759][ T8479] Trying to free block not in datazone [ 184.662438][ T8479] Trying to free block not in datazone [ 184.667938][ T8479] Trying to free block not in datazone [ 184.683532][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.693338][ T8479] Trying to free block not in datazone [ 184.703686][ T788] usb 1-1: config 0 descriptor?? [ 184.710495][ T8479] Trying to free block not in datazone [ 184.712112][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.732693][ T8479] Trying to free block not in datazone [ 184.751911][ T8479] Trying to free block not in datazone [ 184.786984][ T8479] Trying to free block not in datazone [ 184.822269][ T8479] Trying to free block not in datazone [ 184.852527][ T8479] Trying to free block not in datazone [ 184.858019][ T8479] Trying to free block not in datazone [ 184.873386][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 184.885201][ T8479] Trying to free block not in datazone [ 184.894142][ T5822] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 184.913381][ T8479] Trying to free block not in datazone [ 184.918851][ T8479] Trying to free block not in datazone [ 184.919106][ T5822] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.937467][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.957291][ T5822] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 184.966453][ T8479] Trying to free block not in datazone [ 184.975568][ T8479] Trying to free block not in datazone [ 184.981536][ T8479] Trying to free block not in datazone [ 184.987263][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.992411][ T8479] Trying to free block not in datazone [ 185.013460][ T8479] Trying to free block not in datazone [ 185.018958][ T8479] Trying to free block not in datazone [ 185.033847][ T8479] Trying to free block not in datazone [ 185.044750][ T5822] usb 2-1: config 0 descriptor?? [ 185.087545][ T8479] Trying to free block not in datazone [ 185.112709][ T8479] Trying to free block not in datazone [ 185.126154][ T788] sony 0003:054C:0002.0017: unknown main item tag 0x2 [ 185.135052][ T8479] Trying to free block not in datazone [ 185.140529][ T8479] Trying to free block not in datazone [ 185.150577][ T788] sony 0003:054C:0002.0017: hidraw0: USB HID v0.00 Device [HID 054c:0002] on usb-dummy_hcd.0-1/input0 [ 185.183621][ T8479] Trying to free block not in datazone [ 185.193759][ T8479] Trying to free block not in datazone [ 185.199245][ T8479] Trying to free block not in datazone [ 185.199330][ T788] sony 0003:054C:0002.0017: failed to claim input [ 185.235352][ T8479] Trying to free block not in datazone [ 185.246713][ T8479] Trying to free block not in datazone [ 185.288411][ T8479] Trying to free block not in datazone [ 185.315032][ T8479] Trying to free block not in datazone [ 185.320529][ T8479] Trying to free block not in datazone [ 185.352401][ T8479] Trying to free block not in datazone [ 185.379223][ T788] usb 1-1: USB disconnect, device number 10 [ 185.393321][ T8479] Trying to free block not in datazone [ 185.402405][ T8479] Trying to free block not in datazone [ 185.407875][ T8479] Trying to free block not in datazone [ 185.443813][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 185.474292][ T8479] Trying to free block not in datazone [ 185.488201][ T5822] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 185.488243][ T8479] Trying to free block not in datazone [ 185.518690][ T5822] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 185.538295][ T8479] Trying to free block not in datazone [ 185.559288][ T8479] Trying to free block not in datazone [ 185.562653][ T5822] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 185.572252][ T5822] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 185.580097][ T8479] Trying to free block not in datazone [ 185.588602][ T5822] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 185.610665][ T8479] Trying to free block not in datazone [ 185.616940][ T5822] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 185.630675][ T8479] Trying to free block not in datazone [ 185.659683][ T8479] Trying to free block not in datazone [ 185.669799][ T8479] Trying to free block not in datazone [ 185.697542][ T8479] Trying to free block not in datazone [ 185.718714][ T5822] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -90 [ 185.719349][ T8479] Trying to free block not in datazone [ 185.768391][ T8575] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.801138][ T8479] Trying to free block not in datazone [ 185.808629][ T8479] Trying to free block not in datazone [ 185.808625][ T5822] usb 2-1: USB disconnect, device number 6 [ 185.866381][ T8479] Trying to free block not in datazone [ 185.880259][ T8479] Trying to free block not in datazone [ 185.921990][ T8479] Trying to free block not in datazone [ 185.954962][ T8479] Trying to free block not in datazone [ 185.960441][ T8479] Trying to free block not in datazone [ 185.994226][ T8479] Trying to free block not in datazone [ 186.005845][ T8479] Trying to free block not in datazone [ 186.021625][ T8479] Trying to free block not in datazone [ 186.027744][ T8479] Trying to free block not in datazone [ 186.042503][ T8479] Trying to free block not in datazone [ 186.048617][ T8479] Trying to free block not in datazone [ 186.068399][ T8479] Trying to free block not in datazone [ 186.090587][ T8479] Trying to free block not in datazone [ 186.114234][ T8479] Trying to free block not in datazone [ 186.129533][ T8479] Trying to free block not in datazone [ 186.156095][ T8479] Trying to free block not in datazone [ 186.161585][ T8479] Trying to free block not in datazone [ 186.202773][ T8479] Trying to free block not in datazone [ 186.222734][ T8479] Trying to free block not in datazone [ 186.228207][ T8479] Trying to free block not in datazone [ 186.282113][ T8479] Trying to free block not in datazone [ 186.322036][ T8479] Trying to free block not in datazone [ 186.332143][ T8479] Trying to free block not in datazone [ 186.363207][ T8479] Trying to free block not in datazone [ 186.368698][ T8479] Trying to free block not in datazone [ 186.392028][ T8479] Trying to free block not in datazone [ 186.417205][ T8479] Trying to free block not in datazone [ 186.442529][ T8479] Trying to free block not in datazone [ 186.462699][ T8596] loop1: detected capacity change from 0 to 256 [ 186.469046][ T8479] Trying to free block not in datazone [ 186.495905][ T8479] Trying to free block not in datazone [ 186.502899][ T8479] Trying to free block not in datazone [ 186.515242][ T8479] Trying to free block not in datazone [ 186.530879][ T8479] Trying to free block not in datazone [ 186.576835][ T8479] Trying to free block not in datazone [ 186.606542][ T8479] Trying to free block not in datazone [ 186.612204][ T8479] Trying to free block not in datazone [ 186.634022][ T8479] Trying to free block not in datazone [ 186.634581][ T8601] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1091'. [ 186.657112][ T8479] Trying to free block not in datazone [ 186.675287][ T8596] FAT-fs (loop1): Directory bread(block 64) failed [ 186.680150][ T8479] Trying to free block not in datazone [ 186.687806][ T8479] Trying to free block not in datazone [ 186.693626][ T8596] FAT-fs (loop1): Directory bread(block 65) failed [ 186.701086][ T8479] Trying to free block not in datazone [ 186.706955][ T8479] Trying to free block not in datazone [ 186.714171][ T8596] FAT-fs (loop1): Directory bread(block 66) failed [ 186.722168][ T8605] xt_hashlimit: size too large, truncated to 1048576 [ 186.731262][ T8596] FAT-fs (loop1): Directory bread(block 67) failed [ 186.739255][ T8479] Trying to free block not in datazone [ 186.747320][ T8479] Trying to free block not in datazone [ 186.753430][ T8596] FAT-fs (loop1): Directory bread(block 68) failed [ 186.760067][ T8479] Trying to free block not in datazone [ 186.768615][ T8479] Trying to free block not in datazone [ 186.774950][ T8596] FAT-fs (loop1): Directory bread(block 69) failed [ 186.781838][ T8479] Trying to free block not in datazone [ 186.788458][ T8596] FAT-fs (loop1): Directory bread(block 70) failed [ 186.795530][ T8479] Trying to free block not in datazone [ 186.815653][ T8479] Trying to free block not in datazone [ 186.821133][ T8479] Trying to free block not in datazone [ 186.834458][ T8596] FAT-fs (loop1): Directory bread(block 71) failed [ 186.851548][ T8596] FAT-fs (loop1): Directory bread(block 72) failed [ 186.858908][ T8479] Trying to free block not in datazone [ 186.885200][ T8479] Trying to free block not in datazone [ 186.892860][ T8596] FAT-fs (loop1): Directory bread(block 73) failed [ 186.899754][ T8479] Trying to free block not in datazone [ 186.909574][ T8479] Trying to free block not in datazone [ 186.922756][ T8479] Trying to free block not in datazone [ 186.928240][ T8479] Trying to free block not in datazone [ 186.937900][ T8479] Trying to free block not in datazone [ 186.943661][ T8479] Trying to free block not in datazone [ 186.949316][ T8479] Trying to free block not in datazone [ 186.955992][ T8479] Trying to free block not in datazone [ 186.961889][ T8479] Trying to free block not in datazone [ 186.992787][ T8479] Trying to free block not in datazone [ 186.998251][ T8479] Trying to free block not in datazone [ 187.009463][ T8479] Trying to free block not in datazone [ 187.015287][ T8479] Trying to free block not in datazone [ 187.020755][ T8479] Trying to free block not in datazone [ 187.026548][ T8479] Trying to free block not in datazone [ 187.032019][ T8479] Trying to free block not in datazone [ 187.039784][ T8479] Trying to free block not in datazone [ 187.046015][ T8479] Trying to free block not in datazone [ 187.051521][ T8479] Trying to free block not in datazone [ 187.102716][ T8479] Trying to free block not in datazone [ 187.108220][ T8479] Trying to free block not in datazone [ 187.126310][ T8609] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.132855][ T8479] Trying to free block not in datazone [ 187.142783][ T8479] Trying to free block not in datazone [ 187.158944][ T8479] Trying to free block not in datazone [ 187.179264][ T8479] Trying to free block not in datazone [ 187.203199][ T8479] Trying to free block not in datazone [ 187.232576][ T8479] Trying to free block not in datazone [ 187.238060][ T8479] Trying to free block not in datazone [ 187.275560][ T8479] Trying to free block not in datazone [ 187.281053][ T8479] Trying to free block not in datazone [ 187.321511][ T8479] Trying to free block not in datazone [ 187.356160][ T8479] Trying to free block not in datazone [ 187.372632][ T8479] Trying to free block not in datazone [ 187.378120][ T8479] Trying to free block not in datazone [ 187.414143][ T8479] Trying to free block not in datazone [ 187.442453][ T8479] Trying to free block not in datazone [ 187.446978][ T8622] loop1: detected capacity change from 0 to 16 [ 187.455583][ T8479] Trying to free block not in datazone [ 187.476490][ T8479] Trying to free block not in datazone [ 187.482430][ T8479] Trying to free block not in datazone [ 187.483081][ T8622] erofs (device loop1): mounted with root inode @ nid 36. [ 187.498085][ T8479] Trying to free block not in datazone [ 187.513174][ T8479] Trying to free block not in datazone [ 187.534013][ T8479] Trying to free block not in datazone [ 187.554387][ T8479] Trying to free block not in datazone [ 187.580185][ T8479] Trying to free block not in datazone [ 187.602701][ T8479] Trying to free block not in datazone [ 187.608189][ T8479] Trying to free block not in datazone [ 187.653410][ T8479] Trying to free block not in datazone [ 187.670116][ T8479] Trying to free block not in datazone [ 187.702497][ T8479] Trying to free block not in datazone [ 187.720531][ T8479] Trying to free block not in datazone [ 187.740357][ T8479] Trying to free block not in datazone [ 187.759985][ T8479] Trying to free block not in datazone [ 187.779378][ T8479] Trying to free block not in datazone [ 187.794758][ T8479] Trying to free block not in datazone [ 187.800241][ T8479] Trying to free block not in datazone [ 187.829149][ T8479] Trying to free block not in datazone [ 187.859975][ T8479] Trying to free block not in datazone [ 187.879345][ T8479] Trying to free block not in datazone [ 187.892695][ T8479] Trying to free block not in datazone [ 187.910411][ T8479] Trying to free block not in datazone [ 187.932412][ T8479] Trying to free block not in datazone [ 187.937956][ T8479] Trying to free block not in datazone [ 187.945837][ T8479] Trying to free block not in datazone [ 187.962410][ T8479] Trying to free block not in datazone [ 187.967875][ T8479] Trying to free block not in datazone [ 187.988507][ T8479] Trying to free block not in datazone [ 187.989564][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 188.322467][ T975] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.429832][ T8628] loop5: detected capacity change from 0 to 32768 [ 188.482628][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 188.495098][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.554621][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.597101][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.638705][ T8665] fuse: Bad value for 'fd' [ 188.659530][ T975] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 188.681271][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.716210][ T975] usb 3-1: config 0 descriptor?? [ 188.750405][ T8668] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1122'. [ 188.985655][ T8671] IPVS: Scheduler module ip_vs_sip not found [ 189.027348][ T8678] sctp: [Deprecated]: syz.3.1127 (pid 8678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.027348][ T8678] Use struct sctp_sack_info instead [ 189.125598][ T5822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.161636][ T975] hid (null): unknown global tag 0xe [ 189.191587][ T975] hid-multitouch 0003:0457:07DA.0019: unknown global tag 0xe [ 189.236414][ T975] hid-multitouch 0003:0457:07DA.0019: item 0 0 1 14 parsing failed [ 189.276774][ T975] hid-multitouch 0003:0457:07DA.0019: probe with driver hid-multitouch failed with error -22 [ 189.318116][ T5822] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 189.349674][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.391032][ T5822] usb 5-1: config 0 has no interface number 0 [ 189.411297][ T5822] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 189.412792][ T29] usb 3-1: USB disconnect, device number 12 [ 189.452299][ T5822] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.485489][ T5822] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 189.512200][ T8693] loop3: detected capacity change from 0 to 16 [ 189.518823][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.563095][ T5822] usb 5-1: Product: syz [ 189.567296][ T5822] usb 5-1: Manufacturer: syz [ 189.571890][ T5822] usb 5-1: SerialNumber: syz [ 189.585532][ T8693] erofs (device loop3): mounted with root inode @ nid 36. [ 189.613394][ T5822] usb 5-1: config 0 descriptor?? [ 190.276841][ T5822] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 190.335735][ T5822] usb 5-1: USB disconnect, device number 11 [ 190.354849][ T8723] loop3: detected capacity change from 0 to 2048 [ 190.407211][ T8723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.592070][ T8733] loop5: detected capacity change from 0 to 128 [ 190.682215][ T8733] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.755398][ T8733] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.794675][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 190.981849][ T5817] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.087636][ T8752] loop4: detected capacity change from 0 to 256 [ 191.429148][ T8763] loop2: detected capacity change from 0 to 4096 [ 191.481552][ T8768] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.654071][ T8776] netlink: 'syz.1.1174': attribute type 27 has an invalid length. [ 191.981431][ T8792] loop1: detected capacity change from 0 to 512 [ 192.089717][ T8792] syz.1.1181: attempt to access beyond end of device [ 192.089717][ T8792] loop1: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 192.157308][ T8792] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 192.182634][ T8792] FAT-fs (loop1): Filesystem has been set read-only [ 192.228461][ T8792] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 192.292635][ T8801] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 192.421838][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 192.501833][ T8811] loop1: detected capacity change from 0 to 256 [ 192.612929][ T8811] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 193.204396][ T8837] loop3: detected capacity change from 0 to 2048 [ 193.301394][ T8837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.503875][ T8851] loop1: detected capacity change from 0 to 64 [ 193.944314][ T8865] loop4: detected capacity change from 0 to 2048 [ 193.979182][ T8865] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.998516][ T8871] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 194.045890][ T6088] udevd[6088]: incorrect nilfs2 checksum on /dev/loop4 [ 194.059223][ T8874] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.072541][ T5822] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.099517][ T8865] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 194.117390][ T8865] Remounting filesystem read-only [ 194.235014][ T8876] hfsplus: b-tree write err: -5, ino 2 [ 194.256567][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 194.270574][ T5822] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 194.290094][ T5822] usb 6-1: config 254 has no interface number 0 [ 194.310964][ T5822] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 194.340429][ T5822] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 194.390143][ T5822] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 194.413603][ T1136] hfsplus: b-tree write err: -5, ino 25 [ 194.419301][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 194.427908][ T1136] hfsplus: b-tree write err: -5, ino 2 [ 194.437290][ T5822] usb 6-1: config 254 interface 235 has no altsetting 0 [ 194.457176][ T1136] hfsplus: b-tree write err: -5, ino 20 [ 194.470631][ T5822] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 194.490005][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 194.511132][ T5822] usb 6-1: Product: syz [ 194.515842][ T5822] usb 6-1: Manufacturer: syz [ 194.520441][ T5822] usb 6-1: SerialNumber: syz [ 194.590924][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 194.777745][ T8895] bond1: (slave batadv0): Device is not bonding slave [ 194.822505][ T8895] bond1: option active_slave: invalid value (batadv0) [ 194.835445][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 194.875615][ T8895] bond1 (unregistering): Released all slaves [ 194.903253][ T5822] usbtest 6-1:254.235: Linux gadget zero [ 194.921025][ T5822] usbtest 6-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 194.966538][ T8906] set_capacity_and_notify: 1 callbacks suppressed [ 194.966559][ T8906] loop1: detected capacity change from 0 to 512 [ 195.036451][ T8906] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.077201][ T5822] usb 6-1: USB disconnect, device number 8 [ 195.088635][ T8906] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 195.101228][ T8906] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1236: Corrupt directory, running e2fsck is recommended [ 195.175736][ T8906] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 195.184228][ T8906] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1236: corrupted in-inode xattr: invalid ea_ino [ 195.209079][ T8906] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.218194][ T8906] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1236: couldn't read orphan inode 15 (err -117) [ 195.275719][ T8906] loop1: lost filesystem error report for type 5 error -117 [ 195.279621][ T8906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.364457][ T8906] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.376605][ T8906] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 195.402564][ T8906] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1236: Corrupt directory, running e2fsck is recommended [ 195.474799][ T8927] loop4: detected capacity change from 0 to 512 [ 195.500163][ T8927] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 195.521368][ T8927] EXT4-fs (loop4): 1 truncate cleaned up [ 195.554639][ T8927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.572502][ T5822] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 195.606814][ T8927] EXT4-fs: Ignoring removed orlov option [ 195.618690][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.630818][ T8927] EXT4-fs: Ignoring removed orlov option [ 195.639107][ T8927] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 195.697082][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.753110][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.785221][ T5822] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.804719][ T5822] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 195.811302][ T8932] dummy0: entered promiscuous mode [ 195.844897][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.868799][ T8938] loop4: detected capacity change from 0 to 256 [ 195.885567][ T5822] usb 4-1: config 0 descriptor?? [ 195.895368][ T8938] exfat: Deprecated parameter 'namecase' [ 195.914680][ T8932] dummy0: left promiscuous mode [ 195.915417][ T5822] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 195.930203][ T5822] dvb-usb: bulk message failed: -22 (3/0) [ 195.939997][ T5822] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 195.981335][ T5822] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.017112][ T5822] usb 4-1: media controller created [ 196.023439][ T8938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 196.044749][ T8938] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 196.052024][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.109967][ T5822] dvb-usb: bulk message failed: -22 (6/0) [ 196.124011][ T8918] dvb-usb: bulk message failed: -22 (2/0) [ 196.129953][ T5822] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.141603][ T8918] dvb-usb: bulk message failed: -22 (4/0) [ 196.170993][ T5822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 196.213496][ T5822] dvb-usb: schedule remote query interval to 150 msecs. [ 196.236900][ T5822] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.251930][ T5822] usb 4-1: USB disconnect, device number 8 [ 196.364394][ T5822] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 196.374946][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.483746][ T8952] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1256'. [ 196.522759][ T975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.552313][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 196.567702][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.584058][ T8956] loop1: detected capacity change from 0 to 128 [ 196.602887][ T8956] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.613370][ T9] usb 6-1: config 0 descriptor?? [ 196.674559][ T8956] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.698440][ T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.724820][ T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.753338][ T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.771431][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.832061][ T8946] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.886083][ T5943] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.898346][ T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.105786][ T9] thrustmaster 0003:044F:B651.001A: hidraw0: USB HID v10.00 Device [HID 044f:b651] on usb-dummy_hcd.5-1/input0 [ 197.162433][ T9] thrustmaster 0003:044F:B651.001A: no inputs found [ 197.273033][ T975] usb 1-1: USB disconnect, device number 11 [ 197.275307][ T6030] usb 6-1: USB disconnect, device number 9 [ 197.402105][ T8969] fido_id[8969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 197.585766][ T30] audit: type=1326 audit(1770924341.311:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.2.1271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb8659bf79 code=0x0 [ 197.712456][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.857901][ T8971] loop1: detected capacity change from 0 to 32768 [ 197.873929][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 197.894412][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 197.904510][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 197.917149][ T9] usb 5-1: Product: syz [ 197.931623][ T9] usb 5-1: Manufacturer: syz [ 197.944089][ T9] usb 5-1: SerialNumber: syz [ 197.963576][ T9] usb 5-1: config 0 descriptor?? [ 198.241582][ T5932] usb 5-1: USB disconnect, device number 12 [ 198.647256][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.657358][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.959884][ T9008] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1284'. [ 199.000073][ T8988] loop5: detected capacity change from 0 to 32768 [ 199.004173][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 199.035978][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 199.131217][ T9013] loop3: detected capacity change from 0 to 64 [ 199.147067][ T8988] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.336167][ T8988] XFS (loop5): Ending clean mount [ 199.354867][ T8988] XFS (loop5): Quotacheck needed: Please wait. [ 199.511808][ T8988] XFS (loop5): Quotacheck: Done. [ 199.588679][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 199.600444][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1291'. [ 199.689498][ T9036] loop2: detected capacity change from 0 to 64 [ 199.763942][ T5817] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.159765][ T9050] loop3: detected capacity change from 0 to 8 [ 200.197803][ T9050] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 200.299979][ T9050] cramfs: Error -3 while decompressing! [ 200.330332][ T9050] cramfs: ffffffff9a35cb68(26)->ffff888011a06000(4096) [ 200.350951][ T9050] cramfs: Error 2 while decompressing! [ 200.373965][ T9050] cramfs: ffffffff9a35cb82(26)->ffff888011a05000(4096) [ 200.398127][ T6031] udevd[6031]: incorrect cramfs checksum on /dev/loop3 [ 200.429510][ T9050] cramfs: Error -3 while decompressing! [ 200.459063][ T9050] cramfs: ffffffff9a35cb9c(16)->ffff888011a04000(4096) [ 200.472571][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.512309][ T6000] udevd[6000]: incorrect cramfs checksum on /dev/loop3 [ 200.529677][ T9050] cramfs: Error -3 while decompressing! [ 200.540629][ T9059] loop1: detected capacity change from 0 to 1024 [ 200.552849][ T9050] cramfs: ffffffff9a35cb68(26)->ffff888011a06000(4096) [ 200.581309][ T30] audit: type=1800 audit(1770924344.301:54): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1301" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 200.658532][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.713015][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 200.722192][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.805525][ T29] usb 5-1: config 0 descriptor?? [ 200.868743][ T49] hfsplus: b-tree write err: -5, ino 25 [ 200.882972][ T49] hfsplus: b-tree write err: -5, ino 4 [ 200.900262][ T49] hfsplus: b-tree write err: -5, ino 2 [ 201.225231][ T29] logitech 0003:046D:CA03.001B: item fetching failed at offset 0/3 [ 201.258649][ T29] logitech 0003:046D:CA03.001B: parse failed [ 201.282660][ T29] logitech 0003:046D:CA03.001B: probe with driver logitech failed with error -22 [ 201.381612][ T9092] loop1: detected capacity change from 0 to 512 [ 201.423740][ T29] usb 5-1: USB disconnect, device number 13 [ 201.439654][ T9092] EXT4-fs (loop1): 1 truncate cleaned up [ 201.472003][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.497652][ T30] audit: type=1800 audit(1770924345.221:55): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1320" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 201.671821][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.022738][ T9120] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 202.403336][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.472447][ T6008] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 202.541001][ T9106] loop5: detected capacity change from 0 to 32768 [ 202.582469][ T30] audit: type=1326 audit(1770924346.301:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 202.582690][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 202.652785][ T6008] usb 1-1: Using ep0 maxpacket: 32 [ 202.662796][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.682736][ T30] audit: type=1326 audit(1770924346.301:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 202.703082][ T9] usb 5-1: config 0 has no interface number 0 [ 202.711016][ T6008] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.732021][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 202.751399][ T6008] usb 1-1: config 0 has no interface number 0 [ 202.754450][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.759384][ T9145] netlink: 'syz.3.1344': attribute type 298 has an invalid length. [ 202.788831][ T9] usb 5-1: Product: syz [ 202.797153][ T30] audit: type=1326 audit(1770924346.301:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 202.802802][ T9] usb 5-1: Manufacturer: syz [ 202.826636][ T6008] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.836695][ T9] usb 5-1: SerialNumber: syz [ 202.850320][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.861504][ T9] usb 5-1: config 0 descriptor?? [ 202.872590][ T6008] usb 1-1: Product: syz [ 202.876784][ T6008] usb 1-1: Manufacturer: syz [ 202.881308][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 202.894674][ T30] audit: type=1326 audit(1770924346.301:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 202.911045][ T9] usb 5-1: selecting invalid altsetting 1 [ 202.917442][ T6008] usb 1-1: SerialNumber: syz [ 202.935643][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 202.963859][ T6008] usb 1-1: config 0 descriptor?? [ 202.970960][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.973902][ T30] audit: type=1326 audit(1770924346.331:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.013997][ T6008] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.027902][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.093900][ T9] usb 5-1: media controller created [ 203.122913][ T30] audit: type=1326 audit(1770924346.331:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.139165][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.193074][ T6008] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.232471][ T30] audit: type=1326 audit(1770924346.331:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.284464][ T6008] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.339625][ T30] audit: type=1326 audit(1770924346.361:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.452457][ T30] audit: type=1326 audit(1770924346.361:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.523982][ T30] audit: type=1326 audit(1770924346.361:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.598213][ T30] audit: type=1326 audit(1770924346.361:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631559bf79 code=0x50000 [ 203.694980][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.695465][ T5932] usb 1-1: USB disconnect, device number 12 [ 203.759167][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.816037][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.872300][ T5932] quatech2 1-1:0.51: device disconnected [ 204.165364][ T9124] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 204.209772][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 204.232121][ T9175] loop3: detected capacity change from 0 to 2048 [ 204.234892][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 204.271482][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 204.304347][ T9175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.316934][ T9175] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.494826][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.527810][ T9] usb 5-1: USB disconnect, device number 14 [ 204.943362][ T6008] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 205.016654][ T9199] can0: slcan on ttyS3. [ 205.124512][ T6008] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 205.134226][ T9198] can0 (unregistered): slcan off ttyS3. [ 205.143502][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.167433][ T6008] usb 6-1: config 0 descriptor?? [ 205.397061][ T6008] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 205.500445][ T9214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1376'. [ 205.598501][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 205.618224][ T6008] [drm:udl_init] *ERROR* Selecting channel failed [ 205.719417][ T6008] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 205.751635][ T6008] [drm] Initialized udl on minor 2 [ 205.780788][ T6008] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.804832][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 205.853321][ T6008] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 205.874433][ T6030] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.902949][ T6008] usb 6-1: USB disconnect, device number 10 [ 205.924485][ T6030] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 206.031277][ T9232] loop4: detected capacity change from 0 to 1024 [ 206.124143][ T9232] hfsplus: bad catalog entry type [ 206.237792][ T1136] hfsplus: b-tree write err: -5, ino 25 [ 206.266946][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 206.285927][ T1136] hfsplus: b-tree write err: -5, ino 2 [ 206.324291][ T9242] loop3: detected capacity change from 0 to 128 [ 206.633724][ T9253] Bluetooth: MGMT ver 1.23 [ 206.822639][ T9261] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1398'. [ 206.833489][ T9263] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 207.176620][ T9276] loop1: detected capacity change from 0 to 2048 [ 207.286463][ T9276] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 207.294820][ T9276] UDF-fs: Scanning with blocksize 512 failed [ 207.344074][ T9276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.493997][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1411'. [ 207.599175][ T9294] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 207.618890][ T9291] loop3: detected capacity change from 0 to 4096 [ 207.791627][ T9291] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 207.800294][ T9301] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.871864][ T9291] NILFS (loop3): mounting fs with errors [ 207.885086][ T9296] loop1: detected capacity change from 0 to 4096 [ 207.937186][ T9305] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.072492][ T5822] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.091311][ T9308] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 208.164561][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.203483][ T9308] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.263441][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 208.277832][ T5822] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 208.304740][ T5822] usb 3-1: config 0 has no interface number 0 [ 208.349606][ T5822] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 208.370969][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.392021][ T5822] usb 3-1: Product: syz [ 208.432601][ T5822] usb 3-1: Manufacturer: syz [ 208.452991][ T5822] usb 3-1: SerialNumber: syz [ 208.485695][ T5822] usb 3-1: config 0 descriptor?? [ 208.511640][ T5822] asix 3-1:0.188: probe with driver asix failed with error -22 [ 208.642486][ T5830] Bluetooth: hci0: command tx timeout [ 208.764830][ T5822] usb 3-1: USB disconnect, device number 13 [ 208.946596][ T9328] loop1: detected capacity change from 0 to 128 [ 209.186598][ T9310] loop5: detected capacity change from 0 to 32768 [ 209.226577][ T9310] [ 209.226577][ T9310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.226577][ T9310] [ 209.345683][ T9310] read_mapping_page failed! [ 209.351903][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1434'. [ 209.360554][ T9310] ERROR: (device loop5): txCommit: [ 209.360554][ T9310] [ 209.412416][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1434'. [ 209.647089][ T36] [ 209.647089][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.647089][ T36] [ 209.695049][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 209.722603][ T36] [ 209.722603][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.722603][ T36] [ 209.758782][ T5817] [ 209.758782][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.758782][ T5817] [ 209.786733][ T5817] [ 209.786733][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.786733][ T5817] [ 209.806055][ T108] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 209.818124][ T108] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 209.826542][ T108] CPU: 0 UID: 0 PID: 108 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 209.837212][ T108] Tainted: [L]=SOFTLOCKUP [ 209.841520][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 209.851567][ T108] RIP: 0010:lmLogSync+0x111/0x9f0 [ 209.856705][ T108] Code: 7c 6c fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 6d a3 d5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 51 a3 d5 fe 49 8b 3f e8 09 89 a6 fe [ 209.876647][ T108] RSP: 0018:ffffc900026e7b80 EFLAGS: 00010216 [ 209.882705][ T108] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000 [ 209.890660][ T108] RDX: ffff88801e3e0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 209.898615][ T108] RBP: ffffc900026e7c88 R08: 0000000000000003 R09: ffffc900026e7be0 [ 209.906571][ T108] R10: dffffc0000000000 R11: fffff520004dcf80 R12: ffff8880571ff800 [ 209.914535][ T108] R13: ffffc900026e7be0 R14: ffff888034d9f838 R15: 0000000000000030 [ 209.922518][ T108] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 209.931433][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.938000][ T108] CR2: 00007fdb7c220000 CR3: 000000003ddfc000 CR4: 0000000000350ef0 [ 209.945958][ T108] Call Trace: [ 209.949221][ T108] [ 209.952138][ T108] ? __pfx___mutex_lock+0x10/0x10 [ 209.957170][ T108] ? __pfx_lmLogSync+0x10/0x10 [ 209.961936][ T108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.967562][ T108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 209.973195][ T108] jfs_syncpt+0x7b/0x90 [ 209.977360][ T108] txEnd+0x2e5/0x530 [ 209.981256][ T108] jfs_lazycommit+0x5b8/0xaa0 [ 209.985937][ T108] ? __pfx_jfs_lazycommit+0x10/0x10 [ 209.991139][ T108] ? __pfx_default_wake_function+0x10/0x10 [ 209.996932][ T108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.002559][ T108] ? __kthread_parkme+0x7a/0x1f0 [ 210.007495][ T108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.013141][ T108] kthread+0x388/0x470 [ 210.017227][ T108] ? __pfx_jfs_lazycommit+0x10/0x10 [ 210.022434][ T108] ? __pfx_kthread+0x10/0x10 [ 210.027041][ T108] ret_from_fork+0x51e/0xb90 [ 210.031630][ T108] ? __pfx_ret_from_fork+0x10/0x10 [ 210.036733][ T108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.042363][ T108] ? __switch_to+0xc7d/0x1400 [ 210.047033][ T108] ? __pfx_kthread+0x10/0x10 [ 210.051624][ T108] ret_from_fork_asm+0x1a/0x30 [ 210.056400][ T108] [ 210.059401][ T108] Modules linked in: [ 210.064098][ T108] ---[ end trace 0000000000000000 ]--- [ 210.119250][ T108] RIP: 0010:lmLogSync+0x111/0x9f0 [ 210.140774][ T108] Code: 7c 6c fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 6d a3 d5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 51 a3 d5 fe 49 8b 3f e8 09 89 a6 fe [ 210.164060][ T108] RSP: 0018:ffffc900026e7b80 EFLAGS: 00010216 [ 210.170147][ T108] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000 [ 210.180553][ T108] RDX: ffff88801e3e0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 210.189210][ T108] RBP: ffffc900026e7c88 R08: 0000000000000003 R09: ffffc900026e7be0 [ 210.197736][ T108] R10: dffffc0000000000 R11: fffff520004dcf80 R12: ffff8880571ff800 [ 210.206009][ T108] R13: ffffc900026e7be0 R14: ffff888034d9f838 R15: 0000000000000030 [ 210.214572][ T108] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 210.223711][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.230301][ T108] CR2: 00007f8d45fe7198 CR3: 000000003348a000 CR4: 0000000000350ef0 [ 210.238580][ T108] Kernel panic - not syncing: Fatal exception [ 210.244953][ T108] Kernel Offset: disabled [ 210.249265][ T108] Rebooting in 86400 seconds..